Security Engineer

• Develop, implement, and maintain the GRC framework, including policies, standards, and procedures to ensure compliance with regulations and industry best practices
• Monitor internal/external compliance reviews activities and follow up on deficiencies identified and ensure remediation steps have been taken
• Lead compliance efforts for standards such as PCI DSS, ISO 27001, and other relevant frameworks
• Monitor and report on GRC program effectiveness, including key control indicators
• Perform control and vulnerability assessments to identify gaps and weaknesses
• Assist in compliance monitoring and recommend remediation actions
• Provide oversight into vulnerability scanning results to ensure timely remediation actions
• Develop appropriate metrics for reporting to track exceptions and remediation process
• Report to senior management concerning residual risk, vulnerabilities and other security exposures, including misuse of information assets and noncompliance cases if any
• Provide an advisory role for IT stakeholders to assess security requirements and control; enforce security control policies as planned
• Assist in development of security guidelines, standards and related processes
• Collaborate with internal or external parties to conduct necessary assessments such as penetration tests, compliance reviews, third-party vendor assessments, and audits
• Follow through on findings and recommendations to close out identified gaps
• Develop and validate baseline security configurations for operating systems, applications, networking and telecommunications equipment
• Research and assess new threats and security alerts, and provide recommendations on solutions
• Assist to build/review/monitor the IT security architecture for the Company infrastructure and business application environment
• Promote IT risk awareness to internal stakeholders

Senior Security Specialist

Security Specialist

IT Security Manager

Intern, Information Security