Total 185 Manager Information Security Analyst job vacancies in Malaysia

Job Description:-

- To conduct vulnerability assessment/penetration testing in its skillset and experience to gain access and exploit vulnerabilities in the company’s infrastructure.
- To maintain the Security Operations Manual up to date for use by all IT security personnel to cover duties.
- To conduct computer forensic analysis and understand the impact on the business.
- To research tools, techniques, countermeasures and trends in network vulnerabilities, data hiding, and network security.
- Continuous development of threat hunting and proactively identifying security incidents before they occur.
- To design and support the overall cybersecurity architecture of the enterprise systems environment.
- Applying social engineering and phishing techniques to manipulate employees into exposing or revealing information to compromise their machines.
- Maintaining standard information security policy, procedure, and documentations.
- Monitor identity and access management, including monitoring for abuse of permissions by authorised system users.
- Involve in IT Security project management and assist in identifying and evaluating vendor IT security solutions.
- To ensure compliance with the provisions of the IT Security Policies and regulatory guidelines.
 

Job Requirements:-

- Professional Certificate/Diploma/Degree in Computer Science/Information Technology or equivalent.
- 8 to 10 years related experience in IT Security and with proven minimum 4 years working experience in managing IT security projects.
- Industry recognized security certifications, such as CISSP, CEH etc. preferred.
- Knowledge in IT Security methodology, Bank Negara Guidelines, PCI DSS, Risk - Management and IT auditing will be an added advantage.
- Technical knowledge of database and operating system security.
- Knowledge of network protocol (WAN,LAN) and security concerns within TCP/IP environment.
- Thorough understanding of the latest security principles, techniques and protocols.
- Familiar with web related technologies.
- Ability to present ideas in business-friendly language.
- Ability to prioritize, track and manage tasks and action items.
- Excellent communication, writing, analytical thinking, strong team player and an individual contributor too.

Perks & Benefits

• Annual leave
• Medical
• Nearby public transport

職位描述：-

- 根據其技能和經驗進行漏洞評估/滲透測試，以存取和利用公司基礎設施中的漏洞。
- 保持安全操作手冊處於最新狀態，以供所有 IT 安全人員履行職責時使用。
- 進行電腦取證分析並了解對業務的影響。
- 研究網路漏洞、資料隱藏和網路安全的工具、技術、對策和趨勢。
- 持續發展威脅追蹤並在安全事件發生前主動辨識。
- 設計和支援企業系統環境的整體網路安全架構。
- 應用社會工程和網路釣魚技術來操縱員工暴露或洩漏資訊以危害他們的機器。
- 維護標準資訊安全政策、程序和文件。
- 監控身分和存取管理，包括監控授權系統使用者濫用權限的情況。
- 參與 IT 安全專案管理並協助識別和評估供應商 IT 安全解決方案。
- 確保遵守 IT 安全政策和監管指南的規定。

工作要求：-

- 電腦科學/資訊科技專業證書/文憑/學位或同等學歷。
- 擁有 8 至 10 年 IT 安全相關經驗，並擁有至少 4 年管理 IT 安全專案的工作經驗。
- 有業界認可的安全認證，如CISSP、CEH等優先。
- 了解 IT 安全方法、國家銀行指南、PCI DSS、風險管理和 IT 審計將是一個額外優勢。
- 資料庫和作業系統安全的技術知識。
- 了解 TCP/IP 環境中的網路協定（WAN、LAN）和安全性問題。
- 透徹理解最新的安全原理、技術和協議。
- 熟悉Web相關技術。
- 能夠用商業友善的語言表達想法。
- 能夠確定優先順序、追蹤和管理任務和行動項目。
- 優秀的溝通、寫作、分析思維、強大的團隊合作精神和個人貢獻者。

津貼和福利

• 年假
• 醫療的
• 附近的公共交通

• Years of experience: 8-14 years

• Must be able to operate an intrusion detection system and identify any suspicious traffic or activity on the network.

• Need to know best practices for identity and access management.

• Must be able to handle the complete threat spectrum and compliance of the organization's security policies or standard security practices.

• Must be able to analyse SIEM tools and services

• Should have a good working knowledge of the test and QA phase of internal development.

• Good to have CISSP/SSCP etc

Job description

Primary Objectives of Position

Manage information security operation to ensure the safe use of information systems and assets as well as protect information assets against cybersecurity threats.

Manage various stages of projects in conception and initiation, planning, execution, performance/ monitoring, and project closure.

