保安风险评估及私隐影响评估顾问（Freelance／项目合约）

科擎科技有限公司（iGears）自2004年起为香港机构开发软件，现正招募Freelance保安风险评估及审计（SRAA）及私隐影响评估（PIA）顾问，以项目形式合作，按议定日薪计算。工作包括审阅文件及系统设定、绘制资料流程、制定风险登记册及报告，并与公司的首席评估员合作完成政府及企业项目。申请人须持有CISA、CISSP、CISM或ISO/IEC 27001主任审核员资格其中一项，并具最少三年相关经验。亦欢迎有兴趣以兼职雇员形式合作的人士申请。

关于 iGears

iGears Technology Limited (科擎科技有限公司) has built software for Hong Kong organisations since 2004, including listed companies, public-sector bodies, NGOs, education organisations and churches. We develop and run 20 of our own SaaS products, and our MobPage division has published 200+ mobile apps. With offices in Hong Kong and Edmonton, Canada, we are now building an in-house cybersecurity team to deliver penetration testing, security risk assessments and privacy impact assessments for clients, and to secure our own platforms.

合作方式

Independent contractor, paid per engagement at an agreed day rate. Most work is remote document and configuration review, with occasional meetings or on-site visits in Hong Kong. You choose which engagements to take. If you would prefer regular part-time employment instead, tell us in your application and we will discuss an employment contract.

工作职责

• Deliver security risk assessments and audits (SRAA) and Privacy Impact Assessments (PIA) for Hong Kong clients, including public-sector projects, working with iGears’ lead assessor
• Review documentation, architecture and configurations, and map personal data flows
• Produce risk registers, remediation plans and reports in iGears’ templates
• Work within each engagement’s confidentiality and data-handling rules

申请要求

• At least one of CISA, CISSP, CISM or ISO/IEC 27001 Lead Auditor
• At least 3 years in IT audit, security risk assessment or security consulting
• SRAA or PIA experience on Hong Kong public-sector projects
• Excellent written English
• Able to invoice iGears as a business (e.g. with a Hong Kong Business Registration Certificate)
• The right to work and do business in Hong Kong
• Willing to sign an NDA and to complete a background check where a client requires it

优先考虑条件

• A privacy certification such as CIPP/A, CIPP/E, CIPM or CDPSE
• Written Chinese, for bilingual deliverables
• Hands-on testing experience or OSCP
• Your own professional indemnity insurance

我们提供的待遇

• Paid per engagement at an agreed day rate
• Public-sector, enterprise and NGO assessment projects
• Flexible: you choose which engagements to take
• Part-time employment possible if you prefer it

申请前了解我们的平台

• AI: GenCMS (gen-cms.com), AskCore (askcore.org), HumanLevelUP (humanlevelup.org), PromoPilot (promo-pilot.org), Webetter (webetter.co), PhotoCen (photocen.com), Duckbot (duckbot.hk, preview)
• Business operations: fileEC (fileec.com), InsightBook (insightbook.org), HRFlowTech (hrflowtech.com), MemberSys (membersys.org), AppointSys (appointsys.org), Paperless.Cards (paperless.cards)
• Messaging and marketing: SendPromotion.Email (sendpromotion.email), SendSMS.click (sendsms.click), MarketHK (markethk.net)
• Education and community: LearnSys (learnsys.org), ITChurch (itchurch.online)
• Directories: E12 (e12.hk, e12.ca) and E12 Careers (jobs.e12.hk, jobs.e12.ca)

Full list: https://www.igears.com.hk/platforms/

申请方法

Email [email protected] with the subject “Freelance SRAA/PIA – Your Name”. Please include your CV, your certification numbers, your day rate in HKD, your availability (days per month), and a redacted sample report if you have one.

iGears welcomes applications from all qualified candidates.

Personal data you provide will be used by iGears Technology Limited only for recruitment. Providing it is voluntary, but we can’t consider your application without it. It may be shared with other iGears offices if you are considered for a role there. Data of unsuccessful applicants is destroyed within two years. To access or correct your data, or for our full Personal Information Collection Statement, email [email protected].

申请人提供的个人资料只会用作招聘用途。不获取录申请人的资料将于两年内销毁。如需查阅或更正个人资料，或索取完整的收集个人资料声明，请电邮至[email protected]。

https://e12.hk/pages/company.php?slug=igears-technology-limited

iGears Technology Limited (科擎科技有限公司) has built software for Hong Kong organisations since 2004, including listed companies, public-sector bodies, NGOs, education organisations and churches. We develop and run 20 of our own SaaS products, and our MobPage division has published 200+ mobile apps. With offices in Hong Kong and Edmonton, Canada, we are now building an in-house cybersecurity team to deliver penetration testing, security risk assessments and privacy impact assessments for clients, and to secure our own platforms.