Total 65 Director/C-Level security analyst job vacancies in Singapore

A leading Cyber Security firm is expanding in the Asia-Pacific (APAC) region and are now seeking for a Cyber Security Marketing Director profile to join the strong team and assist with business expansion and growth.

The Opportunity:

The Marketing Director profile will have the opportunity to develop and put in place marketing strategies for the regional expansion plans and growth. You will have the space to increase visibility of the business, capturing new opportunities for the business and being a part of our vision and success.

You will be involved in promoting the latest Cybersecurity technologies which protect global businesses from cyber-attacks.

What we look for:

• You have exposure and experience within a Cyber Security industry.
• Marketing experience gained in Cyber Security and in developing marketing strategies and plans within this industry.
• Demonstrate experience in executing and putting place strategies for business growth.
• Track record in brand development, business development, market expansion.
• Good understanding and awareness of the Cyber Security trends across Asia Pacific
• Strong market research experience, understanding the competitor landscape, developments in the market.
• Demonstrate an understanding of working with technology in a marketing perspective (Cyber Security highly advantageous)
• Experience in managing and leading marketing colleagues and achieving the metrics.
• Come with a general knowledge of Cyber security solutions across areas, such as End Point, Security Information & Event Management, Intrusion Protection System, Next Gen Firewalls, User & Event Behavioural Analytics, Security, Orchestration Automation & Response etc.
• Strong presentation and communication skills

What is on offer:

• Permanent position
• Leading Cyber Security solution, services, and products
• Expansion plans and opportunities for progression and management
• Strong team culture
• Competitive remuneration and benefits

What’s next:

If you are interested to join this Cyber Security firm and to be an integral part of their growth then we would like to hear from you. Full support and training will be provided to meet your career objectives.

Please reply directly to this posting or send your details/CV to [email protected]

We apologise that due to the high volume of applicants we may be unable to respond to everyone. Should you not hear from us, please assume your application was unsuccessful for this time round and good luck for the next.

Engage Group (Singapore)

[email protected]

Engage Group Pte.Ltd is a licensed business under the Ministry of Manpower: (EA: 18C9316)

Cyber Security Sales Manager / Director - Enterprise Cybersecurity Solution Software

An advanced Cyber Security firm is expanding in the South-East Asia (SEA) region, and are now seeking for a Cyber Security Sales Manager / Director profile to join the strong team and assist with business expansion and growth.

The Opportunity:

The Cyber Security Sales Leader profile will have the opportunity to deal with high-profile customers and will be involved in promoting the latest Cybersecurity technologies which protect global businesses from cyber-attacks.

What we are looking for:

• Cybersecurity sales or technology sales (SaaS) experience would be an advantage
• Manage and expand assigned base of key accounts
• Drive new business growth
• Conduct technical need assessments and matched-based selling of the right cybersecurity solutions to address customers' security gaps
• Develop and execute territory plans and marketing campaigns in alignment with internal teams to maximize sales funnel and revenue growth
• Identify major opportunities within accounts; lead pursuits and develop strong executive relationships to secure deals
• Act as the key liaison between customer and our client’s organization to ensure seamless engagement
• Educate customer on new integrated cybersecurity offerings; consultatively recommend comprehensive solutions to address security and business needs
• Cultivate and nurture high-level stakeholder relationships to win new business across existing accounts
• Work closely with technical teams to formulate customer-centric proposals, presentation and best-fit solutions

What skillsets to bring:

• 6-8 years of successful enterprise IT security sales experience
• Existing relationships with security decision makers
• Expertise conveying technical and business value of solutions
• Excellent demonstration and presentation abilities
• Persistent and self-motivated even in fast-paced environments
• Proven ability to qualify, forecast, progress complex sales opportunities
• Strong negotiation, relationship building, closing skills

What is on offer:

• Competitive remuneration, commissions, and benefits
• High-profile customers
• Full-time opportunity
• Comprehensive training provided.
• Flexible work environment

What’s next:

If you are interested to join this Cyber Security firm and to be an integral part of their growth then we would like to hear from you.

