Information Technology Security Manager (Insurance)

Responsibilities

• Manage security system-related operations including DDEI and TrendMicro.
• Manage and respond to security alerts, incidents, and breaches from SOC.
• Identify vulnerabilities in the network and server infrastructure and collaborate with IT to ensure timely remediation.
• Perform penetration tests on websites and coordinate remediation with IT.
• Review and validate system hardening and baseline configurations and work with IT to ensure prompt remediation.
• Document and report IT audit findings, recommendations, and follow-up actions; collaborate with IT and related teams to address identified issues.
• Respond to audit findings from OIC (including Annual OIC IT Audit, CRAF, IT Environment Survey and Electronic Registration and Certificate) and external IT audits.
• Perform account reviews on Active Directory and conduct high-privilege account reviews.
• Maintain security awareness materials and training videos for new staff; run annual security awareness and training programs and targeted training for individuals who clicked on links during cyber drills.
• Create training materials and promote a culture of security awareness across the organization.
• Maintain ISMS documentation: policies, procedures, forms; manage document control, facilitate management reviews, and implement continuous improvement based on audit findings.

Required Skills

• Cybersecurity vulnerability assessment and remediation
• Penetration testing coordination
• IT audit and regulatory compliance management
• Active Directory and privileged access review
• Security awareness and phishing simulation programs
• IT risk assessment, third-party risk management, and KRI monitoring/reporting
• ISMS governance, security policy and documentation management
• Cross-team collaboration and promoting a security culture

Additional Information

• Organization: Phillip Life Assurance
• Work arrangement: onsite
• Employment type: full_time