VP, Security Governance & Assurance

NETS; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

NETS in Singapore is seeking an Information Security leader to drive governance, risk and compliance initiatives while shaping policy development and monitoring programs.

You will coordinate audits, manage KRIs and liaise with risk, compliance, auditors and regulators while promoting a strong security culture across the organization.

This role requires a decade of information security experience in financial settings and a solid understanding of NIST, MAS TRM, ISO 27001 and related standards.

Qualifications

• Degree in Computer Science, Engineering or related disciplines with at least 10 years in information security.
• Experience in security policy development, risk assessment, compliance implementation & monitoring and governance is required.
• Experience reporting on security metrics (KRI) such as vulnerability management and incident findings.
• Strong knowledge of regulatory requirements and industry practices (e.g. NIST, MAS TRM, MAS Cyber Hygiene, ISO 27001).
• Ability to work both in a team and independently to deliver quality results.

Responsibilities

• Support development, review, and enforcement of information security policies, standards, and procedures.
• Monitor regulatory compliance and industry standards (e.g. MAS TRM, ISO 27001, PCI DSS).
• Conduct security risk assessments, control reviews, and gap assessments and track remediation activities.
• Provide cybersecurity governance and compliance advisory to stakeholders.
• Prepare security governance reports and KPI metrics for management and governance committees.
• Drive security awareness and promote a strong security culture across the organization.
• Manage information security audit activities (internal, external, regulatory and certification audits).
• Coordinate audit requests, review findings, facilitate remediation plans, and track issues to closure.
• Support security risk management activities, including risk assessments, risk registers, and exception management.
• Liaise between Information Security, Risk, Compliance, auditors and regulators.

Skills

Communication skills

Writing skills

Interpersonal skills

Education

Degree in Computer Science or related

Job description

Information Security Governance & Compliance

• Support the development, review, and enforcement of Information Security policies, standards, and procedures.
• Monitor compliance with regulatory requirements and industry standards (e.g. MAS TRM, Cyber Hygiene, ISO 27001, PCI DSS).
• Conduct security risk assessments, control reviews, and gap assessments, and track remediation activities.
• Provide cybersecurity governance and compliance advisory to stakeholders.
• Prepare security governance reports, KRI metrics, and updates for management and governance committees.
• Drive security awareness and promote a strong security culture across the organization.

Information Security Risk & Audit Management

• Manage Information Security audit activities, including internal, external, regulatory, and certification audits.
• Coordinate audit requests, review findings, facilitate remediation plans, and track issues to closure.
• Support security risk management activities, including risk assessments, risk registers, and exception management.
• Act as a liaison between Information Security, Risk, Compliance, auditors, and regulators.

Requirements

• Degree in Computer Science, Engineering or any other related disciplines with at least 10 years of experience in Information security, including experience in security policy development, risk assessment, compliance implementation & monitoring and governance function (preferably from financial/banking/payment industry).
• Good working knowledge of enterprise security risk management methods and techniques to successfully deliver the security risk management and assessment outcome.
• Prior experience in implementing a program which includes the collation, management and reporting of security metrics (KRI) such as vulnerability management, open software security vulnerabilities, penetration testing findings, security alerts and incidents
• Strong knowledge of regulatory requirements and industry practices (e.g. NIST framework, MAS TRM Guidelines, MAS Cyber Hygiene, ISO 27001 standard)
• Ability to work in a team environment and work independently and produce results that meet standards of quality, timeliness and acceptability
• Strong writing, communication and inter‐personal skills
• Attention to details, with the ability to thoroughly and accurately review IT policies, process and audit responses.
• Excellent problem-solving skills and ability to prioritize and manage multiple tasks