IT SECURITY MANAGER

Singapore Deposit Insurance Corporation (SDIC) administers the Deposit Insurance Fund for the protection of insured depositors of full banks and finance companies in Singapore, and the Policy Owners’ Protection Fund for the protection of policy owners of insured policies of direct life and general insurers in Singapore. SDIC is looking for a talented individual to fill the following position:-

IT SECURITY MANAGER

Key Responsibilities:

· Develop and update IT security policies and procedures in line with new regulatory requirements

· Identify IT security enhancements and work with third party suppliers to design and implement IT security projects and perform various tasks in the implementation life-cycle such as preparation of system test pack, execution of system testing and implementation activities

· Manage IT systems security, e.g. user access management and access log monitoring as well as review monitoring reports submitted by service providers

· Manage IT security assessments e.g. vulnerability assessments and penetration tests

· Manage service providers of IT systems and networks as well as ensure compliance with IT security policies and conformance to service level agreements

· Monitor the organization’s exposure to IT security threats and monitor IT security performance as well as analyze the current security status

· Educate and train SDIC staff including third party service providers on IT security policies

· Enforce IT security policies and monitor compliance

· Manage IT security incidents and recommend effective solutions

· Managing end points security and Managing privilege IDs using cyberArk

· Assist the Head Operations as the Data Protection Officer on PDPA matters e.g. develop policies on handling personal data that are in compliance with the PDPA based on the organization’s needs and alert the organization on any risks that might arise with regards to personal data

Requirements:

· University graduate in Computer Science, Information Technology, Business IT or Information Systems.

· Minimum 5 to 6 years of relevant working experience in IT system auditing or IT security controls and policy formulation and implementation as well as knowledge of IT infrastructure systems

· Good experience in areas related to IT security with professional certification(s) in CISSP, CISM or CISA

· In-depth understanding of ISO 27001 standards and MAS Technology Risk Management Guidelines as well as experience in implementation of the standards

· Related IT security experience in the banking or insurance industry would be an advantage

· Understanding of IT infrastructure systems

· Able to work independently with minimal supervision

· Good written and verbal communication skills

· Good analytical skills and detailed worker