Information Security Lead

About the role

DT One is seeking a highly driven, self-motivated Information Security Lead based in Singapore or Manila to join the Infrastructure, Network, and Security team within Engineering. The primary purpose of this role is to safeguard DT One’s critical cloud infrastructure, core platforms, and sensitive data in a high-availability environment processing millions of transactions monthly. You will combine a startup mindset with the scale of an industry leader to define security standards, manage risks, lead ISO27001 compliance, and ensure high platform availability and security across a global network of partners.

Key responsibilities

• Serve as a focal point of contact for information Security matters within the organization and with customers 
• Keep our platforms, systems, data and information secure by applying best practices and techniques when it comes to security 
• Design, roll-out and lead our Infosec Vendor Risk Assessment Program, providing a first level of due diligence in a smart and pragmatic  way with our partners to safeguard the sensitive data that we may be sharing to enable our services 
• Define and configure default security capabilities and best practices in collaboration with infrastructure and other teams.
• Identify security risks early on and ensure they are addressed before they become actual problems 
• Manage security policies, identify and respond to any intrusion with anti-malware protection, intrusion detection, and intrusion  prevention systems 
• Enforce corporate and security infrastructure policies across the teams 
• Define logging and monitoring that is required to validate that the platform and its data is secure.
• Setup, monitor, correlate and investigate security alerts to detect and resolve incidents
• Work closely with the rest of the engineering team to assess security aspects of the platform and systems prior to production
• Keep up to date with trends and innovation in security and best practices 
• Define relevant KPIs and metrics to assess and track the security events on the platform and provide reporting
• Provide security awareness training to all information system users 
• Lead the annual ISO27001 audits and certification process.
• Assist with internal audits.
• Perform internal vulnerability scans and assessments on a regular basis.

Qualifications and Experience

• Degree in Computer Science, Information Systems  or equivalent 
• Professional qualifications such as CISSP, CCSP , ISO27001 Implementer or Auditor  would be highly advantageous.
• 5+ years of experience in an information security role.
• 3+ years of implementing security monitoring and security best practise in the AWS Cloud.
• Strong knowledge of risk assessment tools, technologies, and methods, as well as hands-on experience with ISO27001, security audits, policy development, and Linux administration.

Preferred Qualifications

• Professional certifications such as CISSP, CCSP, ISO27001 Implementer or Auditor.
• Experience supporting cloud and infrastructure technology stack (Amazon AWS, Terraform, Ansible, Docker, HAProxy, Nginx, ELB/ALB, ELK, Prometheus, Grafana, ECS/EKS/Kubernetes, Fluentd, Elasticsearch).
• Programming experience in languages such as Golang, JavaScript, Perl, Python, or Ruby.

The ideal candidate is someone who

• Is a strong multi-tasker with a keen eye for detail and the ability to think one step ahead.
• Possesses strong analytical and problem-solving skills with a willingness to investigate complex challenges.
• Demonstrates strategic thinking to handle both the big picture and crucial organisational decisions.
• Thrives on a high level of autonomy, responsibility, and fast-paced environments.
• Works effectively cross-functionally, thinking rigorously to make hard decisions and tradeoffs when required.
• Sustains a learning and knowledge-sharing culture aiming for technical excellence and platform stability.
• Exhibits excellent written and verbal communication skills in English.

Sound like you? Apply now!