Enforce security procedures in accordance with government regulations, corporate policies, and standard operating procedures.
Conduct scheduled visits to CelcomDigi premises and sites nationwide to audit, review, and assess physical security performance, including identifying opportunities for system enhancements.
Implement and support the design of security technology and digital initiatives, including developing, integrating, documenting, and enforcing standards and procedures, as well as assessing internal and partner-related risk exposures.
...
Implement and optimize endpoint governance using Microsoft Intune, including configuration profiles, compliance policies, security baselines, and device‑lifecycle management.
Support directory, identity, and device policy integration using Entra ID (Azure AD), ensuring secure authentication, conditional access, and identity‑driven device posture.
Apply and tune Group Policy Objects (GPO) and MECM (Microsoft Endpoint Configuration Manager) for on‑premises and hybrid Windows endpoint management.
...
Audit: Drive audit readiness by acting as a point of contact for all internal and external IT security audits and regulatory reviews (including BNM, HKMA, and MAS), ensuring the bank demonstrates high maturity levels and audit readiness at all times. Drive the end-to-end audit lifecycle including PCI-DSS and PwC engagements by coordinating evidence collection, justifying control effectiveness, and tracking all findings to verified closure to minimize compliance risks.
Projects & Change: Enable strategic IT security integration by participating in IT and Business project meetings. Conduct security reviews, risk assessments, and review User Acceptance Testing (UAT) to ensure all deliverables meet necessary security requirements with proper sign-off before deployment.
Housekeeping: Ensure a timely deletion and housekeeping of resigned, dormant, or unused user IDs based on HR cessation notifications to minimize the attack surface.
...
Observability Implementation: You will support the observability culture by directly assisting developers to onboard their applications onto OpenTelemetry (Otel) for distributed tracing and metric collection. You will deploy and maintain the Grafana LGTM stack (Loki, Tempo, Mimir) and Grafana Alloy to implement designated alerting and notification strategies.
On-Prem Platform Stability: You will maintain and optimize our established on-premise infrastructure to ensure high availability and stability. This includes supporting our Docker Swarm cluster and RHEL-based internal VMs across segmented networks (Dev, Staging, Prod) according to standard operating and audit procedures.
Infrastructure as Code (IaC) & Configuration Management: You will write, maintain, and version-control clear IaC scripts (such as Ansible, Terraform) to consistently provision AWS infrastructure and maintain configuration baselines across both cloud and on-premise environments.
...
Support Implementation and Ongoing management of Privileged Remote Access (PRA) solution to control and monitor third party access to critical OT environments.
Implement and support OT cybersecurity monitoring and analytics tools to improve threat detection, threat hunting, and forensic investigations.
Perform OT asset discovery, inventory management, and risk classification using OT monitoring platforms (e.g., passive monitoring tools), and support the deployment and configuration of ICS/OT IDS solutions.
...
At least 2 years of hands-on security technical experience in a similar role, preferably involve in security deployment, troubleshooting, and support.
Strong understanding of security concept, network packet analysis tools, and security configuration
Familiar with both network and system security components including but not limited to Cisco, Fortigate, Palo Alto Networks, CrowdStrike, SentinelOne etc. Preferably possess technical certifications such as CCNA, or CCNA-Security.
...
Bachelor's degree or above, majoring in Computer Science or a related field.
6+ years of working experience in the information security industry.
Familiar with the development and operation of SDL (Security Development Lifecycle), with hands-on penetration testing capabilities for web systems.
...
Support Implementation and Ongoing management of Privileged Remote Access (PRA) solution to control and monitor third party access to critical OT environments.
Implement and support OT cybersecurity monitoring and analytics tools to improve threat detection, threat hunting, and forensic investigations.
Perform OT asset discovery, inventory management, and risk classification using OT monitoring platforms (e.g., passive monitoring tools), and support the deployment and configuration of ICS/OT IDS solutions.
...
Additional responsibilities include research, classification, and root cause analysis of security events within the environment, along with supporting OT security compliance activities such as adherence to industry frameworks (e.g., IEC 62443, NIST), policy alignment, control validation, and audit readiness. The role requires staying current with evolving vulnerabilities and threats, while maintaining a strong understanding of key business processes, operational technologies, and their associated risk and compliance requirements.
Responsibilities
Partner closely with the OT Cybersecurity Manager, other OT Cybersecurity Engineers, and wider cybersecurity functions including GRC and Threat Intelligence.
...
Internal communicate and work closely with sales, engineering, procurement and other departments to ensuring the overall company objectives/performance is achieved.
Prepare project documentation such as weekly or monthly report, Project Plan, Technical Document, Material Document Submission, drawings and OMM.
Participate in the regular meeting of the project, allocate, arrange and complete the relevant work on time according to the meeting requirements and report daily or weekly progress at site.
...
Internal communicate and work closely with sales, engineering, procurement and other departments to ensuring the overall company objectives/performance is achieved.
Prepare project documentation such as weekly or monthly report, Project Plan, Technical Document, Material Document Submission, drawings and OMM.
Participate in the regular meeting of the project, allocate, arrange and complete the relevant work on time according to the meeting requirements and report daily or weekly progress at site.
...