IT, Executive (Digital & Cybersecurity)

Principle Accountability

To support the organisation's digitalisation and cybersecurity objectives by developing and maintaining fit-for-purpose digital solutions, supporting application and database activities, assisting with system integration and reporting, and executing assigned cybersecurity monitoring, governance, awareness and compliance activities under the guidance of the IT management team.

Job Description

1. Support business process digitilisation by gathering requirements, documenting workflows and developing, configuring, testing and maintaining approved low-code solutions using Microsoft Power Apps, Power Automate, SharePoint and related Microsoft 365 services.
2. Assist with custom application development and maintenance using approved technologies such as .NET/C#, ASP.NET, Python, JavaScript, HTML and CSS (but not limited to), including testing, debugging, version control, deployment support and post-implementation monitoring
3. Create and maintain database objects, queries, data extracts, dashboards and reports using SQL, Power BI, Microsoft SQL Server, MySQL, PostgreSQL or other approved platforms, ensuring outputs are accurate, traceable and appropriately validated
4. Support REST API and/or business-system integrations, including ERP, MES, HR and finance interfaces; perform interface testing, investigate errors, coordinate resolution and maintain technical documentation
5. Provide first-level support for assigned digital applications; prepare user guides, technical documentation and training materials; conduct basic user training; monitor adoption, usage and benefits; and recommend practical improvements.
6. Assist with cybersecurity operations by monitoring alerts, endpoint health, patch status, vulnerabilities and compliance dashboards; support Microsoft Defender, Entra ID, Intune, email security and related tools; and promptly escalate suspected incidents.
7. Support identity and access management, vulnerability remediation, risk-treatment actions, audit findings, incident response, security awareness, phishing simulations, policies, standards, procedures, asset records, incident logs and audit evidence. Apply least privilege, data protection, input validation, change control and logging.
8. Participate in digitalisation and cybersecurity projects, vendor coordination, testing, rollout, reporting, quotations, technical comparisons and closure documentation. Follow IT service management, change, procurement, information-security and document-control procedures, and work effectively with users, management, HR, Finance, Procurement, Internal Audit, operating companies, vendors, consultants, auditors and service providers
9. Support the implementation of Smart Factory and digitalisation initiatives across the HESB Group of Companies.
10. Covering day-to-day operation on corporate office for IT support999.

Job Requirements

• Bachelor's degree in Information Technology, Computer Science, Software Engineering, Cybersecurity, Information Systems, Data Science or a related discipline.
• Fresh graduates are encouraged to apply.
• 3 years of relevant experience in application development, digitalisation, data, IT operations or cybersecurity can also be considered.
• Have good knowledge on AI, Software development lifecycle; Microsoft 365, SharePoint, Power Apps, Power Automate and Power BI; One or more of .NET/C#, ASP.NET, Python, JavaScript, HTML or CSS; SQL and relational databases; REST API, JSON, Git, testing and technical documentation; Identity and access management, endpoint security, vulnerability management, phishing, incident handling and security controls;  Windows, networking, cloud services, devices, patching and backup concepts;

Key Competencies

• Ability to work independently with minimal supervision, with strong ownership and accountability for assigned deliverables.
• Analytical thinking and structured problem solving.
• High learning agility and willingness to work across digitalisation and cybersecurity disciplines.
• Attention to detail, integrity and responsible handling of confidential information.
• Customer-oriented communication and ability to explain technical matters clearly.
• Teamwork, ownership, time management and disciplined follow-through.
• Curiosity, initiative and a continuous-improvement mindset.