Job description
Description:This role will be responsible for ensuring internal systems and processes are compliant with information security standards; providing consultation and awareness of information security requirements; monitoring, managing and closing information security compliance issues. The responsibilities include identification, evaluation and interpretation of standards, regulatory, statutory and member security requirements, control deficiencies and information security risks. Duties and responsibilities:Review and revise policies in Capital A and its subsidiaries where information security is concerned. Map Capital A requirements and standards/regulatory requirements across the company’s information security framework to identify overlapping requirements and compliance efficiencies.Track enterprise compliance across multiple security frameworks and maintain up-to-date records of requirements and corresponding mitigating controls.Participate and facilitate audit and assessment activities to ensure compliance with information security requirements.Assist in identifying and analysing internal and external information security requirements in order to provide relevant and suitable standard or best practice and solutions to fulfill requirements.Assist in analysing management and technical controls to ensure specific security and compliance requirements are met through verification of documented processes, procedures and standards in order to validate maintenance of secure configurations.Collaborate on IT projects to ensure that security policy/risk issues are addressed throughout the project life cycle.Monitor and facilitate entitlements review process to ensure compliance..Support development and reviews of security policies, processes and procedures and support service-level agreements to ensure that security controls are managed and maintained.
Responsibilities & skills
Strong communication (spoken and written), interpersonal, and conflict resolution skills. Ability to establish and maintain rapport with stakeholders is highly desired.
Education
Experience
Minimum 1 years experience in participating/conducting IT/Information Security audits or assessmentsRelevant industry certification is an advantage (ISO 27001, CISA, CISSP, CGEIT, etc)
Ready to apply?
Sign in and make sure your profile and resume are up to date.
AirAsia
With the ever growing need to move away from traditional advertising avenues and to maximize your advertising dollars, AirAsia has come up with a unique and effective way to reach a wide spectrum of consumers. Utilising the growing reach of Asia's No. 1 Low Fare Airline, AirSpace Advertising allows you to communicate directly with AirAsia's broad spectrum of passengers, giving you a channel to get your message across effectively.Our lively and colourful travel360 magazine has op-end content, engaging features and a potential readership of...
View company profile

