Security Consultant Overview

Develop and drive effective IT security compliance programs involving activities such as reviewing and developing security policies, processes/procedures and guidelines, establishing compliance with policies, conducting security reviews and audits, penetration tests, security assessment and incident management

Duties & Responsibilities

• Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis.


• Establish compliance with these policies / procedures through ongoing security reviews and audits, not limited to log analysis and security assessment of customer ICT systems


• To conduct security risk management exercise


• To conduct vulnerability assessment and penetration tests


• To conduct information security awareness training


• Responsible for the development and management of customer’s security incident response plan. To lead and support customer in the matters of security incident resolution and response.

Point of contact to assist and advise customer for ICT security related matters

Education

Diploma or higher in Computer Science, Engineering and Information Systems (P1/P2/P3)

Experience Required

• Years of IT Experience:  1-3 Years (P1/P2) and 3-5 Years (P3)


• Work Experience:  1-3 Years (P1/P2) and 3-5 Years (P3) in the area of security governance, audit

Competency/role Requirements

• Strong understanding of ISO 27001 and PCI Security Standard is preferred


• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (Vulnerability Assessment, Penetration testing), application security, security technologies (system hardening, IDS/IPS, firewall), security incident response and security assessment.


• Customer-focused with good interpersonal skills


• Team player with leadership qualities

Training Requirements

• ISMS Lead Auditor Certification CISSP

`Certifications and Security Requirements

Preferred certifications: CISSP, CISM, CISA, ISMS Lead Auditor Certification