Support the daily operation of IT Security Team and participate in the formulation, maintenance and review of government IT security policies, guidelines, practice guides as well as other security related documents and materials. Support security compliance audit exercise. The staff is mainly required to -

• Provide administrative and technical support for development of information security policies, guidelines, practice guides and related materials
  
• Handle enquires from B/Ds on government IT security related regulations, policies and guidelines and assist in drafting written replies or advice to B/Ds on security matters
  
• Perform editorial duties and conduct quality assurance and control on the work submitted by the external parties, contractors or other team members
  
• Consult and liaise with stakeholders (e.g., B/Ds, contractors, external industry players) to device security requirements
  
• Assist in the compilation, translation and publication of security related documents and materials
  
• Conduct research on topics related to security for government initiatives.
  
• Provide other administrative, logistics and technical support and advices to the IT Security Team
  
• Work independently to manage the government-wide security compliance audit exercise of individual B/Ds and assess their security compliance against government's security requirements. The responsible activities include but are not limited to conducting meetings, arranging interviews with B/Ds' staff, reviewing security processes and controls of B/Ds and preparing written reports
  
• Perform other duties as assigned by the supervisor

• Higher Diploma/Degree holder in Computer Science or equivalent
  
• At least 4 years of relevant post-qualification working experience
  
• At least 1 year of working experience as a Systems Analyst
  
• Good command of both English and Chinese presentation and writing skills
  
• Valid certification of CISP, CISSP, CISM or CISA
  
• Preferably with experience in information security policy and standard and familiar with ISO 27000 families
  
• The job requires the following mandatory skills:
  
  • 1 year x IT Security, Security Risk Assessment and Audit and Intensive Exposure in Written English
    
  • 6 months x Exp. in Managing Corporate IT Security Framework and Work experience with/in the Government