Senior Security Analyst

Responsibilities Directs an ongoing, proactive risk assessment program for all new and existing systems and business processes; communicates risks and recommendations to mitigate risks to the senior management in term of non-technical and cost/benefit for decision making. Ensures vulnerabilities are managed by directing periodic vulnerability scans of servers connected to Company’s networks; and support other department to ensure regulatory compliance in areas of ISO 27001 and PCI DSS. Evaluates security incidents and determines what response, if any, is needed and coordinates Company’s responses when sensitive information is breached. Assist and conduct security risk assessment & audit for both internal and customers. Provide professional security advisory service to customers by designing and proposing security solutions meeting customer’s objectives. Understand customer’s IT challenges and security requirements; and provide suggestions and comments to development team from technical and pre‑sales perspectives of information security. The Person Degree holder or above in Computer Science / Information Technology or related disciplines, or with qualification equivalent to Level 5 of Hong Kong Qualifications Framework (QF). 4-5 years of varied information technology experience on computer and networking infrastructure, operating systems, application software development, project management, regulatory compliance, and risk management. Good knowledge and experience in security planning and design with different technologies / solution. Qualifications Professional certification (CISSP, CCSK, CCSP, CISA, CISM, etc.) is preferred. At least one of the CISSP, ISO/IEC27001 LA, CISM and CEH. Effective verbal and written communication skills and proficiency in writing technical specifications are required. Proficient in written and spoken English and Chinese. Creatively and critical thinking, responsible. Candidate with less experience will be considered as Security Analyst. Securities Responsibilities Ensure compliance with FUJIFILM Business Innovation Information Security Rule, Policies and procedures at all time. Responsible for maintaining security of all FUJIFILM Business Innovation information entrusted to and not limiting to proper classification & handling of FUJIFILM Business Innovation documents and records. Complete Information Security training and awareness program on regular basis and possess enough knowledge to adhere to FUJIFILM Business Innovation Information Security requirements. Responsible for identifying, reporting and complying with Information Security Incident & Reporting Procedure. Failing to comply with the security policies could be subject to disciplinary action, potentially including termination of employment or contract and/or prosecution. Why you should consider this opportunity 5 days work week Medical insurance On-job training 12 days' annual leave Blissful leave of maximum 25 days per year (including birthday leave, wedding anniversary leave, children graduation leave, volunteer leave, pet healthcare leave, home purchase, etc) To discuss this opportunity further, please send your full resume, current and expected salary by clicking "Apply Now". We are an equal opportunity employer and welcome applications from all qualified candidates. All information provided will be treated in strict confidence and used for recruitment purposes only. Applicants not hearing from us within six weeks may consider their applications unsuccessful. All date of unsuccessful applications will be destroyed after six months. #J-18808-Ljbffr