[LPS] Infosec Officer

Why Work at Lenovo

We are Lenovo. We do what we say. We own what we do. We WOW our customers.

Lenovo is a US$83 billion revenue global technology powerhouse, ranked #153 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world’s largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo’s continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).

Description and Requirements

JD for Desktop Engineer – IT Information security (InfoSec)

Role Summary
The Information Security Officer (ISO) will be responsible for maintaining the security posture of scientific IT endpoints, responding to security incidents, and ensuring compliance with IT security policies and standards. The ISO will work closely with the departments to provide comprehensive support in various security operations.

Key Responsibilities

• Perform security patching, hardening, and remediation for End user computing environments such as Windows OS, Mac OS, O365 and other standard desktop software and applications.
• Investigate and respond to security incidents and service requests related to end-user computing, including email phishing and analysis, coordinating mitigative measures and preparing official incident reports.
• Analyse advisories published by ITSS CERT and/or product manufacturers, perform risk assessments, and execute recommendations.
• Provide consultation, evaluation, and implementation of IT security controls, including cross-border travel evaluations and pre-emptive checks against IT security policies.
• Conduct briefings to reinforce IT cybersecurity hygiene practices, policy updates, and control implementation for new hires and existing staff.
• Evaluate and implement IT security tools, processes, and procedures, provide extended support for security applications, and handle software whitelisting requests.
• Responsible for evaluating risk statements based on IT security measures, providing recommendations on security strategies, assessing compliance with SOPs and guidelines, and conducting vulnerability checks to ensure effective risk mitigation.

Qualifications

Bachelor’s degree in information technology, Computer Science, or related field.

• Minimum 3 years of hands-on desktop support experience supporting Windows and macOS operating systems.
• Experience with end point security related support, such as handling IT security incidents, email phishing and analysis, mitigative measures and preparing official incident reports.
• Professional certifications such as Microsoft certifications, CISSP, CISM, or equivalent is preferred.
• Experience in endpoint security, incident response, & IT security policy implementation.
• Familiarity with industry IT security standards and compliance requirements.
• Strong communication and presentation skills.