• Supporting CISO and Team lead with engagement and supporting Com Care Sector on Cyber Security initiatives.
• Drive the HIB Compliance program and outreach to the Sector.
• Support CISO in managing Sector Cyber Security team.
• Support the Sector & Digitization team engagement with Sector on Cyber Security
• Drive the Cyber Essential+ certification & Trust Mark certification program

Job Requirements:

• Degree in Information technology with at least 10 years of working experience in Cyber Security or IT
• Professional certification in CISM, CRISM, CGEIT will be an advantage
• Has relevant work experience in both vendor and end user environment
• Demonstrate competency to provide consultancy or advisory to internal or external customer
• Cyber Security Governance and Assurance Knowledge
• Good stakeholder management, IT/Cyber Risk Management
• Good understanding of Cyber Security best practices and standards (NIST, ISO27000, Cyber Kill Chain, MITRE)

Job Description:

·Report to Cyber Security team lead.

·Planning, implementing, managing, monitoring and upgrading of IT security solutions.

·Support project by delivering project deliverables and completing project milestones.

·Develop and maintain technical, operational and configuration documentations required for

project implementation.

·Vendor coordination and management for product implementation and troubleshooting.

·Evaluate security products and conduct Proof of Concept (POC) to verify the effectiveness of each security measures, and to make certain that the security measures will continue to be effective after implementation.

·Provide technical support and incident response for IT security infrastructure components to the maintenance team.

Skill sets:

·Knowledge of Endpoint Security solutions, such as Anti-Malware, Host Firewall, Application &

·Change Control, Disk Encryption and EDR

·Knowledge of Identity & Access Control solutions, such as PKI solutioning, Hardware Security

·Module (HSM), Privileged Access Management, 2FA and OS Hardening Policies

·Implementation of the Endpoint or Identity & Access Control Security tools

·Knowledge of various OS such as Windows or Linux

·Strong verbal and written communication skills

·Team player as well as ability to work independently on tasks

·Self-motivated with the ability to drive features to delivery

If you are interested in this position, please click “Apply Now” and we will review your qualifications & reach out to you for further discussion & next steps.

Only shortlisted candidates will be responded to, therefore if you do not receive a response within 14 days please accept this as notification that you have not been shortlisted.

EA Licence No: 11C5502

Registration No: R1876903

Education / Experience:

· Diploma/Degree in IT / Computer Science / Engineering, or equivalent

· Professional certifications in cyber security solutions preferred

Job Description:

· Work experience with maintaining enterprise systems with focus on cyber security

· Troubleshoot reported issue

· Liaise with technology vendors for escalation where required

· Patching and updating of tools and systems

· Prepare incident reports and maintain records of service level agreements for customers

· Maintain technical documentation

Skill sets:

· Experience in Operations Support

· Experience in technologies like McAfee, Cisco, Microsoft, Thales

· 3 years’ in managing and executing projects based on endpoint security, data loss prevention

· and vulnerability management domains.

If you are interested in this position, please click “Apply Now” and we will review your qualifications & reach out to you for further discussion & next steps.

Only shortlisted candidates will be responded to, therefore if you do not receive a response within 14 days please accept this as notification that you have not been shortlisted.

EA Licence No: 11C5502

Registration No: R1876903

As a team lead, you will support CISO with engagement and supporting Com Care Sector on Cyber Security initiatives, to provide outreach to Community Care Sector on Security Best Practices.

• Drive the HIB Compliance program and outreach to the Sector.
• Support CISO in managing Sector Cyber Security team.
• Support the Sector & Digitization team engagement with Sector on Cyber Security
• Drive the Cyber Essential+ certification & Trust Mark certification program

Job Requirements:

• Degree in Information technology with at least 15 years of working experience in Cyber Security or IT
• Professional certification in CISM, CRISM, CGEIT is good to have
• Relevant working experience in both vendor and end user environment
• Proven track record in positions to provide consultancy or advisory to internal or external customers
• Cyber Security Governance and Assurance Knowledge
• Good stakeholder management, IT/Cyber Risk Management
• Good understanding of Cyber Security best practices and standards (NIST, ISO27000, Cyber Kill Chain, MITRE)

RESPONSIBILITIES
The Data and Cyber Security (DCS) team has the following main responsibilities:

• Identification, reporting and management of Asia cyber risk
• Third party cyber risk assessment and management
• Asia cyber risk awareness campaigns and training
• Advice on cyber security to business service unit (e.g. as part of new projects suggests controls to mitigate risks)
• Cyber incident response (including management of data leakage incidents)
• Management of response on cyber topics to Asia and international regulators
• Response to client due diligence requests on cyber security

Your Responsibilities:
Security Control Review:

• Define scope, roadmap, and testing plan to assess key cybersecurity controls on an ongoing basis
  
• Perform test of design and effectivenss on key cybersecurity controls
  
• Work to embed control testing within the organisation with a focus on automation and efficiencies
  
• Work with various teams to define follow-up actions to remediate control weaknesses identified
  
• Maintain, review and renew risk acceptances for control risks that cannot be fully mitigated

Project Security Assessments

• Work with relevant teams to perform security assessments, reviewing high and low level architecture designs, and provide recommendations to mitigate identified risks on new projects being rolled-out
  
• Depending on the nature of the project, security assessments should cover application and data security requirements to ensure compliance with the Bank's internal policies and framework
  
• Ensure compliance with cybersecurity related regulations that may be relevant to the project
  
• Perform follow-up on remediation actions that may result from the security assessment

Third Party Risk Assessments

• Perform information security reviews on requests for outsourcing, including review of the vendor's security capability and risk of data leakage

