Senior Manager

**Job Type**:Full Time
- The role evaluates and advises executive, business, and IT management on technology governance, development and adoption plans to ensure the technology pillar adapts to the evolving business needs and risks for the PSA Group.
- Required to monitor threat intel, perform threat analysis, disseminate advisories and manage the monitoring of security and threat posture. Must also be able to function as a Group Cybersecurity Incident Response Officer (GCIRO) to manage incidents across the entire group.
- This role is also responsible for effective cybersecurity technology governance and management within PSAI to meet the organisation’s security objectives, and conformance to the mission of PSA Group. It goes beyond a consultancy and advisory role.
- The person who fills this role must provide technology leadership and be able to work effectively with and through others and be ready and willing to roll up their sleeves to produce the deliverables and outcome as part of a wider team.
- Must also be able to manage cybersecurity projects and support the project management office in providing oversight over the projects under the PSA Cybersecurity Masterplan.

**Roles and Responsibilities**
- **Cybersecurity Incident Management**:

- Develop and implement cyber incident response strategy
- Develop approaches to combat cyber threats and mitigate risks to information systems assets
- Develop guidelines to perform incident response strategies and policies
- Implement processes and guidelines to perform incident response protocols, analyse data, and create incident reports
- Implement mechanisms to improve cyber security measures and incident response times
- Oversee the planning and conduct of cyber security exercises
- Manage cyber security incidents
- Handle responses to cyber security incidents
- Lead the recovery of contained cyber security incidents, following established processes and policies
- Utilise appropriate cyber incident management techniques to resolve challenges
- Cyber Security Incident Advisory and Training Oversight
- Propose procedures to prevent future incidents and improve cyber security
- Monitor the maintenance of the cyber security incident response training plans for security staff
- **Threat Analysis and Management**:

- Oversee cyber threat analysis
- Collect, analyse and store cyber threat intelligence information
- Analyse past cyber-attacks to draw insights and implications on the organization
- Scrutinise vulnerabilities within systems that may pose cyber security risks
- Recommend ways to enhance the resilience and security of IT systems
- Propose mitigation techniques and countermeasures to ensure risk from cyber threats are reduced to an appropriate level
- Evaluate and provide feedback to improve intelligence production, intelligence reporting, collection requirements, and operations
- Conduct in-depth analysis of existing threats and identify existing gaps in the current cyber security set-up
- Proactive research and monitoring of threats and attacks
- Conduct research on new and existing threats that may impact existing IT systems
- Identify potential attacker groups or individuals and take preventive measures
- Monitor and report changes in threat dispositions, activities, tactics, capabilities, objectives related to designated cyber operations warning problem sets
- Present threat awareness reports to technical and non-technical staff
- Oversee the development of internal threat awareness reports
- Classifying threats and simulating attacks on systems
- Run test attacks and simulations on the systems to identify the possibilities of threats and extent of damage it could cause
- Prioritise and rate identified threats based on its severity
- Provide timely notice of imminent or hostile intentions or activities which may impact organisation objectives, resources, or capabilities
- Use existing database of threats and attack histories to pre-empt and classify potential new threats
- Implement threat mitigation strategies and protocols
- Provide guidance on threat mitigation strategies and potential threats and cyber-attacks to ensure current cyber security standards and set-up are updated
- Analyse intelligence and support designated exercises, planning activities, and time-sensitive operations
- Provide evaluation and feedback to improve intelligence production, reporting, collection requirements and operations
- **Technology Governance and Management**:

- Develop technology-driven programmes and initiatives to strengthen the capability of the organisation to mitigate risks
- Responsible for proper enforcement of security practices within the organization especially across Identify, Detect and Respond pillars
- Collect, analyze and comment on IT security metrics and incidents relating to these pillars
- Lead the research and evaluation of emerging technology, industry and market trends to assist in project development
- Oversee the translation of the secur