Senior IT Security Manager

GREEN LINK DIGITAL BANK PTE. LTD.; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

A leading digital bank in Singapore seeks a seasoned IT Security Manager to oversee security incident response and manage risks. The ideal candidate will have a Bachelor’s degree and 5-10 years of experience in information security, with expertise in areas such as Application Security and Infrastructure Security. This role offers competitive remuneration and professional growth opportunities.

Qualifications

• 5-10 years of experience in the information security domain.
• Strong knowledge of information security management frameworks.
• Preferably holder of information security and audit qualifications.

Responsibilities

• Lead response to security incidents and breaches.
• Manage and track active security issues until closure.
• Conduct IT Security Awareness Training for employees.

Skills

Application Security

Infrastructure Security

Cloud Security

Cyber Security Management

Risk Management

Education

Bachelor’s degree in a relevant field

Tools

ISO 27001/27002

NIST

COBIT

Job description

About Us

Green Link Digital Bank is Singapore's inaugural wholesale digital bank focusing on supply chain finance, mainly serving MSMEs and aiming to help MSMEs grow and improve digitization.

Responsibilities

• Respond, and lead if needed, to security incidents and breaches.
• Support incident response and carry out any other tasks as assigned.
• Contribute and support the analysis of identified incidents with timely respond strategy and immediate actions to contain the threats.
• Prompt reporting and escalation of all security incidents, deviation, and risk matters.
• Manage, track and follow-up on active security issues until closure.
• Review security risk issues to identify root causes and recommend appropriate remediation.
• Conduct performance monitoring and Due Diligent Assessment of security service providers.
• Ensure, and lead if needed, all security assessments such as Penetration Testing, red teaming, cyber exercise, vulnerability assessment, baseline scanning, etc. are conducted timely.
• Review and validate Threats, Vulnerability Risk Assessment (TVRA).
• Participate and support audits and assessment.
• Identify and assess security risks impact on initiatives and projects to ensure effective security controls are established.
• Participate in Change Management Process to ensure compliancy with regulatory requirements and the Bank’s Policies.
• Maintain and update IT Security Procedures to ensure effective compliance with the Bank’s
• Policies and Standards as well as local regulatory requirements.
• Ensuring the timely review and updating of Security Threat Management Register.
• Manage and Conduct IT Security Awareness Training for employees.

Requirements

• Bachelor’s degree in Computer Science, Cyber Security, Information Systems, Information Technology, Engineering, or equivalent education.
• Minimum of 5 - 10 years of working experience of information security domain, especially in Application Security, Infrastructure Security, Cloud Security or Blockchain Security.
• Working experience in Financial Institution and/or managing security vendors are an advantage.
• Preferably to have application development or infrastructure operation background with hands-on experience of designing and reviewing application or infrastructure security.
• Strong knowledge of common information security management frameworks, such as ISO 27001/27002, ITIL, COBIT, and NIST.
• Demonstrable deep understanding of the Singapore Banking regulatory landscape and requirements.
• Preferably a holder of one or more of the following information security and audit qualifications: CISSP, CGIT, CISM, CISA, CRISC, CCSP.
• Able to multi-task and prioritize in a high-pressure environment.
• Ability to get results through collaboration and partnership with diverse teams.
Ability to work independently

By submitting your application, you have given your consent for us to collect, use and retain your data for a year as according to our prevailing data retention and PDPA policies. Should you have any enquiries on our data policy, please contact us at [e-mail].