Senior IT Security Analyst

Job Duties:

• Develop and enforce IT security standards, guidelines, and procedures
• Plan, design, and implement cybersecurity solution (e.g. SIEM, EDR, DLP, CVM, PAM, IAM) in an enterprise environment
• Perform risk analysis, identify risk mitigation needs, and come up with remediation plans
• Prepare and response to IT system audit
• Handle IT security incident management
• Coordinate and deliver security training or share relevant information with company staff to promote security awareness
• Lead security assessments on IT strategic systems (both infrastructure and applications) to identify weaknesses and recommend appropriate actions
• Other ad-hoc projects as required

Requirements:

• Degree holder in Information Security, Computer Science or related disciplines
• At least 5 years’ experience in IT security assessment and management
• Holder of security certification, such as CISSP, CISM, CISA, CCSP, CEH, OSCP, OSWP, etc. would be highly preferred
• In depth understanding of data privacy, security principles, and knowledge of emerging technologies and related security patterns
• Familiar with IT security standards such as NIST, ISO 27001 and IT security solutions (PAM, EDR, SIEM etc.)
• Solid Experience in IT security assessment, e.g., vulnerability scanning, penetration testing and Application (Web and Mobile) security testing
• Good command of written and spoken in English & Cantonese
• Candidate with less experience would be considered as Security Analyst