Manager, Information Security - Singapur, Singapore - Corporate

Corporate Singapur, Singapore

5 days ago

Full time

Description

JOB SUMMARY

The candidate will be responsible for governing the vendor security risk management and cyber risk management for Asia Pacific exclude China, including conducting risk assessments and periodic re-assessments, performing application security testing and provide remediation options, and evaluations. He\She will also assist in managing relationship with Service Providers who are responsible for the actual delivery of services, managing outcomes and results, and collaborating with stakeholders across IT and business departments to develop strategies for securing company information and assets. Shares responsibility for planning, directing, and coordinating compliance activities pertaining to technology projects for a given business unit. Verifies that project goals are accomplished and in line with business objectives.

The candidate will also work with other peers to coordinate, articulate, and track actions related to developing and driving the implementation of cybersecurity risk management plans for Asia Pacific, ensuring effective cyber security risk management practices, and engaging with business unit members on a wide range of cyber security matters to achieve overall business objectives.

The candidate will also be responsible for supporting the overall Asia Pacific security program including security policy, procedures, and standards, ensuring Marriott iT documents are compliant with Marriott security policies and procedures, and reviewing documents for accuracy and completeness.

Excellent communication skills are required to effectively communicate (verbally and written) across all levels within the organization.

CANDIDATE PROFILE

Education and Experience

Required:

Bachelor's degree in information systems or related field or equivalent experience/certification

5+ years security governance, risk management and compliance related experience with 2+ years direct work experience in third-party security Risk Management

Fluent in English

One or more current information security certifications such as Certified in Risk and Information Systems Controls (CRISC), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP)

Possession of good communication skills (including soft skills, structured thinking, effective report writing and presentations, and stakeholder engagement)

A team player, with positive attitude and enthusiasm in the performance of responsibilities

Strong innovative thinking, able to continuously enrich and improve the security policy, procedure and standards.

Preferred:

A security certification such as GWAPT, GPEN, AWS Associate Architect, AWS Professional Architect, PCI experience.

Technical knowledge in one or more of the following areas is required: Application Security, Operating System security (UNIX, Windows, Mainframe, etc.) and network security (routers, switches, firewalls)

Technical leadership experience in an outsourced environment

Excellent communication skills and problem-solving ability

Experience conducting and maintaining vendor risk assessments

Experience with reviewing and assessing security controls of Cloud service providers

Proficient with assessing a multi-tiered system architecture (Web Server, App Server & Database)

Knowledge of OWASP Top and SANS .

Working knowledge of the infrastructure and application scanning tools (such as Retina, Nessus, IBM App Scan, HP Web Inspect, Fortified on Demand, Qualys, etc.)

Manual Web Application Testing experience.

Familiarity with ISO and PCI DSS Standards

CORE WORK ACTIVITIES

Vender Risk Management & Cyber Risk Management

Oversee, evaluate, and support the documentation, and validation processes necessary to assure that associates, information technology systems and business processes meet the organization's information assurance, security, and privacy requirements. Ensures appropriate treatment of risk, compliance, and assurance of internal policies and external regulations.

Develop strategy for the vendor information security risk compliance program

Perform security controls assessments of third-party providers – assess security architecture, adherence to the requirements, conduct application scanning and results validation

Document controls gap analysis and risk assessment of the third-party providers

Review controls exception requests and make risk-based approval decision

Lead, participate or perform various infrastructure compliance initiatives and projects

Perform Application Security Testing using (Nessus, IBM App Scan, HP Web Inspect, Fortified on Demand, Qualys, Burp, or Retina)

Conduct and validate finding discovered during the scans

Monitor compliance to applicable security policies and standards and report related risk issues

Manage and administer processes and tools that enable the organization to identify, document, and track third party risks and compliance exceptions

Conduct assessments of threats and vulnerabilities, determine deviations from acceptable configurations or enterprise or local policy, assess the level of risk, and develop and/or recommend and operationalize appropriate mitigation countermeasures.

