Senior Security Operations Centre Lead

About the role

The NETS Group, a payments services group operating Singapore's national debit scheme, is looking for a Senior Security Operations Centre Lead for its Business Unit. The role acts as the primary cybersecurity lead and focal point for the Business Unit and the Group SOC, overseeing security monitoring, incident response, compliance and security governance.

Key responsibilities

• Provide SOC oversight across Business Unit systems, applications, infrastructure and processes, and ensure risks are identified, assessed, communicated and mitigated
• Drive SOC governance, security awareness and represent the Business Unit in cybersecurity reviews, tabletop exercises, audits and management forums
• Ensure effective monitoring and detection coverage, review use cases and alerting, and bring critical systems onto SIEM, EDR/XDR and monitoring platforms
• Review alerts, investigations and escalations, support threat hunting and act as security lead during cyber incidents, coordinating response and post-incident reviews
• Lead cybersecurity activities supporting compliance with CCoP, Cyber Trust Mark, MAS TRM Guidelines, Cyber Hygiene and NETS security policies, and coordinate audit remediation
• Act as principal liaison between Business Unit management, Group SOC, technology teams, Risk & Compliance, Internal Audit and external auditors, and report security posture and risks to management
• Improve security maturity and resilience, track remediation actions and develop security metrics and KPIs

Required profile

• 10+ years of cybersecurity, information security or security operations experience
• Minimum 5 years in a leadership, security management or senior security operations role
• Experience supporting PCI-DSS environments and in regulated environments
• Preferred: payments, banking, financial services or critical national infrastructure background

Required skills

• Security Operations, monitoring and detection, incident response, vulnerability management, security governance and risk management
• Knowledge of payment systems, card processing, SIEM, EDR/XDR and security controls and frameworks
• Preferred: familiarity with PCI-DSS, MAS TRM, NIST Cybersecurity Framework, ISO 27001 and MITRE ATT&CK
• Preferred tools: SIEM (Elastic, LogRhythm), Trend Micro, Microsoft Defender
• Preferred certifications: CISSP, CISM, CRISC, CCSP, PCIP, GIAC, cloud security certifications