Cybersecurity Lead(6 months contract)

Our client oversees and operates digital asset-related businesses. Our client aims to transform the financial industry by building a tech-enabled institutional grade ecosystem for issuance, distribution, advisory, custody, listing, and liquidity of digital assets (securities and crypto) through its portfolio companies. We are growing our presence in the region to help shape the digital asset ecosystem and contribute towards making Singapore one of the world's leading digital asset hub.Position Overview : Our client is looking for a Cybersecurity Lead to join our Information Technology Team. This person will be responsible for driving the improvement of our client's IT security posture by : engaging with technology stakeholders to proactively identify cybersecurity risks at a detailed and technical level;designing and implementing technical risk mitigating measures;supporting the TRM compliance and ISO 27001 programs;and monitoring and investigating security alerts.Key Responsibilities include (but are not limited to) :

• Identify cybersecurity risks and mitigate them by designing technical risk solutions and working with the appropriate teams to implement them. This includes security risks in our client's developed systems, infrastructure, office network etc.
• Assess and evaluate the IT security aspects and cybersecurity risks of the critical software, tools, systems etc. that our client uses to achieve its business objectives, especially in the context of cryptocurrency. These include : company assets, cloud infrastructure, self-developed software, 3rd party vendors and software service providers etc. to ensure they align with our client's security and regulatory requirements.
• Working closely with the project management office to maintain and improve our MAS Technology Risk Management compliance and ISO 27001 certification by : crafting policies and developing key security and technical processes; effectively communicating with auditors, regulators etc. to explain our security posture.
• Monitor our client systems, investigate cybersecurity alerts and respond to them appropriately while keeping senior management informed of the emerging situation.
• Creating and conducting IT security training programs for employees of our client.Qualifications and Skills
• Bachelor’s degree in Information Security, Computer Science, or equivalent.
• At least 5 years of relevant experience in financial institutions / fintechs.
• Good appreciation of the enhanced risks of cryptocurrency brings and how to mitigate these risks.
• Strong understanding of MAS TRM, ISO 27001, CIS or equivalent standards.
• CISM / CISSP certification or equivalent.
• Technical experience with using security tools.
• DevSecOps experience is a plus.
• Excellent written and verbal communication skills. Especially with respect to senior stakeholders, auditors and regulators.
• Comfortable with ambiguity and changes in a fast-paced environment