Total 388 information technology job vacancies in Legal / Public / Security category in Malaysia

Job purpose:

This position is part of the Asia information Security and Data Protection function in Singapore with focus on information security and third-party risk management.

Key activities:

• Assisting the Head of Information Security Asia in implementing and maintaining the Group's information security strategy, policies, and procedures to manage cyber and Third-Party Information Security risk and ensure compliance with relevant laws and regulations.
• Assessing the security posture of third-party vendors, partners, or service providers to ensure compliance with organizational standards and regulatory requirements.
• Collaborating with procurement, legal, and business units to evaluate the security implications of engaging with third-party vendors and providing guidance and recommendations to stakeholders on selecting, onboarding, and managing third-party vendors securely.
• Reviewing and negotiating information security and data protection clauses in contracts and agreements with third-party vendors to establish security requirements and responsibilities.
• Conducting risk assessments of third-party systems (including cloud), networks, and processes to identify gaps in information security controls.
• Collaborate with head office in developing and implementing strategies in continue monitoring and evaluating third-party security performance through regular assessments and audits.
• Participating in cross-functional teams or committees on vendor risk management and security governance driven regionally and globally.
• Collaborating with auditors to provide necessary documentation, evidence, and support during audit fieldwork, testing, and reporting phases.
• Reviewing audit findings, recommendations, and reports to identify opportunities for improving information security and third-party risk management practices, processes, and controls.

Formal education:

• University or college degree or comparable
• Possession of professional qualifications will be advantageous. e.g. CISA, CISM, CRISC, CISSP, CTPRP

Specialist knowledge (work experience, further qualification):

• Minimum 5+ years of related experience in Information Security, third-party risk management or technology Risk function in financial services industry or consultancy.
• Knowledge of Asia regulatory requirements with a strong understanding of the financial industry. PDPC, MAS, NAFR, PBOC, JFA
• Have a strong security risk and analytical mindset in approaching situations and interactions with stakeholders.
• Strong communication and interpersonal skills, with an ability to translate complex technical information for a non-technical audience.

Summary

Working as part of the information security office within the IT department at Pacific Prime CXA, the GRC (Governance, Risk and Compliance) Manager will be responsible for leading the day-to-day IT compliance, data governance and IT risk management functions. Primary responsibility will include defining, creation, management and maintenance of IT and organizational policies and standards in support of legal and regulatory compliance needs as well as general IT and organizational information security controls and practices.

Responsibilities

• Establishing corporate information security policies, standards, guidelines, baselines and practices that protect the integrity and confidentiality of information and network infrastructure.
• Develop procedures and controls to assure compliance with applicable regulatory and legal requirements as well as good business practices.
• Proactively identify audit and compliance related issues to reduce the risk of security exposures, gaps in the design and operating effectiveness of controls whilst seeking opportunities for continuous improvement.
• Driving IT security programs in line with internal and external standards and ensuring compliance with in-country regulatory requirements.
• Maintaining oversight to enterprise-wide security technologies, actively monitoring & responding to security events.
• Develop and maintain standards and controls to ensure the protection of data based on classification.
• Work directly with business units to identify critical data and ensure appropriate data classification and protection standards are implemented.
• Manage the attestation program for all IT controls to support assurance and alignment across all information security stakeholders.
• Support internal and external audit process for relevant compliance concerns including PDPA, GDPR, MAS TRM, ISO27001, etc.
• Perform and evaluate information security risk assessments for various information systems and processes, including annual penetration tests.
• Develop, monitor, track and report against IT Security metrics and KPIs that help the IT Infra understand threats, vulnerabilities and risks associated with protecting information across the enterprise and plans to mitigate those risks.
• Develop and maintain the IT Risk Register to support ongoing tracking and management of all identified risks and issues and to ensure adequate and timely resolutions to all audit/review issues relating to security.
• Lead the development and operation of third-party vendor risk assessment, management and due-diligence program.
• Conduct client meeting and drive all the questions arising from client relationship teams. This includes completing client’s info security questionnaires and liaising with clients on all such requirements within tight deadlines.
• Formulate, lead and communicate security goals and objectives based on an integrated understanding of business priorities, security vision and strategy.
• Providing security related support to IT and business team users and facilitate recommendations on future technical trends/directions that encompass multiple systems and teams to meet business critical initiatives.
• Point of contact to assist and advise on Information Security related matters

