IT Security

Responsibilities:

• Participate in the Risk and Control Self-Assessment (RCSA) and Control Framework development and review workshops / processes to provide updates on Cyber Security Policy, related minimum standards, views on IT / cyber risks and information system controls.
• Monitor the new and/or updated IT / cybersecurity laws, regulations, and standards and review the existing Policy, and related minimum standards to identify gaps and propose the required action plans.
• Work with team members to review and update Cyber Security Policy and related minimum standards according to the defined periodic review cycle to ensure compliance with laws, regulations and in line with SCBX standards or frameworks.
• Review and update the contents on e-learning platform for the annual cyber security awareness training delivery to all staff and concerned parties.
• Recommend improving vulnerability assessment and vulnerability management life cycle or able to be identified and perform depth analysis in complex vulnerability.
• Advance penetration testing including application, mobile and network by using open-source tools combine with commercial tools, less automation or design/advise solution to improve security assessment process.
• Advance Source Code Scan including application, mobile and analysis.
• Educating colleagues about security software and best practices for information security.
• Configuration and Maintenance Azure or AWS security Cloud.
• Design and implementation Security Solution on cloud

Qualification:

• Bachelor or Master's degree in computer science, Computer Engineering, Information System, Information Technology or related or related
• Minimum 4 years of working experience
• Professional information security certification CIPM, CISM, CISSP.
• Experience in an information security role.
• Experience in development and tools.
• Knowledge Cloud Security and Network Security
• Knowledge ISO 270001/Cobit/NIST/OWAP Top 10
• Solid knowledge of various information security frameworks.
• Knowledge cloud computing (AWS and Azure).
• Knowledge Mobile Devices Management.
• Excellent problem-solving and analytical skills.
• Ability to educate a non-technical audience about various security measures.
• Effective verbal and written communication skills.

Auto X Co., Ltd. is committed to protecting the personal data of job applicants. For more details, please refer to our privacy policy