SCE, HKBU 香港浸會大學持續敎育學院招聘
Information Technology Manager (Cybersecurity and Network) (Ref. No.: 26270193)
Reporting to the Senior Information Technology Manager, the appointee will support the planning, implementation, operation, and continuous improvement of the School’s cybersecurity and network infrastructure. The role will assist in strengthening cybersecurity controls, managing network security operations, supporting identity and access management, coordinating security assessments, and ensuring that IT infrastructure and network services are secure, reliable, and aligned with institutional policies, compliance requirements, and operational needs.
This is a continuous-based position.
Key responsibilities
Cybersecurity Operations and Compliance
Formulate, implement, maintain, and review cybersecurity policies, standards, procedures, and operational controls to strengthen the School’s overall security posture.
Manage cybersecurity risk management, vulnerability management, threat monitoring, incident response, and security remediation activities.
Oversee the operation and administration of cybersecurity solutions, including endpoint protection, email security, identity protection, cloud security, data protection, and security monitoring tools.
Review security alerts, guide incident investigation, and coordinate response and remediation actions with internal teams, vendors, service providers, and relevant stakeholders.
Maintain and enhance cybersecurity documentation, incident response procedures, disaster recovery arrangements, audit evidence, and governance-related records.
Plan and promote cybersecurity awareness initiatives and drive the adoption of good security practices across the School.
Network Infrastructure and Network Security
Lead the planning, design, implementation, administration, and continuous improvement of the School’s network infrastructure and network security environment.
Manage firewalls, VPN, wireless networks, switches, routers, network segmentation, secure remote access, and related network services to ensure secure and reliable connectivity.
Oversee network security controls, including access control, firewall rule review, secure configuration, network monitoring, capacity review, and vulnerability remediation.
Manage network planning, performance monitoring, troubleshooting, service improvement, and resilience enhancement to support business and academic operations.
Coordinate with internal teams, vendors, and service providers on network projects, infrastructure migration, cloud connectivity, and integration with institutional systems.
Review and maintain network diagrams, configuration records, operational procedures, service documentation, and change records to support effective governance and service continuity.
Lead or participate in business continuity, disaster recovery, and resilience planning for network and security infrastructure.
Required skills and experience:
At least 8 years of relevant experience in cybersecurity, network infrastructure, network security, system administration, or related IT disciplines, with proven experience in team supervision, project management, or service ownership.
Strong hands-on and management experience in planning, implementing, administering, monitoring, and continuously improving cybersecurity controls and network infrastructure.
Sound knowledge of cybersecurity governance and operations, including risk management, vulnerability management, threat monitoring, incident response, security remediation, audit support, and compliance requirements.
Strong understanding of network technologies and network security, including switches, routers, firewalls, VPN, wireless networks, network segmentation, secure remote access, access control, network monitoring, and secure configuration management.
Experience in leading or coordinating security assessments, audits, vulnerability scans, penetration tests, firewall rule reviews, configuration reviews, remediation planning, and follow-up actions.
Practical knowledge of identity and access management, Single Sign-On, Multi-Factor Authentication, privileged access control, Microsoft 365, Entra ID, Azure, endpoint protection, email security, cloud security services, and related security controls.
Experience in developing, reviewing, and maintaining technical documentation, network diagrams, configuration records, operational procedures, incident response procedures, audit evidence, service records, and governance-related documentation.
Proven ability to manage internal users, IT teams, vendors, and service providers for daily operations, troubleshooting, project implementation, procurement support, contract follow-up, service delivery, and continuous service improvement.
Good project management, planning, prioritisation, stakeholder engagement, and vendor coordination skills, with the ability to deliver assigned initiatives within agreed scope, timeline, budget, and quality expectations.
Strong analytical, problem-solving, communication, coordination, leadership, and documentation skills, with the ability to explain technical matters clearly to both technical and non-technical stakeholders.
Self-motivated, detail-oriented, responsible, and able to work independently, supervise assigned tasks, and collaborate effectively with internal teams and external parties.
Good command of written and spoken English and Chinese, including fluent Cantonese.
Education and certifications:
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or a related discipline, or equivalent practical experience.
Professional certifications preferred, including one or more of:
CISSP;
CISM;
Microsoft Certified: Cybersecurity Architect Expert;
CCNA, CCNP, or equivalent networking certification;
Fortinet, Palo Alto, Check Point, Cisco Security, or equivalent firewall/network security certification;
ITIL Foundation or above.
Shortlisted candidates will be invited to attend a written assessment.
Subject to the decision of SCE and the new post-secondary college and other factors which may include (but are not limited to) availability of funding and performance, an offer of appointment may be made by the new post-secondary college (upon its successful registration) following the end of the fixed term contract.
Salary will be commensurate with qualifications and experience.
Systems Analyst (Application Development & Support) (Ref. No.: 26270115)
The appointee is expected to perform the following duties:
We are building a high‑performance IT team to support the ongoing digital transformation and future growth of the School. We are looking for a strong, motivated candidate who is passionate about application design, system development, and delivering meaningful business impact through technology.
This role offers an opportunity to become a core member of our IT application team, working closely with business stakeholders to enhance mission‑critical systems and deliver modern, scalable solutions. The successful candidate will play an important role in supporting, maintaining, and modernizing legacy applications while contributing to new system development, supporting the transformation journey in a complex and evolving environment.
