IT Security Engineer

The job holder is to be responsible for the implementation of physical and logical security policies and practices in SGP Card Production, Perso Center, and assist the Site Security Manager in ensuring that the security systems are in full operation at all times, and that the site is complying with the accreditation certification requirements.

Job Description

Job Duties & Responsibilities:

To achieve accreditation and then ensure ongoing compliance by the company with the security regulatory requirements in respect of Card Production/Perso Bureau as required by relevant organizations (PCI-CP, Visa, MasterCard, Amex, JCB, Diners Club, CUP, ISO27001, ISO14298 and etc.)

Acting in accordance with the Corporate Security Management System and Policy to manage all aspects of personnel, physical, production and logical security at site;

Based on the corporate Security Policy to develop, publish, implement and maintain local security procedures.

To monitor and conduct internal audits of all security activities in the site and advice the management team on all matters concerning physical, card production & Logical security.

To direct and investigate all matters where actions of staff or others could or have caused a breach of security and advise on procedures to be implemented to prevent re-occurrence;

To answer to tender on all security matters;

To operate the security of the systems supporting the access control, alarm and video recording systems;

Periodically review the results from Internal/External Vulnerability Scan, Penetration Test. Analyse and work with related owners to fix the critical and high findings within specific time period.

Periodic security configuration reviews of servers, network access controls and firewall rules

To participate in new IT projects or solution implementations.

To conduct security risk assessments on annual basis on the production facility to ensure that risk are adequately identified and reduced with corrective actions.

To conduct Physical & Logical security awareness training to all staffs in the site to ensure appropriate level of security consciousness.

Perform 3rd party security assessment and audit

Any other special projects as specified, as and when required.

The job holder shall at all times during the employment with the company, respect and comply with Thales DIS Quality, Health, Safety, Environmental & Security requirements during the performance of his/her duties.

Job Requirements:

• Bachelor  Degree in IT related field or equivalent

• At least 3 years of experience of IT Security or Audit experience in established firm preferred, with investigative experience and an ability to prepare and present comprehensive written report and documents.

• IT security knowledge is an advantage

• CISSP, CISA, CISM is an advantage

• Able to handle audits both internal and external

• Proficient in presentation skills

• High interpersonal skills, which will permit successful management of all aspects of security, together with a developing ability

• Ability to liaison and communicate with all levels of people;

• Independent, approachable and analytical;

• Able to take up highly pressurizing environment.