Senior GRC & Application Security Engineer

Monetary Authority of Singapore (MAS); Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

A leading financial institution in Singapore is seeking a Governance Risk and Compliance Specialist & Application Security Engineer. This role is crucial in developing a robust culture of cybersecurity risk management and governance. The ideal candidate will have over 5 years of experience in ICT cybersecurity, data security, and audit management. Responsibilities include establishing ICT policies, integrating security practices into development, and mitigating software vulnerabilities. This position offers an opportunity to significantly impact ICT risk management across the organization.

Benefits

Professional development opportunities

Collaborative work environment

Qualifications

• At least 5 years relevant experience in ICT cybersecurity, data security, audit management.
• Experience in performing penetration testing and secure code review.
• Proven experience in secure coding practices and vulnerability assessments.

Responsibilities

• Develop and promote a culture of technology risk governance and management.
• Provide subject matter expertise on cybersecurity requirements.
• Review and establish ICT policies and process controls.

Skills

ICT cybersecurity

Data security

Audit management

Governance

Risk compliance management

Secure coding practices

Problem-solving skills

Analytical skills

Education

Relevant certifications in IT governance, IT audit, cyber or data security (e.g. CISSP, CISM, CISA)

Tools

Web Application Scanning Tools

JIRA

Job description

A leading financial institution in Singapore is seeking a Governance Risk and Compliance Specialist & Application Security Engineer. This role is crucial in developing a robust culture of cybersecurity risk management and governance. The ideal candidate will have over 5 years of experience in ICT cybersecurity, data security, and audit management. Responsibilities include establishing ICT policies, integrating security practices into development, and mitigating software vulnerabilities. This position offers an opportunity to significantly impact ICT risk management across the organization.