VP, Security Governance & Assurance

Network For Electronic Transfers (S); Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Network for Electronic Transfers (Singapore) Pte Ltd. is seeking an experienced Information Security professional to lead governance, risk management and compliance across the organization. The role involves policy development, regulatory alignment, and coordinating audits with stakeholders.

You will drive security metrics, awareness, and remediation across IT security programs, ensuring robust controls and continued compliance with MAS, NIST and ISO frameworks.

Qualifications

• Degree in Computer Science, Engineering or related disciplines with at least 10 years of information security experience, including policy development, risk assessment, compliance implementation & monitoring and governance exposure (preferably from financial/banking/payments).
• Strong knowledge of enterprise security risk management methods and techniques to deliver risk outcomes.
• Experience implementing a program collecting and reporting security metrics (KRI) such as vulnerability management, open software vulnerabilities, penetration testing findings, security alerts and incidents.
• Strong knowledge of regulatory requirements and industry practices (e.g. NIST, MAS TRM Guidelines, MAS Cyber Hygiene, ISO 27001).
• Ability to work in a team and independently, delivering quality, timely results.
• Strong writing, communication and interpersonal skills.
• Attention to details, with the ability to review IT policies, processes and audit responses.
• Excellent problem-solving skills and ability to prioritize multiple tasks.

Responsibilities

• Support the development, review, and enforcement of Information Security policies, standards, and procedures.
• Monitor compliance with regulatory requirements and industry standards (e.g. MAS TRM, Cyber Hygiene, ISO 27001, PCI DSS).
• Conduct security risk assessments, control reviews, and gap assessments, and track remediation activities.
• Provide cybersecurity governance and compliance advisory to stakeholders.
• Prepare security governance reports, KRI metrics, and updates for management and governance committees.
• Drive security awareness and promote a strong security culture across the organization.
• Manage Information Security audit activities, including internal, external, regulatory, and certification audits.
• Coordinate audit requests, review findings, facilitate remediation plans, and track issues to closure.
• Support security risk management activities, including risk assessments, risk registers, and exception management.
• Act as a liaison between Information Security, Risk, Compliance, auditors, and regulators.

Skills

Security governance

Regulatory compliance

Risk assessment

Policy development

Audit management

Communication skills

Attention to detail

Problem-solving

Education

Degree in Computer Science, Engineering or related disciplines

Job description

Company: Network For Electronic Transfers (S)

The NETS Group is a leading payments services group, enabling digital payments for merchants, consumers and banks across the entire payments value chain.

The Group operates Singapore’s national debit scheme enabling customers of DBS Bank/POSB, HSBC, Maybank, OCBC Bank, Standard Chartered Bank and UOB to make payments using their ATM cards or mobile devices at more than 130,000 acceptance points in the country as well as online payments.

Key Responsibilities

Information Security Governance & Compliance

• Support the development, review, and enforcement of Information Security policies, standards, and procedures.
• Monitor compliance with regulatory requirements and industry standards (e.g. MAS TRM, Cyber Hygiene, ISO 27001, PCI DSS).
• Conduct security risk assessments, control reviews, and gap assessments, and track remediation activities.
• Provide cybersecurity governance and compliance advisory to stakeholders.
• Prepare security governance reports, KRI metrics, and updates for management and governance committees.
• Drive security awareness and promote a strong security culture across the organization.

Information Security Risk & Audit Management

• Manage Information Security audit activities, including internal, external, regulatory, and certification audits.
• Coordinate audit requests, review findings, facilitate remediation plans, and track issues to closure.
• Support security risk management activities, including risk assessments, risk registers, and exception management.
• Act as a liaison between Information Security, Risk, Compliance, auditors, and regulators.

Requirements

• Degree in Computer Science, Engineering or any other related disciplines with at least 10 years of experience in Information security, including experience in security policy development, risk assessment, compliance implementation & monitoring and governance function (preferably from financial/banking/payment industry).
• Good working knowledge of enterprise security risk management methods and techniques to successfully deliver the security risk management and assessment outcome.
• Prior experience in implementing a program which includes the collation, management and reporting of security metrics (KRI) such as vulnerability management, open software security vulnerabilities, penetration testing findings, security alerts and incidents
• Strong knowledge of regulatory requirements and industry practices (e.g. NIST framework, MAS TRM Guidelines, MAS Cyber Hygiene, ISO 27001 standard)
• Ability to work in a team environment and work independently and produce results that meet standards of quality, timeliness and acceptability
• Strong writing, communication and inter‐personal skills
• Attention to details, with the ability to thoroughly and accurately review IT policies, process and audit responses.
• Excellent problem-solving skills and ability to prioritize and manage multiple tasks

Network for Electronic Transfers (Singapore) Pte Ltd.