Manager, Cyber Risk Specialist Unit | Tech. & Cyber Supervision

Contribute to the identification and mitigation of financial industry’s cyber security risk by undertaking continuous horizontal surveillance of the cyber threat landscape and monitoring of financial institution (FI)’s technology adoption and utilisation strategy in upholding the Bank’s mandate.

• Develop and enhance effective surveillance infrastructure, supervisory tools and framework for early detection of emerging cyber risks to aid in macro / micro supervisory monitoring and risk mitigation strategies for the financial sector


• Ensure strong collaboration and able to influence / communicate with the industry players to facilitate knowledge sharing and best practices.


• Drive initiatives that enhance the ability of financial institutions and market infrastructures to prevent, detect, and recover from cyber incidents.


• Contribute to the capacity building of IT and prudential supervisors in cyber risk management.

This role enables effective risk oversight and policy development, ensuring financial institutions adopt sound practices and best practices in cyber security risk governance aligned with regulatory expectations and industry standards.

1. Lead and perform industry-wide horizontal assessments of adopted cyber security risk management models, methodologies or practices with the aim to uncover common practices and potential gaps or areas of improvement


2. Facilitate industry-wide cyber security risk improvement programs


3. Develop and enhance effective surveillance infrastructure, supervisory tools and framework for early detection of emerging cyber risks to aid in macro / micro supervisory monitoring and risk mitigation strategies for the financial sector


4. Develop and review prudential policies, standards, guidelines and best practices on cyber security risk management to ensure pragmatic implementation of regulatory policies


5. Provide technical input on cyber risk management in new-to-market product and technology approval applications to ensure early detection of potential disruption to financial markets, technology and operations of financial industry


6. Facilitate knowledge sharing on cyber risk management to strengthen capacity of supervisors in cyber risk management


7. Provide views on cyber risk management in national and international policy development, where required


8. Build strong collaboration with relevant stakeholders to facilitate continuous surveillance, enhance risk infrastructure developments and ensure effective supervision of cyber risk


9. Effectively oversight and assist to manage industry-related cyber incidents to ensure resolution and mitigation of potential systemic risks


10. Lead the coordination of industry working group for advancement of cyber risk management and sharing practices


11. Undertake other ad-hoc assignments, when assigned.

Academic Qualifications

• Undergraduate/postgraduate degree in information technology related disciplines (e.g. computer science), with primary focus on network security, IT security and/or cyber security. 


• Professional certifications related to information systems security, auditing, control, assurance and risk management such as Certified Information Security Manager (CISM), Certified Information System Security Professional (CISSP), ISO27001 lead auditor, Certified Information System Auditor (CISA) is an added advantage

Experience

• At least 5-7 years of experience in cyber security risk management and/or IT security / auditing, within the context of the financial industry is preferable.


• Preferred to have working IT technical knowledge and strong regulatory and compliance understanding of the financial sector, a mix of 1LOD and 2LOD experience will be most ideal


• Ideal to have experience in developing necessary documentation for the cyber security environment.