Senior Manager, IT Governance, Iits

COMPANY DESCRIPTION

Singapore Management University is a place where high-level professionalism blends together with a healthy informality. The 'family-like' atmosphere among the SMU community fosters a culture where employees work, plan, organise and play together - building a strong collegiality and morale within the university.

Our commitment to attract and retain talent is ongoing. We offer attractive benefits and welfare, competitive compensation packages, and generous professional development opportunities - all to meet the work-life needs of our staff. No wonder, then, that SMU continues to be given numerous awards and recognition for its human resource excellence.

DESIGNATION : Senior Manager, IT Governance, IITS

RESPONSIBILITIES
- This position is for Office of Integrated Information Technology Services (IITS)
- Due diligence and management of the university’s IT governance and compliance projects and ISO certifications
- Drive and communicate the university’s cybersecurity awareness and compliance agendas, manage and monitor IT compliance within the programme
- Train staff on security awareness
- Support the university’s IT compliance reporting needs; including ad-hoc compliance-related requests from regulators and auditors
- Front auditors where IT involvement is required
- Proactively and strategically partners with SMU’s business units and functions to enable them to design, adopt and integrate appropriate controls; deliver processes and solutions securely and consistently with the goal of keeping SMU and customers’ safe, stable and resilient
- Develop work plans and conduct periodic compliance self-assessments to identify non-compliance, best practices and weaknesses in order to strengthen IT controls
- Recommend and identify clear steps necessary to mitigate regulatory risks and concerns
- Report to management with timely updates on the state of controls, risks, audit findings and remediation
- Support in the identification and assessment of IT risk
- Identifying opportunities for continual improvement
- Perform other related duties as assigned

QUALIFICATIONS
- Degree in information systems management, computer science, engineering or other related field
- IT GRC security or risk management experience (CGEIT, CRISC or CISM, certifications and/or ISO27001 Lead Auditor certification is a plus)
- 6 to 8 years of experience in a large organization including demonstrated leadership in building and implementing governance, risk and compliance frameworks
- Excellent command of Cybersecurity organisation practices associated with: requirements analysis, risk analytics and modeling, root cause analysis, risk management; emerging issues, vulnerabilities and vulnerability assessment, and incident response methodologies
- Good understanding of national and international laws, regulations, policies and ethics related to education industry and institutes of higher learning
- Excellent ability to analyse regulatory risks in complex business processes, and recommend controls to mitigate those risks
- An understanding of applicable regulatory requirements for institutes of higher learning space such as ISO27001 standards, NIST Cybersecurity Framework and PDPA is critical in this role
- Proactive and strategic problem solver, able to look ahead and plan for contingencies
- Ability to take ownership of outcomes and the ability to work with teams to confront issues and drive performance
- Ability to operate with strong integrity with the ability to handle projects of a sensitive and confidential nature
- Excellent presentation and project management skills with the ability to successfully work multiple issues at one time
- Ability to communicate complexity, risks and technical controls in a simple and clear manner.
- Good writing skills is required

OTHER INFORMATION

**#LI-JN1