Security and Compliance Officer

Job Purpose
The Security and Compliance officer act as the point person in regular internal and external security audit of the company. This includes regulatory compliances of Pinnacle and ISO audit of Code88.
Responsibilities:
1. Data Protection
• Work with Network Security engineers to ensure that best practices and custom configurations are applied to the data leakage protection of the company.
• Ensures that the data protection of the company meets the requirements of regulatory compliance entities.
• Enhance the confidentiality, integrity, and availability of data.
2. Cyber Security
• Document, investigate, and report cybersecurity compliance issues and incidents, where necessary
• Arranging penetration tests and vulnerability testing to be conducted by Network Security Engineers
• Provide guidance and recommendation for security gap and vulnerability detected in both Operations and Platform systems.
• Ensures vulnerabilities and security gaps are addressed as soon as applicable.
• Maintains records of accepted vulnerabilities as approved in routine checks.
3. Information Security Management System
• Work with all asset and document owners to ensure that the existing policies and procedures are up to date and reviewed regularly.
• Recommend improvements to the standards based on best practices.
• Develop and manage the frameworks, processes, tools, and consultancy necessary for IT to properly manage risk and to make risk-based decisions to IT activities.
4. Regulatory Compliance
• Ensure overall IT compliance with regulatory requirements through proactive planning and communication, ownership, and relationships.
• Recommend changes to the existing company standards to improve or apply best practices.
• Routinely plan and execute internal audit to the IT Engineering and Operations to ensure that all policies and procedures are observed.
• Conduct internal security risk assessments and security compliance audits.
• Work with Security and Compliance Team Leader to ensure that the IT team is ready and compliant with all requirements for external audits.
• Participate in external audits.
• Effectively communicate the results of audits. Including OFIs, recommendations from the auditors, and all that affects the security and compliance of the company.