AVP, Cyber Threat Exposure & Vulnerability Management, COO Office

GIC is one of the world’s largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world’s industry leaders. As a leading global long-term investor, we Work at the Point of Impact for Singapore’s financial future, and the communities we invest in worldwide.

Chief Operating Officer (COO) Office

The COO Office supports our COO to streamline operations and align them with strategic goals. You will work with the COO, Heads of Departments, and stakeholders across GIC to achieve operational excellence.

Cyber Security, Information & Technology Risk Management

You will be a part of an independent risk management function to protect the firm’s information technology assets, including business data, from external threats and operational risks, and to facilitate the firm’s digitalisation journey in a secure manner.

What impact can you make in this role?

You will be empowered to be at the top of your game by providing strategic partnership, and innovative technology solutions that supports GIC’s vision of being a tech-driven, global, long-term investment firm.

What will you do as a Cyber Threat Exposure & Vulnerability Management Specialist?

1. Manage a comprehensive cyber threat exposure and vulnerability management program. This includes vulnerability and penetration testing (VAPT program and vulnerability operations).
2. Monitor and manage emerging threats using the threat exposure management lifecycle (scope, discover, prioritise, validate and remediate).
3. Participate in the design, testing and implementation of relevant security controls to achieve a fully integrated and automated practice over time.
4. Provide governance on threat exposure, vulnerability remediation and emerging threats.
5. Collaborate with stakeholders to align security practices with organisation goals.
6. Manage cyber security vendors.
7. Solicit, manage feedback, and understand unique business requirements to strengthen our security posture or balance risk in the controls.
8. Collaborate with relevant departments to ensure security measures are integrated into all aspects of the business.
9. Develop and manage relationships with industry community such as FS-ISAC, relevant local or regional cyber security organisations or industry peers.
10. Assist in audit, regulatory and incident reporting matters where relevant.
11. Establish a culture of collaboration, excellence, and teamwork.
12. Keep up to date with industry and technology trends and breaking news that may be relevant to keep GIC secure.

What qualifications or skills should you possess in this role?

1. Bachelor’s degree in computer science, Information Security, or a related field.
2. At least 3-5 years of experience working in a threat exposure and vulnerability management function or similar.
3. Experience with deep and/or broad cyber capabilities such as incident response, threat intelligence, breach and attack simulation, penetration testing, offensive security, and security operations.
4. Strong analytical and practitioner skills, combined with excellent written and verbal communication skills.
5. Ability to break down complex problems and articulate them clearly to a non-technical audience.
6. Relevant certifications in SANS, OffSec or other relevant credentials.
7. Knowledge of cybersecurity organization practices, operations, risk management processes, principles, architectural requirements, engineering, threats and vulnerabilities, including incident response methodologies.
8. Ability to work independently and as part of a team in a fast-paced, dynamic environment.

Work at the Point of Impact

We need to be forward-looking to attract the right people to help us become the Leading Global Long-term Investor. Join our ambitious, agile, and diverse teams - be empowered to push boundaries and pursue innovative ideas, share your views, and be heard. Be anchored on our PRIME Values: Prudence, Respect, Integrity, Merit and Excellence, which guides us in how we make our day-to-day decisions. We strive to inspire. To make an impact.

Flexibility at GIC

At GIC, our offices are vibrant hubs for ideation, professional growth, and interpersonal connection. At the same time, we believe that flexibility allows us to do our best work and be our best selves. Thus, our teams come into the office four days per week to harness the benefits of in-person collaboration, but have the flexibility to choose which days they work from home and adjust this arrangement as situational needs arise.

GIC is an equal opportunity employer

As an employer, we passionately believe every individual brings with them unique diversity of thought and perspectives to meaningfully enrich perspectives of GIC teams to drive competitive performance. An inclusive environment yields exceptional contribution.

GIC is a values driven organization. GIC’s PRIME Values act as our compass, enabling us to fulfil our fundamental purpose and objectives. It is the foundational bedrock which governs our behaviors, our decision making, and our focus. It informs both our long-term strategy as a firm, and the way we relate to our Client, business partners and employees. PRIME stands for Prudence, Respect, Integrity, Merit and Excellence.