IT Governance Specialist

Prudential’s purpose is to be partners for every life and protectors for every future.

The IT Governance Specialist plays a critical role in strengthening the organisation’s cybersecurity posture by overseeing and reviewing technical controls that mitigate IT security risks.

Key Responsibilities

• Assist the IT Assurance lead on Identity access management system (IAM), onboarding applications, and day-to-day BAU operations.
• Conduct annual and semi-annual company-wide user and privileged access review and remediation.
• Plan, prepare, and execute annual baseline configuration and firewall rule review exercises.
• Ensure IT risk and security controls are implemented and mitigated on time in compliance with business strategies, organisation policies, and regulatory requirements.
• Consolidate and provide evidence for internal, external, and regulatory audits related to information technology.
• Ensure IT operations and activities comply with IT security standards set by PACS Group and regulatory guidelines by the Monetary Authority of Singapore (MAS) and PDPC.
• Suggest and implement continuous improvement and automation of daily BAU activities.

Qualifications / Experience

• Diploma or Degree in IT, Computer Science, or equivalent.
• Prior work experience in the financial industry is preferred.
• Certification in IT Security related such as SSCP, CompTIA Security+, or CEH is preferred.

Knowledge, Skills & Ability

• Basic understanding of Cyber Security, IT networking, Windows OS, technical troubleshooting, and problem-solving.
• Awareness and understanding of common exploits and vulnerabilities, system hardening, firewall configuration, and rules review.
• Technical skills and hands-on experience with Information Security-related solutions and technology such as Active Directory, LDAP, EDR, Antivirus, WAF, Proxy, Firewall, DLP, and SIEM & Vulnerability management.
• Excellent interpersonal and analytical skills to enable the implementation of security controls, programs, and MAS TRM requirements.
• Sound knowledge of Information Security management frameworks such as NIST CSF, ISO 27001 & best practices.