Full support and training will be provided to meet your career objectives.

Please reply directly to this posting with your CV or send us your details to [email protected]

We apologise that due to the high volume of applicants we may be unable to respond to everyone. Should you not hear from us, please assume your application was unsuccessful for this time round and good luck for the next.

Engage Group Cyber (Singapore)

[email protected]

Engage Group Pte.Ltd is a licensed business under the Ministry of Manpower: (EA: 18C9316)

Responsibilities:

• Oversee the Data Security Engineering team, consisting of direct and indirect reports (including full time employees, contractors, MSS staff and external service providers personnel). This includes hiring, training, career development, and performance management.
• Lead all aspects of data lifecycle disciplines, including but not limited to planning, design, implementation, and ongoing support of such technical solutions as data discovery, mapping, processing, recovery, de-identification, encryption, loss prevention, rights management, etc.
• Create and update new strategies, project plans and policy documents based on compliance and operational requests that map to SHEIN's business requirements
• Develop and manage security budget forecast, expense, and technology, service and vendor roadmaps.
• Liaise with external agencies, such as law enforcement, standards and technology organization, advisory bodies and industry
• Work directly with IT teams to facilitate risk analysis, solution requirements and technology roadmaps to ensure compliance with industry and regulatory standards.
• Establish credibility throughout the organization by earning the reputation for being a proactive senior leader and change agent.
• Sustain high-availability service levels and ensure fulfillment of business-wide service levels and operational support objectives.

Skills and Qualifications:

• 10 years of experience in security engineering, with a dedicated focus on data security field and at least 5 years of direct people management experience.
• Possess a Bachelor’s degree or higher in the field of Engineering, Computer Science, Business Analytics, or equivalent advance technology field of study
• Relevant cyber security certifications, such as CISSP, CISM, CISA and/or PMP are highly desired
• Must be skilled at mentoring and motivating staff, communicating goals and other corporate initiatives and driving to results
• Strong knowledge of data privacy regulations and guidelines such as GDPR, CCPA, PCI, etc.
• Extensive experience building data protection programs in e-commerce or related industries, with strong working and practical knowledge of cloud, network, endpoint, application, and IDM.
• Experience building data driven security metrics to support security operations.
• Experience with change management and development lifecycles, and regular preparation of management status and executive reports
• Strongly process and procedure oriented in managing projects
  Ability to translate complex data security threats and risks from a technical perspective to business-line understanding and execution
  
  
  
  

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/g44MJ69d

• Autonomy to make decision for Security
• Opportunity to scale up the company (>10,000 employees) IT security capabilities.

About the company

Our client is an established end user company with multiple lines of business / Industry. As part of their plan to invest in technology, they are now hiring a new Cyber Security Director / Senior Manager to manage their security team here in Singapore.

About the job

Reporting directly to Head of IT, your role involves:

• Managing security operation to ensure implemented security technologies and controls are effective and adequate to protect the company
• Manage the arrangement and oversee the implementation of a robust security monitoring program
• Conducting Identifying root cause and remediating of cybersecurity incidents.
• Providing advisory on security threats and vulnerabilities. This includes performing vulnerability scans and analyze results of scans
• Overseeing the development and execution of corporate security awareness and training programs. This includes getting the buy-in of senior business stakeholders which includes securing funding for IT security programs
• Enhancing early detection capability - Driving lessons learned activities after incidence closure to identify potential gaps in security control

Skills and experience required
As a successful applicant, you will have at least 8 years of experience in IT Security / SIEM / Splunk / Incident response. Familiarity with the Mitre ATT&CK Framework and understanding of the techniques for detecting and mitigating security threats will be of added advantage.

Whats on offer

This is an excellent opportunity to join an established company with ambitions to scale up their IT security capabilities.

