Senior Security Analyst

Space to make a transformative impact, career and life.

At Chinachem, we create space for every kind of brilliant, and define ourselves by our purpose and impact. Our people are the pulse of the business, and it’s our entrepreneurial, vibrant culture that’s at the heart of our success. We offer a workplace where talent is empowered to have positive impact.

Originate world-class, world-changing work and experiences that enhance regeneration, resilience and recognition. Share in the successes and rewards that we’ll build as a team.

How you will make an impact:

Support the secure and reliable operation of the Group's cybersecurity platforms, with primary focus on privileged access management, email security, vulnerability management and security operations.

The role coordinates security projects, platform changes, system troubleshooting and service providers to maintain effective security controls across cloud and on-premises environments.

• Administer, maintain and continuously improve enterprise security platforms, including privileged access management (PAM), email security and vulnerability management solutions.

• Manage privileged account onboarding, access provisioning, Safe and role assignment, service and vendor accounts, periodic access reviews, and follow-up on expired or exceptional access.

• Support Microsoft 365 and email security controls, including mail flow security, transport rules, connectors, journaling and security exceptions.

• Coordinate vulnerability assessments, penetration tests, configuration hardening reviews and remediation follow-up across cloud, on-premises systems, networks and applications.

• Participate in cybersecurity projects from requirements definition and solution evaluation through implementation, testing, acceptance and transition to operations.

• Prepare technical requirements, scopes of work, evaluation criteria, technical assessments, procurement justifications and management approval documents for cybersecurity products and services.

• Manage security vendors and service providers, monitor service performance and deliverables, and coordinate incident resolution, platform support and enhancement activities.

• Maintain security procedures, platform records, risk assessments, incident records, audit evidence and operational documentation.
  

What we are looking for:

Qualifications:

• Bachelor's degree in Information Security, Computer Science, Information Technology or a related discipline.

Experience & Skills:

• Minimum 5 years of relevant experience in cybersecurity operations, security platform administration or infrastructure security.

• Hands-on experience in privileged access management is required; experience with CyberArk or other enterprise PAM solutions is preferred.

• Practical knowledge of Microsoft 365 or enterprise email security, including mail flow controls, transport rules, connectors or security gateways.

• Experience with vulnerability management, security assessment and remediation coordination.

• Experience in security solution implementation, migration, testing, operational acceptance and vendor management.

• Knowledge of identity and access management, cloud security and network security.

• Experience in preparing technical requirements, vendor evaluations, procurement documentation and management submissions is preferred.

• Ability to analyze security platform issues, coordinate troubleshooting and work effectively with internal teams and external service providers.

• Basic scripting or automation knowledge for security administration and operational improvement is an advantage.

• Relevant professional certification such as CISSP, CISM, CISA, Security+, CyberArk certification or equivalent is preferred.

• Self-motivated, responsible, organized and able to manage multiple priorities and operational issues.

• Good command of written and spoken English and Chinese.

At Chinachem, we share a singular vision: “Places with Heart.” This binds us together in enriching the lives of People, driving Prosperity and protecting our Planet in order to deliver lasting commercial, social and environmental benefits. We encourage all of us to do good and engage with our communities through our CCG Hearts Loyalty Programme. Yet, while united in purpose, we deeply respect individual differences and champion diversity and inclusion throughout our organisation. In the year 2022/23, over 42% of our management positions are held by women. As an equal opportunity employer and a proud signatory of “The Racial Diversity & Inclusion Charter for Employers,” we warmly welcome applicants from all backgrounds to join the Chinachem family.

We offer a comprehensive package that mirrors our genuine appreciation for the contributions you’re set to make. Should our collective purpose align with your personal and professional aspirations, we invite you to be a part of our transformative journey. Forward your full resume, highlighting both current and expected remuneration and your earliest availability, to our Human Resources Manager at Chinachem Group, 35-38 Floor, Tower 2, Nina Tower, 8 Yeung Uk Road, Tsuen Wan, N.T. For those preferring a streamlined approach, the "Apply now" option is just a click away.

We give every application the attention it deserves. However, if you haven't received a response within 8 weeks, please understand that we might be looking for a different fit at this time.

This Personal Information Collection Statement applies to the collection, use and handling of personal data by the employing company within Chinachem Group (the “Company”) pursuant to the Personal Data (Privacy) Ordinance (Cap. 486). “Chinachem Group” refers to Chinachem Group Holdings Limited and its holding companies, subsidiaries, affiliates and associated companies. The types of personal data the Company collects from you may include (1) your personal particulars (e.g. your name); (2) your contact information (e.g. telephone number or email address); and (3) your employment information (collectively “Personal Data”). The Personal Data you provide will be treated with utmost confidentiality and used for recruitment related purposes including the assessment of your suitability to assume the job duties of the position you have applied and to determine remuneration offer. While the provision of full and complete information is necessary for our selection process, sharing your personal details is a voluntary decision. Failure to provide any of the requested data may impact the processing and outcome of your application. All Personal Data provided by you will be retained for a maximum of 24 months and then subsequently erased. Where there are suitable vacancies in the Company’s subsidiaries or associate companies during that period, we may transfer your application to them for consideration of employment, but only with your prior consent. Save and except your current or former employers, academic institutions and service providers engaged by the Company for reference checking purpose, your Personal Data will not be disclosed to any third parties for other unrelated purposes without your prior consent. Applicants have the right to request access to and correction of their Personal Data in relation to their application. If you wish to exercise this right, please submit your request in writing to the Human Resources Department of the Company by emailing to hrp•@chinachemgroup.com with the subject line 'Personal Data Access Request'. You may also submit your request directly to the Human Resources Department of the Company at 35-38/F, Nina Tower, 8 Yeung Uk Road, Tsuen Wan, New Territories, Hong Kong.

In creating Places with Heart, we prioritise empowering our people to make a transformative impact, career and life.