 |
|
| Job Key No |
35866 |
| Job Title/ Category |
Contract Senior Systems Analyst (Bid Ref 56252-1) |
| Number Of Vacancy |
1 |
| Relevant Field |
Others |
| Nature |
Contract |
| Deadline |
31 Oct 2025 |
| Contract Period |
01 Dec 2025 to 27 Feb 2026 (2 months) |
| Payroll |
under InfoTech |
| Employer Business |
Government T26 Contract |
| Location Base |
Cyberport |
| Work in Guangdong Province |
N/A |
| Monthly Salary Range HK$ |
N/A - N/A |
| Project Nature |
(T26) Information security compliance monitoring and audit for government bureaux and departments (B/Ds)
|
| Duties |
- Serve a contract assignment under InfoTech's headcount, full-time second to serve the DPO;
Provide government-wide information security support and services:
1. Work independently to manage the security compliance audit exercise of individual B/Ds and assess their security compliance against Government's security requirements. The responsible activities included but not limited to conduct kick off meetings, arrange interviews with B/Ds' staff, review security processes and controls of B/Ds, prepare written reports, etc.;
2. Evaluate the management and technical controls for the remote access services provided by B/Ds and the effectiveness of information security management / governance structure of B/Ds;
3. Review the assessment tools for the assessment of remote access services and the management of essential security processes, and its effectiveness, update according to the latest security trend/protection technology;
4. Perform quality assurance on the assessment tools; and
5. Perform other related tasks as assigned.
|
| Yrs of Total Post-Quali Exp |
6.0 |
| Yrs of Relevant Exp |
2.0 |
| Requirements |
The candidate should have:
1. Solid experience in performing security risk assessment and security audit as an assessor/auditor independently in public or private sector (preferable in government departments or banking industry);
2. Experience in cyber security maturity assessment and knowledge on related maturity model such as COBIT;
3. Good command of both written and spoken English; and
4. Valid Certification of CISP, CISSP, CISM, CISA or ISO/IEC 27001 Lead Auditor.
Technical Skills:
. At least 2 years' experience in IT Security (ITS);
. At least 1 year's experience in Security Risk Assessment and Audit (SAA);
. 3 years' experience in Mobile / Wireless Communication (MWC) is an advantage;
. 3 years' experience in Networking (NET) is an advantage;
. 2 years' experience in IT Operational Management (OPM) is an advantage;
. 2 years' experience in Remote Access Server (RAS) is an advantage;
. 2 years' experience in IT Application Development and Management (ADM) is an advantage;
. 2 years' experience in Data Encryption Technology (DET) is an advantage;
. 2 years' experience in Infrastructure (INF) is an advantage;
. 2 years' experience in Information Security Management (ISM) is an advantage;
. 2 years' experience in UNIX System Administration (UNA) is an advantage;
. 2 years' experience in Wireless and Mobile (WLM) is an advantage.
Non-technical Skills:
. Good written English is a must;
. At least 1 year's experience in IT audit (ITA);
. 1 year's experience in IT Service Management (SMG) is an advantage;
. 1 year's experience in managing corporate IT security framework (CSF) is an advantage;
. 1 year's experience in work with the Government (GOV) is an advantage.
- Bachelor's degree/Higher Diploma in Computer Science, IT or equivalent;
- At least 6 years' post-qualification experience in which at least 2 years' relevant experience in a similar post and in a comparable capacity.
|
| Last Update |
17 Oct 2025 |
| Apply To |
itcareer@infotech.com.hk |
| Direct Line |
2836 0363 |
