Responsibilities:

• Manage cybersecurity incident with MSSP to verify, investigate and collaborate with various teams to report & resolve cybersecurity incidents in a timely manner
• Conduct security review on overall IT infrastructure
• Work with internal parties or vendor to conduct phishing test, IT security assessment, and penetration testing
• Liaise with different stakeholder to ensure cybersecurity best practice
• Participate in regular reviews and updates of cybersecurity policies, standards, procedures and guidelines
• Enforce company cybersecurity policies and compliance
• Assist in-house cybersecurity awareness training

Requirements:

• Degree in Computer Science / Information Technology or related disciplines
• Minimum 5 years of IT experience with 3 years in information security
• Professional qualifications (CEH, CISSP, CCSP, CCSK, CISA, OSCP, GIAC) is an advantage
• Good working knowledge & hands-on experience in cybersecurity solutions such as Anti-spam, Anti-DDoS, WAF, DNS, SIEM, UBA, Vulnerability Management, Next Generation Firewall & Endpoint Protection, Password Management, Hardening, & Encryption
• Good knowledge in security frameworks and standards such as ISO 27001, NIST, and CIS is an advantage but not necessary
• Experience in conducting security assessment and penetration testing
• Working experience in global enterprise environment
• Good analytical and problem-solving skills
• Team player with good interpersonal, communication and organizational skills