Total 40 finance analyst job vacancies in Legal / Public / Security category in Australia

- At least 5 years experience with configuration and security analysis module

- Define security policy and validate configuration items of managed SAP landscape

- Familiar with alerting capablitiies for proactive security manage-ment

- Knowledge of integration with Guided Procedure to automate secu-rity check and assess effectiveness of security measures - Knowledge of Simple Diagnotiss Agent (SDA) and CCDB availa-ble in Focused Run

- Knowledge of XML programming languages used in Focused Run policies

About Akkodis

Akkodis is a global leader in engineering and R&D, leveraging connected data and deep technical expertise to accelerate innovation and digital transformation. With over 50,000 engineers and digital specialists across 30 countries in North America, EMEA, and APAC, Akkodis supports clients across the full innovation lifecycle—from concept and engineering to deployment and operations.

Its capabilities span mobility, software and technology services, robotics, testing and simulation, data security, AI, and analytics. Akkodis is part of the Adecco Group, bringing together the strengths of AKKA and Modis.

Job Summary

We are seeking a Cybersecurity SOC Engineer with strong hands-on experience in infrastructure and security operations within complex, multi-vendor enterprise environments. This role requires a proactive individual who can operate effectively in evolving and partially structured environments while maintaining high standards in security operations, troubleshooting, and system validation.

Experience Requirements

• 5–8 years of relevant experience in infrastructure, cybersecurity operations, or system integration
• Proven experience working in complex, multi-vendor enterprise environments
• Ability to work effectively in dynamic environments with evolving processes

Key Technical Skills

Core Infrastructure & Security

• Hands-on experience with:Firewalls (e.g., Check Point or equivalent)SIEM platforms (e.g., LogRhythm or similar)Endpoint security solutions (e.g., Symantec or equivalent)Network Access Control tools (e.g., Aruba ClearPass or similar)
• Strong understanding of:Networking fundamentals (TCP/IP, routing, switching, VPNs)Security operations and incident response workflows

Systems & Operations

• Experience in Linux/Unix environments
• Strong troubleshooting capabilities across system and network/security issues
• Familiarity with:Ticketing tools (e.g., JIRA, ServiceNow)Log monitoring and analysis tools

Key Functional Competencies

• Strong troubleshooting and root cause analysis (RCA) mindset
• Ability to quickly learn and adapt across multiple technologies
• Comfortable working in documentation-heavy environments (e.g., test reports, RCA, compliance documentation)
• Effective stakeholder management across multiple teams and approval layers
• High sense of ownership and accountability, especially in ambiguous situations

Ideal Candidate Profile

• Resilient and adaptable in fast-paced, high-demand environments
• Able to balance operational responsibilities, testing activities, and documentation requirements
• Works independently with minimal supervision while collaborating effectively with cross-functional teams
• Demonstrates a pragmatic, solution-oriented mindset with the ability to prioritise and execute under imperfect conditions.

Don't miss out on this chance to be a part of a dynamic and growing team. Take the Next Step in your career journey with us!

• To apply, please submit your updated resume along with your notice period. [ We are looking for someone to start ASAP]
• Click on the 'Apply here' button to drop your resume directly or email it to susmita.SAHU@akkodis.com
• Our team will review all applications and contact shortlisted candidates for further steps in the selection process.

​Our Client is an established and leading company in Singapore, who is seeking to recruit a Cyber Security Analyst.

KEY ROLES AND RESPONSIBILITIES

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 6 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

JJ Consulting Services

EA Licence No.: 12C6207

Applicants are invited to send in a MS Word resume to jobs@jjconsulting.com.sg stating position applying for/present/expected salaries and earliest available date.

We thank all applicants in advance and regret that only short listed candidates will be notified.

• Vulnerability Management: Run vulnerability scans (e.g., Nessus) and analyze results.Track remediation with IT/system owners and verify patching.

• Security Tooling Implementation: Research, implement, and maintain security tools (MDM, DLP, SIEM, network monitoring, and analytics platforms). Work with IT teams to ensure integration and efficiency.

• Data Leakage Prevention: Managing & configuration of DLP, Threat Intelligence tools; monitoring and working with end-users for resolving violations.

• Incident Handling: Proactive investigate suspicious activities within IT systems and networks, identify the infected hosts and prevent them from affecting the rest of the network. Correlate and validate alerts to ensure they represent relevant security incidents.

• Cloud Security Assessments: Perform security reviews of cloud infrastructure (AWS, GCP, Azure). Identify misconfigurations, assess risks, and suggest remediations.