Provide sound advice and recommendations to leadership and staff on a variety of relevant topics within the pertinent subject domain. Advocate policy changes and make a case on behalf of the company via a wide range of written and oral work products.

Managing Projects and Priorities

Champions leaders' vision for product and service delivery.

Thinks creatively and practically to develop, execute, and implement new project plans.

Generates and provides accurate and timely results in the form of reports, presentations, etc.

Plans, develops, implements, and evaluates the quality of operations.

Supports regulator inspections, coordinates submission preparation, and tracks remediations.

Supports cyber regulation awareness program catering to various roles in the entity.

Delivering on the Needs of Key Stakeholders

Understands and meets the needs of key stakeholders.

Communicates concepts in a clear and persuasive manner that is easy to understand.

Demonstrates an understanding of business priorities.

Supports achievement of performance goals, budget goals, team goals, etc.

Generates and provides accurate and timely results in the form of reports, presentations, etc.

Providing Technical Support and Consultation

Provides recommendations to improve the effectiveness of processes and programs.

Demonstrates advanced knowledge of job-relevant issues, products, systems, and processes.

Demonstrates advanced knowledge of function-specific procedures.

Applies knowledge/judgment to achieve business goals.

Foresees, identifies, and resolves problems.

Keeps up-to-date technically and applies new knowledge to job.

Performs other reasonable duties as required for this position.

Marriott International is the world's largest hotel company, with more brands, more hotels and more opportunities for associates to grow and succeed. Be where you can do your best work, begin your purpose, belong to an amazing global team, and become the best version of you.

Information Security

6 days ago

Bank of Singapore Singapore

At Bank of Singapore, we are constantly on the lookout for exceptional individuals to join our team. We promote a culture of openness, teamwork and fairness. Most importantly, we invest in our people through our programmes that develop them on both professional and personal level ...
Information Security

3 days ago

Bank of Singapore Singapore

Bank of Singapore SingaporePosted 2 hours ago Permanent Competitive · - Information Security & Digital Risk (Associate Director) · - At Bank of Singapore, we are constantly on the lookout for exceptional individuals to join our team. We promote a culture of openness, teamwork and ...
Information Security

3 days ago

Argyll Scott Singapore

**Are you have passion in Cyber Security? And would want to be a part of Global fuctions?** · - Attractive Salary Package / plus approxmately up to 2 months bonus · - 12 months Contract position with - possibly extendable/convertible/renewable · **Job Description;** · - Perform v ...
Associate, Information Security

1 week ago

Ambition Singapore

**Job details**: · Posted 11 April 2023 · SalaryNegotiable · LocationSingapore · Job type Permanent · DisciplineTechnology · Reference264657_ · We are seeking an **Associate, Information Security & Technology Risk Management** to join a corporate & investment bank. This is a reg ...
Lead, Information Security

4 days ago

AIA Singapore

Do meaningful work with us. Every day. · At Amplify Health, we're looking for individuals with ambition, resilience and passion for healthcare, insurance, wellness and digital technology. As a fast-growing business with the ambition of making people and communities across Asia he ...
Information Security Officer

1 week ago

KS CONSULTING PTE. LTD. Singapore

Our client, a leading financial services company, is looking to hire Information Security personnel. The incumbent will be responsible for maintaining information security guidelines and procedures for Asia region as well as managing the security processes to enhance the security ...
Information Security Specialist

2 days ago

ALLIANZ INSURANCE SINGAPORE PTE. LTD. Singapore

**Responsibilities**: · **Information Security** · - Assist in executing Risk Management Compliance remediation plans by Chief Information Security Officer · - Lead/Assist in the documentation and planning for all security-related information, including guidelines, incident respo ...
Information Security Engineer

