Assistant Lead Engineer - RA/VM (Cluster IT Security)

Position Overview

The Senior Security Engineer executes cyber security vulnerability management program to assess the security posture and compliance of IT policy. He/She is part of the team to implement vulnerability management activities, including but not limited to vulnerability scanning, security patch management, security risk assessment (RA), security testing and compliance checks. He is responsible for identifying, assessing, and managing threats, vulnerabilities and associated risks to information assets and resources. He/She works in collaboration with Infrastructure and Application teams to assess security patches in response to security advisories, as well as to monitor the patch level, and report overdue patches for management’s attention. He/She also works with CISO to gather inputs into risk register, including risk mitigation measures and risk deviations.

Role & Responsibilities

•    Perform analysis, prioritization and classification of risk.
•    Handle day-to-day security vulnerability assessments and operational request.
•    Provide security vulnerability assessment reports and advise system operator on security vulnerability and resolution.
•    Proactive monitoring of remediation plans and progress.
•    Schedule security checks in accordance with reporting schedules.
•    Continuous enhancement of existing security vulnerability assessment process.
•    Verifies security controls are implemented accordingly.
•    Review security incident reports
•    Evaluate the type and severity of security events
•    Assist with establishing procedures for handling detected security events
•    Create final incident report detailing the events of the incident
•    Prepare periodic status reports for presentation to management

Requirements

•    At least 5 year working experience in vulnerability management and incident response.
•    Familiar with at least one vulnerability scanner.
•    Strong analytical skills and ability to work independently.
•    Good team player as well as strong communications skills with stakeholders at all levels
•    Possess CEH, CISSP and/or related security certification.
•    Experience in healthcare industry is an added advantage.
•    Degree in Computer Science, Engineering or equivalent.

Apply Now

NOTE: It only takes a few minutes to apply for a meaningful career in HealthTech - GO FOR IT!!

#LI-SYNX41

#0324