Security (Information & Communication Technology)
Full time
CelcomDigi Berhad (Registration No. 199701009694 (425190-X)) is Malaysia's widest and fastest network with more than 20 million users on our network. Officially established on 30th November 2022, we aim to serve the growing digital needs of our customers by leveraging our newly combined widest network footprint, distribution touchpoints, innovative range of digital products and services, and superior customer experience powered by over 4,000 top industry experts. We have clearly defined ambitions to advance the nation, inspire Malaysian society, and be a leader in inclusion and responsible business practices.
Responsibilities:Drive the design implementation and execution for the defendable architecture, zero trust model, security capability and maturity across the organization infrastructure i.e. IT, Telco & multi cloud environment (AWS/Azure).
Provide expert advisory on Information & Cloud security posture, policies, baseline, and regulatory requirement to support enterprise-wide robust security architecture to Enterprise Business Security Product / Solution roll out and align with Celcom Digi Security Principal & Compliance.
Provide expert advisory to Data Protection Officer / Legal Team / EDG for Data Protection, Privacy, and data governance matters.
Raise awareness to PMO department & other teams on standard security measures via TSOC, Security Checklist and related.
Assist and support the Cybersecurity Architecture, Engineering, Cyber defense and GRC teams in strategic planning, audit processes, incident management/response, and cyber defense.
Assist Cybersecurity Engineering team during new and BAU projects roll out and implementation.
Requirements:Bachelor's degree holder or higher in Telecommunication, Information Technology (IT), Computer Science, Cybersecurity or other related discipline with relevant experience in technology security strategy or equivalent.
Security professional certifications such as CISSP, CCSP, CISM, TOGAF / GDSA / CCSA / OSC / CRTSA, AWS Security or equivalent will be an added advantage.
4 years of experience in Cybersecurity.
2 years of experience in Cloud Security.
Experience in DevSecOps and/or Telco Security will be an added advantage.
Hands-on experience in service enablement of information technology, telco, cyber innovation technologies (network / endpoint / data / identity security), cyber threat, incident, offensive & security testing.
Leadership and technical knowledge in On-Prem and Cloud security (tools, method, frameworks etc).
Keeping abreast of the cybersecurity technology and telco industry.
Exceptional communication skills for fostering collaboration and rapport.
Proficient in Information Security standards, frameworks, guidelines and best practices (e.g. ISO 27001, NIST CSF, NIST RMF, CIS Controls, DPA, PCI-DSS, GSMA FS.31, ENISA, ITU-T guidelines, Cybercrime act).
Familiarity with Cyber laws and Law enforcement requirements.
Perks and Benefits:Medical Flex Plan, Device Voucher, 6-months maternity leave.#J-18808-Ljbffr