Senior Specialist, Information Security & Data Protection

We are hiring IT talent on behalf of our client, a reputable organization with a strong presence in its industry, support business-critical technology initiatives

The purpose of this role:

This role handles Information Security and Data Protection aspects for Express Asia Pacific Excluding China (APEC) at Regional level, supporting the Director, Regional Information Security and Data Protection. This role is to support & drive information security and data protection practice to ensure that the company information assets and systems remain secure from emerging security threats and enable the company to retain its leadership position and customer's trust and confidence.

Responsibilities:

Responsible for maintaining, implementing and monitoring Information security standards and controls across cyber security domains over entire spectrum including identification of issues and threats, operational security, security monitoring and incident management to ensure that information assets are secure to achieve or exceed Confidentiality, Integrity and Availability (CIA) objective.

Coordination and implementation of IT security activities and plans to provide reliable information and system security, effective IT disaster recovery and business continuity in line with business strategy and functional objectives, and Group guidelines and policies

Internal customer

• 1st line escalation contact for regional Information Security (IS) incidents.
• 1st line escalation backup for Data Protection (DP) incidents and complaint handling.
• Drive IS and DP awareness for APEC region within area of responsibility.
• Drive anti-phishing awareness for APEC region within area of responsibility.

External customer:

• 1st contact and liaison for external IS incident handling
• 1st backup contact and liaison for external DP incident handling

Internal stakeholder

• Provide internal consultancy to APEC Country ISDP Managers and Country IT Heads on IS and DP matters.
• Be the IS and DP Advisor if an IT or Business Crisis Management Team (CMT) is formed.
• Be the liaison with Operations Security, ensuring alignment on governance, risk and compliance. Also sharing threat intelligence.
• Be the support liaison with the Regulatory Affairs manager in Operations for IS and DP matters.
• Be the support liaison with the Regional and Global IS organization.
• Support APEC RISO & Regional DPO on Regional, Global ISDP activities and initiatives

External stakeholder:

• Develop and maintain key contacts in regulators applicable to IS and DP relevant to the Transport Sector.
• Develop and maintain key contacts in business groups applicable to IS and DP within APEC, particularly relevant to the Transport Sector.

Internal process:

• Ensure the feedback / input provided to DPDHL ISTM, Data Protection policies and guidance
• Ensure the IS and DP controls in cBIT Process cB05 Manage IT Controls (CRISP) and Audits are adequately controlled.
• Ensure all appropriate IS and DP activities and records are maintain in GSN and OneTrust for the area of responsibility
• Ensure IS & DP controls are designed appropriately and reviewed often to ensure information security and data protection standards are maintained inline with changes to IT Systems.
• Working within our Quality Management System ensure regular internal audits are conducted on critical IS and DP controls by qualified internal auditors.

External process

• Provide support to Director, Regional Information Security and Data Protection (APEC), in conjunction with GBS legal, any breach or other reporting to regulators on IS and DP matters.
• Responsible for 3rd Party Partners IS and DP security assessment and compliance for IS and DP.
• Be the 1st point of contact and liaison during any external cyber incident handling process.

We regret to inform that only shortlisted candidates will be notified.

PERSOL Singapore Pte Ltd

• RCB No. 200007268E • EA License No. 01C4394

• REG Number. R1654858 (Soo Sheng Hui)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOL SINGAPORE PTE LTD and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolsingapore.com/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

This is in partnership with Employment and Employability Institute Pte Ltd (e2i). e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance and skills upgrading services, and partnering employers to address their manpower needs through recruitment, training and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation-wide manpower and skills upgrading initiatives. By applying for this role, you consent to e2i's PDPA.