IT Manager (Data Protection) in the Information Technology Services (Ref.: 530122)
Information Technology Services provides central IT services to support the University’s teaching, learning, research and administrative activities. ITS is transforming its organization to support its new strategic development and strategic adoption of new technologies. We are seeking high caliber candidates to support different IT services and new development. Information about ITS can be obtained at https://www.its.hku.hk/.
The Role
The appointees will be responsible for data protection & privacy areas and promotion of its awareness:
- Organize regular events to engage users and raise awareness in personal data protection & privacy with content updated to Data Protection Office website
- Formulate & maintain data lifecycle policies, governance & procedures related to data protection & privacy.
- Assess third-party data protection and privacy practices; Implement third-party governance and vendor management; Introduce a vendor assessment toolkit; Review contractual agreements.
- Engage external relevant parties, including legal counsels, to cover non-Hong Kong legal practices; external senior privacy committee members to share industry privacy best practices for training.
- Liaise with regulators (Hong Kong & outside of Hong Kong) when relevant to enhance Data Protection knowledge, awareness and compliance in HKU.
- Work with teams to implement additional data protection and security measures with a matrix for effectiveness.
- Oversee the process of privacy impact assessments (PIAs) for new systems and processes; Enforce PIA for projects that involve Personal Identifiable Information (PII).
- Monitor data breaches and incidents and report to senior management.
- Make suggestions to improve training effectiveness and recommend data protection/crisis simulation or cybersecurity crisis management.
Qualifications and Qualities
- Bachelor’s degree in Computer Science / Computer Engineering / Information Technology or equivalent experience in a related field;
- At least 7 years of solid experience in IT industry, especially in information security with AI focus and data protection areas; and with close ties to data privacy and cybersecurity organizations for industry standards and guidelines;
- Strong interpersonal skills, adept at engaging stakeholders (university and external), possessing business acumen, and proficient in presentation skills;
- MBA, PMP or IAPP (International Association of Privacy Professionals) certification is an advantage.
What We Offer
The appointment will be made on fixed-term full-time contract for 2 years and commence as soon as possible with the possibility of renewal subject to satisfactory performance. A highly competitive salary commensurate with qualifications and experience will be offered, together with contract-end gratuity and University contribution to a retirement benefits scheme at 10% of basic salary. Other benefits include annual leave and medical benefits.
How to Apply
The University only accepts online application for the above posts. Applicants should apply online at the University’s careers site (https://jobs.hku.hk) and upload an up-to-date CV. Review of applications will start as soon as possible and continue until October 15, 2024, or until the posts are filled, whichever are earlier.
The University is an equal opportunities employer and
is committed to equality, ethics, inclusivity, diversity and transparency
