[LTA-PT] MANAGER/DEPUTY MANAGER, TICKETING SYSTEM & GOVERNANCE (GOVERNANCE, RISK & COMPLIANCE)
- Compensation
- Not disclosed
- Location
- Singapore
- Work setup
- Not specified
- Seniority
- Lead
- Employment
- Not specified
- Experience
- Not specified
- Category
- Not specified
- Posted
Skills
Must have
- Knowledge in computer science, engineering or information technology, cyber security.
- Candidates with proven experience in managing cyber security and data protection operations and incident management.
- Strong understanding of information security and data protection principles, ISO 27001, PDPA, PCI-DSS Security Standards and cloud security standards.
- Strong incident response, good communication, situational awareness and stakeholder management skills.
- Ability to analyze complex problems and recommend practical solutions.
Full description
[What the role is]
[LTA-PT] DEPUTY/MANAGER, TICKETING SYSTEM & GOVERNANCE (GOVERNANCE, RISK & COMPLIANCE)
[What you will be working on]
Become a catalyst for effective system ownership, operations and governance as a Transit Ticketing System and Governance officer!
Are you passionate about optimising public service delivery and making a difference? Join our team and take a lead role in maintaining, enhancing and governing the transit ticketing system to maintain commuter trust, strengthen people-centric service delivery and ensure a future-ready public transport transit ticketing system that provides seamless fare payment services.
Transit ticketing system is an integrated fare collection and contactless smart card payment system that enables commuters to pay for their public transport journeys across Singapore and consists of frontend system (MRT/LRT fare gates, bus fare readers, top up machines devices and applications) and backend system (servers, network, infrastructure and applications).
Responsibilities:
Governance Framework
- Maintain oversight of Transit Ticketing System security, risk management and compliance in the role of operations lead supporting the system owner, to ensure the confidentiality, integrity, and availability of systems, in accordance with regulatory and organisational governance requirements.
- Maintain the governance framework and ensure its operational effectiveness by overseeing process, metrics, audit and risk management reports by internal and external stakeholders, to achieve the framework’s objectives and perform commuter, operational and financial impact assessment to mitigate risk, minimize service disruption and improve commuter experience.
Cybersecurity and Data Protection Governance:
- Enforce cybersecurity and data protection policies, standards, and procedures aligned with government IM8 requirements and industry standards such as ISO 27001, NIST and PCI-DSS.
- Collaborate with internal technical cyber security team and contractors to monitor the effectiveness of cybersecurity and controls of IT infrastructure, cloud services, networks and applications in transit ticketing system.
- Establish key metrics (KPIs) on cyber security and data protection and review report submitted by contractors and periodically update to senior management.
Compliance and Risk Management:
- Review cybersecurity policy developed by the technical security team and enforce compliance.
- Support internal and external audits and assessments related to cybersecurity and data protection and assess commuter, operational and financial impact and ensure closure of audit action plan.