Total 13 it specialist job vacancies in Legal / Public / Security category in d10 ardmore bukit timah holland road tanglin

Role:IT Security Engineer(ITSO)

JD:

•Define the project's goals, scope, and deliverables, and establish a detailed plan with timelines and resources •Manage the project's day-to-day operations, including assigning tasks, monitoring progress, and making adjustments.

•Keep stakeholders informed and engaged, and resolve issues

•Ensure the project meets quality standards and delivers the expected outcomes

•Maintain project documentation and handle compliance or regulatory issues

• Good communication and problem-solving skills

• Excellent interpersonal skills • Dedicated as well as hard working individual with the intercommunication skills to work at all the level of organization.

• Teamworker and well-mannered

• Working tirelessly to enable the growth and development of organization that is customer centric and outward-looking.

Asset inventory knowledge and project/implemantaion documentation. Implement and maintain security policies and procedures to protect the organization's IT assets Configure and manage security tools and platforms to ensure they are integrated with the network infrastructure Conduct security and risk assessments of change requests, infrastructure, and data Monitor compliance to information security policies and ensure compliance with the customer's cybersecurity policies Conduct information security awareness training Manage information security risks and incidents Manage information security and related projects and initiatives Communicate and enforce compliance with information security policies and standards

Must have Talent / Skills - Good communication and excellent interpersonal skills, Proficient in Microsoft Office - ITIL Process Knowledge -Process handling Infra Incident and request handling.

What you'll be doing

• Implement and manage security solutions like firewalls, IDS/IPS, and encryption
• Perform security audits, vulnerability assessments, and risk analyses
• Develop and enforce security policies, procedures, and controls
• Integrate security into IT systems, ensuring secure configurations and hardened settings
• Investigate and escalate security incidents promptly
• Collaborate with IT teams to embed security across systems and applications
• Stay updated on security trends and technologies
• Work with contractors to deliver network and security services
• Handle additional IT duties as assigned

What we're looking for

• Bachelor Degree in Information Technology, Computer/ Network Engineering
• 4 - 6 years of experience in similar role and/ or with CyberTrust Mark certification, preferably in Healthcare will be advantageous
• Extensive expertise in security technologies, including firewall administration, encryption, network protocols, and designing robust security architectures
• Certification such as CISSP, CCSP, CEH, or advanced security certifications will be advantageous

Interested applicants, kindly furnish us with your detailed resume in MS Words format and click "Apply Now" button.

**We regret to inform only shortlisted candidates will be notified. Applicants who do not possess necessary experience or qualification will still be considered on individual merits and may be contacted for other opportunities.**

**JobStudio will not solicit any money, request to use your bank account for business or request you to transfer any monies to any parties. Please be aware of scams impersonating JobStudio and our employees. You may call our office directly for verification. We will not be liable for any loss arising from scams.**

JOBSTUDIO PTE LTD

EA License No: 10C4754

EA Personnel: Stephanie Toh

EA Personnel Reg No: R1217674

The Senior Director IT is responsible for establishing and maintaining the information security program to ensure that information assets and associated technology, applications, systems, infrastructure and processes are adequately protected in the digital ecosystem in which we operate. The individual is responsible for identifying, evaluating and reporting on legal and regulatory, compliance, IT and cybersecurity risk to information assets, while supporting and advancing business objectives.

Description

Establish Governance and Build Knowledge

• Facilitate an information security governance structure through the implementation of a hierarchical governance program, including the formation of an information security steering committee or advisory board.
• Provide regular reporting on the current status of the information security program to enterprise risk teams and senior business leaders
• Work with the vendor management office to ensure that information security requirements are included in contracts by liaising with vendor management and procurement organizations.
• Create and manage a targeted information security awareness training program for all employees, contractors and approved system users, and establish metrics to measure the effectiveness of this security training program for the different audiences.
• Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems and services, including privacy, risk management, compliance and business continuity management.
• Provide clear risk mitigating directives for projects with components in IT, including the mandatory application of controls.

