Consulting - Cyber Security and Privacy Protection - Senior Associate - Hong Kong

The opportunity

Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security and privacy protection measures. EY is a global leading service provider in this area, we look forward to people with enthusiasm, knowledge and experience to join us. You will be working with leading class talent in a collaborative environment.

Description of our work

As a consultant, under the leadership of the project manager, carry out various consulting services in an orderly manner to ensure that the work is completed on time and with high quality.

Depends on the nature and scope of the different services, a consultant’s work could fall into below categories (but is not limited to) :

• Information security management and compliance : Develop information security governance / management framework, policies, standards and procedures. Establish information security management system such as ISO27001, including planning, implementation, assessment and audit. Assess the compliance status based on regional applicable laws, regulations and industry standards.
• Cyber-attack simulation and penetration testing : Review the architecture and configurations of IT systems. Carry out vulnerability scanning and penetration testing, and simulate real cyber-attack scenarios, actively discover potential security risks of the application and systems. Provide recommendation for the optimization of Cybersecurity protection measure based on the discovered
• Cybersecurity defence and operations : Monitor the cybersecurity situation in real time Respond to and deal with various security incidents in a timely manner, ensure the stable operation of the enterprise network infrastructure and information system Continuously optimize the defence strategy, and improve the overall security protection capability.
• Cybersecurity technologies planning : Design cutting-edge security protection technical solutions (such as IAM, EDR, DLP, Zero Trust, etc.) based on security risk management requirements, leading enterprise security technology innovation and upgrading. Aid in technical solution implementation project management.
• Privacy protection management and compliance : Responsible for the multi-country privacy protection compliance management of enterprises with in-depth understanding to the applicable laws and standards in the region. Build and improve the data privacy management system (such as ISO27701), facilitate the compliance of enterprises in the whole lifecycle of data collection, storage, transfer, use and disposal, and safeguard the privacy rights and interests of users. Assist the enterprise to conduct privacy compliance assessments such as PIA and CBDT.

Work experience requirements

We expect candidates to have work experience in one or more of the following relevant areas :

We also warmly welcome ambitious people who are eager to develop in professional areas of cybersecurity and privacy protection, even he / she may have no direct experience in the areas before. The potential candidate should have one or more of the following experiences in information technology management :

Knowledge and skill requirements

What will EY offer

Apply now!