Contract Systems Analyst – DPO
Hong Kong Island
- Closing date
- 13 Nov 2026
- Contract period
- 28 Dec 2026 – 31 Jan 2027
- IT experience
- 4 years
- Similar post
- 1 year
- Posts
- 1
- Shift duty
- No
- Relevant field
- C
- Work in Guangdong
- No
About the project
The project is for a digital identity system, "iAM Smart" (the System), which consists of cloud-based back-end systems and mobile app. It is a key smart city infrastructure to provide all Hong Kong residents with a single identity and authentication to conduct online government and commercial transactions in a simple, convenient and secure manner. The CSA will coordinate with different parties including operation and support teams of the System to ensure the service quality and compliance to ISO/IEC 27001:2022 and ISO/IEC 27701:2019.
Duties
(T26) - To assist project management and coordinate various parties, such as contractors, operation and support teams implement and maintain the management systems according to standards such as ISO/IEC 27001:2022 and ISO/IEC 27701:2019 for the iAM Smart system - To work with the contractors, operation and support teams to provide audit support for obtaining and maintaining iAM Smart certifications of the relevant ISO/IEC standards; - To assist in planning, designing, coordinating, and reviewing the adoption of processes and controls in consultation with the contractors, the operation and support teams to ensure the daily operations are in compliance with the relevant ISO/IEC standards; - To carry out any other activities which are necessary for supporting the services and operations of the System as assigned by the supervisors; - Any other duties assigned by the supervisors.
Other requirements
Mandatory - At least one year experience in one or more of the following aspects (a) Information System Policy, Standard and Framework; (b) Cyber security, risk management or data privacy compliance; (c) IT operation - Good command in spoken Cantonese and English, as well as written Chinese and English; and - Good communication and interpersonal skills. Optional - Valid certification in information security (e.g. CISM, CISA, CISSP, ITIL, ISO27001 LA etc.); - Experience in IT audits, cyber security assessments such as Security Risk Assessment and Audit, Privacy Impact Assessment and Privacy Compliance Audit; and - Experience in working with accredited certification body.
Technical skills
| Skill | Requirement | Experience |
|---|---|---|
| IT Security | Essential | 1y |
| IT Application Development and Management | Preferred | 1y |
| IT Planning | Preferred | 1y |
| Security Risk Assessment and Audit | Preferred | 1y |
Non-technical skills
| Skill | Requirement | Experience |
|---|---|---|
| Moderate Exposure in Written English | Essential | 1y |
| Coordination | Preferred | 2y |
| Exp. in Managing Corporate IT Security Framework | Preferred | 1y |
| Management and Support of Gov Systems & Services | Preferred | 1y |
| Experience in Managing Int'l Security Standards | Preferred | 1y |
| IT Audit | Preferred | 1y |
| IT Service/ Outsourcing Management | Preferred | 1y |
| IT Service Management | Preferred | 1y |
