Responsibilities:

• Perform the risk assessments to identify potential security threats and Vulnerability Scan using Security Scan Tools (e.g., NMAP\Nessus\Qualys)
• Collaborate with IT and other departments to ensure that vulnerabilities are addressed in a timely manner
• Review and implement network security policies, guidelines, and procedures, formulate and implement effective network security and data privacy frameworks to ensure risk control and protect network quality
• Respond timely to IT security incidents and conduct investigation and necessary actions including containment, recovery and preventive actions
• Acknowledge, analyse and validate potential threats and breaches triggered from various sources (e.g., SIEM\MSSP\Antivirus\WAF)
• Assist in maintaining Security Controls for internal/external Audit and ISO 27001 Certification
• Identify emerging technology issues including security trends, vulnerabilities and threats intelligence to improve the maturity of 360-degree security defence
• Operate Security Tools to monitor the abnormal events to meet the requirements of information security and compliance
• Promote and enhance IT Security awareness to all staff via regular training
• Support other IT Security or Compliance projects and requirements from another team

Requirements:

• Bachelor’s degree in information security, computer science or related fields of study
• Minimum 2 years of experience in information security/data privacy in IT area
• Preference with certification in information security disciplines such as CISSP,CEH or CISA
• Knowledge of information security best practices or frameworks, such as ISO 27001, NIST CSF, CIS 
• Experience and proficient in IT risk handling, IT risk auditing and compliance
• Experience in using or operating Windows and Linux servers
• Hands on experience in IT security products such as DLP, IPS, WAF, end point security, patch management and hardening
• Good analytical, communications skills and a team player
• Good command in both spoken and written English and Chinese (Cantonese & Mandarin)
• Candidate with more experiences will be considered as Senior position.