Job Responsibilities

• Establish, implement, and maintain a sustainable information security framework that effectively addresses evolving and diverse cybersecurity threats.

• Perform risk assessments on IT systems, network and applications for vulnerabilities and implement security controls to reduce identified risks to an acceptable level.

• Perform information security audits to determine security violations and inefficiencies and recommend effective security controls.

• Hold management review and lessons learned meetings to help improve information security measures and incident handling process.

• Monitor security alerts/ logs from IT systems, network and applications against baselines and gather publicly available information to identify precursors or indicators of cybersecurity attacks.

• Contain and eradicate cybersecurity incident effectively to prevent recurrence and restore systems and recover normal operations as quickly as possible.

• Publish security advisories, conduct security workshops, and share lessons learned to improve users’ awareness regarding information security matters.

• Oversee information security investigations with internal team, funders, and local authorities and/ or 3rd party providers.

• Participate in various meetings and share compliance/ performance reports and audit findings to Management teams.

• Liaise with internal and external stakeholders in implementing information security related measures or projects.

The above activities are no means exhaustive and are subjected to amendment whenever is needed.

Job Requirements

Minimum Education / Qualifications

• Degree in Information systems or equivalent.

Minimum Years of Relevant Experience

• 2 years’ experiences in setting up and managing information security operations.

Knowledge/Skills

• Experiences in ISO27001 ISMS, CIS, and/ or NIST frameworks.

• Experiences in managing threat, vulnerability and incident, and understanding in digital forensic investigation, tools, and processes.

• Knowledge in security protections, practices, or solutions like Firewall, IDS/ IPS, network segmentation, DLP, WAF, NAC, WiFi security, cryptography, endpoint protection, OWASP, etc.

• Certifications in CISA, CISM, CISSP and/ or PMP will be an advantage.

• Knowledgeable in Microsoft Office and other Windows and web applications.

Attributes (functional or leadership competencies)

• Meticulous and hands on.

• Excellent communication and written skills.

• Strong analytical and problem-solving skills.

• Team player with excellent interpersonal skills and multi-tasker.

• Customer-centric and proactive.

