Summary Of Responsibilities
The Senior Principal Information Security Specialist's role in the Cyber & Technology Risk Department is broadly, to :
- enhance governance of processes and systems through data and analytics and automation;
- assess and manage cyber security risks both current, emerging, and unknown;
- monitor and ensure compliance with cyber security policies and regulatory requirements; and
- transform the overall tech and cyber risk management processes by automation, integration and data-driven approach.
This role is essential in protecting the country's payments ecosystem against evolving cyber threats. In executing this role, you will lead a diverse team and collaborate with the broader departments and divisions in PayNet.
You will also take a leading role in elevating the payments ecosystem through implementation of collaborative initiatives.
Key Requirements
Understanding of cyber security risks covering both PayNet and the payments ecosystemUnderstanding of international, regional, and local regulatory requirements and guidelines and standards for cyber security, data protection, and privacy specifically for the financial industryExperience and familiarity in implementing leading practices, standards, frameworks, and guidelines for managing cyber security risksExperience related to information and cyber security strategy planning, security architecture design and reviewExperience and understanding of security operations, security management, IT and network infrastructure, IT operations, technology and solution architecture, cloud architecture, and overall IT operations and IT service managementFamiliarity and experience with security technology and solution design and implementation, especially in the areas of security monitoring and detection such as SIEM, SOAR, and overall security operations centre's operations and managementExperience in managing and leading a team, and ability to work cross-function and cross-domainsExperience in AI / ML, GenAI and LLM, and data analytics will be an added advantageAdditional Requirements
Excellent interpersonal, facilitation, and management skills, along with effective communication (both written and verbal) skillsStrong history of external engagement with industry peers, working groups, and cybersecurity communitiesStrong analytical and problem-solving skillsPossess critical and creative thinking skills and a growth mindsetKey Areas Of Responsibilities
Cyber Risk – Enablement and Tooling
Enhance governance processes and systems, leveraging automation, data, analytics and AIEstablish and implement risk-based and threat-based monitoring and reporting utilizing automation and data collection and analysisPrepare and update information security policies, architectures, standards, and technical documentsImprove cyber security risk management and overall Cyber and Technology Risk operations through process improvements, data analytics, automation and AICollaborate with internal teams from various divisions and departments to improve governance and enhance cyber resiliencyCyber Risk Management
Develop and provide input into cybersecurity risk management strategies aligning to corporate strategy and goalsEnhance cyber risk assessment processesPerform cyber risk assessment and assist and provide advice on mitigation measuresParticipate in other periodic assessments and thematic reviews and provide practical recommendationDevelop and maintain cyber risk monitoring for PayNet's ecosystem (participants and critical service providers)Monitor, report, and recommend improvements for cyber security operationsProvide advisory in the areas of cybersecurity to various stakeholders including in forums / committeesExecute business-as-usual activities such as awareness, cyber drills and crisis simulation, and othersResponsible and accountable for implementing strategic cybersecurity initiativesCollaborate with internal teams from various divisions and departments to cyber risk management – this includes, but not limited to :Enhancing cloud security postureImplementing strategies for API securityAutomating BAU processes and regulatory requirements such as red teaming, purple teaming, vulnerability assessment, etc.Compliance
Assess compliance against legal and regulator requirements using modern approaches such as data analytics, automation, and AIMonitor laws, regulations, industry standards, and ethical requirements related to information security and privacy, and ensure PayNet's complianceCollaborate with internal teams from various divisions and departments to enhance compliance to legal and regulatory requirementsPayments Ecosystem Cybersecurity CollaborationEstablish collaboration with the payments ecosystem (banks, third party acquires, e-wallets, fintechs and other entities) in the areas of cyber risk management, AI governance, and research and developmentEstablish collaboration with other internal organisation such as research institutionQualifications
Degree in Information Technology (IT), Computer Science or other related discipline with relevant experience in managing cyber risk in financial market infrastructures, critical national infrastructure, or other industries10-15 years or more of experience in cybersecurity, IT, or a combination of bothExperience in managing and leading teams of various sizesDemonstrated experience in providing security advice to a wide range of stakeholdersStrong project management skills