VP, Cyber Security Engineering, Cloud and Data Security Permanent

Technology Group

The Technology Group (TG) is a key enabler to keep our business moving forward and is constantly exploiting state-of-the-art information technologies to enhance GIC’s ability to be the leading global long-term investment firm. We aim to provide users with empowering and transformational capabilities, and to create an inclusive, innovative, and integrated work environment.

We are looking for a suitable candidate for the role of VP, Cyber Security Engineering, Cloud and Data Security.

The individual will report to an SVP – Cyber Security Engineering, which is one of the key functions under Cyber Security, Information, & Technology Risk (CSITR) division of Technology Group.

Responsibilities:

• Identify and recommend improvement areas in existing enterprise security architecture to address evolving cybersecurity threats
• Align and balance business requirements with cybersecurity, information, and technology requirements, based on the organization’s risk appetite
• Evaluate, perform proof-of-value/proof-of-concept, design, build and implement enterprise-class cybersecurity systems
• Develop integrated security operating models and documentations to ensure operational efficiency, scalability, and sustainability
• Act as a domain expert and trusted partner in CSITR; work closely with stakeholders in Technology Group and other business groups on cybersecurity engineering related matters.

Requirements:

• Bachelor’s Degree in Information Technology, Computer Engineering or equivalent.
• At least 10 years of relevant experience preferably in financial services or asset management industries, with minimum 7 years in Cyber Security or Information Security.

• Professional qualification such as AWS and Azure certifications.

• Hands-on experience in implementing and operationalizing cloud security solutions (IaaS, PaaS, and SaaS) and data security solutions (data encryption, KMS, DLP).
• Experience must include provisioning with Infrastructure as Code (AWS CloudFormation and/or Azure Resource Manager) and Cloud IAM implementation.
• Familiarity with AWS Well-Architected Framework and Landing Zone is a huge plus.

• Scripting and coding skills, with proficiency in Python or similar programming languages, and knowledge of DevOps/DevSecOps (including familiarity with Git repositories and CI/CD tools for code deployment).

• Working experience with other cybersecurity products such as SIEM, threat intelligence, security incident response and forensic investigation, network and endpoint protection, and others, would be advantageous.

• Must be meticulous, versatile, and inquisitive, having strong attention to detail with an analytical mind and outstanding problem-solving skills.
• Desire to learn, working in a diverse environment, interacting with multiple teams and functions to support strategic goals. Be a good team player and excellent communicator.
• Professional qualification in information security, such as CISSP / CISM / CEH will be advantageous.