To apply online please use the 'apply' function, alternatively you may contact Hoon Teck TAN at https://www.linkedin.com/in/hoonteck-nologyrecruitment/. (EA: 94C3609/ R1219669)

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/g44MJ69d (EA: 94C3609/ R1219669)

The Security Director is a strategic leader on the Global Security Team reporting directly to the Senior Director, Global Security. They will be responsible for bridging gaps between security strategy and process implementation in the APAC region and will identify and execute on actions which will improve the performance and efficiency of the security organization and its operations. This leader will directly manage team members, programs, and initiatives at a global level to include operations in Asia Pacific and Europe.

• Advises the senior management team on all security related issues and activities.
• Supports the development of annual security-centric planning, budgeting, and implementation activities.
• Leads the collaboration effort between Regional Security Teams and other internal function groups in successfully identifying, investigating, and mitigating economic loss and other risks to the Company
• Advances and supports the Security team in providing and tracking ongoing Programs training, interventions, and other security-centric activities.
• Develops and implements solid business and security-centric value measure metrics, trending, and benchmarking
• Manage the regional departmental budget
• As a leader, they will dedicate significant time to develop and retain talent, and to enable her/his senior team members to build and implement (“in the field”) institutional global, corporate security programs
• Provide regular security briefs and emergency updates were appropriate for the regional executive leadership teams
• Facilitate and maintain security operations and emerging security technologies
• Ensure ongoing external networking with peer organizations
• Participates in budget preparation and takes necessary actions to control and reduce costs
• Promotes individual professional growth and development by meeting requirements for mandatory/continuing education and skills competency; supports department-based goals which contribute to the success of the organization; serves as preceptor, mentor, and resource to less experienced staff.

Job Description

The Security Director is a strategic leader on the Global Security Team reporting directly to the Senior Director, Global Security. They will be responsible for bridging gaps between security strategy and process implementation in the APAC region and will identify and execute on actions which will improve the performance and efficiency of the security organization and its operations. This leader will directly manage team members, programs, and initiatives at a global level to include operations in Asia Pacific and Europe.

• Advises the senior management team on all security related issues and activities.
• Supports the development of annual security-centric planning, budgeting, and implementation activities.
• Leads the collaboration effort between Regional Security Teams and other internal function groups in successfully identifying, investigating, and mitigating economic loss and other risks to the Company
• Advances and supports the Security team in providing and tracking ongoing Programs training, interventions, and other security-centric activities.
• Develops and implements solid business and security-centric value measure metrics, trending, and benchmarking
• Manage the regional departmental budget
• As a leader, they will dedicate significant time to develop and retain talent, and to enable her/his senior team members to build and implement (“in the field”) institutional global, corporate security programs
• Provide regular security briefs and emergency updates were appropriate for the regional executive leadership teams
• Facilitate and maintain security operations and emerging security technologies
• Ensure ongoing external networking with peer organizations
• Participates in budget preparation and takes necessary actions to control and reduce costs
• Promotes individual professional growth and development by meeting requirements for mandatory/continuing education and skills competency; supports department-based goals which contribute to the success of the organization; serves as preceptor, mentor, and resource to less experienced staff.

Qualifications

• 10+ years experience as a safety/security leader in government, corporate or a combination of both
• Experience as a senior leader of people and security programs within the Asia Pacific region
• Strong network of corporate and government security contacts and resources
• Professionally recognized certifications in security management (trade orgs and/or government-related institutional training)
• Leadership experience and expertise in risk management and resilience programs
• Experience in developing business processes and business process mapping
• Proven ability to engage effectively with senior, executive leadership; able to build stakeholder relationships via strong interpersonal skills
• Experience building diverse teams and demonstrated focus and execution on enabling diversity in the workplace
• Have the ability for unrestricted global travel
• Proficiency in English(professional competency)

