Service Owner, IT Security

HOYA HOLDINGS ASIA PACIFIC PTE LTD; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

A leading Asia-Pacific firm in Singapore is seeking a Service Owner for Security to manage security-related IT services. The role involves developing service strategies, ensuring compliance, and improving service quality. Ideal candidates have a degree in Cybersecurity, relevant certifications, and 5-8 years of experience in IT security. This role offers the chance to lead significant security initiatives.

Qualifications

• 5-8 years of experience in IT security or service management roles.
• Proven track record of successfully managing and owning security services.
• Strong understanding of service management frameworks and best practices.

Responsibilities

• Develop and communicate security service strategy.
• Oversee the day-to-day delivery of security services.
• Act as the primary point of contact and accountable owner for security services.
• Ensure compliance with industry regulations.

Skills

IT security management

Service management

Stakeholder engagement

Incident management

Education

Bachelor’s degree in Cybersecurity, Information Technology, or related field

Certifications such as CISSP, CISM, CISA, ITIL

Job description

The Position

The Service Owner for Security is responsible for the overall management and ownership of security-related IT services within the organization. This role plays a pivotal role in ensuring that security services meet the needs and expectations of their users, align with business objectives, and deliver value to the organization. The Service Owner defines the security service strategy, manages service design and delivery, and acts as the primary point of contact for all security service-related matters.

Internal Relationships:

Cross-functional IT Teams, service desk, end users: Collaborate on security service design, development, delivery, and operations.

External Relationships:

• Service Providers and Vendors: Collaborate for security service delivery and improvement.
• Industry Associations: Stay informed on security service trends and best practices.

Major Responsibilities

Service Strategy and Planning

• Develop and communicate a clear security service strategy, including objectives, scope, and goals.
• Align the security service strategy with the organization's business and IT objectives.

Service Design and Development

• Define the security service portfolio, including service offerings, service levels, and service catalog items.
• Collaborate with stakeholders to design and develop security services, ensuring they meet user needs and quality standards.

Service Delivery and Operations

• Oversee the day-to-day delivery and operation of security services.
• Monitor security service performance, availability, and reliability, taking proactive measures to ensure continuous improvement.

Service Ownership and Accountability

• Act as the primary point of contact and accountable owner for security services.
• Define and manage security service-related policies, standards, and procedures.

Service Governance and Compliance

• Ensure that security services comply with relevant industry regulations and internal policies.
• Manage security service risks and compliance requirements.

Stakeholder Engagement

• Collaborate with internal and external stakeholders, including service providers and vendors.
• Gather and prioritize user feedback and requirements to enhance security services.

Service Improvement

• Continuously identify opportunities for security service improvement and optimization.
• Drive security service enhancements based on feedback and performance analysis.

Incident Management

• Own the incident resolution for any security service issues, providing resolution or allocating it to relevant team members.

Financial Management

• Manage the budget and financial aspects of security services, including cost optimization and resource allocation.

Key Deliverables

Quantitative KPIs:

• Percentage adherence to security service uptime and availability SLAs.
• Percentage adherence to SLAs for resolution of security incidents.
• NPS for security services from end users.

Qualitative KPIs:

• Effectiveness in implementing initiatives to improve the quality of security services.

Qualifications

Education/Training Qualifications:

• Bachelor’s degree in Cybersecurity, Information Technology, or related field
• Certifications such as CISSP, CISM, CISA, ITIL, or equivalent are highly desirable

Experience:

• 5-8 years of experience in IT security or service management roles.
• Proven track record of successfully managing and owning security services.
• Strong understanding of service management frameworks and best practices.