Responsibilities:

• Assist top management on cyber security, IT governance and digital transformation.
• Lead group level cyber security strategy to support business direction, included budgeting and cost management.
• Lead group level GRC (governance, risk and compliance) framework and operation.
• Lead group level cyber security projects and local implementation.
• Lead cyber security monitoring and incident response operation.
• Manage group and local team on cyber security enhancement.
• Manage vendor for project implementation and global support.
• Manage assessment and maintain security level per market best practice (e.g. NIST, ISO, PCI-DSS, GDPR, etc.).
• Provide security advice to system, application, infrastructure, data governance and security projects, include define security requirements and input into planning of projects.
• Maintain group technology risk standard, group policy and procedure.

Requirements:

• Bachelor's or master's degree in computer science, information systems, cyber security, or a related field.
• At least 8 years of relevant experience in cyber security with at least 3 years in managerial role.
• Knowledge of information technology operation (e.g. cloud, data, system, application and infrastructure, etc.)
• Knowledge of cyber security assessment (e.g. security audit, vulnerability assessment, penetration testing, etc.)
• Knowledge of cyber security product (e.g. Anti-Virus, End-Point Solution (EDR), WAF, DLP, SIEM, Cloud etc.)
• Knowledge of market best practice and framework (e.g. ITIL, ISO, PCI-DSS, NIST, etc.)
• Certification in cyber security is an advantage (e.g. CISSP, CISM, CISA, ISO Lead Auditor, Qualified Security Assessor (QSA), etc.)
• Certification in project management and framework is an advantage (e.g. PMP, CPM, CSM, PRINCE2, CompTIA Project+, etc.)