
Manager, Information Security
1 week ago
**Job Number** 24076260
**Job Category** Information Technology
**Location** Singapore Regional Office, 2 Harbourfront Place #06-08, Singapore, Singapore, Singapore VIEW ON MAP
**Schedule** Full-Time
**Located Remotely?** N
**Relocation?** N
**Position Type** Management
**JOB SUMMARY**
Excellent communication skills are required to effectively communicate (verbally and written) across all levels within the organization.
**CANDIDATE PROFILE**
**Education and Experience**
**Required**:
- Bachelor’s degree in information systems or related field or equivalent experience/certification
- 5+ years security governance, risk management and compliance related experience with 2+ years direct work experience in third-party security Risk Management
- Fluent in English
- One or more current information security certifications such as Certified in Risk and Information Systems Controls (CRISC), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP)
- Possession of good communication skills (including soft skills, structured thinking, effective report writing and presentations, and stakeholder engagement)
- A team player, with positive attitude and enthusiasm in the performance of responsibilities
- Strong innovative thinking, able to continuously enrich and improve the security policy, procedure and standards.
**Preferred**:
- A security certification such as GWAPT, GPEN, AWS Associate Architect, AWS Professional Architect, PCI experience.
- Technical knowledge in one or more of the following areas is required: Application Security, Operating System security (UNIX, Windows, Mainframe, etc.) and network security (routers, switches, firewalls)
- Technical leadership experience in an outsourced environment
- Excellent communication skills and problem-solving ability
- Experience conducting and maintaining vendor risk assessments
- Experience with reviewing and assessing security controls of Cloud service providers
- Proficient with assessing a multi-tiered system architecture (Web Server, App Server & Database)
- Knowledge of OWASP Top 10 and SANS 25.
- Manual Web Application Testing experience.
- Familiarity with ISO27001 and PCI DSS Standards
**CORE WORK ACTIVITIES**
**Vender Risk Management & Cyber Risk Management**
- Oversee, evaluate, and support the documentation, and validation processes necessary to assure that associates, information technology systems and business processes meet the organization’s information assurance, security, and privacy requirements. Ensures appropriate treatment of risk, compliance, and assurance of internal policies and external regulations.
- Develop strategy for the vendor information security risk compliance program
- Document controls gap analysis and risk assessment of the third-party providers
- Review controls exception requests and make risk-based approval decision
- Lead, participate or perform various infrastructure compliance initiatives and projects
- Perform Application Security Testing using (Nessus, IBM App Scan, HP Web Inspect, Fortified on Demand, Qualys, Burp, or Retina)
- Conduct and validate finding discovered during the scans
- Monitor compliance to applicable security policies and standards and report related risk issues
- Manage and administer processes and tools that enable the organization to identify, document, and track third party risks and compliance exceptions
- Conduct assessments of threats and vulnerabilities, determine deviations from acceptable configurations or enterprise or local policy, assess the level of risk, and develop and/or recommend and operationalize appropriate mitigation countermeasures.
**Managing Projects and Priorities**
- Champions leaders’ vision for product and service delivery.
- Thinks creatively and practically to develop, execute, and implement new project plans.
- Generates and provides accurate and timely results in the form of reports, presentations, etc.
- Plans, develops, implements, and evaluates the quality of operations.
- Supports regulator inspections, coordinates submission preparation, and tracks remediations.
- Supports cyber regulation awareness program catering to various roles in the entity.
**Delivering on the Needs of Key Stakeholders**
- Understands and meets the needs of key stakeholders.
- Communicates concepts in a clear and persuasive manner that is easy to understand.
- Demonstrates an understanding of business priorities.
- Supports achievement of performance goals, budget goals, team goals, etc.
- Generates and provides accurate and timely results in the form of reports, presentations, etc.
**Providing Technical Support and Consultation**
- Provides recommendations to improve the effectiveness of processes and programs.
- Demonstrates advanced knowledge of job-relevant issues, products, systems, and processes.
