Senior Information Security Analyst

About the role

Lingnan University is seeking a Senior Information Security Analyst to lead its Security Champions Program and strengthen the security posture of its digital assets. The role combines hands‑on security testing, threat intelligence, and advisory duties across the Software Development Lifecycle.

Key responsibilities

• Act as the Security Champions Program Captain, guiding champions in identifying and remediating security issues.
• Perform threat modelling and security testing (SAST, DAST, SCA) on internal applications.
• Ensure compliance with internal standards, data‑governance frameworks, and personal data handling codes of practice.
• Conduct cybersecurity risk assessments and personal data protection impact assessments.
• Identify, track, and predict cyber threats targeting university assets and develop detection rules.
• Triage security alerts, investigate incidents, and coordinate response actions.

Required profile

• Proven experience in application security and DevSecOps within a complex organization.
• Strong understanding of cyber‑threat intelligence and risk assessment methodologies.
• Ability to communicate security concepts to development teams and senior stakeholders.

Required skills

• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Software Component Analysis (SCA)
• DevSecOps practices
• Threat modelling
• Cybersecurity risk assessment
• Personal data protection impact assessment
• Cyber threat intelligence analysis
• Security alert triage and incident response