VP, Security Governance & Assurance

Key Responsibilities

• Information Security Governance & Compliance

  • Support the development, review, and enforcement of Information Security policies, standards, and procedures.
  • Monitor compliance with regulatory requirements and industry standards (e.g. MAS TRM, Cyber Hygiene, ISO 27001, PCI DSS).
  • Conduct security risk assessments, control reviews, and gap assessments, and track remediation activities.
  • Provide cybersecurity governance and compliance advisory to stakeholders.
  • Prepare security governance reports, KRI metrics, and updates for management and governance committees.
  • Drive security awareness and promote a strong security culture across the organization.

  Information Security Risk & Audit Management

  • Manage Information Security audit activities, including internal, external, regulatory, and certification audits.
  • Coordinate audit requests, review findings, facilitate remediation plans, and track issues to closure.
  • Support security risk management activities, including risk assessments, risk registers, and exception management.
  • Act as a liaison between Information Security, Risk, Compliance, auditors, and regulators.

Requirements

• • Degree in Computer Science, Engineering or any other related disciplines with at least 10 years of experience in Information security, including experience in security policy development, risk assessment, compliance implementation & monitoring and governance function (preferably from financial/banking/payment industry).
  • Good working knowledge of enterprise security risk management methods and techniques to successfully deliver the security risk management and assessment outcome.
  • Prior experience in implementing a program which includes the collation, management and reporting of security metrics (KRI) such as vulnerability management, open software security vulnerabilities, penetration testing findings, security alerts and incidents
  • Strong knowledge of regulatory requirements and industry practices (e.g. NIST framework, MAS TRM Guidelines, MAS Cyber Hygiene, ISO 27001 standard)
  • Ability to work in a team environment and work independently and produce results that meet standards of quality, timeliness and acceptability
  • Strong writing, communication and inter‐personal skills
  • Attention to details, with the ability to thoroughly and accurately review IT policies, process and audit responses.
  • Excellent problem-solving skills and ability to prioritize and manage multiple tasks