Our client, an exciting new digital bank, is looking for a Director, Lead Information Security Manager (Cloud) to join their team in Singapore. In this role, you will play a critical role in ensuring the security and resilience of our cloud infrastructure and data assets, with a strong emphasis on cloud security risk management within the financial services sector.
Responsibilities:
Develop a comprehensive understanding of our financial services organization's cloud infrastructure, encompassing public, private, and hybrid cloud environments, and associated services.
Conduct thorough risk assessments, specifically focused on cloud security, to identify vulnerabilities, threats, and potential impacts on our financial services operations.
Design and implement robust risk management strategies, frameworks, and controls tailored to mitigate cloud security risks within the financial services sector.
Collaborate closely with cross-functional teams, to integrate cloud security risk management practices into relevant processes and projects.
Stay at the forefront of emerging cloud security threats, trends, and best practices within the financial services industry to proactively address potential risks associated with cloud computing.
Collaborate with external vendors, cloud service providers, industry associations, and regulatory bodies to stay abreast of evolving cloud security standards, regulations, and compliance requirements within the financial services sector.
Prepare and present comprehensive reports to senior management and stakeholders, highlighting key cloud security risks, vulnerabilities, and recommended mitigation strategies specific to the financial services industry.
Manage and mentor a team of technology and cyber risk professionals, empowering their growth and development in cloud security risk management within the financial services sector.
Qualifications:
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. Master's degree preferred.
Extensive experience (15 years) in technology and cyber risk management, demonstrating a strong focus on cloud security risk management within the financial services sector.
Deep knowledge of cloud computing platforms, services, and architectures (e.g., AWS, Azure, Google Cloud) and associated security best practices, specifically tailored for financial services organizations.
Proven expertise in conducting cloud security risk assessments, threat modeling, and vulnerability management within the financial services sector.
Familiarity with relevant industry frameworks and standards, such as MAS TRM
Certifications such as Certified Cloud Security Professional (CCSP), AWS Certified Security – Specialty, Certified Information Systems Auditor (CISA), or Certified Information Security Manager (CISM) are highly desirable.
Excellent communication and interpersonal skills, with the ability to effectively collaborate and influence stakeholders at all levels of a financial services organization.
Exceptional analytical and problem-solving abilities, with a proactive and results-oriented mindset.
Previous leadership experience, including managing teams and driving successful outcomes within the financial services sector