Manager / Assistant Manager, IT Security

This role is responsible for all IT security projects provided to HKSTP, tenants, and clients. He/she should oversee the IT security project management processes, monitor and ensure that the external consultant/service provider services meet the SLA, and minimise the impact on the business of any incident or problem on the production systems.  

The Position

• Lead and manage information security projects, oversee project planning and implementation of system, network, cloud infrastructure services
• Manage project progress and adapting work as required; Ensuring projects deadlines are met
• Establish rapport and maintain relationships with clients and stakeholders
• Prepare and update project documents and service documents; Manage project risk and design a risk mitigation plan
• Manage the Information Security Assessments and address the findings with the systems owners in a timely manner
• Work closely and manage external vendors to provide information security-related services
• Plan for project transition to ongoing support (BAU) ; Evaluate technology and products and provide evaluation reports 
• Participate in procurement process, e.g. prepare purchase request, prepare tender documents, conduct evaluation, and prepare purchasing recommendation
• Conduct project review and create detailed reports for executive staff, Optimize and improve processes and the overall approach where necessary
• Provide technical support for the related services; Manage a team of IT professionals and support other related duties as assigned

The Candidate 

• Bachelor’s degree preferably in Information Technology, Computer Science or technology-related discipline
• At least 8 years relevant experience in the IT security field, with solid experience in total solutions and delivering quality service. Candidates with less experience will be considered for Assistant Manager position
• Relevant certifications such as CISA, CISSP, CRISC, or equivalent 
• Experience with managing projects of Stress Test, Security Risk Assessment, Security Audit, Privacy Impact Assessment, Internet Penetration Test, Mobile Application Security Test, Source Code Review, API Scan, Vulnerability Scan will be an advantage
• Experience with Hong Kong Special Administrative Region Government’s standards and practices (e.g. S17, ISPG-SM01, G3, etc.) will be preferred
• Higher education or professional qualifications with less experience will also be considered
• Familiar with the Code of Practice Pursuant to the Protection of Critical Infrastructures (Computer Systems) Ordinance of the Hong Kong Special Administrative Region
• Ability to manage stakeholders at all levels, both internally and externally, including vendors and the operations team
• Service-oriented, good problem-solving and communication skills
• Proficient in written and spoken English and Chinese, including Cantonese and Putonghua

What We offer  

• Unique Work.Live.Play.Learn culture in Hong Kong’s largest Innovation & Technology ecosystem
• 5-day work week, attractive annual leave and additional special leave
• Medical benefits including dental and annual check-up from Day-1, with extended coverage to dependent(s)
• Professional training and career advancement opportunities
• Accessible to various bus service with network across different locations in HK

Interested parties please submit your application by clicking “Apply Now”.  Direct applicants who do not apply via the “Apply Now” will not be progressed further. Commencing position will be commensurate with qualifications, relevant experience, and competencies.  

The application will remain open until the position is filled. HKSTP reserves the right not to fill the position.

Personal data provided will be treated in strict confidence and used for recruitment purpose only.  All personal data collected will be used strictly in accordance with employer’s personal data policies, you can refer to the Corporation’s Privacy Policy Statement at https://www.hkstp.org/privacy-policy/

Applicants not invited for interview within 6 weeks may consider their applications unsuccessful.  Personal data of unsuccessful applicants will be retained for a maximum of two years counting from the date the vacancy has been filled.

About Hong Kong Science & Technology Parks Corporation

Hong Kong Science and Technology Parks Corporation (HKSTP) was established in 2001 to foster a thriving innovation and technology (I&T) ecosystem that nurtures emerging companies, supports numerous research professionals and technology firms from various countries. This ecosystem focuses on developing sectors such as life and health tech, AI & robotics, fintech, and smart city technologies, etc.

HKSTP provides comprehensive support to attract and nurture talent, accelerating the commercialization of innovations for technology ventures. The Corporation continues to contribute in establishing I&T as a pillar of growth for Hong Kong.

More information about HKSTP is available at www.hkstp.org.