IT Security Manager

TOKIO MARINE LIFE INSURANCE SINGAPORE PTE. LTD.; Singapore; On-site; SGD 100,000 - 130,000; Full time

Job summary

A leading insurance company in Singapore seeks a senior IT Security professional to oversee security operations, ensure compliance with regulatory standards, and lead audits. The ideal candidate will have at least 10 years of experience, with a strong background in financial services and expertise in security operations. Key responsibilities include managing vulnerabilities, responding to incidents, and conducting risk assessments. This role requires effective communication and teamwork to align with organizational objectives.

Qualifications

• At least 10 years of relevant experience with 3 years in financial services.
• Strong understanding of MAS regulatory guidelines.
• Knowledge of cloud technologies, preferably Azure.

Responsibilities

• Oversee TMLS IT Security operations for robust security posture.
• Lead audits to ensure compliance and implement corrective actions.
• Identify vulnerabilities and collaborate on remediation strategies.

Skills

IT Security Operations

Incident Management

Risk Assessment

Network Protocols

Communication Skills

Problem Solving

Tools

SIEM Tools

Vulnerability Assessment Tools

Firewalls

DDoS Mitigation Tools

Job description

Job Description

• Essential ITSR team member overseeing TMLS IT Security operations to ensure a robust security posture for TMLS.
• Lead the External and Internal audits to ensure compliance with organizational policies and regulatory standards. Identify areas for improvement and implement corrective actions to enhance overall security and efficiency.
• Identify vulnerabilities and collaborate with cross‑functional teams to develop and implement effective remediation strategies. Ensure continuous improvement of security measures to protect organizational assets.
• Respond to security breaches and incidents, conduct investigations, and implement corrective actions.
• Review and act timely on Incident tickets and SOC alerts, MAS FINTELs and cyber alerts and advisories from CSA, CISA, and other trusted sources, baseline standards and firewall rules, User & Privileged access, Break glass id, OS, and DB Log reviews.
• Conduct periodic IT Risk Assessments, RCSA (Risk Control Self-Assessment), CSA (Continuous Self-Assessment), CSIP (Continuous Self-Improvement Plan), and SCA (Self-Control Assessment).
• Conduct regular meetings with external partners to ensure proper governance and compliance with organizational standards. Collaborate to address any issues and enhance overall security and operational efficiency.
• Conduct comprehensive and regular policy reviews to ensure all policies are up-to-date by evaluating existing policies and identifying areas for improvement and updating them to address emerging risks and enhance security measures.
• Proactively contribute to global initiatives and TMLS‑initiated security projects to foster organizational growth and innovation. Collaborate with cross‑functional teams to ensure successful execution and alignment with strategic objectives.

Job Requirements

• Minimum least 10 years of relevant experience, with a minimum of 3 years in the financial services industry. Background in management consulting, technology, banking or financial services preferred.
• Familiar and hands‑on experience in effecting MAS regulatory guidelines (e.g. MAS TRM Notice & Guidelines, Outsourcing guideline, Business Continuity, etc);
• Strong understanding of network protocols, topologies, firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS).
• Possesses extensive knowledge and experience in managing firewalls, VPNs, endpoint protection, URL filtering, identity access management, privileged access management, web application firewalls (WAF), and DDoS mitigation tools.
• Should possess knowledge of Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), API security, and email antimalware solutions.
• Familiar with OS, Virtualization, and cloud technologies (preferably Azure).
• Ability to use SIEM tools to collect, analyze, and correlate security events, Knowledge of EDR tools to detect and respond to threats on endpoints.
• Proficiency in using vulnerability assessment tools to identify and mitigate vulnerabilities. Knowledge of different antivirus and anti‑malware solutions and their deployment.
• Strong experience in managing internal stakeholders, end users, and vendors.
• Effective communication, presentation, and organizational skills are criteria. Strong presentation skill.
• Good teamwork, problem‑solving and analytical skills.