Develop the Frameworks

• Develop and enhance an up-to-date information security management framework based on one of the following: International Organization for Standardization (ISO) 2700X, ITIL, ENISA, ISA-62443, COBIT/Risk IT and National Institute of Standards and Technology (NIST) Cybersecurity Framework.
• Create and manage a unified and flexible control framework to integrate and normalize the wide variety and ever-changing requirements resulting from global laws, standards and regulations.
• Develop and maintain a document framework of continuously up-to-date information security policies, standards and guidelines. Oversee the approval and publication of these information security policies and practices.
• Create a framework for roles and responsibilities with regard to information ownership, classification, accountability and protection of information assets.
• Facilitate a metrics and reporting framework to measure the efficiency and effectiveness of the program, facilitate appropriate resource allocation, and increase the maturity of the information security, and review it with stakeholders at the executive and board levels.

Architecture/Engineering Support

• Work with IT staff to ensure that security is factored into the evaluation, selection, installation and configuration of hardware, applications and software.
• Recommend and coordinate the implementation of technical controls to support and enforce defined security policies.
• Research, evaluate, design, test, recommend or plan the implementation of new or updated information security hardware or software, and analyze its impact on the existing environment; provide technical and managerial expertise for the administration of security tools.
• Work with the enterprise architecture team to ensure that there is a convergence of business, technical and security requirements; liaise with IT management to align existing technical installed base and skills with future architectural requirements.

Operational Execution

• Coordinate, measure and report on the technical aspects of security management.
• Manage outsourced vendors that provide information security functions for compliance with contracted service-level agreements.
• Manage and coordinate operational components of incident management, including detection, response and reporting.
• Maintain a knowledgebase comprising a technical reference library, security advisories and alerts, information on security trends and practices, and laws and regulations.
• Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend treatment plans and communicate information about residual risk.
• Manage security projects and provide expert guidance on security matters for other IT projects.
• Assist and guide the disaster recovery planning team in the selection of recovery strategies and the development, testing and maintenance of disaster recovery plans.
• Ensure audit trails, system logs and other monitoring data sources are reviewed periodically and are in compliance with policies and audit requirements.
• Design, coordinate and oversee security testing procedures to verify the security of systems, networks and applications, and manage the remediation of identified risks.

Qualifications

• Bachelor’s Degree in Engineering, Computer Science, Information Systems, or related discipline required.
• Master’s Degree in a related field is preferred.
• Professional security management certification is desirable, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials

Experiences

• A minimum of ten years of IT experience, with seven years in an information security role and at least five years in a managerial capacity is required.
• Experience working with legal, audit and compliance staff is preferred.
• Experience developing and maintaining policies, procedures, standards and guidelines is required.
• Familiarity with applicable legal and regulatory requirements, including, but not limited to, the U.S. Sarbanes-Oxley Act, the U.S. Health Insurance Portability and Accountability Act (HIPAA), the European Union Privacy Directive, and the Japanese Financial Instruments and Exchange Law ("J-SOX").

Skill Sets

• Excellent analytical skills, the ability to manage multiple projects under strict timelines, as well as the ability to work well in a demanding, dynamic environment and meet overall objectives
• Project management skills: financial/budget management, scheduling and resource management
• Ability to lead and motivate the information security team to achieve tactical and strategic goals, even when only "dotted line" reporting lines exist
• A master of influencing entities and decisions in situations where no formal reporting structures exist, but achieving the desirable outcome is vital
• Excellent communication, interpersonal and collaborative skills. Experience working with a multi-continent technical team preferred
• High degree of initiative, dependability and ability to work with little supervision while being resilient to change

Technical Competencies

• Experience with common information security management frameworks, such as International Standards Organization (ISO) 2700x, the IT Infrastructure Library (ITIL) and Control Objectives for Information and Related Technology (COBIT) frameworks
• An understanding of operating system internals and network protocols.
• Familiarity with the principles of cryptography and cryptanalysis.
• Experience in application technology security testing (white box, black box and code review).
• Experience in system technology security testing (vulnerability scanning and penetration testing).

About Delta Capita

Delta Capita is a global Managed Service, technology solution and consulting provider, with a unique combination of experience in financial services and capability in technology innovation.

