Kerja Sepenuh Masa, Assistant Director, Information Security di SPTel - Maukerja

Job Brief

About us

SPTel is a Business Class Digital Services provider that promises:

• Fully digitalized processes, enabling on demand provisioning of services such as Bandwidth and cyber security
• Business Grade connectivity standards that include <1ms ultra low latency performance and clean-pipe connectivity as a default
• True network diversity for improved reliability with unique fiber pathways and facilities that are physically separate from incumbent telcos
• Innovative services such as IoT-a-a-S and Edge Cloud computing

We are well recognized in the industry clinching numerous awards for our cutting-edge telco services and have doubled our customer base annually in the last 3 years. We were also featured in the CNA documentary “Home-Grown with a Digital Edge”.

These accolades and achievements are the result of us meticulously grooming a team of talents and specialists to be part of our exciting journey and we are looking to grow our team. If you are a skilled and driven individual, do join us as co-creators of the future of SPTel.

Responsibilities

Infrastructure & Network Security

• Oversee the protection of Telco cloud infrastructure and corporate IT network systems. Be responsible for the implementation and management of security-related applications and systems as system owner.
• Lead to architect, implement, manage and continuously improve security-related systems including but not limited to NGFW, IPS, WAF, Anti-DDoS, AD (Active Directory), TACACS+, PAM, MFA, EDR, EPP/SP, SIEM, ZTNA, and SASE.
• Develop Standard Operational Procedures (SOP), Manual of Procedures (MOP), and operational documentation for service delivery and change requests.
• Lead Proof of Concepts (POC) for emerging security technologies and managed security services (MSS).
• Lead the team as Layer 3 technical support for security-related systems issues, SOC alerts, etc.

Governance, Risk & Compliance (GRC)

• Develop cybersecurity strategy to protect and monitor Corporate IT, Telco Infrastructure and Applications.
• Manage the roadmap and execution of security certifications (e.g., ISO27001, MTCS), ensuring alignment with business goals and group policies.
• Lead the establishment, implementation, and continual improvement of the company’s Information Security Management System (ISMS) in alignment with latest ISO/IEC 27001.
• Develop and maintain the information security policy and a supporting set of specific policies, ensuring appropriate authorization, commitment and endorsement from business management.
• Ensure the information security policy is enforced and adhered to.
• Identify and classify information assets and the level of application & data security control and protection required.
• Conduct annual internal audits and prepare for external audits; perform risk assessments, gap analysis, and compliance reviews.
• Lead regular internal and third-party VAPT activities, vulnerability assessment and risk management with system owners, ensure the vulnerabilities
• Design and deliver company-wide cybersecurity awareness programs, including training, phishing simulations, and internal campaigns to foster a culture of security.

Customer Cybersecurity Support

• Evaluate and respond to customer tenders and cybersecurity inquiries, including infrastructure security compliance, managed security services compliance and data privacy compliance.
• Support the Sales and Solution teams in addressing supply chain and third-party cybersecurity requirements.

Incident Response Management

• Lead the company’s response to cybersecurity incidents and threats.
• Develop and maintain incident response plans, SOC alert playbooks, cyber incident playbooks and conduct annual cyber table-top exercises and/or simulations.
• Provide incident investigation support to SOC and technical operations teams.
• Monitoring and managing all security breaches and handling security incidents, taking remedial action to prevent recurrence wherever possible.
• And other duties as assigned by the HOD.

Requirements

• Tertiary qualification in Cybersecurity, Computer Science, IT / Engineering or equivalent.
• Minimum 10 years of experience in cybersecurity, with at least 5 years in a leadership or strategic role.
• Proven track record in managing ISMS and achieving ISO27001 certification.
• Strong understanding of security architecture across network, infrastructure, and endpoint layers.
• Experience in stakeholder engagement, internal/external audits, and regulatory compliance.
• Familiarity with security operations, risk assessments, incident management, and customer cybersecurity support.
• Professional Certifications such as CISSP, CCSP, CRISC, CISM, ISO 27001 Lead Auditor or equivalent will be an advantage.

Key Skills & Competencies

• In-depth knowledge of security frameworks (ISO27001, MTCS, NIST).
• Hands-on experience with security technologies (e.g., Firewall, IPS/IDS, WAF, DDoS Protection, AD, PAM, SIEM, EDR, ZTNA).
• Have experience creating design documents (HLD, LLD) diagrams, and presentations
• Strong leadership and team management capabilities.
• Excellent written and verbal communication skills, including report writing and board-level presentations.
• Strategic mindset with strong problem-solving and risk mitigation skills.
• Ability to work cross-functionally with internal teams, auditors, and customers.
• Enjoy working with different stakeholders to achieve desired outcomes.
• Ability to work in a fast-pace environment and multi-tasking.