You will be tasked on the following:
- Align and support the tactical adoption of Regional IT Security initiatives
- Ensure IT Security assessments and the respective security testing are conducted for all major projects and initiatives
- Implement Network and Application Security Monitoring for key security events
- Handle the IT Security Incident Management, incident discovery and recovery, and incident reporting. Acting as Primary Support during security incident, reporting repeated/related security incidents to Information Security Manager (ISM) and Group
- Manage Privileged Account Management System (CyberArk). Ensure privileged IDs are properly used, monitored and manage Direct and implement the necessary controls and procedures to protect information systems assets from unauthorized access
- Review Privileged ID for critical systems AS/400, Life/Asia, CM/WF, Windows Domain on quarterly basis.
- Perform and ensure that IT Security vulnerabilities assessment and penetration test are done on schedule.
- Support the remediation of IT Security vulnerabilities and penetration results
- Review the configuration of network devices, servers, applications, and databases in compliance with the Group baseline standard on semi-annual basis.
- Conduct Cyber Security Drill to designed and examine the proficiency of the people and processes
- Work closely with Tech Risk Team in the identification of IT Security Risks
We are looking for IT Security professional who has experience in a global company, working with regional stakeholder preferred.
- 4-8 years of experience, and preferred certification like CEH, CISSP, or the like
- Have experiences in Business Continuity and IT Risk Management
- Proficient in the following IT Security skills:
- Infrastructure, Network, and Application Security
- Operating System Security on OS/400, AIX, Unix, Linux, and Windows
- Database Security on Oracle, DB2, and Microsoft SQL Server
- Encryption and Middleware technology
- Penetration Test, Vulnerability Assessment, and Hacking Skills
Good exposure with regional team, and company-wide projects in IT Security improvements
Michael Page