• Provide guidance to National Electronic Health Record (NEHR) project team in ensuring that NEHR system complies with security policies (IM8) and the relevant legal and regulatory frameworks (such as PDPA or Cybersecurity Act) throughout the product lifecycle
• Perform adequate risk management, including identification, assessment and provide treatment of security risks associated with NEHR. Risk assessment has to be performed in accordance with IM8 Risk Management Methodology framework
• Provide guidance to vulnerability assessments, source code review and penetration tests of NEHR system so that remediation actions can be undertaken by NEHR project team within the agreed timelines
• Provide security consulting and advisory to NEHR project team
• Review RFP proposal compliance with security requirements
• Review architecture design developed by Enterprise/Solution/Security Architect
• Perform cybersecurity assurance activities across the different stages of SDLC
• Perform independent assessments of the technical security controls implemented within the projects/systems to determine the overall effectiveness of the controlsDegree in Computer Science, Information Systems, Engineering or equivalent
• At least 10 years of IT security experience in areas of security governance, risk management, application security design, security project management or security operation
• Strong risk management and risk articulation skills
• Professional security certification is preferable, such as CISSP, CISM, CISA or other similar security certifications
• Self-motivated with the ability to work independently and as a team member with minimal direction
• Strong interpersonal and stakeholder management skills
• Good written and communication skills

· Based in Singapore, the regional hub for Asia Pacific (AP) and top-ranked biopharmaceutical company on the Straits Times and Statista’s list of Best Employers in Singapore for two consecutive years (2020, 2021).

· Join the premier biopharmaceutical company that has been in Singapore for more than 25 years and in AP for over 60 years.

WHAT YOU WILL DO

Reporting to the Regional Security Director, the Associate Director Regional Security (ADRS), AP is responsible for providing security support across a wide range of services in Asia Pacific, for people and assets and operations, which include sales and marketing; manufacturing; and research. Incumbents are also responsible for providing lawful, objective and thorough support for internal and external investigations.

Responsibilities include, but are not limited to:

· Provide tactical & strategic security support to AP operations.

· Establish and maintain seamless interface with AP management and operations.

· Support the analysis of security exposures and implement cost effective passive, reactive, and proactive programs to address these exposures.

· As directed by Regional Security Director, conduct/support internal and external investigations within AP. Will be required to travel extensively.

· Maintain close liaison with government, industry, security, and intelligence professionals within the AP markets.

· Provide guidance and support to site operations within AP ensuring that worldwide standards, policies and procedures are implemented and maintained.

· Provide support as directed in the areas of Executive Protection, Crisis Management, Site Security Surveys, and Risk Assessment / Risk Analysis.

WHAT YOU MUST HAVE

To be successful in this role, you will have:

· Bachelor’s Degree (minimum) or equivalent.

· Security professional with 5-10 years’ experience in corporate security and/or 5-10 years’ experience in law enforcement within AP.

· Strong background in investigations.

· Ability to identify security issues and customize & implement solutions.

· Proven ability to work in varying situations, from committee work in which a “team player” approach is essential to situations in which considerable independence and self-motivation is required.

· Demonstrated ability to perform under pressure and respond rapidly to breaking situations. Sound, proven judgment is a must.

· Fluent English language skills.

We are proud to be a company that embraces the value of bringing diverse, talented, and committed people together. The fastest way to breakthrough innovation is when diverse ideas come together in an inclusive environment. We encourage our colleagues to respectfully challenge one another’s thinking and approach problems collectively. We are an equal opportunity employer, committed to fostering an inclusive and diverse workplace

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/g44MJ69d

• Autonomy to make decision for Security
• Opportunity to scale up the company (>10,000 employees) IT security capabilities.

About the company

Our client is an established end user company with multiple lines of business / Industry. As part of their plan to invest in technology, they are now hiring a new Cyber Security Director / Senior Manager to manage their security team here in Singapore.

About the job

Reporting directly to Head of IT, your role involves:

• Managing security operation to ensure implemented security technologies and controls are effective and adequate to protect the company
• Manage the arrangement and oversee the implementation of a robust security monitoring program
• Conducting Identifying root cause and remediating of cybersecurity incidents.
• Providing advisory on security threats and vulnerabilities. This includes performing vulnerability scans and analyze results of scans
• Overseeing the development and execution of corporate security awareness and training programs. This includes getting the buy-in of senior business stakeholders which includes securing funding for IT security programs
• Enhancing early detection capability - Driving lessons learned activities after incidence closure to identify potential gaps in security control

Skills and experience required
As a successful applicant, you will have at least 8 years of experience in IT Security / SIEM / Splunk / Incident response. Familiarity with the Mitre ATT&CK Framework and understanding of the techniques for detecting and mitigating security threats will be of added advantage.

