Cyber Security Manager (Security Solutioning) - Bukit Merah

Responsibilities:

• Develop, monitor and improve BCS’ overall cyber defense strategy and manage BCS’ portfolio of cybersecurity solutions, ensuring a comprehensive cyber threat exposure and vulnerability management program.
• Recruit, train, and retain cybersecurity specialists skilled in security solutions to operate, monitor, and enhance BCS’ cybersecurity posture.
• Work closely with Finance to ensure that the cybersecurity solutions are financially sustainable and strategically aligned. This involves planning and monitoring spending on security tools and solutions, providing budget forecasts and justifying technology investments.
• Obtain management's endorsement of security policies, standards and procedures by articulating cost and benefits.

• Provide security expertise during the initiation of new projects, organizing security requirements, conducting risk assessments, and ensuring compliance with secure-by-design principles.
• Oversee the implementation of security tools and solutions, including its smooth integration with existing application and infrastructure.

• Represent the Cyber Defense unit in cross-functional meetings, forums, and industry engagements to advocate for and align cybersecurity initiatives.

Requirement:

• Bachelor’s or Master’s in Computer Science, Computer Engineering, Information Security, or related fields.
• Minimum of 10 years in technology and cybersecurity roles, with at least 5 years in leadership or managerial responsibilities.

• Familiarity with MAS Cyber Hygiene, Technology Risk Management Notices, MAS Technology Risk Management Guidelines, Cybersecurity Act, and Cybersecurity Code of Practice (CCoP).
• Proficient in implementing and using frameworks such as NIST Cybersecurity Framework, MITRE ATT&CK, Cyber Kill Chain, and OWASP Top 10.
• In-depth knowledge of cybersecurity principles, technologies, and best practices, with hands-on experience in vulnerability management tools, NGFW, EPP, XDR, DLP, NIDS/NIPS, email defenses, PAM, IAM/IGA, and DAM.
• Proficiency in architecting secure, scalable, and resilient solutions within hybrid cloud environments, along with a strong grasp of CI/CD and DevSecOps methodologies.
• Demonstrated leadership skills, with proven ability to foster a collaborative, high-performance team culture.
• Ability to make informed decisions under pressure and effectively manage crisis situations.
• Excellent communication, analytical, and problem-solving skills, with the ability to engage effectively with stakeholders at all levels.