Total 6 quality assurance manager job vacancies in Legal / Public / Security category in loyang south east

The Job

Specific (85%)

• Oversee and manage IT security, audits, and compliance, ensuring the implementation of robust security measures, adherence to regulatory requirements, and the effective management of risks, data protection, and business continuity planning. Recommend and implement innovative tools and solutions to improve the organisation's cybersecurity posture.
• Security Implementation: Implement and review IT security systems, tools, system patches, upgrades and solutions to safeguard application, system and infrastructure.
• System and Audit Compliance: Ensure continuous improvement and compliance of on-premises and cloud-based systems with applicable security and regulatory standards (e.g., ISO 27001, PDPA). Work with CISO, internal teams, cyber insurance, vendors and external auditors to meet compliance requirements with security policies.
• Security Operations: Manage, monitor, and establish security operations procedures, including incident response workflows, tabletop exercise and drill.
• Risk Management: Conduct regular assessments to identify IT risks and vulnerabilities. Plan and implement mitigation strategies to minimise security risks.
• Cybersecurity Awareness: Plan and conduct training programs to promote cybersecurity awareness among employees. Educate staff on best practices for secure system use and data protection.
• Data Governance & Protection: With closely with DPO to implement data security controls and ensure compliance with data governance frameworks and PDPA.
• Business Continuity Planning (BCP): Plan and put in place effective BCP plan for operational continuity with key stakeholders. Organise cybersecurity assessments and tabletop exercises to test and refine plans.
• Disaster Recovery Plan (DRP): Plan and put in place disaster recovery strategies and procedures for IT systems and data. Coordinate with application and infrastructure teams to ensure recovery objectives are met through regular testing and updates.
• Incident Response: Lead and coordinate incident response efforts, ensuring swift resolution of cybersecurity breaches. Establish and maintain post-incident reporting and root cause analysis processes.
• Assist Head of IT in the planning of annual IT budgets and projects planning.

General (15%)

• Work closely with the infrastructure and network team to ensure maximum system stability and uptime.
• Any other duties, tasks and non-IT related events as assigned by Head of information Technology.

To ensure guests would feel safe and secure in our hotel, appropriate security levels necessary. As Assistant Security Manager, you’ll be implementing safety and security policies in accordance with IHG standards – emphasizing to remain alert at all times to team members. By allowing guests to feel safe, it would encourage repeat visits. You will assist in the security operations and ensure there are enough coverage from Security Team to manage activities in the hotel.

A little taste of your day-to-day

Every day is different, but you’ll mostly be:

• Report to Manager all hotel property deficiencies and safety or security hazards
• Monitor staff clocking on and off duty
• Conduct regular locker checks with Human Resources
• Conduct trainings for security officers, hotel colleagues and random checks of key registers in various departments in the hotel and report on discrepancies
• Check all packages and passes of employees entering and leaving the building
• Manage team including training, coaching, counselling, disciplining, quarterly check-in, yearly review etc.
• Identify & train talents for promotion
• Liaising and contacting vendors
• Administer efficient roster planning and scheduling
• Responsible for the safety and security of guests and employees
• Implement procedures and initiate action immediately for security and emergency incidents
• Be thoroughly familiar with and guided by hotel’s emergency plan in any case of fire outbreak
• Maintain a vigil 24 hour surveillance on areas frequented by guests and all work areas
• Ensure no undesirables loiter in or around the hotel premises
• Prevent gambling and sabotage on hotel premises
• Assist superior in the preparation and management of the department’s budget and is aware of financial targets
• Liaise with other departments for security matters whenever necessary

What we need from you?

• Minimum ‘O’ Levels or equivalent
• Security License and relevant WSQ Training Certificate
• Minimum 2 years of related work experience

What you can expect from us

We give our people everything they need to succeed. From a competitive salary that rewards all your hard work to a wide range of benefits designed to help you live your best work life – including a full uniform, impressive room discounts and some of the best training in the business.

Our mission is to welcome everyone and create inclusive teams where we celebrate difference and encourage colleagues to bring their whole selves to work. IHG Hotels & Resorts provides equal employment opportunities to applicants and employees without regard to race, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or disability. We promote a culture of trust, support, and acceptance. Always welcoming different backgrounds, experiences, and perspectives.

IHG gives every member of the team the room they need to belong, grow and make a difference in a collaborative environment. We know that to work well, we need to feel well – both inside and outside of work – and through our myWellbeing framework, we are committed to supporting wellbeing in your health, lifestyle, and workplace.

So, join us and you’ll become part of our ever-growing global family.

Job Summary

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

Mandatory Skill-set

• 5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;
• Strong knowledge of ISO 27001:2022 standards and requirements;
• Experience in developing and maintaining comprehensive project plans, including timelines and milestones;
• Experience in managing ISO 27001-related risks and conducting internal/external audits;
• Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

Desired Skill-set

• ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;
• PMP, CISSP, CISM, or similar certifications are a plus;

Responsibilities

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

Job Description

The successful candidate will be part of the Safety, Security and Quality (SSQ) Development department. He/ She will manage SSQ’s systems, provide user support for systems and IT related matters, and work collaboratively with users to enhance existing systems and on development of new systems. Additionally, the incumbent will also be responsible for coordinating the annual finance and IT budgeting exercise for SSQ and for budget tracking and reporting as required.

Key Responsibilities

1) IT Project Planning & Budgeting

• Prepare, track and manage the IT project plan and budget for SSQ
• Co-ordinate, track and manage the SSQ Finance annual budget and reporting

2) IT & Systems Support

• Provide support for SSQ’s systems
• Access management for SSQ’s systems
• Maintain documentation on SSQ’s system processes
• Act as a liaison between users and ITD/ vendors for system related matters
• Co-ordinate IT asset and user ID recertification exercises
• Secretariat for divisional IT meetings

3) Systems Development & Project Management

• Work with users on business process re-engineering to streamline SSQ’s processes
• Work with SSQ users and other business units on business requirements and solutions for new or existing systems.
• Conduct user acceptance testing (UAT) to ensure the system/ enhancements meet the specified requirements.
• Change management and system implementation

4) Technology Awareness

• Keep abreast of key and emerging technologies to leverage on digital
• Engage sections within SSQ to discover opportunities where technology can be exploited

Requirements

• IT related university degree. Fresh graduates are welcome to apply.
• Experience in business requirements analysis, systems support & development, and project management
• Knowledge of Tableau and/ or Python would be advantageous but not compulsory
• Strong inter-personal and communication (verbal & written) skills
• Good planning and analytical skills
• Critical Thinker and Problem Solver
• Technologically Savvy
• Possess initiative, self-driven and able to work independently

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;

Strong knowledge of ISO 27001:2022 standards and requirements;

Experience in developing and maintaining comprehensive project plans, including timelines and milestones;

Experience in managing ISO 27001-related risks and conducting internal/external audits;

Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;

PMP, CISSP, CISM, or similar certifications are a plus;

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE's website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s Degree in Computer Science/Information Technology or equivalent.
• At least 5 years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:

- CompTIA Security+

- Certified Information Systems Security Professional (CISSP)

- Certified Information Systems Auditor (CISA)

- Certified Information Security Manager (CISM)