What you will be working on:
You will be responsible for some of the following areas:
· ICT Security Governance:
Develop and implement enterprise-wide ICT security programmes as follows:
i. Establish the cybersecurity governance structure for HDB to ensure that the security posture is robust, resilient, and pragmatic.
ii. Enhance and update the IT security policy, standards, procedures so that it stays relevant against the evolving cyber security landscape.
iii. Manage the compliance with Whole-of-Government (WOG) ICT/SS Security Policies, Initiatives, Measures and applicable Government Instruction Manual to further strengthen HDB ICT security posture.
iv. Establish the governance and administer the Third-Party Management Policy and Procedure.
· Cybersecurity Awareness Outreach
Manage and implement the Cybersecurity Awareness Framework to promote IT security awareness and outreach programme as follows:
i. Raise HDB management and staff’s security awareness on the importance of ICT Security to ensure HDB’s information assets are protected.
ii. Create good staff cyber security hygiene through regular ICT Security outreach programme such as the annual ICT Security Awareness Talk, security advisories, conducting Phishing exercises and road shows.
iii. Identify various channels for the conduct of the security program such as cyber range exercises, technical certification, gamification.
· Identity & Access Management
To establish procedures and standards for the Identity and Access management in HDB as follows:
i. To administer and manage the user accounts and privileged access to safeguard the confidentiality of ICT assets and systems in HDB.
ii. To setup, maintain and manage the access controls to HDB’s applications.
iii. To manage the lifecycle of HDB’s Digital Certificate.
· Quality Audit and Security Reviews
i. To serve as an independent party to ensure the conduct of quality auditing and report to Management on audits observations and recommendations.
ii. To conduct regular security reviews and compliance checks on HDB’s applications and infrastructure to maintain HDB ICT security posture.
You are also to keep pace of the latest industry ICT security practices and technologies as well as emerging threats and vulnerabilities to recommend appropriate controls to improve HDB ICT security posture.