IT Assurance Specialist

Prudential

Singapore
Permanent
Full-time

2 months ago

Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.To minimize and mitigate the IT security risk and protect the organization’s information against a variety of cyberthreats (cyberattacks, data theft & data leakage, etc.) in line with company’s policies, standards, procedures, MAS TRM & PDPC and other applicable financial sector regulations.

Assist IT Assurance lead and take ownership of the Identify access management system (IAM) and assist onboarding applications. Conduct annual and semi-annual company-wide user and privileged access review and remediation. Propose and implement further controls to mitigate user access related risk and issues.
Ensures IT risk and security controls are implemented and mitigated on time in compliance with business strategies, organization policies and regulatory requirements.
Liaise with stakeholders and follow-up to close any identified gaps as per changes and gap assessment of regulatory and organization’s policies.
Consolidate and provide evidence as requested by internal, external, and regulatory audit related in information technology.
Assist improvement related to incident, change, problem, and service requests to make sure that SLA are met.
Works with IT team to make sure that security tools such as AV, DLP, VA scanning agents are compliant with company’s IT security policies, standards.
Monitoring KRI (Key Risk Indicator) and follow-up to improve company’s IT security posture.
Communicate and oversee of Group IT security projects impacting PACS.
Be the liaison point between business and IT staff in ensuring vulnerability management issues and remediation, baseline configurations & firewall rule review are coordinated and managed.
Follow-up and track dispensations, Pentest and vulnerability issues are within company’s risk appetite and tolerance.
Ensure IT operations and activities are complied with IT security standards set by PACS Group and regulatory guidelines by the Monetary Authority of Singapore (MAS) and PDPC.
Suggest and implement continuous improvement and automation of daily BAU activities.
Work with different organization functions to ensure employees are aware & trained about cybersecurity issues & practices.

Experience and Qualifications:

Familiar with access management and experiences in supporting company wide access reviews, privilege access reviews and remediation.
Technical skills and hands-on experience with Information Security related solutions and technology such as, Active Directory, LDAP, EDR, Antivirus, WAF, Proxy, Firewall, DLP and SIEM & Vulnerability management.
Basic understanding on Cyber Security, IT networking, Windows OS, technical troubleshooting, and problem solving.
Experience in supporting IT Audits
Experience with MAS TRM, Cyber Hygiene Notice and related regulations.
Sound knowledge of Information Security management frameworks such as NIST CSF, ISO 27001 & best practices.
Experience with implementation or administering of security technologies.
Experience in design and develop reports and data visualization dashboards using Power BI, and various reporting & visualization tools.
Experience in Agile / Scrum, CI/CD, DevSecOps will be beneficial.
Experience in Software Development Lifecycle will be beneficial.
Independent and works well across different functions in dynamic environment.
Excellent problem analysis skill and innovative and creative in developing solutions.
Strong sense of drive and commitment to deliver on responsibilities.
Strong verbal and written communication skills
Self-motivated and results oriented, including ability to prioritize conflicting demands.
Ability and willingness to be hands-on.

Working Experience

2-8 years in IT Security or Technology Risk Management role

Professional Qualifications

Certification in cloud technology or any other IT Security related such as SSCP, CompTIA Security+ or CEH.

EducationBachelor in Computer Science, Computer Engineering or equivalentLanguage

Fluent written and spoken English

Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time / fixed-term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.

Prudential

Apply Now