The posting
Job Responsibilities
Security Governance, Policy & Compliance:
• Develop, maintain, and update IT security policies, standards, technical baselines, Standard Operating Procedures (SOPs), and security controls in line with regulatory requirements and industry best practices.
• Conduct periodic security reviews and enforce compliance with IT security policies, standards, controls, and secure configuration requirements, including CIS hardening.
• Support cybersecurity risk management, audits, tabletop exercises, third-party assessments, and remediation initiatives arising from audit or assessment findings.
• Provide security advisory and recommendations to IT, application, infrastructure, cloud, project teams, and external service providers to embed security-by-design principles in projects and system implementations.
• Assist with personal data protection and PDPA-related security matters, including policies for handling personal data and identification of security risks affecting personal data.
Security Operations, Monitoring & Incident Response:
• Monitor the organization’s exposure to cybersecurity threats, security events, and overall security performance, and analyse the current security posture.
• Monitor and analyse security events through SIEM and related security platforms, perform event triage, investigate suspicious activities, and escalate critical threats and incidents in a timely manner.
• Manage cybersecurity incidents end-to-end, maintain incident records, perform analysis, recommend effective containment and remediation actions, and track corrective actions to closure.
• Stay current with emerging threats, vulnerabilities, and threat intelligence, and disseminate relevant security advisories, directives, and patch recommendations to stakeholders.
• Support continuous improvement of security monitoring, detection use cases, alert quality, and response workflows.
Vulnerability Management & Security Assessments:
• Plan and manage vulnerability assessments, penetration tests, and other security assessments across applications, networks, servers, endpoints, and cloud environments.
• Analyse vulnerability assessment results, recommend remediation actions, track remediation status against required timelines, and report outstanding risks to management.
• Perform security and vulnerability checks on computing devices before connection to the corporate network to ensure compliance with cyber hygiene requirements.
Network, System, Endpoint & Privileged Access Security:
• Manage, configure, and optimize security tools and platforms to ensure effective integration with network and IT infrastructure.
• Manage security controls across on-premises and cloud environments, including network, systems, endpoints, identity, and runtime security.
• Manage endpoint security controls including antivirus/EDR and manage privileged identities and privileged access using PAM solutions such as CyberArk or equivalent.
• Perform regular reviews of user, privileged, on-premises, and cloud accounts, including access rights, access logs, and service-provider monitoring reports.
• Support secure network design, system hardening, access control, and security monitoring across enterprise environments.
Security Product & Service Provider Management:
• Identify security enhancements and work with third-party suppliers to design and implement cybersecurity projects, including preparation of test packs, system testing, implementation, and operational handover activities.
• Manage security service providers supporting IT systems and networks, monitor their performance, review submitted security reports, and ensure compliance with security policies and agreed service levels.
• Coordinate lifecycle management, security posture reviews, testing, and monitoring for security technologies such as WAF, DDoS protection, SIEM, EDR/XDR, PAM, and vulnerability management platforms. Security Awareness, Documentation & Reporting:
• Conduct information security awareness and training for employees and third-party service providers to strengthen security culture and policy compliance.
• Maintain accurate documentation for security incidents, vulnerability assessments, security checklists, controls, policies, standards, and operating procedures.
• Prepare regular security reports covering security performance metrics, incident trends, vulnerability remediation, compliance status, risks, and mitigation progress for management and stakeholders.
• Collaborate effectively with internal IT teams, business stakeholders, cloud service providers, and external vendors on cybersecurity initiatives and operational security matters.
Education & Experience:
• Bachelor’s degree in computer science, Information Technology, Cybersecurity, Business IT, Information Systems, or a related discipline.
• Minimum 5 years of relevant experience in cybersecurity, security operations, IT security controls, IT system auditing, policy implementation, or related IT infrastructure security roles.
• Hands-on experience managing security operations, vulnerability management, incident response, access control, and security technologies in enterprise environments.
Technical Knowledge & Skills:
• Hands-on experience with security tools such as SIEM, WAF, antivirus/EDR/XDR, PAM, vulnerability assessment tools, and related security platforms.
• Strong understanding of vulnerability management, threat analysis, incident response processes, secure network design, endpoint security, identity/access security, and system hardening.
• Good understanding of IT infrastructure systems, on-premises and cloud security, security logging and monitoring, and secure configuration standards.
• Familiarity with security frameworks and standards such as ISO 27001, NIST CSF, CIS benchmarks, and applicable regulatory or risk-management requirements.
• Knowledge of cloud security and security monitoring in platforms such as Microsoft Azure, AWS, or equivalent is advantageous.
• Familiarity with automation, scripting, IaC security, CI/CD security, or security orchestration/automation is advantageous.
Professional Certifications:
• Professional cybersecurity certifications such as CISSP, CISM, CISA, or equivalent are preferred.
• Cloud or security operations certifications such as ISC2 CCSP, Microsoft Security/Azure Security certifications, AWS Certified Security, GIAC, or equivalent are advantageous.
Competencies & Attributes:
• Strong analytical, investigative, and problem-solving skills with attention to detail.
• Good written and verbal communication skills, with the ability to explain technical security risks and recommendations clearly to technical and non-technical stakeholders.
• Able to work independently with minimal supervision and collaborate effectively in a dynamic, fast-paced environment.
• Proactive and continuous-improvement mindset with a strong sense of responsibility, integrity, and ownership.
