IT Security Engineer (Information security and data privacy protection)

About the Company:
CITIC Telecom International Holdings Limited was established in 1997 in Hong Kong and was listed on The Stock Exchange of Hong Kong Limited on 3 April 2007. It is an Internet-oriented telecommunications enterprise providing comprehensive services. The Company’s services cover international telecommunications services, providing mobile international roaming, international voice, international messaging, international data and international value-added telecommunications services, etc. to global carriers. The Group has established branch organisations in 22 countries and regions with more than 2,500 employees and over 160 PoPs globally.

CITIC Group Corporation, a large multinational conglomerate headquartered in China, is the ultimate holding company of CITIC Telecom.

Responsibilities:

• Coordinate and liaise with the Information Technology Department and other departments to achieve cybersecurity and data privacy protection objectives.
• Conduct risk assessments to identify potential security threats, and perform vulnerability scanning using security scanning tools (e.g., MAP, Nessus, Qualys).
• Collaborate with IT, Engineering, R&D and other teams to ensure timely remediation of system security vulnerabilities.
• Respond promptly to IT security incidents, conduct investigations and implement necessary actions including containment, recovery and preventive measures.
• Identify, analyse and verify potential threats and violations alerted from various sources (e.g., SIEM, MSSP, Antivirus, WAF).
• Assist in supporting internal and external IT audits as well as certifications such as ISO 20000 / ISO 27001. Track remediation progress by engaging platform and system administrators.
• Identify emerging technical issues including security trends, vulnerabilities and threat intelligence to enhance end-to-end security defence.
• Promote and raise general staff awareness of IT risks via regular training sessions.
• Support other IT security and compliance projects, as well as information security compliance requests from other teams

Requirements:

• Bachelor’s degree or above in Information Security, Computer Science or related disciplines.
• Candidates holding information security certifications such as CISSP, CEH or CISA will be given priority.
• Familiarity with cybersecurity best practices or frameworks including ISO 27001, NIST CSF and CIS Benchmark is preferred.
• Minimum 2 years of experience handling information security and data privacy matters within the telecommunications or information technology industry.
• Hands-on experience in operating and maintaining Windows and Linux servers.
• Practical experience working with IT security systems including DLP, IPS, WAF, endpoint security, patch management and system hardening.
• Experience in security incident response is preferred.
• Proficient in operating system hardening against intrusions.
• Competent in Microsoft Active Directory administration.
• Familiar with information security management frameworks such as ISO 27001, COBIT and ITIL.

We Offer:

• 5 days work week
• Discretionary year-end bonus
• Medical & dental insurance
• Training subsidies
• Free meals
• Free shuttle bus service
• Staff discount

We offer competitive salary and benefit package including medical, life and dental insurance, 5-day work, 14 days paid annual leave and free shuttle bus service to the capable candidate. If you are interested, please immediately send your application stating your current & expected salary and date availability with full resume to Human Resources Department, CITIC Telecom International Holdings Limited (“CITIC Telecom”) by clicking "Apply Now". Please clearly indicate the applied position and reference number on your application.

All personal data received will be treated strictly confidential and will be used for employment related purpose only.