Job Purpose

• To drive the enforcement of the cyber security processes as align to the business objective & organization ERM framework
• To ensure security process compliance – 2nd line of defence
• To support the delivery of GRC security advisory engagements or projects related to industry standards and frameworks
• To support and perform various types of security assessments (maturity, compliance and risks)
• To support GRC practice developments, collaborations, collaterals establishment and any enablement activities

Key Accountabilities

• Perform cyber security process verification to ensure continuous process compliance.
• Project manage security initiative/implementation to improve overall security posture.
• Liaise with internal stakeholder to develop and implement new processes to ensure secure by design is being incorporated.
• Liaise with Axiata on cyber security program update & alignment.
• Maintain security dashboard & metrics.
• Establish and review new cyber security guidelines to protect data and system confidentiality, integrity and availability to align with industry benchmarks.
• Manage cyber security assurance for new or enhanced system which includes system security evaluation, security assessment requirements analysis and completion of all required security assessments to ensure controls in place

Working Relationship

Internal

• Director, Group Risk, Regulatory & Compliance
• Head, CyberSecurity
• Other divisions for alignment of GRC services, projects, initiatives

External

• Group IT Axiata
• Vendors/Partners

Competencies

Type and length of experience required

• Possess at least 5 years of working experience related to information security practices ideally GRC domains.
• Experience in technology controls review, risk assessment, policy review and control review type of engagements with clients highly preferred.
• Proven success in contributing to a team-oriented environment
• Proven ability to work creatively and analytically in a problem-solving environment
• Excellent leadership, communication (written and oral) and interpersonal skills.