IT Security
About the role
The IT Security Specialist plays a critical role in strengthening the organization's cybersecurity posture by overseeing and reviewing technical controls that mitigate IT security risks. This position demands understanding of security frameworks and hands-on expertise in key areas such as baseline hardening of systems, firewall rule review, and Identity and Access Management (IAM) domains. The specialist ensures that all controls are effectively aligned with internal policies, standards, and procedures, as well as external regulatory requirements including MAS Technology Risk Management (TRM) guidelines, Personal Data Protection Commission (PDPC) regulations, and other applicable financial sector mandates.
Key responsibilities
Assist IT Security Senior Manager/Manager to take ownership of the Identity access management system (IAM), assist onboarding applications and support day to day BAU operations.
Conduct annual and semi-annual company-wide user and privileged access review and remediation. Propose and implement further controls to mitigate access related risk and issues.
Perform role-based access reviews
Plan, prepare and execute annual baseline configuration and firewall rule review exercises.
Be the liaison point between business and IT staff in ensuring baseline configurations & firewall rule review are co-ordinated and managed.
Ensures IT risk and security controls are implemented and mitigated on time in compliance with business strategies, organization policies and regulatory requirements.
Consolidate and provide evidence as requested by internal, external, and regulatory audit related to security.
Ensure IT operations and activities are in compliance with regulatory requirements such as PDPA, MAS TPRM, MAS TRM and Prudential group policies, standards and procedures pertaining to security.
Suggest and implement continuous improvement and automation of daily BAU activities.
Track and monitor relevant security metrics for reporting and action review.
About you
Degree in IT, Computer Science/Engineering or equivalent.
Prior work experience in the financial industry is preferred.
Certification in IT Security related such as OSCP, CISA, relevant cloud certifications are preferred.