SENIOR IT APPLICATION SECURITY MANAGER

trinity consulting services pte. ltd.; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

Trinity Consulting Services Pte. Ltd. in Singapore is seeking a security risk analyst to assess risks across data security, identity and access control, cloud services, and security tools.

You will align IT security controls with Group standards, collaborate with architects and BCM teams, and contribute to the development of security procedures and risk analyses.

Responsibilities

• Analyses security risks of technologies and security tools, and assesses their impacts.
• Controls and validates IT infrastructure in line with Group IT security standards.
• Works with Group IT architects and security team to share best practices.
• Validates IT security practices for BCM testing and operations during failover.
• Models threats to services and applications as part of IT risk management.
• Supervises testing and validation of internal security controls.
• Drafts and updates IT security procedures and standards.
• Contributes to IT risk analyses for the entity.
• Creates technical POCs for emerging IT security solutions.
• Shares research to develop the Group’s cybersecurity community.

Job description

• Analyses the security risks of technologies (data security, identity and access security, cloud, etc.) and security tools and services, and assesses their impacts and makes recommendations;
• Controls and validates IT infrastructure and other reference architectures in line with Group IT security standards, and recommends changes to improve IT security and reduce IT risks where appropriate;
• Works with the Group’s technical architects and security team to share best practices around IT security;
• Works with the business continuity management (BCM) team to validate IT security practices for BCM testing and operations in the event of failover;
• Facilitates the modelling of threats to services and applications as part of identified IT risks and the management of related data;
• Supervises testing and validation of internal security controls as directed by the CISO or the internal audit team;
• Helps to draft and update IT security procedures and standards at the request of the CISO (Group or entity);
• Helps to draft or validate IT risk analysis for the entity;
• Helps to create technical POCs for emerging and innovative IT security solutions;
• Contributes to the development of the Group’s cybersecurity community by communicating and sharing technology research studies carried out.