Whats on offer

This is an excellent opportunity to join an established company with ambitions to scale up their IT security capabilities.

To apply online please use the 'apply' function, alternatively you may contact Hoon Teck TAN at https://www.linkedin.com/in/hoonteck-nologyrecruitment/. (EA: 94C3609/ R1219669)

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/g44MJ69d (EA: 94C3609/ R1219669)

Make an Impact by

• Seeking a highly skilled and motivated Cyber Security Testing Lead who is skilled in application and infrastructure penetration testing, vulnerability assessment and source code review to guide and review the work of external and cross function team security testers. Need to be responsible for assessing and enhancing the security posture of the organisation’s critical applications and infrastructure through comprehensive testing, vulnerability assessment, and penetration testing techniques. Expertise will play a crucial role in identifying security vulnerabilities and recommending risk mitigation strategies to different senior stakeholders.
• Review and tailor the scope of external penetration testing, along with Domain security champions.
• Review the results of external penetration tests and partner with Domains to contextualise findings and prioritise remediation
• Conduct application and infrastructure penetration testing, vulnerability assessment and source code review in line with Singtel’s standards, through leveraging own team, cross-functional teams or external testers.
• Perform targeted application security assessments and penetration tests for various applications such as mobile, and web services as needed.
• Collaborate with cross-functional teams to provide guidance on Singtel’s standards, security best practices and recommend remediation strategies.
• Work with third party penetration testers to coordinate annual penetration tests for the organisation.
• Collaborate with cross-functional team’s penetration testers and provide guidance on scoping, rules of engagement, testing methodology and reporting.
• Develop and maintain detailed documentation of security assessments, including findings, methodologies, and recommendations.
• Utilize both manual testing and automated application vulnerability scanning/testing tools for assessments.
• Retest security vulnerabilities and update reports with retesting results.
• Stay updated with the latest security trends, vulnerabilities, and attack techniques to enhance the effectiveness of security testing methodologies.

Skills for Success

• Bachelor’s degree in computer science, Information Security, or a related field.
• Solid experience in application security testing, vulnerability assessment, source code review and penetration testing.
• Proficiency in performing application security testing using manual techniques, as well as utilizing runtime vulnerability testing tools and/or code review tools.
• Strong understanding of OWASP Top 10, CWE/SANS Top 25, and other common vulnerability frameworks.
• Attained OSCP or CREST
• Familiarity with various security tools and products like Fortify, AppScan, Webinspect, Burp Suite, Nessus, etc.
• Strong understanding of APIs, HTTP protocol, and Cloud technologies
• Familiarity with secure coding practices and common programming languages
• Strong written and verbal communication skills, including the ability to effectively communicate complex technical concepts to both technical and non-technical stakeholder.

Make an Impact by

• Provide leadership and strategy for cybersecurity monitoring and incident response operations supporting Group IT and Singtel.
• Take leadership role to detect, manage and respond to cybersecurity incidents and provide updates to internal stakeholders and management. Work closely with Group Risk Management (GRM) to support crisis management processes and exercises.
• Manage a highly specialised team of security analysts, incident managers and incident responders to effectively monitor, defend and response to cyber threats and events. Develop critical in-house talent and capabilities, while leveraging on 3rd party services. Aggressively drive automation using AI and other technology.
• Build and maintain an effective threat intel capability and working collaboratively with other internal SOCs and partners to coordinate defensive tactics and playbooks against cyber threats.
• Continuously identify and enhance 24x7 operations, incident and crisis management processes, automation, and capabilities to progressively strengthen the security posture of Singtel and its group of companies.
• Experience in Security Ops and monitoring of Cloud set up
• Partner with Cyber Threat Intel team and perform Hunting as per event, or per time-driven calendar.
• Lead the automation of SOC and IR runbooks, moving the SOC team up the value chain.

