Senior Cybersecurity Engineer Risk Management

Risk management

• Establish and maintain information security policy or standards to meet business, legal and regulatory requirements.
• Assist to perform risk assessment, health-check and penetration test to identify potential security weaknesses and non-compliance issues

Project management

• Assist to lead the implementation of information security projects, with vendor support and collaboration with IT teams.
• Implement appropriate management processes or security controls to protect corporate IT systems and data.
• Coordinate cybersecurity awareness training campaign.

Daily operations

• Manage daily information security operation, such as security event monitoring, vulnerability management and performance tuning of security tools.
• Manage information security incident and take action to resolve incident and develop preventive measures.

R&D

• Access latest cybersecurity threats and evaluate the latest technology solutions.

Education: Degree holder in Computer Science / Information Technology or related discipline.

Professional Qualifications:

• CCNA or relevant certifications
• CISSP or ISO27001 or relevant certifications is an advantage

Years of Work Experience:

• At least 6 years' work experiences in IT, including minimum 4 years in information security or technology risk management in a sizeable organization.
• Hands-on experiences in security solutions (e.g. Firewalls, Endpoint Security, DLP).
• Good understanding of ISO/IEC27001 and other cyber security management framework or best practices is preferrable

Technical Skills:

• Firewall and Network security, Windows Active Directory (Infrastructure & security), Cloud security, Security Operations, Endpoint Security

Languages: Good command of English and Chinese

• Thưởng tháng lương 13, thưởng KPI
• Nghỉ thứ 7