Assistant Manager - Cyber Security
Assistant Manager - Cyber Security will work closely across business channels to identify and assess security risks, gaps in the application of policies and standards, weaknesses in processes and system controls. He or she will work closely with the wider team to deliver a number of group wide security improvement initiatives. Also, working with AXA International Markets Office Security and AXA Group Security
Responsibilities:
Execute cyber security operations, e.g. data security, endpoint security (workplace and infrastructure), network and messaging security, etc.
Lead information security awareness program (e.g. annual e-learning, phishing campaigns, onboarding and orientation).
Take role as a cyber security incident handler.
Perform Vulnerability Management (e.g. confirm external IP for VA scan, remediate vulnerabilities, advise patching strategy)
Lead user access recertification campaigns
Register digital assets in Digital Permit process.
Assist in the implementation of information security standards, processes and secuirty controls for the organisation in compliance with the system hardening program (MTSB).
Perform the source code scan for vulnerabilities and provide consultation to developers to remediate the vulnerabilities.
Provide security requirements and security risk assessments to new projects.
Perform Security Acceptance Test and follow-up penetration test remediation actions for new projects
Work with Local Project Teams to ensure that locally implemented technology solutions meet the AXA security standards, government rules and regulations
Analyze and approve access request in relevant channels in SILVA including handling security incidents.
Update knowledge and technical skill to cope with new vulnerability and threats.
Qualifications:
Bachelor’s degree in Computer Science, Computer Engineering, Information Technology or IT related field.
At least 3 years’ experience in information security, security consultancy, security tool implementation and/or IT security operations.
CISSP, CISA, GIAC, CEH, CompTIA, and/or Security+ certifications preferred.
Logical & systematic approach to problem solving
Good interpersonal skills – able to communicate effectively with various levels (from end-users to executive).
Good command of written and spoken English.
Computer literacy: Good in using Microsoft Office and Microsoft Visio