Job Description

Primary Responsibilities

At Marina Bay Sands, the IT Compliance - Specialist is responsible for managing, monitoring and tracking of IT controls across Governance, Risk and Compliance related programs within Information Services, compiling information related to regulatory enquiries.

The main tasks will include:

• Document and monitor IT compliance across technology and business projects.
• Manage subject matter requests - Internal and external.
• Gathering of data and providing necessary artifacts of all IT aspects of SOX external / internal reviews and audits
• Support execution of procedures and controls to assure compliance with applicable regulatory and legal requirements as well as good business practices.
• Tracking of IT Delivery and Operation teams on remediation of new and outstanding issues. Ensuring activities are closed in a timely matter.
• Execution and tracking of compliance assessments - Self assessment, etc. and ensuring assessments are completed timely.
• Work closely with IT Delivery team to track new enhancements/changes related to gaming/non-gaming.
• Working with IT Operation team to track remediation of gaming/non-gaming related production issues.
• Perform new and annual review of Privileged Account Review (Non-Personalized Account)
• Perform risk assessment for new and renewal exceptions identified during TRA, internally by Tech Governance team or normal review.
• Conduct gaming related project or enhancements review against the regulatory requirements
• Manage the review of MBS Standard addendums, Standards and Procedures to ensure they are aligned to the current operations and to the requirement of the Global Standards.

For this role you need:

• At least 4 - 6 Years proven Industry experience in designing and implementing Business Process Improvement

• Experience with a broad range of exposure to systems analysis, application development, systems administration.

• ASQ Certified Quality Auditor (CQA) or Certified Software Quality Engineer (CSQE) desirable. Strong knowledge on PCI DSS standards will be an advantage.
• Knowledge and experience of SDLC, Change Control, and SQA methodologies, techniques, and general principles.
• Experience in providing guidance to IT controls and security requirements for technology and business partner initiatives. Ensuring that systems provide adequate protections to meet areas of legal/regulatory compliance and IT security for the integrated resort/gaming industry.

• Ability to work well with key business partners across sectors and internal IT teams in a collaborative manner.

• Strong communications skills to be able to interact with technical and non-technical colleagues.
• Strong interest in IT risk management and keep abreast of the dynamic threat landscape.
• Maintains an up-to-date understanding of industry best practices.
• Working knowledge of security issues, techniques, and implications across computer platforms.
• Familiarity in one or more of the following areas: application security, OS system security, database security, networking, mobile device security, cloud technologies, payment card, and web technologies.
• Knowledge in the following standards / regulatory directives: COBIT, ITIL, ISO 27001, PCI DSS, Sarbanes-Oxley, PDPA, OWASP

Key performance Indicators

• Able to focus on multiple tasks and deliver against timelines.
• Technical Skills - Ability to use database query tools and reporting tools.
• Teamwork - Ability to coordinate and work closely within IT teams.
• Communication - Effective written and verbal communication skills suited for technical audiences, peers, and external bodies.
• Detail oriented and analytical - Ability to assess risk quickly and effectively and provide a remediation of the underlying risk.
• GRA ICC/PCI DSS and SOX Compliance - Tracking of points of ICC and non-ICC compliance within IT systems, reports, data, and processes are logged.

Advertised: 05 Jan 2024 Singapore Standard Time
Applications close:

Marina Bay Sands