The activities required to be performed shall include the following:
A. Work with internal and external stakeholders to monitor and maintain the IT security health of the Automatic Fare Collection system.
B. Participate in the analysis and resolution of IT security issues and incidents related to the Automatic Fare Collection system
C. Participate in Automatic Fare Collection system projects and provide inputs on new security technologies as well as to assist in the review of technical implementations and processes in ensuring that proper IT security controls are in place
D. Assist to develop new and update existing IT security policies, standards and guidelines for the Automatic Fare Collection system.
The candidate should have the following skillsets:
A. Recognised degree in IT or Computer Engineering with at least 3 years relevant experience in IT security.
B. Good knowledge of Payment Card Industry Data Security Standard (PCIDSS) and other security best practices for payment card applications.
C. Possess good knowledge and professional experience in one or more of the following domains:
- System Security
i. Host and Endpoint security
ii. Identity and Access management
iii. Database security
iv. Network security
v. Virtualization security
vi. Application security
vii. Threat analysis
viii. Vulnerability assessment and security testing for operating systems (Windows and Unix), network (wired and wireless) and applications (web-based and others).
- Cryptography
i. Symmetic-key and public key cryptography
ii. Cryptography standards and technologies
- Cyber secruity operations
i. Security Information and Events Management (SIEM)
ii. Operation and management of Security Operations Centre (SOC)
D. Proven ability to plan and execute workload in a demanding and dynamic environment.
E. Excellent analytical, interpersonal and communication skills
F. Good written and verbal communication skills in English.
