IT Security Executive

Job Responsibilities:

Daily Security Operations (DSO)

• Assist in the preparation of monthly and quarterly security performance reports.
  
• Monitor security alerts, logs, and incident notifications on a daily basis.
  
• Consolidate and maintain DSO data, including incidents, vulnerabilities, and advisories.
  
• Coordinate with infrastructure and application teams on security event responses.
  
• Track closure actions and ensure proper documentation for all DSO items. 
• Prepare daily and weekly summaries for management and the BISO team.
  

Penetration Test (Pentest) Remediation Tracking

• Track penetration test findings from identification through closure.
  
• Follow up with system owners and technical teams to ensure timely remediation.
  
• Validate and collect evidence for closure of issues.
  
• Provide regular status updates to management and risk teams.

Audit & Regulatory Tracking (Including MAS Notices)

• Monitor and track all IT security audit items (internal, external, regulatory).
  
• Consolidate audit evidence and maintain documentation readiness.
  
• Maintain records of ongoing MAS advisory notices and coordinate with BISO and technical teams.
  
• Support tracking and reporting of remediation progress.
  
  

IT Operations Meeting Support

• Prepare and update IT Ops meeting materials, including metrics, dashboards, and status updates.
  
• Track follow-up items and ensure timely updates from technical teams.
  
• Assist in the preparation of monthly and quarterly security performance reports.
  
• Assist in producing monthly or quarterly security performance reports.
  

Job Requirements:

• 2~3 years of experience in IT Security, IT Operations, or GRC, with basic understanding of security alerts, vulnerabilities, and audits.
• Strong coordination and follow-up skills, able to work with infrastructure, application, audit, and risk teams.
• Good analytical and reporting abilities, including tracking remediation, preparing summaries, and maintaining documentation.
• Excellent communication skills with strong attention to detail and ability to manage multiple tasks.
• Diploma/Degree in IT or related field; security certifications (Security+, ISO27001, CEH) are a plus.