The Job
Execute enterprise-wide cybersecurity programs for both IT and OT.
Enhancing, reviewing and formulating of Information Security related p..
The Job
Execute enterprise-wide cybersecurity programs for both IT and OT.
Enhancing, reviewing and formulating of Information Security related procedures.
Work with Security Operations Center to verify and close SOC alerts, including blocking of blacklisted IP and investigate anomalous activities.
Lead and perform POC/testings of Cybersecurity IT/OT products and services.
Lead and organize vulnerability assessment and penetration testing with both internal and external teams and follow up with remediations and closures.
Lead the team to administer various security systems such as EDR, WAF, vulnerability scanner, IPS, Privileged Access Management, secure internet access platform, including onboarding of new systems and accounts.
Participate in cybersecurity drills and exercises.
Attend to threat intel notifications and regulators' requests and lead the team to fulfil the recommendations.
Lead cybersecurity team in Incident Response.
Provide cybersecurity guidance such as Security by Design to project teams.
Any other Cybersecurity & Compliance related functions that may be assigned.
The Requirements
Minimum 6 years of related working experience in Information Security & compliance.
Possess Security related certifications such as CISA, OSCP, CEH, CISM, CISSP would be an advantage.
Good understanding on Security Architectures.
Good understanding in OT Security.
Experienced in Secure-by-Design Principal and secure coding.
Hands-on experience in networking, system administration, application project development.
Willingness to hands-on as part of mentoring the team to meet its objective in a collective manner.
Highly resourceful individual who possess strong analytical skills.
Well verse in security related products such as firewall, Intrusion Protection System, etc.
Well verse in Security Standards such ISO27001, IEC62443, NIST & CyberSecurity Act. etc.
Well verse in MITRE ATT&CK framework.
Good understanding of various regulation/laws related to cybersecurity.
Able to explain technical ideas to non-technical audience such as Senior Management and other Internal Stakeholders.
