发布日期 : 8 Aug 2025 部门 : Information Technology 职位编号 : 153908
工作职责
Responsible for security project, external & internal compliance audit support, security operation including training, security incident and response, vulnerability life cycle management
Conduct security risk assessment on IT infrastructure, applications, and cloud services
Perform daily security operation tasks, such as reviewing security events and logs, perform diagnosis and respond to security incidents, investigate phishing emails and websites
Implement, maintain and operate information security solutions according to information security strategy
Support risk review and assessment for both Internal and external audit exercise, maintain benchmarking in group level
Review and respond on SOC incidents to ensure potential security gaps identify and remediate
Assist to develop and review IT Security related policy
职位要求
High Diploma or Above in relevant academic field
Hands-on experience for Windows & Cisco networking experience to facilitate security gaps identification and remediations
Hands-on experience in deploying and supporting IT security infrastructures, such as firewall, email security, endpoint protection, SIEM, identity management, privileged access management technologies
Knowledge and experience in security incident detection and incident response
Knowledge of Information security standards (e.g., NIST, ISO 27001), regulatory guideline and policy
Good skill of communication, adaptability and critical thinking
