Epicareer Might not Working Properly
Learn More

Senior Executive, Information Security

Salary undisclosed

Apply on


Original
Simplified

This role is to assist in the Information and Technology Risk function with primary focus on the effective implementation of TRMF (Technology Risk Management Framework) and DLP (Data Loss/Leakage Prevention) Framework to ensure proper risk management in the information and Technology Risk domains in alignment with Enterprise Risk Management Policy, Regulations and Guidelines.

1. Information Risk / DLP

  • Perform Information Risk / DLP related risk assessment and on-site review on Head Office departments and branches.
  • Monitor and report on DLP control effectiveness through the review of KRI and reports / alerts generated from DLP tools.
  • Assess data loss/leakage incidents, support the investigation and the risk remediation activities.

2. Information Security

  • Assist in the day-to-day operations of Information Security functions.
  • Perform Information Security and Cyber Security assessment on 3rd party service providers and cloud services.
  • Prepare reports and provide updates to relevant committees.

3. Technology Risk

  • Perform Technology Risk related risk assessment on IT and relevant 3rd parties.
  • Monitor and report on Technology Risk KRI.
  • Analyze and identify potential issues and support the risk remediation activities.

4. Others

  • Support the development, implementation, and maintenance of Information & Technology Risk-related framework and PRGs such as Technology, Risk Management Framework (TRMF), Cyber Resilience Framework (CRF), DLP (Data Loss/Leakage Prevention) Framework and Information Security Policy.
  • Contribute and support the Information Security Awareness & Training program.
  • Perform other functions and duties as required by superior from time to time.

To be successful in the role, you will need to

  • Degree in Technology-related disciplines with focus on IT security, Technology Risk Management and/or IT auditing.
  • Minimum 2-4 years working experience in IT risk management / Technology Risk / Cyber / Information Security / IT Audit.
  • Good communication skills, both written and verbal.
  • Good interpersonal and stakeholder management skills.
  • Good report writing and presentation skills.

Benefits

Dental and Optical, Education Support, Medical, Insurance Coverage, Car and Housing Loan Interest Subsidy, Birthday Leave.