[Lta-Pt] Manager/Deputy/Assistant Manager, Ticketing System & Governance

[What the role is]

MANAGER/DEPUTY/ASSISTANT MANAGER, TICKETING SYSTEM & GOVERNANCE

[What you will be working on]
Become a catalyst for effective system ownership and operations as a Ticketing System officer!

Are you passionate about optimising public service delivery? Join our team and take a lead role in enhancing ticketing system, improving commuters experiences and driving cyber security and data protection operations as per industry standards within public transport ticketing system.

You will work on the following:
(1) Cybersecurity and Data Protection Governance:
• As ticketing system owner, you will oversee and enforce cybersecurity and data protection policies, standards, and procedures aligned with ISO 27001, NIST, PCI-DSS, PDPA and other relevant standards.
• Collaborate with internal technical cyber security team and contractors to monitor the effectiveness of cybersecurity and privacy controls of IT infrastructure, cloud services, networks and applications in ticketing system.
• Establish key metrics (KPIs) on cyber security and data protection and
periodically report to senior management

(2) Compliance and Risk Management:
• Support internal and external audits and assessments related to cybersecurity
and data protection.
• Maintain a register of risks related to information security and data protection,
and track mitigation plans.
• Collaborate with technical cyber security teams to ensure internal delivery teams and third-party service providers meet security and privacy requirements for ticketing system.
• Oversee data protection measures and access controls of ticketing system.

(3) Incident Management:
• Manage cybersecurity and data protection incidents including detection, analysis, containment, eradication, and recovery.
• Drive root cause analysis and ensure implementation of corrective/preventive actions.
• Review incident management report and post-incident reports.
• Coordinate with required stakeholders for incident response, business continuity and disaster recovery.

(4) Awareness and Training:
• Collaborate with technical cyber security team to implement cybersecurity and data privacy awareness programs, including phishing simulations and incident response tabletop exercises.
• Support staff training on cyber security, secure data handling, breach prevention, and compliance obligations.

[What we are looking for]
• Knowledge in computer science, engineering or information technology, cyber security is preferred.
• Experience in managing cyber security and data protection operations and incident management.
• Strong understanding of information security and data protection principles, ISO 27001, PDPA, PCI-DSS Security Standards and cloud security standards.
• Preferably has cyber security and/or data protection recognized certifications such as CISSP, CISA, CISM, ISO27001, CIPP
• Strong incident response, crisis management capabilities, good communication, situational awareness and stakeholder management skills.
• Ability to analyze complex problems and recommend practical solutions.