IT Security & GRC Lead

Job Description:

1. Define and lead implementation of information security standard, framework, and roadmap across on premise and cloud environments
2. Lead day to day IT Security operational such as policy enforcement, threat detection and assesment, monitoring CSIRT reports and updates, and work with other departement sin cybersecurity incident prevention and handling
3. Evaluate and work with information security partners and vendors on provision and delivery of cybersecurity solution and services such as penetration test and vulnerability assesments
4. Lead and promote security awareness initiatives to cultivate a strong cybersecurity culture in the company.
5. Prepare, maintain, and lead audit and certification activities, including but not limitied to ISO/IEC 27001 and J-SOX
6. Establish and maintain up-to-date information security-related document, including policies, procedures, and guidelines to safeguard company data, syste...