Responsibilities

• Lead/assist and participate in Information Security audit and Risk Management by using various Information Security framework (PCI DSS, ISO27001, NIST, Cobit and etc), including audit scoping, evaluation, testing, reporting and issue follow-up.

• Conduct audit and risk on various processes, technologies, and platforms, such as UNIX, Windows, DBMS (SQL, Oracle, DB2), AD, AS/400, Network and etc.

• Identify technology risks and recommend appropriate controls based on risk level, business requirements, and feasibility of implementation.

• Consult clients to evaluate and make recommendations on process and control design improvements.

• Prepare and deliver clear, concise and effective communication, both oral and written, to all levels of management.

Requirements

• Bachelor’s Degree in Cyber Security, Computer Science, IT, System Engineering, or any related field.

• Fresh graduates are welcome to apply. Having prior experience in any forms of Information Security audit, risk management or research is an advantage.

• Possessing cyber security professional certification(s) such as CEH, OSCP, GPEN, CPTE, Lead Auditor or equivalent is an advantage.

• Having sound knowledge and experience in Windows & Linux environments is an advantage.

• Excellent communication skills, organizational skill, multitasking ability and great attention to details.

• Ability to manage multiple tasks and projects with a calm demeanour and work under pressure.

• Strong passion in Cyber Security and stays updated with emerging threats and news.

• Effective "roll up the sleeve" work ethic.