Senior Cyber Security Specialist - GRC and Awareness

An empowering career at Singtel begins with a Hello. Our purpose, to Empower Every Generation, connects people to the possibilities they need to excel. Every "hello" at Singtel opens doors to new initiatives, growth, and BIG possibilities that take your career to new heights. So, when you say hello to us, you are really empowered to say…“Hello BIG Possibilities”.

Be a Part of Something BIG!

We create great technology that can change the future, and we're looking for people to be part of our digital and 5G journey. If you like to work in a dynamic, leading communications technology group to deliver innovations and excellence across the region, come join our digital, software engineering, data and cyber security teams!

Apply now, and ignite our digital future together.

Make an Impact by

• Drive and perform assessment and gap analysis using Group Control Library to measure control effectiveness against the target maturity level. Recommend corrective action, tracking remediation, and regular reporting to Cyber & InfoSec Head and Singtel IT and BU SLTs.
• Lead Security related initiatives to uplift control to improve the security posture or adhere to regulation requirements.
• Regularly review IAM, Cloud and Web Application security setup against industry best practices and regulatory standards. Provide feedback on Group policies, BU procedures and develop Control frameworks based on evolving threat landscape and zero trust architecture.
• Oversee the monitoring of risk-mitigation measures/deviation and regularly report to management.
• Monitor Security KPI and KRI for enterprise and serve as advisor to business on cyber risk related enquiries.
• Lead and continuously enhance security awareness program in Singtel to foster a proactive security culture through training and security advisory based on industry best practice and cyber threats.
• Conduct phishing campaign and monitor the effectiveness of the security awareness initiative through metrics, driving improvements to adapt to evolving security landscape and risk profiles.
• Develop and implement security metrics, generate reports or dashboard to assess and determine the effectiveness of implemented security standards and controls, and awareness program for improvement.

Skills for Success

• Bachelor’s degree in computer science, Cyber Security, Information Systems, Computer Engineering, or a related discipline.
• Minimum 5 years of Cyber Security experience with at least 3 years in Identity and Access Management, Cloud Security and/or Web Application Security.
• Minimum 2 years of practical experience in reviewing or developing Control libraries and driving adoption, and in performing policies and process gap analysis.
• Have at least 2 years of developing security awareness program including security advisory.
• Experience in technology controls and policy review.
• Good knowledge in security architecture on cloud related, on-premises virtual infrastructure, containerised applications, network, and database.
• Strong understanding of IAM concepts, including identity lifecycle management, RBAC, access governance and “Least Privileged” access management methodology.
• Experience developing and delivering security awareness programs.
• Good to have:
• Experience with IAM tools and technologies (e.g., SailPoint, Okta, Microsoft Azure AD, Sliverfort).
• Desire to learn, develop and integrate new capabilities in using digital technology that is not limited to:
• social media
• AI/Knowledge-based
• other web-based technologies
• Preferably have exposure to other compliance audits such as CSA CCoP.
• Good analytical and communication skills.
• Ability to work as a team member and independently with minimal supervision.
• Have exposure to other compliance audits such as ISO27K, CIS Controls and other cyber security framework.

Rewards that Go Beyond

• Flexi work arrangements.
• Full suite of health and wellness benefits.
• Ongoing training and development programs.
• Internal mobility opportunities.