Vice President

Our Client is an established Financial Institution in Singapore, who is seeking to recruit a Vice President (IT Security).

**Vice President (IT Security)**

**Responsibilities**:

- Ensuring that security policies, standards, procedures, guidelines are kept relevant with the evolving security risks and govern the compliance to the regulatory requirements. This includes structuring and enhancing security artefacts such as high level information security requirements, security hardening guides and security patching baselines.
- Manage the ongoing security assessment programme in compliance to the local regulatory framework, specifically addressing to MAS Technology Risk Management guidelines, CSA CyberSecurity Act (CCOP), etc.
- Manage the vulnerability assessments and penetration testing programme.
- Review vulnerability assessments and penetration testing to assess the residual risks and mitigation plans.
- Implement new security baselines and review the existing hardening baselines to be kept relevant for company’s environment.
- Enhance existing Data Loss Prevention program and work with the Data Protection Officer and business users to enforce the detection rules.
- Participate in architecture committee to develop the security vision and architecture in support of business strategy. This involves working with business and project teams to design and deliver innovative security solutions and initiatives.
- Assess and advise Technology and Operations teams on management and mitigation of security exceptions and deviations.
- Establish a comprehensive security awareness programme including user, IT user and project specialist training and phishing campaigns in order to improve the security awareness among the staff and vendors.
- Represent company at various industry forums to drive the development of security standards for the financial industry.

**Job Requirements**:
Technical Competency:

- In-depth knowledge and experience in information security risk assessment and management.
- Deep appreciation of local regulatory guidelines and notices, mínimally covering MAS Technology Risk Management Guidelines, MAS Outsourcing guidelines, and CSA CyberSecurity Act.
- Ability to conduct reviews and assessments in accordance to technology’s control framework in the area of systems security as part of technology assurance activities.

Experience and qualifications:

- Security certification in CISSP, CISM or CISA is essential for this role.
- Certification in CCSP and architecture is a plus.
- Good understanding of key security technology such as vulnerability assessment, security hardening, cloud technologies, identity access management solution, two factor authentication, data analytics, etc.
- Good implementation experience with tools and processes used in security incident detection and handling / Security Operations Centre procedures and processes is a plus.
- Working knowledge in various operating systems including Windows and Linux, and open source tools such as Snort, Wireshark, NMap, etc., as well as a familiarity with networking technology and tools such as firewalls, proxies, the OSI Model, including TCP/IP protocols and standards is a plus.

Essential Attributes:

- Good people management skills and be able to rally his or her team members to work cohesively within a dynamic challenging environment.
- Excellent communication and interpersonal skills.
- Good problem-solving and project management skills.
- Demonstrate ability to act with independence of thought, confidence and urgency, and is able to make decisions independently and as a team.
- Strong organizational skills, meticulous and ability to multi-task projects with competing demands for resources.
- Demonstrate ability to operate in diverse environments and cultures and enjoys working in challenging and fast-paced environment
- Demonstrate ability to balance business and security requirements and manage tactical vs. strategic on-going initiatives.

JJ Consulting Services

EA Licence No.: 12C6207

**Salary**: $7,137.00 - $18,311.00 per month

Schedule:

- Monday to Friday
**Experience**:

- IT Security: 1 year (preferred)