The IT Manager will be responsible for overseeing the firm's entire IT infrastructure, systems, cybersecurity posture, and technology operations, with the support of Group IT operations and security. This role is pivotal in ensuring the reliability and security of trading systems and business-critical platforms, while maintaining compliance with MAS Technology Risk Management (TRM) Guidelines and Notice on Technology Risk Management (MAS Notice on Cyber Hygiene / MAS TRM).
You will work closely with senior management, compliance, operations, and external vendors to deliver a stable, secure, and scalable IT environment.
Key Responsibilities:
Manage and maintain all IT infrastructure including servers, networks, workstations, storage, cloud environments, and communications systems.
Ensure high availability and business continuity of trading platforms, order management systems (OMS), and back-office systems.
Oversee IT helpdesk and provide day-to-day technical support across the organisation.
Manage vendor and third-party service provider relationships, including SLA monitoring and contract management.
Plan and execute hardware and software procurement, lifecycle management, and asset tracking.
Develop, implement, and maintain the firm's cybersecurity framework in alignment with MAS Technology Risk Management (TRM) Guidelines.
Conduct regular vulnerability assessments, penetration testing oversight, and security audits.
Monitor and respond to security incidents; maintain an incident response plan.
Manage identity and access management (IAM), endpoint security, firewalls, intrusion detection/prevention systems (IDS/IPS), and data loss prevention (DLP) tools.
Ensure compliance with MAS Notice on Cyber Hygiene requirements.
Maintain IT policies and procedures in line with MAS regulatory requirements, including the MAS TRM Guidelines, MAS Notice SFA 04-N09, and applicable Securities and Futures Act (SFA) obligations.
Support internal and external audits, regulatory examinations, and IT risk assessments.
Maintain documentation for Disaster Recovery (DR) and Business Continuity Plans (BCP) and conduct regular DR drills.
Ensure proper data governance, records management, and audit trail controls are in place for regulatory reporting.
Liaise with the Compliance team to ensure technology systems support MAS reporting obligations (e.g., trade reporting, client data handling under PDPA).
Oversee the administration and support of trading platforms, connectivity to exchanges/brokers, and market data services.
Manage FIX connectivity, co-location arrangements, and low-latency network considerations where applicable.
Support the onboarding of new trading products, systems, or counterparties from an IT perspective.
Contribute to the IT roadmap and technology strategy aligned with business growth objectives.
Lead and manage IT projects including system upgrades, migrations, and new implementations.
Evaluate emerging technologies and recommend solutions to improve operational efficiency and security.
IT Infrastructure & Operations
Cybersecurity & Risk Management
Regulatory Compliance & Governance
Trading & Business Systems
IT Strategy & Projects
Qualifications & Experience:
Bachelor's degree in Information Technology, Computer Science, or a related discipline.
Minimum 5–8 years of IT experience, with at least 3 years in a senior IT role within a financial services, brokerage, or capital markets environment.
Prior experience working in a MAS-regulated entity is strongly preferred.
Strong knowledge of network infrastructure (LAN/WAN, VPN, firewalls, routing/switching).
Proficiency in Google-based solutions.
Working knowledge of cybersecurity tools and frameworks (e.g., NIST, ISO 27001, CIS Controls).
Experience with backup, DR, and BCP implementation.
Familiarity with trading platforms (e.g., Bloomberg, Fidessa, POEMS, or similar) and financial market infrastructure.
Experience with cloud platforms (AWS, Azure, or GCP) and hybrid environments.
Strong familiarity with MAS TRM Guidelines and MAS Notice on Cyber Hygiene.
Understanding of PDPA (Personal Data Protection Act) obligations in the context of IT systems.
Relevant certifications such as CISSP, CISM, CompTIA Security+ or similar.
Experience supporting regulatory audits and examinations is an advantage.
Strong communication and stakeholder management skills; able to present technical concepts to non-technical senior management.
Highly organised with the ability to prioritise and manage multiple workstreams simultaneously.
Proactive, self-motivated, and able to work independently in a lean team environment.
Strong analytical and problem-solving skills.
Minimum Requirements:
Preferred / Good to Have
Soft Skills
_0.png)
