Total 2 job vacancies by Asiapac Technology Pte. Ltd.

Job Summary:

We are seeking a highly skilled IT Security Officer to manage the security of our SaaS solutions, ensuring they meet industry standards for confidentiality, integrity, availability, and accountability. The ideal candidate will be responsible for developing security policies, conducting security assessments, coordinating incident response, and maintaining security documentation for our SaaS offerings. This role involves close collaboration with customers, SaaS providers, and external vendors to manage and mitigate security risks, ensuring a secure and compliant environment for all parties involved.

Key Responsibilities:

• Coordinate with external vendors and collaborate with customers and SaaS providers to conduct IT Security Risk Assessments. Identify security threats, assess risks, and propose mitigation strategies for approval by the customer.
• Coordinate the handling of security incidents, ensuring a timely response and resolution. Maintain a robust incident response process and documentation.
• Manage and coordinate regular security audits, vulnerability scans, and penetration tests. Consolidate findings, ensure proper remediation, and provide feedback to stakeholders on risk mitigation efforts.
• Maintain and update all security-related documentation, including policies, procedures, standards, and best practices. Ensure compliance with security frameworks such as ISO/IEC 27001, ISO/IEC 27018, SOC 2 Type 2, and CSA-STAR (Level 2).
• Continuously monitor the security posture of the SaaS solution and related ICT systems. Provide regular reports on security risks and mitigation actions to stakeholders and customers.
• Oversee the remediation of security vulnerabilities identified during security assessments, ensuring that appropriate actions are taken to address risks in a timely manner.
• Provide clear, concise security reports and recommendations to customers, ensuring they understand the security posture of the SaaS solution and any risks or issues that need attention.
• Take on ad-hoc security tasks as required to address emerging risks or assist with specific security projects or initiatives.

Qualifications:

• Minimum of 3 years of experience in IT security, particularly in enterprise systems, cloud infrastructure, or SaaS environments.
• A current professional information security certification (such as CISSP, CISM, CRISC, CGEIT, GSE) or equivalent is highly desirable.
• In-depth knowledge of IT security management and governance, risk assessment, incident response, vulnerability assessments, penetration testing, and security audits.
• Familiarity with international security standards and frameworks such as ISO/IEC 27001, ISO/IEC 27018, CSA-STAR, SOC 2 Type 2, NIST, and CIS.
• Strong interpersonal, written, and verbal communication skills, with the ability to explain complex security concepts to non-technical stakeholders.
• The position requires the candidate to be based locally.
• Strong problem-solving skills and the ability to make decisions under pressure.
• Proven ability to work effectively with cross-functional teams and external vendors.
• Attention to detail and a commitment to maintaining the highest standards of security.

Key Responsibilities in Solution Sales:

• Drive pre-sales activities in support of company sales growth and strategy for Network and security solutions e.g. Cisco/Meraki, Palo Alto, Fortigate, SASE stacks, CheckPoint
• Engage the customers the company would like to acquire with the support of the sales/marketing team and vendors to generate and engage these leads to present the company value proposition.
• Engage, Present, Analyse, Propose, Negotiate and Convert qualified prospects into deals
• Translate client requirements into solutions, and confident with an ability to handle pressure in critical situations by always ensuring that client requirements are met i.e., solutioning, POC verification, and traditional IT cloud solution design for public cloud projects
• Work with the PMO, project and services delivery team to develop business proposals, scope of work and costing within certain gross margins before presenting to the clients.
• Keep abreast and insight of competition, competitive issues and products.
• Improve governance (policies, standards, guidelines) on successful delivery outcomes e.g., industry compliances, delivery frameworks/playbooks, port-mortem review
• Work closely with all technical group to on-board technical knowledge of solution offerings, inclusive of vendors and partners as needed
• Support sales for all technical demo and Proof Of Concept (POC) requirement

Qualifications/Experience/Knowledge:

• Education/Qualification – Degree or other equivalent
• Work Experience – At least 8 years of experience
• At least 3 years of presales
• At least 5 years of network and security experience
• Design, Implement and support networks and security
• Technical knowledge of network architecture and security, routers, switches, provisioning, firewalls, SASE
• Well versed in rules, policies, ports, blocks and VPN technologies
• Hands on expertise with networking solutions e.g. Cisco/Meraki, HP, CheckPoint, Radware, Fortinet or equivalent
• Technical knowledge of cloud network architectures
• Technical knowledge of Security By Design Framework
• Experienced with newer Security principles like SASE (e.g. zScaler, ForeScout, BeyondTrust, Crowdstrike/Carbon Black, Cisco Umbrella/Duo)
• CCNP and CISA certification will be an added advantage
• Possess problem solving skills and able to prioritise and manage multiple tasks
• Strong communication skills
• Strong interpersonal and stakeholder management skills with ability to coordinate between technical and business teams
• Able to interact with various levels of internal and external stakeholders both in written and verbal forms
• Ability to efficiently understand client organisations and their business model and to tailor relevant processes to privacy requirements