About the Company
Esplanade is committed to fostering a diverse and inclusive workplace where all employees feel valued and empowered.
About the Role
You will be responsible for day to day management of IT Security and Governance, which include but not limited to user access control and review, privileged account management, AD and Azure single sign-on, other user authentication and integration; application, network and web security; endpoint and email security; system security and vulnerability assessment; web penetration testing; IT governance, audit and compliance including PDPA & GDPR.
Responsibilities
IT Security
- Carry out day-to-day administration, monitoring and review of IT Security including network and web security, endpoint and email security, application and data security, IT governance and compliance.
- Perform standard for IT network, server, application and Cloud are enforced.
- Co-ordinate with external security provider to perform yearly Vulnerability Assessment and Penetration Testing (VAPT).
- Work with IT Infrastructure and Application team to manage security vulnerabilities and improve cybersecurity mitigation controls.
IT Audit and Review
- Prepare, document and perform the yearly review of IT General Controls (ITGC) policies and procedures.
- Perform internal IT half-yearly system reviews, risk assessments and prepare management reports.
- Co-ordinate with internal users and support yearly Internal and External audits.
IT Risk, Governance and Compliance
- Assist the Manager in carrying out cybersecurity risk management, governance and compliance duties, including risk assessments, policy reviews, audit coordination, compliance monitoring, and reporting activities.
- Monitor security incidents and assist in incident response activities.
- Maintain risk registers and compliance records.
Qualifications
- Diploma/Degree in Computer Science, IT Cybersecurity or equivalent.
- At least 1-3 years of working experience in IT Security related field.
Required Skills
- Possess strong knowledge and technical understanding of security technologies and current IT Security industry trends and risk landscape.
- Proficient in technical writing and creation of policies, standards, procedures, guidelines, risk assessment and recommendation reports.
- Have knowledge or experience in the following technologies would be an advantage:
- Tenable or Qualys Vulnerability Management tools and SOC.
- Microsoft Azure Cloud Security, M365 Security and DevOps.
- ISO27001 compliance, checklist and industry best practices.
- Good understanding of Audit, Risk Management and Compliance.
- Must be a good team player and motivated to complete given tasks.
- Resourceful and self-driven individual with sense of urgency and commitment.
- You are also required to work irregular hours to rectify any issues, to upgrade system, to ensure system availability and to be on standby onsite for any events as and when required.
Pay range and compensation package
- Salary range : $3,800 - $5,600
If you are keen to apply for this position and satisfy the requirements, please apply with your resume indicating your current and expected salary as well as details of your experiences. We thank you for your interest in the position and Esplanade. Only shortlisted applicants will be notified.
