Manager, Information Security
1 week ago
**Job Number** 24076260
**Job Category** Information Technology
**Location** Singapore Regional Office, 2 Harbourfront Place #06-08, Singapore, Singapore, Singapore VIEW ON MAP
**Schedule** Full-Time
**Located Remotely?** N
**Relocation?** N
**Position Type** Management
**JOB SUMMARY**
Excellent communication skills are required to effectively communicate (verbally and written) across all levels within the organization.
**CANDIDATE PROFILE**
**Education and Experience**
**Required**:
- Bachelor’s degree in information systems or related field or equivalent experience/certification
- 5+ years security governance, risk management and compliance related experience with 2+ years direct work experience in third-party security Risk Management
- Fluent in English
- One or more current information security certifications such as Certified in Risk and Information Systems Controls (CRISC), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP)
- Possession of good communication skills (including soft skills, structured thinking, effective report writing and presentations, and stakeholder engagement)
- A team player, with positive attitude and enthusiasm in the performance of responsibilities
- Strong innovative thinking, able to continuously enrich and improve the security policy, procedure and standards.
**Preferred**:
- A security certification such as GWAPT, GPEN, AWS Associate Architect, AWS Professional Architect, PCI experience.
- Technical knowledge in one or more of the following areas is required: Application Security, Operating System security (UNIX, Windows, Mainframe, etc.) and network security (routers, switches, firewalls)
- Technical leadership experience in an outsourced environment
- Excellent communication skills and problem-solving ability
- Experience conducting and maintaining vendor risk assessments
- Experience with reviewing and assessing security controls of Cloud service providers
- Proficient with assessing a multi-tiered system architecture (Web Server, App Server & Database)
- Knowledge of OWASP Top 10 and SANS 25.
- Manual Web Application Testing experience.
- Familiarity with ISO27001 and PCI DSS Standards
**CORE WORK ACTIVITIES**
**Vender Risk Management & Cyber Risk Management**
- Oversee, evaluate, and support the documentation, and validation processes necessary to assure that associates, information technology systems and business processes meet the organization’s information assurance, security, and privacy requirements. Ensures appropriate treatment of risk, compliance, and assurance of internal policies and external regulations.
- Develop strategy for the vendor information security risk compliance program
- Document controls gap analysis and risk assessment of the third-party providers
- Review controls exception requests and make risk-based approval decision
- Lead, participate or perform various infrastructure compliance initiatives and projects
- Perform Application Security Testing using (Nessus, IBM App Scan, HP Web Inspect, Fortified on Demand, Qualys, Burp, or Retina)
- Conduct and validate finding discovered during the scans
- Monitor compliance to applicable security policies and standards and report related risk issues
- Manage and administer processes and tools that enable the organization to identify, document, and track third party risks and compliance exceptions
- Conduct assessments of threats and vulnerabilities, determine deviations from acceptable configurations or enterprise or local policy, assess the level of risk, and develop and/or recommend and operationalize appropriate mitigation countermeasures.
**Managing Projects and Priorities**
- Champions leaders’ vision for product and service delivery.
- Thinks creatively and practically to develop, execute, and implement new project plans.
- Generates and provides accurate and timely results in the form of reports, presentations, etc.
- Plans, develops, implements, and evaluates the quality of operations.
- Supports regulator inspections, coordinates submission preparation, and tracks remediations.
- Supports cyber regulation awareness program catering to various roles in the entity.
**Delivering on the Needs of Key Stakeholders**
- Understands and meets the needs of key stakeholders.
- Communicates concepts in a clear and persuasive manner that is easy to understand.
- Demonstrates an understanding of business priorities.
- Supports achievement of performance goals, budget goals, team goals, etc.
- Generates and provides accurate and timely results in the form of reports, presentations, etc.
**Providing Technical Support and Consultation**
- Provides recommendations to improve the effectiveness of processes and programs.
- Demonstrates advanced knowledge of job-relevant issues, products, systems, and processes.