Key Responsibilities:
The candidate will focus on application support, design, development, and system enhancement, contributing to DevOps practices that streamline deployment, improve system stability, and support continuous improvement
Map, analyze, and document interfaces between legacy systems and new platforms, ensuring seamless integration and efficient, reliable data exchange
Perform end‑to‑end software development lifecycle activities, including requirements gathering, system design, development, testing, implementation, and ongoing maintenance
Design and develop innovative application solutions and contribute to product and system enhancement initiatives
Enhance and modernize existing legacy applications to support institutional transformation and evolving operational needs
Prepare and maintain comprehensive testing and system documentation, ensuring quality, reliability, and adherence to delivery timelines
Produce clear and user‑friendly manuals to support effective adoption and optimal utilization of new systems
Collaborate closely with IT colleagues and business users on institution‑wide IT initiatives and projects
Perform other IT projects and assignments as assigned
Requirements:
Bachelor’s degree in computer science, Information Technology or related discipline
At least 5 years of relevant work experience in end‑to‑end application development, covering front‑end, back‑end, and database design and development, with experience in responsive design and system integration. (Candidates with less relevant experience are welcome to apply and may be considered for an associate-level role)
Strong hands-on solid proven experience in the following programming languages: Java, PHP, Python, RESTful API, SQL and shell script;
Good knowledge of any of the following is an advantage: Docker, Kubernetes, MS Power Platform, PowerBuilder, Sybase database, Jira and test automation tools;
Excellent analytical and problem-solving skills, with the ability to identify and address complex system issues; and
Possess solid written and verbal communication skills to both technical and non-technical audiences, and strong commitment-to-task. Proficiency in both English and Chinese is required.
Shortlisted candidates will be invited to attend a written assessment.
Subject to the decision of SCE and the new post-secondary college and other factors which may include (but are not limited to) availability of funding and performance, an offer of appointment may be made by the new post-secondary college (upon its successful registration) following the end of the fixed term contract.
Salary will be commensurate with qualifications and experience.
Assistant Information Technology Manager (Application Development & Delivery) (Ref. No.: 26270185)
We are seeking a motivated and hands-on professional with a strong background in application design and system development. Working closely with business stakeholders, the successful candidate will support, enhance, and modernize critical business applications while contributing to new solution development in a dynamic and evolving environment.
This is a continuous-based position. The initial appointment will be offered on a fixed-term contract ending in August 2027. Re-appointment upon contract completion will be subject to mutual agreement, institutional needs, and satisfactory performance.
Key Responsibilities:
Application Development & Solution Delivery
Lead the design, development, enhancement, and maintenance of institutional applications, including timetabling, room booking, and other business-critical systems.
Drive end-to-end solution delivery, including requirements gathering, solution design, development, testing, deployment, and post-implementation review to ensure successful business outcomes.
Design and maintain application architecture, data models, security controls, and system integrations across legacy and modern platforms using APIs, middleware, and batch interfaces.
Provide hands-on application development and technical leadership when required, including code review, solution review, troubleshooting, and establishing development standards and best practices.
Coordinate and oversee the work of internal developers and external vendors to ensure timely and quality delivery of application solutions.
DevOps, Release & Quality Management
Lead the Application DevOps function, including release management, version control, CI/CD processes, environment management, and change governance to ensure reliable and efficient application delivery.
Establish and continuously improve software development lifecycle (SDLC) processes, development standards, and operational procedures.
Define and manage testing strategies, including unit testing, system integration testing (SIT), user acceptance testing (UAT), and test automation initiatives to ensure solution quality.
Application Support & Service Operations
Oversee application support and service operations, including incident management, problem management, root cause analysis, performance monitoring, and continuous service improvement to meet service level objectives.
Ensure operational readiness for new and enhanced applications through the preparation of technical documentation, runbooks, support procedures, and effective knowledge transfer to support teams.
Lead issue investigation, incident triage, and preventive improvement initiatives to enhance application stability, reliability, and user experience.
Other Duties
Perform other IT projects and assignments as assigned.
Requirements:
Bachelor’s degree in Computer Science, Information Technology, or a related discipline.
At least 8 years of relevant experience in application delivery, DevOps, and system development with system integration exposure.
Proven end-to-end ownership of the application lifecycle in production—solution design, development, enhancement, performance optimization, CI/CD and release/cutover, monitoring, incident resolution, and ongoing support.
Strong hands-on programming in Java, PHP, Python, SQL, and RESTful APIs, including application integration and database interaction; experience in plugin/extension development, secure API design/consumption, data modeling/ETL, and integration via web services and SSO/OAuth2/SAML.
Knowledge of the following technologies and tools is an advantage: Docker, Kubernetes, MS Power Platform, PowerBuilder, Jira, and test automation tools.
Strong troubleshooting and support capability across application, integration, and database layers, with the ability to diagnose root causes and implement sustainable solutions.
Demonstrate proven business analysis capability: elicit and validate requirements; translate them into user stories with acceptance criteria; model current/future states and perform gap/impact analysis
Excellent analytical and problem‑solving skills, with the ability to identify, assess, and resolve complex system and operational issues.
Strong written and verbal communication and stakeholder management skills, with the ability to communicate effectively with both technical and non‑technical audiences; proactive, self‑motivated, and committed to service quality and delivery.
Shortlisted candidates will be invited to attend a written assessment.
Subject to the decision of SCE and the new post-secondary college and other factors which may include (but are not limited to) availability of funding and performance, an offer of appointment may be made by the new post-secondary college (upon its successful registration) following the end of the fixed term contract.
Salary will be commensurate with qualifications and experience.