Information Security and Compliance Analyst

Responsibilities

• Monitor and follow up with IT teams for any non-compliance issues. Provide practical advice and coordinate plans for remediation/ mitigation of risks and exposure; review remediation results
• Coordinate internal and external audit work over IT operations and processes; liaise with IT teams in gathering documents and testing related IT controls during audit reviews
• Execute internal compliance review to identify IT risks and potential security threats. Report activities toward continuous improvement. Initiate IT security related project/ product evaluation for improvement
• Provide end-to-end system support and on-going improvement for different security tools including upgrade and maintenance
• Coordinate with US partners and local IT teams to handle security related projects
• Prepare various security reports for IT teams and management. Participate in researching and implementing the latest technology
• Assist in investigating reported security case and follow up with users for any non-compliance issues and coordinate plans for remediation/ mitigation of risks and exposure

Requirements

• Bachelor's degree in computer science, Information Technology, Information Systems or related disciplines
• Min. of 3 years working experience in information security, IT auditing or consultancy, preferable in a multinational firm
• Certificate in CISA, CISSP, or equivalent is a must
• Solid experience in system, network and/or security infrastructure management
• Knowledge of IT security management such as ISO 27001, IT audit/ compliance including Sarbanes-Oxley and/or SSAE21, industrial best practices e.g. COBIT, and PCI DSS is a plus
• Strong interpersonal skills, detail-minded and pro-active to solve problems and work independently
• Proficient in both Chinese and English
• Self-motivated, analytical and a good problem solver
• Able to adopt technology changes

HKProfessional #LI-AI1