Date:  12 Aug 2025
Job Req. ID:  1863

Job Title:  IT Associate (Cyber Risk Analyst)

Location: 

Bandar Seri Begawan, Brunei Darussalam

IT Associate (Cyber Risk Analyst)

Main Tasks & Responsibilities

  • Proactively monitor and respond to cybersecurity threats affecting head office systems, in-store POS setups, and cloud-based platforms used across restaurant operations.
  • Lead the deployment and enhancement of cybersecurity and IT risk management programs, ensuring alignment with industry standards and the dynamic needs of the Food & Beverage sector.
  • Enforce security policies and procedures across all restaurant locations, including IT infrastructure, payment systems, and third-party service providers.
  • Perform IT risk assessments to identify vulnerabilities in systems supporting store operations, supply chain, mobile ordering, delivery services, and loyalty applications.
  • Partner with Operations, Finance, and Store Support teams to promote cybersecurity awareness and best practices among restaurant staff and corporate employees.
  • Investigate and respond to security incidents such as POS and Kiosk system breaches, unauthorized account access, and data leaks, implementing preventive measures to avoid recurrence.
  • Liaise with external vendors and auditors during cybersecurity evaluations and compliance reviews.
  • Maintain comprehensive documentation of cybersecurity tools, incident reports, policies, and risk assessments to support regulatory and audit requirements.
  • Stay current with emerging cyber threats, particularly those targeting Food & Beverage platforms and payment processing technologies.

Minimum Requirements:

  1. Bachelor’s degree in information technology, Cybersecurity, Computer Science, or a related field.
  2. Minimum of 1 year of hands-on experience in cybersecurity or network/endpoint administration.
  3. HND holders with 6–8 years of relevant IT support or security experience will also be considered.
  4. Certifications such as CompTIA Security+, CompTIA Network+, CEH, CISA, or CISSP is a strong advantage.
  5. Strong communication skills with the ability to explain technical risks and solutions to non-technical stakeholders.

 

Note: The application deadline is on 26th August 2025, Tuesday. Only shortlisted candidates will be notifed.