Certificate CISP

8 years of safety work experience

Job Responsibilities

• Responsible for enterprise information system security architecture planning, risk assessment, and security strategy formulation

• Lead safety monitoring and threat detection work

• Perform regular penetration testing, vulnerability scanning, and weakness management, and collaborate with development and operations teams to push for validation

• Design and maintain firewalls, WAF, EDR, email gateways, etc. security device policies, and perform performance tuning and rule optimization

• Support internal security awareness training, emergency drills (such as simulated phishing attacks, ransomware incidents), and compile a safety operations manual and accident handling SOP

• Holding a CISP certification issued by the China Information Security Evaluation Center, with 8 years of practical information security work experience, of which at least 3 years are spent in financial, telecommunications or multinational corporations as an independent security engineering function

• Familiar with mainstream security technologies and tools

• Have the ability to communicate in Cantonese, Mandarin, and fluent English

• Must be a permanent resident of Hong Kong, or hold a valid Talent Pass, IANG, High Talent Pass, Dependant's Visa or other legal work permit