About the Role
We are seeking an IT Executive (Cybersecurity & Operations) to support the organisation’s cybersecurity posture and day-to-day IT operations. This role combines hands‑on security operations with IT support responsibilities, ensuring systems are secure, reliable, and well‑managed. The ideal candidate is technically hands‑on, operationally strong, and able to translate cybersecurity requirements into practical system configurations.
Responsibilities
Cybersecurity Operations & Monitoring
- Monitor security alerts from SIEM, endpoint protection, and network systems; perform triage and elevate where required
- Analyse logs and system activity to detect anomalies and potential cybersecurity threats
- Support implementation and maintenance of security tools (e.g., SIEM, endpoint detection, MDR services)
- Review and fine‑tune security alerts and monitoring rules to improve effectiveness
Incident Response & Risk Management
- Perform first‑level incident investigation, containment, and recovery actions
- Document incidents, root causes, and follow‑up remediation actions
- Coordinate with internal stakeholders and vendors during security incidents
- Support vulnerability remediation and follow‑up on identified risks
Governance, Risk & Compliance (GRC)
- Support implementation of cybersecurity policies, standards, and procedures
- Assist in audits, risk assessments, and compliance activities (e.g., PDPA and internal governance requirements)
- Maintain documentation for risks, controls, and mitigation actions
- Work with relevant stakeholders on data protection and data security initiatives
Vulnerability Management & Hardening
- Conduct vulnerability scans and coordinate remediation activities
- Track patching status and ensure timely updates across systems and endpoints
- Implement and maintain system hardening baselines (e.g., CIS benchmarks, NIST guidelines)
- Monitor security posture across assets and follow up on gaps
Vendor & Security Tool Coordination
- Liaise with cybersecurity vendors (e.g., MDR, VAPT, firewall providers)
- Track service deliverables, incidents, and remediation progress
- Support evaluation and onboarding of new tools and solutions
IT Operations & End‑User Support
- Provide Level 1–2 IT support for incidents and service requests
- Support system administration for Microsoft 365, Entra ID / Active Directory, endpoints and network infrastructure
- Manage user access, onboarding/offboarding, and device lifecycle activities
- Perform routine system monitoring and preventive maintenance
Requirements
Qualifications & Experience
- Diploma or Degree in Information Technology, Cybersecurity, or related field
- Preferably 3–6 years of relevant experience in cybersecurity and/or IT operations
- Experience in environments requiring both security and tech support responsibilities
Technical Skills
- Security monitoring tools (e.g., SIEM, log analysis, MDR platforms)
- Endpoint protection solutions (e.g., Microsoft Defender, Bitdefender or equivalent)
- Endpoint management tools (e.g., Microsoft Intune, Atera or equivalent)
- Vulnerability scanning and patch management tools
- Microsoft 365, Entra ID / Active Directory
- Network fundamentals and monitoring tools
- Implementation of cybersecurity frameworks (e.g., CIS, NIST) using Intune and Group Policy (GPO)
- Firewall configuration and management (e.g., Fortinet, SonicWall or equivalent)
Technical Exposure (Advantageous)
- PowerShell scripting for automation and administration
- Microsoft 365 ecosystem, including Entra ID security configurations
- Windows Autopilot or modern device provisioning workflows