Subject to the implementation progress of the Fourth Generation Mobilising System (4GMS), the CSA will facilitate the following duties related to the 4GMS implementation:

• To act as the IT security administrators for the 4GMS including oversee the security assessments, support threats & vulnerability management, test and apply security patches, maintain control and access to the system, maintain and review audit logs
  
• To arrange regular internal security audit to 4GMS
  
• To arrange SRAA for 4GMS, including handling of full system cycle of SRAA
  
• To arrange the execution of the SRAA and to monitor the implementation of fixes to findings
  
• To supervise the contractor in administrate, operate, upgrade and support the enterprise backup systems (e.g. Veeam) including formulating and establishing backup policy, advising and preparing backup plans for different 4GMS sub-systems, reviewing and following up the backup operations to ensure complete data backup, and performing regular backup recovery and disaster recovery drills
  
• To collaborate with contractor to ensure the scalability, performance, and security of the infrastructure supporting virtualization environments, databases, and storage systems
  
• To provide technical support services on various IT systems and infrastructure, either on-site, by email or on phone
  
• To evaluate and select appropriate products for the development and maintenance of IT infrastructure
  
• To monitor daily operations and project executions within the Infrastructure Team to ensure compliance with organizational regulations, standards, policies, and guidelines of the Government of HKSAR
  
• To evaluate best practices, standards, and guidelines from the IT industry and product vendors and provide recommendations to management
  
• To liaise and coordinate with users, contractors and other government departments in provision of quality IT services
  
• To prepare system documentation including installation and configuration guide, administration and operation guide, system architecture and design specification, Proof-of-Concept evaluation, etc.
  
• To conduct administrative tasks and support activities as requested
  
• To perform tasks related to project management and contract administration
  
• To carry out necessary tasks related to the existing mobilizing system to ensure a smooth transition to the 4GMS
  
• To undertake any other duties as assigned by the supervisor

• Bachelor's degree awarded by a post-secondary institution in Hong Kong, including but not limited to the eight University Grants Committee funded universities in Hong Kong, or a bachelor's degree awarded by an overseas university or a polytechnic in the UK, the USA, Canada, New Zealand or Australia; or an accredited associate degree or a higher diploma in information technology from a Hong Kong or overseas tertiary education institute
• At least 4 years of relevant post-qualification working experience
  
• At least 1 year of working experience as a Systems Analyst
  
• Experience in overseeing and managing contractor / vendor relationships in IT security assessment and audit
  
• In-depth knowledge of network security technologies and tools, such as Firewalls, Intrusion Detection System/Intrusion Prevention System (IDS/IPS), Endpoint Detection and Response/Network Detection and Response (EDR/NDR), Security Information and Event Management (SIEM), Web Application Security, Web Application Firewall (WAF), Penetration Testing and Vulnerability Scanning is preferred
• Experience with cybersecurity practices tailored to closed networks, including access control and data protection
• Experience with backup technologies such as tape libraries and disk-based backup solutions is preferred
• Strong understanding of security protocols, cryptography, authentication and authorization will be an advantage
  
• Possess at least one of the industry-recognised IT security certifications, such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Information Security Professional (CISP), or equivalent
• Proficiency in both spoken and written Cantonese and English
• The job requires the following mandatory skills:
• 2 years x Microsoft Active Directory Administration, Anti-Spam Technology, Anti-Virus Technology, IT Security and Vendor Management
  
• 1 year x Disaster Recovery Planning, Intruder Detection/Alert Technology, Security Risk Assessment and Audit, Security Risk Assessment, Server Virtualisation Technology and Virtual Private Network