Role:
You will be part of the Security team (Governance, Risk and Compliance) and will work in a highly collaborative environment with cross-functional teams, to ensure compliance to the applicable regulatory requirements.
Responsibilities:
- Maintain cyber security policies, standards and procedures
- Manage and perform cyber risks and assessments
- Develop cyber risk documents
- Mitigate cyber security risks
- Conduct research on emerging cyber security & risk management trends, issues and alerts
- Track and monitor new security regulatory guidelines, and assess the compliance of and impact to the organization
- Assess the security deviations and risk acceptance raised by other business units
- Review and update cybersecurity risk assessment methodology and conduct cybersecurity risk assessment for critical systems
- Track remediation efforts for security & audit deficiencies
Requirements:
- Degree or Diploma in Computer Science, Computer Engineering or Information Security related fields
- At least 5 years’ of experience working in technology and/or cybersecurity governance
- Working experience in a highly regulated environment is preferred
- Strong understanding and familiarity with regulatory requirements such as IM8, MAS Notice on TRM, MAS Notice on Cyber Hygiene, MAS Technology Risk Management Guidelines, MAS Outsourcing Guidelines and the CSA Cybersecurity Code of Practice
- Strong understanding of NIST Cybersecurity Framework
- Cybersecurity professional qualifications such as CISSP, CISM, CRISC, CISA, GSEC, CCSK or equivalent would be advantageous
- Familiar with emerging technologies and possess an interest to stay abreast of industry developments (e.g. DevOps, Cloud, APIs, service-oriented architectures etc).
- Proficiency with application development experience and programming/coding/Powershell scripting will be an advantageous
- Prior experience in implementing Cybersecurity products such as IAM tools is a plus
Interested candidates are requested to send their resumes to [email protected] with current, expected salaries, notice period etc
