[What the role is]

SENIOR MANAGER (SYSTEM ARCHITECTURE AND ASSURANCE), SECURITY

[What you will be working on]

The Senior Manager is responsible to manage the end-to-end security activities of an integrated e-payment system. The primary responsibilities would include supporting project works which require substantial technical contribution, as well as support for security solutioning, configuration, testing and deployment.

The activities required to be performed shall include the following:

a) Work with internal and external stakeholders to monitor and maintain the security health of the Automatic Fare Collection system

b) Manage the analysis and resolution of security issues and incidents related to the Automatic Fare Collection system

c) Perform security configuration and security compliance monitoring of the Automatic Fare Collection system

d) Perform vulnerability assessments to identify possible weaknesses in system. Familiarity with commonly available vulnerability assessment and scanning tools. Assist in remediation and resolution of issues found.

e) Perform risk analysis on AFC system and apply appropriate measures to minimise the risk in a cost effective manner.

f) Monitor and work with internal and external stakeholders to ensure timely remediation of security findings on the Automatic Fare Collection system

g) Monitor the Automatic Fare Collection system for anomalous activities and provide necessary investigation and response

h) Deploy security fixes and patches to the Automatic Fare Collection system to resolve vulnerabilities.

i) Integrate new projects security solutions into existing security implementation

j) Disseminate and coordinate with internal and external sakeholders to implement the security advisories on the Automatic Fare Collection system.

k) Participate in Automatic Fare Collection system projects and provide inputs on new security technologies as well as review technical implementations and processes in ensuring that proper security controls are in place and

l) Develop new and update the existing security policies, standards and guidelines for the Automatic Fare Collection system.

[What we are looking for]

a) Tertiary qualification in IT or Computer Engineering with at least 5 years relevant experience in IT security

b) Possess good knowledge and professional experience in implementating in one or more of the following domains:

1. System Security
i. Host and Endpoint security
ii. Identity and Access management
iii. Database security
iv. Network security
v. Virtualization security
vi. Application security
vii. Threat analysis
viii. Vulnerability assessment and security testing for operating systems (Windows and Unix), network (wired and wireless) and applications (web-based and others)

2. Security Operations
i. Security Information and Events Management (SIEM)
ii. Operation and management of Security Operations Centre (SOC)

c) Experience in the design and deployment of technology and solutions in Identify and Access Management Application and Data security Infrastructure and Endpoint and Security Intelligence / SIEM in Government Commercial Cloud will be an advantage.

d) Proven ability to plan and execute workload in a demanding and dynamic environment

e) Familiarity with DevSecOps. Experience in DevSecOps will be an advantage.

f) A team player with excellent analytical, interpersonal and communication skills

g) Good written and verbal communication skills in English.