Senior Manager, Client Information Security (Infra)

Senior Manager, Client Information Security (Infra)

NCS is the leading technology services firm that operates across the Asia Pacific region in over 20 countries, providing consulting, digital services, technology solutions, and more.

We believe in harnessing the power of technology to achieve extraordinary things, creating lasting value and impact for our communities, partners, and people. Our diverse workforce of 12,000 has delivered large-scale, mission-critical, and multi-platform projects for governments and enterprises in Singapore and the APAC region.

We’re searching for a Senior/Manager, Client Information Security (Infra) to be part of our diverse team of talent here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

1. Drive the implementation of NCS cybersecurity, data protection, and privacy policies, standards and processes within the practice. You will work to continually improve the security posture of projects through proactive risk management and the establishment of a broad range of cybersecurity controls.
2. Provide direct support to colleagues to ensure cybersecurity is addressed throughout the engagement delivery lifecycle, from infrastructure and security tooling choices to the secure storage, processing and deletion of client data.
3. Act as a single point of contact and escalation for the SOC, Threat Intel and Crisis Response teams for practice-related cybersecurity incidents, ensuring timely identification, remediation and lessons learned.
4. Manage the security SLA governance and provide practice-level cybersecurity reporting, metrics and forecasting to leadership.
5. Responsible for information security, data protection, privacy, GRC, and audit requests for the practice, acting as single point of contact on relevant client security assessment and audits execution. Eg. independent third-party attestations of industry cybersecurity standards and certifications, such as ISO 27001, SOC 2 for practice-specific solutions and products.
6. Contribute to the definition of the client specific security baseline. Consult and advise internal and external clients about security topics and support the opportunity management process by providing subject matter expertise and support.
7. Help win client business by providing cybersecurity assurance to RFIs, RFPs, proposals, contract drafting, security questionnaires, workshops and other client due diligence processes.

A little about you:

1. Degree/Diploma or higher in Computer Science, Information Systems or equivalent.
2. At least one industry recognized security certification is, such as Certified Information Security Management (CISM), Certified Information Systems Security Professional (CISSP).
3. 5+ years of experience in information security management either in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence or Vulnerability Management.
4. Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review).
5. Understanding of information security principles, ISO 27001 controls, Center for Internet Security (CIS) controls, Cloud Controls Matrix (CCM) controls.
6. Experience with application security, security technologies and tooling, e.g., vulnerability scanners, firewalls, network, application security, security technologies (system hardening, IDS/IPS, firewall).
7. Experience carrying out security incident response, penetration testing, vulnerabilities scanning, and security assessment.
8. Senior stakeholder management and working across various parts of the organization.
9. Team player with good interpersonal, influencing skills.
10. Strong communication skills, both written and verbal.