IT Infrastructure & Security
Your tasks
Infrastructure & Reliability
- Deploy, operate and improve our Singapore cloud environment (compute, network, databases,
storage), ensuring high availability and performance for payment workloads
- Build and maintain monitoring, alerting, logging and capacity management; define and track
service level objectives
- Automate infrastructure and releases using Infrastructure-as-Code and CI/CD pipelines
- Apply change management, release review and rollback discipline to protect production
Security Operations & Compliance
- Implement and maintain security baselines, patching, endpoint protection/EDR and vulnerability
scanning; coordinate periodic penetration tests and track remediation
- Manage identity and access, including privileged access, least privilege and segregation of duties
- Operate security monitoring (SIEM) and respond to security incidents, including regular exercises
- Implement technical controls aligned with the MAS Technology Risk Management Guidelines and
Notices on Technology Risk Management and Cyber Hygiene, and with PDPA requirements
- Prepare and maintain security policies, procedures and evidence to support internal audits,
Resilience & Incident Management
- Maintain Business Continuity and Disaster Recovery arrangements and run regular recovery
tests
- Support incident escalation and regulatory incident reporting within MAS timelines
Third Parties & Collaboration
- Support due diligence and ongoing monitoring of cloud providers and other technology vendors,
in line with MAS outsourcing and third-party risk expectations
- Work with the China HQ technology team to apply group standards while meeting Singapore
requirements, and with Compliance and Risk on technology risk reviews before new features go
Requirements
Essential
- Bachelor's degree in Computer Science, Information Technology, Information Security or a
related field
- 4–6 years' experience in infrastructure, DevOps, SRE or security engineering, including running
production systems
- Hands-on experience with AWS (or an equivalent major cloud) and containerised workloads on
Kubernetes
- Experience with Terraform, Ansible or similar IaC tools and CI/CD pipelines
- Solid Linux and networking fundamentals (VPC, firewalls, load balancing, WAF) and experience
operating relational databases and Redis
- Experience with monitoring and observability tools such as Prometheus, Grafana or Datadog
- Practical security operations experience: SIEM, EDR, vulnerability management and incident
response
- Exposure to a regulated or audited environment (for example MAS TRM, ISO 27001, SOC 2 or
PCI DSS), including preparing documentation and evidence
- Fluent English and Mandarin; willingness to participate in an on-call rotation
Strongly Preferred
- Experience supporting payment systems in production, such as cross-border remittance, e
wallets, card processing or FAST/PayNow
- Prior experience at an MAS-licensed financial institution or payments company, including MAS
inspections
- Experience setting up infrastructure and controls in an early-stage or fast-growing environment
Nice to Have
- Certifications such as AWS, CKA/CKS, Security+, CISSP, CISM or OSCP
Personal Attributes
- Ownership mindset and composure under pressure
- Self-driven and comfortable working across time zones and cultures