Company Security Executive (Cyber)

The roles and responsibilities of the Company Security Executive are as follow:

1. The candidate will report to the Company Security Manager to help ensure Cybersecurity compliance for the Business Unit according to policies and SOPs
2. Candidate is to assist the Security Manager to build security awareness and culture through conduct of regular and scheduled briefing, training and broadcast reminders

1. Candidate will perform the following:
   1. Ensure compliance with regulatory standard (CIS, ISO27001 and MSDs) etc
   2. Analyze security threats and vulnerabilities across IT infrastructure, recommend and implement risk mitigation strategies
   3. Conduct vulnerability assessments and penetration testing on network infrastructure, identifying and mitigating security risks
   4. Conduct security audits and prepare reports for the Company Security Manager, highlighting areas for improvement
   5. Manage and implement technologies including hardware modules, firewalls, SIEM, EDR, PAM and others
   6. Monitor network traffic using SIEM tools, identifying and responding to potential security incidents
   7. Monitor security alerts and respond to incidents, performing root cause analysis and implementing corrective actions
   8. Track and remediate vulnerabilities, ensuring system meet security patching and compliance standards
   9. Assist in the development and testing of disaster recovery and incident response plans
   10. Collaborate with cross-functional teams to assess security needs and deploy appropriate security solutions