• Stay up-to-date with the latest security trends, vulnerabilities, and industry best practices.

• Support ISMS Team to maintain and improve the current practices by following industrial standards such as: ISO 27001 family, SOC 2, HIPAA.

This posting is for a contract assignment with Tundra Technical Solutions to provide services to our Client, a Fortune 500 Tech Firm.

Job Description:

The main function of the Legal Operations Analyst/ Law Enforcement Associate is to perform a variety of legal and operational duties in support of the Law Enforcement Outreach team.

Job Responsibilities:
Support the APAC Law Enforcement Outreach Team with:
- Managing escalations from law enforcement in relation to content reports
- Managing escalations from law enforcement in relation to issues with data disclosures
- Managing escalations from law enforcement in relation to hacked accounts
- Managing escalations from law enforcement in relation to verification of police accounts
- Manage inquiries from law enforcement about law enforcement issues
- Program manage internal follow-up actions with XFN arising from Enhanced Engagements with law enforcement partners
- Managing and implementing internet safety and security programs with law enforcement partners
- Engage with internal XFN teams on resolving issues of concern flagged by law enforcement partners
- Engage with internal XFN teams on improving operational workflow processes

Skills and Experience
Essential:
- Prior background working with law enforcement as well as trust and safety within the Tech Industry
- Superior data analytical skills and distilling recommendations
- Experience with metric driven processes and technology improvements
- Excellent verbal and written communication skills, problem solving skills, attention to detail and interpersonal skills.
- Strong ability to work independently, be organized, and manage one's time.
- Strong ability to create relationships with XFN teams
- Work to improve cross-functional relationships with internal teams
- Ability to multi-task and change direction quickly
- Ensure and maintain confidentiality of all appropriate communications and documentation
- Communicate daily with internal partners and externally with law enforcement contacts, while exhibiting the highest degree of professionalism, courtesy and diplomacy
- Track, prioritize, and assign all incoming written and oral communications, as necessary, to appropriate team member for response
- Prior experience at a tech company
- Experience managing operations

*This role may involve exposure to potentially graphic and/or objectionable content including but not limited to graphic images, videos and writings, offensive or derogatory language, and other potential objectionable material. I.e. child exploitation, graphic violence, animal abuse, self-injury and other content which may be considered offensive or disturbing.

This posting is for a contract assignment with Tundra Technical Solutions to provide services to our client. Please note that this is not a full-time employment opportunity. Candidates selected for this role will be engaged as contractors for the specified duration of the project.

    Job Description

·      We are seeking a skilled and proactive Cyber Security Analyst to join our Security Operations Center (SOC). The ideal candidate will be responsible for real-time security monitoring, incident investigation, and response across enterprise environments.

·       This role requires strong expertise in threat detection, incident handling, and continuous improvement of SOC capabilities. 

Key Responsibilities 

·      Security Monitoring & Incident Response Monitor, investigate, and respond to medium to high-severity security incidents across network, endpoint, cloud, and application environments

·       Perform in-depth analysis of alerts, logs, and security telemetry to identify root cause, impact, and remediation actions

·       Coordinate incident response activities with internal teams and external stakeholders when required 

·      Escalate critical incidents to management as per defined protocols 

·      Ensure all incidents are handled in accordance with SLAs, playbooks, and compliance requirements 

·      Threat Detection & Use Case Management Tune and optimize SIEM detection rules to improve detection accuracy and reduce false positives

·       Analyze emerging threats and enhance detection use cases accordingly

·       Continuous Improvement & SOC Maturity Contribute to the development and enhancement of SOC processes, runbooks, and playbooks 

·      Identify opportunities for automation using SOAR and AI-driven solutions 

·      Support initiatives to improve SOC efficiency and maturity 

·      Leadership & Mentorship Provide guidance and mentoring to junior SOC analysts Act as an escalation point for complex investigations 

·      Promote knowledge sharing, training, and continuous learning within the team 

Required Skills & Experience 

·      Hands-on experience with SIEM platforms such as Splunk, Elasticsearch, Microsoft Sentinel, or Google SecOps Strong understanding of network, endpoint, identity, and cloud security concepts 

·      Experience analyzing logs from firewalls, EDR, IDS/IPS, cloud platforms, and operating systems 

·      Knowledge of incident response methodologies and digital forensics fundamentals 

·      Experience 3–5 years of experience in Cyber Security Operations, SOC, or Incident 

