Senior IT Security Specialist / Cybersecurity SME - J13101

About the Role

We are seeking a highly specialized IT Security Specialist to act as the principal Subject Matter Expert (SME) for enterprise cybersecurity solutions within a highly regulated, top-tier financial ecosystem. In this critical role, you will drive the end-to-end lifecycle of next-generation security architectures—from initial research and procurement to operationalization. You will champion advanced security automation (SOAR, AI), enforce strict compliance standards, and fortify the enterprise infrastructure against evolving regional and global threat landscapes.

Key Responsibilities:

• Security Architecture & SDLC Delivery: Act as the domain SME for researching, designing, and deploying robust cybersecurity solutions. Lead end-to-end SDLC activities, encompassing architecture design, system integration, technical documentation, user testing, and ongoing operational support.

• Advanced Automation & AI Integration: Architect, develop, and maintain complex Security Orchestration, Automation, and Response (SOAR) playbooks. Spearhead the design and implementation of cutting-edge, AI-enabled security automation and analyst-assistance capabilities.

• Threat Mitigation & Vulnerability Management: Proactively identify and remediate security incidents. Execute continuous vulnerability assessments, coordinate penetration testing, and enforce rigorous system hardening, patch management, and disaster recovery (DR) protocols.

• Governance, Compliance & Stakeholder Alignment: Partner closely with business units, cross-functional IT teams, and external technical vendors to ensure all security deployments strictly adhere to enterprise compliance mandates.

• Technology Advisory: Continuously monitor the global threat landscape and evaluate emerging IT security trends, providing strategic recommendations for the adoption of new defensive technologies.

Qualifications & Experience:

• Education: Bachelor’s degree or above in Computer Science, Engineering, or a related technical discipline.

• Experience: A minimum of 5+ years of proven experience in cybersecurity engineering, consulting, or solution implementation. (Note: Candidates with extensive experience will be considered for Senior Specialist/Managerial capacities).

• Core Technical Domains: Deep, hands-on expertise implementing IAM, Privileged Access Management (PAM), Secret Management, Identity Threat Detection and Response (ITDR), and SOAR. Practical knowledge of AI/ML applications in cybersecurity is a distinct advantage.

• Cloud & DevSecOps: Strong proficiency in modern cloud environments (AWS, Azure) and robust DevSecOps practices utilizing tools such as Jenkins, Docker, and Kubernetes.

• Frameworks & Compliance: Authoritative knowledge of international and regional IT security frameworks, explicitly including ISO 27001, the NIST Cybersecurity Framework, Digital Policy Office (DPO) standards, and PRC Cybersecurity Law.

• Certifications: Industry-recognized credentials such as CISSP, CISA, or CISP are highly preferred.

• Soft Skills: Exceptional analytical problem-solving capabilities paired with outstanding communication, presentation, and stakeholder management skills in a fast-paced environment.

If this outstanding opportunity sounds like your next career move, please submit through "Apply Now" or send your resume in Word format to Sedrick Chan at resume@pinpointasia.com and put Senior IT Security Specialist / Cybersecurity SME - J13101 in the subject header.

Data provided is for recruitment purposes only.