Our vision is to ‘Reinvent the Financial Services Value Chain’, and we provide a Business Operating Platform-as-a-Service. We are a trusted mutualised service provider for many of the leading global investment banks and financial service companies in the world.

We help our clients reduce costs and improve processes by moving them away from their existing propriety models towards mutualised managed services, enabling a healthier and more performant business.

Delta Capita have one of the largest teams of structured products experts in the world and count many leading structured products issuers as our clients. Our services cover all aspects of structured product issuance, with a core focus on Legal Documentation, Transaction Management and Product Governance services. Our core mission is to enable our clients to comply with regulatory obligations, transform and simplify their operations, reduce their costs and adopt innovative business model and technologies.

Job description

We are recruiting for a number of legal documentation drafting roles within our Structured Products team at Delta Capita in Singapore. Our team provide legal documentation drafting and issuance support to cross-asset structured products businesses at a range of tier one Investment Banks.

The roles will suit professionals with between 5 and 10 years experience and the successful candidate will have the following responsibilities:

• Draft and review legal documentation (Pricing Supplements, Final Terms, and ancillary documentation) for structured product transactions;
• Manage a pipeline queue of transactions to strict deadlines;
• Partner with the legal department when required to review legal documentation and templates for new or adapted payoffs;
• Initiate process improvements and leverage technology for document automation;
• Build and maintain strong relationships with client contacts in Operations, Structuring, Legal and Trading.

Job requirements

Essential Experience / Skills

• Experience within the financial service industry drafting issuance documentation for securities or structured products, or complex or non-standard derivatives;
• Experience working on structured products and/or derivative transactions;
• Admitted as a solicitor
• Highly organized and extremely detail oriented;
• Excellent communication skills;
• Ability to prioritise workflow in order to meet deadlines;
• Past experience of working as part of a team and understanding the impact that delivery of your work has on your colleagues;
• High attention to detail and pride in delivering high quality work;
• A strong work ethic proven by previous working experience;
• Word, Excel, Outlook (or similar) skills to a high standard.

How We Work:

Delta Capita is an equal opportunity employer. We positively encourage applications from suitably qualified and eligible candidates regardless of age, colour, disability, national origin, ancestry, race, religion, gender, sexual orientation, gender identity and/or expression, veteran status, genetic information, or any other status protected by applicable law.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. If you require any reasonable adjustments through your interview process, please use the designated space within the application questionnaire.

This is a permanent full-time position located in Singapore as preferred. As the selection and interview process is ongoing, please submit your application in English as soon as possible, if your profile is selected, a member of our team will contact you within 4 weeks. For this role a valid working permit for Singapore is mandatory.

Who We Are:

Delta Capita Group (a member of the Prytek Group) is a global managed services, consulting, and solutions provider with a unique combination of experience in Financial Services and technology innovation capability. Our mission is to reinvent the financial services value chain providing technology based mutualized services for financial institutions for non-differentiating services.

Our 3 offerings are:

• Managed Services
• Consulting & Solutions
• Technology

Key Responsibilities:

- Develop and implement effective recruitment strategies to attract skilled security personnel

- Conduct comprehensive interviews and assessments to identify suitable candidates

- Collabourate with hiring managers to understand staffing needs and define job requirements

- Coordinate the onboarding process for new hires, ensuring a smooth transition into the organization

- Facilitate employee training and development initiatives to enhance skills and promote career growth

- Maintain accurate HR records, including personnel files, training records, and performance documentation

- Ensure compliance with labour laws, regulations, and internal policies in all HR activities

- Foster a positive and inclusive work environment that encourages teamwork and employee engagement

- Address employee concerns and resolve conflicts in a fair and timely manner

Qualifications and Skills:

- Certification in Human Resources Management or a related field (HR certification is a plus)

- Proven experience in HR roles, preferably within the security industry

- Strong knowledge of HR best practices, labour laws, and regulations

- Excellent communication and interpersonal skills

- Ability to build and maintain effective relationships with employees at all levels

- Strong organizational and time management abilities

- Attention to detail and a high level of confidentiality

- Proficiency in HR software and MS Office Suite

As an IT Security Analyst, you will be responsible for assessing and managing cybersecurity risks by evaluating technologies and solutions against industry standards. You will identify, analyze, and prioritize potential security threats while developing and implementing effective risk mitigation strategies. Regularly maintaining and updating the organization’s risk register will also be part of your duties.