At this role level, you will: be involved in strategic decision-making and be central to assuring services to improve the security and resilience of our organisational infrastructure. lead the information security and business continuity team, including managed services and accountability for performance and quality measures. regularly collaborate and find agreement with senior stakeholders, providing direction and challenge be proactive in identifying problems and translating these into non-technical descriptions that can be widely understood. Skills required for this role Leadership Provide leadership and direct line management for staff in the Information Security and Business Continuity team and vendors / managed service providers and provide subject matter expertise to wider directorate service teams. Mentor, coach, and line manage teams and services (including managed services) - developing their skills and capabilities to meet the needs of the organisation and healthcare partners, as well as building on existing recruiting capabilities to address new needs or skill gaps. Develop and lead the implementation of long-term strategic plans for information security and business continuity, identifying risks and issues and developing mitigation strategies with clear outcome measures. Communicating between the technical and non-technical Identify the needs of business and technical stakeholders, ensuring information security and business continuity principles are embedded in all we do. Effectively manage stakeholder expectations Demonstrate excellent communication skills and can manage difficult conversations or negotiations, including highly complex, sensitive and/or contentious information. Present, interpret and explain complicated information to large groups of people to influence understanding and change. Represent information security and business continuity on various internal and external groups, including Trust board-level and/or committee meetings. Data protection and freedom of information Act as the main point of contact for data protection or freedom of information queries and issues Instigate, commission, oversee or conduct information system searches and investigations to meet data protection or freedom of information needs. Provide advice and expert knowledge to projects / programmes / operational services to ensure that information systems are designed to meet data protection requirements. Financial management Understand how to balance cost versus value. Consider the impact of user needs. Responsible for the budget for your services (pay and non-pay) and know how and when to escalate issues. Contribute and develop economic investment cases for information security, including business planning processes covering sounds financial models for implementation, and running of the services. Governance and assurance Evolve and define governance, taking ownership and responsibility for ensuring adherence to IT requirements in the Data Security & Protection Toolkit (DSPT), and other appropriate governance frameworks. Take responsibility for working with and supporting other staff in wider governance. Assure services across sets of services. Use tools such as standards, guardrails, and principles to effectively govern delivery. Information Security and Business Continuity Demonstrate in-depth knowledge of information security and business continuity, including analysing + testing Trust-wide capabilities and identifying improvement areas. Ensure that our security posture is maintained, monitored/measured and be responsible for leading interventions where standards are not met (example: security patching) Develop, maintain, and improve our data and technology Business Continuity & Disaster Recovery Plans, enabling us to respond to and recover from business continuity events ensuring we can provide a safe level of service to the public during the event, and ensuring we can manage the recovery process and incorporating learning. Lead, plan and execute all required vulnerability audits, security & penetration tests, forensic audits, or related investigations ensuring all findings are evaluated, and where appropriate, fed into continuous service improvement activities to continuously improve our security posture and resilience. Responsible for supporting the design, development, testing and transition of any new information security services into operations. Provide subject matter expert leadership in major incidents and events caused by or affecting information security. Act as the Problem Owner for information security and business continuity matters (ITIL) Responsible for the Information Security Assessment lifecycle, and Information Risk Management documentation for IT systems and data Responsible for ensuring that access to Trust systems is appropriately managed, regularly audited, and lead investigations as required. Provide expertise on information transfer agreements with partner organisations in support of the Information Governance function. Partner with the Organisational Development and Information Governance teams in the planning, development and delivery of information security awareness and training. Making and informing risk-based decisions Act as a point of escalation Be trusted by senior risk owners as an expert in information security and business continuity. Apply risk methodologies at the most complex levels of risk. Policies, procedures, and processes Responsibility for information security and business continuity for data and technology, ensuring that policies and procedures are both effective in terms of protection, but realistic and enabling for the business. Develop, maintain, and improve all directorate information security and business continuity policies & procedures, considering regional and national policies and practices, ensuring that both manual and electronic information across the Trust is included in-scope. Risk management Responsible for the management of information security and data and technology business continuity risks, including identifying new risks and ensuring we are actively managing risk controls. Service focus, monitoring, and reporting See the bigger picture and investigate how to get the best out of the underlying services to support the organisations strategic objectives and business priorities. Monitor and enforce information security and business continuity principles, policies, and procedures both on a regular basis, and on-demand (as/when required) Take complex reporting data from multiple sources, compare, and interpret against service baseline and industry standards and provide a supporting narrative. Responsible for service reporting for information security and business continuity, in-line with Trust-agreed reporting measures Strategy Apply strategy, using and challenging patterns, standards, policies, roadmaps, and vision statements. You can provide guidance. Challenge and lead changes to policy and processes that support business outcomes, with business architecture, legal and political implications. Ensure alignment of operating procedures and policies in-line with national, sector (ICS) and industry best practice where it makes sense to do so. Understanding the whole context Understand trends and practices outside your team and how these will impact your work. See how your work fits into the broader strategy and historical context. Consider the patterns and interactions on a larger scale. User focus Explain the difference between user needs and the desires of the user. Champion user research to focus on all users. Prioritise and define approaches to understand the user story, guiding others in doing so. Community of practice Responsible for research and development activities relating to the highly complex field of information security and business continuity. Develop and maintain a network of professionals to enable continuous learning and a community which can share, learn, and keep up to date on the information security and business continuity landscape, within the wider Digital, Data and Technology teams. Other Duties: Deputise for other members of the CIO Leadership Team as required. Occasional work may be required outside of core business hours to support major projects / programmes. All other reasonable requests

Summary

Working as part of the information security office within the IT department at Pacific Prime CXA, the GRC (Governance, Risk and Compliance) Manager will be responsible for leading the day-to-day IT compliance, data governance and IT risk management functions. Primary responsibility will include defining, creation, management and maintenance of IT and organizational policies and standards in support of legal and regulatory compliance needs as well as general IT and organizational information security controls and practices.

