Total 2 Manager tech support job vacancies in Quality Assurance / Control category in Singapore

Job Description and Responsibilities

•Drive key projects in Card Operations, together with business users and technology team, to increase efficiency, improve productivity and enhance customer journey.

•Execute standardization, risk and control agenda in Cards product-processes, including self-assessments, internal reviews and audit reviews, and ensure compliance with operational policies, procedures and regulations.

•Prepare risk review reports, report findings, recommend corrective actions and preventiveactions.

•Review and recommend process improvement for productivity effectiveness and efficiency, which includes performing problem analysis on processes and provide recommendation for change and mitigation of risks.

•Develop training and/or change management materials and activities to support new processesand procedures.

•Manage the Business Continuity Planning (BCP) exercises in Card Operations as part of theBusiness Continuity Management.

Job Requirements:

•Degree Holder

•Preferably 3 – 5 years’ experience in operations / process re-engineering function. Fresh graduates are welcome to apply

•Able to multi-task and cope with change and diversity in a fast-paced environment

•Possess strong analytical and problem-solving skills, able to think objectively and 'think outside the box' when analyzing issues

•Meticulous with an eye for details and quality mindset

•Strong command of English with excellent verbal/written communication and interpersonal skills

•Able to liaise with various functions and stakeholders

•Proficient in the use of Microsoft Office, specifically Microsoft Excel Macro, Powerpoint &Access

•Knowledge in Python is preferred.

•Team player, self-motivated and resourceful

Job Purpose

• To ensure that ONE complies with the following:ONE's IT Security Policies
  ISO/IEC 27001 Standards for Information Security Management System
  IT-related and privacy-related legislation and regulations
  Annual audit requirements
  
• To coordinate audits by, and to complete questionnaires from:ISO/IEC 27001 auditors
  Internal auditors
  External auditors
  Customers
  Insurers
  Any other external parties
  

Primary Job Description (Describe the major duties of this position)

• ONE IT Security PoliciesEnsure stakeholders comply with IT Security Policies
  Review the Policies on an annual basis proposing changes where necessary
  
• ISO/IEC 27001 Standards for Information Security Management SystemEnsure stakeholders comply with ISO/IEC 27001 Standards
  Prepare for the annual ISO/IEC 27001 audit
  This includes preparing a risk assessment as required by the Standards
  
• IT-related and Privacy-related Legislation and RegulationsBe aware of global legislation that impacts IT and privacy
  Provide guidance to stakeholders on complying with such legislation and regulations
  
• Annual Audit RequirementsEnsure that stakeholders prepare for annual JSOX audits
  This includes mandatory exercises such as security reviews, security awareness, penetration testing
  
• Coordinate audits and complete questionnairesTo be the liaison person between auditors and stakeholders
  To ensure that audit evidence are collected and submitted in a timely manner
  To review audit observations with stakeholders to ensure accuracy of the observations
  To formulate and monitor remedial actions for the audit observations
  To complete IT Security questionnaires received from various external parties including the authorities, auditors, customers, insurers etc
  

Position Qualifications and Experiences

• Bachelor’s degree in an IT-related discipline.
• Preference will be given to candidates with relevant professional certifications such as CISA, CISM, CISSP etc.
• At least 8 years in an IT Security related role. Preference will be given to candidates with the relevant experience for this role.
• Strong knowledge and experience with ISO/IEC 27001 Standards
• Knowledgeable in IT legislations such as Computer Misuse Act, Cybersecurity Act, EU's NIS2, China’s Cyber Security Legislation.
• Knowledgeable in Privacy legislations such as PDPA, GDPR
• Knowledgeable in Cybersecurity frameworks and standards such as NIST, SOX/JSOX, COBIT
• Strong analytical mind and problem-solving skills.
• Self-dependent with minimal supervision, also able to work well in teams.
• Possess initiative and be self-motivated, with a thirst for knowledge.
• Excellent communicator that will be able to convince stakeholders from various levels and backgrounds.