Assist in the evaluation of the effectiveness of the security control on various components including network, server, virtualization technology, application development, change management, information classification, risk management, business continuity, and incident response.
Monitor and document physical security access, periodic user access review for critical applications.
Create reports and presentations regarding IT security compliance.
Maintains quality service by establishing and enforcing organization standards.
Manage and lead team daily operation, training and presentation the new IT security operation PPMs to relevant departments.
Assist on the tracking of audit findings and respective compliance as committed by various units in IT.
Assist in the annual testing and review to assess risks on the network and infrastructure and recommend necessary changes to ensure security and business continuity.
Follow-up the reporting of security incidents and assist in the investigation of such to achieve proper solutions.
Provide Information Security Awareness Training to staff, perform another task assigned by the management
Job Requirement
Bachelor degree of IT, Computer Science or other related fields.
Extensive experience in IT Security and banking, with a focus on IT assurance and IT process, risk management.
Good technical backgrounds with Windows, Linux, Network, and web/program.
Good understanding of Technology Risk and Information Security policies and standards.
Developed knowledge in Regulatory Compliance obligations.
Strong analytical and problem-solving skills to develop acceptable solutions for the business.
Knowledge of ITIL, COBIT, PCI DSS, and other security frameworks.
Skills in security assessment and Penetration test, knowledge of IT Security auditing processes.
Good verbal and written English skills to present to senior management.
Ability to drive and manage their own workload and operate within defined deadlines.