Senior Information Security Analyst

Senior Information Security Analyst (Post Ref.: 25/267) Lingnan University is one of the eight publicly funded institutions in the Hong Kong Special Administrative Region (HKSAR) of the People’s Republic of China (PRC)and has the longest established tradition among the local institutions of higher education. It is widely recognised for providing quality education with a focus on whole-person development and conducting high-impact research for a better world. Moving forward, Lingnan University is well positioned to take lead as a comprehensive university in arts and sciences in the digital era, with impactful research and innovations. Lingnan University offers undergraduate, taught postgraduate, and research postgraduate programmes in the Faculties of Arts, Business, Social Sciences, and the Schools of Data Science, Graduate Studies and Interdisciplinary Studies. To foster interdisciplinary collaboration and scientific progress, Lingnan University established the Lingnan University Institute for Advanced Study (LUIAS), attracting distinguished scholars from around the world to collaborate with its faculty and students. With traditional strengths in arts, business, social sciences, and interdisciplinary studies, the University aims to equip students with practical knowledge and critical thinking skills to thrive in the future. Subsequent to the establishment of the School of Data Science and LUIAS, Lingnan University is transforming into a hub for global leaders to develop and promote human-centric technology and social policies. Further information about Lingnan University is available at Responsibilities Act as the Security Champions Program Captain Maintain up-to-date knowledge of information security practices and trends, and apply to the Security Champions Program Throughout the Software Development Lifecycle (SDLC), provide guidance and support to security champions to identify and address security issues Practice DevSecOps and secure software development Identify potential security issues of internal applications by threat modelling Conduct security testing such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST) and Software Component Analysis (SCA) Ensure applications and systems are compliant with internal standards, the data governance framework, and code of practice for handling personal data Conduct cybersecurity risk assessment and personal data protection impact assessment Identify, track, and predict cyber threats in relation to the University’s digital assets Analyze the cyber threat data and intelligence to understand the tactics, techniques, and procedures (TPPs) used by threat actors, and develop the relevant detection rules Triage security alerts, investigate, and respond to security incidents Promote security awareness among students and staff members, including IT teams Operate the security stack such as Vulnerability Management, Attack Surface Management (ASM), Web Application Firewall (WAF), Data Loss Prevention (DLP), NDR, EDR, SIEM and SOAR, and maintain good cyber hygiene Perform any other duties as requested by supervisor(s) Requirements A recognized Bachelor’s degree or equivalent in Computer Science, Information Technology, Cybersecurity or related disciplines At least 3 years of working experience in the IT sector Practical experience in handling security incidents, vulnerability management, and security monitoring Experience in DevSecOps and data governance will be an advantage Ability to work independently and across teams A good command of English and Chinese Relevant certificates (e.g. CISSP, CISA, CISM, CEH) are highly desirable Previous working experience in a university or similar environment will be an advantage Candidates with less/more experience will be considered for appointment at a relevant rank Salary and Fringe Benefits The rank and commencing salary will be commensurate with qualifications and experience. Fringe benefits, where applicable, include annual leave, medical and dental benefits, mandatory provident fund and gratuity. Application Procedure Please click “Apply ” to submit your application. Personal data collected will be used for recruitment purposes only. We are an equal opportunities employer. Review of applications will continue until the post is filled. Qualified candidates are advised to submit their applications early for consideration. The University reserves the right not to make an appointment for the post advertised, or to fill the post by invitation or by search. We regret that only shortlisted candidates will be notified. #J-18808-Ljbffr