Senior Specialist, Information Security & Data Protection

Salary: $7,500 – $9,500 per month

12 Months Contract
Working hours: Monday – Thursday 8.30AM – 6PM & Friday 8.30PM – 5PM
Location: Tai Seng Drive

We are hiring IT talent on behalf of our client, a reputable organization with a strong presence in its industry, support business-critical technology initiatives

Responsibilities:
Responsible for maintaining, implementing and monitoring Information security standards and controls across cyber security domains over entire spectrum including identification of issues and threats, operational security, security monitoring and incident management to ensure that information assets are secure to achieve or exceed Confidentiality, Integrity and Availability (CIA) objective.

Coordination and implementation of IT security activities and plans to provide reliable information and system security, effective IT disaster recovery and business continuity in line with business strategy and functional objectives, and Group guidelines and policies

Internal customer

• 1st line escalation contact for regional Information Security (IS) incidents.

• 1st line escalation backup for Data Protection (DP) incidents and complaint handling.

• Drive IS and DP awareness for APEC region within area of responsibility.

• Drive anti-phishing awareness for APEC region within area of responsibility.

External customer:

• 1st contact and liaison for external IS incident handling

• 1st backup contact and liaison for external DP incident handling

Internal stakeholder

• Provide internal consultancy to APEC Country ISDP Managers and Country IT Heads on IS and DP matters.

• Be the IS and DP “Advisor ” if an IT or Business Crisis Management Team (CMT) is formed.

• Be the liaison with Operations Security, ensuring alignment on governance, risk and compliance. Also sharing threat intelligence.

• Be the support liaison with the Regulatory Affairs manager in Operations for IS and DP matters.

• Be the support liaison with the Regional and Global IS organization.

• Support APEC RISO & Regional DPO on Regional, Global ISDP activities and initiatives

External stakeholder:

• Develop and maintain key contacts in regulators applicable to IS and DP relevant to the Transport Sector.

• Develop and maintain key contacts in business groups applicable to IS and DP within APEC, particularly relevant to the Transport Sector.

Internal process:

• Ensure the feedback / input provided to DPDHL ISTM, Data Protection policies and guidance

• Ensure the IS and DP controls in cBIT Process “cB05 Manage IT Controls (CRISP) and Audits” are adequately controlled.

• Ensure all appropriate IS and DP activities and records are maintain in GSN and OneTrust for the area of responsibility

• Ensure IS & DP controls are designed appropriately and reviewed often to ensure information security and data protection standards are maintained inline with changes to IT Systems.

• Working within our Quality Management System ensure regular internal audits are conducted on critical IS and DP controls by qualified internal auditors.

External process

• Provide support to Director, Regional Information Security and Data Protection (APEC), in conjunction with GBS legal, any breach or other reporting to regulators on IS and DP matters.

• Responsible for 3rd Party Partners IS and DP security assessment and compliance for IS and DP.

• Be the 1st point of contact and liaison during any external cyber incident handling process.

Requirements:

• 5+ years of experience in information security, risk, privacy and compliance role.

• Bachelor Degree in information security, computer science or a similar field.

• Solid experience in evaluating cybersecurity controls and providing guidance to remediate issues

• Technical experience and competency in two or more of below areas:- Security Program Management- Governance Risk and Compliance- Security Monitoring and Incident Response- Professional Services (Security toolset design/implementation)

• Good knowledge of technologies related to Network and Computing Security

• Good knowledge of country’s laws, rules and regulations on information security, data protection and privacy

• Good knowledge of latest trends (e.g. AI) and how to protect the business from new threats

• Additional preferred certifications: CISSP/CISM/CISA/CRISC/CGEIT/ISO27001/International Association of Privacy Professionals (IAPP) certifications such as CIPP/E, CIPP/US and/or CIPM

We regret to inform that only shortlisted candidates will be notified.

"By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOL Singapore Pte Ltd (""PERSOL"") and its local and overseas subsidiaries and affiliates to collect, use and disclose your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services, complying with Government’s health advisories and such other purposes stated in our Privacy Policy.

We may use artificial intelligence (""AI"") and machine learning technologies to support our recruitment and placement services, including screening resumes, assessing qualifications and experience, and identifying skills and job matches. Where permitted by applicable law, we may also use such personal data to develop, train, test, improve and/or fine-tune AI and machine learning technologies that support our recruitment and business operations.

For more information on how we collect, use, disclose and protect your personal data, please refer to our Privacy Policy: https://www.persolsingapore.com/policies. If you wish to withdraw your consent, including consent relating to the use of your personal data for AI-enabled recruitment activities and AI development activities, please email us at sg.dataprotection@persolapac.com."

PERSOL Singapore Pte Ltd

• RCB No. 200007268E • EA License No. 01C4394

• REG Number. R23117757 (Loh Yi Yuan)