Risk Management

• Evaluate technologies against cybersecurity standards.
• Identify and prioritize security risks.
• Advise on cloud security for platforms like AWS and Azure.
• Update and maintain the risk register.

Compliance

• Stay updated on IT security regulations (e.g., PCI-DSS, ITRM, IM8).
• Develop and enforce security policies.
• Monitor compliance and report to stakeholders.

Security Operations

• Monitor and mitigate potential data loss events, and investigate suspected incidents.
• Investigate security incidents and implement appropriate response measures.

Business Continuity

• Review and update crisis plans.
• Organize simulation exercises.

Qualifications:

• Bachelor’s degree in Cybersecurity, IT, or equivalent experience.
• At least 3 years of experience in IT security and compliance.
• Strong knowledge of IT security frameworks.
• Familiarity with security tools (e.g., DLP, SIEM).
• Experience with cloud platforms (AWS, Azure).
• Cloud security certification (e.g., CCSP, AZ 500) is a plus.
• CISA, CISM, or CISSP certification is an advantage.

Who We Are Looking For

The Security Operations Specialist is responsible for general and emergency assistance to a worldwide client base utilizing the operations protocols and other client focused procedures. In this role, you will hone your skills to a better understanding of global security, guiding clients through a multifaceted and challenging landscape.

You will serve as a team member in a Crisis24 Global Operations Centres which serves as the heart for the delivery of operational tasks in support of our global clients. . The position is ideal for someone with a passion for security and risk management while bringing valuable skills and experience.

Central to the role is the ability to work clearly and calmly under pressure, working effectively in a global team to deliver solutions in real time in combination with being able to run routine daily tasks with focus and accuracy.

Duties & Responsibilities

• Support the research and assessment of a threat environment for proposed task/travel, using a range of privileged and open-source platforms/research networks.
• Support the research and delivery of pre-travel briefings and presentations to a range of travellers (including deploying expats, academia, NGOs, corporate travellers, C-suite, etc.).
• Monitor requests and supply the content to global travel security requests from deployed personnel, in-country travellers, clients, and on-the-ground security teams.
• Utilising open-source intelligence, proactively monitor the security situation in locations where assets are located and conduct regular checks to confirm the well-being of personnel.
• Support security response contingency planning.
• Utilise tracking platforms to monitor events and action at risk notifications.
• Respond to Special Risk (Kidnap, Ransom & Extortion) calls, gathering the key information and quickly escalating internally to the specialist department.
• Support the coordination and communication of security, evacuation, and emergency tasks.
• Support the compilation of post operational reports for internal (lessons identified & learnt) and external (marketing & case study) purposes.
• Follow and adhere to Crisis24 security, response & client standard operating procedures.
• Retain and understand a familiarisation of Crisis24 services.
• Provide day to day support and guidance to new front-line staff and Security Specialists, ensuring consistency, competence & efficiency in security related response handling and operational tasks.
• Strive to deliver the highest standards of service to customers.
• Support the training, coaching, and mentoring of new starters.

Skills and Experience

• Effective presentation, interpersonal, written, and verbal communication skills; must be able to brief personnel in distress, internal & external stakeholders, and senior business leaders.
• Reliable team player with ability to carry additional responsibilities calmly and professionally.
• Ability to work with minimal supervision and self-motivate.
• Ability to research, digest, and evaluate various sources and associated information topics.
• Capable of quickly assessing a situation and take a decision based on a clear and definable rationale, taking responsibility for the outcome.
• Strong time management skills with the ability to coordinate and prioritise tasks with competing timelines in a fast-moving environment.
• Ability to handle stressful situations and adapt to rapidly changing operational requirements.
• Excellent computer skills with proficiency in MS Office and an aptitude to learn new, applications and systems.
• Higher education qualification in a related field is an advantage, but not essential.

