Senior Information Security Analyst (at the rank of Senior Officer) (Post Ref.: 26/185)
Lingnan University is one of the eight publicly funded institutions in the Hong Kong Special Administrative Region (HKSAR) of the People’s Republic of China (PRC) and has the longest established tradition among the local institutions of higher education. It is widely recognised for providing quality education with a focus on whole-person development and conducting high-impact research for a better world. Moving forward, Lingnan University is well positioned to take lead as a comprehensive university in arts and sciences in the digital era, with impactful research and innovations.
Lingnan University offers undergraduate, taught postgraduate, and research postgraduate programmes in the Faculties of Arts, Business, Social Sciences, and the Schools of Data Science, Graduate Studies and Interdisciplinary Studies. To foster interdisciplinary collaboration and scientific progress, Lingnan University established the Lingnan University Institute for Advanced Study (LUIAS), attracting distinguished scholars from around the world to collaborate with its faculty and students. With traditional strengths in arts, business, social sciences, and interdisciplinary studies, the University aims to equip students with practical knowledge and critical thinking skills to thrive in the future. Subsequent to the establishment of the School of Data Science and LUIAS, Lingnan University is transforming into a hub for global leaders to develop and promote human-centric technology and social policies. Further information about Lingnan University is available at https://www.ln.edu.hk/.
Applications are now invited for the following post:
Senior Information Security Analyst (at the rank of Senior Officer)
Information Technology Services Centre
(Post Ref.: 26/185)
Responsibilities
Application Security
- Act as the Security Champions Program Captain
- Maintain up-to-date knowledge of information security practices and trends, and apply to the Security Champions Program
- Provide guidance and support to security champions to identify and address security issues throughout the Software Development Lifecycle (SDLC),
- Practice DevSecOps and secure software development
- Identify potential security issues of internal applications by threat modelling
- Conduct security testing such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Component Analysis (SCA)
- Ensure that applications and systems comply with internal standards, the data governance framework, and code of practice for handling personal data
- Conduct cybersecurity risk assessment and personal data protection impact assessment
Cyber Threat Intelligence
- Identify, track, and predict cyber threats in relation to the University’s digital assets.
- Analyze the cyber threat data and intelligence to understand the tactics, techniques, and procedures (TPPs) used by threat actors, and develop the relevant detection rules.
Other Day-to-Day Operations
- Triage security alerts, investigate, and respond to security incidents
- Promote security awareness among students and staff members, including IT teams
- Operate the security stack such as Vulnerability Management, Attack Surface Management (ASM), Web Application Firewall (WAF), Data Loss Prevention (DLP), NDR, EDR, SIEM, SOAR, and maintain good cyber hygiene
- Perform any other duties as assigned by supervisor(s)
Requirements
- Bachelor’s degree or equivalent in Computer Science, Information Technology, Cybersecurity, or a related field
- At least 3 years’ working experience in the IT sector
- Practical experience in handling security incidents, vulnerability management, and security monitoring.
- Relevant experience in DevSecOps and data governance will be advantageous
- Ability to work independently and across teams
- A good command of English and Chinese
- Relevant certificates (e.g. CISSP, CISA, CISM, CEH) are highly desirable
- Previous working experience in a university or similar environment will be an advantage
Candidates with less/more experience will be considered for appointment at a relevant rank.
Salary and Fringe Benefits
The rank and commencing salary will be commensurate with qualifications and experience. Fringe benefits, where applicable, include annual leave, medical and dental benefits, mandatory provident fund and gratuity.
| Job level | 中層 |
|---|---|
| Work Exp. | 3年 |
| Education | |
| Location | 屯門 |
| Employment type | 全職 |
| Industry | 教育 / 培訓 |
| Job function | 資訊科技 - 保安 / 審計 |
| Job Ref. No. | 26/185 |
| Published On | 2026年7月3日 |