Fujitsu ·
Leads information security for Fujitsu's internal and client-facing managed services: owns compliance with frameworks like ISO 27001 and PCI-DSS, directs InfoSec policies, incident response, and security awareness training, and serves as the client-facing security contact. Works hands-on with SIEM, SOAR, EDR/XDR, firewalls, and vulnerability management.
Responsibilities:
• Protects both internal service delivery assets and client facing managed services
• Compliance & Auditing: Ensure strict alignment with industry-standard frameworks (e.g., ISO 27001, PCI-DSS). Lead governance adherence, internal audits, and external client compliance assessments
• Stakeholder & Client Management:
oServe as the primary point of contact for client security inquiries, presenting security metrics, risks, and proposed mitigation controls
oDirect engagement with customer to provide technical expertise and guidance regarding the optimization of the managed security environment
• Policies and Governance:
o Work closely with stakeholders, review security policies of the existing environment
o Direct the development, implementation, and enforcement of InfoSec policies, cybersecurity roadmaps, and incident response plans
o Develop, implement, and maintain the firm's sustainable information security framework, policies, and risk management plans
• Operational and Implementation:
o Establishes, implements, and upgrades an organization’s cybersecurity measures to protect networks and systems from potential attacks
o Coordinate rapid triage, response, and post-mortems for any security breaches or service disruptions
o Execute existing configurations, security policies and identify areas of improvement
o Provide analysis report on existing current and areas of improvement
• Create Security Awareness:
o Collect existing materials of security awareness. Prepare for the security awareness training
• Vendor Management: Manage third-party technology vendor licensing, relationships, and budget planning
Key Requirements & Qualifications:
• Education & Certifications: Bachelor’s degree in Computer Science, Cybersecurity, or a related field. Industry-recognized certifications such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) are highly preferred
• Experience: 5+ years of combined experience in IT security, risk management, and physical security management, preferably within a Managed Service Provider (MSP/MSSP) setting
• Technical Acumen: Strong knowledge of security architecture, including SIEM, SOAR, EDR/XDR, firewalls, and vulnerability management
• Soft Skills: Exceptional stakeholder management, crisis leadership, and problem-solving abilities to navigate complex, fast-paced environments
#ASEAN1_Priority