Position Objective:
Identifies and evaluates potential information security risks and ensures their corresponding risk exposures are appropriately addressed such that the company’s image and value are protected. Lead the information security team and advise senior management on information security trends to drive cyber security roadmap and enhance our cyber security readiness for the current cyber landscape and uplift the capabilities to tackle the future emerging cyber risks.
Key Responsibilities:
Information Security and Governance Management
Advances the overall Information Security and technology risk posture of the company, embedding risk culture and programs to secure the IT environment through policy governance, innovative security solutions, process and controls and initiatives, training and awareness programmes, and risk reviews.
Information Security Governance
Establishes cyber risk strategy, administer technology policies and processes, deliver awareness programs and provides risks advisory.
Technology Risk Assurance & Compliance
Manage the IT Compliance and Risk Assurance function to embed ensure department compliance to various regulations, policies, procedures and standards through risk-controls assessments, deviation handling and proper closure to all outstanding issues.
Application Security
Identifies and evaluates application security risks and ensures the applications are designed and developed securely meeting all the Enterprise application security standard and regulatory requirements, identified information security risks are appropriately addressed before system go-live.
Information Security Operations
Manage the outsourced operational IT security to ensure high levels of integrity, confidentiality, and availability of IT resources, thus being timely and effective in meeting business and regulatory needs.
Puts in place the structure in place to manage cyber security operations and respond effectively to cyber security incidents in a timely manner.
Software Quality Assurance
Ensure compliance to the quality processes (QP) in the systems supporting AIA Singapore through appropriate guidance, controls, and reviews in the SDLC framework.
Budgetary or Financial Control
Responsible for budget of Information Security and Governance unit.
Others
· Downward trend in internal audit overall assessments – reduction in Needs Major Improvements.
· Downward trend in PwC ICFR audit assessments
· Downward trend in security incidents and less DP incidents
· Uplift Cyber Security process, controls, and maturity level
· Support for the Cyber Security score in the annual MAS CRAFT report
· Performs other responsibilities and duties periodically assigned by CTO to meet operational and/or other requirements.
