IT Infrastructure & Security

Key Responsibilities

Infrastructure & Reliability

• Deploy, operate and improve our Singapore cloud environment (compute, network, databases,

storage), ensuring high availability and performance for payment workloads

• Build and maintain monitoring, alerting, logging and capacity management; define and track

service level objectives

• Automate infrastructure and releases using Infrastructure-as-Code and CI/CD pipelines
• Apply change management, release review and rollback discipline to protect production

Security Operations & Compliance

• Implement and maintain security baselines, patching, endpoint protection/EDR and vulnerability

scanning; coordinate periodic penetration tests and track remediation

• Manage identity and access, including privileged access, least privilege and segregation of duties
• Operate security monitoring (SIEM) and respond to security incidents, including regular exercises
• Implement technical controls aligned with the MAS Technology Risk Management Guidelines and

Notices on Technology Risk Management and Cyber Hygiene, and with PDPA requirements

• Prepare and maintain security policies, procedures and evidence to support internal audits,

external audits and MAS inspections

Resilience & Incident Management

• Maintain Business Continuity and Disaster Recovery arrangements and run regular recovery

tests

• Support incident escalation and regulatory incident reporting within MAS timelines

Third Parties & Collaboration

• Support due diligence and ongoing monitoring of cloud providers and other technology vendors,

in line with MAS outsourcing and third-party risk expectations

• Work with the China HQ technology team to apply group standards while meeting Singapore

requirements, and with Compliance and Risk on technology risk reviews before new features go

live

Requirements

Essential

• Bachelor's degree in Computer Science, Information Technology, Information Security or a

related field

• 4–6 years' experience in infrastructure, DevOps, SRE or security engineering, including running

production systems

• Hands-on experience with AWS (or an equivalent major cloud) and containerised workloads on

Kubernetes

• Experience with Terraform, Ansible or similar IaC tools and CI/CD pipelines
• Solid Linux and networking fundamentals (VPC, firewalls, load balancing, WAF) and experience

operating relational databases and Redis

• Experience with monitoring and observability tools such as Prometheus, Grafana or Datadog
• Practical security operations experience: SIEM, EDR, vulnerability management and incident

response

• Exposure to a regulated or audited environment (for example MAS TRM, ISO 27001, SOC 2 or

PCI DSS), including preparing documentation and evidence

• Fluent English and Mandarin; willingness to participate in an on-call rotation

Strongly Preferred

• Experience supporting payment systems in production, such as cross-border remittance, e

wallets, card processing or FAST/PayNow

• Prior experience at an MAS-licensed financial institution or payments company, including MAS

inspections

• Experience setting up infrastructure and controls in an early-stage or fast-growing environment

Nice to Have

• Certifications such as AWS, CKA/CKS, Security+, CISSP, CISM or OSCP

Personal Attributes

• Ownership mindset and composure under pressure
• Self-driven and comfortable working across time zones and cultures

Whalet is an MAS-licensed Major Payment Institution (MPI) providing cross-border payment infrastructure for business and trade flows across the China-ASEAN corridor. Headquartered in Singapore with operations in Hong Kong and the US, Whalet is entering a pivotal phase of regulatory expansion, commercial scaling, and capital raising.