Job Description: Direct Responsibilities To be part of the network rules review process, by reviewing and approving all network access requests (including firewall, proxy and SMTP requests). To perform periodical review on the existing firewall rules to reduce the risk of legacy rules. Conduct the risk assessment on the in-scope projects, third-party vendors and the deviation of policies & best practice. Assist the follow-up on any recommendation issued for projects and security exceptions / risk acceptances registered. To participate in APAC IT Security Risk Management team and align all the standards about any new projects or major change within PRC for further risk assessment. Security Administrator for a number of tools used in house, such as, 2FA, Encryption, PKI, etc. Manage, review, serve the users on the access of in-scope local applications, and coordinate for regional/global applications with oversea teams. Conduct research on security tools, technologies, industrial practices, etc. Stay current with trends and regulations within the scope of information security topics. To undertake such other ad-hoc duties, and reporting, as required from time to time which are commensurate with the position Job Requirement: Good technical proficiency on network security, including firewall, IPS, switch, etc. Familiar with IT risk assessment framework Strong communication, technical writing and spoken skills in both English and Mandarin Good organizing, prioritizing, synthesizing skills Must be motivated, and able to work independently as well as part of a team Understand the fundamental concepts, principles and best practices of IT Security Must be able to handle clients in a confident, positive and responsive manner Awareness on security threats and issues Bachelor’s degree in Computer Science, Information Assurance, or a related degree or equivalent experience Holder of information security and risk management certificate (i.e. CISM, CISSP, etc.) preferred