Requirement

• BSc in Computer Science or equivalent; with 5+ years of relevant working experience in IT governance, risk, and compliance management.
• ISACA / CISM / CISSP Certification.
• Strong understanding of fundamental information security concepts and technology.
• Familiarity with ISMS and security frameworks, particularly NIST Cybersecurity Framework.
• Understanding of Information Security principles, IT infrastructure (including operating systems, applications, communications and network protocols), architecture elements of Identity Access Management (IAM), network security, data security/DLP, cryptography, logging and monitoring.
• Experience in security design, threat modelling and risk assessments.
• Candidate should be fully aware of the current and emerging security solutions available in the industry.
• Ability to be self-motivated, flexible and be able to drive and manage multiple tasks and priorities on very tight deadlines in a fast paced and rapidly changing environment.
• Strong interpersonal and collaboration skills with the ability to develop, maintain and foster constructive relationships with others.
• Excellent written and oral communication skills.
• Effective communication and analytical skills
• Strong work ethic with attention to detail.

Responsibilities

• Define Information Security vision and roadmap for users, advising on system implementation.
• Responsible for the network security, system security and data security of company local and overseas systems
• Responsible for the construction, optimization and continuous improvement of the company's information security governance structure and ISMS;
• Formulation, optimization, implementation, execution inspection and continuous improvement of the company's information security strategy
• Conduct security risk assessment and implement risk management strategies
• Tracking, research, and absorption of laws, regulations, and industry regulations related to cybersecurity compliance, data security and compliance, privacy protection, and compliance in the company's global market locations, as well as internal compliance management within the company.

Requirements

• Bachelor’s degree in IT
• 5 years or more information security management work experiences.
• Familiar with information security related fields or energy industry policies and regulations, such as national ISOassurance, NIST, ENISA, GDPR, ISO2700X, etc.;
• Familiar with ITGC&ITAC, audit procedures and internal control process mechanism;
• Foundation in security protection products or technologies, and be familiar with three or more security fields, including but not limited to: Firewall, VPN, IDS/ IPS, antivirus, encryption, threat modeling, data security, virtualization security, content monitoring and filtering, access control and authorization technologies;
• Certification of ISO27001, CISSP, CISA, CISM and CCSP is preferred.
• Experienced in building enterprise security systems and risk management projects
• Experienced in data security and compliance management; have a high degree of risk sensitivity;
• Work experiences of IT safety management from Banks, Top Tier Consulting Firms or a Principal OEM are preferred.

To Apply

If you're interested in this role, click 'apply now'
All Applications will be treated will with strictest confidence.
Samuel Tse
Senior Consultant - Technology
Gateway Search
DID:+65 6727 6129
www.gateway-search.com
EA Licence No: 19C9807 | Registration No: R1223789

• Leading regional financial institution
• Focus in Information Security Compliance, Policy & Control
• Open to IT professionals with passion in InfoSec Control and Risk Management

Reporting to Head of Information Security & IT GRC, here are your responsibilities:

• Collaborate with the cybersecurity team to develop and execute the annual information security action plan.
• Establish and maintain an efficient incident reporting and tracking system, overseeing corrective and improvement measures.
• Monitor and provide guidance on the effectiveness of information security workflows and controls.
• Lead information security projects and automation initiatives in Asia.
• Manage outsourcing matters across BUs in Asia and oversee outsourcing requirements
• Conduct annual on-site reviews of BUs in Asia.
• Support compliance efforts under Singapore’s PDPA, including policy communication, query management, and liaison with regulatory authorities.
• Report to the Board and management on adherence to laws, regulations, and information security policies.
• Review and update regional information security and outsourcing policies to ensure compliance.
• Develop training materials to enhance information security awareness.
• Design, develop, and maintain automated compliance and information security workflow management systems.
• Manage regional reporting tools and consolidate results.
• Prepare reports and documents for internal committee meetings.
• Collaborate with the Compliance team on various compliance-related initiatives.