Skills for Success

• Bachelor Degree in Computer Science, Computer Engineering, Electrical Engineering or other relevant field of study
• Professional security management certifications such as Certified Information Systems Security professional (CISSP), Certified Information Security Manager (CISM), specialised SANS certifications, or other similar credentials, is required.
• Minimum 10 years of experience as in IT or security roles.
• Minimum 5 years of practical experience managing security operations, SOCs or equivalent security programmes.
• Experience working with Internal Audit, Governance and Compliance teams.
• Expert or advance level competence in the following :Cyber Incident Management
  Partnership Management
  Network Security
  Platform Security
  Security Programme Management
  Stakeholder Management
  Threat Analysis and Defence
  Threat Detection and Response
  Security Monitoring Tools
• Advanced understanding in the following areas:Data Security
  Physical Security
  Regulatory requirements
  Data Loss Prevention strategies
  
• Expert competence in the following:Communication
  Leadership
  Decision Making
  Developing People
  Resource Management
  
• Have exposure to other compliance audits such as PCI, PDPA, GDPR, CCoP mostly related to security part.

As a team lead, you will support CISO with engagement and supporting Com Care Sector on Cyber Security initiatives, to provide outreach to Community Care Sector on Security Best Practices.

• Drive the HIB Compliance program and outreach to the Sector.
• Support CISO in managing Sector Cyber Security team.
• Support the Sector & Digitization team engagement with Sector on Cyber Security
• Drive the Cyber Essential+ certification & Trust Mark certification program

Job Requirements:

• Degree in Information technology with at least 15 years of working experience in Cyber Security or IT
• Professional certification in CISM, CRISM, CGEIT is good to have
• Relevant working experience in both vendor and end user environment
• Proven track record in positions to provide consultancy or advisory to internal or external customers
• Cyber Security Governance and Assurance Knowledge
• Good stakeholder management, IT/Cyber Risk Management
• Good understanding of Cyber Security best practices and standards (NIST, ISO27000, Cyber Kill Chain, MITRE)

Job Purpose

To evaluate, guide and advise Front Office teams and / or Management on credit matters. Maintain overall credit quality of Corporate Banking Asia Pacific portfolio.

Job Responsibilities

• Preparation and review of credit applications (such as renewals, change of conditions and miscellaneous applications), financial projections and spreadsheet, obligor grading and Self-Assessment.
• Handling of Cross Booking Transactions and Head Office Booking Transactions.
• Evaluate and structure credit facilities to mitigate risks, provide guidance to Front Office teams in compliance with internal policies and regulatory requirements.
• Support Front Office teams in Problem Accounts Management, address queries and comments from auditors and regulators and implementation of audit recommendations.
• Oversee credit portfolio quality of Corporate Banking Asia Pacific through credit surveillance, covenant monitoring and due date management.
• Relevant internal reporting duties.
• Any other duties as assigned by Management or Group Head as required.

Job Requirements

• Bachelor’s Degree in Banking, Finance, Accountancy, or related discipline.
• Minimum 15 years of relevant work experience in credit analysis in the banking and finance industry.
• A team player who is detailed-oriented and has good analytical skill.
• Possess leadership qualities, excellent communication, presentation and interpersonal skills.
• Ability to work under pressure and tight deadlines.

​​​​​​​

Make an Impact by

• Provide leadership and strategy for cybersecurity monitoring and incident response operations supporting Group IT and Singtel.
• Take leadership role to detect, manage and respond to cybersecurity incidents and provide updates to internal stakeholders and management. Work closely with Group Risk Management (GRM) to support crisis management processes and exercises.
• Manage a highly specialised team of security analysts, incident managers and incident responders to effectively monitor, defend and response to cyber threats and events. Develop critical in-house talent and capabilities, while leveraging on 3rd party services. Aggressively drive automation using AI and other technology.
• Build and maintain an effective threat intel capability and working collaboratively with other internal SOCs and partners to coordinate defensive tactics and playbooks against cyber threats.
• Continuously identify and enhance 24x7 operations, incident and crisis management processes, automation, and capabilities to progressively strengthen the security posture of Singtel and its group of companies.
• Experience in Security Ops and monitoring of Cloud set up
• Partner with Cyber Threat Intel team and perform Hunting as per event, or per time-driven calendar.
• Lead the automation of SOC and IR runbooks, moving the SOC team up the value chain.

