AVP, Security Governance & Assurance

About the role

The NETS Group, a leading payments services group operating Singapore's national debit scheme, is hiring an AVP for Security Governance & Assurance. The role manages and enforces information security policies, processes and procedures, and works with regulators, auditors and business stakeholders on cyber risk and compliance.

Key responsibilities

• Manage and enforce information security policies, processes and procedures, and turn audit findings into improved risk processes and controls.
• Work with internal stakeholders to review, streamline and implement cyber risk management process improvements.
• Assess risk and gaps against regulator notices, circulars and guidelines (e.g., TRM, Cyber Hygiene) and work with line and technology teams to close them.
• Prepare data for risk analysis and reporting, and communicate new information security policies and standards to stakeholders.
• Manage information security audits and regulatory inspections, review findings with stakeholders, formulate action plans and verify remediation.
• Act as liaison for information security audits, risk and compliance activities and support business audits involving information security.
• Manage the full audit lifecycle, from kick-off and RFI through fieldwork, reporting and closure.

Required profile

• Degree in Computer Science, Engineering or a related discipline, with at least 8 years of progressive experience in information security, preferably in the financial, banking or payment industry.
• Experience developing security policies, risk assessment, compliance implementation and monitoring, and governance.
• Experience implementing a program that collects, manages and reports security metrics (KRI) such as vulnerability management, open software vulnerabilities, penetration testing findings, security alerts and incidents.
• Experience with information security frameworks such as ISO 27000 and NIST, and regulations such as the Cyber Hygiene Notice, Technology Risk Management Guidelines and the Personal Data Protection Act.
• Ability to work in a team and independently, with strong writing, communication and interpersonal skills.