Requirements:

• Bachelor's degree in computer science or related disciplines
• Preferred certifications: CISM and/or CISSP.
• 3+ years of experience in information security or IT risk management
• Strong understanding of information security risks, controls, processes, and trends.
• Experience in project management.
• Familiarity with regional information security regulations and the insurance sector.
• Understanding of Asian cultural and business dynamics.

If you are interested in the above job or related information security opportunities, please kindly send your updated CV to Shannagh.Wu@ethosbc.com

Reg No.R23112660
BeathChapman Pte Ltd
Licence no. 16S8112

BlueScope is an Australian-born, global success story, spanning 18 countries, with a team of over 14,000 people. We’re driven by innovation and are proud that the technologies in our products and brands, like COLORBOND® steel, inspire and protect everything from hospitals and bridges to stadiums and homes.The OpportunityCome and discover the opportunity to join the Security Architecture Team in our IT function for our Australian business who will continue to build and mature our security capabilities.Valuing Leadership, Integrity, Innovation and Collaboration you will be joining a team of Security Architects committed to protecting our assets and brand value by providing security expertise and knowledge to our enterprise technology landscape and support our business and customers now and for the future.  The role of the Information Security Architect is to design, build, test, and implement security solutions within BlueScope’s Australian IT environment. The Information Security Architect provides a thorough understanding of Technology Solutions anticipating security risks, identifying…

Click here to view more detail / apply for Information Security Architect

Are you looking for an awesome place to work, where you can proudly be your authentic self, and be part of #oneteam?   We are looking for a passionate team player who aligns with our values and culture, takes pride in their unique contributions, and can challenge the status quo with disruptive thinking. If this sounds like you, come and join us! The opportunity You’ll be working with the Information Security Manager and inter-departmentally (“Systems and Infrastructure Platform SME’s”) for security risk identification on information assets, solutions and programs whilst recommending a viable security mitigation control that improves the overall security posture of Vocus. As Information Security Advisor you’ll also play a key role in maintaining PCI-DSS compliance posture for Vocus, including privileged and user access reviews, and meeting our Pen testing and third-party assessment targets. Additionally, you’ll be conducting regular security compliance assessments; initiating and managing security calendar activities and validating the currency of security…

Click here to view more detail / apply for Information Security Advisor, Systems and Infrastructure

Contract Duration: 12 months
Working Hour: Normal Office Hour
Working Location: AMK
Remarks: SINGAPOREAN Only

Requirements
• 5+ years IT security experience required.
• CISSP certification is a Must, CISM, Security+, IT security tools certifications (Imperva, Carbon Black) is a plus
• Experience with Networks, Servers (Windows and UNIX), Database.
• Experience in IT security auditing, security assessments.
• Understand protocols, traffic flows, ability to analyse logs from various sources.
• Knowledge of Active Directory, Endpoint protection solutions, Early Detection and Response solution, Database Activities Monitoring tools, SIEM etc.
• Excellent written and verbal communication, presentation skills.
• Proficiency in Microsoft Excel.
• Flexible, team player, “get-it-done” personality.
• Ability to organize and plan work independently.
• Ability to work in a rapidly changing environment.
• Ability to multi-task and context-switch effectively between different activities and teams

Responsibilities
• Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis.
• Establish compliance with these policies / procedures through ongoing security reviews and audits, not limited to log analysis and security assessment of customer ICT systems
• Conduct security risk management exercise
• Conduct table-top exercises
• Conduct vulnerability assessment, coordinate penetration tests activities
• Conduct information security awareness training
• Responsible for the development and management of customer’s security incident response plan.
• Lead and support customer in the matters of security incident resolution and response.
• Be the point-of-contact/customer liaison to assist and advise customer for ICT security related matters
• Project managed the activities and deliverables during the implementation phase.

