The posting
Job Purpose
The IT Professional review the organisation’s IT policies, ensures access to systems and facilities is appropriate and controlled, manages the Company’s IT assets, and oversees end-user computing (EUC).
Key Responsibilities
1. IT Policy and Governance
- Review, develop and implement IT policies, standards and procedures for the Company (e.g. acceptable use, password, data protection, cybersecurity, backup, remote access, agentic/generative AI, IT asset management).
- Ensure IT policies and practices comply with the Personal Data Protection Act 2012 (PDPA) and other applicable regulations.
- Review policies at least annually, and when regulations, systems or business needs change.
- Communicate policies to staff and conduct periodic IT security awareness briefings.
- Monitor compliance with IT policies and report exceptions to the Financial Controller.
- Support internal and external audits on IT controls, and track remediation of audit findings.
2. Access Rights Management (Systems and Facility)
- Administer user access for onboarding, role changes and offboarding, based on approved requests.
- Conduct periodic user access reviews (e.g. quarterly) for key systems
- Review physical access rights to the office, including door access cards, keys and server/storage rooms, and remove access promptly for leavers.
- Apply the principles of least privilege and segregation of duties; flag conflicting access to the Financial Controller.
- Maintain access logs, review records and supporting evidence for audit purposes.
3. End-User Computing (EUC)
- Set up, deploy and maintain laptops, desktops, mobile devices, printers and peripherals for users.
- Ensure all devices are patched, encrypted and protected with endpoint security.
- Administer collaboration and productivity tools (e.g. Microsoft 365, Adobe Acrobat) and user accounts.
- Maintain an inventory of business-critical spreadsheets and EUC tools, and apply controls over versioning, access and changes.
- Provide first-level IT support to users and escalate to vendors where required.
4. IT Asset Management
- Maintain a complete and accurate IT asset register covering hardware, software and licences.
- Manage IT assets across their lifecycle: procurement, tagging, assignment, transfer, retrieval and disposal.
- Conduct periodic physical verification (stock-take) of IT assets and investigate discrepancies.
- Reconcile the IT asset register with the fixed asset register maintained by Finance.
- Track software licences and subscriptions to ensure compliance and avoid over- or under-licensing.
- Ensure secure data wiping and proper documentation before disposal or write-off of IT assets.
5. Vendor Management and IT Operations
- Manage IT vendors and service providers, including contracts, renewals and service levels.
- Support IT budgeting and procurement with the Financial Controller.
- Oversee data backups, and support business continuity planning and incident response, including data breach management.
Job Requirements
1. Education (Mandatory)
- Bachelor’s degree in Information Technology, Information Systems, Computer Science or a related discipline.
2. Experience
- Minimum 3 years of relevant experience in IT operations, IT governance or IT support.
- Hands-on experience in user access management and periodic access reviews.
- Exposure to IT audits or IT general controls (ITGC) is preferred.
3. Skills and Competencies
- Working knowledge of Windows, Microsoft 365, and endpoint management tools.
- Familiar with the Personal Data Protection Act 2012 (PDPA) and its application to IT systems and data handling.
- Good understanding of cybersecurity practices and IT asset management.
- Able to write clear policies and procedures for non-technical users.
- Organised and detail-oriented, with strong record-keeping discipline.
- Able to work independently and communicate effectively with management and vendors.



