IT Security Engineer

Responsibities:
-Manage security systems to ensure accurate information technology systems and maintain consistent readiness and availability.
-Collaborate in developing policies, practices, and operational manuals related to information technology security for submission to the Chief Information Technology Officer.
-Manage and Risk Analysis could impact on the system and disrupt business operations.
-Evaluate and respond to cybersecurity incidents or breaches, monitor and report cybersecurity events, and oversee system attacks and potential threats. Develop and implement Business Continuity and Disaster Recovery Plans (BCP and DRP) to restore systems in emergencies.
-Evaluate and respond to cybersecurity incidents or breaches, monitor and report cybersecurity events, and oversee system attacks and potential threats. Develop and implement Business Continuity and Disaster Recovery Plans (BCP and DRP) to restore systems in emergencies.
-Coordinate with internal departments to conduct data and system recovery tests as scheduled, ensuring alignment with the Business Continuity Plan.
-Training and testing on cybersecurity awareness, providing guidance, best practices, and usage methods for information assets to ensure security for employees and company executives.
-Coordinate with the internal audit department and liaise with external auditors to conduct comprehensive IT security audits in accordance with SEC guidelines, including IT Audits, Penetration Tests, and Vulnerability Assessments (VA).
-Collaborate with the internal audit department and follow up with external service providers to obtain IT security reports for review and evaluation of service quality at appropriate intervals.
-Coordinate with internal departments to conduct Cyber Drills at the intervals specified by the company, while providing guidance, consultation, and maintaining documentation for future audits.
-Coordinate with external experts or IT security agencies.
-Collaborate with the operations oversight department to submit and report information to external regulatory bodies, including the Securities and Exchange Commission (SEC), accurately and on time, according to the designated schedule.

Qualifications and Skills:
-Bachelor’s degree or higher in Cybersecurity, Computer Science, Information Technology, or a related field.
-At least 3 years of work experience in cybersecurity.
-Understanding of hardware and software related to cybersecurity.
-Understanding of cyberattacks and the control measures to mitigate such threats.
-Understanding of Endpoint Security, Firewalls, Cloud Security, Public Key Infrastructure (PKI), Data Loss Prevention (DLP), and Identity and Access Management (IAM).
-Cybersecurity certifications will be considered an advantage.