Interested candidates, please click "APPLY" to begin your job search journey and submit your CV directly through the official PERSOLKELLY job application platform - GO Mobile.

We regret to inform you that only shortlisted candidates will be notified.

This is in partnership with Employment and Employability Institute Pte Ltd (“e2i”). e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance, and skills upgrading services, and partnering with employers to address their manpower needs through recruitment, training, and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nationwide manpower and skills upgrading initiatives. By applying for this role, you consent to e2i’s PDPA.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use, and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Gelangre Reyanelle Gelario | REG No : R1870995

PERSOLKELLY SINGAPORE PTE LTD | EA License No : 01C4394

SAM is looking to fill the position of Information Security Manager. This is a regional role and is overall in-charge of all the entities under SAM. He/She will report to the CEO.

Responsibilites

• To develop and implement a long-term Information Security & Cyber Security strategies and roadmap to protect corporate information and IT assets.
• Set up Cyber Security policy to standardize practice and govern all the security landscape within the group of companies.
• Provide Information security & Cyber Security strategic advice to senior management.
• Modernize and optimize the conduct of governance and oversight roles to maintain risk register, third-party vendor assessment, leveraging and advanced analytics for trending and compliance monitoring.
• Manage Information & Cyber Security and Personal Data Protection matters, liaise with different stakeholders and oversee the implementation of it to improve the overall Information Security, Cyber Security and Personal Data Protection.
• Drive the review and enhancement of third-party vendor risk management and establish a holistic framework and structure to manage the risk.
• Ensure the Information & Cyber Security practices are in compliance with applicable laws, regulations and policies.
• Conduct regular communication and refresher briefing to senior management to maintain a good level of Information & Cyber Security and information risk awareness.

Requirements

• Degree in IT/Computer Studies or Diplomas with extensive relevant cybersecurity experience
• At least 5-7 years of relevant working experience in the field of Information Security and Cybersecurity
• Possess at least one of professional cyber security certifications such as CISA, CISSP and CISM. Those with CEH, CRISC will have added advanatages.
• Good communication, interpersonal skills, with proven abilities to manage multiple priorities, drive project teams and collaborate across business units and partners to achieve desired goals.
• Possess Information & Cyber Security domain knowledge across areas such as IT architecture and solutions, security operation center, application security, infrastructure & network security, data & information protection, supply chain security, cloud security, Information & Cyber Security regulations and compliance will have added advantage.
• Strong experience and knowledge in technology and Information & Cyber Security standards and policy review, oversight and governance, risk management and audit.
• In-depth knowledge of industry information and cyber security practices, frameworks and standards such as the NIST Cybersecurity Framework and ISO 27001.
• Hands-on working knowledge in managing and delivering security penetration testing, vulnerability management services and application security.

Business Function

Group Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibilities

• Drive security projects across the region which involves vendor management, collaboration with stakeholders, business users and application teams
• Lead overall end-to-end project delivery
• Keep abreast of relevant technology to improve service delivery
• Identify areas of improvement through process improvement and/or automation.
• Provide technical expertise and guidance to internal teams on cybersecurity-related matters.
• Contribute to the continuous improvement of security processes, tools, and technologies.

Requirements

• Degree in computer science, engineering, or other computer-related field of study.
• CISM, CISSP, GIAC, or relevant security certification would be an advantage.
• Prior experience in implementing/managing security solution
• Process strong interest in new system development/evaluation.
• Ability to work in a fast-paced environment and keep pace with technical/operational innovation.
• Good communication skills.
• Self-motivated with ability to work with minimal supervision
• Experience in managing endpoint-related security applications such as Anti-Virus, EDR and DLP
• Knowledge and understanding of emerging risk areas, e.g. mobile, remote access, wireless technologies, DLP, Windows and Unix-based operating systems, etc.