·      Response roles Proven ability to independently handle medium to high-severity incidents 

·      Experience working in regulated environments (financial services, healthcare, government) is an advantage 

·      Soft Skills Strong analytical and problem-solving abilities 

·      Ability to remain calm and structured under pressure High level of ownership, accountability, and attention to detail 

Preferred / Nice-to-Have 

·      Experience with SOAR platforms and security automation 

·      Cloud security expertise (AWS, Azure, GCP) Scripting/query skills (SPL, KQL, SQL, Python) 

·      Experience in SOC transformation or SIEM migration projects 

·      Certifications (Preferred) GCIA, GCIH, GCED SIEM-related certifications (Elastic, Google SecOps, Microsoft Sentinel, or equivalent)vv

​Our Client is an established and leading company in Singapore, who is seeking to recruit a Cyber Security Analyst.

KEY ROLES AND RESPONSIBILITIES

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 6 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

JJ Consulting Services

EA Licence No.: 12C6207

Applicants are invited to send in a MS Word resume to jobs@jjconsulting.com.sg stating position applying for/present/expected salaries and earliest available date.

We thank all applicants in advance and regret that only short listed candidates will be notified.

​Our Client is an established and leading company in Singapore, who is seeking to recruit a Cyber Security Analyst.

KEY ROLES AND RESPONSIBILITIES

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 6 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

JJ Consulting Services

EA Licence No.: 12C6207

Applicants are invited to send in a MS Word resume to jobs@jjconsulting.com.sg stating position applying for/present/expected salaries and earliest available date.

We thank all applicants in advance and regret that only short listed candidates will be notified.

●As a Level 2 Cyber Defense Operations Center (CDOC) Senior Analyst, you will work in advanced security operations with a focus on SIEM and SOAR technologies, driving detection and response. You’ll be responsible for helping L3 in optimizing detection rules and managing high-severity incidents from triage to resolution.

● Your primary responsibility will be helping Level 1 analyst in analysis of incidents and assisting Level 3 on day-to-day operation.

● This role requires medium level technical expertise, team player quality, and a proactive approach to evolving threats.

Qualifications & Experience

●Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field. A Master's degree or relevant certifications (e.g., SANS/GIAC, ECIH, GCIH, CEH, DFIR) may be preferred.

●4-7 years of total experience in SOC in a large multi-national organization or in a known MSSP. In addition, candidate should possess at least 2 years of working experience on SOAR solutions.

Responsibilities

●Run daily SOC operations including SIEM/SOAR tuning, alert triage, and coordinated incident response to ensure effective real-time threat monitoring.

●Handlle end-to-end security incident analysis, containment, mitigation, and reporting, leveraging SIEM/SOAR insights and cross-team coordination for swift resolution.

●Work on high priority incidents or escalated incidents from L1

●Assist L3 in any adhoc investigation, fine-tuning security solution.

●Continuously enhance SIEM/SOAR/XDR alert use cases and threat detection capabilities.

●Research emerging threats, vulnerabilities, and attack techniques to improve defenses.

●Document incident response activities and produce detailed reports for stakeholders.

●Conduct post-incident reviews to drive improvements in tools, processes, and readiness.

●Maintain detailed incident records, contribute to reporting, and support audit readiness.

●Guide and train junior analysts, promoting best practices and continuous improvement within the SOC.

●Stay up to date on emerging threats and technologies to continuously evolve SOC capabilities.

●Support comprehensive asset inventory and ownership mapping to ensure full monitoring coverage.

Technical & Soft Skills:

●Deep hands-on experience with technologies like SIEM, SOAR, XDR such as Google Chronicle, Crowdstrike Logscale, Splunk.

●Strong working knowledge of endpoint security tools and concepts, including EDR (CrowdStrike, Defender, Cortex), DLP, and MDM.

●Strong knowledge of MITRE ATT&CK, NIST CSF frameworks, and cyber kill chain concepts.

●Good understanding of network security, operating systems, and hybrid cloud environments (Cloud, On-Prem, VDI).

●In-depth knowledge of threat landscapes and technical security concepts.

●Strong grasp of network protocols, OS internals, and security technologies.

●Familiar with compliance standards such as NIST CSF and ISO 27001.

●Ability to work under pressure, especially during critical security incidents.

●Ability to conduct independent research and analysis, identifying issues, formulating options, and making conclusions and recommendations.

