Senior Associate, Security Engineer Project Advisory, Information Security

DBS Bank Limited; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a skilled technology specialist to enhance its information security services. In this long-term role, you will engage in critical projects, performing risk assessments and threat modeling, while driving the adoption of innovative technologies to bolster security. Collaborating closely with diverse teams, you will ensure robust security measures are in place, balancing user experience with security objectives. This dynamic environment offers a competitive salary and benefits, along with opportunities for professional development and recognition of your contributions. Join us to make a significant impact in safeguarding our operations and assets.

Benefits

Competitive salary

Benefits package

Professional development opportunities

Qualifications

• Experience in system security reviews and IT security audits is essential.
• Bachelor's or Master's degree in Computer Science or equivalent is required.

Responsibilities

• Conduct risk assessments and threat modeling for various projects.
• Implement information security solutions and evaluate new technologies.

Skills

System Security Reviews

IT Security Audits

Information Security Risk Assessment

Communication Skills

Hands-on Technology Exploration

Education

Bachelor’s degree in Computer Science

Master’s degree in Computer Science

Tools

Generative AI

Mobile Applications

Microservices

APIs

Public Cloud

Data Analytics Platforms

IoT

Microsoft 365

Job description

Business Function

Group Technology enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group Tech, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Job Summary

We need an experienced technology specialist to join our in-house Information Security Services team in a long-term position. The successful candidate will participate in various bank projects as an information security engineer to perform threat modeling, risk assessment and engineer information security related solutions to support the project; and second, the Information Security Specialist will evaluate and drive the use of new technologies to enhance the security strength of our organization.

We’re looking for a responsive, highly productive professional who can work with numerous business and technical employees and vendors to deliver quality project advisory services.

Responsibilities

• Perform risk assessment for business, application, and infrastructure projects
• Participate, perform threat modeling, risk assessment, and recommend information security controls/processes for key projects
• Perform information security due diligence on outsourcing service providers, including conducting site audit of their premise and facilities.
• Explain assessed risk and recommended security controls/processes to key stakeholders including senior management
• Lead and drive implementation of information security solutions
• Evaluate, recommend and drive the use of new technologies and processes that will enhance the bank’s security strength while balancing user experience and security objectives
• Respond to information security issues during each stage of a project’s lifecycle

Requirements

• Working experience in performing system security reviews or IT security audits
• Working experience in the information technology domain (Generative AI, mobile application, monolithic application, microservices, APIs, server virtualisation technology, container technology, public cloud, data analytics platform, IoT, Microsoft 365) and preferably in the information security domain
• Willingness to get hands on to explore new technologies and evaluate the controls
• Bachelor’s or Master’s degree in Computer Science or equivalent
• Professional certification such as CISA, CISM, CISSP, GIAC GISP will be an added advantage
• Able to travel on a need to basis.
• Possess good knowledge on information security risks and controls in an enterprise environment and product development environment.
• Able to perform security risk assessment and communicate residual risks clearly to stakeholders.
• Possess good knowledge in various enterprise security controls (e.g. end-point security, network security, server security, application security, data security, cloud security, access control, Microsoft 365 security).
• Good understanding of regulatory requirements (e.g. MAS Technology Risk Management Guidelines, PCI DSS, Personal Data Protection Act).
• Knowledge of tactics, techniques, and procedures associated with malicious insider activity, organized crime/fraud groups and both state and non-state sponsored threat actors.

Apply now

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognises your achievements.