Responsibilities

• Establishing corporate information security policies, standards, guidelines, baselines and practices that protect the integrity and confidentiality of information and network infrastructure.
• Develop procedures and controls to assure compliance with applicable regulatory and legal requirements as well as good business practices.
• Proactively identify audit and compliance related issues to reduce the risk of security exposures, gaps in the design and operating effectiveness of controls whilst seeking opportunities for continuous improvement.
• Driving IT security programs in line with internal and external standards and ensuring compliance with in-country regulatory requirements.
• Maintaining oversight to enterprise-wide security technologies, actively monitoring & responding to security events.
• Develop and maintain standards and controls to ensure the protection of data based on classification.
• Work directly with business units to identify critical data and ensure appropriate data classification and protection standards are implemented.
• Manage the attestation program for all IT controls to support assurance and alignment across all information security stakeholders.
• Support internal and external audit process for relevant compliance concerns including PDPA, GDPR, MAS TRM, ISO27001, etc.
• Perform and evaluate information security risk assessments for various information systems and processes, including annual penetration tests.
• Develop, monitor, track and report against IT Security metrics and KPIs that help the IT Infra understand threats, vulnerabilities and risks associated with protecting information across the enterprise and plans to mitigate those risks.
• Develop and maintain the IT Risk Register to support ongoing tracking and management of all identified risks and issues and to ensure adequate and timely resolutions to all audit/review issues relating to security.
• Lead the development and operation of third-party vendor risk assessment, management and due-diligence program.
• Conduct client meeting and drive all the questions arising from client relationship teams. This includes completing client’s info security questionnaires and liaising with clients on all such requirements within tight deadlines.
• Formulate, lead and communicate security goals and objectives based on an integrated understanding of business priorities, security vision and strategy.
• Providing security related support to IT and business team users and facilitate recommendations on future technical trends/directions that encompass multiple systems and teams to meet business critical initiatives.
• Point of contact to assist and advise on Information Security related matters

Requirement

• BSc in Computer Science or equivalent; with 5+ years of relevant working experience in IT governance, risk, and compliance management.
• ISACA / CISM / CISSP Certification.
• Strong understanding of fundamental information security concepts and technology.
• Familiarity with ISMS and security frameworks, particularly NIST Cybersecurity Framework.
• Understanding of Information Security principles, IT infrastructure (including operating systems, applications, communications and network protocols), architecture elements of Identity Access Management (IAM), network security, data security/DLP, cryptography, logging and monitoring.
• Experience in security design, threat modelling and risk assessments.
• Candidate should be fully aware of the current and emerging security solutions available in the industry.
• Ability to be self-motivated, flexible and be able to drive and manage multiple tasks and priorities on very tight deadlines in a fast paced and rapidly changing environment.
• Strong interpersonal and collaboration skills with the ability to develop, maintain and foster constructive relationships with others.
• Excellent written and oral communication skills.
• Effective communication and analytical skills
• Strong work ethic with attention to detail.

Responsibilities:

• Primarily supporting the Company in all IT and ERP matters:-
• Administer and support network infrastructure andconfiguration, maintenance of hardware and software, applications and IT infrastructure
• Support for CCTV and VoIP phones
• Provide helpdesk support to all users
• Manage email configurations and issue troubleshooting for Outlook
• Perform routine system backup
• Respond promptly to incident to incident. Evaluate,conduct root cause analysis and implement preventive measures
• Planning and updating windows patches and ensure that latest patches are applies
• Responsible for network security and ensure that the network security compiles with IT security requirement
• Maintain and update documentation of IT systems.
• Perform asserts and inventory management
• Responsible for ERP applications, in-house applications and inventory management
• Work and co-ordinate with vendors for requisitions of IT equipment, repairs, RMA and project implementations
• Propose and craft IT policies and processes
• Remote support for branch offices
• Coordinate with Vendor on ERP Syteline issues
• First level support for end users

• Project Management experience with thorough planning and tracking skills
• Excellent communication skills interacting with senior stake holders
• Ability to create detailed status reports understanding audience expectations
• Jira skills with hands on experience in creating dashboards and automated reports
• Very good understanding of project life cycle and delivery governance experience
• Natural ability to collaborate and work together with internal and external teams
• Experience with Payments and Cards is MUST

JOB DESCRIPTION:

Division: Regional Business Engineering & Information System Division

Reports to: Managing Director of ASEAN Regional Organization (Regional Functional Center)

Functional relationships:

- ASEAN and India Sales and Marketing companies

- ASEAN manufacturing companies

- Other group companies

- Each IT team and business unit

POSITION PROFILE:

The General Manager of the Information Systems Department is tasked with developing and executing the regional IT strategy, overseeing the regional IT team, and ensuring optimal IT services for the ASEAN and India regions in close collaboration with Japan headquarters.

Key Duties & Responsibilities:

• Align the regional IT policy, strategy, and direction with the global strategy through effective communication with executives in Japan HQ and other group companies.
• Customize and implement global policies from Japan HQ to meet local requirements in the ASEAN and India regions.
• Lead the recruitment, development, and retention of the regional IT team in alignment with the human resource strategy.
• Ensure clear and regular communication to provide IT services to all business units in the ASEAN and India regions.
• Uphold operational excellence across all levels of IT services and operations in the ASEAN and India regions.

