Manager Security Operations

Company description:

About DKSH

DKSH's purpose is to enrich people's lives by providing access to goods, services, and insights. United by our vision to be the trusted partner, we help companies grow in Asia and beyond across our Business Units Consumer Goods, Healthcare, Performance Materials, and Technology.

Delivering life-saving drugs to hospitals, bringing high-quality products to remote villages, installing technology that raises living standards, and providing new formulations for healthcare products that make life easier. These are just a few examples of how DKSH touches people's lives around the clock. We do this while helping our clients and customers grow by providing services including sourcing, market insights, marketing and sales, eCommerce, distribution and logistics as well as after-sales services.

Listed on the SIX Swiss Exchange, DKSH operates in 36 markets with 33,100 specialists, generating net sales of CHF 11.1 billion in 2021. Founded by Swiss entrepreneurs in 1865, we have been deeply rooted in Asia Pacific for over 150 years.

Why It's Great to Work at DKSH

Join a purpose-driven company and help enrich people's lives every day. We provide reliable access to high-quality products and services, like COVID-19 vaccines, and create sustainable value for all our stakeholders, generate jobs, and give back to society. Founded over 150 years ago in Asia by three Swiss traders, DKSH still maintains the same entrepreneurial mindset. Be part of our diverse team of more than 33,000 people working in 36 markets across the globe. You will learn and develop both professionally and personally in a modern environment offering hybrid work arrangements. Come and meet our energetic, passionate, and purposeful team and be part of something big.

Job description:

Job Summary:

This role presents an excellent opportunity within the Cybersecurity team as the Security Operations and Incident Management Lead. The position supports the Cybersecurity Director in overseeing and managing SOC and Incident Management practices. The ideal candidate will have strong expertise in IT security operations and incident management as core competencies. This role will take ownership of defining, implementing, documenting, and enhancing security operations and incident management processes at DKSH. The focus will be on driving maturity in SOC and IM practices and ensuring DKSH's overall security posture aligns with industry best practices.

Job Description:

• Lead and execute strategical direction for the overall SOC and incident management function from planning, tools implementation and budgeting to support business continuity and security incident management and response
• Lead a team of 3 internal cybersecurity professionals and third party SOC service provider on strategical operational support on security operations and incident management activities
• Leads the information security incident investigation and management process and post incident review
• Report and escalate to leadership management team on controls effectiveness and operational efficiencies
• Promote and support "center of excellence" for cybersecurity management, continuous improvement and optimization of security operations and its processes
• Leads or commissions the preparation, implementation and validating of cybersecurity policies, standards, procedures and guidelines for SOC/IM
• Support the design and operation of related compliance monitoring and improvement activities to ensure compliance with ISO27001 practices, internal security policies and applicable laws and regulations
• Flexible on-call rotations to ensure 24/7 security escalation coverage when situation requires
• Cross collaboration with regional, country IT teams, business stakeholders, external vendors and regulator to protect DKSH interest
• Keep abreast of latest security and privacy legislation, regulations, adversaries, alerts, and vulnerabilities

Job Requirement:

• Bachelor's degree in Computing/Information Technology or equivalent;
• At least 8 years' experience in similar role with at least 3 years in managerial position
• Excellent experience and knowledge on enterprise security operations and incident management are required
• Excellent knowledge on common attacks and counter measures
• Knowledge in IT environment and solutions such as Windows/Linux OSes, AD, DNS, DHCP, IPS, AV, Routers, Switches, VM, etc are required
• Hands-on experience with SOC and IM technologies and operations
• Experienced in leading security incident investigation and response
• Ability to manage remote environments
• Sense of ownership and pro-activeness in identify, improve and optimize processes and mitigating gaps
• Excellent written and verbal communication skills; interpersonal and collaborative skills; and the ability to communicate security and risk-related concepts to technical and non-technical stakeholders;
• Strong ability to work independently and cooperate with diverse teams with multiple stakeholders;