• Initiate, lead and coordinate actions to strengthen and monitor information security and cyber security controls.

• Undertake information security review in businesses and functions to ensure compliance with internal policies and external regulations

• Respond to and investigate information security incidents and breaches in order to reduce/contain potential damage.

• Act as liaison with relevant regulators and/or enforcement agencies in relation to information security matters.

• Perform periodic assessment and provide information for risk profiling reporting.

• Perform security and risk assessment based on Cyber Resilience Assessment Framework

• Develop the relevant staff with the right kinds and level of skill

• Monitor the service quality of the team & ensure team members have strictly followed the standard regulatory requirements

• Oversee information security audits, whether by performed by organization or third-party personnel

• Manage and configure physical security, disaster recovery and data backup systems

• Provide training to information security personnel during onboarding

• Evaluate department budget and costs associated with technological training

• Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement

• Other tasks assigned by Manager/HOD

• Bachelor’s degree in IT, Computer Science or equivalent professional qualifications

• At least 5 years in technology audit or cyber and information security;

• At least 2 years in a team lead/management role

• In-depth knowledge in IT security services

• Certified in CISA or related professional certification.

• Ability to communicate effectively with senior management and other departments

• Creative, dynamic, flexible, self‐direct and self‐motivated team player

• High proficiency spoken and written of English

• Autonomous, quick learner, and pro‐active

• Effective communication and management skills