Contract: 1 year, Renewable
Experience: 9+ years
Desired Skill:
1.Degree in Computer Science, Information Systems, Engineering or equivalent
2.At least 9 years of IT security experience in areas of security governance, risk management, application security design, security project management, security operation, cloud security technologies
3.Strong risk management principles, risk articulation skills, cloud technologies, network security, data protection 4.Knowledge of cloud platforms such as AWS, Azure or Google cloud is desirable
5.Professional security certification is preferable, such as CISSP, CISM, CISA, CCSP or other similar security certifications
6.Self-motivated with the ability to work independently and as a team member with minimal direction
7.Strong interpersonal and stakeholder management skills 8.Good written and communication skills
Job Responsibilities:
* Identify and assess Cyber risk(s). Propose treatment plan(s) to mitigate Cyber risk(s) identified.
* Provide guidance to Business Services Group (BSG) in ensuring that projects/systems comply with security policies and the relevant legal and regulatory frameworks (such as PDPA or Cybersecurity Act) throughout the product lifecycle
* Perform adequate risk management, including identification, assessment and provide treatment of security risks associated with systems handled by Business Services Group. Risk assessment must be performed in accordance with the organization’s cybersecurity risk management framework