Information Security Analyst

My customer is seeking anInformation Security Analystto support the operational management of security tooling, ensuring compliance with policies and ITIL standards. The role focusses on maintaining system uptime, resolving control gaps, and enhancing infrastructure security (cloud/on-premises) while aligning with industry best practices.

Primary Responsibilities

• Security Tooling Administration & Support
• Administer and maintain cybersecurity tools, including:
• DLP (Data Loss Prevention)
• Web Security Gateway, MDM, VPN
• Vulnerability Management & Server Policy Compliance
• PIM (Privileged Identity Management), IAM, MFA
• Troubleshoot and collaborate with IT teams to support security tooling operations.
• Evaluate, plan, and implement new cybersecurity technologies.

Risk & Compliance

• Enhance DLP policies and mitigate risks.
• Review firewall change requests and assess organizational risk exposure.
• Support internal audits, risk assessments, and remediation efforts.
• Ensure adherence to ITIL processes for incident and change management.
• Incident Response & Threat Management
• Triage and respond to security incidents.
• Identify and remediate vulnerabilities using industry frameworks (CVSS, CCSS).
• Monitor and improve security controls across Windows, MacOS, Linux, and Unix environments.

Key Performance Indicators (KPIs)

• ServiceNow ticket resolution efficiency (SLAs, response time).
• Cross-functional collaboration with IT and security teams.
• System uptime & risk mitigation (reduction in control gaps).

Technical Expertise

• 3+ years in information security (senior roles considered for additional experience).
• 2+ years hands-on experience with DLP systems (deployment, configuration, management).
• Proficiency in OS security (Windows Server/Client, MacOS, Unix/Linux).
• Knowledge of network architecture, TCP/IP, and cloud security (AWS/Azure/GCP).
• Familiarity with encryption standards (PKI, Kerberos, SSL).

Soft Skills

• Strong analytical and problem-solving abilities.
• Excellent communication (English required; Cantonese or Mandarin preferred).
• Self-motivated, with ability to multitask under deadlines.
• ITIL certification or process familiarity is a plus.

Education & Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field.
• Relevant certifications (e.g., CompTIA Security+, CISSP, CEH, ITIL) preferred.