Manager, Information Security & Cybersecurity

Duties and Responsibilities

Key Performance Areas

1. Periodic Cyber Security Testing Activities

• To manage vendor in conducting the periodic cybersecurity testing exercise including quarterly VAPT, Yearly Penetration Testing, Intelligence pentest and baseline review
• To track of cybersecurity testing report’s vulnerabilities and findings
• To provide escalation and track the results to the respective system owner
• To provide cybersecurity testing reports and it’s tracking

2. Project based Cyber Security Vulnerability Assessment & Penetration Testing

• To manage vendor and stakeholder in conducting the project based VAPT exercise
• To track of VAPT report’s vulnerabilities and findings
• To provide VAPT reports and it’s tracking

3. Yearly Wireless Assessment

• To manage vendor in conducting the yearly wireless assessment exercise
• To track wireless assessment report’s vulnerabilities and findings
• To provide wireless assessment reports and it’s tracking

4. Baseline Review

• To review and update BIMB Security Baseline on yearly basis
• To track the approval of Security Baseline

5. To assist on the yearly compliance reporting

• To lead the compliance reporting on cybersecurity related matters including status of yearly VAPT, project VAPT and wireless assessment for Paynet Resilience, Swift Requirement and RMiT when required.