VP/AVP, Cybersecurity Governance & Compliance, ISS, Group Technology

DBS Bank Limited; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

DBS Bank Limited is seeking an experienced cybersecurity professional to manage and implement risk management and compliance programs. The role involves working closely with stakeholders to ensure compliance with cybersecurity regulations and enhance the Bank's cybersecurity culture through various initiatives. Candidates should have a strong background in information security, risk management, and relevant regulatory frameworks.

Benefits

Competitive salary

Dynamic work environment

Professional development opportunities

Qualifications

• 5+ years of experience in information security, preferably in finance or technology.
• Experience with security metrics management and reporting.
• Knowledge of ISO27000, NIST800-53, and Singapore's Cybersecurity Act.

Responsibilities

• Implement and manage cybersecurity risk management programs.
• Conduct risk assessments and ensure compliance with regulations.
• Enhance the Bank’s cybersecurity culture through awareness programs.

Skills

Information security

Cybersecurity awareness

Risk management

Analytical skills

Communication

Education

Bachelor's degree in Information Security or related field

Tools

IDS

IPS

VPN

Job description

DBS is a leading financial services group in Asia, with over 280 branches across 18 markets. Headquartered and listed in Singapore, DBS has a growing presence in the three key Asian axes of growth: Greater China, Southeast Asia and South Asia. The bank's capital position, as well as "AA-" and "Aa1" credit ratings, is among the highest in Asia-Pacific. DBS has been recognised for its leadership in the region, having been named “Asia’s Best Bank” by The Banker, a member of the Financial Times group, and “Best Bank in Asia-Pacific” by Global Finance. The bank has also been named “Safest Bank in Asia” by Global Finance for seven consecutive years from 2009 to 2015.

Business Function

Group Technology enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group Technology, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibilities

The candidate will be responsible for the delivery and implementation of the Bank’s cybersecurity risk management and compliance programmes to ensure that the Bank’s technology and information assets comply with the relevant cybersecurity regulations.

The candidate will be working with key stakeholders to monitor and implement practices that meet the Bank’s cybersecurity risk management policies and standards and ensure that the identified cybersecurity risks are evaluated and adequately addressed and remediated.

The candidate will also be assisting in the update and reporting of matrices on the Bank’s cybersecurity compliance posture to the Management and elevating the overall cybersecurity awareness of the Bank. This includes:

• Working with key stakeholders and counterparts within the Bank to ensure compliance against key cyber and information security legislations and regulations;
• Identifying, analysing, evaluating and treating of cybersecurity risks posed to the Bank’s technology and information assets to an acceptable level; and
• Uplifting the Bank’s cybersecurity culture through cybersecurity awareness and continuous education efforts.

Legislation, regulations and policies

• Assist in the Bank’s cybersecurity program including cyber security policies, regulatory audits, compliance management, metrics, risk and performance indicators and reporting to senior management;
• Track and monitor new security regulatory guidelines, and assess the compliance of and impact to the Bank’s security policy architecture;
• Work with regional information security services teams in the core markets to monitor new cybersecurity legislation and/ or regulation, and assess the impact against the Bank’s security policy architecture;
• Develop, review and update information security policies and standards to comply against regulatory requirements; and

Cybersecurity, risk and compliance

• Conduct cybersecurity risk assessments by identifying, analysing, evaluating and treating cybersecurity risks to an acceptable level within the Bank;
• Timely coordination and completion of the Bank’s Risk and Compliance programme in the identification and assessment of risk;
• Monitor cybersecurity risks, map risk profiles and manage the risk register, as well as enhance Key Risk Indicators for reporting to second line of defence and risk management committees;
• Continuously evaluate cybersecurity controls to ensure its effectiveness, compliance and adherence to policies standards while driving remediation efforts;
• Engage Line of Business Technology units to conduct annual cybersecurity risk assessment for key bank systems against regulatory requirements;
• Ensure timely implementation of corporate operational risk policies and standards within the Unit and assist operations teams to identify, report and address any gaps;
• Assess the security deviations and risk acceptances raised by Business Units / Support Units; and
• Engage and liaise with auditors and the information security services teams for cybersecurity related audits.

Cybersecurity awareness

• Maintain and support the Bank’s cybersecurity awareness program to ensure continual elevation of the Bank’s cybersecurity culture;
• Continuously assess and understand the Bank’s susceptibility to cyber threats to improve the Bank’s cybersecurity awareness through education activities and initiatives; and
• Maintain contemporary knowledge of trends and technologies and assess applicability to the Bank’s environment in the spirit of continuous service and capability improvement.

Requirements:

• Information security professional with five (5) or more years of experience, with a background in a financial or technology environment would be preferred.
• Experience in collation, management and reporting of security metrics such as open security vulnerabilities, penetration testing findings, security alerts and incidents, etc.
• Experience in information security framework including ISO27000, NIST800-53 and regulations such as Cybersecurity Act, Technology Risk Management Guidelines and Personal Data Protection Act.
• Knowledge in Singapore's Cybersecurity Act would be a plus.
• Good working knowledge of enterprise security risk management methods and techniques to successfully deliver the security risk management and assessment outcome.
• Strong background on security technology solutions including IDS, IPS, anti-virus, content filtering, secure email solutions, network sniffing, log analysis, forensics, and VPN.
• Good verbal and written communication for the generation of security awareness content.
• Proactive, analytical, performance-oriented, and independent worker with strong organization skills, and effectiveness to track and follow up on the assigned projects.

Apply Now

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognises your achievements.

-en