IT Security Executive

Built on a Passion for People and Design

Since 1979, Everbest has been committed to bringing together style and quality. What began as a vision to craft accessible fashion has grown into a beloved brand across Asia. Our collections of shoes, handbags, and accessories are thoughtfully designed to reflect the unique needs of our customers - well-crafted, versatile, and made for every moment. We believe that fashion should be both beautiful and attainable, and we strive to make that a reality in every piece we offer.

Role Overview

The IT Security Executive is responsible for safeguarding the enterprises IT systems, data, and infrastructure against internal and external threats. This role oversees cybersecurity and information security initiatives across the organization, including Head Office, Back Office, and retail operations. The position ensures that IT security policies, controls, and standards are effectively implemented and monitored, while also providing guidance on risk management, compliance, and incident response. The IT Security Executive works closely with Infrastructure, Applications, Operations, and Business teams to embed security into all aspects of IT services.

Key Responsibilities Cybersecurity & Information Security Governance:

Implement and enforce IT security policies, procedures, and standards across the enterprise.

Monitor compliance with regulatory requirements, data protection laws, and industry standards (e.g., ISO 27001, PCI-DSS, GDPR, PDPA).

Support IT security assessments.

Conduct regular risk assessments and recommend mitigation strategies. Security Operations & Monitoring

Manage and monitor enterprise security tools (firewalls, IDS/IPS, SIEM, endpoint protection, vulnerability scanners).

Analyze security alerts and incidents to detect potential threats or breaches.

Oversee security patching, vulnerability remediation, and hardening of systems.

Coordinate penetration tests and red team/blue team exercises with vendors or internal teams. Incident Response & Business Continuity

Lead the response to cybersecurity incidents, including investigation, containment, eradication, and recovery.

Maintain and test incident response playbooks and escalation procedures.

Work with Infrastructure and Operations teams to strengthen disaster recovery and business continuity plans. Awareness & Training

Conduct security awareness training for employees across the enterprise.

Promote a culture of security-first practices in daily business operations.

Develop campaigns on phishing, social engineering, and data protection. Collaboration & Advisory

Partner with IT Infrastructure, Applications, and Business teams to integrate security into system design and operations.

Advise management on security risks, investment priorities, and new security technologies.

Liaise with external security vendors, consultants regarding enterprise security.

Qualifications & Requirements Education & Experience:

Bachelors degree in Information Security, Computer Science, Information Technology, or related field.

35 years of experience in IT Security, Cybersecurity, or Information Security.

Experience in retail, FMCG, or enterprise environments preferred. Technical Skills

Strong knowledge of cybersecurity frameworks and best practices (ISO 27001, NIST, CIS Controls). Hands-on experience with security tools: firewalls, SIEM, EDR/XDR, DLP, IAM, vulnerability management.

Familiarity with cloud security, network security, and endpoint protection.

Knowledge of compliance requirements (GDPR, PDPA, SOX).

Experience in incident response and digital forensics is an advantage.

Proficient in English

Certifications (Preferred):

Certified Information Systems Security Professional (CISSP)

Certified Information Security Manager (CISM)

Certified Ethical Hacker (CEH) CompTIA Security+ / CySA+

ISO 27001 Lead Implementer / Auditor

Why Work at Everbest

At Everbest, we celebrate creativity and innovation. Our team is made up of passionate professionals who care deeply about fashion and customer experience. When you join us, you become part of a brand thats shaping the future of fashion.

We offer:

- Growth opportunities: Continuous opportunities to learn, develop, and grow.

- Collaborative culture: Work alongside an inspiring, dedicated team that values collaboration, diversity, and creativity.

- Impactful Opportunities: Be a part of a brand that is continuously evolving, where your work help shapes the future of fashion and creates meaningful customer experiences.

Benefits:

• Insurance and BPJS
• Lunch
• Sport
• Learning, Growing and Career Development
• Employee appreciation event
• Birthday Leave
• Refer-a-Friend Program