Regulatory Reviews

• Perform reviews to assess the Bank's compliance against cyber regulatory topics across Asia
• Work with Compliance to identify new and arising regulatory requirements with impact to cybersecurity
  Participation in committees
• Participate in regional and global governance meetings and normative committees where required
• Provide updates within the team and liaise regularly with other teams in Asia, including application managers, technology, compliance, operational risk managers, risk management and third party management
  

PROFILE REQUIRED

• Proficient in performing security architecture and security design reviews
• Knowledge of application, system and network auditing
• Strong understanding of IT infrastructure and IT applicative framework architectures
• Familiarity with cloud computing and container technologies (docker and kubernetes)
• Good understanding of application vulnerabilities and common exploits (e.g. OWASP Top 10)
• Knowledge of security hardening standard (e.g. Centre for Internet Security benchmarks, NIST)
• Experience with security control reviews and audits
• Experience in performing third party reviews / assessments
• Familiar with cybersecurity regulatory topics in Asia (e.g. HKMA C-RAF, MAS TRM, etc)
• Computer programming experience desirable
• Excellent English verbal and written communication skills, experience in communicating complex technical topics at senior organizational levels,up to and including MD level
• Client oriented mindset, results driven, proactive and quick to react to requests
• Innovative and bringing new ideas to improve processes
• Bachelor degree in Information Technology or equivalent
• Professional qualification such as CISSP, CISM, ITIL
• Experienced security professional with 8+ years of relevant experience

BEHAVIORAL SKILLS

Responsibility - Risk awareness: I am constantly on the lookout for risks
Responsibility - Performance: I strive for high performance
Team Spirit - Synergies: I make cooperation with colleagues in and outside my team a priority
Team Spirit - Open mindset: I listen and share my views and my expertise in an open mode
Client - Understanding and Respect: I listen to clients and colleagues in order to understand and anticipate their needs
Client - Risk: I strive to satisfy clients while taking into account risks for the company

Company Description:

Societe Generale is one of the leading European financial services groups. Based on a diversified and integrated banking model, the Group combines financial strength and proven expertise in innovation with a strategy of sustainable growth. Committed to the positive transformations of the world’s societies and economies, Societe Generale seeks to build together with its clients, a better and sustainable future through responsible and innovative financial solutions. Active in the real economy for over 150 years, with a solid position in Europe and connected to the rest of the world, Societe Generale has over 117,000 employees in 66 countries and supports 25 million individual clients, businesses and institutional investors worldwide (figures as of August 2023). We have a presence in 11 locations across Asia Pacific. With our regional headquarters in Hong Kong – a core hub of the worldwide Societe Generale Group – we employ around 2,300 employees in the region. In addition, Societe Generale's Global Solution Centre (SGGSC) in Bangalore and Chennai supports the Group in Asia Pacific and globally with customised business solutions.

Department Description:

The Global Business Service Unit (GBSU) Risk & Production Management (RPM) is part of the first line of defense (LOD1) and accompanies SG Asia management in the development and transformation of its business whilst ensuring non-financial risks are appropriately identified and managed operationally, with a focus on:Transversal risks management (Resilience, Cyber, Oversight/Outsourcing) for the wholesale platform
Operational Security Management (OSM) functions for GBSU Asia
LOD1 project coordination (e.g. Permanent Control Transformation, Operational resilience) for the wholesale platform

In Asia, LOD1 risk management and control functions are provided by RPM as a service under the governance of, and with accountability from, Asia management.The RPM function is split across 5 teams:Governance, Risk and Controls team (GRC) => in-charge of operational and non-financial risks management for GBSU functions
Data and Cyber Security (DCS) => in-charge of data and cyber security risk management for the Asia platform
Third Party Management (TPM) => in-charge of monitoring risks from providers (intra group and external) and also oversight of the Operations processing chain for Asia originated activities.
Business Continuity Management (BCM) => in-charge of business continuity risk management for the Asia platform
Processes and Practices Steering Team (PPS) => in-charge of providing and maintaining IT solutions to support the business growth of GBIS.

Responsibilities:

• Draft, review, negotiate and arrange for signing of Non-Disclosure Agreement for all new partners and Letter of Confirmation or equivalent where required.
• Work closely with Claims & Risk team on Master Service Agreements and Third-Party Administration Service Agreements for Claims Management services
• Prepare Terms of Business Agreements with Reinsurers, Brokers, etc.
• Draft and review Addendum to agreements in accordance with the commercial terms agreed by the parties.
• Prepare forms required by Reinsurer for every new deal
• Coordinate with Reinsurer for legal due diligence confirmation
• Review signed agreements for circulation to the relevant stakeholders
• Administer and maintain records of legal documents
• Conduct ad-hoc simple legal research where required

Requirements:

• Degree or Diploma in Law, Legal Studies or related field
• 1 to 2 years of relevant working experience in similar role, preferably in reinsurance or insurance sector
• Knowledge of contract administration
• Excellent written communication skills with attention to details
• Ability to work in a dynamic environment
• Team player with good Interpersonal and communication skills
• Highly ethical, discreet, and able to maintain confidentiality

We apologize that only shortlisted candidates will be contacted. Thank you.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates collecting, using and disclosing my personal data for the purposes set out in the Privacy Policy which is available at www.persolkelly.com.sg I also acknowledge that I have read, understood, and agree to the said Privacy Policy.

PERSOLKELLY Singapore Pte Ltd • RCB No. 200007268E

EA License No. 01C4394 • EA Registration No. R1653100 (Goh Jia Zhen Crystal)