Cybersecurity & Compliance Specialist

About the Role

The Cybersecurity & Compliance Specialist manage the cybersecurity governance, regulatory compliance, risk management, and information security functions across the EV charging business. This role requires strong technical and compliance expertise to support cyber security strategy, incident management, regulatory reporting, and operational governance.

The incumbent will assist in ensuring that EV charging infrastructure, charging management systems, customer data, and enterprise platforms remain secure, compliant, and aligned with EVCO licence requirements and company standards. The position supports the country's EV charging operations and works closely with Headquarters teams, external vendors, regulators, and internal stakeholders.

The role requires him/her to manage any cyber security incident related to charger, charging operation and serves as the key liaison for cybersecurity incidents, compliance activities, audits, and future digital initiatives.

Key Responsibilities

• Support the implementation and continuous improvement of cybersecurity policies, procedures, and governance frameworks.
• Assist in identifying, assessing, and managing cybersecurity risks across charging infrastructure, IT systems, and enterprise platforms.
• Serve as the primary point of contact for cybersecurity incident notifications and escalation activities.
• Maintain oversight of cybersecurity incidents and coordinate investigation, containment, recovery, and post-incident review activities.
• Support the administration and maintenance of the Cyber Security Incident Management Process and ensure incident response procedures remain effective and up to date.
• Support cybersecurity compliance initiatives to meet EVCO licence requirements and industry best practices.
• Coordinate security assessments, vulnerability management activities, and remediation efforts with internal and external stakeholders.
• Maintain cybersecurity, compliance, audit, and risk management documentation.
• Support the implementation of data governance frameworks to ensure proper management, protection, retention, and usage of operational and customer data.
• Coordinate internal and external audits, certification activities, and compliance reviews.
• Support vendor cybersecurity assessments and third-party risk management activities.
• Work closely with Operations, IT, Finance, Legal, and HQ teams to ensure cybersecurity and compliance requirements are effectively implemented.
• Prepare cybersecurity, compliance, incident management, and risk reports for management and regulatory submissions.
• Promote cybersecurity awareness, incident readiness, and security best practices across the organisation.
• Manage any cybersecurity incident till successful closure.
• Any other work related to cybersecurity and charging business as directed by his superiors.

Requirements

• Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related discipline.
• Preferred 2–5 years of experience in cybersecurity, information security, compliance, risk management, or IT governance.
• Experience supporting cybersecurity frameworks, incident management processes, regulatory compliance programmes, or certification initiatives is advantageous.
• Basic understanding of cybersecurity principles, incident response procedures, risk management, data protection, and information security governance.
• Familiarity with ISO 27001, ISO 27017, ISO 27018, PDPA, and EVCO cybersecurity requirements is advantageous.
• Knowledge of EV charging operations, charging management systems, or critical infrastructure environments is advantageous.
• Strong analytical and problem-solving skills.
• Ability to work effectively with cross-functional teams and stakeholders.
• Strong documentation, reporting, and communication skills.