IT Executive; Digital Capability & Innovation Department - Cybersecurity & Operations

About the Role

We are seeking an IT Executive (Cybersecurity & Operations) to support the organisation’s cybersecurity posture and day-to-day IT operations. This role combines hands‑on security operations with IT support responsibilities, ensuring systems are secure, reliable, and well‑managed. The ideal candidate is technically hands‑on, operationally strong, and able to translate cybersecurity requirements into practical system configurations.

• Monitor security alerts from SIEM, endpoint protection, and network systems; perform triage and elevate where required
• Analyse logs and system activity to detect anomalies and potential cybersecurity threats
• Support implementation and maintenance of security tools (e.g., SIEM, endpoint detection, MDR services)
• Review and fine‑tune security alerts and monitoring rules to improve effectiveness

• Perform first‑level incident investigation, containment, and recovery actions
• Document incidents, root causes, and follow‑up remediation actions
• Coordinate with internal stakeholders and vendors during security incidents
• Support vulnerability remediation and follow‑up on identified risks

• Support implementation of cybersecurity policies, standards, and procedures
• Assist in audits, risk assessments, and compliance activities (e.g., PDPA and internal governance requirements)
• Maintain documentation for risks, controls, and mitigation actions
• Work with relevant stakeholders on data protection and data security initiatives

• Conduct vulnerability scans and coordinate remediation activities
• Track patching status and ensure timely updates across systems and endpoints
• Implement and maintain system hardening baselines (e.g., CIS benchmarks, NIST guidelines)
• Monitor security posture across assets and follow up on gaps

• Liaise with cybersecurity vendors (e.g., MDR, VAPT, firewall providers)
• Track service deliverables, incidents, and remediation progress
• Support evaluation and onboarding of new tools and solutions

• Provide Level 1–2 IT support for incidents and service requests
• Support system administration for Microsoft 365, Entra  / Active Directory, endpoints and network infrastructure
• Manage user access, onboarding/offboarding, and device lifecycle activities
• Perform routine system monitoring and preventive maintenance

• Diploma or Degree in Information Technology, Cybersecurity, or related field
• Preferably 3–6 years of relevant experience in cybersecurity and/or IT operations
• Experience in environments requiring both security and tech support responsibilities

• Security monitoring tools (e.g., SIEM, log analysis, MDR platforms)
• Endpoint protection solutions (e.g., Microsoft Defender, Bitdefender or equivalent)
• Endpoint management tools (e.g., Microsoft Intune, Atera or equivalent)
• Vulnerability scanning and patch management tools
• Microsoft 365, Entra  / Active Directory
• Network fundamentals and monitoring tools
• Implementation of cybersecurity frameworks (e.g., CIS, NIST) using Intune and Group Policy (GPO)
• Firewall configuration and management (e.g., Fortinet, Sonic Wall or equivalent)

• Power Shell scripting for automation and administration
• Microsoft 365 ecosystem, including Entra  configurations
• Windows Autopilot or modern device provisioning workflows