Job Description:
The Security Engineer will participate in evaluating, developing, and implementing security tools, standards, procedures, and guidelines. This role will collaborate with both technical and non-technical business partners and stakeholders.
• Ensures security infrastructure processes, concepts, and maintenance are incorporated into systems, software, and hardware platforms in accordance with approved internal standards
• Provides technical input to projects along with implementation support to network services and infrastructure design teams
• Performs maintenance of security infrastructure to include updates and patching of software and hardware
• Maintains a comprehensive and in depth, component level understanding of all IT systems, data flows, applications, technologies, security controls, threats, weaknesses and countermeasures
• Supports information security governance, risk management and compliance programs which include security assessments and on-site reviews, security gap remediation, security incident support, audit support functions, business process and project consultancy and security education and awareness
• Designs and develops secure IT solutions and control frameworks using network segmentation, gateway security, specialist security tools (e.g., ACL, Tokenization)


Skillset Required:
• Experience with cloud technologies: AWS, Azure, GCP
• Experience with securing and hardening Windows, Linux
• Experience with networking protocols and technologies: TCP/IP, routers, firewalls, VPN, load balancers
• Experience with on premise and cloud-based security technologies: end point protection, hardware security modules, sandboxes, SIEM, web application firewall, intrusion detection systems, intrusion prevention systems, web proxies, wireless intrusion prevention systems, and file integrity monitoring

Find Your Dream Job with Us

WE ARE HIRING!! Apply now and make a difference.

Role: Security Governance Specialist

Job Requisition Number: JR33380

Experience: More than 10 Years of experience (L4)

Location: Singapore

Key Skills: Security/IT Governance, GIS

Key Responsibilities

This position will support senior Security Governance team members and work closely with various business, risk and technology stakeholders to:

· Proactively assess the compliance exposure to current and emerging security-related regulatory requirements and plan & track remediation efforts.

· Manage reverse third-party due diligence engagements related to GIS.

· Manage audit, assurance and regulatory engagements related to GIS including ongoing knowledge management on queries and request for information.

· Track and report against the technology KORI (Key Operational Risk Indicators)/KRIs and required security metrics.

· Execution of the GIS KRCSA (Key Risk and Control Self Assessments).

· Management policy, procedures and standards updates and control.

· Manage various GIS initiatives and duties as assigned.

Key Requirements:

· Communicate effectively with a variety of internal and external teams and stakeholders.

· Capable of managing a variety of priorities and deliverables with minimal guidance or supervision.

· Ability to respond to any requests and issues on a timely basis.

Education

· Diploma/Degree in engineering/Computer Science / IT/Cyber Security from a recognized education institution.

· Professional Technology Risk Management/Cybersecurity related qualification will be favorable although not mandatory.

· Knowledge of industry best practices. Technical Skills

· Overall experience 5+ years of experience.

· 2+ years of relevant experience in Security/IT governance disciplines.

· Have a strong security risk and analytical mindset in approaching situations and interactions with stakeholders.

· Effective negotiating skills and demonstrated sensitivity to working and interacting with stakeholders.

· Good knowledge of Security concepts and practices.

· Good knowledge of Security related guidelines and advisories from regulators.

· Good with numbers for use in metrics. Soft Skills.

· Good written and verbal communication skills and expertise in setting and managing stakeholder expectations.

· Process aware mindset.

· Strong analytical and problem-solving skills.

· Effective time management and organizational skills.

· Strong team player.

· Able to work independently with minimal supervision.

· High degree of attention to detail and discipline on tracking and managing the closure of identified gaps and issues.

· Willing to learn quickly.

Please forward your resume in MS word format to [email protected]and [email protected]

Please refer your friends for any IT openings as we have various positions.