Apply now

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognises your achievements.

Job Summary

Implement and oversee Sparrow's IT security operations framework, including security operations role definitions, monitoring, incident and event management, privileged access management, and overall security architecture. Ensure compliance with industry standards and regulatory requirements.

Job Responsibilities

· Define and implement IT security operations framework for the company, including security operations role definitions, monitoring, incident and event management, privileged access management, and overall security architecture

· Collaborate with IT management to implement appropriate segregation of duties in compliance with industry best practices

· Create and promote a strong security culture throughout the organization

· Define, implement, document, and conduct reviews on Sparrow's Information Security Policies and Procedures, Information Security Risk Management, and Change Management

· Ensure compliance with information security policies and procedures among employees, contractors, partners, and other third parties

· Work with business units, vendors, IT application, and infrastructure teams during the software development lifecycle to ensure adequate security controls are in place

· Apply risk management practices in an operational environment, including audit procedures/controls and systems hardening

· Perform information security risk assessments and serve as the internal auditor for information security processes

· Review all system-related information security plans throughout the organization's network

· Respond to security incidents, conduct investigations, and recommend appropriate follow-up actions

· Work closely with SOC and development teams to ensure end-to-end security implementation, audit, and MAS regulatory compliance.

Skills & Qualifications

· Expert knowledge of Information Security Standards (ISO 17799/ISO 27002 & ISO 27001), Payment Card Industry Data Security Standards (PCIDSS), and MAS Technology Risk Management Guidelines (TRM)

· Bachelor's degree in Computer Science, Computer Engineering, or a relevant qualification

· Certifications in CISSP, CISA, CISM, ISACA, or equivalent

· At least 5 years of Information Technology experience, including 2 years in managing IT Security Operations

· Fluency in both English and Mandarin

**PREVIOUS APPLICANTS NEED NOT APPLY**

The role will be based in Digital Services at the Liverpool Innovation Park.

Liverpool University Hospitals NHS Foundation Trust has embarked on a journey to provide great care for our patients.

We are a front line digitisation trail blazer on the national EPR programme. Together we will underpin the care that our hospitals provide with a robust digital infrastructure, comprehensive suite of digital solutions and a wealth of digital intelligence.

Our team is on a mission that positions our organisation as the leader for digital health excellence in Liverpool, the North West and nationally. Using our strong academic ties, we will help create a digital blueprint for others to follow.

Our digital strategy clearly sets out our great ambition, which delivers a progressive and cohesive portfolio of digital solutions to front-line staff over the next five years. We have recently commenced our Care Record Liverpool programme, CaRL. We will modernise how we support our patients and staff inside and outside of our hospitals.

The post holder is responsible for leading:-
the management, development and leadership of the Cyber Security team of the Trust

Responsible for the development, implementation and monitoring of cyber security policy in the Trust
To oversee, and ensure assurance can be provided regarding, the robust protection of Trust and patient data, as well as the protection of infrastructure and assets from malicious activity and actors.
To work collaboratively with NHS England and 3rd party suppliers, including senior managers within Digital Services, in the planning and delivery of the CS and IG agenda across the Trust and act on behalf of the CIO, as required.

Ensuring compliance with the Data Protection and Security Toolkit and other regulatory guidelines.

Providing leadership and a clear vision for implementation of CS as part of the cyber and wider Digital strategy ensuring that effective systems and processes are in place to support the deployment of systems and the modernisation of health services.

To ensure the implementation of the Cyber strategy underpins and aligns with the Aug 2023 Trust’s digital strategy and wider Trust strategy and vision and to be an expert and specialist source of advice and guidance.

Liverpool University Hospitals NHS Foundation Trust was created on 1 October 2019 following the merger of two adult acute Trusts, Aintree University Hospital NHS Foundation Trust and the Royal Liverpool and Broadgreen University Hospitals NHS Trust.

