Cybersecurity Advisor

Job Description

As a Cybersecurity Advisor at CelcomDigi, you will play a pivotal role within our Cybersecurity Advisory unit.Your expertise will be instrumental in maintaining and advancing the security systems of the Cybersecurity Planning Centre. This position also involves advising on foundational infrastructure and processes to effectively manage and mitigate technology-related security risks.
You will lead and guide the implementation of secure architectures based on the Zero Trust model and embedSecurity and Privacy by Design principles across the entire organization. Your guidance will influence thedesign and execution of established and agreed security architectures, roadmaps, and controls for complexprojects, ensuring compliance with industry standards and company policies as per required in the established Digital Cybersecurity Checklist (DCC). This role is central to upholding CelcomDigi’s commitment to a secure delivery and resilient technology environment.

Responsibilities

• Deliver expert advisory services aligned with multiple cybersecurity frameworks and international standards to enhance organizational security.
• Continuously identify and address gaps within cybersecurity advisory processes, systems and compliance mechanisms (such as the Digital Cybersecurity Checklist (DCC) and related security dashboards)
• Participate actively in the design and evaluation of security technical solutions, collaborating closely with strategy, planning, architecture and solution teams 
• Work collaboratively with various cybersecurity units and cross-functional teams to guarantee robust information security governance across CelcomDigi.
• Lead the design, implementation and management of defendable security architectures including ZeroTrust models, enhancing security capabilities and maturity across diverse infrastructures such as IT, telecommunications and multi-cloud environments (AWS, Azure).
• Provide authoritative guidance to internal business units and project teams to support compliance with mandatory Digital Cybersecurity Checklist (DCC) requirements and endorsements.
• Champion cybersecurity awareness initiatives addressing RFX-related Technical Statements of Compliance (TSOC), the deployment of security tools and adherence to security processes amongst internal teams.
• Support Cybersecurity Architecture, Engineering, Cyber Defense and Governance, Risk and Compliance (GRC) teams in strategic security planning, audit preparedness, incident response and threat mitigation efforts as required.
• Contribute to the development of security policies, standards and guidelines to enforce organizational compliance and risk management objectives.
• Facilitate knowledge sharing and continuous learning within the team to foster a proactive security culture.

Requirements

• Bachelor's degree or higher in Cybersecurity, Information Technology, Computer Science or a related field, or equivalent professional experience.
• Minimum of 3 to 5 years of progressive work experience in cybersecurity advisory, security architecture or related domains.
  Strong proficiency in data visualization platforms such as Power BI or Tableau, with the ability to analyze and correlate diverse data sets including network traffic and endpoint telemetry to create actionable security dashboards.
• Hands-on experience with scripting languages like Python and PowerShell to automate security operations and enhance efficiency.
• In-depth knowledge of IT and Network Security, Data Protection mechanisms, Secure Infrastructure design, Endpoint Security, and emerging technologies including Agentic AI.
• Experience in Cloud Security Architecture and DevSecOps practices is highly desirable.
• Professional certifications such as CISSP, CCSP, or CompTIA Security+ are strongly preferred.
• Comprehensive understanding of security frameworks and standards including NIST Cybersecurity Framework (CSF), NIST Risk Management Framework (RMF), CIS Controls, CIS Benchmarks, ISO 27001,ISO 31000, PCI DSS, ITIL, Vulnerability Assessment and Penetration Testing (VAPT) and cyber kill chain methodologies.
• Excellent communication skills in English, both written and verbal, with the ability to articulate complex security concepts to diverse audiences.
• Demonstrated ability to work collaboratively within cross-functional teams and adapt to changing security landscapes.