Systems Analyst (Risk & Cybersecurity)

Airport Authority; Hong Kong; On-site; HKD 420,000 - 660,000; Full time

Job summary

Airport Authority in Hong Kong seeks a cybersecurity professional for a fixed-term role of at least 2 years to lead security projects from design to delivery, including procurement, documentation and stakeholder engagement.

You will integrate new systems with existing security platforms, work with ITD and vendors to align security across IT, implement endpoint/network controls, and provide first-line incident response support and log analysis.

Qualifications

• Degree in IT/CS with at least 3 years IT work experience, incl. 1 year in cybersecurity.
• Solid information security management across cloud, virtualization, databases and apps.
• Hands-on security operations, threat hunting and incident response in large orgs.

Responsibilities

• Assist management to plan and execute cybersecurity projects (design, procurement, docs, contractor mgmt).
• Integrate new system with existing security platforms to maximise overall capability.
• Collaborate with vendors/ITD to align security with IT systems.
• Implement controls to maintain security posture for endpoints and network.
• Support cybersecurity systems and infrastructure operations for the Authority.
• First-line security operations and incident response: info gathering, log analysis, stakeholder engagement.
• Coordinate with IT operations, infrastructure leads and vendors to respond to security events.

Skills

CI & GRC Knowledge

Data Loss Prevention

Systems Risk Assessment

Education

Degree in IT / CS

Tools

NDR

DLP

EDR/AV

SASE

SIEM

SOAR

ASM

Job description

• CI & GRC Knowledge
• Data Loss Prevention
• Systems Risk Assessment

This is a fixed-term contract position of minimum 2 years with possibility for renewal subject to organization need and individual performance.

Job Description

• Assist the Manager / Assistant Manager to manage and implement of the cybersecurity projects including solution design, procurement process, documentation preparation, contractor management, solution delivery, stakeholder engagement etc.

• Manage the integration of a new system with other existing security systems to maximize the capability of total security solutions.

• Work with vendors and ITD teams to integrate the security systems with other IT systems.

• Implement control measures for maintaining security posture for maximizing protection for endpoints and network.

• Support the operations of cybersecurity systems and infrastructure of the Authority.

• Act as first-line support on security operation and incident response, including information gathering, log analysis, stakeholder engagement.

• Collaborate with IT operations, infrastructure and systems technical leads, and security and technology vendors to respond ...

Requirements

• Degree holder in Information Technology, Computer Science or related disciplines with at least 3 years of IT work experience, of which at least 1 year in IT Security/Cybersecurity

• Solid experience and knowledge in information security management involving private/public/hybrid cloud, virtualization, databases, web, mobile applications and systems.

• Proven experience in security operations, threat hunting and incident response in critical infrastructure companies or large-scale organizations is an advantage.

• Hands-on working experience in managing cybersecurity solutions, e.g. NDR, DLP, EDR/AV, SASE, SIEM, SOAR, ASM, etc.

• In-depth knowledge ...