Job Roles and Responsibilities

• Operations

  1. Perform security architecture and design reviews, service and data
     
     flow reviews to check for security / privacy flaws and gaps and
     
     recommend remediation and/or mitigation.

  2. Utilize knowledge and understanding of application architecture,
     
     network design, infrastructure security and data security standards
     
     to identify findings and clearly communicate security & privacy risks
     
     and possible remediation.

  3. Assess and review new Low-High complexity services/projects
     
     within the domain to ensure that security and privacy architectural
     
     and application business logic issues are identified and mitigated
     
     prior to launch.

  4. Review Security Architecture and Design call-outs in Security
     
     Risk Assessment reports and Risk Treatment Plans for all new
     
     projects prior to cutover.

  5. Proactively monitor the overall project roadmap, escalates priority
     
     projects, and monitors overall compliance

  6. Monitors security deviations and closure of any security-related
     
     technical debts

  7. Ensure SLAs and PSRA activities are being tracked and updated by
     
     each SME on ServiceNow

  8. Tracking and follow-up closure of submitted Risk Acceptance
     
     and Security Technical debts

  9. Review current system security measures and recommend and
     
     implement enhancements.

Job Qualifications

EDUCATION

• Bachelor’s Degree in Computer Science, Computer Engineering, Information Technology, or related field.

WORK EXPERIENCE

• At least 2 years’ experience in IT Security related position

• IT security-related experience is an advantage

SKILLS / PROFICIENCY

• Ability to adapt to different technology landscapes and environments

• Strong understanding of networking and data communication concepts, security, and encryption.

KNOWLEDGE / COMPETENCIES

• Fundamental knowledge in networks, systems, and applications development

• Fundamental knowledge on the internals of computer Operating Systems (Windows and Linux).

• Knowledge in Ransomware prevention and Threat detection

Please refer to job description.