Cyber and IT Security Engineering Principal Specialist SG

CIMB BANK BERHAD; Singapore; Vor Ort; SGD 120.000 - 180.000; Vollzeit

Zusammenfassung

CIMB Bank Berhad is seeking a senior IT Security leader to ensure security across IT systems and applications, aligning with business needs and regulatory requirements.

The role focuses on delivering security solutions, operationalizing key tools (EDR, PAM, SIEM, IPS/IDS), and coordinating with stakeholders to enforce security standards and processes.

Qualifikationen

• Bachelor's degree in computer science or related field.
• Security certifications such as CISSP, CISM, SANS, GSEC are preferred.
• Extensive experience in large-scale IT security environments.

Aufgaben

• Lead delivery of security solutions and maintain operationalization of security tools.
• Address security requirements, risk, and regulatory compliance for IT systems.
• Coordinate with stakeholders to implement security policies, standards, and SOPs.

Kenntnisse

Leadership

Risk management

Security architecture

Incident response

Network security

Cloud security

Communication

Ausbildung

Bachelor's degree in computer science

Tools

Firewall

IDS/IPS

Proxy servers

Cryptography

Jobbeschreibung

Responsible for ensuring IT systems and applications within our organization meet the needs of the business while adhering to security best-practices, compliance and regulatory requirements.

Responsible and accountable for delivering security solutions and fully operationalizing the key security tools for the bank.

Experience in leading and implementing multiple security solutions and technologies across one or more IT Security domains (EDR, PAM, SIEM, IPS/IDS)

Exposed to other domains such as Cloud Security

Manage security programs and stakeholders to ensure security practices are implemented as per policy, standards, SOPs and processes.

Requirements

• Minimum a Bachelor's degree in computer science
• Security industry certifications such as CISSP, CISM, SANS, GSEC , etc are preferred.
• Other industry certifications such as PMP, ITIL, Microsoft, CISCO (preferred, but not required)
• Minimum 8 years' experience working in a large-scale IT environment; Including 5 years of information security and risk experience within the past 6 years; including risk analysis, endpoint, server, network and web application security.

Technical/Functional skills

• Good understanding of TCP/IP protocol and OSI Seven Layer Model.
• Strong knowledge of security best practices and concepts.
• Analyzes & prepares recommendations relating to security for existing IT infrastructures / Applications.
• Expert understanding of firewall technologies.
• Advance knowledge & Hands-on experience in supporting and maintaining enterprise IT Security solutions and technologies such as Firewall, IDS/IPS and Proxy, etc
• Advance knowledge of Windows and/or Unix-based systems / architectures and related security.
• Advance knowledge of cryptography / cryptographic systems
• Advance level of knowledge of LAN / WAN technologies
• Knowledge of VPN technologies.
• Be able to articulate threats and risk to business and technology leaders.

Personal skills (Soft Competencies [Core/Leadership])

• Ability to plan, organize and prioritize tasks to complete within established time frames.
• Highly result oriented and can work independently.
• Ability to build relationships and interact effectively with internal and external parties.
• Strong analytical, technical, and communication (both oral and written) skills.
• Strong interest in the field of information security.
• Creative, independent with good problem solving skills.
• Ability to work effectively as a team

Leadership

• Expert in analytical skills and able to make decisions, exhibit sound and accurate judgment when tackling challenges
• Mentor, train and advise colleagues
• Consistently consume and contribute to documentation to ensure up to date relevant body of knowledge that will directly ensure work is done correctly and completely