Comprising Hong Kong Science Park, InnoCentre and Industrial Estates, Hong Kong Science & Technology Parks Corporation (HKSTP) is a statutory body dedicated to building a vibrant innovation and technology ecosystem to connect stakeholders, nurture technology talents, facilitate collaboration, and...

Comprising Hong Kong Science Park, InnoCentre and Industrial Estates, Hong Kong Science & Technology Parks Corporation (HKSTP) is a statutory body dedicated to building a vibrant innovation and technology ecosystem to connect stakeholders, nurture technology talents, facilitate collaboration, and catalyse innovations to deliver social and economic benefits to Hong Kong and the region.

Established in May 2001, HKSTP has been driving the development of Hong Kong into a regional hub for innovation and growth in several focused clusters including Electronics, Information & Communications Technology, Green Technology, Biomedical Technology, Material and Precision Engineering. We enable science and technology companies to nurture ideas, innovate and grow, supported by our R&D facilities, infrastructure, and market-led laboratories and technical centres with professional support services. We also offer value added services and comprehensive incubation programmes for technology start-ups to accelerate their growth.

Technology businesses benefit from our specialised services and infrastructure at Hong Kong Science Park for applied research and product development; enterprises can find creative design support at InnoCentre; while skill-intensive businesses are served by our three industrial estates at Tai Po, Tseung Kwan O and Yuen Long.

Information Security Officer (3-year Contract)

Job level Middle
Work exp Minimum 10 Years
Education Bachelor Degree
Location Shatin
Employment type Contract
Benefits 5-day week, Insurance plan, Medical plan
Industry Others
Job function Information Technology > Security / Audit
Information Technology > Network / System Admin
Information Technology > Information Services
Published On 04/11/2016
ref. [Ref: SCMP/ISO/161104]

Responsibilities:-

  • Provide information security oversight on HKSTP’s IT systems in the Science Park, InnoCentre and Industrial Estates
  • Ensure adherence to Corporation’s IT securities policies, procedures and standards
  • Contribute to the creation and updates of IT security policy documents
  • Work with outsourcing vendor to provide on-going support to security monitoring, SIEM tuning, security incident response and investigation
  • Arrange user trainings and activities to raise the IT security awareness in the Corporation
  • Work with service provider to help HKSTP achieve ISO 27001 certification
  • Undertake risk assessments of new and existing systems to ensure security
  • Coordinate with internal and external auditors during information system audits
  • Work with various parties to identify solutions for security risks identified
  • Provide security expertise on a variety of security enhancements and initiatives (e.g. SIEM tuning, DLP, egress filtering, virtual network segmentation, next gen firewall, web application firewall, etc.).
  • Remain current on technical developments and evolving threat landscape and advise Corporation on counter measures
  • Perform other duties as assigned by supervisor

 

Requirements:-

 

  • University degree in Computer Science or equivalent
  • 10 years relevant experience in IT industry with at least 5 years in information security
  • Possess professional information security certification such as CISSP, CISA will be an advantage
  • Proven on-going support and operational experience in an IT security monitoring, SIEM tuning, security program development
  • Demonstrate understanding of well-known web-Internet attack types, such as cross-site scripting, SQL injection, buffer overflows and format string bugs
  • Demonstrate understanding of internet protocols, network architecture and appliances, along with knowledge of network security technologies including SIEM, web-application firewalls, next gen firewall, DLP, etc.
  • Familiar with data security and privacy needs (e.g. Personal Data Privacy regulations)
  • Experience in security assessment and audit are also preferred
  • Sound interpersonal and communication skills
  • Proficiency in spoken and written English and Chinese

We offer market competitive compensation, 5-day work week, and generous benefits including medical and life insurance. To apply, please send your full resume with current and expected salary to the Human Resources & Office Administration Department, Hong Kong Science and Technology Parks Corporation, 8/F, Bio-Informatics Centre, No. 2 Science Park West Avenue, Hong Kong Science Park, Shatin, N.T., Hong Kong or, by email to hr@hkstp.org on or before 17 November 2016. Please quote the reference number on the email subject/envelope and the application letter.

Personal data provided will be treated in strict confidence and will only be used for consideration of application. Applicants not invited for interview within four weeks after the job is closed for application may consider their applications unsuccessful. Personal data of unsuccessful applicants will be retained for a maximum of two years.