Total 3 information technology job vacancies in Legal / Public / Security category in bendemeer central singapore

We’re searching for a Senior/Manager, Client Information Security (Infra) to be part of our diverse team of talent here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

• Drive the implementation of NCS cybersecurity, data protection, and privacy policies, standards and processes within the practice. You will work to continually improve the security posture of projects through proactive risk management and the establishment of a broad range of cybersecurity controls
• Provide direct support to colleagues to ensure cybersecurity is addressed throughout the engagement delivery lifecycle, from infrastructure and security tooling choices to the secure storage, processing and deletion of client data.
• Act as a single point of contact and escalation for the SOC, Threat Intel and Crisis Response teams for practice-related cybersecurity incidents, ensuring timely identification, remediation and lessons learned.
• Manage the security SLA governance and provide practice-level cybersecurity reporting, metrics and forecasting to leadership.
• Responsible for information security, data protection, privacy, GRC, and audit requests for the practice, acting as single point of contact on relevant client security assessment and audits execution. Eg. independent third-party attestations of industry cybersecurity standards and certifications, such as ISO 27001, SOC 2 for practice-specific solutions and products
• Contribute to the definition of the client specific security baseline. Consult and advise internal and external clients about security topics and support the opportunity management process by providing subject matter expertise and support
• Help win client business by providing cybersecurity assurance to RFIs, RFPs, proposals, contract drafting, security questionnaires, workshops and other client due diligence processes

▪ Assist with security incident management and response activities
▪ General day-to-day support on managing and responding to security alerts from systems and end users
▪ Perform daily, weekly, and monthly security checks, reconciliation and compliance checks and investigate exceptions
▪ Completing client security requirement questionnaires and support the bidding process
▪ Identify and raise awareness of security risks
▪ Develop and enhance security policies, processes, procedures, and technical controls to strengthen Turner & Townsend’s security capabilities and resilience to cyber threats
▪ Take a proactive role in identifying security risks, mitigations, and opportunities to strengthen Turner & Townsend’s resilience to cyber-attacks and security incidents
▪ Participate in the design and implementation of systems and applications
▪ Develop user and technical training guides
▪ Maintain and manage the IT Risk register
▪ Test DR plans and capabilities to ensure they work as designed, identifying gaps and lessons learnt and work with the business to drive continual development and enhancement

As Wise becomes ever more integrated into financial systems around the globe, we are subject to ever increasing scrutiny from regulators, partners and regional stakeholders. If we are successful, we’ll eventually become one of the most heavily regulated companies in the world.

As Regional Information Security Officer for the APAC region, your job will be to represent Wise Security Squad, creating strong partnerships within our APAC legal entities to help reduce Information Security and Technology risk in line with the expectations of the markets in which we operate.

What you will be working on

• Working closely with regional risk, compliance and engineering teams to provide a tailored view of risk to APAC legal entities.
• Leading security responses for regional licence applications, annual certifications, and ad-hoc audits.
• Supporting Group Security Risk assessment process and preparing risk updates for APAC entity committees and boards.
• Evaluating Wise Group Security controls against regional requirements and obligations.
• Supporting our global security security certification process (e.g. ISO27001, PCI-DSS, SOC1 & 2).
• Assisting with other Information Security and Technology risk related activities as needs arise.