Job Detail

Cyber Defence & Fusion Centre Lead

SG

Job Description

Key Responsibilities

 

Our Digital Bank is set for a rapid growth and rapidly evolutive environment, thus the individual will need to shape and adapt a Cyber Defence Fusion Centre, continuously maintaining control effectiveness. The role will be set to evolve and grow over time as the company develops.
 

Not exhaustively, the Cyber Defence & Fusion Centre Leader will own the following outcomes:

 

  • Defining an appropriate control and event monitoring strategy and operational framework, integrating existing frameworks and capabilities available in the group where relevant
  • Managing the Managed Security Service Provider in charge of SIEM engineering and L1/L2 monitoring, to review and maintain effective SLAs and SLIs
  • Building, testing and maintaining the effectiveness of cybersecurity and incident response playbooks 
  • Working closely with Product squads, Application Security and End-user Computing to ensure threat models are established and maintained, deriving adequate control plans adapted to each business context
  • Collaborating closely with business stakeholders to improve persona-based risk identification, tune custom monitoring and improve insider threat anomaly detection
  • Develop synergies with SCB Group’s counterpart to enable the maximum of capabilities and consolidate reporting frameworks
  • Providing meaningful metrics and dashboards to product owners and control functions to facilitate the risk-based decision making through quantification
  • Working closely with the group to ensure our Digital Bank meets and exceeds control objective requirements across cyber defence, investigations, incident response and forensics
  • Automating the collection of control output artefacts and audit trails to facilitate audit and regulatory reporting
  • Defining and developing Fusion Center capabilities with a focus on fraud prevention synergies and risk analytics
  • Working with Offensive Security team to ensure the result of intrusion tests and bug bounties positively improve our capacity to detect and respond to flaws and attacks
  • Developing and growing a team of talented engineers and analysts to support the delivery of our Digital Bank’s exciting customer services and the above outcomes

 

 

 


Job Requirement

In order to be successful at the role, you must have the following:

 

  • 10+ years of relevant experience, with a blend on operational analysis, incident response and vendor management
  • Hands-on expertise to build and support the operational objective of the faster growing Digital Bank in the work
  • Has in depth experience of building and running security operation centers and fusion centers, ideally with a good grasp of threats and requirements specific to Banking
  • Self-driven, can articulate the risk of missing controls to all levels of executives
  • Solid experience in control effectiveness assessment frameworks such as MITRE ATT&CK
  • Collaborative, with a vision of how to work with developers to embed immutability, anomaly detection, forensics and normal-state resumption in the fabric of the application 
  • Ideally, has experience working in supporting regulated digital payment services such as payment industry & digital banking, or e-commerce services
  • Experienced in monitoring, incident response and forensics in cloud environments, including IaaS providers, cloud-native platforms (Kubernetes) and SaaS third-party applications
  • Develop response automation and forensics scripts and data analytics capabilities
  • General understanding of DevOps and CI/CD pipelines in a context of security and compliance guardrails

 

Role Specific Technical Competencies

 

  • Experienced in monitoring, incident response and forensics in cloud environments, including IaaS providers, cloud-native platforms (Kubernetes) and SaaS third-party applications
  • Develop response automation and forensics scripts and data analytics capabilities
  • General understanding of DevOps and CI/CD pipelines in a context of security and compliance guardrails
Logo
×

Full Name*
Email address*
Upload a different Resume (Your application will be submitted using this resume instead)
Choose a file
Only .pdf is allowed
HACKERBUCK AWARDED