Reporting to the Director, IT Security and Risk, the Specialist, IT Security and Risk will work as part of the IT Security and Risk team to manage risks to the information assets and systems of the organisation by monitoring, preventing and responding to cybersecurity threats. This role will also include working with IT and the other departments to implement security controls, promote secure practices, and improve information security processes and policies.

In this role, you will:

• Analyse security of existing and new solutions (including 3rd party solution) and make recommendations for changes or improvements
• Investigate security incident and make decisions and recommendations for corrective actions
• Establish procedures, processes, policies and guidelines
• Ensure compliance to company policies and security best practices and interface with other teams and organisations as necessary
• Organise vulnerability assessment, penetration testing and drive the resolution of the risks identified
• Create content and operate SIEM solution
• Assist with the development and promotion of security awareness programs
• Identify, configure, deploy and manage security solutions or controls
• Assist with producing reports to communicate security risks and status to the different operations and upper management Encourage, recommend and implement continuous improvement

Let us know more about yourself if you have:

• Degree holder in Computer Science, Information Technology, Engineering or related disciplines
• A minimum of 2 years’ experience in Information Security is essential
• Strong attention to detail, meticulous, proactive and a good team player to achieve business goal 
• Excellent English communication skills both written and oral
• Adaptative, strong analytical skills and highly aware of Information Security details as follows:
• Security framework/standards
• Incident response
• Security controls
• Forensics analysis
• Log analysis
• Vulnerability assessment
• Identity management
• Privileged account management
• OS Security (Windows, Linux)
• Database security
• Network security (Firewall, IDS/IPS, router, DMZ)