IT Security Analyst

The IT Security will be involve in overseeing cyber governance and risk management, including developing and implementing security policies and standards. It includes ensuring compliance with industry regulations and standards, coordinating penetration testing, and tracking vulnerability remediation. This position also entails identifying and assessing cyber risks, maintaining user awareness, and coordinating security training, acts as a key contact for senior management and regulatory inquiries, manages audit findings' remediation, and conducts disaster recovery exercises. Key Responsibilities: Provide cyber governance and risk management oversight. Develop, manage, and implement the security policy framework and relevant standards. Manage and ensure security governance and compliance with industry and regulatory regulations (e.g., ISO27001, NIST, MAS TRMG, MAS Outsourcing guideline, MAS Cyber hygiene). Coordinate penetration testing to comply with local regulatory requirements and escalate material security risks to relevant forums. Track remediation status of identified vulnerabilities. Identify and assess cyber risks, recommend and drive cyber security solutions and initiatives. Maintain user cyber awareness and provide security advisory on emerging security threats and vulnerabilities. Coordinate security awareness training programs for staff. Act as the single point of contact in responding to inquiries from senior management and regulatory bodies, including internal and external audit exams. Ensure all audit findings are remediated and independently validated within agreed timeline. Conduct annual disaster recovery exercises with internal and external parties. Routinely assess existing infrastructure, systems, and applications for compliance and vulnerabilities. Develop and implement identity and access management policies and procedures. Monitor and audit user access activities for compliance and security. Manage user access rights and permissions across …