Location: Singapore

Cybersecurity Controls & Monitoring

• Assist in implementing and maintaining cybersecurity measures, Support the documentation and analysis of security measures, incidents, and vulnerabilities

Technology Administration

• Help build up technology and cybersecurity policies
• Prepare technology reports for internal and external stakeholders
• Assist with the setup, configuration, and maintenance of hardware systems and software services
• Support IT infrastructure management, including user account administration and system updates

Technology Development

• Provide technical support for ongoing projects and initiatives led by the CTO and Lead Developer
• Assist with research and development tasks, including developing solution designs, building process flows, and testing new technologies
• Support cloud infrastructure management on Microsoft Azure, including Kubernetes-based deployments
• Gain exposure to our backend stack (Node.js) through ongoing dev projects

Information Security and Risk Management

• Support the CISO in implementing the organisation’s cybersecurity strategy, roadmap, policies and security control framework
• Conduct security risk assessments, monitor emerging threats and vulnerabilities, and drive identified remediation actions through to completion
• Lead the day-to-day delivery of security assurance and certification programmes, including SOC 2 and ISO 27001, and coordinate control assessments, audit readiness and remediation
• Support compliance with applicable financial services regulatory and cybersecurity requirements, and maintain appropriate security risk, control and reporting records
• Conduct third-party security assessments, support client security due diligence, and deliver cybersecurity awareness and training across the organisation

Security Operations and Incident Management

• Oversee and operate security controls across cloud infrastructure, endpoints, networks, identity and access management, privileged access and other technology environments
• Manage vulnerability assessments, penetration testing and remediation, and monitor and investigate security events and vulnerabilities
• Maintain and test cybersecurity incident response procedures, and coordinate the investigation, containment, remediation, and post-incident review of security incidents
• Work closely with the System Administrator, providing day-to-day guidance on secure configurations, patching, endpoint security, access controls and other security priorities

Application and Product Security

• Partner with Engineering and Product to embed security throughout the design, development, testing and deployment of products and platforms
• Drive Secure Software Development Lifecycle (Secure SDLC), DevSecOps and security-by-design practices across the technology development lifecycle
• Assess security risks across applications, cloud infrastructure, APIs, containerisation, blockchain and other emerging technologies, and work with Engineering to remediate identified vulnerabilities

Own our Workplace Technology and Endpoint Environment

• Administer and optimise our Microsoft environment, including Intune, Microsoft Defender and identity/access controls
• Manage Windows and macOS endpoints, device configurations, security policies and application deployment
• Manage user identities, permissions, access provisioning and de-provisioning
• Maintain secure and reliable systems across our technology environment

Strengthen our Security Posture

• Manage endpoint protection, patching, vulnerability remediation and security configurations
• Monitor system health and security alerts and coordinate responses to incidents
• Support root cause analysis and implementation of corrective actions
• Continuously identify opportunities to improve system security, reliability and resilience

Build and Automate

• Automate repetitive administration and operational processes wherever possible
• Improve device deployment, access management, monitoring and reporting workflows
• Maintain clear system configurations, runbooks and technical documentation
• Help us build technology operations that can scale as the business grows

Support Cloud and Infrastructure Operations

• Support cloud environments across AWS and/or Azure
• Assist with network, virtualisation and containerised environments where required
• Maintain backup, recovery and business continuity processes and periodically test their effectiveness

Operate in a Regulated Fintech Environment

• Support technology controls aligned with MAS TRM, SOC 2 and ISO 27001
• Maintain evidence and documentation required for technology risk and security controls
• Work with Security, Risk, Compliance and external auditors on assessments and remediation
• Help translate regulatory and security requirements into practical technical controls