Intern - Information Security (Spring 2027, Jan to Jun)

Singapore Exchange Limited; Singapore; On-site; SGD 20,000 - 27,000; Full time

Job summary

Singapore Exchange Limited in Singapore invites an Information Security Intern to contribute to Governance & Risk, Design & Engineering, Defense & Response, and Security Operations. You will participate in Data Loss Prevention (DLP) and Identity & Access Management (IAM) initiatives, learning how enterprise security controls are implemented in a regulated financial services environment.

During the internship you will assist with configuring DLP policies in Microsoft Purview, support access

Responsibilities

• Assist in configuring and refining Microsoft Purview DLP policies and sensitivity labels across Microsoft 365 workloads.
• Support the development and testing of advanced classifiers including EDM, Document Fingerprinting, and Trainable Classifiers.
• Monitor DLP policy alerts, investigate incidents, and document findings for review by the DLP Champion network.
• Contribute to the DLP Champions programme by preparing communications, training materials, and awareness content.
• Analyse policy effectiveness and produce periodic reporting on data protection posture.
• Research emerging DLP capabilities and recommend improvements aligned to SGX's data governance framework.
• Support day-to-day access provisioning and de-provisioning workflows in line with least-privilege principles.
• Assist with periodic user access reviews and recertification campaigns across enterprise systems.
• Help maintain IAM runbooks, role matrices, and access control documentation.
• Contribute to the review and enforcement of Privileged Access Management (PAM) controls.
• Liaise with application owners and HR to ensure joiner-mover-leaver processes are correctly executed.
• Support audit and compliance activities related to access governance (e.g. MAS TRM, ISO 27001).

Job description

Brief Overview:

The Information Security Team encompasses key functions, covering Governance & Risk, Design & Engineering, Defense & Response, and Security Operations. The team strengthens the cyber resiliency of SGX services to service its customers and internet users.

Learning Objectives:

The shortlisted intern would participate and contribute in the Information Security projects, daily operations, development of new and enhancement to existing processes/procedures, the implementation and governance of these set of controls. The intern will learn about security practices and implementation driven by industry best practice, regulatory and business requirements. Specific for areas in Defence & Response, Design & Engineering and Security Operations.

• Security Architecture of the Enterprise.
• Security Operations for the tools deployed within the SGX environment.
• Determine/ identify how security intelligence is used within an organization
• Understand how threat vulnerability changes the way we look at vulnerability management
• Determine/ identify how we can leverage on process automation for manual tasks

Job Description

Data Loss Prevention (DLP)

• Assist in configuring and refining Microsoft Purview DLP policies and sensitivity labels across Microsoft 365 workloads.
• Support the development and testing of advanced classifiers including Exact Data Match (EDM), Document Fingerprinting, and Trainable Classifiers.
• Monitor DLP policy alerts, investigate incidents, and document findings for review by the DLP Champion network.
• Contribute to the DLP Champions programme by preparing communications, training materials, and awareness content.
• Analyse policy effectiveness and produce periodic reporting on data protection posture.
• Research emerging DLP capabilities and recommend improvements aligned to SGX's data governance framework.

Identity & Access Management (IAM)

• Support day-to-day access provisioning and de-provisioning workflows in line with least-privilege principles.
• Assist with periodic user access reviews and recertification campaigns across enterprise systems.
• Help maintain IAM runbooks, role matrices, and access control documentation.
• Contribute to the review and enforcement of Privileged Access Management (PAM) controls.
• Liaise with application owners and HR to ensure joiner-mover-leaver processes are correctly executed.
• Support audit and compliance activities related to access governance (e.g. MAS TRM, ISO 27001).