Sopra Steria is a listed European tech leader specializes in Consulting, Digital Service, and Software. We have 50,000 employees worldwide located in different regions (Europe, North America and Asia), whereby Singapore is the HQ for APAC. EvaGroup Asia Pacific is part of Sopra Steria I2S APAC, in charge of Infrastructure, Cloud and Cybersecurity services.

For this position, weare looking for a Security Information Expert, VP, to assist one of our clients in the Financial/Banking industry.

Responsibilities:

Security Control Review:

• Define scope, roadmap, and testing plan to assess key cybersecurity controls on an ongoing basis
• Perform test of design and effectiveness on key cybersecurity controls
• Work to embed control testing within the organisation with a focus on automation and efficiencies
• Work with various teams to define follow-up actions to remediate control weaknesses identified
• Maintain, review and renew risk acceptances for control risks that cannot be fully mitigated

Project Security Assessments:

• Work with relevant teams to perform security assessments, reviewing high and low level architecture designs, and provide recommendations to mitigate identified risks on new projects being rolled-out
• Depending on the nature of the project, security assessments should cover application and data security requirements to ensure compliance with internal policies and framework
• Ensure compliance with cybersecurity related regulations that may be relevant to the project
• Perform follow-up on remediation actions that may result from the security assessment

Third Party Risk Assessments:

• Perform information security reviews on requests for outsourcing, including review of the vendor's security capability and risk of data leakage

Regulatory Reviews:

• Perform reviews to assess the company compliance against cyber regulatory topics across Asia
• Work with Compliance to identify new and arising regulatory requirements with impact to cybersecurity

Participation in committees:

• Participate in regional and global governance meetings and normative committees where required
• Provide updates within the team and liaise regularly with other teams in Asia, including application managers, technology, compliance, operational risk managers, risk management and third party management

• Proficient in performing security architecture and security design reviews
• Knowledge of application, system and network auditing
• Strong understanding of IT infrastructure and IT applicative framework architectures
• Familiarity with cloud computing and container technologies (docker and kubernetes)
• Good understanding of application vulnerabilities and common exploits (e.g. OWASP Top 10)
• Knowledge of security hardening standard (e.g. Centre for Internet Security benchmarks, NIST)
• Experience with security control reviews and audits
• Experience in performing third party reviews / assessments
• Familiar with cybersecurity regulatory topics in Asia (e.g. HKMA C-RAF, MAS TRM, etc)
• Computer programming experience desirable
• Excellent English verbal and written communication skills, experience in communicating complex technical topics at senior organizational levels,up to and including MD level
• Client oriented mindset, results driven, proactive and quick to react to requests
• Innovative and bringing new ideas to improve processes
• Bachelor degree in Information Technology or equivalent
• Professional qualification such as CISSP, CISM, ITIL
• Experienced security professional with 8+ years of relevant experience
• HKMA Enhanced Competency Framework (ECF) certification is preferred

Sopra Steria is a listed European tech leader specializes in Consulting, Digital Service, and Software. We have 50,000 employees worldwide located in different regions (Europe, North America and Asia), whereby Singapore is the HQ for APAC. EvaGroup Asia Pacific is part of Sopra Steria I2S APAC, in charge of Infrastructure, Cloud and Cybersecurity services.

Responsibilities:

For this position, we are looking for a Cybersecurity Incident Response Lead to assist one of our clients in the Financial/Banking industry.

This role acts as a subject matter expert, main coordinator and point of contact on Cyber Incident Response, Cyber Crisis Management, Cyber Surveillance, Threat intelligence, E-fraud and Data Protection in the regional team. Furthermore the role will support IT project assessments.

• Develop, implement and maintain the regional cyber incident response plans, procedures and related documentation in alignment with global standards.
• Develop and maintain a relationship with the threat intelligence community in Asia financial services, including regulators, industry peers, law enforcement agencies, and other relevant stakeholders.
• Collect, analyse, and disseminate threat intelligence from various sources, such as open source, commercial, and internal data, to identify and assess cyber threat and risks affecting our organisation and customers in the Asia region.
• Provide timely and actionable intelligence to SG CERT and the regional CISO, as well as other relevant teams and stakeholders, to enable informed decision-making and proactive security measures.
• Use threat intelligence to streamline playbooks and incident response standard operative procedures, and to enhance the detection, prevention, and mitigation of cyberattacks.
• Conduct research and producing reports, briefing and presentation on cyber threat trends, actors, tactics, techniques, and procedures (TTPs)
• Conduct regular reviews and audits of the cyber incident response process, identifying gaps and areas of improvement
• Plan, execute and support desk based testing scenarios to simulate cyber incidents and test the effectiveness of the response plan and procedures
• Support risk assessment and architecture reviews by conducting threat analysis and modelling, identifying potential attack vectors and mitigation strategies
• Respond to and manage cyber incidents and crises, in coordination with central threat intelligence and cyber incident response functions, involving internal and external stakeholders as appropriate
• Investigate, mitigate the impact, and manage the process related to data leakages and data breaches, and ensure compliance with the regulatory and legal requirements and standards for cybersecurity and data protection in the region
• Provide timely and accurate communication and reporting on the status, impact and resolution of cyber incidents and crises
• Conduct post-incident reviews, root cause analysis and lesson learned from cyber incidents and crises, and providing recommendations and feedback to improve the security posture and resilience of the organisation.

Required Qualifications:                                                                                                                                                         

• Bachelor Degree in Information Technology or equivalent
• At least 8-10 years of experience in cyber threat intelligence, cyber incident response and cyber crisis management, preferably in the financial services sector
• Professional certification in cyber threat intelligence and cyber incident response, such as Cyber Threat Intelligence Analyst (CTIA), Certified Incident Handler (GCIH), Certified Computer Security Incident Handler (CSIH), Certified Network Defender (CND), Certified Forensic Computer Analyst, GIAC Penetration Tester, CompTIA PenTest+, Certified Ethical Hacker

Key Skill Areas & Knowledge Required:

• Knowledge and understanding of the cyber threat landscape and the cyber threat intelligence lifecycle, as well as the tools, methods, and frameworks for cyber threat intelligence collection, analysis and dissemination
• Familiarity with the cyber threat actors, TTPs, and challenges specific to the Asia region, as well as the regulatory and legal requirements and standards for cybersecurity and data protection in the region
• Proficiency in English and preferably another Asian language
• Excellent communication, collaboration, and analytical skills, as well as the ability to work independently and under pressure
• Knowledge of incident response best practices and procedures
• Experience in digital forensic and malware analysis
• Scripting skills in languages ,like Python and PowerShell
• Ability to write comprehensive and easy to understand incident reports destined to management, 2nd line and 3rd line of defence as well as regulatory bodies.