Please do not send PDF Format Resume . Send the following details

1. Notice period

2. Current Salary

3. Expected Salary

4. Visa Status in Singapore

5. Current Location

Position Overview:

We are seeking a highly skilled and motivated Cloud Security/SASE Specialist to join our growing Cloud and Security team. The ideal candidate will be responsible for designing, implementing, and managing secure access service edge (SASE) solutions, ensuring our clients' cloud infrastructures are secure, scalable, and efficient. This role requires a deep understanding of cloud security principles, network security, and SASE architecture.

Key Responsibilities:

• Design and deploy SASE solutions to secure and optimize client cloud environments.
• Implement secure web gateways (SWG), cloud access security brokers (CASB), zero trust network access (ZTNA), and firewall as a service (FWaaS) components.
• Develop and enforce security policies to protect cloud-based applications and data.
• Monitor and respond to security incidents, ensuring timely resolution and mitigation of risks.
• Collaborate with clients to understand their security requirements and business objectives.
• Provide expert guidance on best practices for cloud security and SASE deployment.
• Conduct regular security assessments and audits to identify and address vulnerabilities.
• Maintain comprehensive documentation of security policies, procedures, and configurations.
  Prepare and present reports on security posture, incident response, and compliance status to stakeholders.
• In-depth knowledge of cloud platforms (AWS, Azure, Google Cloud) and security best practices.
• Strong understanding of networking concepts and protocols (TCP/IP, DNS, VPNs, etc.).
• Experience with security tools and technologies such as SIEM, DLP, IDS/IPS. Excellent problem-solving and analytical skills.
• Strong communication and interpersonal skills, with the ability to articulate complex security concepts to technical and non-technical audiences.
  

Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. Master’s degree is a plus.
• Minimum of 5 years of experience in cloud security, network security, or related roles.
  Proven experience with SASE solutions and technologies (e.g., SD-WAN, SWG, CASB, ZTNA, FWaaS).
  
  

Job purpose:

This position is part of the Asia information Security and Data Protection function in Singapore with focus on data loss prevention (DLP) and data protection (DP).

Key activities:

• Serving as the primary point of contact for authorities and stakeholders regarding compliance with Data Loss Prevention (DLP) regulations and the support to data protection (DP).
• Maintaining data protection policies, procedures, and guidelines, monitoring compliance with data protection laws and regulations and data loss prevention related requirements and ensuring appropriate measures are in place.
• Conducting data protection impact assessments (DPIAs) to identify and mitigate risks associated with the processing of personal data.
• Collaborating with IT, legal, HR, and other departments to ensure data protection considerations and controls are integrated into business processes and systems.
• Investigating incidents and breaches related to data loss, breach, or unauthorized access.
• Collaborating with internal teams to integrate DLP solutions with existing infrastructure and security systems. e.g. management of DLP policy and ruleset
• Providing advice, guidance, and training to employees on data protection requirements, best practices, and data breach procedures
• Assisting the Head of Information Security Asia and Data Protection officers in developing and delivering reports to senior management on the organization's data loss prevention and data protection compliance status
• Collaborating with auditors to provide necessary documentation, evidence, and support during audit fieldwork, testing, and reporting phases.
• Reviewing audit findings, recommendations, and reports to identify opportunities for improving information security practices, processes, and controls.

Formal education:

• University or college degree or comparable
• Possession of professional qualifications will be advantageous. e.g. CIPM, CIPP, CISA, CISM, CISSP, CRISC, PMP

Specialist knowledge (work experience, further qualification):

• Minimum 5+ years of related experience in Data Protection, Data Loss Prevention or technology Risk function in financial services industry or consultancy
• Extensive knowledge of the regulatory environment and data protection laws within the Asia region. PDPC, MAS, NAFR, PBOC, JFA
• Experience in cybersecurity, risk management, and familiarity with DLP technologies would be an advantage.
• Strong analytical skills, with the ability to breakdown complex problems into actionable and understandable steps.
• Strong communication, stakeholder management and problem-solving skills are essential.

Job purpose:

This position is part of the Asia information Security and Data Protection function in Singapore with focus on information security and third-party risk management.

