VP, Security Governance & Assurance

Network For Electronic Transfers (S); Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

Network for Electronic Transfers (Singapore) Pte Ltd. seeks an experienced Information Security professional to strengthen governance, risk management, and audit processes across the organization.

You will lead policy enforcement, policy reviews, and regulatory compliance activities to protect digital payments infrastructure. The role requires deep experience in security frameworks (NIST, MAS TRM, ISO 27001), strong communication skills, and the ability to coordinate with regulators, auditors,

Qualifications

• Degree in Computer Science, Engineering or related disciplines.
• 10+ years of information security experience, including policy development, risk assessment, and governance.
• Experience with regulatory requirements and industry practices (e.g. NIST, MAS TRM, ISO 27001).
• Ability to work in a team and independently, with strong writing and communication skills.
• Strong analytical and problem-solving skills.

Responsibilities

• Support development, review, and enforcement of information security policies, standards, and procedures.
• Monitor regulatory compliance and perform risk assessments and gap analyses.
• Coordinate audits, track remediation, and report to management.
• Liaise between Information Security, Risk, Compliance, auditors, and regulators.
• Prepare governance reports and metrics (KRI).

Skills

Information security

Security governance

Regulatory compliance

Risk assessment

Audit management

Education

Degree in Computer Science or Engineering

Job description

Select how often (in days) to receive an alert:

Company: Network For Electronic Transfers (S)

The NETS Group is a leading payments services group, enabling digital payments for merchants, consumers and banks across the entire payments value chain.

The Group operates Singapore’s national debit scheme enabling customers of DBS Bank/POSB, HSBC, Maybank, OCBC Bank, Standard Chartered Bank and UOB to make payments using their ATM cards or mobile devices at more than 130,000 acceptance points in the country as well as online payments.

Key Responsibilities

Information Security Governance & Compliance

• Support the development, review, and enforcement of Information Security policies, standards, and procedures.
• Monitor compliance with regulatory requirements and industry standards (e.g. MAS TRM, Cyber Hygiene, ISO 27001, PCI DSS).
• Conduct security risk assessments, control reviews, and gap assessments, and track remediation activities.
• Provide cybersecurity governance and compliance advisory to stakeholders.
• Prepare security governance reports, KRI metrics, and updates for management and governance committees.
• Drive security awareness and promote a strong security culture across the organization.

Information Security Risk & Audit Management

• Manage Information Security audit activities, including internal, external, regulatory, and certification audits.
• Coordinate audit requests, review findings, facilitate remediation plans, and track issues to closure.
• Support security risk management activities, including risk assessments, risk registers, and exception management.
• Act as a liaison between Information Security, Risk, Compliance, auditors, and regulators.

Requirements

• Degree in Computer Science, Engineering or any other related disciplines with at least 10 years of experience in Information security, including experience in security policy development, risk assessment, compliance implementation & monitoring and governance function (preferably from financial/banking/payment industry).
• Good working knowledge of enterprise security risk management methods and techniques to successfully deliver the security risk management and assessment outcome.
• Prior experience in implementing a program which includes the collation, management and reporting of security metrics (KRI) such as vulnerability management, open software security vulnerabilities, penetration testing findings, security alerts and incidents
• Strong knowledge of regulatory requirements and industry practices (e.g. NIST framework, MAS TRM Guidelines, MAS Cyber Hygiene, ISO 27001 standard)
• Ability to work in a team environment and work independently and produce results that meet standards of quality, timeliness and acceptability
• Strong writing, communication and inter‐personal skills
• Attention to details, with the ability to thoroughly and accurately review IT policies, process and audit responses.
• Excellent problem-solving skills and ability to prioritize and manage multiple tasks

Network for Electronic Transfers (Singapore) Pte Ltd.