Cyber Security

a) Provide cybersecurity support in system operations to ensure the

compliance with Government policies, which include review, design and

implementing security measure, process, controls for the Authority's

systems

b) Review security audit reports and assessment conducted by auditors for

security testing such as Vulnerability assessment, penetration testing, host

configurations, IT general controls, risk assessments, etc

c) Conduct reviews, gap analysis and provide recommendations on monthly

reports and reviews, ensuring the compliance of the system processes

d) Monitor and follow up with known vulnerabilities and risks in the

Authority's environment and systems

e) Conduct cybersecurity assessments to identify vulnerabilities and risks in

the

Authority's systems and processes

f) Design and follow through the implement of cybersecurity solutions in the

Authority's environment to protect against threats and attacks

g) Review and verify that security policies, procedures, and best practices are

implemented and comply with standards and guidelines by the Authority's

appointed contractors and systems

h) Provide guidance and recommendations on cybersecurity strategies and

technologies

i) Conduct security awareness trainings to the Authority and the Authority's

appointed contractors when necessary to promote a culture of security

j) Monitor and respond to security incidents and breaches, conducting

forensic analysis on a need-be basis and

k) Stay current on emerging cybersecurity threats, trends, and technologies.

Job requirements:

a) Bachelor's degree in computer science, Electrical/ Computer Engineer,

Information Technology or related discipline would be preferred

b) Good capabilities in ICT governance, security/ risk/ data management

frameworks

c) Good knowledge in ICT infrastructure, applications and web/ cloud

services

d) Qualified and certified ICT professionals such as CREST, CRISC, CGEIT

and CISSP and

e) Knowledge of cybersecurity industry standards, government cyber security

policies and requirements.