- Demonstrates advanced knowledge of function-specific procedures.
- Applies
-
Information Technology Security Specialist
2 days ago
Singapore SMART INFORMATION MANAGEMENT SYSTEMS PRIVATE LIMITED Full time**Key Responsibilities**: **Cybersecurity Risk Assessment & Mitigation**: - **Cyber Risk Assessment**:Conduct comprehensive cyber risk assessments in support of technology initiatives, identifying IT-related risks and recommending appropriate security controls to mitigate those risks. - **Risk Monitoring & Management**:Continuously track and manage risk...
-
Information Security Consultant
5 days ago
Singapore VANTAGE POINT SECURITY PTE. LTD. Full timeJob ResponsibilitiesThe Security Consultant is accountable for:Designing and executing penetration testing projects that meet client requirements.Developing and maintaining strong relationships with clients, establishing trust and credibility.Ensuring clients are adequately prepared for project commencement, minimizing delays and ensuring smooth...
-
Information Security Manager
4 days ago
Singapore SPARROW RESEARCH PTE. LTD. Full time**Job Summary** Implement and oversee Sparrow's IT security operations framework, including security operations role definitions, monitoring, incident and event management, privileged access management, and overall security architecture. Ensure compliance with industry standards and regulatory requirements. **Responsibilities**: - Define and implement IT...
-
Information Security Manager
2 days ago
Singapore SINGAPORE AEROSPACE MANUFACTURING PTE LTD Full timeSAM is looking to fill the position of **Information Security Manager **. This is a regional role and is overall in-charge of all the entities under SAM. He/She will report to the CEO. **Responsibilites** - To develop and implement a long-term Information Security & Cyber Security strategies and roadmap to protect corporate information and IT assets. - Set...
-
Information Security Manager
3 days ago
Singapore BASE CAMP RECRUITMENT PTE. LTD. Full time**Information Security Manager**: What's on Offer: - Perm role - Location: Singapore - Real estate/shopping mall industry **As a Manager/Assistant Manager, Information Security, we will rely you to**: - Lead the team to maintain daily operation of Information Security team, support security related platform (e.g. endpoint protection, vulnerability...
-
Information Security Manager
1 week ago
Singapore BIPO Service Shanghai Limited Full time**Information Security Manager** **Company Overview**: Established in 2010 and headquartered in Singapore, BIPO is a trusted provider of payroll and people solutions in **over 160 global markets.** Our comprehensive HR offerings include **Human Capital Management solutions**, **Global Payroll** **Outsourcing**, and **Employer of Record services**, powered...
-
Information Security Manager
1 week ago
North-East Singapore Flintex Consulting Pte Ltd Full time**Information Security Manager**: - Minimum yearss' experience in IT Governance and Cyber Security as HOD (mandatory) - Vendor industry experience (mandatory) - Hands on and ability to implement security technical solutions (mandatory) - Manage communication with MAS auditor, incident reporting, engagement - Leading tasks and multiple teams of information...
-
Information Security Manager
5 days ago
Singapore OCTAWERKS PTE. LTD. Full timeJob Description:We are seeking a highly skilled Information Security Manager to join our team at OCTAWERKS PTE. LTD. As an Information Security Manager, you will play a critical role in ensuring the security and integrity of our systems and data.Main Responsibilities:Analyse and correlate information security events to identify appropriate event handling...
-
Information Security Manager
7 days ago
Singapore GO-JEK Full time**About the Role** The Information Security Manager will play a crucial role in the implementation of the Information Security programs. You will work closely with the Information Security Chief of Staff and collaborate with leadership and technical teams on the continued evolution of Information Security programs across the cybersecurity, and company...
-
Information Security Manager
1 week ago
Singapore BIPO Service Shanghai Limited Full time**JOB DESCRIPTION** **Role**:Information Security Manager **Reports to**: IT Director **Location**: Singapore **Responsibilities** - Lead compliance audit activities (SOC, ISO 27001) for Singapore, Hong Kong, and China - Responsible for BIPO data privacy, serving in BIPO’s Data Privacy team and answer internal and external queries related to BIPO’s...
