Senior Analyst/ Manager, IT Security Governance

Maybank Singapore; Singapore; Vor Ort; SGD 120.000 - 180.000; Vollzeit

Zusammenfassung

Maybank Singapore is seeking a senior security professional to strengthen cyber resilience and translate complex requirements into actionable controls. You will collaborate with Technology, Cyber Security, Risk, Compliance, Internal Audit and business stakeholders to keep controls effective against evolving threats.

Responsibilities include developing security standards, assessing regulatory changes, and guiding security policy, cloud security and audit activities.

Qualifikationen

• A degree in Cyber Security, Information Security, Computer Science, Information Technology or a related discipline.
• At least five years of relevant experience across areas such as security governance, security engineering, technology risk, cyber assurance, vulnerability management, cloud security, security architecture or audit and compliance.
• Experience developing or maintaining security policies, standards, hardening baselines and technical security guidance.
• Practical knowledge of security hardening, configuration compliance, control effectiveness, security exceptions and remediation planning.
• Familiarity with MAS Technology Risk Management Guidelines, NIST CSF, CIS Controls and ISO/IEC 27001.
• Strong analytical, stakeholder-management and written communication skills.
• Forward-looking mindset and confidence in using AI responsibly to improve productivity while maintaining confidentiality.

Aufgaben

• Develop, maintain and enhance IT security standards, hardening baselines, procedures and control guidance
• Assess regulatory developments, industry benchmarks, technology changes and emerging cyber threats to determine their impact on the Bank’s control environment
• Review security exceptions, compensating controls and residual risks, providing clear recommendations for approval or escalation
• Advise stakeholders on security requirements across infrastructure, applications, cloud services, networks, identity platforms and end-user technologies
• Support audits, regulatory reviews and independent security assessments, including remediation tracking
• Apply threat-informed thinking to AI-enabled attacks, cloud-native risks, identity threats, software supply-chain risks and zero-day vulnerabilities
• Use approved AI and automation tools responsibly to improve research, gap analysis, documentation, monitoring and management reporting
• Develop meaningful metrics and concise, risk-focused reports for senior management and governance committees.

Kenntnisse

Security governance

Security engineering

Technology risk

Vulnerability management

Cloud security

Audit and compliance

Stakeholder management

Written communication

AI for security

Ausbildung

Degree in Cyber Security / Information Security / CS / IT

Jobbeschreibung

Are you passionate about strengthening cyber resilience and translating complex security requirements into practical, effective controls? You will work closely with Technology, Cyber Security, Risk, Compliance, Internal Audit and business stakeholders to ensure our security controls remain effective against evolving technologies and emerging threats.

This is an opportunity to help modernise IT security governance and shape how the Bank translates policy, regulation, technology change and emerging cyber threats into controls that are practical, measurable and effective.

Responsibilities:-

• Develop, maintain and enhance IT security standards, hardening baselines, procedures and control guidance
• Assess regulatory developments, industry benchmarks, technology changes and emerging cyber threats to determine their impact on the Bank’s control environment
• Review security exceptions, compensating controls and residual risks, providing clear recommendations for approval or escalation
• Advise stakeholders on security requirements across infrastructure, applications, cloud services, networks, identity platforms and end-user technologies
• Support audits, regulatory reviews and independent security assessments, including remediation tracking
• Apply threat-informed thinking to areas such as AI-enabled attacks, cloud-native risks, identity threats, software supply-chain risks and zero-day vulnerabilities
• Use approved AI and automation tools responsibly to improve research, gap analysis, documentation, monitoring and management reporting
• Develop meaningful metrics and concise, risk-focused reports for senior management and governance committees.

Requirements:-

• A degree in Cyber Security, Information Security, Computer Science, Information Technology or a related discipline
• At least five years of relevant experience across areas such as security governance, security engineering, technology risk, cyber assurance, vulnerability management, cloud security, security architecture or audit and compliance
• Experience developing or maintaining security policies, standards, hardening baselines and technical security guidance
• Practical knowledge of security hardening, configuration compliance, control effectiveness, security exceptions and remediation planning
• Familiarity with frameworks and standards such as the MAS Technology Risk Management Guidelines, NIST Cybersecurity Framework, CIS Controls and ISO/IEC 27001
• Strong analytical, stakeholder-management and written communication skills
• A forward-looking mindset and confidence in using AI responsibly to improve productivity and quality while maintaining confidentiality and human oversight
• Professional certifications such as CISSP, CISM, CRISC, CISA, CGEIT, CCSP or Security+ would be advantageous. Candidates with less experience but strong technical aptitude, sound risk judgement and demonstrated learning agility may also be considered.

Only shortlisted candidate will be notified.