Information Security Officer
About The Company
Sing Investments & Finance Limited has more than 50 years of lending experience in the financing arena in Singapore. Our core activities include the acceptance of fixed and saving deposits from the public as well as the provision of loans and credit facilities to individuals and corporations, particularly the Small and Medium Enterprises (SMEs) in Singapore. The relationships that have been built over the years have earned us the reputation as one of Singapore's trusted finance companies. We are seeking dynamic individuals to grow with us and to continue building relationships with our valued customers.
Responsibilities:
- This role involves in the development and implementation of the information security action plan in collaboration with the IT team. You will develop, maintain, and support a robust and effective incident reporting and tracking system. This includes reviewing, monitoring, and reporting on the corrective and improvement measures.
- You will monitor and advise on the operating effectiveness of information security workflows and controls. This includes maintaining the framework and processes for IT risk management. You will also enhance the awareness of information security by developing training tools and materials.
- You will monitor, advise and support outsourcing matters. This includes preparing risk reports to the Risk Management Committee meeting and ensure that IT risk, information security and outsourcing policies and procedures remained aligned to the Company’s risk appetite, business and regulatory requirements.
- You should possess relevant cybersecurity-oriented experience and certification (e.g. CISSP, ISO 27001, CISA, CISM) to be the independent lead assessor of the annual SWIFT Customer Security Program attestation.
Requirements:
- Degree holder
- Must possess relevant certification on either Certified Information Systems Security Professional (CISSP) or ISO 27001 Information security management systems or Certified Information Systems Auditor (CISA) or Certified Information Security Manager (CISM)
- At least 3 years of experience in information security or IT risk management
- Good knowledge of information security and cybersecurity risks and controls, processes, workflows, methodologies, and trends
- Ability to work independently and assume responsibility for project deliverables
- Strong initiative to proactively find solutions to requirements
Only shortlisted candidates will be notified.
Remuneration and corporate rank will commensurate with experience.
