SENIOR CYBERSECURITY ADVISOR

As a Senior Cybersecurity Advisor, you will play a pivotal role in shaping and implementing the organization’s security architecture, focusing on a defendable framework incorporating zero trust principles across IT, telecommunications and multi-cloud environments including AWS and Azure. You will act as a trusted expert, providing guidance on information and cloud security policies, compliance with regulatory requirements and ensuring alignment with CelcomDigi's security principles. Your advisory scope extends to supporting data protection and privacy initiatives in partnership with legal and compliance teams, alongside raising security awareness across internal departments to foster a culture of robust security practices.

Responsibilities

• Lead the strategic planning and implementation of a defendable cybersecurity architecture and Zero Trust security model tailored to the organization’s diverse infrastructure, including telecommunications, IT systems, and cloud services to enhance security posture and maturity.
• Serve as a subject matter expert providing detailed advisory services to internal stakeholders such as the Network Engineering (NEO), Project Management Office (PMO), ensuring security controls and measures meet the Technical Statement of Compliance (TSOC) requirements during the RFP/RFQ stages.
• Oversee the enforcement and adherence to security policies and digital cybersecurity guidelines, facilitating the completion of the Digital Cybersecurity Checklist (DCC) for all new business initiatives and ongoing operational projects (BAU) to guarantee security compliance before go-live and deployment.
• Collaborate closely with the Network Engineering (NEO) team and enterprise-wide business units to support the rollout of security products and solutions, ensuring full alignment with organizational security principles, compliance mandates and industry standards.
• Identify, evaluate and recommend innovative security tools and technologies that support comprehensive cyber resilience across organizational layers, actively managing and mitigating evolving cyber threats.
• Continuously monitor and communicate emerging cybersecurity threats, trends and vulnerabilities to cross-functional teams, promoting proactive risk management and mitigation strategies.
• Develop and deliver tailored Cybersecurity Awareness sessions to internal teams, enhancing understanding of security processes, protocols and best practices necessary to minimize risk exposure.
• Support Cybersecurity Architecture, Engineering, Cyber Defense, and Governance, Risk and Compliance (GRC) teams in strategic planning, audit readiness, incident management and response activities to reinforce the organization's security defenses.
• Collaborate with Cybersecurity Engineering to facilitate the secure rollout and operationalization of both new and business-as-usual technology projects, ensuring security is embedded throughout the lifecycle.

Requirements

• Bachelor’s degree in Telecommunication, Information Technology, Computer Science, Cybersecurity, equivalent discipline or having substantial related experience in technology and Cybersecurity.
• Possession of recognised security certifications such as CISSP, CCSP, CISM, or AWS Security certificate will be highly preferred and considered a strong advantage.
• Min 8 years of experience in the cybersecurity domain including at least 2 years of cloud security environments.
• Experience within telecommunications security and/or DevSecOps practices is preferred, demonstrating an understanding of industry-specific security challenges and solutions.
• Proven hands-on expertise in the deployment and enablement of information technology and telecommunication security services, encompassing networks (4G/5G), endpoint, data and identity security as well as cyber threat and incident management.
• A demonstrated leadership role encompassing both technical and strategic aspects of on-premise and cloud security frameworks, tools and methodologies.
• Strong commitment to staying updated on the latest cybersecurity technologies, industry trends and evolving threat landscapes particularly within the telecom sector.
• Excellent communication and interpersonal skills, essential for fostering collaboration among diverse teams and delivering effective security guidance and training.
• Extensive knowledge of information security standards, frameworks and best practices, including but not limited to ISO 27001, NIST Cybersecurity Framework (CSF), NIST Risk Management Framework (RMF), CIS Controls, Data Protection Act (DPA), PCI-DSS, GSMA FS.31, MCMC INSG, ENISA guidelines, ITU-T standards and relevant cybercrime legislation.
• Familiar with current cybersecurity legislation such as the Cyber Security Act 2024 and related regulatory and law enforcement requirements to ensure ongoing compliance across organizational security practices.