VP, Enterprise Cybersecurity Engineering (Cybersecurity Platform Engineer)

About GIC and Technology Group

GIC is one of the world’s largest sovereign wealth funds, with over 2,000 employees across 11 global locations, investing in more than 40 countries across various asset classes and businesses. The firm focuses on long-term value creation grounded in Singapore's financial future and global communities.

The Technology Group supports 24×7 global business operations in asset management, trading, investment operations, and risk management by delivering secure, reliable, and integrated technology solutions while exploring emerging technologies.

The Infrastructure & Cybersecurity Resilience (ICR) team designs, builds, and secures the foundational technology infrastructure to support GIC’s global investment activities, aiming for scalable, resilient, and secure systems that empower business performance.

Role Impact and Responsibilities

• Analyze existing enterprise security architecture to identify enhancements addressing evolving cybersecurity threats.
• Balance and align cybersecurity, information, and technology requirements with business needs according to organizational risk appetite.
• Evaluate and conduct proof-of-value/proof-of-concept assessments; design and implement enterprise-grade cybersecurity systems.
• Create comprehensive integrated security operating models and documentation to ensure efficiency, scalability, and sustainability of operations.
• Serve as a domain expert and trusted advisor on cybersecurity resilience, collaborating closely with Technology Group and other business units on security engineering matters.

Qualifications and Skills

• Bachelor’s degree in Information Technology, Computer Science, or related field.
• Minimum 10 years of relevant experience, ideally within financial services or asset management, including at least 7 years focused on Cyber Security or Information Security roles.
• Proven track record implementing and managing enterprise cybersecurity platforms such as EDR, NDR, SIEM, SOAR, XDR, and Threat Intelligence Platforms.
• Expertise in Email Security technologies, including secure email gateways, cloud email security integration, anti-phishing/malware controls, DMARC/DKIM/SPF protocols, and email threat detection and response.
• Experience with Continuous Threat Exposure Management (CTEM), including attack surface and vulnerability assessment, risk prioritization, and attack simulation/validation; operationalizing CTEM or similar risk frameworks is preferred.
• Familiarity with cloud security reference architectures and controls across AWS, Azure, and Google Cloud Platform.
• Proficiency in scripting and programming languages such as Java, Python, or C#, with a solid understanding of REST APIs and JSON.
• Skilled in creating detailed documentation, including system design diagrams and process workflows.
• Highly attentive to detail, analytical, versatile, inquisitive, with excellent problem-solving capabilities.
• Strong communication and teamwork abilities, adaptable to diverse environments and collaborative interactions to support strategic objectives.
• Professional cybersecurity certifications such as CISSP, CISM, or CEH are advantageous.

Work Culture and Values

GIC fosters a forward-looking, ambitious, and diverse environment where employees are encouraged to challenge boundaries, share ideas, and be heard. The organization embraces its PRIME values—Prudence, Respect, Integrity, Merit, and Excellence—which guide daily decisions and behaviors. GIC also offers flexible working arrangements with hybrid options, requiring office presence four days a week, enhancing collaboration while accommodating individual needs.

Equal Opportunity and Inclusion

GIC is committed to diversity and inclusion, valuing every employee’s distinct perspectives to enhance team performance and competitive edge. The firm is an equal opportunity employer promoting an environment that supports exceptional contributions.