ICT SECURITY CONSULTANT

UARROW PTE. LTD.; Singapore; On-site; SGD 70,000 - 90,000; Full time

Job summary

A leading cybersecurity firm in Singapore seeks a professional to manage its internal security awareness program. Responsibilities include identifying security risks, creating a culture of security awareness among employees, and ensuring compliance with industry standards. Candidates should have project management experience and a thorough understanding of information risks. This role is integral to fostering secure behaviors across the organization.

Qualifications

• Meticulous budgeting skills are vital.
• Experience in managing complex programs is preferred.
• Understanding of Third Party Information Security Assessments is advantageous.

Responsibilities

• Identify and solve problematic behaviors related to security.
• Implement and maintain the internal security awareness program.
• Create metrics to measure program effectiveness.

Skills

Understanding of information risks

Project management

Budgeting

Team collaboration

Job description

Key Decisions within the Role

Accountable for identifying and solving problematic behaviors.

Implement the internal security awareness & training program.

Team

Direct accountability for security awareness.

Requirements

• An understanding of the concepts of information risks and the different elements that make up said risk.
• Project management experience is a plus, the ability to plan, manage and maintain a complex, organization-wide program over the long term.
• An understanding of Third Party Information Security Assessments (TPISA) is a plus.
• Meticulous where budgeting is concerned.
• Ability to work independently and as part of a team.

Ensuring our security awareness program meets all industry regulations, standards and compliance requirements.

Ensure that our security awareness program clearly communicates our security policies and requirements that people know, understand and adhere to them.

Identify top human risks to our organization and the behaviours we need to change to mitigate these risks. Develop and maintain a security awareness program that effectively changes these behaviours so our employees act in a secure manner, reducing the most risk to our organization.

Create a positive program that engages employees, to include focusing on changing behaviours both at home and at work. Secure behaviour should be demonstrated regardless of location and devices in use.

Structure and maintain this program for the long term, aiming to change culture and not just behaviours.

Create a metrics framework that can effectively measure these requirements.