Head, Security Lab

Add expected salary to your profile for insights.
Assist Head of Department in planning and implementing strategies for the existing and new products/services and any assigned task for new projects related to the development, enhancement, and implementation of PayNet Certify products/services.
KEY AREAS OF RESPONSIBILITIES
Evaluates, drives and facilitates the implementation of strategic business plan for new products/services.
Prepares project plans and proposals which would enhance the business process and operations for existing products/services.
Monitors the department's business performance on a regular basis in order to achieve the target as stipulated in the business plan.
Prepares management reports and analyses for monitoring of expenses and revenues.
Lead the presentation for matters related to product awareness e.g.
Product/Services briefing, training and etc.
Responsible to execute any task assigned by the Head of Department.
Responsible to establish the relationship, alliance and marketing management with new and existing stakeholders i.e.
Financial Institutions, BNM, Governmental agencies, solution provider, scheme owner and other relevant authorities.
Security Lab Operations
Oversee Security Lab process and responsible on the effectiveness of the Security Lab operations as well as to ensure compliance towards the Service Level Agreement (SLA).
Responsible to ensure the security test laboratory equipment performance are being assessed and monitored at all times.
Responsible to ensure the quality check of any security testing products are performed at all times.
Accountable on implementation, maintenance and improvement of the management system.
Accountable to identify any deviations from the management system or procedures related to laboratory activities and to take immediate actions to prevent or minimize such deviations.
Ensure compliance to the ISO17025 (general requirement for the competence of testing and calibration laboratories) and other related standards, regulations and requirements (e.g.
PayNet Information Security Policy) on matters related to test laboratory operation, processes and its systems.
Ensure the performance of management system and its improvement are reported to laboratory management.
Responsible to ensure the appropriate checklist is in accordance to the technical requirement and/or test plan.
Accountable in managing the test implementation plan as stipulated in the business plan.
Prepares and consolidates the progress update as well as to report any issue/problem on a regular basis.
Accountable to conduct research and development for test laboratory operation improvement and other relevant areas.
Accountable to ensure all test reports/results and other relevant documents are well kept and documented for easy retrieval by the team and as evidence for confidentiality, integrity and availability of archived information.
Ensure all customer complaints and feedback are properly managed and recorded.
Oversee in project management on the implementation of new and enhanced initiatives involving:
PayNet's internal and inter-departmental resources.
Financial Institutions through the formation of PayNet Engagement Forum (PEF).
Progress updates to Management, Steering/ Working Committees and relevant authorities.
Continuously manage in business support/ ownership of existing products/ services:
Oversee meeting and monitor the agreed requirements of service level agreements with participants.
Responsible in business support and certification services.
Perform technical acceptance test and prepare the certification in accordance with the established standards and procedure.
Perform technical feasibility study, evaluate and analyze user requirement.
Perform evaluating and reviewing vendor proposal and solution proposed.
Oversee the implementation of projects and enhancements.
Manage in planning, gathering, analyze and managing user requirements to recommend solutions to business users.
Ensure the reporting and escalations process during the testing cycles are adhered i.e.
monitor the testing schedule.
Review performance of existing products and services
Review reports on product/service performance in timely manner.
Investigate and resolve and exceptional issues on product/service performance.
Escalate in a timely manner unresolved issues with recommended solutions to superior.
Change Management
Prepare documentation for any change management required.
Develop user/ functional requirement.
Develop and ensure the user acceptance test scripts and test results are consistent with expected results based on user requirement.
Oversee response in any raised Change Request/Service Request on new or enhanced product/services in accordance with the information technology standards.
Operations Manual / Rules and Regulations
Provide input for the development of any new or enhanced procedures for incorporation into the Operations Manual or Rules and Regulations.
Ensure all relevant parties are updated of any changes to the Operations Manual/Rules and Regulations in a timely manner.
Research and Survey
Conduct independent and assigned research/survey to be aware of opportunities, challenges, risks and threats.
Technical consultation and advisory services
Provide technical consultation services and supports on security evaluation testing.
Provide advisory services to vendors on security testing.
Resolve technical problems escalated by internal and external customers in a timely, effective and efficient manner.
Ensure clear communications to the section/ unit and intra-department staff.
Prepare relevant reports for Department and Management.
Attend to in a timely manner any other duties and responsibilities as assigned by supervisor.
Ensure all new systems have been evaluated for risk and provide or recommends final acceptance of the risk position before going live.
Ensure all data under his purview or custodianship is handled in a manner consistent with the Information Classification and Handling Guideline.
Product and Market Knowledge
Knowledge of market trends (e.g.
payment industry landscape) and relevant guidelines (e.g.
technical standards, security standards).
Knowledge of stakeholders' (e.g.
participants, TPAs, card manufacturers, terminal manufacturer, solution provider and vendors) products and its structure (e.g.
product architecture).
Leverages on market intelligence (e.g.
industry landscape) and product knowledge (e.g.
innovative payment methods) to formulate/improve appropriate guidelines/enhancements (e.g.
operations manual).
Customer Relationship Management
Knowledge of stakeholders' (e.g.
participants, TPAs, card manufacturers, terminal manufacturer, solution provider and vendors) organization, industries and key developments (e.g.
new industry standards, new products).
Provides services (e.g.
certification services, technical advisory support and key management business) to stakeholders based on applicable guidelines.
Maintains customer relationships (e.g.
support, advisory and guidance, query handling) and identify potential business opportunities (e.g.
initiatives to expand market reach).
Anticipates difficult customer situations and handles them accordingly.
Laboratory Operations
Knowledge of company's certification lab operational procedures (e.g.
Quality Manual/Standard Operating Procedure).
Monitors the compliance of operational procedures (e.g.
technical standards, Certification requirement) in accordance to the applicable guidelines (e.g.
quality manuals, PURE Specification, MCCS Specification, EMV Specification, Lab SOPs).
Proposes and implements suggestions for the improvement of existing lab procedures (e.g.
Lab SOPs).
Good knowledge of:
PCI Standards
Cryptography and key management concept
Information security and risk management concept
International security standard
Systems and Application Testing
Knowledge of testing concepts, methodology and know-hows (e.g.
test script methodologies).
Develops testing and evaluation methods (e.g.
automated scripts) for stakeholders' products.
Evaluates stakeholders' products (e.g.
acceptance devices, cards) against designated test tools and plans.
Proposes and implements suggestions for the development/improvement of new/existing testing methodologies (e.g.
new test cases & scenarios).
Technical Support & Advisory
Knowledge of technical specifications of industry standards (e.g.
EMV, Global Platform, PCI, ISO, PURE).
Advises relevant stakeholders (internal and external) on the technical aspects of stakeholders' products (e.g.
financial smart card application, key management business).
Develops and improves technical specifications for products (e.g.
user/functional requirements) in accordance to established industry standards (e.g.
EMV, Global Platform, PCI, ISO, PURE).
QUALIFICATIONS & EXPERIENCE
Minimum Qualifications & Professional Certification
Degree in IT/Information System/Security or its equivalent.
Experience in field of security certifications i.e.
Common Criteria, EMVCo, Global Platform from the laboratory perspective.
A minimum of 5 years working experience in IT project, implementation in business strategies and experience in product development formulation.
Organized, structured and able to multitask.
Strong communication skills, written and verbal in English.
Others language is an added advantage.
Strong leadership qualities, aggressive and result oriented.#J-18808-Ljbffr