A System Analyst is mainly deployed to administer the following tasks under the Protection of Critical Infrastructures (Computer Systems) Ordinance:

• (a)review computer-system security management plans, computer-system security risk assessment reports and computer-system security audit reports;
• (b)review computer-system security compliance status of stakeholders and conduct necessary follow-up interviews and enquiries;
• (c)perform analysis and documentation in designating critical infrastructure operators and critical computer systems;
• (d)research into, develop and review computer-system security policies and guidelines referencing the latest national and international standard and industry best practices;
• (e)liaise with industry stakeholders in computer-system security compliance related matters and promotional events on computer-system security; and
• (f)perform administrative tasks and any other duties assigned by the supervisor.

Note: “Computer-system” includes both information technology (IT) and operational technology (OT).

Candidates should have:

• (a)a Bachelor’s or post-graduate degree in Computer Science, Information System, Information Technology, Electronic Engineering or a related discipline from a university in Hong Kong, or equivalent;
• (b)met the language proficiency requirements of Level 2 or above in Chinese Language and English Language in the Hong Kong Diploma of Secondary Education Examination (HKDSEE) or the Hong Kong Certificate of Education Examination (HKCEE), or equivalent

• (c)at least 5 years of full-time hands-on work experience in the field of information security, e.g. performing IT security risk assessment, IT security audit, IT security incident response, IT security risk management and IT security compliance;
• (d)relevant professional qualification
• (s)such as Certified Information Security Professional (CISP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP);
• (e)sound knowledge in IT security frameworks. Knowledge and experience in operational technology (OT) or artificial intelligence (AI) will be an advantage; and
• (f)strong communication skills with good command of both written and spoken English and Chinese.