Director, Information Security Risk Lead - Singapore - Eames Consulting

Eames Consulting

Verified Company

Singapore

1 week ago

Posted by:

Wei Jie

beBee Recruiter

Description

Our client, a premier financial institution with a large presence in the region, is looking to hire a Director, Information Security Risk Lead to join their growing team in Singapore.

As a Director, Information Security Risk Manager, you will play a critical role in enhancing the bank's security posture by identifying, assessing, and mitigating potential risks.

You will collaborate with both business and technical stakeholders to implement robust security measures, ensuring the confidentiality, integrity, and availability of our systems and data.

Responsibilities:

Lead security risk assessments, identify potential vulnerabilities, and work closely with relevant teams to develop risk mitigation plans.
Collaborate with technical teams to design and implement security controls and solutions, ensuring they align with the bank's risk appetite.
Evaluate the effectiveness of existing controls and make recommendations for enhancements to mitigate identified risks.
Communicate risk assessment findings and recommendations to senior leadership and stakeholders, highlighting potential impact and remediation options.
Stay informed about emerging security threats and industry best practices, and integrate this knowledge into the bank's security policies and procedures.
Work closely with internal audit and compliance teams to facilitate security audits and assessments

Qualifications:

Bachelor's or Master's degree in Computer Science, Information Systems, or a related field.
15+ years of experience in information security, with a focus on risk assessment and management within the financial services sector
Extensive knowledge of risk assessment methodologies, frameworks, and industry standards (e.g., ISO 27005, NIST, FAIR, MAS TRM).
Strong understanding of information security principles, controls, and technologies.
Proven experience leading and managing a team of security professionals.
Excellent analytical and problemsolving skills, with the ability to assess risks and develop appropriate mitigation strategies.
Strong communication and presentation skills, with the ability to effectively communicate complex concepts to technical and nontechnical stakeholders.
Relevant certifications such as CISSP, CISM, or CRISC are highly desirable.

If you are a seasoned information security professional with a passion for risk assessment and a drive to protect critical assets, we encourage you to apply.