The merger provides an opportunity to reconfigure services in a way that provides the best healthcare services to the city and improves the quality of care and health outcomes that patients experience.

The Trust runs Aintree University Hospital, Broadgreen Hospital, Liverpool University Dental Hospital and the Royal Liverpool University Hospital.

It serves a core population of around 630,000 people across Merseyside as well as providing a range of highly specialist services to a catchment area of more than two million people in the North West region and beyond.

To hear more about our achievements click here https://www.liverpoolft.nhs.uk/media/13089/1606-annual-report-booklet_final.pdf

Follow us on Social Media:

Facebook – Liverpool University Hospitals Careers

Instagram - @LUHFTcareers

Twitter - @LUHFTcareers

The main duties and responsibilities are detailed in the job description attached in the advert.

The post holder will lead the Cyber Security team to deliver the Cyber and IG elements of the Digital Strategy.

To ensure robust policies and processes are in place and monitored.

Lead and support the wider governance agenda in digital including achieving the Data Security Protection Toolkit, managing Digital Change Control, Incident Management, Risk Management, Audit and action planning.




This advert closes on Tuesday 7 May 2024

Security System Technology Sales Engineer

We are looking for a tech-savvy person in the field of security technology systems. The Sales Engineer should have extensive knowledge of both software and hardware relating to security systems and maintain up to date with advancements in the field.

The Sales Engineer Responsibilities:

• Meet clients to understand their needs.
• Discuss system design and requirements with the client.
• Preparing and develop technical presentations, Single Line Diagrams, and quotations for the client.
• Soliciting client feedback on our marketing materials and strategies.
• Identifying areas for improvement and communicating these to the management.
• Continuous self-upgrading in our line of trade.

The Sales Engineer Requirements:

• Fresh graduates welcome.
• Diploma / Degree in engineering.
• Able to read and understand CAD drawings.
• Able to produce Gantt Charts.
• Experience in sales and or engineering
• Good communication skills in English and Mandarin.
• Ability to relate technical information to non-technical clients (layman)
• Good project management skills.
• Good problem-solving skills.
• Good leadership and team working skills.
• Willingness to advance sales and engineering education.

Business Function

Group Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibilities

• Administration and management (technical operations) of firewall infrastructure
• Evaluate and upgrade firewall hardware and/or firmware
• Coordinate with vendor, deploy, configure and manage Firewall devices according to system engineering design
• Coordinate with information security governance team to align IT infrastructure with established standards
• Ensures system compliance with all established information security policies
• Perform period health check and tuning of firewall devices
• Performs technical assessment of any non-well defined or complex firewall change requests prior to implementation
• Performs regular review of firewall rulebases and recommend necessary optimization actions
• Assists Level 1 Support Engineers during problem determination and resolution whenever necessary.
• Planning and recommending overall improvements in firewall management
• Device Access management
• Advanced troubleshooting production problems with RCA and fault diagnosis
• Performance and historical trend analysis
• Implements changes to firewall infrastructure hardware in order to correct errors or enhance functionality
• Develops processes for improving operational efficiencies, as well as identifies/implements automation tools for existing manual processes.
• Prepares technical reports, memoranda, and instructional manuals as documentation of network design and operational requirements.
• Management of network daily activities; incident and problem management
• Responsible to work with respective team members on the review of network architecture and design
• Responsible to work with the respective server and application team's members
• Responsible to work with the respective network vendor's teams for the trouble-shooting, identification and resolution of network problems
• Responsible for network devices, as well as appliances, vulnerability review and assessment.
• Responsible for network devices, as well as appliances, change implementation review and assessment
• Responsible to conduct pre / post implementation plan review
• Responsible to conduct and train Level 1 engineers, i.e. to empower and equipped the L1 engineers with the knowledge to run and maintain Data center network
• Coordinate with information security governance team to align IT infrastructure with established standards
• Change requests prior to implementation
• Advanced troubleshooting production problems with RCA and fault diagnosis
• Design and monitor operations metrics on a monthly basis to keep track of key operation metrics
• Ready to work in shifts including public holidays
• Ready to be on call for 24x7 support during shifts

