Reporting to Information Technology (IT) management. This position is to lead the information security role and manage information security programs, in order to drive and maintain IT security to meet regulations, company standards and guidelines, as well as business needs.
Responsibilities:
- Lead the security officer role, help define and maintain security strategy and direction of all application and infrastructure and IT process.
- Lead IT security projects in building up and maintaining a secure IT environment to support business development and establishing corresponding security control process/procedures.
- Manage and coordinate application enhancements with application teams for security remediations.
- Provide advice for localization of security implementations that meet local business and technology requirements.
- Evaluates the feasibility of new security technology for business use and provides advice for the acquisition of new security technology.
- Manage IT Security Policy, Procedure, Standard and Process (GISP Annual Review, Coordination etc.).
- Responsible to security issue and vulnerability management (scanning, identification, notification etc.).
- Responsible to implement company’s security standards and assist in managing the change management and segregation of duties.
- Provides support in BCP/DRP.
Qualifications
- University graduate or above major in Computer Science or Information Security related field.
- At least 5 years of working experience in information security management or project management, preferably with relevant qualifications such as CISSP or CISA certifications.
- Good knowledge of network communication, Internet & Intranet, and project management
