SENIOR EXECUTIVE / ASSISTANT MANAGER, INFRASTRUCTURE SECURITY OPERATIONS

About SATS – Feed and Connect Communities

SATS is a global leader in gateway services and Asia's pre-eminent provider of food solutions. Using innovative food technologies and resilient supply chains, we create tasty, quality food in sustainable ways for airlines, foodservice chains, retailers, and institutions. With heartfelt service and advanced technology, we connect people, businesses, and communities seamlessly through our comprehensive gateway services for customers such as airlines, cruise lines, freight forwarders, postal services and eCommerce companies.

Fulfilling our purpose to feed and connect communities, SATS delights customers in over 210 locations and 27 countries across the Asia Pacific, UK, Europe, the Middle East and the Americas. SATS has been listed on the Singapore Exchange since May 2000. For more information, please visit www.sats.com.sg

KEY RESPONSIBILITIES

As an Infrastructure Cybersecurity Specialist, you will be a key member of the SATS Infrastructure Operations & Cybersecurity Team, focusing on the security of our infrastructure & end-user computing systems. Your responsibilities will include performing systems architecture reviews, providing advice related to security risks and impacts, implementing technical solutions, and maintaining the organization’s security infrastructure solutions within SATS to ensure comprehensive protection. As part of your role, you’ll manage post red teaming remediation activities, address vulnerabilities, and ensure system security. You’ll coordinate with teams and stakeholders, drive tasks to completion, and provide regular updates. This role is integral to maintaining SATS’s security posture. You will also be part of the Cyber Incident Response Team working closely with SATS vendors and service providers for analysis, investigation and containment of cyber incidents.

Job Description

• Manage SATS’s service providers for the delivery of security services, which include vulnerability management, incidents response, day-day operational issues and compliance with agreed SLAs;
• Own, manage, maintain, and technically refresh existing security infrastructure solutions, and lead project teams in the deployment of new security technologies and solutions;
• Manage vulnerabilities identified from security assessments for timely remediation, mitigation or risk acceptance;
• Manage internal and external audits, including formulating appropriate risk management and/or mitigation actions;
• Manage, oversee, update & coordinate post-remediation red teaming activities with relevant teams, vendors and stakeholders to implement security measures, address identified vulnerabilities promptly and ensure effective mitigation of vulnerabilities and system security;
• Implement global security initiatives/strategies outlined, ensuring strict adherence to stipulated governance & successful execution;
• Facilitate communication and raise cybersecurity awareness across all users;
• Front Technology Business partners, Business Units to champion key EUC related initiatives and operationalize infra-related support, service workflows & share in regular ITSC forums;
• Maintain a comprehensive inventory of technology assets and accessories, including tracking, auditing, lifecycle management, maintenance coordination, disposal, and documentation;
• Regularly evaluate SSL certificates, monitor expiration dates, and initiate timely renewal processes to ensure the continuous security and functionality of all infrastructure services.

KEY REQUIREMENTS

• Degree in Computer Science, and/or Cybersecurity Computer or Electronics Engineering or Information Technology.
• At least 3 years of experience in cybersecurity, Infrastructure and project management
• Proficient & Excellent verbal and writing communication and interpersonal skills, including the proficiency to explain cybersecurity topics to audiences across all levels.
• Knowledge and experience with industry best practices, including ITIL, NIST, SAN etc.
• Relevant IT Security certifications (MS Certified WSHAA/SOAA/IAAA, CISSP, COMPTIA Network+/CCNA) will be preferred
• Experience in enterprise mobile management (EMM/MDM), Proxy services, VPN (ZPA, Cisco etc), MS Defender for Endpoint/Servers, MS In-tunes administration, management will be desirable