Systems Analyst (Risk & Cybersecurity)

Airport Authority Hong Kong; Hong Kong; On-site; HKD 420,000 - 780,000; Full time

Job summary

Airport Authority Hong Kong invites high-calibre talent to join our cybersecurity team on a fixed-term contract. You will assist in managing cybersecurity projects, integrate security solutions with existing systems, and implement robust controls to protect endpoints and networks.

You will collaborate with ITD teams and vendors, deliver incident response and log analysis, and help maintain up-to-date security policies and compliance.

Qualifications

• Degree holder in Information Technology, Computer Science or related disciplines with at least 3 years of IT work experience, of which at least 1 year in IT Security/Cybersecurity
• Solid experience and knowledge in information security management involving private/public/hybrid cloud, virtualization, databases, web, mobile applications and systems
• Proven experience in security operations, threat hunting and incident response in critical infrastructure companies or large-scale organizations is an advantage
• Hands-on working experience in managing cybersecurity solutions, e.g. NDR, DLP, EDR/AV, SASE, SIEM, SOAR, ASM, etc.
• In-depth knowledge of Windows and Linux operating systems, private/public/hybrid cloud, virtualization, database, web and mobile applications
• Strong knowledge in cybersecurity technologies, threat intelligence, network, platform and application security
• Professional certifications in Information Security, Risk Management (i.e. CC, CISSP, CISA, CISM, CEH, CRISC etc.) is preferred
• Proactive, problem-solving mindset with the ability to work under pressure
• Excellent command of spoken and written English and Chinese with knowledge of Putonghua is an advantage

Responsibilities

• Assist the Manager / Assistant Manager to manage and implement of the cybersecurity projects including solution design, procurement process, documentation preparation, contractor management, solution delivery, stakeholder engagement etc.
• Manage the integration of a new system with other existing security systems to maximize the capability of total security solutions.
• Work with vendors and ITD teams to integrate the security systems with other IT systems.
• Implement control measures for maintaining security posture for maximizing protection for endpoints and network.
• Support the operations of cybersecurity systems and infrastructure of the Authority.
• Act as first-line support on security operation and incident response, including information gathering, log analysis, stakeholder engagement.
• Collaborate with IT operations, infrastructure and systems technical leads, and security and technology vendors to respond in an accurate and swift manner when facing cyberattacks
• Maintain up-to-date policies, standards and guidelines on cybersecurity of the Authority and enforce the compliance of the security requirements and alignment of IT & security policies.
• Identify security risks and exposures by participating in security reviews, evaluations and risk assessments.
• Investigate any cyberattacks or violations of security incidents and assist on handling security related

Skills

IT Security

Security Operations

Threat Hunting

Incident Response

Windows

Linux

Cloud Security

NDR

DLP

EDR/AV

SASE

SIEM

SOAR

Education

Bachelor's degree in IT/CS

Tools

NDR

DLP

EDR/AV

SASE

SIEM

SOAR

Job description

Where Your Career Takes Flight

Airport Authority Hong Kong (AA) manages and operates Hong Kong International Airport, one of the finest and busiest airports in the world.

Where Your Career Takes Flight

Airport Authority Hong Kong (AA) manages and operates Hong Kong International Airport, one of the finest and busiest airports in the world. We now invite high calibre talent with creativity and passion to join us for a rewarding and meaningful career journey. We care for our people and provide colleagues with a fair, open and supportive workplace. By joining us, you will contribute to the continued success and growth of a key infrastructure and economic engine of Hong Kong, gaining invaluable experiences in a unique environment and enjoying boundless opportunities to unleash your full potential. Together we will share the pride of our leadership status in the global aviation industry and our commitment to sustainability.

This is a fixed-term contract position of minimum 2 years with possibility for renewal subject to organization need and individual performance.

Job Description

• Assist the Manager / Assistant Manager to manage and implement of the cybersecurity projects including solution design, procurement process, documentation preparation, contractor management, solution delivery, stakeholder engagement etc.

• Manage the integration of a new system with other existing security systems to maximize the capability of total security solutions.

• Work with vendors and ITD teams to integrate the security systems with other IT systems.

• Implement control measures for maintaining security posture for maximizing protection for endpoints and network.

• Support the operations of cybersecurity systems and infrastructure of the Authority.

• Act as first-line support on security operation and incident response, including information gathering, log analysis, stakeholder engagement.

• Collaborate with IT operations, infrastructure and systems technical leads, and security and technology vendors to respond in an accurate and swift manner when facing cyberattacks

• Maintain up-to-date policies, standards and guidelines on cybersecurity of the Authority and enforce the compliance of the security requirements and alignment of IT & security policies.

• Identify security risks and exposures by participating in security reviews, evaluations and risk assessments.

• Investigate any cyberattacks or violations of security incidents and assist on handling security related

Requirements

• Degree holder in Information Technology, Computer Science or related disciplines with at least 3 years of IT work experience, of which at least 1 year in IT Security/Cybersecurity

• Solid experience and knowledge in information security management involving private/public/hybrid cloud, virtualization, databases, web, mobile applications and systems.

• Proven experience in security operations, threat hunting and incident response in critical infrastructure companies or large-scale organizations is an advantage.

• Hands-on working experience in managing cybersecurity solutions, e.g. NDR, DLP, EDR/AV, SASE, SIEM, SOAR, ASM, etc.

• In-depth knowledge of Windows and Linux operating systems, private/public/hybrid cloud, virtualization, database, web and mobile applications.

• Strong knowledge in cybersecurity technologies, threat intelligence, network, platform and application security.

• Professional certifications in Information Security, Risk Management (i.e. CC, CISSP, CISA, CISM, CEH, CRISC etc.) is preferred

• Proactive, problem-solving mindset with the ability to work under pressure

• Excellent command of spoken and written English and Chinese with knowledge of Putonghua is an advantage