受聘人主要負責執行《保護關鍵基礎設施（電腦系統）條例》下的工作，包括：
- (a)檢視電腦系統安全管理計劃、電腦系統安全風險評估報告和電腦系統安全審核報告；
- (b)檢視持份者就電腦系統安全遵行情況並進行必要的跟進會面及查詢；
- (c)參考最新的國內及國際標準和業界良好作業，研究、制定和檢視電腦系統安全政策及指引；
- (d)與業界持份者對電腦系統安全遵行相關事宜聯繫；及
- (e)執行行政工作及上司指派的其他職務。
註：「電腦系統」包括資訊科技 (IT) 和營運科技 (OT)。
職責
Successful candidates are mainly deployed to administer the following tasks under the Protection of Critical Infrastructures (Computer Systems) Ordinance:
- (a)review computer-system security management plans, computer-system security risk assessment reports and computer-system security audit reports;
- (b)review computer-system security compliance status of stakeholders and conduct necessary follow-up interviews and enquiries;
- (c)research into, develop and review computer-system security policies and guidelines referencing the latest national and international standard and industry best practices;
- (d)liaise with industry stakeholders in computer-system security compliance related matters; and
- (e)perform administrative tasks and any other duties assigned by the supervisor.
Note: “Computer-system” includes both information technology (IT) and operational technology (OT).
入職條件
申請人必須：
- (a)持有本港大學頒授的計算機科學、資訊系統、電子工程或相關學科學士學位或深造學位，或同等學歷；
- (b)符合語文能力要求，即在香港中學文憑考試或香港中學會考中國語文科和英國語文科考獲第2級或以上成績，或同等成績
註(1)] ；
(c)具備最少5年在資訊保安範疇的工作經驗，如資訊科技安全審核、資訊科技安全事故應變、資訊科技安全風險管理及資訊科技安全遵行；
(d)具備註冊資訊安全專業人員(Certified Information Security Professional, CISP)、國際電腦稽核師認證(Certified Information Systems Auditor, CISA)、國際資訊安全經理人認證(Certified Information Security Manager, CISM)、註冊資訊系統安全師(Certified Information Systems Security Professional, CISSP)等相關專業資格；
(e)具備良好的資訊科技安全架構知識。具備營運科技 (OT) 的知識和經驗者更佳；及
(f)具備優良的溝通技巧及良好中英文會話及書寫能力。
Candidates should:
- (a)have a Bachelor’s or post-graduate degree in Computer Science, Information System, Information Technology, Electronic Engineering or a related discipline from a university in Hong Kong, or equivalent;
- (b)have met the language proficiency requirements of Level 2 or above in Chinese Language and English Language in the Hong Kong Diploma of Secondary Education Examination (HKDSEE) or the Hong Kong Certificate of Education Examination (HKCEE), or equivalent
Note (1)] ;
- (c)have at least 5 years of relevant work experience in the field of information security, e.g. IT security audit, IT security incident response, IT security risk management and IT security compliance;
- (d)possess relevant professional qualification
- (s)such as Certified Information Security Professional (CISP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP);
- (e)have sound knowledge in IT security frameworks. Knowledge and experience in operational technology (OT) will be an advantage; and
- (f)have strong communication skills with good command of both written and spoken English and Chinese.
入職條件(註)
- (1): 2007年前的香港中學會考中國語文科和英國語文科(課程乙) E級成績，在行政上會被視為等同2007年或之後香港中學會考中國語文科和英國語文科第2級成績。
一分鐘，足以摧毀你對英文的自信！
