Singapore Management University Hiring For Senior Manager, IT Governance, IITS at Singapore Full Time

Singapore Management University is a place where high-level professionalism blends together with a healthy informality. The ‘family-like’ atmosphere among the SMU community fosters a culture where employees work, plan, organise and play together – building a strong collegiality and morale within the university.

Our commitment to attract and retain talent is ongoing. We offer attractive benefits and welfare, competitive compensation packages, and generous professional development opportunities – all to meet the work-life needs of our staff. No wonder, then, that SMU continues to be given numerous awards and recognition for its human resource excellence.

• This position is for Office of Integrated Information Technology Services (IITS)
• Due diligence and management of the university’s IT governance and compliance projects and ISO certifications
• Drive and communicate the university’s cybersecurity awareness and compliance agendas, manage and monitor IT compliance within the programme
• Train staff on security awareness
• Support the university’s IT compliance reporting needs; including ad-hoc compliance-related requests from regulators and auditors
• Front auditors where IT involvement is required
• Proactively and strategically partners with SMU’s business units and functions to enable them to design, adopt and integrate appropriate controls; deliver processes and solutions securely and consistently with the goal of keeping SMU and customers’ safe, stable and resilient
• Develop work plans and conduct periodic compliance self-assessments to identify non-compliance, best practices and weaknesses in order to strengthen IT controls
• Work cross-functionally with IT teams and other SMU offices for acquisition, development and enhancement of IT services and applications to ensure smooth execution against regulatory requirements and internal policies
• Recommend and identify clear steps necessary to mitigate regulatory risks and concerns
• Report to management with timely updates on the state of controls, risks, audit findings and remediation
• Support in the identification and assessment of IT risk
• Identifying opportunities for continual improvement
• Perform other related duties as assigned

• Degree in information systems management, computer science, engineering or other related field
• Working knowledge of and demonstrated ability to apply common frameworks and models used for IT Governance such as CobiT, COSO or ISO standards in the working environment
• IT GRC security or risk management experience (CGEIT, CRISC or CISM, certifications and/or ISO27001 Lead Auditor certification is a plus) 
• 6 to 8 years of experience in a large organization including demonstrated leadership in building and implementing governance, risk and compliance frameworks
• Excellent command of Cybersecurity organisation practices associated with: requirements analysis, risk analytics and modeling, root cause analysis, risk management; emerging issues, vulnerabilities and vulnerability assessment, and incident response methodologies
• Good understanding of national and international laws, regulations, policies and ethics related to education industry and institutes of higher learning
• Excellent ability to analyse regulatory risks in complex business processes, and recommend controls to mitigate those risks
• An understanding of applicable regulatory requirements for institutes of higher learning space such as ISO27001 standards, NIST Cybersecurity Framework and PDPA is critical in this role
• Proactive and strategic problem solver, able to look ahead and plan for contingencies
• Ability to take ownership of outcomes and the ability to work with teams to confront issues and drive performance
• Ability to operate with strong integrity with the ability to handle projects of a sensitive and confidential nature
• Excellent presentation and project management skills with the ability to successfully work multiple issues at one time
• Ability to communicate complexity, risks and technical controls in a simple and clear manner.
• Good writing skills is required

#LI-JN1

Candidates who do not possess the stipulated qualifications but have relevant work experience may still apply. Remuneration and appointment terms shall commensurate with qualifications and experience. SMU reserves the right to modify the appointment terms where necessary.