VP, Network Security Engineer, Technology Group
Listed on 2025-11-24
-
IT/Tech
Cybersecurity, Systems Engineer
VP, Network Security Engineer, Technology Group
Join to apply for the VP, Network Security Engineer, Technology Group role at GIC.
GIC is one of the world’s largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world’s industry leaders. As a leading global long‑term investor, we work at the Point of Impact for Singapore’s financial future and the communities we invest in worldwide.
Whatimpact can you make in this role?
The VP, Network Security Engineer is responsible for ensuring the design, deployment, and ongoing assurance of a secure, resilient, and compliant network infrastructure across on‑premises, hybrid, and cloud environments. This role provides a holistic remit across engineering, policy, and governance, working closely with infrastructure engineering, security operations, and compliance teams to align technical delivery with MAS TRM and CSA CCoP requirements and international best practices such as NIST, ISO 27001, and CIS benchmarks.
Whatwill you do as an VP, Network Security Engineer?
Design & Implementation
- Lead the design and deployment of secure network architectures across on‑premises and cloud environments.
- Ensure solutions incorporate defense‑in‑depth, segmentation, high availability, and disaster recovery capabilities.
- Evaluate and integrate new network and security technologies to enhance threat protection and resilience.
- Translate MAS TRM and CSA CCoP requirements into practical, implementable technical designs, with actionable technical control objectives and configurations for firewalls, segmentation, and network security devices.
- Review and validate design artefacts, network diagrams, and configuration baselines for compliance with standards (e.g., MAS TRM, CSA CCoP).
- Develop, maintain, and enforce network security policies, standards, and control frameworks aligned with MAS TRM, CSA CCoP, ISO 27001, industry best practices, and GIC’s internal security framework.
- Conduct periodic compliance reviews, control testing, and assessments to validate adherence to approved security standards.
- Coordinate with risk and compliance teams to support regulatory audits, internal reviews, and security risk assessments.
- Establish and track governance metrics, KPIs, and dashboards for network security posture reporting to management.
- Lead or participate in network and security design reviews to ensure new deployments comply with internal standards and MAS TRM guidelines.
- Review and approve firewall rule base and configuration changes, ensuring adherence to least privilege and zero‑trust principles.
- Provide technical guidance to project and infrastructure teams to ensure secure‑by‑design network architectures.
- Conduct post‑implementation reviews to validate the effectiveness of security controls and identify improvement areas.
- Serve as a subject matter expert for network security controls, including firewalls, IDS/IPS, NAC, proxies, SASE, and VPN.
- Collaborate with SOC and operations teams on incident investigations and identify governance‑related corrective actions.
- Support initiatives for network security automation, baseline hardening, and configuration management.
- Stay current with MAS advisories, emerging threats, and technology risk trends to proactively enhance network security governance.
- Integrate security engineering into delivery pipelines; maintain zero regulatory findings and aim for zero audit points.
- Ensure full compliance with MAS TRM, CSA CCoP, NIST CSF, GDPR, SWIFT Customer Security Controls Framework (CSCF).
- Maintain the Network RCSA and publish monthly KRI dashboards to the Board Risk Committee.
- Bachelor’s degree in Computer Science, Information Security, or a related discipline.
- 8–10 years of experience in network security engineering, with experience spanning design, implementation, and governance within the financial services sector.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).