Information Security Lead

About the role

DT One is seeking a highly driven, self-motivated Information Security Lead based in Singapore or Manila to join the Infrastructure, Network, and Security team within Engineering. The primary purpose of this role is to safeguard DT One’s critical cloud infrastructure, core platforms, and sensitive data in a high-availability environment processing millions of transactions monthly. You will combine a startup mindset with the scale of an industry leader to define security standards, manage risks, lead ISO27001 compliance, and ensure high platform availability and security across a global network of partners.

Key responsibilities

• Serve as a focal point of contact for information Security matters within the organization and with customers

• Keep our platforms, systems, data and information secure by applying best practices and techniques when it comes to security

• Design, roll-out and lead our Infosec Vendor Risk Assessment Program, providing a first level of due diligence in a smart and pragmatic way with our partners to safeguard the sensitive data that we may be sharing to enable our services

• Define and configure default security capabilities and best practices in collaboration with infrastructure and other teams.

• Identify security risks early on and ensure they are addressed before they become actual problems

• Manage security policies, identify and respond to any intrusion with anti-malware protection, intrusion detection, and intrusion prevention systems

• Enforce corporate and security infrastructure policies across the teams

• Define logging and monitoring that is required to validate that the platform and its data is secure.

• Setup, monitor, correlate and investigate security alerts to detect and resolve incidents

• Work closely with the rest of the engineering team to assess security aspects of the platform and systems prior to production

• Keep up to date with trends and innovation in security and best practices

• Define relevant KPIs and metrics to assess and track the security events on the platform and provide reporting

• Provide security awareness training to all information system users

• Lead the annual ISO27001 audits and certification process.

• Assist with internal audits.

• Perform internal vulnerability scans and assessments on a regular basis.

Qualifications and Experience

• Degree in Computer Science, Information Systems or equivalent

• Professional qualifications such as CISSP, CCSP , ISO27001 Implementer or Auditor would be highly advantageous.