GRC Consultant

Key responsibilities

• Performing regional internal audit in compliance with ISO/IEC 27001 (ISMS) requirements
• Planning, organizing and reviewing all Information Security Management System (ISMS) related activities in the region
• Responsible for coordinating and implementing regional IT Infrastructure & Security projects
• Reviewing and develop IT governance & control key metrics for the IT security performance measurement
• Responsible for Network Security and managing of Firewall
• Responsible for Server and Endpoint Security
• Responsible for the carry-out of yearly BCP and Backup Restoration Test exercise
• Identifying IT risks and evaluating the countermeasures, and driving the IT risk assessment processes
• Responsible for the follow-up of Security or Vulnerability findings of the Servers and Network
• Performing IT compliance checks and conduct reviews periodically. Performing Vulnerability Assessment and Penetration Test for the region
• Reviewing security logs periodically and undertaking necessary corrective and preventive actions
• Reviewing Security Incident Reports in the region and submitting monthly report to the management
• Collaborate with service providers / third party vendors for daily operations and issues reported from users

Key Skills/Knowledge

ISO 27001 practitioner and Strong understanding of various Security concepts such as Application security, Vulnerability Management, Policies, standards, Risks, Security Operations, Security Incident Management, ITIL, Agile

Experience required

• 8-10 years of Experience in designing, developing, and deploying technical controls for servers, and network equipment.
• Understanding of Network & System concept including Virtualization, Firewall, IPS, ATP.
• Good knowledge in IT risk analysis.
• Knowledge of generally accepted IT audit standards, statements and practices, and IT security and control practices is a plus.
• Knowledge of ISO 27001 - Information Security Management System (ISMS) and Risk Management methodologies is a plus.
• Good understanding of IT GRC and IT controls is a plus.
• Excellent analytical, problem solving and time management skills.
• A desire to thrive in a hard-working, fast-paced and collaborative team.
• Great communication skills and team-player