IT Security Specialist

  • Central, Hong Kong
  • Permanent
  • Full-time
  • 2 days ago
Company: Chinasoft InternationalEmployment Type: Contract (12months, renewable)Work Location: On-site at a Major Financial Regulatory Institution (Central, Hong Kong)Job Description:Chinasoft International is seeking an experienced and technically skilled IT Security Specialist to join our professional services team. The selected candidate will be seconded to a prominent financial regulatory body in Hong Kong to support mission-critical cybersecurity projects.This role requires solid experience in enterprise IT security, cybersecurity architecture, and operations. You will work closely with internal teams and external vendors to design, implement and manage the cybersecurity infrastructure and compliance initiatives of the client.The ideal candidate will have hands-on experience in:Cybersecurity domains such as identity and access management, security architecture
and engineering.Cybersecurity solution implementation in an enterprise environment.Key ResponsibilitiesServe as a Subject Matter Expert to support the research, design, procurement, implementation, operationalization, and optimization of new and revamp of the cybersecurity solutions.Participate in the system development lifecycle (SDLC), such as architecture and infrastructure design, technical requirement and operation documentation, technical and user testing, user training, maintenance and support.Participate in system integration developments and administer, support and troubleshoot cybersecurity Systems.Develop, maintain and fine-tune system operating procedures, including back-up & disaster recovery, vulnerability, update & patch management, system maintenance and monitoring and audit.Identify and mitigate security-related incidents, perform vulnerability assessments, support penetration tests, and provide recommendations for improvements.Work closely with technical vendors and internal stakeholders to ensure compliance requirements are addressed and security solutions are implemented effectively.Coordinate and collaborate closely with IT and business users to ensure successful enablement of cybersecurity solutions.Oversee the planning, execution and delivery of cybersecurity solutions to ensure timely completion and provide regular progress updates and reports to stakeholders.Develop and manage project plans, resource allocation and risk management for successful project deliverables and outcomes.Stay up-to-date with emerging trends and technologies in IT security and make recommendations for their adoptions.RequirementsBachelor’s or above degree in Computer Science, Engineering or related field.At least 7+ years of experience in cybersecurity consulting, operations, solution implementations, or related technology projects. Candidates with more experience will be considered for senior specialist/manager roles.Proven experience in implementing cybersecurity solutions, including Identity and Access Management (IAM), Privileged Access Management (PAM), Secret Management Tools, or identity threat detect and response (ITDR), with knowledge in AI and machine learning would be a definite advantage.Cybersecurity certifications such as CISSP, CISP, or CISA, are highly preferred.In-depth knowledge of IT security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, Digital Policy Office (DPO) IT Security Policy, and Cybersecurity Law of the People’s Republic of China.Strong understanding of computer systems, including operating systems, databases, network, infrastructure, and cloud computing.Analytical thinker with the ability to understand, visualize, analyse, and resolve difficult issues.Experienced with cloud computing platforms such as AWS or Azure, and DevSecOps practices and tools such as Jenkins, Docker, or Kubernetes.Hands-on experience with system implementations and operations, including system hardening, vulnerability and patch management, system architecture and infrastructure design.Excellent interpersonal, communication, writing, presentation skills, organizational and time management skills, with ability to work independently in a fast-paced environment and build strong relationship with stakeholders.For project management role, at least 5+ years of experience in managing cybersecurity or related technology projects, with certification such as Project Management Professional (PMP) or equivalent highly preferred.All applications applied through our system will be delivered directly to the advertiser and privacy of personal data of the applicant will be ensured with security.

CTgoodjobs