Head, Cyber Security Operation and Defense Center
Description
• Lead on project implementation, direct design of security systems, direct design of security monitoring and alert, continuously improve information security controls, processes and operational procedures related to information security policy and standard.
• Manage and strengthen Cyber Security Protection and Detection systems such as WAF, IPS/IDS, Anti-DDoS, EDR, DLP, Secure Web Gateway, E-Mail APT, Network APT, SIEM, SOAR, Threat Intelligence, MDM, Cloud Security Management, etc.
• Track, manage to resolution the closure of security risks including review plans and monitor progress or remedial actions
• Ensure that cyber drills and cyber incident response planning are in place and tested.
• Manage the SOC team to maintain and deliver appropriate services
• Oversee the delivery of all SOC services in the service portfolio such as Real Time Security Monitoring, Threat Intelligence and Research, and Security Incident Response and Investigation activities
• Develop SOC service metrics; implement and monitor controls to ensure appropriate service levels are maintained
• Maintain knowledge of relevant regulations, compliance requirements and policies that may have direct or indirect impact upon the SOC and its services
• Vulnerability management, vulnerability scan, vulnerability report and consult about vulnerability issue.
• Hardening management, create standard of hardening guideline for all of platforms, manage hardening report
• Manage and strengthen HPID management, Service accounts management, and Key management.
• Ensure continued compliance with laws and applicable regulations.
• Support periodic security audits.
• Conduct security awareness testing.
• Provide thought leadership and attends industry events
• Manage, employees and third parties involved in IT security.
• Manage Security Operation report and SOC report.