Manager Security Operation Centre

GoKardz Technologies; Kuala Lumpur; On-site; MYR 120,000 - 150,000; Full time

Job summary

GoKardz Technologies in Kuala Lumpur is seeking an experienced professional to oversee security analysis activities, ensuring effective resolution within SLA. You will lead SOC operations, monitor security events, and provide recommendations for technology improvements.

The ideal candidate must possess a Master's or related degree, with at least 5 years of experience in IT Security within the Financial Services Industry, along with strong leadership skills and relevant certifications.

Qualifications

• Minimum of 5 years IT Security related working experience in Financial Services Industry.
• At least 3 years of leadership or managerial experience.
• Professional certifications like CISSP, CISM, and ISO 27001 are an advantage.

Responsibilities

• Monitor and ensure timely resolution of security events.
• Provide recommendations for technology and process improvements.
• Lead SOC operations to meet SLA and KPI.

Skills

Security process design

Team leadership

Threat hunting techniques

Stakeholder communication

Education

Master/Degree in Computer Science, IT, or related discipline

Tools

CISSP

ITIL

COBIT

Job description

JOB PURPOSE:

Provide oversight of security analysis activities by the team and ensure the effective resolution within the SLA. Comprehensive knowledge in managing Tier 1-2 SOC 24x7 shift models, run/play book and hand-over procedures. Should a security incident occur in the organisation, efficiently orchestrate analysts to respond. Ability to coordinate, work with and gain the trust of stakeholders, technical resources, and various technical teams. Lead and manage security incidents from identification through remediation. Contribute to the development of SOC Runbook to ensure that SA stay current and effective. Deliver assessments to management and recommend course of action to be undertaken. Understand the threat landscape and improve the effectiveness of the security devices as required. Experience within a Computer Security Incident Response Team (CSIRT) or comprehensive knowledge of mitigating procedures for addressing threat vectors including Advanced Persistent Threat (APT), Distributed Denial of Service (DDOS), Phishing, Malicious Payloads, Malware. Help to analyze the findings or security alert in investigative matters, and develop fact-based reports of events over period of time. Experience with proactive threat hunting techniques and concepts in an enterprise environment. Ability to communicate effectively with business representatives in explaining impacts and strategies and where necessary.

KEY ACCOUNTABILITIES & OUTCOMES:

• Principal Accountabilities: Ensure SOC able to perform network security monitoring, security events detection, analysis and escalation.
• Ensure SOC day-to-day operations comply to existing SLA and KPI.
• Advise SOC to provide recommendation to reduce or mitigate security risks.
• Assist Section Head to improve SOC’s technology, process and people to achieve greater effectiveness and efficiency.
• Supporting Activities: Monitor and ensure that the escalated security events by SOC are resolved in timely manner within stated SLA and KPI.
• Provide trending reports on security events detected by SOC.
• Recommend measures to contain attacks including where required to implement blocking measures.
• Provide recommendations for technology and process improvement.
• Outcome/ deliverables: SOC performance is met based on SLA/KPI; Practical recommendation to reduce or mitigate security risk within required timeline; Management Reports for the security events detected and escalated; Technical Reports as and when required by stakeholders; Ticket escalations with recommendations on how to mitigate the attack.

QUALIFICATION:

Possess a professional qualification with a recognised Master/ Degree in Computer Science, IT or a related discipline. Minimum 5 years IT Security related working experience in Financial Services Industry (FSI). Total 10 yrs or more experience. At least 3 years of (direct or indirect) leadership or managerial experience. Possess professional certifications such as CISSP, ITIL, COBIT, CISM, Six Sigma, CISA, CRISC & ISO 27001 Lead Auditor/Implementer or other related professional IT certifications will be an added advantage.

JOB SPECIFIC SKILLS & COMPETENCIES REQUIRED:

• Competencies: Proven ability in security process and enterprise level security solution design, implementation and management experiences on security solutions.
• Ability to develop and guide the team to achieve high levels of performance.
• Highly self-motivated and directed.
• Experienced, energetic, engaging and visionary leader with sound knowledge of business management and a working knowledge of information security technologies to support enterprise mission.
• Knowledgeable leader to provide vision, strategy, broad-based planning and hands-on responsibility.
• Ability to act calmly and competently in high-pressure, high-stress situations.
• Strong presentation skills with proven ability to successfully interface with and influence at all levels (management, executive, technical staff and end user).
• Excellent written and verbal communication skills with an emphasis on confidentiality, tact and diplomacy.