Senior Manager - Technical Risk Assessment (Cybersecurity Office)

Synapxe; Singapore; On-site; SGD 60,000 - 80,000; Full time

Job summary

A leading IT company in Singapore is seeking a cybersecurity consultant to guide projects in adherence to IT security policies and relevant legal frameworks. Responsibilities include conducting security risk assessments, advising on vulnerability assessments, and ensuring compliance throughout the project lifecycle. The ideal candidate will have experience with cybersecurity laws like the PDPA or Cybersecurity Act, and possess strong risk management skills.

Qualifications

• Experience with cybersecurity policies and legal frameworks such as PDPA or Cybersecurity Act.
• Proficiency in security risk management and vulnerability assessments.
• Strong knowledge in conducting independent security assessments.

Responsibilities

• Ensure projects comply with IT security policies and relevant frameworks.
• Perform security risk management and risk assessments.
• Consult on vulnerability assessments and penetration testing.

Job description

• Provide guidance to Business Services Group (BSG) in ensuring that projects/systems comply with Company’s IT security policies and the relevant legal and regulatory frameworks (such as PDPA or Cybersecurity Act) throughout the projects/systems lifecycle
• Perform security risk management, including identification, assessment and provide treatment of security risks associated with systems handled by Business Services Group. Risk assessment must be performed in accordance with the Company’s cybersecurity risk management framework
• Provide guidance to Business Services Group related to vulnerability assessments, source code review and penetration testing so that remediation actions can be undertaken by Business Services Group within the agreed timelines
• Provide security consulting and advisory to Business Services Group
• Review RFP proposal compliance with security requirements
• Review architecture design developed by Enterprise/Solution/Security Architect
• Perform cybersecurity assurance activities across the different stages of SDLC
• Evaluate risks related to third-party vendors, products and identify mitigating measures
• Perform independent assessments of the technical security controls implemented within the projects/systems to determine the overall effectiveness of the controls
• Review and propose improvements to IT security policies, framework, standards, procedures and best practices