Senior IT Security Specialist

Job Description

• Secure and manage cloud environments (e.g., AWS, Azure, Google Cloud, Huawei Cloud).
• Develop and implement IT security policies, procedures, and plans.
• Conduct system security reviews and assess defenses against emerging threats.
• Lead vulnerability assessments, penetration testing, and secure code reviews, identifying and addressing gaps.
• Collaborate with infrastructure, application teams, and stakeholders to provide security consultancy and assurance.
• Deliver IT security awareness programs, including training, phishing simulations, and incident response exercises.
• Monitor and address information security risks, findings, and assessments.
• Investigate cyber security alerts, identify root causes, and recommend improvements.
• Handle IT security incidents, ensuring effective containment and mitigation strategies.
• Leverage expertise in tools like EDR/XDR, PAM, IAM, NAC, MFA, and SASE for security enhancement.
• Research new security technologies and vulnerabilities to bolster the organization's defenses.
• Oversee security projects, procurement, and reporting to management and regulators.

Requirements

• Bachelor's degree in Computer Science, IT, or equivalent, with 6+ years in Cybersecurity.
• Strong knowledge of cloud security (AWS, Azure, Microsoft 365, SaaS) and frameworks like NIST CSF, ISO27001, and PDPA.
• Preferred certifications: CISSP, CISA, CISM, CEH, CREST, or CHFI.
• Exceptional communication, problem-solving, and analytical skills.
• Proactive, positive team player with the ability to engage at all organizational levels.