Cyber Security SME

Job Description

Job requirements:

1. Cybersecurity Tool Management
   

• Expertise in lifecycle management of security tools (such as EDR, MFA, DLP), including deployment, configuration, troubleshooting, and documentation.
  

1. Risk Identification & Mitigation
   

• Ability to identify security risks and gaps, collaborate with teams/vendors to develop mitigation plans, track remediation in ServiceNow, and support operational risk reporting.
  

1. Implementation & Integration
   

• Experience in designing, testing, deploying new security solutions, and working with infrastructure teams for seamless integration and coverage.
  

1. Audit & Governance Support
   

• Capability to prepare audit-ready documentation, gather evidence, and support internal/external audit activities.
  

1. Process Optimization & Automation
   

• Skill in refining methodologies and workflows for efficiency and developing automation scripts, dashboards, or integrations to reduce manual workload.
  

1. Documentation & Standards
   

• Strong ability to write and maintain accurate documentation including implementation procedures, runbooks, and technical standards.
  

1. Deliverables & Reporting
   

• Ability to ensure timely resolution of tooling incidents, create implementation packages and handover documents.
  
• Maintain accurate compliance reporting, produce audit-ready evidence packs, and deliver automation scripts, dashboards, or integrations that reduce manual workload.
  

Requirements
Required Skills & Experience: • Strong hands-on experience with Microsoft Active Directory (installation, multi-forest/domain management, GPO, DNS/DHCP, Trust, AD replication). • In-depth knowledge of Microsoft Entra ID (Azure AD), especially password protection features and custom banned password lists. • Experiences in monitoring, analytics tools like SCOM, Zabbix, Splunk, Azure log analytics, ELK etc. • Advanced PowerShell scripting skills for automation and reporting. • Experience with regulatory compliance projects (e.g., HKMA C-RAF, SOX, GDPR) is a plus. • Excellent analytical, troubleshooting, and communication skills. • 10-15 years of IT experience, with at least 5 years in AD/Entra ID environments. Preferred Certifications: • Microsoft Certified for AD and Entra ID. Education level: Degree or equivalent in engineering/ IT field