The NETS Group is a leading payments services group, enabling digital payments for merchants, consumers and banks across the entire payments value chain.
The Group operates Singapore’s national debit scheme enabling customers of DBS Bank/POSB, HSBC, Maybank, OCBC Bank, Standard Chartered Bank and UOB to make payments using their ATM cards or mobile devices at more than 130,000 acceptance points in the country as well as online payments.
Position Summary
The Lead - Security Engineering, plays a critical role in designing, implementing, and managing critical information security solutions that safeguard systems and data.
The ideal candidate will work closely with Head of Security Engineering, Security Operations, Technology, Governance, Risk & Compliance, TPRM and Legal.
Key Responsibilities
- Architect, design, and implement Information Security (IS) tools in alignment with NETS security requirements, regulatory obligations, and industry standards (including but not limited to NIST and ISO 27001).
- Drive solution approvals by presenting architectures and designs at governance and approval forums, collaborating with key stakeholders to secure endorsement.
- Manage and maintain IS platforms to ensure optimal performance, effective configuration for control execution, and full utilization of capabilities and features.
- Deliver end-to-end platform management services, including configuration, change, incident, and problem management in accordance with defined SLAs.
- Support operational excellence by enabling and overseeing critical activities such as privileged access management, vulnerability management, KRI reporting, audit coordination, compliance initiatives, and service request fulfilment.
- Monitor and track operational performance to ensure services delivered by the Security Engineering function consistently meet high-quality standards and SLA commitments.
- Ensure effective implementation and continuous monitoring of IS tools, proactively identifying risks and driving remediation in alignment with enterprise risk management frameworks.
- Establish and deliver security engineering metrics and dashboards, providing clear visibility into control effectiveness, platform health, and overall risk posture to senior management.
- Drive continuous improvement initiatives by embedding automation and AI-driven capabilities to enhance efficiency, scalability, and operational maturity.
- Provide security oversight in decision-making forums, reviewing architectures and solutions to ensure compliance with NETS security policies, regulatory requirements, and industry best practices.
- Lead, mentor, and develop the Security Engineering team, fostering a high-performance culture and strengthening capabilities aligned with evolving security and business needs.
- Manage relationships with security vendors and partners, ensuring optimal tool utilization, service quality, and alignment with contractual and security requirements.
- Support budget planning and cost optimization initiatives for security platforms, ensuring efficient and effective resource utilization.
- Provide leadership support during major security incidents, ensuring timely response, resolution, and implementation of post-incident improvements.
- Contribute to the definition and execution of the Security Engineering strategy and roadmap, aligned with organizational objectives and regulatory expectations.
- Develop and maintain security engineering standards, procedures, and documentation, ensuring consistency, clarity, and compliance.
Requirements
- Minimum 15 years of experience in security, covering domains such as cybersecurity, network security, information security, and data security within complex enterprise environments.
- Extensive hands-on experience with security technologies, including but not limited to PAM SIEM, SOAR, EDR/XDR, NDR, IPS/IDS, DLP, WAF, and Vulnerability Management tools.
- Proven experience in implementing and managing information security programs, including frameworks such as ISMS (ISO 27001) and compliance standards such as SOC 2 Type II.
- Strong understanding of security frameworks, risk management, and regulatory compliance, particularly within a banking or highly regulated environment.
- Demonstrated ability to engage and influence senior stakeholders, supported by excellent communication, presentation, and documentation skills.
- Strong leadership and people management capabilities, with a track record of driving high-performing teams, ensuring operational excellence, and delivering services aligned with SLAs.
- Experience in managing security operations and engineering functions, including incident response support, risk remediation, and continuous service improvement.
- Familiarity with automation and AI-driven security capabilities to enhance operational efficiency and maturity.
- Experience in vendor and third-party management, including oversight of security tools, service providers, and associated contractual obligations.
- Relevant technical, managerial, and industry-recognized certifications, such as CISSP, CISM, CISA, CRISC, or equivalent.
Network for Electronic Transfers (Singapore) Pte Ltd.