Date: Nov 13, 2026

AVP-Telco Cyber Security Operation Expert

Location:

ID

Level: Managerial

Employment Status: Permanent

Department: Group Enterprise Security

Description:

Role purpose

The primary purpose of the AVP Telco Cyber Security Operation Expert is to lead and oversee the continuous monitoring, detection, and response to cyber threats targeting the organization's Telco infrastructure, applications, and digital assets. This role is responsible for ensuring operational excellence in cyber defense by driving incident response strategy, coordinating cross-functional collaboration, and strengthening threat detection capabilities across multiple technology domains.
The incumbent will lead the entire incident lifecycle — from initial triage, forensic analysis, and containment to post-incident review and improvement. They are also expected to provide expert insights into emerging threat landscapes, develop proactive defense mechanisms, and recommend technology and process enhancements to mitigate cyber risks.
This role aims to ensure the resilience, integrity, and continuity of the Telco ecosystem by minimizing business disruptions, preventing data compromise, and aligning security operations with corporate and regulatory standards.

Scope of Work

Area of Responsibilities	Key Activities
Continuous security monitoring and management	Ensure the continuous monitoring and proactive management of security risks within the organization's Telco environments, applications, and Telco infrastructure to promptly identify and mitigate any malicious activities. Lead the optimization of detection capabilities, SIEM rules, and alert correlation for improved incident visibility
Incident Detection and response Operation	Take charge of the entire process of containing, eliminating, and recovering from Telco security incidents by following well-established guidelines.
Forensic Analysis	Perform forensic data collection and analyze threats to ascertain the extent and root cause of incidents, enabling effective recovery and preventing future occurrences.
Threat Intelligence Analysis:	Stay informed about the latest cyber threats through threat intelligence sources. Use threat intelligence to enhance proactive detection capability for any anomaly for any potential security incidents
SLA monitoring	Implement security operational metrics to assess the effectiveness of incident response and track the progress in restoring the integrity of infrastructure and business services following security events.

Requirements

Qualification:

Minimum bachelor’s degree in relevant field (Information Technology / Electrical Engineering /Telecommunication Engineering, Cybersecurity, Computer Science, Communications, Information Security or a related field).
Minimum 5+ years of hands-on experience in Cyber Security Operations, specifically within the telecommunications industry.
Proficiency in using forensic tools and analysist techniques
Strong knowledge in Application Security. Have in-depth understanding related with application security concepts, principles, and best practices.
Proficiency in security protocols, cryptography, authentication, authorization, security vulnerabilities, and remediation techniques. Familiarity with programming languages and frameworks is a plus.
Proficient in: LINUX, Windows Servers, Unix.
Ability to analyze and identify actions to be taken.
Excellent time management skills and ability to multi-task and priorities work
Working well under pressure
Good communication and influence skill
Strong understanding of all Information Security Domains
Sound understanding of businesses supported and security principles and policies
Knowledge of network, system, and application monitoring technologies

Related Experience:

Demonstrated experience in information security and proficiency in configuring and managing security technologies such as firewalls, IDS/IPS, proxy, email-GW, AV for Servers, APT
Experience in Cyber Security Operations, specifically within the telecommunications industry.
Proven track record of successfully managing and mitigating security threats in a Telco environment.
Proficient in using and configuring Telco-specific security tools and platforms.
Strong knowledge of network security protocols and technologies relevant to telecommunications systems.
In-depth understanding of telecommunications infrastructure, protocols, and technologies.
Familiarity with the unique security challenges and threats faced by Telco operators.
Incident Response Experience. Practical experience in developing and executing incident response plans, including system/devices forensics and post-incident reporting.
Familiarity with integrating threat intelligence feeds into security solutions for proactive threat detection
Have strong communication skills, one can effectively convey complex security concepts to both non-technical individuals and leaders.

Skills:

Information System Management
Operational Management
Enterprise Risk Management
Software Engineering
ICT Security Management
Telco Knowledge
Strong verbal and written communication skills (fluency in English is required)
Strong interpersonal and communication skills with a proven ability to collaborate with cross-functional teams, including IT, Security, Compliance, and Legal.
Strong analytical skills to identify security risks, assess their potential impact, and devise effective solutions.
Good communication skill both writing and verbally to be able to work together with all employees in the company.
Ability to convey message in clear, concise and simple way to various employees in the company.
Ability to deliver and develop presentation in front of different audience and answering their questions.
Have integrity, confidentiality, and independence.
Collaboration and Teamwork: Ability to collaborate with cross-functional teams, especially with development and Telco teams, to integrate security into the software development life cycle.
Project Management: Project management skills to plan, execute, and monitor security initiatives effectively.