Skills for Success

• Bachelor Degree in Computer Science, Computer Engineering, Electrical Engineering or other relevant field of study
• Professional security management certifications such as Certified Information Systems Security professional (CISSP), Certified Information Security Manager (CISM), specialised SANS certifications, or other similar credentials, is required.
• Minimum 10 years of experience as in IT or security roles.
• Minimum 5 years of practical experience managing security operations, SOCs or equivalent security programmes.
• Experience working with Internal Audit, Governance and Compliance teams.
• Expert or advance level competence in the following :Cyber Incident Management
  Partnership Management
  Network Security
  Platform Security
  Security Programme Management
  Stakeholder Management
  Threat Analysis and Defence
  Threat Detection and Response
  Security Monitoring Tools
• Advanced understanding in the following areas:Data Security
  Physical Security
  Regulatory requirements
  Data Loss Prevention strategies
• Expert competence in the following:Communication
  Leadership
  Decision Making
  Developing People
  Resource Management
• Have exposure to other compliance audits such as PCI, PDPA, GDPR, CCoP mostly related to security part.

The incumbent is expected to govern cybersecurity and information security strategy planning, related program and project delivery, incident management etc. The coverage will span a list of subsidiary entities under the SMBC Group’s Multi-Franchise strategy, and these entities are supervised by SMBC Asia Growing Markets Department (AGMD).

Job Responsibilities

• Responsible for executing and maintaining the cybersecurity governance policies, framework, and processes with reference to applicable regulations and internal policies, for the list of entities supervised by AGMD. This responsibility covers areas such as cybersecurity program and project delivery, compliance to regulations and standards, cybersecurity assessment and incident management, security KRIs etc.
• Collaborate with key stakeholders in each entity to develop and update cybersecurity policies and procedures that align with regulatory requirements, internal policies, and industry standards.
• Ensure compliance with relevant and applicable cybersecurity regulations and standards, such as GDPR, HIPAA, ISO 27001, and NIST and track changes in the regulatory landscape.
• Coordinate and participate in cybersecurity alerts, assessments and audits, for the list of entities, to evaluate the effectiveness of security controls and recommend improvements.
• Support Group-wide Security Operations Centres, in defining incident response plans for the list of entities, including disseminating security alerts, escalating security incidents, and tracking all tasks for execution and closure. Through this participation, conduct thorough cybersecurity risk assessments to identify and evaluate potential threats, vulnerabilities, impact on organizational assets, recovery from cybersecurity incidents etc.
• Develop and implement risk mitigation strategies and action plans to address identified vulnerabilities and reduce the overall cybersecurity risk posture.
• Define and track key cybersecurity metrics to measure the effectiveness of risk management activities and prepare regular reports for senior management.
• Implement continuous monitoring processes to proactively identify and address emerging cybersecurity threats and vulnerabilities.

Job Requirements

• Bachelor’s degree in IT or equivalent with a min. 12 years of working experience with good knowledge and experience of cybersecurity and information security risk management, preferably within the Financial Services sector.
• Solid information technology and security knowledge of relevant financial services regulations and policies of Singapore and Asia region.
• Experience in Cybersecurity and Information Security Governance Reviews, Controls Testing and Assurance.
• Good understanding of the overall cybersecurity operational processes in the financial services industry.
• Proven ability to understand, identify, analyze, and communicate the operational risks within processes, in a structured and logical approach.
• Proven experience in applying legal/regulatory guidance into solving practical problems.
• Strong decision-making skills, with the ability to demonstrate sound judgement.
• Strong problem solving and numerical skills and well-verse in interpersonal communication and presentation skills.
• Ability to manage and prioritize large workloads and deliver within tight deadlines.
• Ability to appreciate diverse cultures and facilitate smooth communications between HQ, Singapore office and entities.