- Familiar with Applications Delivery Life Cycle, Project Management best practices and IT Controls across different operating system and platforms with hands on experience on Public Cloud controls is an added advantage.
- Good understanding of security issues, operational risks and process improvement in the areas of technology and business
- Experience with secure coding and knowledge of OWASP will be preferred
- Good wide knowledge of security domains including encryption and authentication methods, vulnerability assessment, penetration testing and security patch management.
- Knowledge of the Banking Act – Banking Secrecy, Bank's policy and guidelines, Information Security Policy, Anti-Money Laundering, Cyber Security Act, MAS Technology Risk Management Guidelines, MAS Outsourcing Guidelines etc.
- Have a strong control and process management mindset, constantly paying attention to details and have ability to perform deep-dive investigation and crunching for control and process issues
- Proactive team player with ability to work independently with minimal supervision and equips with excellent communication (both spoken and written), presentation and business writing skills
- Able to collaborate within a team, at various levels of stakeholders from the operating level to the senior management across locations
- Flexibility and ability to multi-task and take on different types of roles and activities at the same time in a fast-paced environment. Able to effectively manage time and prioritize tasks and responsibilities
- Positive and problem-solving attitude and willing to take new challenges with an open mind
- Creative, quick & systemic thinking with strong analytical and planning skill
- Minimum 7-10 years of working experience in the Financial / Banking IT industry
- Experience in IT audit or CISA/CISM certified preferred or operational risk management and control self-assessment or prior experience in implementing security solution and information security governance
x
