Security Governance and Assurance Engineer

NETS; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

NETS Group in Singapore, a leading payments services group, seeks an experienced Information Security professional to lead policy development, risk assessment and governance across the IS program.

You will enforce policies, collaborate with stakeholders, support audits and regulatory requests, and drive metrics such as KRIs, vulnerability management and incident response. The role requires strong communication and the ability to work independently in a fast-paced payments environment.

Qualifications

• Degree in Computer Science, Engineering or related discipline.
• 6+ years in information security including policy development, risk assessment and governance.
• Experience with ISO27000, NIST, Cyber Hygiene and PDPA.
• Ability to work independently and in a team.

Responsibilities

• Manage and enforce IS policies, processes and procedures.
• Execute policies to support cyber risk process and control.
• Collaborate with stakeholders to streamline cyber risk management.
• Review regulator notices to assess risk and close gaps.
• Prepare data for risk analysis and reporting.
• Support IS audits, regulatory inspections, and risk/compliance activities.
• Review audit findings and verify remediation actions.
• Support audit lifecycle from kickoff to closure.
• Continue to innovate and automate as required.

Skills

Security policy development

Risk assessment

Compliance monitoring

Governance

Cyber risk management metrics

Strong communication

Education

Degree in Computer Science, Engineering or related disciplines

Job description

The NETS Group is a leading payments services group, enabling digital payments for merchants, consumers and banks across the entire payments value chain.

The Group operates Singapore’s national debit scheme enabling customers of DBS Bank/POSB, HSBC, Maybank, OCBC Bank, Standard Chartered Bank and UOB to make payments using their ATM cards or mobile devices at more than 130,000 acceptance points in the country as well as online payments.

Key Responsibilities

• Responsible for the management and enforcement of IS related policies, processes and procedures.
• Execute policies, processes and procedures to facilitate effective Cyber related-risk Process and Control arising from Audit Findings or Process improvement maturity
• Partner and work with internal stakeholders to review, identify, streamline and implement process improvements with regards to Cyber risk management
• Reference to regulator’s notices, circulares and guidelines (such as, TRM, Cyber Hygiene) to assess risk and gaps, and work with Line 2 and Tech to improve policies and processes to mitigate risks, minimize their impact to operations
• Prepare and provide data for risk analysis and reporting.
• Communicate and provide guidance of new IS policies and standards to relevant stakeholders.
• Support IS related audits, regulatory inspections, Risk and Compliance activities and providing support to business audits that have IS involvement.
• Review the audit findings with key stakeholders to determine audit findings root cause, formulate action plans accordingly and verify remedial solutions for closure
• Support audit lifecycle from start to end (eg kick off meeting, RFI, fieldwork, reporting and closure of audit findings).
• Ability to innovate and automate as required

Requirements

• Degree in Computer Science, Engineering or any other related disciplines with at least 6 years of progressive experience in Information security, including experience in security policy development, risk assessment, compliance implementation & monitoring and governance
• Good working knowledge of enterprise security risk management methods and techniques to successfully deliver the security risk management and assessment outcome.
• Prior experience in implementing a program which includes the collation, management and reporting of security metrics (KRI) such as vulnerability management, open software security vulnerabilities, penetration testing findings, security alerts and incidents
• Experienced in information security frameworks including ISO27000 standard, NIST framework and regulations such as Cyber Hygiene Notice, Technology Risk Management Guidelines and Personal Data Protection Act.
• Ability to work in a team environment and work independently with minimal supervision and produce results that meet standards of quality, timeliness and acceptability
• Willingness to deep-dive and learn about the Information Security function within the payments domain
• Strong writing, communication and inter‐personal skills

Network for Electronic Transfers (Singapore) Pte Ltd.