IT Professional

Your tasks

The IT Professional review the organisation’s IT policies, ensures access to systems and facilities is appropriate and controlled, manages the Company’s IT assets, and oversees end-user computing (EUC).

1. IT Policy and Governance

• Review, develop and implement IT policies, standards and procedures for the Company (e.g. acceptable use, password, data protection, cybersecurity, backup, remote access, agentic/generative AI, IT asset management).
• Ensure IT policies and practices comply with the Personal Data Protection Act 2012 (PDPA) and other applicable regulations.
• Review policies at least annually, and when regulations, systems or business needs change.
• Communicate policies to staff and conduct periodic IT security awareness briefings.
• Monitor compliance with IT policies and report exceptions to the Financial Controller.
• Support internal and external audits on IT controls, and track remediation of audit findings.

1. Access Rights Management (Systems and Facility)

• Administer user access for onboarding, role changes and offboarding, based on approved requests.
• Conduct periodic user access reviews (e.g. quarterly) for key systems
• Review physical access rights to the office, including door access cards, keys and server/storage rooms, and remove access promptly for leavers.
• Apply the principles of least privilege and segregation of duties; flag conflicting access to the Financial Controller.
• Maintain access logs, review records and supporting evidence for audit purposes.

1. End-User Computing (EUC)

• Set up, deploy and maintain laptops, desktops, mobile devices, printers and peripherals for users.
• Ensure all devices are patched, encrypted and protected with endpoint security.
• Administer collaboration and productivity tools (e.g. Microsoft 365, Adobe Acrobat) and user accounts.
• Maintain an inventory of business-critical spreadsheets and EUC tools, and apply controls over versioning, access and changes.
• Provide first-level IT support to users and escalate to vendors where required.

1. IT Asset Management

• Maintain a complete and accurate IT asset register covering hardware, software and licences.
• Manage IT assets across their lifecycle: procurement, tagging, assignment, transfer, retrieval and disposal.
• Conduct periodic physical verification (stock-take) of IT assets and investigate discrepancies.
• Reconcile the IT asset register with the fixed asset register maintained by Finance.
• Track software licences and subscriptions to ensure compliance and avoid over- or under-licensing.
• Ensure secure data wiping and proper documentation before disposal or write-off of IT assets.

1. Vendor Management and IT Operations

• Manage IT vendors and service providers, including contracts, renewals and service levels.
• Support IT budgeting and procurement with the Financial Controller.
• Oversee data backups, and support business continuity planning and incident response, including data breach management.

Requirements

1. Education (Mandatory)

• Bachelor’s degree in Information Technology, Information Systems, Computer Science or a related discipline.

1. Experience

• Minimum 3 years of relevant experience in IT operations, IT governance or IT support.
• Hands-on experience in user access management and periodic access reviews.
• Exposure to IT audits or IT general controls (ITGC) is preferred.

1. Skills and Competencies

• Working knowledge of Windows, Microsoft 365, and endpoint management tools.
• Familiar with the Personal Data Protection Act 2012 (PDPA) and its application to IT systems and data handling.
• Good understanding of cybersecurity practices and IT asset management.
• Able to write clear policies and procedures for non-technical users.
• Organised and detail-oriented, with strong record-keeping discipline.
• Able to work independently and communicate effectively with management and vendors.