Responsibilities

Provide leadership and strategy for cybersecurity detection and response operations
Develop long term strategies and roadmap to progressively mature and enhance security operations and technology to defend the company's technology assets against cyber threats.
Build and maintain the Singapore Security Operations Centre (SOC), develop a service catalogue to support quality and service management. Progressively reduce SOC duplication and footprint across business units to drive efficiency.
Manage a highly specialised team of security analysts, incident managers, incident responders and threat intel specialists to effectively monitor, defend and response to cyber threats and events.
Develop critical in-house talent and capabilities, while leveraging on 3rd party services. Aggressively drive automation using AI and other technology.
Take leadership role to detect, manage and respond to cybersecurity incidents and provide updates to internal stakeholders and management. Work closely with Group Risk Management (GRM) to support crisis management processes and exercises.
Build and maintain an effective threat intel capability and working collaboratively with other internal SOCs and partners to coordinate defensive tactics and playbooks against cyber threats.
Continuously identify and enhance vulnerability management programmes, SOC technology stack, 24x7 operations, incident and crisis management processes, automation, and capabilities to progressively strengthen the security posture of Singtel and its group of companies.
Provide periodic updates to internal stakeholders and management on the state of defence posture and capabilities.
Develop close partnership with public and private sector entities to enhance threat intel and defensive capabilities, including joint cyber exercises, where it makes sense.

Requirements

Bachelor Degree in Computer Science, Computer Engineering, Electrical Engineering or other relevant field of study
Professional security management certifications such as Certified Information Systems Security professional (CISSP), Certified Information Security Manager (CISM), specialised SANS certifications, or other similar credentials, is required.
Minimum 15 years of experience as in IT or security roles.
Minimum 10 years of practical experience managing security operations, SOCs or equivalent security programmes.
Experience working with Internal Audit, Governance and Compliance teams.
Competence in the following :
Business Needs Analysis
Business Risk Management
Cyber Forensics
Cyber Incident Management
Cyber Risk Management
Partnership Management
Network Security
Platform Security
Security Assessment and Testing
Security Programme Management
Security Strategy
Stakeholder Management
Threat Analysis and Defence
Threat Intelligence and Detection
Security Assessment Tools
Security Monitoring Tools
Possesses advanced knowledge in data security, physical security, regulatory compliance, and data loss prevention strategies.
Demonstrated expertise in communication, leadership, decision-making, talent development, and resource management.
Have exposure to other compliance audits such as PCI, PDPA, GDPR, CCoP mostly related to security part.