IT Security Specialist (Risk Assessment)

You will play a key role in strengthening HDB’s cybersecurity and risk posture by designing, operationalising, and governing the Threat & Risk Assessment framework across enterprise IT systems and programmes. This roleprovidesthe opportunity to work closely with system owners, project teams, and senior stakeholders toidentifycybersecurity and data risks early, assess their impact, and drive effective risk mitigation strategies across the organisation.

What you will be working on:

• Develop,maintain, and operationaliseHDB’s Threat & Risk Assessment framework to systematicallyidentify, assess, and mitigate ICT, cybersecurity, and data risks across IT systems and programmes.

• Conductend‑to‑endcybersecurity risk assessments, including threat identification, risk analysis, control determination, and effectiveness reviews.

• Drive and support key cybersecurity functions, including:

• Cyber Security Assurance Programme

• Threat & Risk Assessment Framework

• Cyber & Data Security Risk Management

• Enterprise Risk Management (Cybersecurity)

• Providesecurity advisory and consultancyto project teams, including:

• Project‑specificcybersecurity requirements and specifications

• Evaluation of cybersecurity proposals and vendor submissions

• Cybersecurity architecture and design reviews

• System Security Acceptance Testing (SSAT) and security assurance reviews

• Partner stakeholders toembedsecurity‑by‑designinto system development, enhancement, and modernisation initiatives.

• Manage and promoteIT security awareness and outreach programmesto strengthenorganisation‑widesecurity culture.

• Monitor emergingcyber threats, vulnerabilities, and industry best practices, and recommend pragmatic controls to continuously improve the organisation’s security posture.

• Lead and/or contribute to theadoption ofnew technologiesand security best practicesin infrastructure, cloud, and application security to address evolving risk landscapes.