Cyber Security Manager

Valuemax Group Ltd; Singapore; On-site; SGD 80,000 - 100,000; Full time

Job summary

A prominent financial services company in Singapore is seeking an experienced professional for a managerial role in IT Risk Management. This position involves responsibilities in risk assessment, cyber incident investigation, and compliance with regulatory requirements. Candidates should have at least 5 years of relevant experience in IT audit and risk management, preferably from the financial industry. The role emphasizes strategic thinking and analytical skills, alongside a solid understanding of technology risk and cybersecurity. Full-time position with opportunities to contribute to innovative data strategies.

Qualifications

• Minimum of 5 years of experience in IT audit, risk management, compliance and/or governance roles.
• Experience in the financial industry or with established auditing firms preferred.
• Understanding of regulatory requirements related to IT and cybersecurity.

Responsibilities

• Perform Technology and Cyber Risk Reviews Assessment on projects.
• Conduct independent review of IT Risk & Control Self-Assessment.
• Oversee investigations of technology/cyber incidents.
• Ensure accurate reporting of Technology Key Risk Indicators.
• Assist in implementing Business Continuity Management initiatives.

Skills

IT audit

Risk management

Compliance

Cybersecurity

Analytical skills

Strategic thinking

Education

Degree in IT or Computer Science

Job description

Role Overview

The managerial role, will be responsible for IT Risk & Control Self-Assessment, identify key technology risks and execute the mitigation plan, delivering the implementation of innovative data strategies and contributing to the team’s commitment to excellence. Require an experienced professional with proven experience in delivery of best-in-class results in the realm of risk analytics especially around Technology Risk Management.

Job Description

Support the implementation of the TRMP and CRP through the following:

• Perform Technology and Cyber Risk Reviews Assessment (including risk impact, system criticality, cloud etc) on Technology projects and provide support to stakeholders on related risks and mitigation. This can include new digital initiatives, adoption of new and emerging technologies
• Perform Independent review of IT Risk & Control Self-Assessment (RCSA), identify key technology risks and track the mitigation progress of business units. This will include testing of controls identified in RCSAs by Business Units
• Oversight over the investigation to identify the root cause of technology/cyber incidents/issues and report to Head, Information Security.
• Ensure complete, accurate and timely dashboard reporting of internal and BNM ORR Technology Key Risk Indicators and loss event via BNM ORR and CISS. This includes oversight of ITOC reports
• Accurate and timely risk reporting to management and board level committee on IT and Cyber risk related matters
• Annual review of risk management policies and procedures to ensure compliance to laws, regulations and group policies
• Experience in Cloud security architecture/ implementation, VAPT, SAST, and DAST is preferred.

Business Continuity Management (BCM)

• Assist in the implementation BCM initiatives which include coordination of risk assessments, business impact analysis (BIA), BCP/DRP tests, training, reporting, and maintenance of BCM policies and manual.

Outsourcing

• Review and challenge responses on technology related matters for outsourcing activities application, including due diligence, new outsourcing arrangements and renewal.

Requirements

• Degree in IT or Computer Science or related discipline.
• At least 5 years of relevant working experience in IT audit, risk management, compliance and/or governance role in technology risk issues and cybersecurity.
• Preferably from financial industry, or established auditing firms.
• Good understanding of regulatory requirements related to IT, Cybersecurity, Infrastructure security, Application Security, Identify and Access Management, technology risk management.
• Possess analytical and strategic with a track record of success in delivery results.