- Conduct of scheduled security audits on Line Of Businesses (LOBs) in accordance to the Corporate’s Security Manual and Standard Operating Procedure (SOP) on Security governing physical, document and cyber security (including Systems and networks, information protection, Access Controls, Incident Report and Response, Audit and Review).
- Conduct of no notice inspections to check on security compliance of LOBs.
- Liaise with LOB Project Security Managers on the date and conduct of security audit, covering pre-audit brief, audit checklist and post-audit action reviews and follow-up.
- Maintain and update the security audit checklist, to ensure that it incorporates the latest change/s in the Corporate’s Security Manuals and SOPs.
- Prepare audit report and propose solutions to resolve the security audit findings that are systemic in nature.
- Conduct periodic Cybersecurity vulnerability assessment of the Project Networks and scan for Indicator of Compromise.
- Sieve out good security practices in the LOBs during audit and share them with the larger audience.
- Compile and analyze security findings over time to determine the health state of LOB’s security practices and culture.
Job Requirements
- At least 3 years’ experience in process audit, preferably related to security and/or safety operations.
- Knowledgeable in audit methodology with strong communication and inter-personal skills.
- Competent report writing ability with a good command of the English language both in speaking and writing areas.
- Ability to work as a team and independently, with minimum guidance.
- Ability to learn new and upgrade relevant skillsets, continuously.
- Strong drive and determination to achieve the goals set.
- Someone with a keen eye for details will be an advantage.
- Any certification in professional audit and/or training or lesson design courses, will be an advantage.
- Preferably with SSCP (Systems Security Certified Practitioner), or CISSP (Certification Information Systems Security Professional) qualification or its equivalent
