Associate Director

Associate Director (Cyber Defence Operations) At Singtel, we believe in the strength of a vibrant, diverse and inclusive workforce where backgrounds, perspectives and life experiences of our people help us innovate and create strong connections with our customers. We strive to ensure all our people practices are non-discriminatory and provide a fair, performance-based work culture that is diverse, inclusive and collaborative. Join us and experience what it’s like to be with an Employer of Choice*. Together, let’s create a brighter digital future for all. *Awarded at the HR Fest Awards 2020. Make an Impact by: Provide leadership and vision to drive cybersecurity operations for Singtel Singapore to ensure effective detection, monitoring, response, analysis and mitigation of cyber threats 24x7. Develop strategic roadmaps and plans to enhance security operations in collaboration with Optus SOC, NCS SOC and other BU monitoring capabilities. Progressively reduce SOC duplication and footprint across Singtel Singapore business units to drive efficiency of security operations, and alignment towards the Singtel Singapore SOC. Develop and maintain the incident management and response model to coordinate a Singtel Singapore wide response to security incidents and events. Take leadership role to manage incidents and provide updates to internal stakeholders and management. Ensure close cooperation between SOCs to share threat intel, responses, investigation and threat hunting etc. Formalise and maintain incident response playbooks and processes in coordination with other internal SOCs to ensure effective coordination and management of security incidents. Acquire, validate, and organise threat intelligence feeds from 3rd party, partners, regulators and other sources, and share the information amongst all Singtel Group SOCs to improve collective defence and resiliency against cyber threats. Continuous provide feedback to enhance vulnerability management capabilities with internal business units and stakeholders to improve response and mitigation against cyber threats capitalizing on technology weaknesses and reported vulnerabilities. Strategize and continuously upgrade SOC security technology stack with new capabilities (e.g., XDR) to detect new and emerging threats across the Singtel Singapore environment. Conduct yearly Red/Blue/Purple Teaming exercises to test and strengthen the cyber resiliency of the Singtel Singapore networks. Progressively and continuously upgrade the capability and maturity of Singtel SOC to deliver efficient and effective security operations and monitoring services to Group IT and Singtel business units. Drive efficiency in SOC management by optimising core and non-core services and support capabilities. Clearly define the target end state to ensure business unit alignment and management support. Partner with Group IT (GIT) leadership as required, to support the security agenda for Group IT, to strengthen the security posture of GIT managed corporate network. Partner Group Risk Management (GRM) to ensure alignment of incident response and crisis management processes to effectively manage, report and track incidents to closure. Partner the VP Group Cyber Resilience to provide periodic updates to Cyber Security Resiliency Committee (CSRC) and GIT Risk Committee to provide visibility of cyber security events, trends, and defence posture. Acquire and develop cyber security operations, incident management / response, threat hunting and threat intel talent to build essential in-house capabilities while leveraging 3rd party services. Drive extensive automation using AI or other technology. Develop public and private sector relationship and partnership to enhance threat intel and defensive capabilities against cyber threats. Partner regulators and national security agencies, where required, to conduct joint-exercises to enhance the collective security resiliency of Singtel and CII services. Maintain a service catalogue of SOC services to drive service excellence and quality of service progressively, including establishing Service Level Agreement (SLA) of key SOC services. Skills for Success: Bachelor Degree in Computer Science, Computer Engineering, Electrical Engineering or other relevant field of study. Professional security management certifications such as Certified Information Systems Security professional (CISSP), Certified Information Security Manager (CISM), specialised SANS certifications, or other similar credentials, is required. Minimum 12 years of experience as in IT or security roles. Minimum 8 years of practical experience managing security operations, SOCs or equivalent security programmes. Experience working with Internal Audit, Governance and Compliance teams. Expert or advance level competence in the following: Business Needs Analysis o Business Risk Management Network Security o Platform Security Security Assessment and Testing Security Programme Management Security Strategy o Stakeholder Management Threat Analysis and Defence Threat Intelligence and Detection Security Assessment Tools Security Monitoring Tools Advanced understanding in the following areas: Data Security Physical Security Regulatory requirements Expert competence in the following: Communication Leadership Decision Making Developing People Resource Management. Have exposure to other compliance audits such as PCI, PDPA, GDPR, CCoP mostly related to security part. Are you ready to say hello to BIG Possibilities? Take the leap with Singtel to unlock new opportunities and accelerate your growth. Apply now and start your empowering career #J-18808-Ljbffr