Systems Manager (Information Security Office) [For Serving HA Staff Only]
Summary
Internal posting for serving HA staff: a Systems Manager in the Hospital Authority (Hong Kong) Information Security Office who leads the 24x7 SOC and CSIRT, drives security automation/threat intelligence, oversees MSSP service delivery, and manages staff and projects. Core areas: SIEM, security operations, incident response; 10+ years' IT experience required.
| Position | \: | Systems Manager (Information Security Office) [For serving HA Staff Only] |
| Rank | \: | Systems Manager |
| Department / Cluster | \: | Information Technology and Health Informatics Division, HA Head Office |
| Pay | \: | HK$87,027 to HK$143,298 (HMPS Point 7 to 19) per month including Monthly Allowance Up to 15% of total basic salary (after deducting the contribution of Mandatory Provident Fund by Hospital Authority) as end-of-contract gratuity may be offered to contract staff upon completion of the contract subject to satisfactory performance. |
Key Responsibilities\:
1. Execute HA’s cybersecurity strategy to manage emerging cyber risks and ensure HA’s cyber resilience.
2. Lead the 24x7 Security Operations Centre (SOC) for security monitoring, detection and response.
3. Lead the Computer Security Incident Response Team for security incident management including incident identification, assessment, handling, reporting, communication and mitigations.
4. Provide expertise in security operations to drive automation, analytics and advanced threat intelligence analysis.
5. Oversee security technology delivery, assess and continually improve outputs and key processes, maintain and adhere to operation standards in order to drive SOC operational excellence.
6. Establish operational foundations, define metrics, dashboards and KPIs to drive governance, quality, and efficiency.
7. Monitor the service provision of Managed Security Service Provider (MSSP) and drive continuous improvement through technology/process innovation and operational change.
8. Manage software development initiatives and project delivery.
9. Manage staffing, including recruitment, supervision, scheduling, development and evaluation.
10. Assist senior management in strategic planning, finance and human resources management.
11. Analyze short and long term business requirements and work with other IT teams to formulate cybersecurity initiatives.
12. Provide after office hours system and user support.
13. Perform other related duties as assigned.
Entry Requirements\:
1. Degree in Computer Science or relevant disciplines; or equivalent.
2. Over 10 years’ post qualification Information Technology (IT) related experience.
Preferable Attributes/Exposure：
1. MSSP or SOC management experience is highly preferred.
2. At least 5 years’ post qualification experience in information security management such as security operations, risk assessment, network security, application security and security engineering, of which 3 years or more in supervisory role.
3. Strong leadership, analytical, communication, presentation and interpersonal skills.
4. CEH and CHFI are preferred.
5. Certification in information security disciplines such as CISM/CISA/CISSP.
6. Solid technical background in Security Information and Event Management (SIEM) systems; security engineering; prior exposure to threat hunting/application security would be an advantage.
7. Strong background in managing software development initiatives and project delivery.
8. Strong communication skills with proficiency in English and Putonghua/Cantonese.
9. Innovative, open-minded and can work under pressure.
Remarks\:
1. Please refer to https\://www.ha.org.hk/haho/ho/hrd_jv/NotestoApplicants.pdf for “Notes to Applicants”.
2. Relevant experience gained in HA may be considered as equivalent to post-qualification experience.
Please submit application online on or before 10 November 2026. For enquiries, please telephone 2300 6588.