Business Information Security Officer (BISO)

FWD SINGAPORE PTE. LTD.; Singapore; On-site; SGD 150,000 - 230,000; Full time

Job summary

FWD Singapore PTE. LTD. is seeking an experienced IT Security leader to drive the Business Unit IT Security program, ensure policy compliance, and oversee security across IT projects and software development lifecycles. The role includes coordinating with Group IT Security and vendors to uphold security by design and risk management.

The incumbent will lead security awareness, metrics, and risk mapping, and collaborate with the Group CISO and Head of IT to report on program status and risks.

Qualifications

• Degree from Information Technology or equivalent discipline.
• Minimum 8 years working experience in IT Security Management role, preferably in Financial Services.
• Business IT Security leadership experience.
• Certification on CISSP / CRISC is preferred.

Responsibilities

• Lead Business IT Security, with the support of the local IT Team and Group IT Security.
• Define and maintain a Local Business Unit IT Security Program, to perform continuous improvement on the Business Unit security posture.
• Drive local Business Unit IT Security Initiatives and Projects definition and implementation, selection of solutions and architecture, as well as define operations framework and its continuous improvement.
• Coordinate Group IT Security Initiatives rollout in country.
• Support the preparation of IT Security Metrics and Risk Mapping, along with the resolution of deficiencies identified on those Metrics.
• Drive awareness and support to Group IT Security, Group IT and the Business Unit IT, to understand the IT Security Solutions and Processes, as well as their implications across the organization.
• Work closely with the Head of IT and Group CISO, through tracking and reporting function, to ensure regular updates to management on the IT Security Program and risks.

Skills

IT Security

Leadership

Communication

Risk Mapping

Project Management

Education

Degree in Information Technology

Job description

PURPOSE

• Drive IT Security function for the Business Unit, leveraging IT Team members, Group IT Security Shared Services and vendors.
• Define Local Business IT Security Program.
• Ensure FWD Policies and Standards compliance within the Business Unit. Register any exceptions or deviations and manage resolution plans.
• Ensure IT projects and IT software development lifecycle include security by design and go through the required IT Security tollgates.
• Perform Security Awareness for the Business Unit and its IT Teams.
• Support and evaluate local Business or IT needs with the involvement of Group IT Security SMEs, when required.
• Coordinate Group IT Security Initiatives rollout in country.
• Support the preparation of IT Security Metrics and Risk Mapping, along with the resolution of deficiencies identified on those Metrics.
• Manage allocated resources to deliver a project or initiative (either internal FWD staff or vendors).
• Collaborate with Group Cyber Incident Response on any potential identified incidents that may involve the Business Unit.
• With support from Group, Local Teams, ensure Compliance with Singapore Regulatory requirements such MAS TRM & Outsourcing Guidelines, PDPC and other applicable Financial services.

KEY ACCOUNTABILITIES

• Lead Business IT Security, with the support of the local IT Team and Group IT Security.
• Define and maintain a Local Business Unit IT Security Program, to perform continuous improvement on the Business Unit security posture.
• Drive local Business Unit IT Security Initiatives and Projects definition and implementation, selection of solutions and architecture, as well as define operations framework and its continuous improvement.
• Coordinate Group IT Security Initiatives rollout in country.
• Support the preparation of IT Security Metrics and Risk Mapping, along with the resolution of deficiencies identified on those Metrics.
• Drive awareness and support to Group IT Security, Group IT and the Business Unit IT, to understand the IT Security Solutions and Processes, as well as their implications across the organization.
• Work closely with the Head of IT and Group CISO, through tracking and reporting function, to ensure regular updates to management on the IT Security Program and risks.

QUALIFICATIONS / EXPERIENCE

• Degree from Information Technology or equivalent discipline.
• Minimum 8 years working experience in IT Security Management role, preferably in Financial Services.
• Business IT Security leadership experience.
• Certification on CISSP / CRISC is preferred.

KNOWLEDGE, SKILLS & ABILITY

• Excellent knowledge of overall IT Security domains.
• Experience on multicultural virtual/distributed team coordination and communication.
• Ability to define, prioritize and execute process in a precise and structured manner.
• Excellent communication, presentation and influencing skills.
• Insurance Business general knowledge