Ability/Competency required:

• Bachelor's or master's degree in any field.
• Minimum of 15 years of experience in the information technology field.
• Experience in IT governance, including corporate management, technology evaluation, and vendor management.
• Proficiency in Japanese for communication with HQ in Japan and business-level English skills for communication with Japan and other overseas affiliates.
• Relevant certifications such as ITIL, CISSP, or PMP are preferred.
• Strong logical thinking, attention to detail, and proactive attitude.
• Excellent communication, conceptual, and interpersonal skills.

About the company Davidson Technology are currently partnering with Fraser Coast Regional Council to secure their new Manager, Information Technology who will lead their IT function through their next level of maturity. The Fraser Coast, one of Queensland's oldest and fastest-growing regions, thrives on manufacturing, agriculture, and a burgeoning tourism and health sector. Situated near South-East Queensland, it offers proximity to major cities while maintaining a serene environment. The Council's overarching goal is 'Building better communities together,' fostering collaboration across all roles to enhance residents' quality of life. About the Role The Manager, Information Technology at Fraser Coast Regional Council plays a pivotal role in overseeing the direction and operational management of the IT function. This involves developing and managing operational plans to meet business unit goals, collaborating with stakeholders to ensure IT's role in supporting operational outcomes, and establishing and maintaining ... Click here to view more detail / apply for Manager, Information Technology

About the company Davidson Technology are currently partnering with Fraser Coast Regional Council to secure their new Manager, Information Technology who will lead their IT function through their next level of maturity. The Fraser Coast, one of Queensland's oldest and fastest-growing regions, thrives on manufacturing, agriculture, and a burgeoning tourism and health sector. Situated near South-East Queensland, it offers proximity to major cities while maintaining a serene environment. The Council's overarching goal is 'Building better communities together,' fostering collaboration across all roles to enhance residents' quality of life. About the Role The Manager, Information Technology at Fraser Coast Regional Council plays a pivotal role in overseeing the direction and operational management of the IT function. This involves developing and managing operational plans to meet business unit goals, collaborating with stakeholders to ensure IT's role in supporting operational outcomes, and establishing and maintaining ... Click here to view more detail / apply for Manager, Information Technology

Main Duties:

Administration

 

• Responsible for general management of IT staff members.
• Ensuring the all software database is stored and saved efficiently which provides scope for easy retrieval of information on time.

 

Customer Service

 

• Responsible for efficient Management & resolving IT related issues of external as well as internal customer.

 

Financial

 

• Give cost effective IT solutions
• Negotiate with vendor for best services
• Identify appropriate technologies, cost, vendors, and effective use of IT resources.

 

Operational

 

• Daily checking of database back up
• Give support for all software’s like PMS, POS, Material Control, SUN etc
• Protect all servers & desktops by updating & monitoring daily antivirus status
• IT inventory inspection which is submitted by IT executive, recommend the replacement of required IT product.
• Ensure that all software’s licensing are adhered to law

 

Personnel:

• Ensure each subordinate receives whatever training is necessary for job competence & assist or guide them to get the job completed effectively
• Develop a team of multi skilled people over the period and have regular discussion
• Ensure a harmonious environment and close coordination with all operating and support functions
• Ensure that all team members are kept well informed of department’s objective & policies

Occupational Health & Safety

Employee Responsibility

All employees to safeguard their health and safety and of others as well in the workplace 

 

Replacement and Temporary Mission:

Be ready and responsible for any job, which may be assigned by the Management.

