Infrastructure Security Specialist

**Location**
- Singapore, Central Singapore**Job Type**
- Permanent**Salary**
- $6,400 - $12,800 Per Month**Date Posted**
- 1 hour agoAdditional Details

**Job ID**
- 59890**Job Views**
- 2Roles & Responsibilities

**Department Description**
The IT Infrastructure department, Global Technical Services (GTS), is one of the major stakeholders for the bank and is at the heart of Societe Generale group's strategy.

Today, the Digital Transformation raises important challenges around IT Architecture, Infrastructure and Security. Many of these challenges are opportunities to imagine new experiences for our clients and new way to deliver IT services.
Within the Resources and Innovation division, GTS department plays a key role in the Digital Transformation. With more than 3500 GTS staff located across the world, GTS develops innovative projects while delivering operational excellence for infrastructure services to 148,000 employees and 32 million external clients.
GTS staff motivation comes from the new technologies they deliver to enhance agility of the various business lines (Cloud, Big Data, Continuous Delivery).
- GTS/SEC is the operational risks and security management function of GTS. Being the first line of
- defence for Societe Generale, its main objectives includes:
- Protecting the GTS infrastructures, the associated IT services and manages the operational risks.
- Secure Infrastructure of the bank via detect and respond security incidents
- Improve the level of operational risk and security management for GTS
- Provide seamless security by design, focusing on critical assets and data protection
- Raise Security Awareness for SG staffs
- Be the Governance, Risk & Compliance Expert Center for GTS

**Responsibilities**:
Work closely with SOC, CERT and other security teams and Infrastructure skill teams in daily operation and review security requirements
- Exception management: Evaluate and manage infrastructure security exceptions
- Vulnerability management: Conduct scan, assessment and remediation follow-up
- Incident management: Report and follow security incidents and their remedial actions
- Request / Change management: Conduct security assessment for infrastructure request & changes
- Review security architecture proposed by other infrastructure teams
- Deliver innovation initiative to improve overall infrastructure security and efficiency

Manage and execute the Infrastructure related security projects
- Be the security Interface with stakeholders at all levels, from technical engineers to senior management

locally, regionally and globally
- Work closely with other risk and security departments, including all 3 lines of defence
- Cyber reporting: Production of various cyber security reporting (KPIs; KRIs). Coordinate among

Infrastructure teams to contribute to external stakeholders reporting and requests
- Conduct security & risk awareness training to the Infrastructure teams

**Profile Requirements**:
**Knowledge**
- Knowledge and hands-on experiences in IT, Infrastructure and information security
- Knowledge and experience in IT infrastructure (speak the language, expertise not required)
- Knowledge in technology regulatory requirement like HKMA, SFC, MAS, GDPR, CBIRC, etc. is preferred
- Project management experience is desired
- Knowledge and experience in a banking environment will be beneficial but not essential
- Knowledge in the MITRE ATT&CK framework and hands-on experience on security incident investigation processes & techniques
- Security knowledge in the Public Cloud, development and specific Infrastructure domains are a plus
- Professional certification recognized by Regulatory bodies like HKMA, e.g. CISM, CISA or CISSP, is mandatory

**Tools**
- Hands on knowledge on Security Products/tools such as Identity Management Solution, SIEM, vulnerability management and other security products
- Scripting and automation skills is a plus

**Soft Skills**:

- 3 - 5 years relevant experience
- Able to organize time, multitask, and define priorities (autonomy)
- Able to interact with all level of the organization from operators to executive management members
- Must be able to work collaboratively within a complex organization, across multiple cultures, geographies and

disciplines
- Good communication and interpersonal skills
- English proficiency is essentialTags

infrastructure

security

specialist