Senior Analyst/Analyst, Cyber Security Operations

Shangri-La International Hotel Management Limited

Shangri-La Group

Shangri-La Group is a global leader in luxury hospitality with unique Asian heritage.

Headquartered in Hong Kong, we have over 100 hotels and resorts under four brands nested in key cities and beautiful beachfront locations globally. We are expanding rapidly with a strong development pipeline throughout Asia, the Middle East, Europe and Africa.

Regarded as one of the world’s finest hotel ownership and management companies, Shangri-La is dedicated to delight guests around the world with legendary service, finely tuned from 50 years of hospitality from the heart. We have an affinity with Asian travelers and we offer them a gateway to the rest of the world, positioning us a leading brand in luxury hospitality.

As an enviable employer with industry leading levels of colleague engagement, our people are our priority. Our success is only made possible through the efforts and abilities of over 42,000 colleagues worldwide. In accordance with this belief, the focused investment we make in the learning and development of our colleagues is unparalleled in the global hospitality industry. From welcoming new colleagues, to best in class leadership development, you can be sure that potential is identified and nurtured throughout your career.

We are currently looking for a Senior Analyst / Analyst, Information Security Operations to execute security operations processes, identify and measure critical security operations metrics, and continuously improve the efficiency and effectiveness of the operations.

As a Senior Analyst / Analyst, Cyber Security Operations, we will rely on you to:
• Perform PCI-DSS compliance for the Group and hotels (Annual PCI-DSS certification, hotel compliance issues and documents submissions)
• Deploy security solutions and perform vulnerability assessment to IT assets.
• Prepare and deliver monthly and ad-hoc security reports.
• Conduct security awareness training and phishing test
• Maintain and ensure policy & compliance for regulatory requirements
• Monitor, investigate and document security incidents detected; perform security incident response and root cause analysis, which includes after-office hours support
• Work closely with managed security provider, vendors, information system owners or representatives & infrastructure technical staffs on security incidents to perform incident handling and provide remedial actions
• Handle change requests, regular upgrades & provide support on issues relating to all supported security solutions (e.g. endpoint security solutions, logging solution, web proxy, and advanced threat detection systems)
• Perform regular governance review on sensitive administrative activities.

We Are Looking For Someone Who Has
• Bachelor's degree in Cybersecurity, IT or related field/experience
• Minimum 3 years of relevant work experience in IT security operations environment
• Experience with security monitoring tools, such as vulnerability scanners, SIEM, IDS/IPS, and endpoint detection and response (EDR) systems.
• Strong technical knowledge in operating system, network and security technologies.
• Good command in both spoken and written English & Chinese (Cantonese, Mandarin)
• Excellent communication and interpersonal skills, with the ability to effectively interact with stakeholders
• Self-driven, detail-oriented, and able to work independently or as part of a team
• Relevant certifications, such as CISSP, CISM, or GIAC/GCIA, are a plus.