ITSM Key Responsibilities:

You will:

1. Cyber Vigilance:

- Monitor and analyze security event logs to identify potential security incidents.

- Respond to security incidents in a timely and effective manner, ensuring minimal disruption to business operations.

2. Risk Management:

- Conduct risk assessments and vulnerability management to identify potential security threats.

- Develop and implement mitigation strategies to minimize risk.

3. Compliance and Governance:

- Ensure compliance with IT security policies, regulations, and standard e.g IM8 , PDPA.

- Develop and maintain security policies, procedures, and guidelines.

4. Incident Response:

- Develop and maintain incident response plans and procedures.

- Coordinate incident response efforts with stakeholders, including IT teams and management.

5. Security Awareness and Training:

- Promote security awareness and training programs for employees.

- Develop and deliver security training sessions to enhance employee knowledge and skills.

6. You Will:

• First person and POC for all security incidents and escalations
• The ITSM shall inform the parties listed in the Technical SOP within the Expected Response Timeline of the Incident Management.
• The information to be provided shall include the incident reference number, description, date and time and the impact (including who had been affected) of the incident.
• To administer, maintain and assess the implementation of security processes.
• To develop System Owner support for acquiring and sustaining adequate resources for incident response.
• To be the corporate intermediary for coordinating communications between System Owner and incident response personnel.
• To serve as a trusted custodian of incident information for ensuring the preservation and admissibility of evidence.
• To ensure the compliance with the required IT security policies.
• To perform the logs review in all security system managed by our operational team
• To review system security logs and to work with the client manager and onsite technical team on follow up actions.
• To perform regular policy review and enhancement to ensure all are in line with agency requirements.
• To promote IT security awareness, latest risk and cyber responsibility.
• To participate in incident response table-top exercises, simulation and drills either conducted internally by the contractor or as required by client.