Manager / Senior Manager, IT Cyber Security
Background:
The Institute of Banking and Finance (IBF) is the lead agency driving financial services industry workforce competency and transformation that is essential for Singapore’s continuing growth as an international financial centre. IBF works in partnership with the industry, government agencies and training providers to equip finance professionals with capabilities to support the growth of Singapore’s financial services. Since October 2020, IBF has been appointed the Jobs Development Partner for the financial services industry by the National Jobs Council.
To ensure that the sector’s workforce remains relevant amidst changing industry trends, IBF drives various jobs and skills initiatives. On the jobs front, these include career conversion programmes to re-skill finance professionals as well as build new talent pipelines for growth areas. IBF also provides personalised career advisory to jobseekers exploring new roles or a career switch into financial services. On the skills front, as the national accreditation and certification agency for financial industry competencies, IBF works closely with the industry to set out competency standards and raise the quality of finance professionals using the Skills Framework for Financial Services. To support this, IBF works closely with government agencies, financial institutions, and training providers to promote the development of a vibrant learning and development ecosystem. IBF also administers regulatory examinations on behalf of the Monetary Authority of Singapore, as well as industry examinations such as the Client Advisor Competency Standards and Financial Markets Regulatory Practices.
For more information, please visit our website: www.ibf.org.sg.
Responsibilities:
- Responsible for the monitoring, assessment and management of security threats and vulnerabilities
- Analyse and correlate information security events to identify appropriate event handling actions
- Conduct risk and security assessment and remediation
- Ensure up-to-date patching policies and procedures
- Ensure all devices, applications, and operating systems are patched in accordance with the SLA.
- Plan and manage Vulnerability Assessment & Penetration Testing (VAPT) exercise to check system security and oversee the required remediation
- Participate in Security Project implementation
- Support audit activities and manage the follow-up actions
- Provide management reports and updates
- Manage security reviews, process updates and contract renewals
- Conduct security awareness briefings for staff to educate them on best practices, potential threats, and their role in safeguarding the organisation's cybersecurity
Requirements:
- Background in Computer Science or IT-related studies
- At least 3 years of experience in IT operations and IT security management in one or more security areas such as vulnerability scanning, firewall reviews, hardening, security device administration, SIEM, cloud security, identity and access management, zero trust technologies
- Security Certifications such as CISSP, CISM, CISA, CEH, GSEC, CRISC, Security+ preferred
- Good analytical and communications skills
Background:
The Institute of Banking and Finance (IBF) is the lead agency driving financial services industry workforce competency and transformation that is essential for Singapore’s continuing growth as an international financial centre. IBF works in partnership with the industry, government agencies and training providers to equip finance professionals with capabilities to support the growth of Singapore’s financial services. Since October 2020, IBF has been appointed the Jobs Development Partner for the financial services industry by the National Jobs Council.
To ensure that the sector’s workforce remains relevant amidst changing industry trends, IBF drives various jobs and skills initiatives. On the jobs front, these include career conversion programmes to re-skill finance professionals as well as build new talent pipelines for growth areas. IBF also provides personalised career advisory to jobseekers exploring new roles or a career switch into financial services. On the skills front, as the national accreditation and certification agency for financial industry competencies, IBF works closely with the industry to set out competency standards and raise the quality of finance professionals using the Skills Framework for Financial Services. To support this, IBF works closely with government agencies, financial institutions, and training providers to promote the development of a vibrant learning and development ecosystem. IBF also administers regulatory examinations on behalf of the Monetary Authority of Singapore, as well as industry examinations such as the Client Advisor Competency Standards and Financial Markets Regulatory Practices.
For more information, please visit our website: www.ibf.org.sg.
Responsibilities:
- Responsible for the monitoring, assessment and management of security threats and vulnerabilities
- Analyse and correlate information security events to identify appropriate event handling actions
- Conduct risk and security assessment and remediation
- Ensure up-to-date patching policies and procedures
- Ensure all devices, applications, and operating systems are patched in accordance with the SLA.
- Plan and manage Vulnerability Assessment & Penetration Testing (VAPT) exercise to check system security and oversee the required remediation
- Participate in Security Project implementation
- Support audit activities and manage the follow-up actions
- Provide management reports and updates
- Manage security reviews, process updates and contract renewals
- Conduct security awareness briefings for staff to educate them on best practices, potential threats, and their role in safeguarding the organisation's cybersecurity
Requirements:
- Background in Computer Science or IT-related studies
- At least 3 years of experience in IT operations and IT security management in one or more security areas such as vulnerability scanning, firewall reviews, hardening, security device administration, SIEM, cloud security, identity and access management, zero trust technologies
- Security Certifications such as CISSP, CISM, CISA, CEH, GSEC, CRISC, Security+ preferred
- Good analytical and communications skills