• Be the subject matter expert on all ISO 27001 related governance & compliance (Technological Control)
• Define metrics and key performance indicators to determine the effectiveness of the security testing, tooling & automation program
• Managing & developing Threat Intelligence Platform for various security threat
• Project Management & Execution
• Conduct Information Security Awareness Campaign Strategy and execution
• Improve the analysis and defense techniques and tactics to combat new types and sources of threats and attacks

• Should have vast experience minimum 4 years in relevant field (IT Security / SOC Engineer / Information Security / DevSecOps, IT Governance)
• Understanding in ISO 27001 security control & risk management concept
• Hands-on / experience with SIEM (Security Incident Event Monitoring) technologies
• Hands-on / experience Device Fingerprint Technologies, Fraud Detection System (Plus point)
• Hands-on / experience with database query (Plus point)
• Have a strong analytical skill with good communication and interpersonal skills
• Nice to have certifications: CISSP / CISM / CISA / CCSP / CCSK / AWS Cloud Security / CEH / CND (Plus point)
• Hands-on / experience in penetration testing (Black, White, Grey box) process & tooling
• Skills in office tools (excel, presentation, visio or cloud document utility tools)
• Hands-on / experience in Web Application Firewall, Endpoint & API security technologies
• Hands-on / experience with AI & Cloud security adoption

Evermos is committed to providing an inclusive environment where equal opportunities are available to all applicants regardless of race, color, religion, gender, national origin, disability, age, genetic information, marital status, pregnancy, or related condition. We will not tolerate discrimination or harassment based on any of these characteristics.

We also emphasize the importance of diversity in all aspects of employment including recruitment, hiring, promotions, training, and organization operations.