Information Systems Compliance Manager

7 days ago

Singapore Canonical - Jobs Full time

The Information Systems (IS) Compliance Manager leads our work to achieve relevant certifications such as SOC2 as well as compliance with regulatory frameworks such as GDPR, SOC2 and other relevant standards.

This role is to ensure that Canonical conducts its business processes in compliance with laws and regulations, international standards, and accepted business practice. This position is for an individual with the knowledge, drive and personal motivation to set up a strong governance framework in a fast-growing tech company, as well as help it achieve/maintain the necessary compliance certifications. It requires a background in IT internal audit and an appreciation of the challenges involved in driving security/compliance initiatives in a software engineering organization.

This role can be home or office based. Periodic international travel for training and business meetings is required.

**Key responsibilities**:

- Shape and drive the company's information security risk management and internal control framework
- Maintain and develop information security policies, and verify compliance with those policies
- Work with our Legal team to respond to internal and external information security compliance issues
- Collaborate closely with leaders to understand their security, privacy and compliance requirements
- Make sure that customer data is safeguarded and used ethically and responsibly
- Organize and conduct Risk/Privacy/Compliance training and assessments
- Educate and inform employees about our practices and standards
- Manage internal and external audit and testing programs, reporting risks that need correction
- Prioritize compliance work
- Coordinate activities with external consultants and internal stakeholders for quality compliance (e.g. ISO 9001, 15504)
- Review and respond to security questionnaires and contract questions from customers

**Required skills and experience**:

- Bachelor's degree (or equivalent) in Computer Science, Information Systems, or related field
- Familiarity with procurement compliance obligations, contractual security and privacy
- Experience defining and implementing appropriate methodologies for auditing, takedown processes and law enforcement
- Ability to be an ambassador for compliance policies and procedures within a highly technical software organization
- You can speak articulately about situational awareness, change management, and access control
- Demonstrated ability to explain risk assessments, actions needed, and cost implications
- General understanding of international privacy and compliance legislation, including the GDPR
- Experience working with legal, audit, and compliance staff
- Experience developing and maintaining policies, procedures, standards, and guidelines
- Experience driving risk-based decisions supporting business owner expectations and needs

**Valuable experience**:

- Affinity with Open Source software with regards to compliance
- Knowledge and experience of applicable frameworks and regulatory requirements, e.g. ISO 2700x, PCI-DSS, NIST
- Technical or engineering background, including software development, scripting, networking, and cloud architecture

Canonical is a growing international software company that works with the open-source community to deliver Ubuntu, the world's best free software platform. Our services help businesses worldwide reduce costs, improve efficiency and enhance security with Ubuntu.#LI-remote

  • IT Operations Manager

    2 weeks ago

    Singapore INTEGRATED HEALTH INFORMATION SYSTEMS PTE. LTD. Full time

    OperationsManager for a new large-scale National Healthcare IT System **Roles & Responsibilitiesas Operations Manager** 1. A well-rounder for allmatters relating to system operations management - Accountable for looking after 2nd and 3rd level support for a newly implemented large scale national system - Responsible for timely production issue triaging,...

  • Technical Information Security Officer

    5 days ago

    Singapore INTEGRATED HEALTH INFORMATION SYSTEMS PTE. LTD. Full time

    **Role and Responsibilities** 1. Provide guidance to Business Services Group in ensuring that projects/systems comply with security policies and the relevant legal and regulatory frameworks (such as PDPA or Cybersecurity Act) throughout the product lifecycle 2. Perform adequate risk management, including identification, assessment and provide treatment of...

  • Compliance Manager

    7 days ago

    Singapore Office of Risk Management and Compliance Full time

    **Posting Start Date**:21/01/2025 About ORMCAt NUS Office of Risk Management and Compliance (ORMC), we not only manage risks to build the University’s resilience but also help shape them into opportunities to empower the community. We will continually support and partner with our stakeholders within the University to make this possible. DATA PRIVACY -...

  • IT Cyber-security Manager

    3 days ago

    Singapore Integrated Health Information Systems Full time $90,000 - $120,000 per year

    **Position Summary / Project Description** Senior Manager (IT & Cyber-Security) deputize Head IT & Cyber Security (HITC), and will be supporting HITC to plan, acquire/implement and manage organisation-wide IT and IT-related systems and information in the organisation. He/she will be involved in the planning and managing all pertinent IT infrastructure and...

  • Information Systems Compliance Specialist

    5 days ago

    Singapore beBeeCompliance Full time $80,000 - $120,000

    Job OverviewThis role is responsible for ensuring compliance readiness with PCI DSS and MAS TRM standards.The successful candidate will be part of the Group Information Security Team (Infosec) and report to the Chief Compliance Officer in Kris+. This position requires creating, maintaining, and executing compliance programs while monitoring business...

  • Information Technology Security Specialist

    2 weeks ago

    Singapore SMART INFORMATION MANAGEMENT SYSTEMS PRIVATE LIMITED Full time

    **Key Responsibilities**: **Cybersecurity Risk Assessment & Mitigation**: - **Cyber Risk Assessment**:Conduct comprehensive cyber risk assessments in support of technology initiatives, identifying IT-related risks and recommending appropriate security controls to mitigate those risks. - **Risk Monitoring & Management**:Continuously track and manage risk...

  • Information Systems

    4 weeks ago

    Singapore PERSOLKELLY SINGAPORE PTE. LTD. Full time

    Roles & ResponsibilitiesInformation Systems & Network EngineerAn exciting chance to work on global IT systems, cybersecurity, and cloud innovation in a well-established, technology-focused organisation.Job Purpose: Design, maintain, and improve IT systems to ensure smooth operations, security, and efficiency.Job Responsibilities:Design, configure, and...

  • Information Systems

    2 days ago

    Singapore PERSOLKELLY SINGAPORE PTE. LTD. Full time

    Roles & Responsibilities Information Systems & Network Engineer An exciting chance to work on global IT systems, cybersecurity, and cloud innovation in a well-established, technology-focused organisation. Job Purpose: Design, maintain, and improve IT systems to ensure smooth operations, security, and efficiency. Job Responsibilities: Design, configure,...

  • Senior Computer and Information Systems Manager

    2 weeks ago

    Singapore SWIZ TECHNOLOGIES PTE. LTD. Full time

    **Job Description**: **Responsibilities**: - Develop and implement technology strategy and roadmap. - Ensure that the technology infrastructure meets our and our customers' business needs and objectives. - Manage the IT budget and ensure that projects are completed within budget and on time. - Manage and mentor a team of IT professionals, including software...

  • Compliance Manager

    1 week ago

    Singapore IQ EQ REGULATORY COMPLIANCE (SINGAPORE) PTE. LTD. Full time

    **Position Summary**: Support and assist IQEQ’s investment adviser client by providing regulatory compliance services through oversight of the execution and continuous improvement of the client’s compliance program, which meet the requirements of SEC Rules 206(4)-7 and 38a-1, including other state and federal securities laws and regulations. Update the...