Responsibilities:
- Lead the IT Security team to manage and all IT security-related matters that support business objectives and strategies
- Develop and carry out IT security policies and plans
- Conduct security review of existing systems on their ability to provide adequate defence against the latest security threats.
- Conduct vulnerability assessments and penetration tests for all critical IT systems
- Drive and conduct IT Security awareness and training like security talks, phishing simulation and incident response exercises
- Manage and investigate all cyber security alerts and notifications from cyber surveillance and threat intelligence to identify root cause and impact for effective containment, mitigation and future improvements
- Manage and investigate all IT Security incidents to identify root cause and impact for effective containment, mitigation and future improvements
- Engage IT project teams throughout the SDLC to identify and prioritize applicable security controls and provide guidance on how to implement these controls
- Jointly perform, monitor, track and review with IT Governance team and other IT teams on all information systems and infrastructure and security
- Maintain and enhance the Information Security risk assessment methodology
- Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit
- Act as Subject Matter Expert (SME) in security technologies, and provide knowledge sharing and technical assistance to other team members
- Define security configuration standards for platforms and technologies
- Detailed reporting on IT security initiatives, scans, incidents to management and statutory reporting
- Any other ad hoc duties as assigned.
Requirements:
- Bachelor's degree in Computer Science, of Information Technology or equivalent, with minimum 5-7 years' experience in Information and Cyber Security
- Good knowledge and experience with cloud security of Amazon Web Services (AWS), Microsoft Azure and SaaS solutions, security standards and frameworks like NIST, ISO27001, MTCS, CSA Security-by-Design (SBD) and Personal Data Protection Act (PDPA) is preferred.
- Other relevant certifications such as CISSP/CISA/CISM, CREST, CEH, CHFI would be advantageous
- Demonstrated leadership and adaptability, with willingness to readily and voluntarily take ownership of highly challenging tasks and problems, even beyond initial scope of responsibility.
- Ability to handle multiple tasks concurrently and meet deadlines, while maintaining focus despite conflicting demands.
Interested applicants, please Email , and look for
Jensen Fang Lifa
Recruit Express Pte Ltd
EA License No. 99C4599
EA Personnel Registration Number: R2197080
We regret that only shortlisted candidates will be contacted.
