Head of Security Management

Manager InfoSec

Cyber Security Specialist

Job Purpose:Manage and lead a team of managers, technical and support staffs of IT Security Department in order to secure and control the systems, networks, applications and databases within The Banking Group of companies.Responsibilities:Oversee Group IIT Security Department for IT systems, networks, applications and databasesDevelop and implement IT Security Strategy plan for Banking Group of companiesPropose and seek approval for IT Security budget (Capex and Opex)Develop, maintain and implement IT Security Policy for Banking Group of companiesStrategize and reorganize IT Security Department in order to establish a proper process of “makers” and “checkers”.Recommend and implement new IT Security initiative to secure corporate and customer sensitive informationFacilitate IT Risk to ensure effective IT risk identification, mitigation and monitoringParticipate in IT projects to provide advice on security and compliance requirements.Manage compliance reviews of IT functions to ensure the state of compliance with legal and regulatory requirements, internal policies and standards.Manage the network security review and penetration test exerciseEnsure manuals are timely reviewed and safe-keeping of all policies and proceduresEnsure IT audit reports from internal and external auditors are responded and IT audit issues are tracked and rectified within the agreed timeframeEnsure compliance to mandates set out by electronic partners (VISA, Mastercard, AMEX and MEPS)Evaluate and implement proper security tools (SIEM, IDMS, DLP, etc) in order to mitigate the weaknesses in manual security controls as well as to promote an effective and efficient administrationOversees security technology areas like:FirewallsInternet surfing proxy serversIntrusion detectionAdvanced Persistency ThreatsAnti DDOS solutionsInternet Fraud SolutionsData Loss Protection solutionsDual control of ID and passwordsEnterprise password vaultsEscalation of user privilegesID managementSingle sign on Managerial (team/group responsibilities)Manage & provide leadership to a team of managers, technical & support staffsDecision maker at department level for all IT Security related mattersProvide guidance to IT Staff & Business User in complying to regulatory & audit requirementOrganizational (organizational responsibilities) including Strategic Cost Management and Financial GoalsRecommend & implement security architecture for banking Group of companiesSupport group wide IT Security requirement (Singapore, Vietnam, Hong Kong, Insurance & Investment Banking)Update security statuses to Senior Management at IT Security/Risk MeetingRequirements:Education/Qualification - Degree/Higher Diploma in Computer Science/ITExperience/Requirements - More than 10 years of supervisory and managerial experience in IT Security DepartmentSpecial Skills Interpersonal Skill , Leadership Skill & Time and Resource Management SkillCertification/Licensing Requirements:Certified CRISC (Certified Risk Information Systems Control) by ISACACertified CHFI (Certified Hacking Forensic Investigator) by EC-CouncilCertified ECSA/LPT (Certified Security Analyst) by EC-CouncilCertified CEH (Certified Ethical Hacker) by EC-CouncilCertified CISSP (Certified Information Systems Security Professional) by (ISC)2Certified CISA (Certified Information System Auditor) by ISACACertified CISM (Certified Information Security Manager) by ISACA