-
Information Security Administrator
3 days ago
Singapore The Cyber Security Agency of Singapore Full timeJob DescriptionThe Information Security Administrator - Government Agency will be responsible for supporting the processing of licence applications, managing public facing email mailboxes, handling queries from internal and external stakeholders, and providing administrative and logistic support for the Division. This role requires a degree in any...
-
Information Security
3 weeks ago
Singapore RANDSTAD PTE. LIMITED Full timeRoles & ResponsibilitiesExperience in an international setting with high adaptability In depth understanding of China's laws (GRC) People Manager role with a strong track record in leadershipabout the companyOur client is a multinational company and they are a prominent player in the industry, renowned for its extensive brand portfolio, commitment to...
-
Country Information Security Manager
1 week ago
Central Singapore PayPal Full timeAt PayPal (NASDAQ: PYPL), we believe that every person has the right to participate fully in the global economy. Our mission is to democratize financial services to ensure that everyone, regardless of background or economic standing, has access to affordable, convenient, and secure products and services to take control of their financial lives. Job...
-
Manager, Information Security Department
1 week ago
Singapore KRIS INFOTECH PTE. LTD. Full timeThe Manager of the Information Security Department is responsible for the organization's efforts to protect its information assets and ensure the security of its information systems. - This position requires a proactive approach to developing and implementing security policies, conducting security assessments, and responding to incidents. - The role involves...
-
Information Security Manager
1 week ago
Singapore ONECONNECT FINANCIAL TECHNOLOGY (SINGAPORE) CO. PTE. LTD. Full time**Responsibilities**: - Responsible for improving the system related to security operation, planning and improve security emergency plans; - Responsible for security program planning and development - Responsible for firewall, IDS/IPS, WAF, DDOS, implementation of deployment of network security equipment such as audit system, customization of Security...
-
Security Training Manager
2 days ago
Singapore Security Xchange LLP Full time**Job Title** - Security Training Manager- **Job Type** - Full time**Required Position** - Security Mgt**Location** - Island Wide**Nearest MRT** **Job Site Type** **Shift** - Day**Salary** - 3500**Pay** - Basic**Payment Rate** - Monthly**Requirements**: **Reachfield Security is an established local Manpower Supply Company ( Supply Security Guards, Grade...
-
Information Security Program Manager
1 day ago
Singapore SINGAPORE AIRLINES LIMITED Full timeWe are seeking a highly skilled Information Security Program Manager to join our team at SINGAPORE AIRLINES LIMITED. As the program manager, you will be responsible for overseeing the development and implementation of our information security program.Key Areas of ResponsibilityDevelop and manage the information security policy framework, including policies,...
-
Information Security Consultant
5 days ago
Singapore ISO CONSULTANTS PTE. LTD. Full time**Summary - Reporting to the Director this position will be responsible for managing all Information security projects of our clients, and this includes implementation of ISO 27001, Cybersecurity, Cloud Security, HIPPA, Privacy, and other security standards and frameworks. **Major Responsibilities - Provide leadership to Information security projects at...
-
Information Security Systems Engineer
1 day ago
Singapore ST ENGINEERING INFO-SECURITY PTE. LTD. Full timeJob Description">We are seeking an experienced Senior Engineer to join our team in Jurong East, Singapore. As a Senior Engineer, you will be responsible for implementing cybersecurity technology and solutions, studying customer's requirements and transforming them into technical control & technical solutions, leading teams to complete projects on time, and...
-
Director, Information Security
1 week ago
Singapore Ensign InfoSecurity Full timeEnsign is hiring ! As Director, Information Security, you will play a crucial role in implementing Ensign's cybersecurity vision. Reporting to the Information Security Office, you will collaborate with senior management and business units on cybersecurity initiatives. You will play a crucial role in supporting the CISO in establishing and maintaining an...