Job Summary

The Senior IT Security Specialist, part of the Information Security team in the IT Department, is responsible for supporting the team in protecting computer assets by establishing and enforcing system access controls, providing security incident response, conducting security awareness activities, and maintaining disaster preparedness, as well as providing thought leadership within the organization for all teams.

Job Description

• Secure and manage cloud environments (e.g., AWS, Azure, Google Cloud, Huawei Cloud).
• Develop and implement IT security policies, procedures, and plans.
• Conduct system security reviews and assess defenses against emerging threats.
• Lead vulnerability assessments, penetration testing, and secure code reviews, identifying and addressing gaps.
• Collaborate with infrastructure, application teams, and stakeholders to provide security consultancy and assurance.
• Deliver IT security awareness programs, including training, phishing simulations, and incident response exercises.
• Monitor and address information security risks, findings, and assessments.
• Investigate cyber security alerts, identify root causes, and recommend improvements.
• Handle IT security incidents, ensuring effective containment and mitigation strategies.
• Leverage expertise in tools like EDR/XDR, PAM, IAM, NAC, MFA, and SASE for security enhancement.
• Research new security technologies and vulnerabilities to bolster the organization’s defenses.
• Oversee security projects, procurement, and reporting to management and regulators.

Requirements

• Bachelor’s degree in Computer Science, IT, or equivalent, with 6+ years in Cybersecurity.
• Strong knowledge of cloud security (AWS, Azure, Microsoft 365, SaaS) and frameworks like NIST CSF, ISO27001, and PDPA.
• Preferred certifications: CISSP, CISA, CISM, CEH, CREST, or CHFI.
• Exceptional communication, problem-solving, and analytical skills.
• Proactive, positive team player with the ability to engage at all organizational levels.