Responsibilities:

• Conduct IT operation security reviews on existing IT infrastructure to identify security risk exposed to internal and external threat.
• Establish IT security policy, hardening guidelines, standard process and procedures and to be implemented within the organisation.
• Conduct SOP walk-through with stakeholders to ensure proper workflow implemented and maintain good IT governance practice within the organisation.
• To work with various stakeholders to implement security controls to address the risks identified.
• Regularly review IT policies and propose changes where appropriate with the latest cybersecurity trend.
• To be able to conduct vulnerability assessment within the organisation IT infrastructure and manage vulnerabilities identified to eliminate or reduce risks.
• Conduct annual information security audit in compliance with company security policy, guidelines and standard.
• Keep up to date with latest security trends, threats and control measures.
• To involve in new IT project initiation to review and identify possible IT security risk.

Qualifications and Profile:

• Degree in Computer Science / Information Technology or equivalent.
• Relevant certifications such as CISSP, CISA, CISM is greatly advantages.
• Minimally 5 years' experience in IT security-related role, with experience in the following:
• IT security policy formulation and implementation.
• Conducting IT audit and control implementation.
• Cloud security such as AWS, Azure and Alicloud.
• Exposure to both JIRA and Confluence.
• Possess good risk management skill.
• Basic knowledge on application security and code security (Java and c#).
• Strong understanding of cybersecurity framework and international standards (ISO, NIST, SOX, COBIT)
• Understand Organization Policy such as Active Directory / Database Security / Credential & SSO
• Have understanding about how a software development firm is run, it's environment and the security that we are facing