Public Sector
Security / IT Audit
Contract Systems Analyst
Full Time
Admiralty
,
Yau Ma Tei
,
Others (Hong Kong)
GOVT250512
Posted on:
2025-06-13
Duties
- Enhance, support and monitor suspicious events of IT security infrastructure including but not limited to end-point protection solution, end-point / network detection and response system (EDR/NDR), web application firewall (WAF), privileged account management system (PAM), centralised log management system, security information and event management system (SIEM), mobile device management system (MDM), web filtering system, etc.
- Manage network infrastructure including network appliances and firewalls
- Manage security matters including configuration and hardening of servers and network appliances, recommend on application / program hardening
- Serve as technical advisor in IT security organisations including the IT security management unit
- Spell out, monitor and ensure necessary technical IT security controls are in place and functional throughout system development life-cycle and on-going system operations, in particular in the areas of access control, operations security, system acquisition / development / maintenance, business continuity, etc. Assist in user acceptance planning and execution in IT security perspectives. Ensure quality procedures, techniques and tools are used
- Review system development project deliverables, documentation and operating procedures, identify IT security shortfalls and recommend improvements
- Coordinate application and infrastructure teams to produce and maintain IT security related system documentation including capacity management plan, up-to-date hardware and software list, configuration and network diagrams, etc.
- Monitor software end-of-support, produce mitigation plan, ensure on-time completion of associated measures
- Monitor known vulnerabilities, perform risk assessments to determine mitigation approach, ensure on-time completion of mitigation measures
- Conduct in-house IT security risk assessment and IT security training, managing IT security risk assessment and audit (SRAA) exercises, privacy impact assessments (PIA), as well as compliance audit/check by external parties
- Provide support for security incidents and coordinate disaster recovery drills
- Assist in procurement, setup, maintenance and support of IT equipment and services
- Provide technical advices to support latest IT security and business requirements
- Engage and collaborate with stakeholders to meet business objectives
- Supervise and lead junior team members
- Carry out other technical and administrative duties assigned by the supervisor. Remark: On-site or remote support out of office hours is required when necessary, which will be compensated by time-off in lieu
Requirements
- Degree in computer subjects or related disciplines
- At least 6 years of relevant post-qualification working experience
- At least 3 years of working experience as a Systems Analyst
- At least one of the industry-recognised IT security certifications (e.g. CISA, CISSP, CISP, etc.);
- Hands-on experience in technical support for IT security infrastructure and network equipment;
- Hands-on experience in IT security design, implementation and operations in system development projects, preferably using the Government Cloud Infrastructure Services (GCIS);
- Experience in compliance of government IT security policies and guidelines (e.g. S17, G3, SRAA, PIA), preferably for Tier 2 or Tier 3 systems;
- Good command of written and spoken English and Chinese;
- Good communication skills and customer service skills;
- Independent, self-motivated and good sense of responsibility; and
- Pleasant personality and good interpersonal skills.
- The job requires the following mandatory skills:
- 4 years x IT Security
- 3 years x Anti-Spam Technology, Anti-Virus Technology and Network & System Management
- 2 years x Intruder Detection/Alert Technology, Intrusion Prevention System, Security Risk Assessment and Audit, Client Service and IT Audit
- 1 year x Exp. in Managing Corporate IT Security Framework and Work experience with/in the Government
If you are interested in this position, please email your resume, stating your current and expected salary along with your available date, to our Application Email Address:
apply@clts.com
Apply Online
Interested in this position? Submit your application online.
Application Deadline:
2025-06-26
Apply Now
Application period expired.
Your application may not be considered.
Application for
Contract Systems Analyst
Similar Job Openings
Explore Top Career Opportunities