Develop, implement, and periodically review cybersecurity policies, standards, procedures, and governance frameworks to align with organizational requirements
Shape identity and AI security: Review and improve policies, standards, reference architectures and control requirements in line with the threat landscape, regulatory obligations and industry practices.
Lead IT infrastructure strategy and architecture, designing and implementing secure, scalable hybrid cloud and on-premises environments that support business growth, operational resilience and digital transformation.
Conduct independent risk-based audits to assess the adequacy of internal controls, and reliability and integrity of the IT operations, systems and processes
Location: Central RegionSalary: $3,200 – $3,500 per month (Gross salary up to 4k-5k)Working days: 4 days work followed by 1 day off and then 3 day work followed by 1 day offResponsibilities• Manning of static/access control points• Checking of passes and other documents at static/access points• Screening and checking of all personnel and vehicles entering and exiting thepremises• Patrolling and guarding client’s personnel and properties• Operating metal/explosive detectors/x-ray machines at checkpoints• Issuing of visitor/contractor pass in exchange for their identification cards• Attending to alarm activation• CCTV Monitoring• Responding to incidents such as unattended bags, etc.• Maintaining records of all incidents• Checking of boarding, staff, and valid entry passes
Act as IT Security Officer for assigned systems, ensuring compliance with the Government Instruction Manual on ICT & Smart Systems Management (IM8) and agency security policies.
As a member of the Infrastructure Security team, you will focus on 2–3 of the following areas based on your interests, experience, and the team's priorities;
Conduct independent risk-based audits to assess the adequacy of internal controls, and reliability and integrity of the IT operations, systems and processes
Responsibilities and Requirements• At least 5 years combined work experience in software development, application security and cloud computing (e.g. AWS)• Good understanding of mobile and web application architectures, including APIs and related technologies and protocols such as REST, SOAP and SSL/TLS.• Strong knowledge of application security principles and industry best practices, including the OWASP Top 10 and OWASP Application Security Verification Standard (ASVS).• Familiar with Agile development, CI/CD and DevSecOps practices, including tools such as GitLab, GitHub and Ansible, and the integration of automated security testing into CI/CD pipelines.• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc• Review system architecture, data flows, interfaces, APIs, internet-facing entry points and security controls to identify potential security risks.• Conduct cybersecurity risk assessments for new and existing IT systems, applications, infrastructure and cloud services.• Preferably possess experience in threat modelling and develop threat profiles for application projects to identify, quantify and remediate application security risks.• Review remediation plans and supporting evidence to verify that security risks have been adequately addressed.• Track and address security vulnerabilities with timely remediation and patching and closure in accordance with established requirements.• Monitor and investigate cybersecurity alerts and incidents, including malware, phishing, account compromise, data breaches, unauthorised access, and cloud security incidents.• Perform cybersecurity incident response and management, including incident triage, investigation, containment, remediation, recovery, and post-incident review.• Conduct security awareness training sessions to promote security awareness and good cybersecurity practices.• Good verbal/written communications, collaboration skills and experience interacting with various stakeholders• Strong analytical, problem-solving and troubleshooting skills, ability to work independently• Degree in a relevant discipline, or an equivalent qualification.• Relevant professional certifications such asCISSP, OSCP,CCSP, CRISC, AWS security certification or equivalent are preferred• Experience in working with Government Commercial Cloud (GCC) preferred.