Strategic Cybersecurity Governance & Compliance Leader

DBS Bank (Indonesia); Singapore; On-site; SGD 120,000 - 210,000; Full time

Job summary

DBS Asia Hub in Singapore is seeking a seasoned Information Security professional to support the delivery and implementation of cybersecurity risk management and compliance programmes. You will monitor and enforce practices aligned with regulations and report metrics on the bank’s cybersecurity posture.

You will collaborate with stakeholders to ensure compliance with cyber and information security legislations, assess risks, and drive remediation.

Qualifications

• Information security professional with five (5) or more years of experience, with a background in a financial or technology environment would be preferred.
• Experience in collation, management and reporting of security metrics such as open security vulnerabilities, penetration testing findings, security alerts and incidents, etc.
• Experience in information security framework such as ISO27000 framework.
• Experience and knowledge in regulations such as Cybersecurity Act, Cybersecurity Code of Practice, Technology Risk Management Guidelines and Personal Data Protection Act.
• Experience in the management of Critical Information Infrastructure systems for compliance against the Cybersecurity Act will be beneficial.
• Good working knowledge of enterprise security risk management methods and techniques to successfully deliver the security risk management and assessment outcome.
• Strong background on security technology solutions including IDS, IPS, anti-virus, content filtering, secure email solutions, network sniffing, log analysis, forensics, and VPN.
• Good verbal and written communication for the generation of security awareness content.
• Proactive, analytical, performance-oriented, and independent worker with strong organization skills, and effectiveness to track and follow up on the assigned projects.

Responsibilities

• Assist in the Bank’s cybersecurity program, including cybersecuity policies, regulatory audits, compliance management, metrics, risk and performance indicators, and reporting to senior management;
• Track and monitor new security regulatory guidelines, and assess the compliance of and impact to the Bank’s security policy architecture
• Work with regional information security services teams in the core markets to monitor new cybersecurity legislation and/ or regulation and assess the impact against the Bank’s security policy architecture
• Develop, review and update information security policies and standards to comply against regulatory requirements
• Conduct cybersecurity risk assessments by identifying, analyzing, evaluating and treating cybersecurity risks to an acceptable level within the Bank
• Timely coordination and completion of the Bank’s Risk and Compliance program in the identification and assessment of risk
• Monitor cybersecurity risks, map risk profiles and manage the risk register, as well as enhance Key Risk Indicators for reporting to second line of defense and risk management committees
• Continuously evaluate cybersecurity controls to ensure their effectiveness, compliance and adherence to policies and standards, while driving remediation efforts
• Engage Line of Business Technology units to conduct annual cybersecurity risk assessment for key bank systems against regulatory requirements
• Ensure timely implementation of corporate operational risk policies and standards within the Unit and assist operations teams to identify, report and address any gaps
• Assess the security deviations and risk acceptances raised by Business Units / Support Units
• Engage and liaise with auditors and the information security services teams for cybersecurity related audits.

Skills

Information security experience

Security metrics reporting

ISO27000 framework

Regulatory knowledge

CII management

Enterprise risk management

Security tech stack

Communication skills

Self-motivation

Job description

DBS Asia Hub in Singapore is seeking a seasoned Information Security professional to support the delivery and implementation of cybersecurity risk management and compliance programmes. You will monitor and enforce practices aligned with regulations and report metrics on the bank’s cybersecurity posture.

You will collaborate with stakeholders to ensure compliance with cyber and information security legislations, assess risks, and drive remediation.