 |
|
| Job Key No |
34759 |
| Job Title/ Category |
Contract Systems Analyst (Bid Ref 55292-1) |
| Number Of Vacancy |
1 |
| Relevant Field |
Others |
| Nature |
Contract |
| Deadline |
31 Jul 2025 |
| Contract Period |
02 Oct 2025 to 31 Dec 2025 (2 months) |
| Payroll |
under InfoTech |
| Employer Business |
Government T26 Contract |
| Location Base |
Ho Man Tin |
| Work in Guangdong Province |
N/A |
| Monthly Salary Range HK$ |
N/A - N/A |
| Project Nature |
(T26) Support to security team
|
| Duties |
- Serve a contract assignment under InfoTech's headcount, full-time second to serve the HD;
1. Conduct security assessment for new application or major enhancements of existing application.
- Understand the application functions and data flow.
- Verify the security controls of the application.
- Ensure the compliance with the Government security requirement.
2. Review server hardening and vulnerability scanning report.
- Understand the finding identified in the report, the associated risk and how to mitigate the risk.
- Review and confirm the mitigation measure can address the risk.
3. Work with vendor to coordinate the ISO20000 certification exercise.
- Arrange briefing to in-scope teams.
- Schedule the audit, reserve meeting room and support the logistic of audit interview.
- Preparing to answer auditor's question in the audit.
|
| Yrs of Total Post-Quali Exp |
6.0 |
| Yrs of Relevant Exp |
4.0 |
| Requirements |
1. Familiar with Government security requirement and have knowledge in application development.
2. Have knowledge in hardening of operation system and common vulnerability of web application.
3. Understand application development life cycle.
4. Familiar with ISO20000 requirement is preferrable.
5. Possess professional security qualification (e.g. Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP) and Certified Information Security Professional (CISP)) is preferrable.
Technical Skills:
. At least 3 years' experience in IT Security (ITS);
. 1 year's experience in Security Risk Assessment and Audit (SAA) is an advantage;
. 1 year's experience in IT Application Development and Management (ADM) is an advantage.
Non-technical Skills:
. At least 2 years' experience in managing Government IT standards (ITG);
. 1 year's experience in vendor management (VMG) is an advantage;
. 1 year's experience in IT audit (ITA) is an advantage.
- Bachelor's degree/Higher Diploma in Computer Science, IT or equivalent;
- At least 6 years' post-qualification experience in which at least 4 years' relevant experience in a similar post and in a comparable capacity.
|
| Last Update |
17 Jul 2025 |
| Apply To |
itcareer@infotech.com.hk |
| Direct Line |
2836 0363 |