Key activities:

• Assisting the Head of Information Security Asia in implementing and maintaining the Group's information security strategy, policies, and procedures to manage cyber and Third-Party Information Security risk and ensure compliance with relevant laws and regulations.
• Assessing the security posture of third-party vendors, partners, or service providers to ensure compliance with organizational standards and regulatory requirements.
• Collaborating with procurement, legal, and business units to evaluate the security implications of engaging with third-party vendors and providing guidance and recommendations to stakeholders on selecting, onboarding, and managing third-party vendors securely.
• Reviewing and negotiating information security and data protection clauses in contracts and agreements with third-party vendors to establish security requirements and responsibilities.
• Conducting risk assessments of third-party systems (including cloud), networks, and processes to identify gaps in information security controls.
• Collaborate with head office in developing and implementing strategies in continue monitoring and evaluating third-party security performance through regular assessments and audits.
• Participating in cross-functional teams or committees on vendor risk management and security governance driven regionally and globally.
• Collaborating with auditors to provide necessary documentation, evidence, and support during audit fieldwork, testing, and reporting phases.
• Reviewing audit findings, recommendations, and reports to identify opportunities for improving information security and third-party risk management practices, processes, and controls.

Formal education:

• University or college degree or comparable
• Possession of professional qualifications will be advantageous. e.g. CISA, CISM, CRISC, CISSP, CTPRP

Specialist knowledge (work experience, further qualification):

• Minimum 5+ years of related experience in Information Security, third-party risk management or technology Risk function in financial services industry or consultancy.
• Knowledge of Asia regulatory requirements with a strong understanding of the financial industry. PDPC, MAS, NAFR, PBOC, JFA
• Have a strong security risk and analytical mindset in approaching situations and interactions with stakeholders.
• Strong communication and interpersonal skills, with an ability to translate complex technical information for a non-technical audience.

KEY ROLES AND RESPONSIBILITIES:

• Monitor threat landscape and issue advisories that are applicable to the organisation on a continuous basis.
• Respond to alerts generated from solutions, threat intel and user reporting ensuring incident investigation follows IR plan with severity classification. RCA is complete with lesson learnt conducted.
• Conduct threat simulation to identify early indicator of compromise and work with Solutions team to mitigate the gaps identified at the solutions.
• Conduct threat hunting when receiving indicators from threat intel ensuring our environment is secure and free from vulnerabilities.
• Manage vulnerabilities on a continuous basis and work with patch management team to ensure vulnerabilities are managed within acceptable threshold.
• Manage and work with Managed service providers (MSSP) to provide 24/7 monitoring and incident response ensuring incidents are closed on a timely manner.
• Review security architecture design and implement solutions to ensure systems are built to meet company’s cybersecurity framework and policies.
• Ensure appropriate security technologies are in place to manage threats.
• Perform administration of security solutions in the company.
• Establish and maintain SOPs of the supported solutions and architecture designs.
• Perform project management and vendor management.

QUALIFICATIONS & EXPERIENCE:

• Minimum 6 years of relevant experience in IT security
• Technical know-how and experience in solutions such as but not limited to:
• Network Security (F/W, IPS, VPN, NAC) - Checkpoint, Fortigate, Palo Alto
• Web Security (WAF, Web isolation) - Cloudflare, Zscaler, Menlo, Microsoft
• Endpoint Security (EDR, AV, DLP) - Crowdstrike, Symantec, Microsoft, Forcepoint
• Threat Monitoring - Qradar, Demisto, Resilient, Claroty
• Vulnerability Management – Tenable, Qualys, Ivanti, Microsoft
• Cloud Security – Microsoft, Palo Alto
• Identity Management - Microsoft, CyberArk
• Threat Hunting and Simulation – Cymulate, Crowdstrike
• Knowledgeable in security standards or regulations such as NIST, ISO 27001, SOC2, CCOP (SG), PDPA (SG), GDPR(EU), Security by Design will be an added advantage.
• Certifications such as CISSP, OSCP, CCSK will be an added advantage.

PREFERRED SKILLS & CHARACTERISTICS:

• Strong interpersonal skills with the ability to communicate and explain technical concepts to non-technical users.
• Independent worker with initiatives, positive attitude, and team player
• Good analytical skills and attention to details
• Good verbal and written communications