Job Overview
We are seeking a cybersecurity professional to support technology risk management, security operations, and incident response within a regulated enterprise environment. This role combines governance and compliance responsibilities with hands-on blue team security operations, ensuring systems and data remain secure, resilient, and compliant with regulatory expectations.
The ideal candidate is comfortable operating in fast-paced environments, balancing risk assessment, operational monitoring, and incident handling.
Key Responsibilities
Technology Risk and Regulatory Compliance
- Perform technology risk assessments aligned with business objectives and regional regulatory requirements
- Maintain and update security policies, SOPs, risk registers, and governance documentation
- Conduct third-party and regulatory compliance assessments
- Support certification, audit, and compliance activities, including remediation of findings
Security Operations and Monitoring
- Monitor network traffic, systems, and applications for suspicious behavior and potential security incidents
- Identify vulnerabilities and weaknesses across infrastructure, systems, and applications
- Perform security control reviews covering areas such as email security, endpoint protection, applications, and data security
- Deploy, configure, and manage security technologies including endpoint protection, IAM, PAM, XDR, and SIEM platforms
- Execute threat detection, vulnerability management, security policy enforcement, and continuous control monitoring
- Develop and implement response actions to contain and mitigate security incidents
- Collaborate with technical teams and stakeholders to coordinate remediation activities
Incident Response and Forensics
- Lead and support the full incident response lifecycle including detection, triage, containment, eradication, and recovery
- Handle escalated security incidents and prepare incident reports detailing root cause, forensic findings, and mitigation recommendations
- Conduct forensic analysis of endpoints, logs, and network traffic to determine impact and scope
- Coordinate response efforts with internal stakeholders and external partners during major incidents
- Develop, maintain, and enhance incident response playbooks and reporting templates
Requirements
Experience and Qualifications
- 3 to 5 years of experience in technology risk, security operations, or blue team roles
- Diploma or Degree in Information Technology, Cybersecurity, or a related discipline
- Proficiency in both English and Mandarin to support collaboration with Mandarin-speaking stakeholders
Technical and Domain Expertise
- Strong knowledge of technology risk management and defensive security strategies
- Hands-on experience with endpoint security, IAM, PAM, and access control solutions
- Solid understanding of security frameworks, layered defense concepts, and monitoring tools such as SIEM
- Familiarity with endpoint, VPN, and data protection technologies
- Experience with vulnerability management, security configuration, and automation
- Digital Forensics and Incident Response (DFIR) experience is a strong advantage
- Ability to analyze security issues and recommend practical, effective remediation measures
Certifications (Nice to Have)
- CompTIA Security+
- CISSP Relevant vendor or industry security certifications
Please send your detailed resume in MS Word format to resume@goldtecHRs.com with
- Education Level
- Working experiences
- Each employment background
- Reason for leaving each employment
- Last drawn salary
- Expected salary
- Date of availability
