Job Summary
The Security Architecture and Solutioning role provides the architecture and solution in the development and implementation of cybersecurity strategies. He/she will be involved in creating clear and engaging architecture planning, strategizing, implementation and coordinate the acquisition, implementation and building of cybersecurity system/tool; assisting in the execution of security system and ensure smooth transition of the system to Security Operation team.
The role is required to collaborate with internal and external stakeholders (Technology Office, Enterprise Risk, Strategy & Transformation, the authorities) to effectively achieve the desire result.
The role must be instrumental in assisting other technology projects to meet regulation and responsible to authorities’ enquiries.
He/she has passion for cybersecurity, with a strong desire to learn and grow in a dynamic environment.
The personnel have exceptional cybersecurity and communication skills, a general understanding of cybersecurity principles, and the ability to translate complex technical concepts into clear and concise messages for all relevant stakeholders.
Job Responsibilities/Key Tasks
Cybersecurity Architecture and Solution
· Design, review and plan for security solution in the space of technology and follow up with respective end users and IT personnel to bring them to logical closure.
· Track and monitoring the setting up of security solution and follow-up and remediation wherever necessary.
· Ensure solutions are within the allocated budget and cost effectively managed and implemented.
· Ensure appropriate technology strategies are planned and managed to ensure effectiveness of security controls and recommend control improvement to increase effectiveness.
· Lead improvement on sustainable cyber security controls in system, in compliance to security regulations and frameworks, including leading annual security tests on production systems.
· Understand evolving threats by learning from Cyber security industry & regulatory body. Plan for implementation within the organisation.
Cybersecurity Advisory and assessment
· Support technology project and assist in advisory to the project teams, ensuring compliance to the relevant requirements.
· Support Technology project team in meeting stringent cybersecurity requirement which may be imposed upon by the customers and ensure all information are provided in good factuality and accuracy.
· Assess and evaluate of policy deviations and review deviations before recommending for approval; ensure that the justification for policy deviations is assessed and risk minimised.
CyberSecurity Risk management
· Assess the cyber security risk of third-party vendors with an appropriate level of detail; Identify controls to address gaps in third party vendor relationships; Monitor the implementation of controls
· Act as the application security gatekeeper for the development of application.
· Liaise with the application project team on Penetration test findings closure and improvement; track finding and ensure timeliness closure.
Professional Qualifications & Relevant Experience
· Bachelor Degree in Cybersecurity, Risk or related field
· 8 to 10 years of relevant experience in cybersecurity / architect roles
· Proficient in MS Office Applications / Microsoft Power Platform Applications and social media platforms
· Positive attitude and willingness to learn
· Strong written and verbal communication skills
· Basic understanding of cybersecurity principles and best practices
· Ability to explain technical concepts to non-technical audiences
· Strong attention to detail and a commitment to maintaining accuracy and consistency in all communications.
· Self-motivated and proactive, with a demonstrated ability to work independently and take ownership of assigned tasks.
· Ability to manage multiple tasks simultaneously and carry out tasks which are assigned by the Management.
