Principal IT Specialist (Information Security) (Ref: IT-ISNS-PITS-IS-CP)

• To develop, implement, and enhance information security policies

• Bachelor's Degree in Information Security, Computer Science

• A minimum of 5 years’ relevant experience in information security governance
  

Responsibilities:

Reporting to Head of Information Security and Network Services, the appointee will mainly perform the following duties:

• To develop, implement, and enhance information security policies, standards, guidelines and procedures to support business objectives and regulatory requirements

• To drive security governance and compliance programmes by monitoring cybersecurity regulations, industry standards and corporate policies, and translating them into effective security controls and governance measures 

• To coordinate and manage internal and external audits, control assessments and certification activities, including the management of audit findings and remediation actions

• To provide security and compliance advisory support to business and IT teams, identify risks, recommend mitigating controls, and promote a strong security culture across the organisation

Requirements:

• Bachelor's Degree in Information Security, Computer Science, Information Technology, Cybersecurity, or related disciplines

• A minimum of 5 years’ relevant experience in information security governance, risk management, compliance and audit frameworks

• Good knowledge in information security standards and frameworks such as ISO/IEC27001, NIST Cybersecurity Framework, COBIT, and related industry best practices

• Holder of information security certification such as CISSP, CISA, CISM, CEH, GIAC, ISO27001 Lead Auditor an advantage

• Good command of English and Chinese languages, both spoken and written 

Working Location: Admiralty

Application:

If you are interested in this position, please send your resume (in PDF format) with details of qualification, experience, present and expected salaries, and contact number to the Human Resources Division, The Hongkong Electric Co., Ltd. at  on or before 19 August 2026 and quote the reference number in your application. Please also visit our website to know more about our Company http://www.hkelectric.com.

Applicants not invited for interview within one month from the closing date may consider their applications unsuccessful. All unsuccessful applications will be kept for six months after the date of this advertisement.

We are an equal opportunity employer. Personal data provided by job applicants will be treated in strictest confidence and used only for recruitment-related purposes in accordance with the laws and ordinance of the HKSAR.