Consulting - Cyber Security and Privacy Protection - Senior Associate - Hong Kong
at EY
Location:
Employment Type: full_time
Job Description
<p><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Consulting – Cyber Security and Privacy Protection – Senior Consultant – Hong Kong</span></span></b></span></span></p><p> </p><p><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">The opportunity</span></span></b></span></span></p><p><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security and privacy protection measures. EY is a global leading service provider in this area, we look forward to people with enthusiasm, knowledge and experience to join us. You will be working with leading class talent in a collaborative environment.</span></span></span></span></p><p> </p><p><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Description of our work</span></span></b></span></span></p><p> </p><p><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">As a consultant, under the leadership of the project manager, carry out various consulting services in an orderly manner to ensure that the work is completed on time and with high quality. </span></span></span></span></p><p> </p><p><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Depends on the nature and scope of the different services, a consultant’s work could fall into below categories (but is not limited to):</span></span></span></span></p><ol><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Information security management and compliance</span></span></b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">: </span></span></span></span><ol style="list-style-type:lower-alpha"><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Develop information security governance/management framework, policies, standards and procedures.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Establish information security management system such as ISO27001, including planning, implementation, assessment and audit.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Assess the compliance status based on regional applicable laws, regulations and industry standards.</span></span></span></span></li></ol></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Cyber-attack simulation and penetration testing</span></span></b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">: </span></span></span></span><ol style="list-style-type:lower-alpha"><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Review the architecture and configurations of IT systems.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Carry out vulnerability scanning and penetration testing, and simulate real cyber-attack scenarios, actively discover potential security risks of the application and systems.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Provide recommendation for the optimization of Cybersecurity protection measure based on the discovered </span></span></span></span></li></ol></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Cybersecurity defence and operations</span></span></b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">: </span></span></span></span><ol style="list-style-type:lower-alpha"><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Monitor the cybersecurity situation in real time</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Respond to and deal with various security incidents in a timely manner, ensure the stable operation of the enterprise network infrastructure and information system</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Continuously optimize the defence strategy, and improve the overall security protection capability.</span></span></span></span></li></ol></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Cybersecurity technologies planning</span></span></b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">: </span></span></span></span><ol style="list-style-type:lower-alpha"><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Design cutting-edge security protection technical solutions (such as IAM, EDR, DLP, Zero Trust, etc.) based on security risk management requirements, leading enterprise security technology innovation and upgrading.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Aid in technical solution implementation project management. </span></span></span></span></li></ol></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Privacy protection management and compliance</span></span></b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">: </span></span></span></span><ol style="list-style-type:lower-alpha"><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Responsible for the multi-country privacy protection compliance management of enterprises with in-depth understanding to the applicable laws and standards in the region.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Build and improve the data privacy management system (such as ISO27701), facilitate the compliance of enterprises in the whole lifecycle of data collection, storage, transfer, use and disposal, and safeguard the privacy rights and interests of users.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Assist the enterprise to conduct privacy compliance assessments such as PIA and CBDT.</span></span></span></span></li></ol></li></ol><p> </p><p><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Work experience requirements</span></span></b></span></span></p><p><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">We expect candidates to have work experience in one or more of the following relevant areas:</span></span></span></span></p><ul><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Engaged in enterprise information security governance/management, familiar with regional applicable laws and standards, understand relevant solutions, and familiar with the planning, implementation, evaluation and audit methods of information security management system (such as ISO 27001).</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Have experience in multi-country privacy protection compliance management, understand regional privacy protection laws and standards, be able to skilfully use relevant tools, and understand how to build and operate data privacy management systems (such as ISO 27701).</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Engaged in enterprise security technology testing, attack defence and operation, with practical experience, can effectively cope with various cybersecurity challenges.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Participated in enterprise security technology solution planning, implementation and operation, with deep understanding and practical experience of common security technology solution packages (such as IAM, EDR, DLP, zero trust, etc.).</span></span></span></span></li></ul><p> </p><p><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">We also warmly welcome ambitious people who are eager to develop in professional areas of cybersecurity and privacy protection, even he/she may have no direct experience in the areas before. The potential candidate should have one or more of the following experiences in information technology management:</span></span></span></span></p><ul><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Server and network management, familiar with network architecture and server operation management.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Cloud computing management, understand the security features and management methods of cloud computing platforms.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Database management, understand database security protection and data management technology.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Application development, with security coding awareness and application security vulnerability prevention capabilities.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">AI application, can apply AI technology to the field of security and improve the level of intelligent security protection.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">OT/IOT application, familiar with security challenges and coping strategies in industrial Internet and Internet of Things environment.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Data governance, understand data classification, grading and data security management.</span></span></span></span></li></ul><p> </p><p><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Knowledge and skill requirements</span></span></b></span></span></p><ul><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Basic knowledge reserve</span></span></b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">: Regardless of past experience, candidates should have solid basic knowledge of information security and privacy protection, and have a clear understanding of relevant concepts, technologies and solutions.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Learning and enthusiasm</span></span></b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">: Have a high degree of enthusiasm for learning, always maintain a keen insight into new knowledge and new technology, and actively improve their professionalism.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Communication and collaboration skills</span></span></b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">: Have good customer communication skills, be able to work effectively with team members from different backgrounds, be brave in taking responsibility, be willing to share work pressure for colleagues, and jointly overcome difficulties.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Work attitude and delivery ability</span></span></b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">: Adhere to the attitude of diligent work, deliver work tasks with high quality in strict accordance with time nodes, and ensure the accuracy and efficiency of work.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Language skills</span></span></b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">: Excellent written Chinese and English skills, fluent oral English, Cantonese and/or Mandarin.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Related qualifications</span></span></b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">: Ideally, the candidate should have one or more industry certifications such as CISSP, CISA, CISM, CCSP, OSCP, CEH, CIPM, CIPP/E or equivalent.</span></span></span></span></li></ul><p> </p><p> </p><p><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">What will EY offer</span></span></b></span></span></p><ul><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Broad development platform: </span></span></b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">stay at the forefront of the industry, participate in various large-scale projects, accumulate rich practical experience, and help individuals to promote rapidly.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Professional training and growth:</span></span></b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif"> Provide regular professional training courses, invite industry experts to share cutting-edge technology and practical experience, support employees to obtain relevant professional certifications, and continuously empower employees for career development.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Favorable welfare benefits:</span></span></b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif"> competitive salary benefits, perfect five insurances and one fund, paid annual leave, holiday benefits, etc., pay attention to the balance between life and work of employees.</span></span></span></span></li><li><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Harmonious team atmosphere:</span></span></b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif"> open and inclusive corporate culture, positive team atmosphere, encouraging innovation and sharing, making work a pleasure.</span></span></span></span></li></ul><p> </p><p><span style="font-size:12.0pt"><span style="font-family:Aptos, sans-serif"><b><span style="font-size:11.0pt"><span style="font-family:'Calibri', sans-serif">Apply now!</span></span></b></span></span></p>