IT Security Operations

JobResponsibilities

1.Security Operations & BAU

• Manage and administer configuration changes on production Firewalls, Web Application Firewalls (WAF), Application Load Balancer, network access controller and related network devices
• Approve and implement business-as-usual (BAU) security access and modification requests
• Maintain security rules, firewall policies, and system hardening
• Monitor security infrastructure health to ensure continuous, optimal performance
• Collaborate with network and infrastructure teams to resolve engineering issues

2.Security Incident Management & Reporting

• Provide comprehensive security operational reporting to management teams regularly
• Monitor security reporting dashboards to identify anomalous network and system behavior
• Ensure security incidents are tracked, investigated, and properly managed to resolution
• Respond to security incidents as a key technical escalation point
• Partner with the Managed Security Services Provider (MSSP) to ensure incident follow-up
• Review security incidents, firewall policies and operational performance with the vendor on a regular basis.
• Sign-off on vendor security reports, service level agreements (SLAs), and incident closures.

3.Vulnerability, Threat & API Management

• Manage API security configurations, gateways, and authentication controls
• Analyze threat intelligence feeds to proactively defend against emerging security risks
• Manage the end-to-end vulnerability assessment and penetration testing (VAPT) lifecycles
• Track patching schedules across systems to ensure timely remediation of flaws

4.Governance, Risk & Compliance

• Partner hand in hand with the IT Governance team on setup alignment
• Ensure day-to-day IT operations fully comply with internal corporate IT policies
• Align IT security standards with strict regional regulatory requirements
• Maintain continuous compliance for PDPA, MAS TRM, and PCI-DSS frameworks
• Prepare documentation, evidence, and reports for internal and external audits
• Update security policies to reflect evolving regional financial regulations
• Assess third-party vendor risks against corporate security frameworks

Technical Skills &Competencies

• Hands-on expertise configuring enterprise-grade Firewalls, WAF technologies, Application gateway, Application load balancer, switches, Dot1x authentication and IPSec VPN
• Knowledge of Azure API security management principles, OAuth2, OWASP API Top 10, and modern authentication
• Vendor management skills to effectively govern external security partners and MSSPs
• Knowledge of MAS Guidelines, PDPA, and PCI-DSS compliance frameworks
• Certification in CISSP, CISM, CEH, or Azure Security Engineer (AZ-500) is preferred
• Troubleshoot network security anomalies

---------------------------

Please refer to U3’s Privacy Notice for JobApplicants/Seekers at https://u3infotech.com/privacy-notice-job-applicants/. When youapply, you voluntarily consent to the collection, use and disclosure of yourpersonal data for recruitment/employment and related purposes.