Position Overview:
The Head of IT Infrastructure and Security will be responsible for the support, administration, security, and continued evolution of SBI DM's technical infrastructure and cybersecurity posture.
SBI Digital Markets is a financial institution regulated by the Monetary Authority of Singapore so regulatory compliance and risk management will also be key responsibilities. These environments include the office IT environment, the SBI DM network and web sites, the office security systems, and SBI DM's use of cloud platforms. This position requires deep technical experience and skill sets, coupled with project management skills, experience in financial industries, and a passion for the emerging technologies that underline digital assets and the future of capital markets. The Head of IT Infrastructure and Security will report to the CTO.
Principal Duties and Responsibilities include (but are not limited to):
- Manage office IT support and operations for a mixed platform environment that includes technology from Microsoft, Apple, AWS, and Google (among others).
- Manage support and operations for the SBI DM network, cloud platforms, and web sites.
- Manage a small team of support engineers and step in to assist as needed.
- Monitor security alerts and events and respond as needed, and be prepared to lead forensic investigations.
- Implement operational monitoring for SBI DM systems.
- Design and deliver evolving changes to these platforms and to the cybersecurity posture, in conjunction with the CTO and the Head of Architecture.
- Evaluate office and network security and perform audits and penetration testing on a semi-regular basis.
- Design and execute technical projects to ensure that requirements, milestones and deliverables are met.
- Manage external vendors, delivery partners and solution providers for project delivery and maintenance.
- Evaluate and recommend technologies and vendors appropriate for the SBI DM IT environment, and work with vendors on solution design and implementation.
- Develop technical assets as needed, such as design documents, inventories, audit responses, and change management databases.
- Participate in the technical steering committees, and any meetings or workshops in which security or infrastructure as a topic is needed.
- Work alongside the CTO, the Head of Engineering, the Head of Architecture, and any other senior technical staff and business stakeholders to set the strategic direction, policies, and deliverables for SBI Digital Markets.
- Work with the Compliance department and the CTO to define policies and standards for risk mitigation and security for the various SBI DM IT environments, using the Monetary Authority of Singapore Technical Risk Management documentation for guidance for example business continuity planning, data governance, official use of IT assets, etc.
- Other duties and special projects as needed by the CTO or the senior leadership.
Qualifications & Skills:
- At least seven years of experience in Information Technology, as an infrastructure architect or engineer, multi-platform systems administrator, and/or consultant, preferably in or related to a financial services industry (such as banking, capital markets or insurance).
- At least five years of experience in cybersecurity and risk management, including experience in security design and incident handling.
- At least five years of experience in at least two different solution areas, such as network design, security assessment and design, systems operations and administration, technical project management, troubleshooting and forensic analysis, help desk operations, solution architecture and digital process automation, etc.
- Have strong technical skills, with excellent problem-solving and customer management skills, for example managing or staffing a help desk or providing systems administration support.
- Familiarity with regional technology risk and cybersecurity regulations, especially with regulatory frameworks related to the MAS Technology Risk Management and Cyber Hygiene.
- Strong preference for experience with multiple IT platforms, such as Microsoft 365, Google Workspace, Apple iOS, AWS, Azure, GCP, etc.
- Familiarity with office systems such as CCTV, card access, UPS, and phone systems is helpful but not essential.
- Experience managing vendors, partners, and solution providers is preferred.
- Professional certifications (CISSP, CISA, CCSP, CRISC, ITSM etc.) are preferred.
- Degree in Computer Science or Information Technology is preferred.
