Cyber and IT Security Engineering Principal Specialist SG

CIMB Singapore; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

CIMB Singapore is seeking aSenior IT Security professional to ensure our IT systems meet business needs while upholding security best practices and regulatory compliance. You will deliver security solutions, operationalize core tools, and lead multiple security initiatives across EDR, PAM, SIEM, and IPS/IDS domains.

Ideal candidates have 5–8 years in large-scale IT security environments, with certifications such as CISSP or CISM preferred, and hands-on experience across cloud security and risk

Qualifications

• Bachelor's degree in computer science or related field.
• Security certifications preferred (CISSP, CISM, SANS, GSEC).
• Other certifications such as PMP, ITIL, Microsoft, CISCO are a plus.
• 5–8 years of experience in large-scale IT security environments; at least 5 years in information security and risk.

Responsibilities

• Ensure IT systems and applications meet business needs while complying with security best practices, standards, SOPs and regulatory requirements.
• Deliver and operationalize key security tools for the bank.
• Lead and implement multiple security solutions across IT security domains (EDR, PAM, SIEM, IPS/IDS).
• Engage with cloud security domains and manage security programs with stakeholders.

Skills

Security leadership

Risk assessment

Network security

Security best practices

Threat analysis

Education

Bachelor's degree in computer science

Tools

Firewall

IDS/IPS

SIEM

PAM

Job description

• Responsible for ensuring IT systems and applications within our organization meet the needs of the business while adhering to security best-practices, compliance and regulatory requirements.
• Responsible and accountable for delivering security solutions and fully operationalizing the key security tools for the bank.
• Experience in leading and implementing multiple security solutions and technologies across one or more IT Security domains (EDR, PAM, SIEM, IPS/IDS)
• Exposed to other domains such as Cloud Security
• Manage security programs and stakeholders to ensure security practices are implemented as per policy, standards, SOPs and processes.

Key Responsibilities

• Responsible for ensuring IT systems and applications within our organization meet the needs of the business while adhering to security best-practices, compliance and regulatory requirements.
• Responsible and accountable for delivering security solutions and fully operationalizing the key security tools for the bank.
• Experience in leading and implementing multiple security solutions and technologies across one or more IT Security domains (EDR, PAM, SIEM, IPS/IDS)
• Exposed to other domains such as Cloud Security
• Manage security programs and stakeholders to ensure security practices are implemented as per policy, standards, SOPs and processes.

JOB DESCRIPTION

• Responsible for ensuring IT systems and applications within our organization meet the needs of the business while adhering to security best-practices, compliance and regulatory requirements.
• Responsible and accountable for delivering security solutions and fully operationalizing the key security tools for the bank.
• Experience in leading and implementing multiple security solutions and technologies across one or more IT Security domains (EDR, PAM, SIEM, IPS/IDS)
• Exposed to other domains such as Cloud Security
• Manage security programs and stakeholders to ensure security practices are implemented as per policy, standards, SOPs and processes.

Requirements

• Minimum a Bachelor's degree in computer science
• Security industry certifications such as CISSP, CISM, SANS, GSEC , etc are preferred.
• Other industry certifications such as PMP, ITIL, Microsoft, CISCO (preferred, but not required)
• Minimum 5-8 years’ experience working in a large-scale IT environment; Including 5 years of information security and risk experience within the past 6 years; including risk analysis, endpoint, server, network and web application security.

Technical/Functional skills

• Good understanding of TCP/IP protocol and OSI Seven Layer Model.
• Strong knowledge of security best practices and concepts.
• Analyzes & prepares recommendations relating to security for existing IT infrastructures / Applications.
• Expert understanding of firewall technologies.
• Advance knowledge & Hands-on experience in supporting and maintaining enterprise IT Security solutions and technologies such as Firewall, IDS/IPS and Proxy, etc
• Advanc knowledge of Windows and/or Unix-based systems / architectures and related security.
• Advance knowledge of cryptography / cryptographic systems
• Advance level of knowledge of LAN / WAN technologies
• Knowledge of VPN technologies.
• Be able to articulate threats and risk to business and technology leaders.

Personal skills (Soft Competencies [Core/Leadership])

• Ability to plan, organize and prioritize tasks to complete within established time frames.
• Highly result oriented and can work independently.
• Ability to build relationships and interact effectively with internal and external parties.
• Strong analytical, technical, and communication (both oral and written) skills.
• Strong interest in the field of information security.
• Creative, independent with good problem solving skills.
• Ability to work effectively as a team

Leadership

• Expert in analytical skills and able to make decisions, exhibit sound and accurate judgment when tackling challenges
• Mentor, train and advise colleagues
• Consistently consume and contribute to documentation to ensure up to date relevant body of knowledge that will directly ensure work is done correctly and completely

About Us

With operations that span 15 different markets across the region, the opportunity to expand your experience, test your capabilities, and exhibit your resilience is ample. #teamCIMB is always keen to welcome the ones who are ready to make that very special difference – for themselves and the bank.