Provide professional security advisory and recommendations on solutions architecture, business project requirements, and security related enquiry.
Develop and maintain security policies and process documentation. Ensure alignment with Corporate Security standards and controls.
Conduct security risk assessment on technology solutions and/or technical controls to identify potential security threats and vulnerabilities and develop strategies to mitigate risks. Maintain security risk register, and communicate identified risks and impacts to stakeholders.
Conduct security assessment and ISO audit and managing the exercise from end-to-end.
Support external security audits and compliance assessments, devising mitigation measures to effectively address findings.
Oversee security incident management and support the first line to ensure timely detection, response, and resolution of security incidents.