Responsibilities / Duties:

Reporting to the IT Director, this role will be involved in ensuring best IT security and governance practices across the organisation infrastructure and application. 

An important role in proactively assessing the IT landscape to ensure availability, integrity and security of IT systems are maintained. 

The key responsibilities include development of information security program/plan, security of application systems and its compliance to internal/external regulations, identity management, management of effective and efficient security monitoring, participating in IT audits. Chairing IT Risk Management Committee, establish process for identification of technology risks and management of IT Risk.

Degree qualified, with strong knowledge in IT security concepts. Strong background in infrastructure operations, network administration and financial applications. 

Possess strong technical knowledge in security scanning, security monitoring, vulnerability testing, penetration testing, AD, proxy, web service security, network protocols, firewall technologies, access control and encryption techniques.

Requirements / Qualifications:

• Minimum of 8 years experience in Information Security
• Degree in Computer Science
• CISSP certification and MAS TRM experience are highly preferred
• Confident, articulate and professional speaking abilities with regulators
• Leading tasks and multiple teams of information security resources
• Knowledge of network and computer security.
• Application security, database security, and network security
• A practical knowledge and understanding of risks assessment, mitigation controls, maintenance of IT risk register.
• Ability to assess and weigh current and evolving security threats in an operational environment.
• Knowledge of emerging standard and BCM regulations requirements.
• Knowledge and ability to provide recommend solutions to comply with below guidelines issued by MAS:
• Technology Risk Management
• Business Continuity Management
• Outsourcing Risk Management
• Knowledge of establishing security baselines for IT systems
• Excellent attention to detail.
• Excellent planning and organizational skills.
• Excellent time management skills.
• Excellent written and verbal communication skills