As a Security Advisor, your main responsibility is to provide security services to multiple business units. This includes assessing security needs for changes, coordinating security consultation processes, and ensuring seamless engagement with business stakeholders following the security consultancy service model. Additionally, you will collaborate with various teams (architecture, design, engineering, and project teams) to drive innovation and automation efforts.
RESPONSIBILITIES
- Play a key role in executing the strategic plan to support the organization's security objectives;
- Assist in implementing and upholding relevant policies, standards, processes, and controls to meet regulatory and compliance requirements;
- Manage the operation of controls effectively, ensuring the timely resolution of findings, treatment plans, and the closure of engagements;
- Contribute to the implementation of security capabilities across security frameworks, feature functions, and business taxonomy reference architecture;
- Develop security solutions that align with the organization's security policies and procedures;
- Advocate for an enterprise-wide security perspective to drive re-use and optimization efforts;
- Proactively identify opportunities to simplify security processes and enable business self-service capabilities;
- Collaborate with diverse business, technology, and architectural stakeholders to navigate trade-offs between business value and compliance with architectural guidelines, risk, and regulatory obligations;
- Communicate strategic themes effectively to drive organizational alignment and understanding;
- Lead architectural decision-making in governance forums and drive technology outcomes for security platforms and engineering solutions;
- Influence the development of standardized solution patterns and promote a culture of technology excellence within the organization.
REQUIREMENTS
- At least 5 years in an Information Security role with a track record of progressive experience;
- Experience in IT Security, Risk, and/or Compliance domains;
- Proficient understanding of frameworks and industry standards such as NIST CSF, CSA, SOC2, ISO, PCI DSS, MITRE, etc.;
- Experience in assessing and designing security controls for Cloud and/or On-Premises environments, with the capability to delve into the technical intricacies of control implementations;
- Solid comprehension of a wide range of cloud service offerings, including Azure, AWS, and Google cloud products/services, along with the technical expertise to ensure compliance with cloud security controls;
- Experience in conducting audits and security assessments across various security disciplines, such as information, network, application, physical, privacy, etc.;
- Familiarity with system hardening processes, tools, guidelines, and benchmarks;
- Knowledge of current and emerging technologies and the ability to apply them to enhance security measures for technology assets;
- Proficiency in enforcing Policies and Standards within an organization;
- Exposure to enterprise-level architectural landscapes.
Nice to have:
- Preference for a background in a Big4 firm or banking sector;
- Experience working in a scaled agile structure alongside a dedicated team of project managers and architects;
- Strong business engagement and influencing skills, with the ability to address complex issues through data-driven analysis;
- Understanding of the trade-offs associated with technology changes while delivering tangible business benefits, requiring commercial awareness, alignment with business objectives, and negotiation skills;
- Extensive IT background with deep expertise in Security;
- Possession of certifications such as CISSP, CISA.
BENEFITS
- Attractive salary, 13th-month salary, and performance bonus;
- Hybrid working environment;
- 20 days annual leave and 7 days sick leave;
- Premium healthcare for you and your family members;
- Exciting career path and development opportunities;
- Professional and engaging working environment.
EMBRACING DIVERSITY AND INCLUSION FOR A THRIVING WORKPLACE
We prioritize fostering a workplace that values and appreciates authenticity from all team members, regardless of their background. Through our commitment to diversity and inclusion, in collaboration with our Employee Resource Groups, we create an environment where individuals from various backgrounds and identities can excel, build connections, and develop professionally.
DRIVING CLOUD-FIRST TECHNOLOGY TRANSFORMATION
We are currently in the midst of an exciting technological shift towards a "Cloud First" strategy, adopting cutting-edge tools and methodologies utilized by top tech and digital enterprises worldwide. Beyond technology, our focus extends to investing in our employees, offering opportunities for continuous learning, and professional growth, and empowering others within the organization. If you have a passion for innovation and mentorship, this is the ideal environment for you to thrive.
Apply now
