Senior IT Compliance & Cybersecurity Analyst - Financial Service

About the team

The IT Compliance & Risk unit within SeaMoney is responsible for managing the Information Technology and Cyber Security risk profiles, including risk identification, management and mitigation across the group (including overseas countries).

What you'll do

• Establish and oversee the implementation of cyber security and information technology risk policies, technology and tools, and governance processes to create solutions for minimizing losses from cyber security issues, failed internal processes, inadequate controls, emerging risks and regulatory breaches
• Support security and technology compliance to internal policies, processes, and controls, as well as compliance to external regulations while proactively evaluating existing control environment for enhancement opportunities
• Work effectively with business, operations, engineering, security and infrastructure teams on evaluating, recommending, delivering and managing security/ IT solutions across Cyber and IT domains
• Manage audit/ regulatory reviews including coordination, communications, and required actions with internal auditors, external auditors, regulators and internal stakeholders as appropriate

Requirements

• Bachelor's degree or above in computer science, technology, finance, accountancy or related disciplines
• At least 3 years of full time working experience in IT Compliance, IT Risk, Information Security, or IT Auditing
• Strong interest / experience in the following technology categories:
  • Information Security
  • Infrastructure Security
  • Application and Data Security
  • Cloud Security
  • CI/ CD, containerization security
• Possess solid understanding on banking-related applications and technologies in terms of products and supporting services, system and business operation procedures, risk management, regulatory compliance, etc.
• Knowledge of information security standards (i.e. ISO 27001, PCI, NIST, CIS)
• For IT Risk applicants, knowledge and expertise of industry Information Security Standards and relevant certifications (CISA, CISSP or equivalent); 
• Self-driven, positive attitude and team player striving for team success
• Resourceful and able to adapt in a dynamic environment