1.Conduct Information Security Compliance and Risk Audits for the HQ/RO and the entire group.
2.Track audit reporting and data submission.
3.Monitor and investigate security violation cases and take proper actions to prevent potential security risks.
4.Manage and track security risks and cybersecurity incidents.
5.Track the remediation of vulnerabilities.

Required:
1.Education: BS/MS in Information Technology or related field.
2.Experience: At least 3 years of experience on IT field.
3.Skills:
-Intermediate command of English in speaking and writing.
-Ability to develop and execute audit plan, and strong team player.
-Experience with Information Security Compliance and Risk Audits.
-Familiar with ISMS and ISO27001.
-Strong project management ability to lead the team with excellent communication skills, and generate the corresponding report.
-Strong knowledge in log analysis, data security, cloud security.
-Familiar with Windows OS, Linux OS and networking, web platform.

Preferred:
-CISA (Certified Information Systems Auditor) is preferred.
-ISMS implementation experience is preferred.
-Knowledge or certification in Security processes and auditing such as NIST CSF, CISA, ISO 27001 Lead Auditor/Implementer are also desirable.