●Skilled in developing professional documentation and detailed reporting (including PowerPoint presentations), including policies, standards, processes and procedures

●Very high attention to detail, with strong skills in managing/presenting data and information.

●Demonstrable conceptual, analytical and innovative problem-solving and evaluative skills.

●Good communication and interpersonal skills to effectively collaborate with stakeholders, and internal teams.

Summary:
The successful candidate will support tasks within the data Protection Portfolio, such as provision of computing resources, installing and configuring security software, managing network/firewall requests, account provisioning, backend integrations (SSO, SIEM, SOAR, MyAccess, DataDog), and creation of support documentation for operationalization.

• Possess a degree in Computer Science/Information Technology or related fields.
• Possess a strong combination of technical and analytical skills incybersecurity, including expertise in data loss prevention, data securityposture management, enterprise digital rights management, and general datasecurity technologies.
• Hands-on experience in implementing and operationalizing data securitysolutions and data protection, for both structured and unstructured data,specifically:
• Data discovery, classification, and labelling
• Data encryption, masking, tokenization
• Data Loss Prevention (DLP)
• Enterprise Digital Rights Management / Information Rights Management
• Privacy Enhancing Technologies and Confidential Computing
• Key and certificate management
• Hardware Security Modules (HSM)

Skillset(Must have)

• Secure file transfer and data store (including SaaS solutions)
• Familiarity with Cloud security and data security and protection in Cloud environments (e.g., AWS, Azure, Google Cloud).
• Possess scripting and coding skills, with proficiency in Java, Python, C#, orsimilar programming languages, and good understanding of REST API’s and JSON.
• Ability to create and maintain automation scripts.
• Familiarity with Cloud security and data security and protection in cloudenvironments (e.g., AWS, Azure, Google Cloud).
• Strong written and verbal communication skills, with the ability to conveytechnical information to non-technical stakeholders.
• Ability to work collaboratively with cross-functional teams and build strongworking relationships.
• Apply critical thinking skills to analyze complex security issues, evaluate potential solutions, and make well-informed decisions.

Job Overview

We are seeking a cybersecurity professional to support technology risk management, security operations, and incident response within a regulated enterprise environment. This role combines governance and compliance responsibilities with hands-on blue team security operations, ensuring systems and data remain secure, resilient, and compliant with regulatory expectations.

The ideal candidate is comfortable operating in fast-paced environments, balancing risk assessment, operational monitoring, and incident handling.

Key Responsibilities

Technology Risk and Regulatory Compliance

• Perform technology risk assessments aligned with business objectives and regional regulatory requirements
• Maintain and update security policies, SOPs, risk registers, and governance documentation
• Conduct third-party and regulatory compliance assessments
• Support certification, audit, and compliance activities, including remediation of findings

Security Operations and Monitoring

• Monitor network traffic, systems, and applications for suspicious behavior and potential security incidents
• Identify vulnerabilities and weaknesses across infrastructure, systems, and applications
• Perform security control reviews covering areas such as email security, endpoint protection, applications, and data security
• Deploy, configure, and manage security technologies including endpoint protection, IAM, PAM, XDR, and SIEM platforms
• Execute threat detection, vulnerability management, security policy enforcement, and continuous control monitoring
• Develop and implement response actions to contain and mitigate security incidents
• Collaborate with technical teams and stakeholders to coordinate remediation activities

Incident Response and Forensics

• Lead and support the full incident response lifecycle including detection, triage, containment, eradication, and recovery
• Handle escalated security incidents and prepare incident reports detailing root cause, forensic findings, and mitigation recommendations
• Conduct forensic analysis of endpoints, logs, and network traffic to determine impact and scope
• Coordinate response efforts with internal stakeholders and external partners during major incidents
• Develop, maintain, and enhance incident response playbooks and reporting templates

Requirements

Experience and Qualifications

• 3 to 5 years of experience in technology risk, security operations, or blue team roles
• Diploma or Degree in Information Technology, Cybersecurity, or a related discipline
• Proficiency in both English and Mandarin to support collaboration with Mandarin-speaking stakeholders

Technical and Domain Expertise

• Strong knowledge of technology risk management and defensive security strategies
• Hands-on experience with endpoint security, IAM, PAM, and access control solutions
• Solid understanding of security frameworks, layered defense concepts, and monitoring tools such as SIEM
• Familiarity with endpoint, VPN, and data protection technologies
• Experience with vulnerability management, security configuration, and automation
• Digital Forensics and Incident Response (DFIR) experience is a strong advantage
• Ability to analyze security issues and recommend practical, effective remediation measures

Certifications (Nice to Have)

• CompTIA Security+
• CISSP Relevant vendor or industry security certifications

Please send your detailed resume in MS Word format to resume@goldtecHRs.com with

• Education Level
• Working experiences
• Each employment background
• Reason for leaving each employment
• Last drawn salary
• Expected salary
• Date of availability

Job description

The main function of the Legal Operations Analyst/ Law Enforcement Associate is to perform a variety of legal and operational duties in support of the Law Enforcement Outreach team.

