The Commissioner of Critical Infrastructure (Computer-system Security) (“the Commissioner”) is required to lead the Office of the Commissioner of Critical Infrastructure (Computer-system Security) (“the Commissioner’s Office”) under the Security Bureau in implementing the Protection of Critical Infrastructures (Computer Systems) Ordinance (“the Ordinance”). The Commissioner is mainly responsible for –

• (a)formulating an overall strategy and providing strategic advice to the Secretary for Security on the monitoring of the computer-system security of critical infrastructures (“CIs”);
• (b)overseeing the implementation of and compliance with the Ordinance;
• (c)developing the mechanism and criteria for identifying CIs and designating operators of CIs (“CI Operators”) and critical computer systems;
• (d)spearheading the development of the Codes of Practice to provide professional guidance to CI Operators of various sectors while balancing security requirements with business operational needs;
• (e)setting up a comprehensive regulatory framework, and overseeing the compliance checking mechanism of the Ordinance to ensure that the safeguards for CIs are in line with the international standards;
• (f)leading an inter-departmental contingency mechanism in coordinating investigation and response to critical computer-system security threats and incidents;
• (g)acting as the key co-ordinator in facilitating co-ordination with the Designated Authorities under the Ordinance (i.e. the Hong Kong Monetary Authority and the Communications Authority) and Government bureaux/departments for the implementation of the Ordinance and promotion of policy synergy;
• (h)leading the operation of the Commissioner’s Office and building up an efficient team of professional staff; and
  • (i)carrying out any other duties as may be assigned by the Secretary for Security.

Candidates must be permanent residents of the Hong Kong Special Administrative Region at the time of appointment and should possess –

• (a)at least 15 years of administrative and managerial experience, including at least 10 years of work experience in the field of cybersecurity, and at least 10 years of work experience related to law enforcement;
• (b)an international perspective and high capability to interact with interlocutors in the business fields as well as counterparts in the Government;
• (c)international exposure in safeguarding cybersecurity;
• (d)proven leadership and organisational ability with excellent strategic planning skills, strong political acumen, good communication and negotiation skills;
• (e)a Bachelor’s or post-graduate degree from a university in Hong Kong or equivalent;
• (f)a Corporate Membership of the Hong Kong Institution of Engineers (Information Discipline) or a Full Membership of the Hong Kong Computer Society, or equivalent

• (g)strong command of written and spoken English, written Chinese and spoken Cantonese. Proficiency in Putonghua is an advantage.