AVP / Senior Associate, Cyber Security Engineer, Information Security Services, Group Technology

Business Function

Group Technology enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group Tech, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

• Drive security projects across the region which involves vendor management, collaboration with stakeholders, business users and application teams.
• Lead overall end-to-end project delivery.
• Keep abreast of relevant technology to improve service delivery.
• Identify areas of improvement through process improvement and/or automation.
• Manage information security management processes, standards and procedures to ensure control effectiveness and service quality.
• Review the methodology used in Cyber defence framework to identify any potential gaps or opportunities for process improvement.
• Work with all stakeholders to ensure cybersecurity risks are managed properly.

• 3+ years working experience recommended with prior work knowledge in the Banking industry will be an advantage.
• Degree in computer science, engineering, or other computer-related field of study.
• Certifications from EC-Council, GIAC, (ISC)² are preferred [CISSP, C|EH, GCIA, CCNA].
• Fluent with programming languages and familiar with security products and network devices.
• Prior experience in implementing security solution and information security governance.
• Knowledge and understanding of emerging risk areas, e.g., mobile, remote access, wireless technologies, DLP, cloud computing, etc.
• Extensive technical experience with network security practices including Intranet, Extranet and Internet access.
• Technical experience with UNIX, AIX, Linux, Windows.
• Knowledge of TCP/IP, DNS, web, wireless security architectures.
• Knowledge of encryption and authentication methods such as 2FA, DES, Digital Certificates, SSL, IPSec and development of DMZ’s.
• Knowledge of intrusion detection (deep TCP/IP knowledge, and cybersecurity), various operating systems (Windows/UNIX), and web technologies (especially internet security).
• Able to read and understand packet level data, handle Network/Host Security products (NIDS/NIPS, firewalls, HIPS, AV, scanners, etc.) and understand security events from these tools.
• Able to perform vulnerability assessment and manage such tools/processes, as well as application penetration testing or forensic analysis fields.
• People Skills:
• Be performance oriented; always try to excel past achievements.
• Able to work under pressure during critical situations.
• Able to work in a collaborative manner with peers.
• Communication Skills:
• Can communicate effectively with peers in discussions/meetings.

Apply Now

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognises your achievements.