Position Summary:

• Responsible for performing and monitoring Bank’s IT infrastructure operations of possible intrusion attempts and take necessary actions to mitigate such threats, conducting Vulnerability Scanning and Reporting, and maintaining and supporting Data Leakage Prevention
• Coordinating with related parties including group and local teams to improve the system and network security controls.
• Assist department head to manage the implementation of security operation related projects
• Enforcing the IT Security Policy, standard and Procedure

Primary Duties and Responsibilities :

• Maintain security surveillance systems to prevent and detect cybercrime threat and to increase effective, efficiency of security surveillance e.g. SIEM (Splunk), ATP, and etc.
• Monitor, review and analyze Daily Security Surveillance including all external and internal intrusion logs
• Regularly conduct vulnerability assessment of the Bank’s systems, network and sub-systems, generate report, and coordinate with related parties to resolve the valid vulnerability.
• Execute Information Security Incident Response process; work with various parties to perform investigative steps to confirm security incident.
• Support IT security operation Bank wide projects
• Maintain IT security operation network diagram. Ensure it is always up-to-date
• BCP & DRP coordination – in term of IT security surveillance
• Ensure Audit, Risk & Compliance Management
• Coordinate with other functions in relation to information technology security
• Learn and promote Bank’s security awareness

Key Result Areas (KRA) :

• To deliver quality job duties and responsibilities within timeline
• To ensure that all of responsible systems are maintained and always up-to-date
• Perform other duties as assigned with accuracy and effectiveness

Critical Skills and Competencies :

• Technical skill especially IT Security tools e.g. SIEM, IPS, Proxy web filtering, Advance Threat Protection.
• Analytical, evaluate, and problem-solving
• communicate technical and complex information both orally and in writing
• Interpersonal skill and ability to work well in a team

Experience and Background Requirements :

• Minimum of 5 years progressive experience working in information technology or related fields with at least 3 years of direct, hands on experience in information security and control
• Well versed in security concepts including but not limited to networking security, perimeter protection, intrusion detection/prevention in depth, incident handling and response, vulnerability assessments, penetration testing, and system, and sub-system security
• Analysis experience with various system platforms

Educational Requirements :

• Bachelor degree of Computer Science or Computer Engineering