6 days ago

ALPHAEUS PTE. LTD. Singapore

Essential Job · **Responsibilities**: · - Enterprise security architect, with domain expertise on IAM and zero trust solutions. · - Partnering with enterprise architecture and product teams to design secure identity and access management solutions on hybrid technology platforms t ...
Information Security Analyst

21 hours ago

ITCAN Pte Ltd Singapore

IT Security Officer (ITSO) · Perform IT security operations involving activities such as security log reviews, vulnerability assessments, security access review and security configuration review to ensure compliance based on customers' requirements. · Critical Key Functions and K ...
Information Security Auditor

1 week ago

DFC RESOURCES PTE. LTD. Singapore

Shortlisted applicants will be considered for the role of Information Security Auditor / Data Privacy Assessor / IT Auditor / Lead Auditor · Key Responsibilities: · Execution of the Information Security and Data Privacy related audit/assessment process · Exhibits appropriate judg ...
Information Security Analyst

1 week ago

percept-solutions Singapore

Develop and continually refine the security framework, information security policies, processes, procedures, and guidelines. · Ensure compliance with these policies and procedures through regular security reviews and audits, including log analysis and security assessments of cust ...
Information Security Manager

1 week ago

SPARROW RESEARCH PTE. LTD. Singapore

**Job Summary** · Implement and oversee Sparrow's IT security operations framework, including security operations role definitions, monitoring, incident and event management, privileged access management, and overall security architecture. Ensure compliance with industry standard ...
Information Security Engineer

1 week ago

Deel Singapore

**Who we are is what we do.** · Deel and our family of growing companies are made up of global teams dedicated to helping businesses hire anyone, anywhere, easily. · The team comprises over three thousand self-driven individuals spanning over 100 countries, and our unified yet di ...
Engineer (Information Security)

1 week ago

Good Job Creations Pte Ltd Singapore

Provides security analysis of IT activities to ensure that appropriate security measures are in place and are enforced. · - Assists with the development and maintenance of corporate security policies and procedures, the remediation of identified risks, and the implementation of s ...
Cybersecurity and Information Security

1 week ago

Experis Singapore

**Responsibilities**: · - Implement, manage, and run Firewalls, IPS, anti-DDoS & Cloud WAF solutions, Encryption tool and APT solutions. · - Ensure adequate support and maintenance of security devices, with vendor support. · - Conduct regular User Account/Access and Firewall Rule ...
Information Security Manager

1 week ago

SINGAPORE AEROSPACE MANUFACTURING PTE LTD Singapore

SAM is looking to fill the position of **Information Security Manager **. This is a regional role and is overall in-charge of all the entities under SAM. He/She will report to the CEO. · **Responsibilites** · - To develop and implement a long-term Information Security & Cyber Sec ...
Information Security Engineer

1 week ago

PAYPAL PTE. LTD. Singapore

We are seeking motivated Security Engineers to join PayPal, Threat Management Engineering team in the Enterprise Cyber Security Org. In this role, you will report directly to the Security Engineering manager and work with various engineering teams, all things related to Cyber Sec ...
Director, Information Security

1 week ago

Ensign InfoSecurity Singapore

Ensign is hiring · As Director, Information Security, you will play a crucial role in implementing Ensign's cybersecurity vision. Reporting to the Information Security Office, you will collaborate with senior management and business units on cybersecurity initiatives. You will p ...
Information Security Consultant

6 days ago

ISO CONSULTANTS PTE. LTD. Singapore

**Major Responsibilities** · - Provide leadership to Information security projects at client organizations. · - Understand the applicable legal, statutory, and regulatory requirements and ensure client compliance to those requirements. · - Perform gap analysis against ISO 27001 a ...
Information Security Specialist

5 days ago

COMMERZBANK AKTIENGESELLSCHAFT Singapore

**Job purpose**: · This position is part of the Asia information Security and Data Protection function in Singapore with focus on information security and third-party risk management. · **Key activities**: · - Assisting the Head of Information Security Asia in implementing and ma ...