Section Manager - Security Operation (Lotus Office)

You will balance exceptional delivery for customers on what matters, engaging teams and colleagues, with the needs of the business. You are an expert and often the first layer of management of people or projects.

Responsibilities

• Contributesecurity guidanceandoperationbest practice to colleague and partner.
• Ensuring security control and compliance applied to all company environment
• Operate and monitor security tools eg. Antivirus, VA scan, WAF, PAM, DNS, Certificate, Firewall and Proxy
• Manage and support security request and security incident throughITSM.
• Problem analysisskill androot cause analysis is mandatory
• Manage system inventory and changed management forsecurity operation related
• Identify security gaps in existing and proposed architectures and recommend changes or enhancements
• Collaborate with IT teams for ongoing external and internal audit assessment to ensure the controls are effective and meet regulatory and legal requirements
• Other Security Operation related tasks as assigned.

• A Bachelor's or associate degree in IT, Computer Science, or related field.
• 2 yearsof experience insecurity design, operation or implementation
• IT security certificationsmay be advantageous.
• A strong working knowledge of current IT risks, security implementations, and computer operating and software programs.
• The ability to interact with a wide range of people from different backgrounds and races.
• Excellent problem-solving, communication, and interpersonal skills.

Operational skills relevant for this job

• You should have expertise in security measures such as firewalls, intrusion detection, and prevention systems (IDS/IPS), network access controls,andnetwork segmentation.
• You must be experienced with operating systems likeWindows, Linux, and UNIX.
• Strong ability to analyze user requirements, make recommendations and implement solution
• Ability to prioritize and execute in high-pressured environment
• Understanding of information security principles and best practice(e.g., ISO27001, PCIDSS, OWASP and GDPR/PDPA)
• Ability to present security topics to a non- technical audience and presenting the business value of security
• Good interpersonal skills with the ability to build and influence teams; and self-motivated
• Third-party auditing skills andrisk assessment methodologies.

Best Culture