IT Security Manager

About the role

SDIC is looking for an IT Security Manager to develop and manage IT security policies, procedures, and systems in line with regulatory requirements. The role involves identifying security enhancements, managing IT systems security, conducting security assessments, and ensuring compliance across the organisation.

Key responsibilities

• Develop and update IT security policies and procedures in line with new regulatory requirements
• Identify IT security enhancements and work with third party suppliers to design and implement IT security projects and perform various tasks in the implementation life-cycle such as preparation of system test pack, execution of system testing and implementation activities
• Manage IT systems security, e.g. user access management and access log monitoring as well as review monitoring reports submitted by service providers
• Manage IT security assessments e.g. vulnerability assessments and penetration tests
• Manage service providers of IT systems and networks as well as ensure compliance with IT security policies and conformance to service level agreements
• Monitor the organisation's exposure to IT security threats and monitor IT security performance as well as analyze the current security status
• Educate and train SDIC staff including third party service providers on IT security policies
• Enforce IT security policies and monitor compliance
• Manage IT security incidents and recommend effective solutions
• Manage endpoints security and privilege IDs using cyberArk, and
• Assist the Head Operations as the Data Protection Officer on PDPA matters e.g. develop policies on handling personal data that are in compliance with the PDPA based on the organisation’s needs and alert the organisation on any risks that might arise with regards to personal data

About you

• University graduate in Computer Science, Information Technology, Business IT or Information Systems
• Minimum 5 to 6 years of relevant working experience in IT system auditing or IT security controls and policy formulation and implementation as well as knowledge of IT infrastructure systems
• Good experience in areas related to IT security with professional certification(s) in CISSP, CISM or CISA
• In-depth understanding of ISO 27001 standards and MAS Technology Risk Management Guidelines as well as experience in implementation of the standards
• Related IT security experience in the banking or insurance industry would be an advantage
• Understanding of IT infrastructure systems
• Able to work independently with minimal supervision
• Good written and verbal communication skills
• Good analytical skills and detailed worker

About us

Singapore Deposit Insurance Corporation (SDIC) administers the Deposit Insurance Fund for the protection of insured depositors of full banks and finance companies in Singapore, and the Policy Owners' Protection Fund for the protection of policy owners of insured policies of direct life and general insurers in Singapore.