MANAGER, CYBERSECURITY

Main Purpose: Advises airline leadership on all matters pertaining to Cyber Security and IT Risk Management in the areas of system and data Confidentiality, Availability and Integrity.

Key Responsibilities:

In IT related functions, with a focus on cybersecurity:

• Primary cyber security liaison between IT, Tech Ops and airline operations. Responsible for the cyber security end-user training and employee cyber awareness training programs;

• Owns and maintain the airline Cyber Security Risk Assessment and Programme;

• Responsible for IT Incident Response Plan and drill;

• Conduct IT risk and security assessments to identify security risks and follow up mitigation actions, especially to critical systems;

• Deliver vulnerability scanning, various types of penetration tests for internal systems covering infrastructure, web application, mobile application regularly and report findings to senior management;

• Advice in the development of security architecture, security policies, principles, and standards;

• Provide support in the resolution of reported security incidents and provide leadership where required;

• Maintain up-to-date understanding of the latest threats, vulnerabilities, life cycle management, mitigation, and industry best practices;

• Develop security awareness material and conduct security awareness training to Greater Bay Airlines staff

Job Requirement:

• University graduate in IT, Engineering, Mathematics or equivalent;

• 5-8 years in IT security field with certificate in CISSP, OSCP, CEH, GCIH or GIAC or equivalent.

• Experience with common information security management frameworks, such as ISO 27001, NIST, CobiT, ITIL, PCI, are assets;

• knowledge and experience in infrastructure and networks design;

• Experience in gap assessment, data privacy regulatory compliance assessment and audit, and experience with implementation of security technologies such as: Linux/Windows, VMware, Firewall, DLP, SIEM, IPS, Antimalware, Threats & Vulnerabilities monitoring, Web Proxy, ATP tools, PKI and cloud security is preferred but not mandatory;

• Experience in airlines industry will be an advantage;

• Strong problem solving, analytical, interpersonal and communication skills with hight proficiency of English and Chinese;

• Self-motivated and able to work independently;
• Candidate with less experience may be considered as Assistant Manager, Cybersecurity.

We offer a competitive compensation package to the successful candidate. Interested parties, please click “Apply Now” to send full resume with the latest and expected salary package to the Human Resources Department no later than 4 Sep 2024.