
Head of IT Services and Security
- Central Region, Singapore
- Permanent
- Full-time
- Manage day-to-day IT operations and infrastructure to support company operations.
- Manage IT service delivery, as well as IT change management process.
- Proactively drive and deliver on cyber security framework, covering govern, identify, protect, detect, respond and recover domain areas.
- Conduct security investigations and provide guidance and oversight on incident resolution and containment techniques.
- Conduct IT risk assessments for IT systems, and support the technology risk function in vendor due-diligence processes
- Manage first line IT disaster recovery and business continuity processes.
- Support internal and external audit and regulatory inspections on IT Application, Infrastructure and General Controls.
- Mentor IT service and security analysts regarding service levels, risk and information security controls, incident and problem management, security incident response, security monitoring, and other operational tasks.
- Guide IT security team in security incident management and vulnerability management processes.
- Guide IT service team in evaluating, recommending, implementing, and troubleshooting IT solutions to support organization growth.
- Promote responsible and security conscious behaviour by improving company culture and helping staff adopt good cyber hygiene practices.
- Provide timely and accurate reports of IT service and security metrics for management reports.
- Act as a constructive and credible IT partner to stakeholders, accountable for IT service level and information security management for QCP group of companies.
- 8-12 years of IT infrastructure and/or information security experience.
- Experience in managing scalable enterprise infrastructure, such as identity infrastructure, network, system administration and service desk preferred
- Knowledge on industry standards such as ITIL, TRMG, ISO27001, NIST, etc.
- Information security professional certifications such as CISSP, CISM would be advantageous
- Good understanding of security incident management, malware management and vulnerability management processes.
- Self-starter, works independently and able to adjust to changing priorities, critical and strategic thinker, negotiator and consensus builder.
- A Bachelor's Degree / Diploma in a relevant area of study with a preference for Information Security, Computer Science or Computer Engineering.
- Excellent English written and verbal skills.