Head, Cybersecurity Governance, Risk & Compliance

About the role

DBS Group Technology manages most of the bank's operational processes and delivers banking services through multiple channels. The bank uses a three lines of defence model for cybersecurity risk management; this role sits in line 1, driving regulatory compliance, governance, awareness and training and data protection for cybersecurity. It is based at the DBS Asia Hub and is a full-time position.

Key responsibilities

• Cybersecurity governance: develop standards and guidelines, assess and validate cyber risks and controls, and report to DBS risk committees
• Ensure compliance with cybersecurity legislation (e.g. Singapore's Cybersecurity Act) and regulations (e.g. MAS), and update information security standards
• Manage cybersecurity awareness and training, including phishing exercises, targeted content and an annual awareness campaign
• Lead the data protection programme, including data loss prevention and data analytics to detect misuse of applications and customer data
• Work with external auditors and certification bodies (Cyber Trust Mark, ISO27000, SOC2, Cybersecurity Act)
• Develop and maintain security metrics and visualizations, automate where possible, and produce quarterly reports for senior management and the Board

Required profile

• Information security professional with 15+ years of experience, preferably in a financial or technology environment
• Experience managing and reporting security metrics such as vulnerabilities, penetration testing findings, alerts and incidents
• Knowledge of ISO27000, NIST800-53, the Cybersecurity Act, Technology Risk Management Guidelines and the Personal Data Protection Act
• Good verbal and written communication, proactive, analytical and organized; regional experience and willingness to travel are a plus

Required skills

• Enterprise security risk management methods
• Security technologies: IDS, IPS, anti-virus, content filtering, secure email, network sniffing, log analysis, forensics and VPN
• Data analytics, machine learning and software development lifecycle