- Demonstrates advanced knowledge of function-specific procedures.
- Applies
-
Information Security Manager
2 days ago
Singapore SPARROW RESEARCH PTE. LTD. Full time**Job Summary** Implement and oversee Sparrow's IT security operations framework, including security operations role definitions, monitoring, incident and event management, privileged access management, and overall security architecture. Ensure compliance with industry standards and regulatory requirements. **Responsibilities**: - Define and implement IT...
-
Information Management Officers
2 weeks ago
Singapore Internal Security Department Full timeJoin to apply for the Information Management Officers role at Internal Security Department . 1 week ago Be among the first 25 applicants. Get AI-powered advice on this job and more exclusive features. What The Role Is ISD confronts and addresses threats to Singapore's internal security and stability. For over 75 years, ISD and its predecessor organisations...
-
Information Management Officers
1 week ago
Singapore Internal Security Department Full timeJoin to apply for the Information Management Officers role at Internal Security Department . 1 week ago Be among the first 25 applicants. Get AI-powered advice on this job and more exclusive features. What The Role Is ISD confronts and addresses threats to Singapore’s internal security and stability. For over 75 years, ISD and its predecessor...
-
Information Security Manager
2 weeks ago
Singapore beBeeSecurity Full time $90,000 - $120,000Job OverviewWe are seeking a seasoned leader to oversee the development and implementation of our information security strategy. The successful candidate will be responsible for securing our information assets and enterprise through governance, management, and operations of security technology and tools.This role reports to the Senior Director, GIS. Key...
-
Information Security Manager
1 week ago
Singapore BIPO Full timeOverview BIPO: Shaping the Future of HR with Innovation and Global Reach At BIPO, we are a global leader in HR services, offering innovative solutions that empower businesses to streamline and scale their operations effortlessly. Our award-winning cloud-based Human Resource Management System (HRMS) revolutionizes HR processes, making them simpler, more...
-
Information Security Manager
1 week ago
Singapore BIPO Service Shanghai Limited Full time**JOB DESCRIPTION** **Role**:Information Security Manager **Reports to**: IT Director **Location**: Singapore **Responsibilities** - Lead compliance audit activities (SOC, ISO 27001) for Singapore, Hong Kong, and China - Responsible for BIPO data privacy, serving in BIPO’s Data Privacy team and answer internal and external queries related to BIPO’s...
-
Information Security Manager
1 week ago
Singapore BIPO Full timeOverview BIPO: Shaping the Future of HR with Innovation and Global Reach At BIPO, we are a global leader in HR services, offering innovative solutions that empower businesses to streamline and scale their operations effortlessly. Our award-winning cloud-based Human Resource Management System (HRMS) revolutionizes HR processes, making them simpler, more...
-
Information Security
3 weeks ago
Singapore D L RESOURCES PTE LTD Full timeRoles & ResponsibilitiesJob ObjectivesThe Security Governance Specialist role will support the Head of Security Governance in enhancing and maintaining the Security Governance within the Group Information Security(GIS) function in the Bank.Key ResponsibilitiesThis position will support senior Security Governance team members and work closely with various...
-
Information Security
7 hours ago
Singapore Scoot Tigerair Pte Ltd Full time $40,000 - $60,000 per yearInternshipSummaryProvide better appreciation and experiential learning in Cybersecurity defence in terms of concepts, architecture, technologies, tools, and operations.Job DescriptionResponsibilities:Application SecurityResearch web and mobile application security best practicesResearch into the latest IAM technologies and propose enhancements to existing...
-
information security manager
2 weeks ago
Singapore HORIZON COMPUTER MANAGEMENT PTE. LTD. Full timeRoles & ResponsibilitiesKey ResponsibilitiesDevelop, implement, and manage the organization's information security strategy, policies, and procedures. Lead the design and enforcement of security controls to protect systems, networks, and data from cyber threats. Manage a team of security professionals, providing technical guidance, mentoring, and...