Responsibilities

Support the APAC Law Enforcement Outreach Team with:

• Managing escalations from law enforcement in relation to content reports
• Managing escalations from law enforcement in relation to issues with data disclosures
• Managing escalations from law enforcement in relation to hacked accounts
• Managing escalations from law enforcement in relation to verification of police accounts
• Manage inquiries from law enforcement about law enforcement issues
• Program manage internal follow-up actions with cross-functional stakeholders arising from Enhanced Engagements with law enforcement partners
• Managing and implementing internet safety and security programs with law enforcement partners
• Engage with internal cross-functional teams on resolving issues of concern flagged by law enforcement partners
• Engage with internal cross-functional team on improving operational workflow processes

Skills and experience

Essential:

• Prior background working with law enforcement
• Superior data analytical skills and distilling recommendations
• Experience with metric driven processes and technology improvements
• Excellent verbal and written communication skills, problem solving skills, attention to detail and interpersonal skills.
• Strong ability to work independently, be organized, and manage one's time.
• Strong ability to create relationships with cross-functional teams
• Work to improve cross-functional relationships with internal teams
• Ability to multi-task and change direction quickly
• Ensure and maintain confidentiality of all appropriate communications and documentation
• Communicate daily with internal partners and externally with law enforcement contacts, while exhibiting the highest degree of professionalism, courtesy and diplomacy
• Track, prioritize, and assign all incoming written and oral communications, as necessary, to appropriate team member for response

Preferred:

• Prior experience at a tech company
• Experience managing operations

*This role may involve exposure to potentially graphic and/or objectionable content including but not limited to graphic images, videos and writings, offensive or derogatory language, and other potential objectionable material. I.e. child exploitation, graphic violence, animal abuse, self-injury and other content which may be considered offensive or disturbing.

We regret to inform that only shortlisted candidates will be approved.

EA Reference: R22104900 Zheng Qimei

Allegis Group Singapore Pte Ltd, Company Reg No. 200909448N, EA License No. 10C4544

AVN Digital is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success, we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail and supply chain.

We are currently looking to hire a Security Analyst. This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

JOB TYPE:

Long Term Contract

Job Description Overview

Responsibilities:

1. Security Policy Development and Enforcement

- Develop, implement, and maintain IT security policies, procedures, and protocols.

- Ensure that security measures align with business needs, regulatory requirements, and industry standards.

- Review and update policies regularly to address emerging threats.

2. Risk Management

- Assess potential security risks and vulnerabilities within the IT infrastructure.

- Perform risk analysis and recommend appropriate security controls.

- Implement security measures to mitigate identified risks.

3. Incident Response and Management

- Lead efforts in detecting, investigating, and responding to security breaches and incidents.

- Establish incident response plans and procedures for handling security threats.

- Work with other teams (e.g., legal, communications) to manage incident communications and post-incident analysis.

4. Security Monitoring and Auditing

- Continuously monitor IT systems, networks, and applications for signs of security incidents or breaches.

- Implement and maintain security tools, such as firewalls, antivirus software, and intrusion detection systems.

- Regularly audit systems to ensure compliance with security standards and best practices.

5. Compliance and Regulatory Requirements

- Ensure the organization complies with relevant security standards, such as GDPR, HIPAA, PCI-DSS, or other industry regulations.

- Conduct regular compliance assessments and audits.

- Collaborate with legal and regulatory bodies to ensure that security measures are in place.

- Generate reports for accounts review, logs reviews, patch status review, hardening compliance, etc

- Worked with systems owners to ensure vulnerabilities or non-compliances are fixed.

6. Training and Awareness

- Provide cybersecurity training and awareness programs to employees to promote safe practices.

- Conduct simulations and drills (e.g., phishing exercises) to test employee preparedness.

- Keep staff informed about current cybersecurity threats and best practices.

7. Network and System Security

- Oversee the design and implementation of secure network architectures.

