Cybersecurity Manager (Governance, Risk and Compliance)
Job Description
A cybersecurity practitioner coming from an IT Audit/Consultancy background with strong cybersecurity experience and technical knowledge is needed to plan, manage and execute governance and compliance initiatives for the infocomm and media (ICM) sector so as to improve the reliability and confidence of ICM services in Singapore.
Job Responsibilities:
- Ensure compliance with relevant government regulations and conduct compliance reviews on submitted audit reports related to cybersecurity.
- Track, validate and follow-up with ICM operators on any gaps identified.
- Work closely with other IMDA divisions to administer the cybersecurity regime to applicable licensees, liaise with auditors to ensure completeness of the reports and to assess on the overall compliance to the required standards.
- Develop reports on cybersecurity metrics and track Governance, Risk and Compliance (GRC)-related KPIs.
Job Requirements:
- Background in Cybersecurity / Computer Science / Information Technology or a related field.
- 6+ years of experience in cybersecurity, technical audit or GRC roles.
- Good knowledge of cybersecurity risk management frameworks and standards (e.g. National Institute of Standards and Technology (NIST) SP 800-53, International Organization for Standardization (ISO) 27002 etc.), and cybersecurity best practices (e.g., security risk management, vulnerability management, and security incident response etc.) from ITU, GSMA, 3GPP, NIST etc.
- Knowledge of various Cloud environments, security controls and assurance.
- Excellent communication and presentation skills, both written and oral in English.
- Strong stakeholder engagement skills.
- Strong interpersonal skills, able to work in a team, able to work under pressure and flexible in handling tasks assigned.
- Relevant cybersecurity certifications such as CISSP, CISA, CISM, CRISC, CCSP etc. is a plus.
- Proven working experiences with detailed understanding of ICM environment and key risks will have an added advantage.
More Info
Key Skills
Cloud environments security controls
Cybersecurity best practices
Cybersecurity risk management frameworks
Security risk management
About Company
Skills:
Databases, Cloud Security, Operating Systems, Networks, Devops, cloud, Iso 27001, Owasp, Applications, Siem, Vms, NIDPS, Internal Controls, risk management, enterprise IT systems, Cyber-analytics, IT governance auditing techniques, cyber security technologies, security frameworks, IT GRC Governance Risk and Compliance, proof-of-concepts, CASB, nist
Skills:
Ccsp, Vulnerability Management, Incident Response, Security Controls, cybersecurity data governance, ISA IEC 62443, cybersecurity compliance, NIST CSF, GSEC, cybersecurity KPIs, cybersecurity awareness programmes, AWS certifications, cybersecurity policies, AZ-500, cybersecurity risk assessments, Cissp, cybersecurity technologies, ISO IEC 27001, gcih, IACS UR E26 E27
Skills:
Penetration Testing, Application Security, Security Controls, Vulnerability Assessments, cybersecurity risk management, detective security processes, security audit activities, security-related change controls, ISO IEC 27000 certification, Security Policies, cybersecurity risk assessments, security advice and guidance, cyber threat monitoring
Skills:
data centers , remediation , regulatory environments, Risk Compliance, Technical Project Management, Risk Assessment, Cisa, Audit, adapting global policies, Pmp, Stakeholder Management, Cissp, designing and implementing programs, CIA, CRISC
Skills:
information security governance , preventive actions , Vulnerability Assessment and Penetration Testing (VAPT), access control management , policies & procedures, new technologies , Cyber Risk Management, Penetration Testing, Security Controls, Information Technology, Escalation Management, Security Assessments, audit management, Security Requirements, Computer Science, Security Operations