Cybersecurity Governance & Assurance Architect

NETS; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

NETS in Singapore seeks an Information Security professional to manage and enforce IS policies, processes and controls across the organisation. You will partner with internal stakeholders to drive cyber risk management and support audit activities.

You will implement frameworks (ISO27000, NIST), align with Cyber Hygiene and PDPA regulations, develop risk metrics, and communicate policy changes to teams to strengthen governance.

Qualifications

• Degree in Computer Science, Engineering or related disciplines.
• 6+ years in information security with policy development, risk assessment, compliance & governance.
• Strong knowledge of enterprise security risk management methods and techniques.
• Experience implementing a program for security metrics (KRI) such as vulnerability management, open software vulnerabilities, pen tests, alerts & incidents.
• Experience with ISO27000, NIST, Cyber Hygiene, Technology Risk Management Guidelines and PDPA regulations.
• Ability to work in a team and deliver high quality results with minimal supervision.
• Willingness to deep-dive into Information Security in payments domain.
• Strong writing, communication and inter-personal skills.

Responsibilities

• Responsible for management and enforcement of IS related policies, processes and procedures.
• Execute policies and procedures to facilitate cyber risk process and control from audit findings or process maturity.
• Partner with stakeholders to identify and implement cyber risk process improvements.
• Reference regulator notices/guidelines (TRM, Cyber Hygiene) to assess risk and work with Line 2 and Tech to improve policies.
• Prepare and provide data for risk analysis and reporting.
• Communicate and provide guidance of new IS policies to stakeholders.
• Support IS audits, regulatory inspections, risk and compliance activities.
• Review audit findings to determine root cause and verify remedial actions.
• Support audit lifecycle from kickoff to closure.
• Innovate and automate as required.

Skills

Security risk management

Security metrics program

Security frameworks (ISO27000, NIST)

Team player

Willingness to learn

Communication

Written communication

Interpersonal skills

Education

Degree in Computer Science, Engineering or related

Job description

NETS in Singapore seeks an Information Security professional to manage and enforce IS policies, processes and controls across the organisation. You will partner with internal stakeholders to drive cyber risk management and support audit activities.

You will implement frameworks (ISO27000, NIST), align with Cyber Hygiene and PDPA regulations, develop risk metrics, and communicate policy changes to teams to strengthen governance.