Cybersecurity and IT Risk Management Specialist

Location: Singapore,

Job Type: Contract

This is an exciting opportunity to join our Cybersecurity team as a Cybersecurity and IT Risk Management Professional. As a key member of the team, you will be responsible for operationalizing the IT risk management framework, policies and standards, and conduct compliance assurance activities.

Key responsibilities include:

• Operationalize IT risk management framework, policies and standards, and conduct compliance assurance activities, including identifying and hunting for gaps and non-compliances in systems and other suppliers/vendors we use for IT operations.
• Maintain cybersecurity and IT risk management policies and standards, third-party vendor management, and system criticality frameworks for the firm to ensure effective IT risk compliance and cyber defence.
• Modernise and optimise the conduct of governance and oversight role through the adoption of new/emerging technology and application to enable real-time update and maintenance of risk register, third party vendor assessment, leveraging on advanced analytics for trending and compliance monitoring.
• Ensure the conduct of risks assessments and implementation of secure System Development Life Cycle (SDLC) by Technology and Business units in their development and maintenance of IT infrastructure and applications.
• Conduct periodic and ad-hoc assessments to monitor compliance with cybersecurity and technology policies and security controls design and operating effectiveness; review cybersecurity and technology risks; audit and operational risk issues to identify root causes and trends, and recommend appropriate remediation.
• Provide independent IT and cyber risk management advice to the business, technical & operations groups to contribute towards secure implementation of technology initiatives.
• Support the review and enhancement of third-party vendor risk management and establish a holistic framework and structure to manage this risk. Contribute to assessment of vendor risks via pre-contract due diligence processes and ensure development of mitigation plans by Business units.
• Identify and assess the impact of technology risks on projects and ensure effective controls are established by business/technology units to mitigate technology risks arising from change requests, new initiatives and processes.
• Proactively partner risk owners and manage risks to minimise impact from incidents, breaches or non-compliance. Conduct regular communication and refresher trainings to maintain a good level of cybersecurity and information risk awareness.
• Support incident response and carry out any other tasks as assigned.

Requirements

• At least 7 years of relevant experience in the field of cybersecurity and IT risk management, policy formulation, governance oversight, audits and risk management.
• Bachelor degree (and higher) in information security, engineering, cybersecurity and related field. Professional information security certifications such as CISA, CRISC, CISSP, CCSK/CCSP, CGEIT, CDPSE, are an advantage.
• Possess strong prior experience and knowledge in cyber and IT standards and policy review, oversight and governance, risk management and audit. Experience in cyber strategy and policy formulation and cyber programme execution will be an advantage.
• Strong technical background is important, with proven ability in technical security design and implementation.
• Possess cyber domain knowledge across areas such as AI, cybersecurity technology architecture and solutioning, SOC/MSS, application & infrastructure security, data & information protection, supply chain security, cyber architecture, quantum, cloud computing security and has knowledge of cyber regulations and compliance.
• Good knowledge in industry security practices, frameworks, and standards such as MAS TRM, ISO27001, Cybersecurity Code of Practice, and NIST Cybersecurity Framework including emerging AI related requirements and standards.
• Strong communication, interpersonal and leadership skills, with proven ability to manage multiple priorities, drive project teams and collaborate across business units and partners to achieve desired end-goals.