- Ensure the proper configuration of firewalls, encryption protocols, VPNs, and other security mechanisms.

- Conduct regular security assessments and penetration tests to identify weaknesses in systems.

8. Collaboration and Communication

- Collaborate with other departments, such as IT operations, legal, and compliance teams, to ensure comprehensive security measures.

- Act as a liaison between management and technical teams for cybersecurity matters.

- Communicate security risks and threats to executive leadership in a clear and actionable manner.

9. Security Tool Selection and Implementation

- Evaluate, select, and deploy security tools, software, and solutions to enhance system protection.

- Stay up-to-date with emerging security technologies and trends.

- Ensure that the tools are properly configured and maintained.

10. Disaster Recovery and Business Continuity Planning

- Develop and implement disaster recovery and business continuity plans to ensure that the organization can continue to operate after a security incident or disaster.

- Ensure backups are conducted regularly and can be restored in the event of a system failure or cyberattack.

11. Vendor and Third-Party Security

- Assess the security practices of third-party vendors and partners to ensure they meet security requirements.

- Develop and enforce security standards for external service providers and contractors.

12. Reporting and Documentation

- Generate regular reports on the state of the organization's IT security.

- Document security incidents, actions taken, and lessons learned.

- Maintain records of security assessments, audits, and compliance activities.

Qualifications

Requirements

- Typically, 5+ years of experience in IT security or a related role (such as network security or cybersecurity analyst) is required.

- Proven experience in handling and resolving security incidents, breaches, and vulnerabilities

- Experience with security audits and ensuring compliance with standards like IM8, AGO etc

- Deep understanding of cybersecurity principles: Knowledge of encryption, access control, firewalls, intrusion detection/prevention systems (IDS/IPS), VPNs, and other security technologies.

- Risk Management: Proficiency in identifying, assessing, and mitigating cybersecurity risks.

- Networking knowledge: Understanding of network protocols (TCP/IP, DNS, HTTP/S, etc.), network security practices, and technologies (e.g., firewalls, routers, VPNs).

- Operating Systems: Strong familiarity with various operating systems (Linux, Windows, Unix, etc.) and their security configurations.

- Incident Response: Expertise in managing and responding to security incidents, including identifying, mitigating, and reporting breaches or attacks.

- Vulnerability Assessment & Penetration Testing: Ability to assess vulnerabilities and conduct penetration tests to identify weaknesses in systems.

- Security Tools: Proficiency in security software and tools such as SIEM (Security Information and Event Management), antivirus programs, firewalls, encryption tools, and network monitoring solutions.

- Handle security incidents and alerts from GCSOC, GICS and security devices

- Leadership and Management Skills: Ability to lead teams and manage cross-functional collaboration, especially during incidents or implementation of security measures.

- Strong Analytical Skills: Ability to analyze security incidents, logs, and vulnerabilities and make informed decisions to mitigate risks.

- Problem-Solving: Strong problem-solving ability, especially in high-pressure situations, such as security incidents or breaches.

- Communication Skills: Ability to clearly communicate complex technical issues to non-technical stakeholders, including senior leadership, staff, and external partners.

- Familiar with AWS or Azure Security requirements is added advantage

- Having experience in WOG environment is a plus

- Having experience in GCC Cloudscape and Glasspanel is a plus

- Preferably with CISA for Governance, Comptia Security +, CEH and ITIL certification.

CONSULTANT DETAILS

Consultant Name: Khalid Farooq

Privacy Statement: Data collected will be used for recruitment purposes only. Personal data provided will be used strictly in accordance with the relevant data protection law and AVN Digital's personal information and privacy policy

Scope of Work

Vulnerabilities Management

1. Arrange Bi-weekly vulnerability review meeting with application team.
2. Consolidate the results from the various vulnerabilities platform (i.e. AppScan, SonarQube and Nexus Scanning)
3. Perform quarterly result consolidating and seek risk acceptance for extension of vulnerability remediation timeline.
4. Perform result consolidating and tracking of risks and timeline from other sources.

Security Testing

1. Prepare all the pre-requisite (e.g. software installation, firewall request, laptop request) to ensure security testing can be started timely.
2. Perform technical resolution for AppScan, SonarQube, Nexus and SHIP-HATS or any other security tools when required.
3. Conduct network vulnerability scan (Nmap scanning).

Security Training

1.    Administer the Secure Code Warrior training

Other Security Related Task

1. Track and coordinate the regular review activities of all IT systems
2. Track and coordinate the regular review activities for all SaaS