Security and Compliance
Security and Compliance
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Not Disclosed
Salary Not Disclosed
1 Vacancy
Job Description
Job Description
- Establish maintain monitor and improve the Information Security Management System (ISMS) by following ISO 27000 family and also meet compliance requirements such as SOC2 HIPAA PCIDSS GDPR etc.
- Monitor security policies processes and procedures to ensure compliance with Client security requirements and applicable government legal and regulations
- Develop best practices and security standards; implement security improvements by assessing current situations evaluating trends and maintaining security controls
- Determine security violations and inefficiencies by conducting periodic security audits to identify potential vulnerabilities related to asset protection ensure operational security controls are implemented and maintained properly
- Recognize problems by identifying abnormalities respond immediately to security incidents come up with postincident analysis and reporting security violations
- Report nonconformity issues to the management and propose countermeasures for those issues to renovate the organization and operation of the Company in order to continuously improve the efficiency of business
- Evaluates security trends evolvement of threats vulnerabilities and performs risk assessment and treatment plan; coordinate with related parties for consulting on remediation
- Develop and improve business continuity planning and disaster recovery procedures
- Develop and train employees for security awareness with best practices and company regulations/policies
Qualifications
- Minimum of one 1 year of experience in the IT Security compliance in medium or enterprise level. Prefer to banking financial auditing or internal control firms.
- Having actual knowledge in ISO 27000 family SOC2 GDPR CSA (Cloud) HIPAA PCIDSS is an advantage
- Demonstrate ability to work independently and as part of a team to achieve team goals
- Demonstrate strong organizational skills including time management and ability to prioritize and manage a range of tasks proactively
- Demonstrate good logical thinking and problemsolving skills
- Ability to effectively prioritize take ownership and execute tasks in a highpressure environment
- Highly motivated selfdirected
- Good at English in communication skills including oral and written
- Having knowledge of Information and Cyber Security Management is a plus
Education/Training Preferred
- Bachelors degree in Computer Science Auditing Business Administration and Operations Management related field or equivalent work experience
- Certification of CISA CISM CISSP or other equivalent certificates is an advantage
- Lead Internal Auditor certificate is a plus
Employment Type
Full Time
