Job Description

Company Description\nThe Ministry of Housing Pte. Ltd (MES Group, established in 1977), is a regional long-term investor specializing in property investment and management. Renowned as a leading player in the logistics and real estate industry, we excel in managing diversified real estate portfolios.

As a Singapore real estate investment trust and investment holding company, we leverage our expertise to deliver sustainable growth and value to our stakeholders.\n\nJob Description​\nYou will be a member of the Group Technology Dept responsible for ensuring corporate applications, systems, networks, and digital assets are adequately protected and mitigated against cyber threats and risks. You will help drive cybersecurity and risk management efforts and user awareness and education within the Group.​\n\nRequirements​\nDegree in IT or related fields, with 4-5 years relevant information security working experience, especially in the application security space.​\nProfessional security certifications (CISSP, CISA, CEH etc) preferred.​\nExperience with Governance, Risk and Compliance (GRC) activities.​\nFamiliar with PCI, PDPA, GDPR requirements​\nExperience in security technologies, practices, application/network/systems architecture and design, tests tools and processes.​\nKnowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc​\nStrong oral, written, presentation and inter-personal skills.​\nPossess positive attitude with drive, initiative, enthusiasm and a keen sense of urgency in resolving high-priority issues.​\nAble to work independently and in a team-oriented, collaborative environment.​\n​\n**Key Responsibilities include:**​\nProvide cyber governance and risk management oversight.​\nManage the security policy framework and relevant standards.​\nOversee applicable security, regulatory, privacy, contractual cyber requirements.​\nManage cyber risk analysis and self-assessments program for various information services, systems, processes, and recognized industry standards.​\nConduct risk assessments, document results, and propose and track remediation tasks.​\nDevelop compliance program top routinely assess existing infrastructure, systems, and applications for compliance and vulnerabilities and propose relevant mitigating controls.​\nConduct vulnerability assessments and track remediation status of identified vulnerabilities.​\nIdentify and assess cyber risks and recommend and drive cyber security solutions and initiatives to improve cybersecurity posture.​\nDefine controls to meet regulatory, legislative, and industry specific compliance requirements.​\nManage third party cyber risk assessment standards.​\nPrepare IT security related KPI reports and management reports for compliance monitoring and reporting.​\nDrive the implementation of GRC tool.​\nMaintain user cyber awareness and provide security advisory on emerging security threats and vulnerabilities.​\nDevelop, review, and continuously improve IT security training material and conduct user training to improve user awareness and incident response readiness.​\nThis role may be seconded to any of the subsidiary group.​\nAcquire relevant certification eg. ISO 27001 going forward.​