The Role:Design, evolve and support execution/adoption of modern InfoSec strategies and roadmaps for the secure use of Information Technology (IT) within the various technological domains of T&PE and EAD platforms.Establish and apply information security guardrails and blueprints and enable their application by other teams.Support the adoption of the new patterns in strict alignment with the Head of InfoSec T&PE and EAD.Responsibilities:Guide around the optimal security architecture of Information Technology (IT) solutions developed, run and supported by the T&PE and EAD. Convert customer security requirements (both technical and business process related) into conceptual blueprints, following industry standards, frameworks and considering risk vs. reward, budget constraints and potential integration or operational challenges.Assess information security risks affecting the technology landscape supporting the T&PE and EAD. Propose and support the implementation of short/mid/long term risk reduction initiatives and projects aimed at enabling secure development of "industry 4.0" digitalization use cases and increasing resilience against the continuously evolving cyber threat landscape.Formalize (e.g., in the form of diagrams, guardrails, standard operating procedures, etc.) relevant information security principles and requirements that govern how to adequately protect the confidentiality, integrity and availability of T&PE and EAD infrastructure.Contribute, in close collaboration with other Information Security teams, to the evolution of the overall information security maturity of T&PE and EAD, e.g., by coordinating the research, evaluation, recommendation and implementation of new or updated security technology solutions aimed at reducing ever increasing cyber risk.Provide expertise to 100+ colleagues in Information Security and other IT functions on matters such as applicable policies, standards, procedures and guidelines, efficient use of tools and technologies related to the T&PE ans EAD. Liaise with the InfoSec Architecture and IT Architecture community to ensure that T&PE and EAD security principles are effectively and efficiently embedded in new initiatives or experiments.Requirements:University Master’s Degree (Computer Sciences, Information Systems, Engineering, Business Administration or equivalent)Professional certifications related to Information Security, e.g. CISSP, SANS GIAC, Ecouncil CEH/CIHMinimum 5 years of experience in an IT Security position, preferably in the architecture or engineering space Proven track record in securing infrastructureDemonstrated experience with the design and implementation of secure technologies, ideally at large companies.Familiarity with cloud computing architectures (e.g., IaaS, PaaS, FaaS, SaaS) and their corresponding characteristics in terms of information securityConsiderable technical writing proficiency, oral presentation skills, problem solving and decision-making skills.Highly collaborative mindset, with ability to build relationships with colleagues and manage partners from different cultures and seniority levels throughout the organization.Excellent written and oral presentation in English, abstract thinking, problem solving, and decision-making.Quick learner with a pragmatic, analytical and autonomous mindset

Responsibilities:Monitor security incidents and conduct investigations.Implement cybersecurity policies and procedures.Conduct vulnerability assessments and risk analysis.Provide training on security awareness.Ensure protection of critical information and infrastructureProvide Application Security, Cloud Security, Database, Network Security. Working with cybersecurity frameworks and standards such as NIST Cybersecurity Framework (NIST CSF), ISO, 800-53/171…etc to assesses the maturity of an organization’s Cybersecurity capabilities.Provide project consulting, evaluating proposed solutions including vendor products & services for information security architecture, risks and recommending alternative solutions or compensating controls.Perform security architecture / application design reviews of projects, products and solutions and ensures they aligned in accordance with security policies and best practices to meet corporate security requirements.Identify gaps in the current projects security design, cybersecurity reference architecture, architecture design patterns and recommend security enhancements.Define new security architecture patterns for advanced technologies such as IoT, AI, Metaverse…etc.Requirements:You must hold a Bachelor Degree in Computer Science, Cybersecurity or equivalate from a recognized and approved program. Required expert level certificates CISSP, CCIE and CISM. You should have a minimum 12 years’ experience in interrelated field of Info. Technology, including knowledge in Cybersecurity. You must have Certified Info Sys Security Professional (CISSP), Certified Information Security Manager (CISM) and CCIE.Experience in cloud security, workloads, cabernet, web3, blockchain, network Security, application Security and APIs integration is required.Experience in managing the security of cybersecurity cloud platforms and hybrid cloud environments is also a requirement.Experience in developing zero trust security roadmap, capability, architectures and standards should be demonstrated.You should possess a solid Understanding of emerging security threats and designs security reference architecture to mitigate threats.

Skills

Industry

Location

Jobtitle

3 cissp Jobs found

Head of Security Management

Manager InfoSec

Cyber Security Specialist

WhiteCrow
WhiteCrow is on a mission to connect companies with the best talent across the globe.

EMPLOYER

TALENT

COMPANY

Contact Us

JOBS BY SKILLS

JOBS BY FUNCTION

JOBS BY INDUSTRY

JOBS BY LOCATIONS

MODEL JOBS

JOBS BY CITY

Skills

Industry

Location

Jobtitle

3 cissp Jobs found

Head of Security Management

Manager InfoSec

Cyber Security Specialist

WhiteCrow WhiteCrow is on a mission to connect companies with the best talent across the globe.

EMPLOYER

TALENT

COMPANY

Contact Us

JOBS BY SKILLS

JOBS BY FUNCTION

JOBS BY INDUSTRY

JOBS BY LOCATIONS

MODEL JOBS

JOBS BY CITY

WhiteCrow
WhiteCrow is on a mission to connect companies with the best talent across the globe.