Information Technology Security Engineer - 1 year contract

Job Responsibilities

Security Governance, Policy & Compliance:

. Develop, maintain, and update IT security policies, standards, technical baselines, Standard Operating Procedures (SOPs), and security controls in line with regulatory requirements and industry best practices.

. Conduct periodic security reviews and enforce compliance with IT security policies, standards, controls, and secure configuration requirements, including CIS hardening.

. Support cybersecurity risk management, audits, tabletop exercises, third-party assessments, and remediation initiatives arising from audit or assessment findings.

. Provide security advisory and recommendations to IT, application, infrastructure, cloud, project teams, and external service providers to embed security-by-design principles in projects and system implementations.

. Assist with personal data protection and PDPA-related security matters, including policies for handling personal data and identification of security risks affecting personal data.

Security Operations, Monitoring & Incident Response:

. Monitor the organization's exposure to cybersecurity threats, security events, and overall security performance, and analyse the current security posture.

. Monitor and analyse security events through SIEM and related security platforms, perform event triage, investigate suspicious activities, and escalate critical threats and incidents in a timely manner.

. Manage cybersecurity incidents end-to-end, maintain incident records, perform analysis, recommend effective containment and remediation actions, and track corrective actions to closure.

. Stay current with emerging threats, vulnerabilities, and threat intelligence, and disseminate relevant security advisories, directives, and patch recommendations to stakeholders.

. Support continuous improvement of security monitoring, detection use cases, alert quality, and response workflows.

Vulnerability Management & Security Assessments:

. Plan and manage vulnerability assessments, penetration tests, and other security assessments across applications, networks, servers, endpoints, and cloud environments.

. Analyse vulnerability assessment results, recommend remediation actions, track remediation status against required timelines, and report outstanding risks to management.

. Perform security and vulnerability checks on computing devices before connection to the corporate network to ensure compliance with cyber hygiene requirements.

Network, System, Endpoint & Privileged Access Security:

. Manage, configure, and optimize security tools and platforms to ensure effective integration with network and IT infrastructure.

. Manage security controls across on-premises and cloud environments, including network, systems, endpoints, identity, and runtime security.

. Manage endpoint security controls including antivirus/EDR and manage privileged identities and privileged access using PAM solutions such as CyberArk or equivalent.

. Perform regular reviews of user, privileged, on-premises, and cloud accounts, including access rights, access logs, and service-provider monitoring reports.

. Support secure network design, system hardening, access control, and security monitoring across enterprise environments.

Security Product & Service Provider Management:

. Identify security enhancements and work with third-party suppliers to design and implement cybersecurity projects, including preparation of test packs, system testing, implementation, and operational handover activities.

. Manage security service providers supporting IT systems and networks, monitor their performance, review submitted security reports, and ensure compliance with security policies and agreed service levels.

. Coordinate lifecycle management, security posture reviews, testing, and monitoring for security technologies such as WAF, DDoS protection, SIEM, EDR/XDR, PAM, and vulnerability management platforms. Security Awareness, Documentation & Reporting:

. Conduct information security awareness and training for employees and third-party service providers to strengthen security culture and policy compliance.

. Maintain accurate documentation for security incidents, vulnerability assessments, security checklists, controls, policies, standards, and operating procedures.

. Prepare regular security reports covering security performance metrics, incident trends, vulnerability remediation, compliance status, risks, and mitigation progress for management and stakeholders.

. Collaborate effectively with internal IT teams, business stakeholders, cloud service providers, and external vendors on cybersecurity initiatives and operational security matters.

Education & Experience:

. Bachelor's degree in computer science, Information Technology, Cybersecurity, Business IT, Information Systems, or a related discipline.

. Minimum 5 years of relevant experience in cybersecurity, security operations, IT security controls, IT system auditing, policy implementation, or related IT infrastructure security roles.

. Hands-on experience managing security operations, vulnerability management, incident response, access control, and security technologies in enterprise environments.

Technical Knowledge & Skills:

. Hands-on experience with security tools such as SIEM, WAF, antivirus/EDR/XDR, PAM, vulnerability assessment tools, and related security platforms.

. Strong understanding of vulnerability management, threat analysis, incident response processes, secure network design, endpoint security, identity/access security, and system hardening.

. Good understanding of IT infrastructure systems, on-premises and cloud security, security logging and monitoring, and secure configuration standards.

. Familiarity with security frameworks and standards such as ISO 27001, NIST CSF, CIS benchmarks, and applicable regulatory or risk-management requirements.

. Knowledge of cloud security and security monitoring in platforms such as Microsoft Azure, AWS, or equivalent is advantageous.

. Familiarity with automation, scripting, IaC security, CI/CD security, or security orchestration/automation is advantageous.

Professional Certifications:

. Professional cybersecurity certifications such as CISSP, CISM, CISA, or equivalent are preferred.

. Cloud or security operations certifications such as ISC2 CCSP, Microsoft Security/Azure Security certifications, AWS Certified Security, GIAC, or equivalent are advantageous.

Competencies & Attributes:

. Strong analytical, investigative, and problem-solving skills with attention to detail.

. Good written and verbal communication skills, with the ability to explain technical security risks and recommendations clearly to technical and non-technical stakeholders.

. Able to work independently with minimal supervision and collaborate effectively in a dynamic, fast-paced environment.

. Proactive and continuous-improvement mindset with a strong sense of responsibility, integrity, and ownership.