Total 3 job vacancies by Transcosmos Zero Pte. Ltd.

Information Security Operations (Security Response & Incident Management)

Job Overview

• Operate Computer Security Incident Response Team (CSIRT)
• Manage Attack Surface Management (ASM); conduct security vulnerability assessments and remediation support
• Plan and execute security training and exercises; manage IT assets and patches; collect and leverage threat intelligence
• Operate cloud service application approval system; provide technical support and information dissemination to domestic and overseas group companies
• Analyze, investigate, and recover from security incidents, and develop recurrence prevention measures.

Required Skills & Experience

• Japanese (business) and English (business) to communicate with HQ in Japan
• 3+ years of experience in network, server, and cloud service (AWS, Azure, etc.) infrastructure design, deployment, and operations
• Experience with security incident response and CSIRT operations
• Hands-on experience with IT asset management and patch management
• Experience collecting and leveraging threat intelligence
• Experience with security vulnerability assessment and handling (discovery, validation, remediation recommendations)
• Experience planning and conducting security training and exercises
• Experience coordinating across departments and driving projects in large organizations
• Information security certifications (CISSP, CISM, Registered Information Security Specialist, CompTIA Security+, etc.)

Preferred Skills & Experience

• Experience with security operations in multinational/global organizations
• Cloud and endpoint management skills (SaaS/IaaS log operations, etc.)
• Work experience in the IT industry (SI vendors, technology vendors, etc.)
• Experience developing internal policies and guidelines
• Desired Qualities

Soft Skills

• Ability to explain and persuade based on the audience's perspective and knowledge level
• Proactive attitude and self-starter mindset
• Strong collaboration skills with ability to value teamwork and project harmony, and build balanced relationships

Role Overview

• Drive enterprise-wide and group security initiatives, maintaining and strengthening them through PDCA cycles
• Develop and deploy information security policies/standards, plan and execute security strategies
• Design and implement employee training programs (planning, execution, and effectiveness analysis)
• Respond to security consultations from business units, and coordinate with key departments to drive cross- security governance and initiatives.

Required Skills & Experience

• Japanese (business) and English (business) to communicate with HQ in Japan
• 5+ years of experience in information security planning and strategy development
• Experience with ISMS (Information Security Management System) and/or ISO 27001certification acquisition and operations
• Experience conducting gap analysis using NIST CSF and/or CIS Controls
• Hands-on experience with security risk assessment, management, and incident response
• Experience handling information security regulations (e.g., Personal Information Protection Act, GDPR)
• Experience leading cross-functional projects
• Experience planning and conducting security awareness and training programs for executives and operational staff
• Basic knowledge and operational experience with IT infrastructure (network, cloud, servers, etc.)
• Information security certifications (CISSP, CISM, Registered Information Security Specialist, etc.)

Preferred Skills & Experience

• Experience developing internal policies and guidelines
• 3+ years of system operation and deployment experience
• 3+ years of information security-related work experience

Soft Skills

• Ability to explain and persuade based on the audience's perspective and knowledge level
• Proactive attitude and self-starter mindset
• Strong collaboration skills with ability to coordinate and build consensus across departments

TRANSCOMOS ZERO is currently searching for a passionate and dedicated IT Security / Operations Engineer who is proficient in Japanese to add value to our vibrant Operations Team.

Role Objectives:

The successful candidate will be a crucial part of our team, using their expertise in IT security to manage and maintain systems for not only our company but also our group companies.

The role is not limited to security support but includes account management and technical support for clients and vendors.

With a strong grasp of our cloud-based infrastructure tools, the candidate will be fundamental in providing continuous technical support to clients and internal teams within the APAC region.

Key Responsibilities:

• Implement and maintain security configuration across our IT infrastructure (including M365, Google Workspaces, ClickUp, Bitbucket, and etc.)
• Guide IT managers of the group companies per the headquarters' directive.
• Effectively manage and analyze system logs on an ongoing basis.
• Remain updated about the latest security vulnerabilities and take immediate action if necessary.
• Collaborate with internal and external parties to ensure secure, smooth operations.
• Handle client inquiries about our proprietary applications.
• Automate redundant tasks using programming language skills.
• Regularly monitor and maintain system metrics dashboard and alerts.
• Educate colleagues and enhance company documentation about our IT infrastructure.
• Collaborate closely with the Tech department at Japan HQ.

Desired Skills and Experience:

• At least 5 years of extensive experience in IT-related fields.
• Proficient reading and writing skills in Japanese.
• Exceptionally good communication and interpersonal skills.
• Clear knowledge of AWS, Azure(Entra), and/or GCP Services, relating to software development.
• Strong ability to configure SIEM and Power BI tools.
• In-depth familiarization with account management and data security.
• Experience in creating, monitoring and responding to security events.

Preferred Qualifications:

• Proficiency in additional languages such as Korean, Chinese, Malay or Thai to support group companies in these countries.
• Proven experience with Cyber Incident Response Plan (CIRP).
• Expertise in vulnerability management, penetration testing, and implementing security incident response processes.
• Extensive experience in developing, implementing, and maintaining security policies.
• Knowledge of network security design and implementation.
• Experience in using vulnerability scanning tools and security tools.
• Proven record of enhancing cloud security through policy　implementation and monitoring.
• Experience in promoting social engineering and phishing countermeasures.
• Ability to provide in-house security training.
• Professional security-related certifications such as CISSP, CISM, CEH are highly desirable.