Security Specialist (Renewable Contract)

• Collaborate with domain experts to take part in security execution, such as architecture design, solution research, technical requirement documentation, technical testing, user training, maintenance and support.
• Safeguard information system assets by preventing, detecting and resolving security related incidents. Perform vulnerability assessment and penetration test, interpret findings and turn them into recommendations.
• Support and track the implementation of security solutions to enhance the security posture of the organization. Partner closely with technical vendors and internal stakeholders to ensure requirements are addressed properly.
• Participate in the security project team to understand, analyse and document business & IT processes, systems, and data; perform gap analysis to help solidify scope of new solutions. Support business analyst in user interviews, workshops, and related project activities.
• Develop, implement and update relevant security documents, including policy, procedure, guideline. Educate and train users on cybersecurity best practices.

• University degree in computer science, engineering or related fields.
• At least 3 years of experience in cybersecurity consulting, operations, solution implementations, or related technology projects. Candidates with more experience will be considered as senior specialist / manager.
• Extensive knowledge of computer systems, including operating systems, databases, network, and cloud computing. Analytical thinker with the ability to understand, visualize, analyse, and resolve difficult issues.
• Effective problem-solving capable, such as studying a problem, analysing options, and suggesting solutions. Ability to approach a problem from different angles, including an end-user and a technical person.
• Strong interpersonal, communication, writing, and presentation skills. Experience in client-facing role or management consultancy is highly preferred.
• Security certification such as CISSP / CISA preferred.
• Direct experience with security solutions and directory platforms, such as SailPoint, CyberArk, HashiCorp, ForgeRock, and Active Directory, are highly preferred.

Peoplebank