Information Security Compliance Officer
Salary undisclosed
Checking job availability...
Original
Simplified
- Act as the primary local security contact / adviser for both Singapore and Australia offices.
- Work with Group IS and assist on the implementation and translation of information security policies and procedures for local offices.
- Provide an escalation path for security issues, incidents and inquiries to local offices.
- Provide regular and timely reporting on the status of cyber security to local management.
- Provide Cyber Security guidance to the local offices.
- Monitor IT/IS outsourcing arrangements and check that the KPIs/SLAs are met, else to find out the root cause and report it to local management.
- Proactively identify non compliance and areas of potential improvement to Group IS; and facilitate development and deployment of standard solutions.
- Collaborate with the Group Cyber Defense Operations and Cyber Security Engineering teams to develop a technical roadmap for local offices to meet local regulatory requirements.
- Work with Group Security Incident Response and Crisis Management teams to assist in driving incidents to acceptable resolution; and assist with investigations as needed.
- Participate in region/business unit related conferences, client facing engagement, industry forums to represent eToro’s Cyber Security program.
- Responsible for tasks assigned to you.
- Responsible to self track (including mandatory in-house Compliance/AML training/ABC) all training hours and keep training records and with the HR;
- Any other tasks as allocated by your direct line manager.
- Must have Bachelor's degree, preferably in computer science or information systems
- Must have Cissp \ Cism \ Cisa certificates.
- At least 5 years of IT/IS experience (including audit experience) with any local regulated local entities.
- Well versed with industry regulations and compliance, such as: MAS TRMG and Cyber Hygiene, ISO27001, SOC2, NIST, PCI, PDPA/GDPR, etc.
- Ability to communicate clearly and effectively on both technology/development issues/concerns to any stakeholders.
- Good interpersonal skills, able to work independently and also a team player.
- Experience working in a matrix model, as the BISO supports operational and transformational efforts for a given region or organisational function.
- Knowledge and experience of Information Security Risk and Security governance.
- Act as the primary local security contact / adviser for both Singapore and Australia offices.
- Work with Group IS and assist on the implementation and translation of information security policies and procedures for local offices.
- Provide an escalation path for security issues, incidents and inquiries to local offices.
- Provide regular and timely reporting on the status of cyber security to local management.
- Provide Cyber Security guidance to the local offices.
- Monitor IT/IS outsourcing arrangements and check that the KPIs/SLAs are met, else to find out the root cause and report it to local management.
- Proactively identify non compliance and areas of potential improvement to Group IS; and facilitate development and deployment of standard solutions.
- Collaborate with the Group Cyber Defense Operations and Cyber Security Engineering teams to develop a technical roadmap for local offices to meet local regulatory requirements.
- Work with Group Security Incident Response and Crisis Management teams to assist in driving incidents to acceptable resolution; and assist with investigations as needed.
- Participate in region/business unit related conferences, client facing engagement, industry forums to represent eToro’s Cyber Security program.
- Responsible for tasks assigned to you.
- Responsible to self track (including mandatory in-house Compliance/AML training/ABC) all training hours and keep training records and with the HR;
- Any other tasks as allocated by your direct line manager.
- Must have Bachelor's degree, preferably in computer science or information systems
- Must have Cissp \ Cism \ Cisa certificates.
- At least 5 years of IT/IS experience (including audit experience) with any local regulated local entities.
- Well versed with industry regulations and compliance, such as: MAS TRMG and Cyber Hygiene, ISO27001, SOC2, NIST, PCI, PDPA/GDPR, etc.
- Ability to communicate clearly and effectively on both technology/development issues/concerns to any stakeholders.
- Good interpersonal skills, able to work independently and also a team player.
- Experience working in a matrix model, as the BISO supports operational and transformational efforts for a given region or organisational function.
- Knowledge and experience of Information Security Risk and Security governance.