Job Requirements
Bachelor's degree or higher, with a strong interest in technology risk management, cybersecurity, and IT governance. Candidates with education experience and backgrounds in cybersecurity, information technology, engineering, statistics, or risk management are preferred.
Familiarity with international or regional compliance requirements and cybersecurity standards (e.g., ISO27001, NIST Cybersecurity Framework, HKMA requirements, SFC requirements, Hong Kong PDPO, EU GDPR, China's Cybersecurity Law, Data Security Law, Personal Information Protection Law, and cross-border data transfer regulations).
A minimum of 2 years of professional experience in cybersecurity or data compliance services, preferably within consulting firms or multinational enterprises. Hands-on experience in compliance assessments, technology risk management, or framework development is an advantage.
Possession of relevant cybersecurity certifications is a plus (e.g., CISA, CISM, CRISC, CISSP, PMP, CIPP-E, CIPP-CN, CIPM, GPEN, or other equivalent qualifications).
Ability to work independently and remotely with the level of discipline required to work with the wider project team based in Hong Kong.
Knowledge of network architecture, application security, vulnerability management, and security operations. Familiarity with common IT security tools is preferred.
Excellent written and verbal communication skills, with strong customer service orientation.
Strong teamwork and collaboration in a diverse work environment, along with a solid team-oriented mindset.
Proficiency in spoken and written English, with the ability to work in an English-speaking professional environment.
Responsibilities
Assist in conducting assessments based on various cybersecurity standards and requirements, comprehensively evaluating risks and gaps in areas such as organizational cybersecurity frameworks, IT risk management processes, technology and operations, incident response, and business continuity planning.
Assist in performing cybersecurity maturity assessments and gap analyses to identify potential areas for improvement.
Evaluate the security architecture and design of applications, databases, operating systems, hardware platforms, and network infrastructure to identify potential vulnerabilities and risks.
Assist in the design and implementation of technology risk management systems and processes, such as identity authentication and access control, intrusion detection, threat intelligence, cybersecurity monitoring, and incident response.
Support the team in delivering data protection and privacy compliance projects based on applicable laws and regulations, providing professional services for organizations, such as the design of data leakage prevention solutions, process reviews, and privacy protection assessments.
Provide recommendations to address identified issues based on assessment results and communicate findings using professional terminology to management and clients. Facilitate the implementation of remediation plans.
Design and develop cybersecurity training and awareness programs to help improve organizational awareness of cybersecurity risks.
Continuously improve existing cybersecurity assessment methodologies.
Qualifications
Bachelor's degree or higher, with a strong interest in technology risk management, cybersecurity, and IT governance. Candidates with education experience and backgrounds in cybersecurity, information technology, engineering, statistics, or risk management are preferred.
Job Info
...health, substance use, and/or homeless services is required Position: Peer Program Specialist, Manhattan Treatment Apartment (MTA) Reports to: Program Director Function: Provides direct service to clients in their homes, assisting with training in skills...
...Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages...
...Student Lab Assistant [Science] I _Non-FWS Position Details Fill out your application carefully and completely, including attaching... ...in specific projects being completed in the lab; preparing experiments, cleaning equipment and lab space, caring for animals or plants...
...care as established in unit standards including, patient and family education, family needs and discharge planning throughout hospitalization with members of the interdisciplinary team. Provides direct patient care including, treatments, medications, and diagnostic...
...We are looking for an experienced Network Architect to design, implement, and maintain enterprise network infrastructure. The ideal candidate... ...diagramming tools Education: Bachelor's degree in Computer Science, IT, Networking, or a related field preferred. #J-...