Requirement

• Experience: Minimum 8 years firewall operations and/or management role
• Certification : CCSA, CCSE, JNCIA-FWV, JNCIA-SEC, JNCIS-SEC (Preferred but not mandatory CISSP, CISM, ITIL Foundation)
• Checkpoint Firewalls, Juniper Netscreen / SRX Firewalls, VPN Technologies, DNS, NTP, 2 Factor Authentication technologies.
• Ability to work independently or as a team player.
• Experience in highly complex data center network design and support
• Experience with Cisco and Arista products specially DCI technology
• Experience with Cisco and Arista Software Define network (ACI, DNAC, etc)
• Strong hands on experiences on Fabric Patch, OTV, VPC+, Vxlan, Mlag, MP-BGP
• Knowledge and experience in employing and using various networking trace tools, i.e. Sniffer, Wireshark, riverbed net profiler, NetBrain, Gigamon and etc.
• Pro-active, dynamic and with good analytical/conceptual thinking.
• Certifications such as CCIE or above level in networking is an advantage
• Python or Linux shell scripting skill is a plus

Apply Now

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognises your achievements.

About the role The Information and Technology (I&T) team is dedicated to delivering solutions that engage clients and stakeholders while meeting the diverse business requirements of the organisation. Our portfolio encompasses a wide range of responsibilities, including information technology strategy, ICT service delivery, information and knowledge management, information security, and business partnering and engagement. As a Senior Information Officer, where you'll play a pivotal role in promoting information and records management aligned with QPT's strategic direction and architecture. Your primary focus is to advocate for best practices and foster a culture of excellence in this critical domain. Leveraging your expertise in information management, you'll guide and support the organisation, empowering effective decision-making and driving digital innovation. Operating within a complex and dynamic environment, collaboration is key to success. You'll seamlessly bridge functional boundaries, fostering cross-functional cooperation to achieve organisational goals. As a Senior Information Officer, you'll perform a variety of functions across information, records, knowledge,…

Click here to view more detail / apply for Senior Information Officer, Public Trust Office

We are looking for an experienced Auditor/Assessor to join our IT Audit team. The ideal candidate should have proven track record in Information Security/Data Privacy related audit experience and able to provide practical recommendations to strengthen the organization’s Information Technology security posture and data privacy regime.

Shortlisted applicants will be considered for the role of Information Security Auditor / Data Privacy Assessor / IT Auditor / Lead Auditor

Key Responsibilities:

​

Execution of the Information Security and Data Privacy related audit/assessment process

Exhibits appropriate judgment regarding issue notification, prepares draft findings in accordance with relevant systems standards and drafts final audit reports for review by the Technical or Audit Manager.

Demonstrates depth and breadth of knowledge of Audit methodologies and objectives.

Demonstrates professionalism with good communication skills.

Presents audit/assessment results in an objective and unbiased manner.

Writes opinions reflecting relevant facts that lead to logical conclusions.

Ensure compliance with ISOCert's policy & procedures

Perform administrative duties according to plan and organize audits.

Perform audit on client’s existing processes and Information Security and Data Privacy systems.

Investigate client’s business process controls, application controls and IT controls and benchmark them according to regulations and industry standards.

Pre-requisites:

Degree or Diploma in IT / Computing / Information Security or equivalent qualifications

Minimum 3 years of relevant working experience for Degree holders / 5 years of related working experiences for Diploma holders (preferably specializing in IT / IT Security field).

Candidates with knowledge and experience in ISO 27001, ISO 27701, DPTM and other management system related standards are preferred.

Preferably with Lead Auditor Training Certification in ISO 27001:2013 / Certified Information Security Auditor – CISA and PDPA related training.

Those with auditing experience will be an added advantage.

Good report writing skills

Excellent communication and presentation skills.