Requirements:

• Operational experience in SAP applications environment is a must.

• Establish, implement and enforce compliance to the Company’s IT security policies and guidelines through the implementation of comprehensive IT security tools, products, and processes

• Define and establish IT security assessment methodology to consistently and adequately assess and document information system security risks, recommend risk-mitigation controls and risk dispensation processes.

• Responsible for business contingency planning for IT security operations.

• Work with lines of business, vendors, IT application and infrastructure teams during the software development life cycle to ensure that sufficient security controls are in place to meet the Company’s security policies and guidelines.

• Plan and conduct regular IT security awareness building programmes for the Company and its subsidiaries.

• Perform IT security reviews for the Company and its subsidiaries, on request.

• Work with service providers to monitor the IT infrastructure of the company and ensure that it is safe from unauthorized access and not exposed to any vulnerabilities.

• Respond to IT security incidents and resolve them appropriately

• Implement anti-virus controls/infrastructure and work with members of IT Department to contain outbreaks, if any.

• Manage all security policies related to Firewalls, anti-spam, proxies, and email gateways.

• Establish policies and procedures for access control to application systems and servers.



Experience:

• Bachelor's Degree in Computer Science or relevant qualification

• Preferred certification: CISSP, CISA, CISM

• 8 - 10 years of Information Technology experience including at least three years in managing IT Security

• Experience in working collaboratively with business heads, business partners, vendors, senior management and diverse technical and business resources.

• Experience in a highly complex IT environment.

• Independent and able to lead a team of IT security professionals

• Good oral & written communication skills.

• Able to maintain a balanced strategic and tactical view of issues

• Singaporean or PR are preferred



Technical Skills:

• Windows Knowledge: OS Internals, Windows Security issues, Active Directory, .NET, Server hardening

• UNIX Knowledge: OS Internals, UNIX Security Issues (HP), UNIX Security Applications (Firewalls, Proxy, etc)

• Network Knowledge: TCP/IP low level skills on protocol level (Protocol Analysis), In-depth knowledge on Internet applications (DNS, Mail, WEB etc), Knowledge on IDS and IDP Systems

• Application Knowledge: SAP, Lotus Notes

• Database knowledge: Oracle, Sybase, SQL Server