Executive - Information Security

About the Role
This position involves key accountabilities within Information Security Operations, Risk, Compliance and Audit Support, Cybersecurity Incident Support, Policies, Procedures and ISMS Documentation, and Security Awareness and Stakeholder Coordination. The role contributes to the day-to-day management of information security systems and processes to ensure the protection of data and compliance with relevant standards and regulations.

Key Accountabilities

Information Security Operations

• Support the day-to-day operation and monitoring of information security systems, controls, and processes in accordance with approved policies, standards, and procedures.
• Review security alerts and logs using available security tools, document observations, and promptly escalate suspected threats, vulnerabilities, or control failures.
• Assist in tracking vulnerabilities, security findings, and remediation actions with relevant internal teams and service providers.
• Maintain accurate security records, registers, evidence, and operational documentation.

Risk, Compliance and Audit Support

• Assist in information security risk assessments by gathering information, documenting risks and controls, and maintaining risk and remediation trackers.
• Support internal and external audits by coordinating evidence, arranging meetings, recording findings, and following up on agreed corrective actions.
• Assist in monitoring compliance with the ISMS, ISO/IEC 27001, applicable requirements, and internal security policies.
• Identify potential gaps or non-compliance and escalate them to the Manager – Information Security with clear supporting information.

Cybersecurity Incident Support

• Support the logging, triage, investigation, containment, and documentation of cybersecurity incidents under the direction of the Manager – Information Security.
• Maintain incident records, timelines, evidence, and action logs, and support post-incident reviews and lessons-learned activities.
• Follow approved incident response and escalation procedures and maintain appropriate confidentiality.

Policies, Procedures and ISMS Documentation

• Support the development, review, communication, and maintenance of information security policies, procedures, standards, guidelines, and templates.
• Maintain controlled versions of information security documents and ensure records are complete, current, and accessible to authorized stakeholders.
• Support the collection and reporting of ISMS performance data, control implementation status, and supporting evidence.

Security Awareness and Stakeholder Coordination

• Support the delivery of information security awareness campaigns, training sessions, phishing simulations, and related communications.
• Respond to routine information security queries and coordinate with employees, IT teams, vendors, and other stakeholders as required.
• Promote responsible use of information and technology resources and reinforce a positive security culture.

Quality, Health, Security, Safety and Environment

• Ensure compliance with regulatory requirements and relevant quality, health, safety, security and environmental procedures and controls across the department to guarantee employee safety and delivery of high-quality services.

Reporting

• Prepare relative reports in a timely and accurate manner to meet the departmental requirements, policies, and standards.

Others
Other relevant tasks of the job purpose when, and if required.

Qualifications & Experience

Minimum Qualification
Bachelor's degree in Cybersecurity, Information Security, Computer Science, Computer Engineering, Information Technology, or a related discipline.

Minimum Experience and Skills

• 0–2 years of relevant experience in information security, cybersecurity, IT security, risk, compliance, or audit.
• Relevant internships, cooperative training, graduate projects, or national service experience may be considered.