Job Scope

A senior professional within InfoSec Management who responsible for managing technical domain of the company-wide information security. Developing and maintaining best practice security measures ensuring robust security compliance throughout the whole company. This role requires a proactive individual with a strong technical security background and a passion for continuous improvement.

Job Responsibilities

- Review the company-wide information security policies, procedures and standards to ensure the alignment with market standards and Group policies
- Provide leadership and consulting to multiple interdepartmental security stakeholders including guidance and instruction to ensure all IT and OT critical systems/applications compliance with information protection from government ordinance and industry regulations 
- Oversee continuous monitoring of IT and OT systems/applications for security breaches, unauthorized access, malicious activities, vulnerability patching, etc.
- Identify potential security vulnerabilities and assess risks, advise system owners to deploy appropriate mitigation and protection 
- Lead incident owners in responding to security incident or cyber-attacks, analyzing the causes and collaborating with system/application owners to implement remedial action and improvement plan
- Conduct deep-dive checking and audit of daily operation by reviewing system logs, participating implementation, preview & post-check of critical configuration change in view of security

Job Requirements

- Degree in Computer Science, Information Technology, Computer Engineering or related disciplines

- 5+ years of increasingly responsible experience in information & cybersecurity in enterprise environment covering application systems and Infrastructure with proven record in information security management role

- Hand on experience of the security tools in Incident Response (SIEM, SOC, Sentinel), vulnerability management (Nessus, Defender, Qualys), Network & Endpoint security (Firewall, Zscaler, EDR), Identity and Access (PAM) and Cloud Security (Azure and AWS)

- Holder of Security certification such as CISSP, CISM is a MUST
- Holder of Certification such as CCNP, MCSE is preferrable 

- With experience in Expert engineer level on security technology solutions for the company across a range of information security areas such as IDS/IPS. SIEM, Firewall, and antivirus
- Capable to perform operating system, network and application vulnerability assessments
- Practical knowledge on intrusion detection methodologies, techniques & tools for detecting host and network-based intrusions
- Good knowledge of ITILv3, ISO27001, cybersecurity technologies and emerging threat vectors
- Able to work under pressure and handle multi-tasks without compromising quality
- Be open mind and willing to take challenge from adopting new technologies and re-engineering

Fringe Benefits:

• Hybrid work model - 2 days work from home/week

• 16 days Annual Leave

• 14 weeks full-paid maternity leave

• 5 days Paternity Leave

• Birthday Leave

• Performance Bonus

• Medical & Dental Benefits

We offer rewarding career with attractive remuneration package to the right candidate. Interested parties please send full resume with your availability, present and expected salary, and quoting reference number attention to Talent Acquisition team by clicking Apply Now button.

Only short-listed candidates will be notified.

We are an equal opportunity employer and welcome applications from all qualified candidates. Information provided by applicants will be treated in strict confidential and will only be used for recruitment related purposes. Personal data provided by job applicants will be used strictly in accordance with the employer personal data policies.
All information on unsuccessful candidates will be deleted from our files within 12 months.