Assistant Manager, Technology Security Operations

We fuel the ideas and ambitions of our people with an environment built on Our DNA of Love, Entrepreneurship, Agility, and Passion – LEAP

We are a culture that empowers everyone to innovate and create solutions that will leave a positive impact on our communities and our nation, Touch n Go will always be here to inspire our talents to grow as leaders and innovators giving you the power to make a difference

What would you do:

Technology Security Control Assurance

• Coordinate the implementation and ongoing operation of security controls across infrastructure, cloud, network, endpoint, identity and other applicable technology environments.
• Perform operational control reviews to identify control gaps, implementation weaknesses and exceptions.
• Monitor security-control implementation and coverage, and maintain appropriate technical evidence demonstrating that assigned controls are operating as intended.
• Coordinate corrective actions with responsible technology teams and track control gaps through remediation or escalation.
• Support continuous improvement of technology security controls and operational processes.
• This role owns operational control coordination, technical evidence, vulnerability and security issue remediation tracking, and operational security reporting within Technology Infrastructure & Security.

Security Issue and Remediation Management

• Maintain a central Technology Security Operations Issue Register for operational security issues and remediation activities.
• Consolidate and track findings arising from vulnerability assessments, penetration testing, incidents, security reviews and technology-control assessments.
• Coordinate the remediation lifecycle from identification and assignment through tracking, evidence review, validation and closure.
• Monitor remediation against agreed timelines and applicable service levels, and escalate overdue, high-risk or unresolved matters.
• Identify recurring issues and systemic weaknesses requiring engineering, architectural or management attention.

Vulnerability and Security Exposure Management

• Coordinate remediation of vulnerabilities and security exposures affecting technology infrastructure and platforms.
• Work with system and technology owners to establish remediation actions, accountable owners and target dates.
• Monitor remediation against applicable severity-based requirements and coordinate validation activities where required.
• Identify prolonged exposures, recurring vulnerabilities and remediation bottlenecks, and escalate significant matters to the appropriate stakeholders.
• Maintain accurate remediation status and supporting technical evidence.

Security Control Coverage and Operational Monitoring

• Monitor deployment, configuration, integration and coverage of applicable technology security controls.
• Identify gaps associated with technology changes, configuration weaknesses, incomplete deployment or unclear operational ownership.
• Coordinate corrective actions and monitor dependencies that could affect control effectiveness.
• Support security technology lifecycle and operational-effectiveness reviews.
• Identify opportunities for automation, standardisation and operational improvement.

Operational Security Risk and Exception Coordination

• Identify technology security risks arising from vulnerabilities, control gaps, incidents and operational weaknesses.
• Document the technical context, potential impact, existing controls and proposed remediation measures.
• Escalate material risks to the appropriate governance or security function for formal assessment, registration and governance.
• Provide technical input to risk assessments and support implementation of approved treatment actions.
• Monitor operational security exceptions and associated compensating controls relevant to Technology Infrastructure & Security.

Audit, Regulatory and Assurance Support

• Support technology-related audits, regulatory assessments and assurance reviews by providing relevant technical information and evidence.
• Coordinate collection of Technology Infrastructure & Security control evidence from responsible technical teams.
• Provide technical clarification on security-control implementation and remediation activities.
• Maintain organised and traceable evidence to support assessment readiness.
• Track remediation actions assigned to Technology Infrastructure & Security and support validation of technical closure evidence.

Cross-Functional Remediation Coordination

• Coordinate resolution of security issues requiring involvement from multiple technology teams, vendors or service providers.
• Manage dependencies and blockers affecting timely remediation and drive accountability for assigned actions and target dates.
• Escalate unresolved technical dependencies requiring management intervention.

Reporting and Continuous Improvement

• Maintain operational dashboards covering vulnerabilities, security issues, control gaps, remediation status and outstanding actions.
• Analyse recurring issues and remediation trends to identify systemic weaknesses.
• Provide regular operational security updates to Technology Infrastructure & Security management and accurate technical input for broader governance reporting.
• Recommend improvements to security controls, processes and remediation practices.

Who should join us:

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems or a related discipline.
• Relevant professional certification such as CISSP, CISM, CRISC, CISA, ISO/IEC 27001 or an equivalent technology or cybersecurity certification is an added advantage.
• Minimum 5 years of relevant experience spanning security operations or infrastructure security and cyber risk or technology risk management.
• Demonstrated experience translating operational security issues, vulnerabilities and control gaps into risk assessments, remediation priorities and practical treatment actions.
• Experience coordinating security remediation across multiple technology teams and tracking actions through validation and closure.
• Experience supporting technology audits, regulatory assessments, operational control reviews or risk and compliance activities is an added advantage.
• Practical exposure to enterprise infrastructure, cloud, network, endpoint, identity and security technology environments is preferred.

Our Perks & Benefits:

• Hybrid work arrangement and flexi hours.
• e-Wallet meal allowance.
• Unlimited office pantry fruits, snacks and drinks.
• Mobile and broadband subscription reimbursement.
• Flexibility to opt dependents coverage (spouse, child, parents or parents-in-law) for outpatient medical benefits.
• Additional leave including family leave and paid care leave to care for family members.
• Medical coverage including dental, optometrist, mental care, maternity, registered
• Traditional Chinese Medicine (TCM) and Chiropractic.
• Corporate membership discount and many more to explore.

We believe that you have what it takes to fit into the Touch n Go family and help revolutionize the Fintech industry by paving the way to a cashless society. If you're ready to take the next step, apply now!

Touch n Go is an organization that strives to provide Equal Opportunity Employment, based on merit, qualifications, capabilities, and calibre. It is Touch n Go's policy to not discriminate based on age, race, religion, colour or other personal status, identity or characteristics. Fair Opportunity is Our Value and Practice. Please advise us of any accommodations you may need by e-mailing: [Confidential Information]

Note: Only shortlisted candidates will be contacted.