Information Security Lead

About the role

DT One is looking for a highly driven, self-motivated Information Security Lead based in Singapore or Manila to join the Infrastructure, Network and Security team within Engineering. The role protects the company's critical cloud infrastructure, core platforms and sensitive data in a high-availability environment handling millions of transactions per month, combining a startup mindset with the scale of an industry leader.

Key responsibilities

• Serve as the focal point for information security matters within the organisation and with customers.
• Apply security best practices to keep platforms, systems, data and information secure.
• Design, roll out and lead the vendor risk assessment programme for partners.
• Define and configure default security capabilities with infrastructure and other teams.
• Identify risks early, manage security policies and respond to intrusions using anti-malware, IDS and IPS.
• Enforce security policies, set up logging and monitoring, and investigate security alerts and incidents.
• Assess security aspects of platforms before production and keep up to date with security trends.
• Define KPIs and metrics, report on security events, and deliver security awareness training.
• Lead the annual ISO27001 audits and certification, perform internal vulnerability scans, and assist with internal audits.

Required profile

• Degree in Computer Science, Information Systems or equivalent; professional qualifications such as CISSP, CCSP, ISO27001 Implementer or Auditor are highly advantageous.
• 5+ years of experience in an information security role.
• Strong knowledge of risk assessment tools and methods, ISO27001, security audits, policy development and Linux administration.
• Preferred: experience supporting the cloud and infrastructure stack (AWS, Terraform, Ansible, Docker, Kubernetes, ELK, Prometheus, Grafana, etc.) and programming in Golang, JavaScript, Perl, Python or Ruby.
• Strong analytical, problem-solving and strategic thinking skills, able to work autonomously and cross-functionally, with excellent English communication.