Cyber Security Engineer (Compliance & Audit)

Responsibilities

• Lead/assist and participate in Information Security audit and Risk Management by using various Information Security framework (PCI DSS v4.0, ISO/IEC 27001:2022, NIST, Cobit and etc), including audit scoping, evaluation, testing, reporting and issue follow-up.
• Conduct audit and risk on various processes, technologies, and platforms, such as UNIX, Windows, DBMS (SQL, Oracle, DB2), AD, AS/400, Network and etc.
• Identify technology risks and recommend appropriate controls based on risk level, business requirements, and feasibility of implementation.
• Consult clients to evaluate and make recommendations on process and control design improvements.
• Prepare and deliver clear, concise and effective communication, both oral and written, to all levels of management.

Requirements

• Bachelor’s Degree in Cyber Security, Computer Science, IT, System Engineering, or any related field.
• Minimum 2 years work experience in any forms of Information Security audit, risk management or research is an advantage.
• Possessing cyber security professional certification(s) such as CEH, OSCP, GPEN, CPTE, Lead Auditor or equivalent is an advantage.
• Having sound knowledge and experience in Windows & Linux environments is an advantage.
• Excellent communication skills, organizational skill, multitasking ability and great attention to details.
• Ability to manage multiple tasks and projects with a calm demeanour and work under pressure.
• Strong passion in Cyber Security and stays updated with emerging threats and news.
• Effective "roll up the sleeve" work ethic.