IT Compliance Security Engineer

• To achieve accreditation and then ensure ongoing compliance by the company with the security regulatory requirements in respect of Card Production/Perso Bureau as required by relevant organizations (PCI-CP, ISO27001, ISO14298 and etc.)

• Acting in accordance with the Corporate Security Management System and Policy to manage all aspects of personnel, physical, production and logical security at site;

• Based on the corporate Security Policy to develop, publish, implement and maintain local security procedures.

• To monitor and conduct internal audits of all security activities in the site and advice the management team on all matters concerning physical, card production & Logical security.

• To direct and investigate all matters where actions of staff or others could or have caused a breach of security and advise on procedures to be implemented to prevent re-occurrence;

• To answer to tender on all security matters;

• To operate the security of the systems supporting the access control, alarm and video recording systems;

• Periodically review the results from Internal/External Vulnerability Scan, Penetration Test. Analyse and work with related owners to fix the critical and high findings within specific time period.

• Periodic security configuration reviews of servers, network access controls and firewall rules

• To participate in new IT projects or solution implementations.

• To conduct security risk assessments on annual basis on the production facility to ensure that risk are adequately identified and reduced with corrective actions.

• To conduct Physical & Logical security awareness training to all staffs in the site to ensure appropriate level of security consciousness.

• Perform 3rd party security assessment and audit

• Any other special projects as specified, as and when required.

• The job holder shall at all times during the employment with the company, respect and comply with Thales DIS Quality, Health, Safety, Environmental & Security requirements during the performance of his/her duties.

Job Requirements:

• Bachelor Degree in IT related field or equivalent

• At least 3 years of experience of IT Security or Audit experience in established firm preferred, with investigative experience and an ability to prepare and present comprehensive written report and documents.

• IT security knowledge is an advantage

• CISSP, CISA, CISM is an advantage

• Able to handle audits both internal and external

• Proficient in presentation skills

• High interpersonal skills, which will permit successful management of all aspects of security, together with a developing ability

• Ability to liaison and communicate with all levels of people;

• Independent, approachable and analytical;

• Able to take up highly pressurizing environment.