IT Professional

Job Purpose The IT Professional review the organisation’s IT policies, ensures access to systems and facilities is appropriate and controlled, manages the Company’s IT assets, and oversees end-user computing (EUC). Key Responsibilities 1. IT Policy and Governance Review, develop and implement IT policies, standards and procedures for the Company (e.g. acceptable use, password, data protection, cybersecurity, backup, remote access, agentic/generative AI, IT asset management). Ensure IT policies and practices comply with the Personal Data Protection Act 2012 (PDPA) and other applicable regulations. Review policies at least annually, and when regulations, systems or business needs change. Communicate policies to staff and conduct periodic IT security awareness briefings. Monitor compliance with IT policies and report exceptions to the Financial Controller. Support internal and external audits on IT controls, and track remediation of audit findings. 2. Access Rights Management (Systems and Facility) Administer user access for onboarding, role changes and offboarding, based on approved requests. Conduct periodic user access reviews (e.g. quarterly) for key systems Review physical access rights to the office, including door access cards, keys and server/storage rooms, and remove access promptly for leavers. Apply the principles of least privilege and segregation of duties; flag conflicting access to the Financial Controller. Maintain access logs, review records and supporting evidence for audit purposes. 3. End-User Computing (EUC) Set up, deploy and maintain laptops, desktops, mobile devices, printers and peripherals for users. Ensure all devices are patched, encrypted and protected with endpoint security. Administer collaboration and productivity tools (e.g. Microsoft 365, Adobe Acrobat) and user accounts. Maintain an inventory of business-critical spreadsheets and EUC tools, and apply controls over versioning, access and changes. Provide first-level IT support to users and escalate to vendors where required. 4. IT Asset Management Maintain a complete and accurate IT asset register covering hardware, software and licences. Manage IT assets across their lifecycle: procurement, tagging, assignment, transfer, retrieval and disposal. Conduct periodic physical verification (stock-take) of IT assets and investigate discrepancies. Reconcile the IT asset register with the fixed asset register maintained by Finance. Track software licences and subscriptions to ensure compliance and avoid over- or under-licensing. Ensure secure data wiping and proper documentation before disposal or write-off of IT assets. 5. Vendor Management and IT Operations Manage IT vendors and service providers, including contracts, renewals and service levels. Support IT budgeting and procurement with the Financial Controller. Oversee data backups, and support business continuity planning and incident response, including data breach management. Job Requirements 1. Education (Mandatory) Bachelor’s degree in Information Technology, Information Systems, Computer Science or a related discipline. 2. Experience Minimum 3 years of relevant experience in IT operations, IT governance or IT support. Hands-on experience in user access management and periodic access reviews. Exposure to IT audits or IT general controls (ITGC) is preferred. 3. Skills and Competencies Working knowledge of Windows, Microsoft 365, and endpoint management tools. Familiar with the Personal Data Protection Act 2012 (PDPA) and its application to IT systems and data handling. Good understanding of cybersecurity practices and IT asset management. Able to write clear policies and procedures for non-technical users. Organised and detail-oriented, with strong record-keeping discipline. Able to work independently and communicate effectively with management and vendors.