Senior IT Compliance & Cybersecurity Analyst - Financial Service

Monee; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

SeaMoney seeks a proactive IT Compliance & Risk professional to establish and oversee cybersecurity and IT risk policies, governance processes, and controls to mitigate regulatory and operational losses. You will support compliance with internal policies and external regulations while partnering with business, operations, engineering, and security teams.

Applicants should have a Bachelors degree or higher and at least 3 years in IT compliance, risk, information security, or IT auditing, with

Qualifications

• Bachelors degree or above in computer science, technology, finance, accountancy or related disciplines.
• At least 3 years of full time working experience in IT Compliance, IT Risk, Information Security, or IT Auditing.
• Knowledge of information security standards (ISO 27001, PCI, NIST, CIS)
• For IT Risk applicants, knowledge and expertise of industry Information Security Standards and relevant certifications (CISA, CISSP or equivalent).
• Self-driven, positive attitude and team player striving for team success.

Responsibilities

• Establish and oversee the implementation of cyber security and information technology risk policies, technology and tools, and governance processes to create solutions for minimizing losses from cyber security issues, failed internal processes, inadequate controls, emerging risks and regulatory breaches
• Support security and technology compliance to internal policies, processes, and controls, as well as compliance to external regulations while proactively evaluating existing control environment for enhancement opportunities
• Work effectively with business, operations, engineering, security and infrastructure teams on evaluating, recommending, delivering and managing security/ IT solutions across Cyber and IT domains
• Manage audit/ regulatory reviews including coordination, communications, and required actions with internal auditors, external auditors, regulators and internal stakeholders as appropriate

Skills

IT risk management

Cybersecurity

Team collaboration

Self-driven

Education

Bachelors degree or above in computer science, technology, finance, accountancy or related disciplines

Tools

ISO 27001

PCI DSS

NIST

CIS

Job description

About The Team

The IT Compliance & Risk unit within SeaMoney is responsible for managing the Information Technology and Cyber Security risk profiles, including risk identification, management and mitigation across the group (including overseas countries).

Job Description

• Establish and oversee the implementation of cyber security and information technology risk policies, technology and tools, and governance processes to create solutions for minimizing losses from cyber security issues, failed internal processes, inadequate controls, emerging risks and regulatory breaches
• Support security and technology compliance to internal policies, processes, and controls, as well as compliance to external regulations while proactively evaluating existing control environment for enhancement opportunities
• Work effectively with business, operations, engineering, security and infrastructure teams on evaluating, recommending, delivering and managing security/ IT solutions across Cyber and IT domains
• Manage audit/ regulatory reviews including coordination, communications, and required actions with internal auditors, external auditors, regulators and internal stakeholders as appropriate

Requirements

• Bachelor's degree or above in computer science, technology, finance, accountancy or related disciplines
• At least 3 years of full time working experience in IT Compliance, IT Risk, Information Security, or IT Auditing
• Strong interest / experience in the following technology categories:
  • Information Security
  • Infrastructure Security
  • Application and Data Security
  • Cloud Security
  • CI/ CD, containerization security
• Possess solid understanding on banking-related applications and technologies in terms of products and supporting services, system and business operation procedures, risk management, regulatory compliance, etc.
• Knowledge of information security standards (i.e. ISO 27001, PCI, NIST, CIS)
• For IT Risk applicants, knowledge and expertise of industry Information Security Standards and relevant certifications (CISA, CISSP or equivalent);
• Self-driven, positive attitude and team player striving for team success
• Resourceful and able to adapt in a dynamic environment