IT Security Analyst

About the role

The IT Security Analyst will lead the development and maintenance of IT security policies, drive cybersecurity projects, and manage risk across HAECO’s Hong Kong operations. Working closely with internal IT teams and external service providers, you will ensure the protection of aviation MRO systems and data.

Key responsibilities

• Review and update IT security policies to align with business needs and regulatory requirements.
• Coordinate security incident response with IT teams and service providers, and oversee SOC alert handling.
• Implement and configure cybersecurity solutions such as endpoint protection, SIEM, DLP, WAF, and network firewalls.
• Lead governance, risk management and compliance activities, including risk assessments and mitigation planning.
• Support cloud security initiatives on Azure, including CSPM, DSPM, PIM, NSG and Azure Firewall configurations.

Required profile

• 5‑8 years of experience in cybersecurity or IT security project delivery.
• Bachelor’s or master’s degree in Computer Science, Computer Engineering or related field.
• Proven experience with security operations, SOC processes and infrastructure administration.
• Familiarity with AI security governance and related risk frameworks is a plus.

Required skills

• Endpoint security, SIEM, DLP, Web Application Firewall (WAF), Identity Governance and Administration (IGA).
• SASE, Zero Trust Network Access (ZTNA), Network Access Control (NAC), email security.
• Host and network firewalls, SOC alert handling.
• Server, network and firewall administration, cloud computing (Azure).
• Azure security tools: CSPM, DSPM, Privileged Identity Management (PIM), Network Security Groups (NSG), Azure Firewall, Front Door WAF.
• Application security testing tools such as DataDog and Trivy.

What we offer

• Opportunity to work in a leading global aviation MRO environment.
• Collaborative team with exposure to cutting‑edge security technologies.
• Professional development and certification support.