Senior Director Cyber Defence Operations

Responsibilities

. Provide leadership and strategy for cybersecurity detection and response operations

. Develop long term strategies and roadmap to progressively mature and enhance security operations and technology to defend the company's technology assets against cyber threats.

. Build and maintain the Singapore Security Operations Centre (SOC), develop a service catalogue to support quality and service management. Progressively reduce SOC duplication and footprint across business units to drive efficiency.

. Manage a highly specialised team of security analysts, incident managers, incident responders and threat intel specialists to effectively monitor, defend and response to cyber threats and events.

. Develop critical in-house talent and capabilities, while leveraging on 3rd party services. Aggressively drive automation using AI and other technology.

. Take leadership role to detect, manage and respond to cybersecurity incidents and provide updates to internal stakeholders and management. Work closely with Group Risk Management (GRM) to support crisis management processes and exercises.

. Build and maintain an effective threat intel capability and working collaboratively with other internal SOCs and partners to coordinate defensive tactics and playbooks against cyber threats.

. Continuously identify and enhance vulnerability management programmes, SOC technology stack, 24x7 operations, incident and crisis management processes, automation, and capabilities to progressively strengthen the security posture

. Provide periodic updates to internal stakeholders and management on the state of defence posture and capabilities.

Requirements

. Bachelor Degree in Computer Science, Computer Engineering, Electrical Engineering or other relevant field of study

. Professional security management certifications such as Certified Information Systems Security professional (CISSP), Certified Information Security Manager (CISM), specialised SANS certifications, or other similar credentials, is required.

. Minimum 15 years of experience as in IT or security roles.

. Minimum 10 years of practical experience managing security operations, SOCs or equivalent security programmes.

. Experience working with Internal Audit, Governance and Compliance teams.

. Competence in the following :

. Business Needs Analysis

. Business Risk Management

. Cyber Forensics

. Cyber Incident Management

. Cyber Risk Management

. Partnership Management

. Network Security

. Platform Security

. Security Assessment and Testing

. Security Programme Management

. Security Strategy

. Stakeholder Management

. Threat Analysis and Defence

. Threat Intelligence and Detection

. Security Assessment Tools

. Security Monitoring Tools

. Possesses advanced knowledge in data security, physical security, regulatory compliance, and data loss prevention strategies.

. Demonstrated expertise in communication, leadership, decision-making, talent development, and resource management.

. Have exposure to other compliance audits such as PCI, PDPA, GDPR, CCoP mostly related to security part.

Licence no: 12C6060