Information Security Officer

UNISON CONSULTING PTE. LTD.; Singapore; On-site; SGD 60,000 - 80,000; Full time

Job summary

A consulting firm in Singapore is looking for an experienced Information Security Officer to oversee IS activities and ensure compliance with security policies. The role involves conducting security risk assessments, reporting findings, and providing expert advice on security controls, with a focus on enhancing security processes. Candidates should hold a relevant Bachelor's degree and have at least 2 years in Information Security, Audit, or Risk Management. Strong communication and influencing skills are essential.

Qualifications

• 2 Years of Experience in Information Security, Audit or Risk Management Function.
• Good understanding of Authentication, Access Controls, Cryptography, and Network Security.

Responsibilities

• Perform Information Business Impact assessments and Security Risk Assessments on business applications.
• Report Information Security issues/gaps with recommendations to mitigate/remediate risk.
• Promote awareness of information security policies and manage operational KPI/KRIs.

Skills

Information Security Control Areas

Written and Verbal Communication Skills

Strong Influencing/Negotiating Skills

Team Collaboration

Education

Bachelor’s degree in information technology, computer science, or a related field

Job description

The Information Security Officer (ISO) role is to support and be accountable for all IS activities including but not limited to oversight of the IS Risk Management to the Franchise and its processes and support ASL where needed. The ISO function will support & work closely with Business, Operations & Technology teams, and the overall ISO community to oversee and monitor adherence with Singlife IS Policy and Standards, manage risk and provide Business advise on Information Security. Demonstrate understanding of cloud, mobile, application and infrastructure security and will exercise sound judgement within existing practices and policies.

Responsibilities

• Perform Information Business Impact assessments and Security Risk Assessments on business applications throughout development lifecycle for SDLC/Agile/Iterative Lifecycle.
• Report Information Security issues/gaps with appropriate recommendations to mitigate and/or remediate the risk as well as assist IT with corrective action plans. Provide subject matter expertise in application development lifecycle to assess security requirements, controls and ensure that security controls are implemented and planned.
• Promote awareness of information security policies, standards and best practices. Also, as a program manager, manage information security assessments operational KPI/KRIs.
• Drive improvement to Information Security process, standards and policies.
• Interface with Risk, Internal Audit, external Audit, Regulator and/or provide timely support during audits.
• Establish and maintain relationships with domain architects, project managers and IT SMEs.
• Demonstrate good understanding of Singapore regulatory framework and local laws on information security, technology risk, data protection.
• Perform independent assessments of the technical security controls implemented within the system to determine the overall effectiveness of the controls.

Experience

• Good understanding of Information Security control areas such as Authentication/Authorization, Access Controls, Entitlement, Cryptography, Encryption, Network, Application/System Security, Key Management. Vulnerability Management (OWASP, SANs)
• Excellent Written and Verbal communication skills. Exhibit Strong Influencing/negotiating skills with attention to details.
• Ability to work independently and as part of a team.

Education

• Bachelor’s degree in information technology, computer science, or a related field.
• 2 Years of Experience in Information Security, Audit or Risk Management Function.