In this position, you will :

Participate in security project, external & internal compliance audit support, security operation including training, security incident and response, core system user account review, vulnerability lifecycle management
Establish, maintain and update documentation on the policies, processes, guidelines and security reports
Establish, maintain, and operationalize the process for Change and Release Management to ensure the production environment with standardized process and procedures are used for efficient handling of changes to minimize incidents due to change & release
Lead the Change and Release Management process activities across various IT functions within the organization including coordination, monitoring and reporting as a continuous service improvement cycle.
Act as a focal point for all escalation and communication activities related to users and IT teams to ensure effective and efficient execution of change activities. Highlight and escalate risk & issues to management.
Define and measure success metrics and monitor Change and Release progresses
Other task and responsibility assigned by Team Lead and Department Manager

To be successful in this position, you should meet the following requirements:

Degree or above in Information Technology, Computer Science or related disciplines
5+ years with Information Security and IT Service Management
ITIL v4 and CISSP or Cyber Security equivalent certification is a MUST
Experience with international compliance standard : ISO 27001 and ISO 20000 & ITIL Framework and SOX
Understanding DevOps and ITIL complementary
Excellent technical knowledge of mainstream operating system, networking, security technology
Proven track record in Change and Release Management
Working knowledge of IT security, especially Data Security domain is an advantage
Excellent communication skills to facilitate cross team collaboration and different departments
Self-initiative and high sense of responsibility with can-do attitude
Strong sense and passion for information security
Good command of Cantonese, Mandarin and English
High sense of urgency and ability to multitask and work well under pressure among ad-hoc, project, and managements request concurrently
Less experience candidates will be consider as IT Security Officer

Catégories

Compétences