Responsibilities:Security Operation•Ensure that all event logs from all application systems, servers and network devices is being monitored, captured and analysed.Security Alerts•Subscribes to major IT Security information provider (e.g MyCert, CIS, etc) to receive latest IT Security alerts.•Send security alerts to affected stakeholders.Patch Management•Provide notification to be sent out to affected stakeholder on the new patch identified and ensure the patch is implemented as per stipulated timeline.IT Services and Helpdesk (IT Security Support)•Adoption and implementation of IT Service Management (ITSM) and IT Service Support & Service Delivery (ITIL) framework / best practices as the foundation of IT Security requirements & operations.•Perform, monitor and report IT Helpdesk services for management & tracking system issues, change request, new requirements or any applicable IT Security services.•Providing the first level system support for all IT Security matters within scope and responds to all information security relevant events (hacker intrusions, virus infections denial of service attacks etc.)•Investigate suspicious activity and execute containment efforts in the event of malicious activity is discovered.IT Security Assessment•Participate in IT Security assessment, review and analysis of business risks and creation of IT Security requirements and controls to ensure that all IT related security components are implemented in accordance to available guidelines.•Conduct vulnerability assessment & penetration testing.IT Security Administration Function•Perform, monitor and report that all IT Security assets under the IT Security Unit are managed, accounted for and maintained well.•Assist to develop and to monitor for compliance to established security baseline / standards.•Assist in management and supervision of IT Security vendors and deliverables.•Ensure that all documentation under IT Security Unit are managed, accounted for and maintained well.Logical and Physical Access Administration•Perform security administration duties with respect to Logical and Physical access control
- User IDs and user access matrix functions and ensure compliance.Disaster recovery•Collaborate with other IT sections to develop, maintain and support the Disaster Recovery Programme.Requirements:•At least a Bachelor Degree in Information Technology, Computer Science or any equivalent qualification.•At least 3 years of working experience in vulnerability assessment, patch management, network security devices or system, IT security operations controls. •Certified in Security Certification such as CEH/SSCP will be an added advantage.•Possesses good communication and interpersonal skills.•Independent and able to work under tight deadline.