Primary Responsibilities

Security Operation 

• Train Security Officers in the operation of surveillance equipment, written reports, record keeping, patrol and first aid procedures
• Disseminate all information by the Management to team members
• Conduct patrols and regular checks on all Security Officers to assure that they are alert and discharging their duties efficiently and effectively
• Conduct all criminal investigations, put up accompanying investigation papers and reports cases which occur within the Hotel
• Conduct surveillance on hotel staff to ensure that they abide by the House Rules; Keep tag on movements of staff who are classified as suspects under investigations
• Control and direct all emergency personnel traffic in response to fire, bomb threat, police assistance, injury or illness
• Inspect all Security equipment to ensure that they are in working order and that all cameras are correctly focused
• Conduct routine day-to-day checks of the following items to ensure that they are properly maintained, issued and accounted for;
• Pocket books;
• Security Desk Occurrence Book;
• Gate Passes and Security Passes;
• Keys and Key Registers;
• Post allocation for hotel and External Security
• Cultivate Informers with the intention of obtaining information of security interest that may be of immediate or future use to the Department for prevention and detection purposes
• Record all activities involving the Department in the Daily Security Report
• Provide security coverage for VIP guests
• Update Director of Security constantly on all matters of security interest affecting the Hotel and the Department
• Always be on-call, including off-duty hours, for any emergency that may Team Management
• Conduct performance review with the team
• Identify and develop team members with potential
• Constantly monitor team members’ appearance, attitude and degree of professionalism
• Conduct detailed induction programs for new employees
• Develop, conduct maintain all staff training programs for team members, focusing on their development needs, providing them with new skills to meet the changing needs of the business
• Prepare weekly staff schedules keeping in mind anticipated business, operating budgets and standards of service  
• Other Responsibilities
• Be fully conversant with hotel fire & life safety/emergency procedures
• Comply with hotel and department policies and procedures at all times
• Attend all briefings, meetings and trainings as assigned by management
• Report for duty on time wearing clean and complete uniform at all times
• Maintain a high standard of personal appearance and hygiene at all times
• Perform other reasonable duties assigned by the Management of the Hotel
•  

We are recruiting for a Security Manager to lead, co-ordinate and manage the provision of the site security service at the client's site; to ensure a safe and secure working environment for all staff and visitors

To manage a team of trained site personnel to provide a delivery of service that exceeds service level agreements

Be the point of contact for all security related matters ensuring service delivery and adequate prompt response to all incidents

Hours 40hrs per week

Applications will only be accepted with an up to date CV

Your Time at Work
Must have the Security Industry training basic qualification or equivalent industry experience.
Day to day operational management of the security department:
Daily duties include:
-Day to day rostering of personnel - This would consist of all management of holidays, sickness, sickness tracking, return to work interviews ensuring service level agreement is maintained.
-Maintain correct resource levels on all sites to ensure that both contractual and temporary work orders are satisfied to the customer's expectation and within budgetary guidelines.

Our Perfect Worker
A consistently smart appearance.

· Reliability, self-motivation, and ability to use own initiative and work without supervision.
· The ability, tact, and diplomacy to deal with people at all levels including the client, the client's staff, and visitors, in all circumstances including emergencies and other times of stress.
· Interpersonal skills.
· Self-confidence and an interest in development.
· A good level of physical fitness to enable the post holder to perform emergency response duties efficiently and effectively.

Key Information and Benefits
Key Information and Benefits
5.6 weeks paid holiday (8 of these will be in lieu of bank holidays - subject to shift pattern and accrual)
Workplace pension scheme
Life assurance benefit
Financial support for SIA Licence & renewal
Contributory Healthcare Scheme
Eyecare vouchers
Employee Discount Schemes
Progression, training & development opportunities
Refer a friend scheme

About Staffline
Staffline is the biggest recruiter in the UK and Ireland, and we believe in putting people first. Every day, we help tens of thousands of people find work in logistics, food, transport, retail, and agriculture. We can do the same for you.
We listen to the needs of our workers and always aim to offer flexible shift work and opportunities for overtime, as we know these are important to you.
Each of our locations has dedicated 24-hour OnSite support, so you can always speak to a Staffline representative. Staffline is proud to be an equal opportunity employer.
Please note that our job adverts are correct at the time of publication, but some details and job responsibilities are subject to change.
This job advert may not be copied, imitated or used, in whole or in part, by third-party websites, without prior written consent from Staffline.

Job Description

• Supporting CISO and Team lead with engagement and supporting Com Care Sector on Cyber Security initiatives.
• Drive the HIB Compliance program and outreach to the Sector.
• Support CISO in managing Sector Cyber Security team.
• Support the Sector & Digitization team engagement with Sector on Cyber Security
• Drive the Cyber Essential+ certification & Trust Mark certification program

Requirements

• Degree in Information technology with at least 10 years of working experience in Cyber Security or IT
• Professional certification in CISM, CRISM, CGEIT will be an advantage
• Has relevant work experience in both vendor and end user environment
• Demonstrate competency to provide consultancy or advisory to internal or external customer
• Cyber Security Governance and Assurance Knowledge
• Good stakeholder management, IT/Cyber Risk Management
• Good understanding of Cyber Security best practices and standards (NIST, ISO27000, Cyber Kill Chain, MITRE)
• Successful candidate will be offered a 2-year contract