IT Security Engineer / AVP - Security Governance & Assurance

Network For Electronic Transfers (S); Singapore; On-site; SGD 80,000 - 100,000; Full time

Job summary

A leading payments services group located in Singapore is looking for an IT Security Engineer to manage cybersecurity programs and ensure compliance with regulations. The ideal candidate will have at least 8 years of experience in information security, strong knowledge of security frameworks like ISO27000, and excellent project management skills. Responsibilities include ownership of security policies, monitoring regulatory guidelines, and managing IT security audits. This role offers an opportunity to work within a critical domain of digital payments.

Qualifications

• At least 8 years of experience in Information security.
• Good working knowledge of enterprise security risk management methods.
• Experience collating and reporting security metrics like vulnerability management.

Responsibilities

• Take ownership of cybersecurity programs and policies.
• Monitor new security regulatory guidelines and update security policies.
• Manage internal and external IT security audits.

Skills

Information security policy development

Risk assessment

Compliance implementation

Project management

Education

Degree in Computer Science or Engineering

Tools

ISO27000

NIST800-53

Cybersecurity Act

Technology Risk Management Guidelines

Personal Data Protection Act

Job description

Company: Network For Electronic Transfers (S)

IT Security Engineer / AVP - Security Governance & Assurance

The NETS Group is a leading payments services group, enabling digital payments for merchants, consumers and banks across the entire payments value chain. The Group operates Singapore’s national debit scheme enabling customers of DBS Bank/POSB, HSBC, Maybank, OCBC Bank, Standard Chartered Bank and UOB to make payments using their ATM cards or mobile devices at more than 130,000 acceptance points in the country as well as online payments.

Key Responsibilities

• Take ownership of cybersecurity programs including cyber security policies, regulatory audits, compliance management, metrics, risk and performance indicators, senior management reporting
• Track and monitor new security regulatory guidelines, assess the compliance of and impact to the organization’s security policy architecture, and develop, review and update information security policies and standards to comply with the regulatory requirements as required
• Manage and liaise with both internal and external IT security audits of which the scope includes security risk assessment review, penetration testing and compliance audits
• To support business initiatives by ensuring relevant security controls are in place for products and services delivered by the organization, including third parties.

Requirements

Degree in Computer Science, Engineering or any other related disciplines with at least 8 years of progressive experience in Information security, including experience in security policy development, risk assessment, compliance implementation & monitoring and governance.

Good working knowledge of enterprise security risk management methods and techniques to successfully deliver the security risk management and assessment outcome.

Prior experience in implementing a program which includes the collation, management and reporting of security metrics (KRI) such as vulnerability management, open software security vulnerabilities, penetration testing findings, security alerts and incidents

Experienced in information security frameworks including ISO27000, NIST800-53 and regulations such as Cybersecurity Act, Technology Risk Management Guidelines and Personal Data Protection Act.

Good project management skills: ability to handle multiple projects simultaneously, reprioritize as needed

Ability to work in a team environment and work independently with minimal supervision and produce results that meet standards of quality, timeliness and acceptability

Willingness to deep-dive and learn about the Information Security function within the payments domain