Implement, evaluate and improve security measures for IT systems and solutions, in compliance with Company’s Information Security Policy and security architecture. Provide advisory to business units and IT team.
Develop security policies, standards and guidelines.
Enforce and govern the implementation of security controls in IT projects and operations.
Evaluate and design security solutions and products for business and IT projects.
Participate in the development of IT solutions. Analyze security risks in IT systems and business operations, and give recommendations.
Conduct hardening, vulnerability assessment, penetration tests, security audits and security awareness training program
Monitor security threats. Respond to security incidents and provide a thorough post- event analysis
Constantly stay current on the latest developments on technologies, best practices, standards, trends and regulatory requirements
Qualification :
Bachelor or Master Degree in Computer Science, Information Technology, Computer Engineering or related fields.
Have at least 5 years of experience in information security.
Have a knowledge of information security foundation (system, network, application and compliance)
Professional certifications such as CISSP, GIAC, EC-Council and Security+, and knowledge of ISO 27001 will be advantage
Knowledge security on Cloud, Network device, Server, BYOD and other equipment are need
Motivated, ethical, highly responsible and analytical
ตอบ/อธิบาย