Corporate Functions
RESPONSIBILITIES
Candidates are expected to:-
- Support and/or lead the development, implementation and periodic review of cybersecurity policies, standards, procedures and governance frameworks to ensure alignment with organisational requirements;
- Monitor compliance with cybersecurity policies and standards across IT/OT environments;
- Maintain cybersecurity-related documentation, including policies, procedures, guidelines, risk registers and system records, and ensure they remain current and accurate;
- Conduct cybersecurity risk assessments and assurance reviews on IT/OT systems to identify vulnerabilities, threats and control gaps;
- Support and/or lead vulnerability management activities, including vulnerability assessments, remediation tracking and reporting;
- Provide technical support in the implementation, administration and maintenance of cybersecurity technologies, platforms and security controls;
- Support and/or lead cybersecurity incident response, investigation and recovery activities;
- Coordinate post-incident reviews and recommend corrective actions to strengthen cybersecurity controls;
- Support cybersecurity awareness programmes, campaigns and training initiatives to promote a strong cybersecurity culture across the organisation;
- Support and/or facilitate cybersecurity exercises, simulations and tabletop exercises to assess organisational preparedness;
- Develop, monitor and report cybersecurity metrics, key risk indicators (KRIs) and key performance indicators (KPIs) for management reporting;
- Support and/or lead initiatives relating to cybersecurity, data governance and AI governance;
- Undertake cybersecurity-related projects and other duties as assigned by reporting manager.
REQUIREMENTS
The ideal candidate should preferably possess:-
- Degree in Cybersecurity, Information Technology, Computer Science, Engineering or a related discipline;
- Minimum 3 years of relevant cybersecurity experience in IT/OT environment;
- Strong knowledge and understanding of IT/OT security best practices, network security, application security, physical security and cybersecurity risk management;
- Practical knowledge of one or more industry standards such as NIST CSF, ISO/ICE 27001, ISA/IEC 62443 and IACS UR E26/E27;
- Possess relevant cybersecurity certifications or keen to pursue formal training from Microsoft, AWS, SANS, ISC2 would be advantageous;
- AZ-900/500/305; AWS Foundational/Associate/Professional; GSEC/GSOC/GCIH; ISC2 CC/CCSP/CISSP etc
- Good communication, analytical and problem-solving skills;
- Ability to make sound professional judgment, objectivity, and integrity when making decisions and recommendations;
- Proactive, self-motivated and able to work independently; and
- Strong project management and coordination skills.
JOB LOCATION
WEST COAST