MANAGER (INFORMATION SECURITY) [JOB CODE 2104422P]

Responsibilities:

Leads a team to work with in-house corporate IT, SOC and relevant stakeholders to continuously improve the corporate security posture.
Manage information security governance for enterprise information security through regular reviews on corporate systems to ensure compliance with corporate security policies and regulatory requirements.
Create and manage information security and risk management awareness training programs.
Take the lead in investigating corporate incidents relating to information security; identifying the threats and impact to organization; planning and prioritizing remediation and corrections. Regular reporting or presentations to management on the development of the incident when necessary.
Facilitate and work with relevant units to attain/maintain various international accreditations such as ISO 27001, ISO 27017, ISO 27018, CREST and SOC2 etc.
Evaluates new and innovative information technology concepts, approaches, methodologies, techniques, services, guidance, and policies that will constructively transform the information security posture of the company. Makes recommendations regarding best practices
Works with relevant stakeholders to incorporate corporate accreditations and best practices as business strategies.

Bachelor’s Degree in Information Security/Cyber Security/Computer Science or equivalent
Relevant certifications such as CISSP, CISA or similar
At least 5 years of relevant experience
Strong understanding of enterprise information security and information risk management.
Excellent analytical skills to correlate reports and indicators so as to identify risks, weaknesses or gaps, and recommending possible treatments.
Lead and influence cross-functional teams to achieve corporate goals.
Effective in both written and verbal communications; able to present to management. Good interpersonal skills and strong team player

EA Licence No: 22C1055

EA Personnel Registration No: R2095104