Job Description

Prudentials purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our peoples career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.As a member of the Specialists team, you will play a crucial role in driving IT Security initiatives for Prudential Singapore. As part of this dynamic role, you will report to Head of IT Security, you will actively collaborate with cross-functional teams to develop and implement strategic security measures, ensuring alignment with Prudentials overall business objectives while safeguarding Prudentials digital assets.

• Works alongside Head of IT Security to ensure compliance and continuous improvement of the company Security posture
• Assess infrastructure, architectures and system designs for potential security gaps and propose controls close or mitigate those gaps
• Perform Security Assessment on IT Changes and Projects
• Articulate associated risks and propose mitigations on related source code reviews, vulnerability assessment scanners, DevSecOps scanners and pentest findings to stakeholders
• Oversee the management and remediation of identified security findings from source code reviews, vulnerability assessments scanners, DevSecOps scannerss and pentest
• Familiar and has experiences with Web Security, Mobile Security and API Security
• Familiar with MAS TRM, Cyber Hygiene Notice and related regulations
• Familiar and have hands-on experience with Cloud Technologies, CI/CD, DevOps and DevSecOps tools
• Familiar with the process and management of Bug Bounty programme
• Assist in Security Incident Management
• Assist in Cyber Risk assessments and Gap assessment
• Assist in validating security controls and enforcement of policies and standard compliance
• Assist with security related consultations
• Assist in Internal, External and Regulatory Audit
• Assist in Firewall Management
• Experience in managing or implementing Enterprise level security controls
• Experience in reading and writing code or scripts in any modern programming or scripting language (Java, Python, Typescript, etc.).
• Foster knowledge sharing culture within team and IT
• Experience in Red and Blue Teaming a bonus

Working Experience:

• 5 years or more experience working in Financial Institute /Insurance industry
• Familiar with Singapore regulatory IT security requirements, example: MAS TRM, Cyber Hygiene notice.
• Relevant certification such as Certified Information Systems Security Professional (CISSP), Offensive Security Certified Professional (OSCP), Microsoft Certified Azure Security Engineer Associate, or Certified Cloud Security Professional (CCSP)

Education:

• Bachelors Degree in IT/Computer Science/Computing or related.

Language:

• English.

Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time / fixed-term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.

Prudential