Intern Information Security (Spring 2027, Jan to Jun)

We are Asias leading and trusted securities and derivatives market infrastructure operating equity fixed income currency and commodity markets to the highest regulatory standards. We also operate a multi-asset sustainability platform SGX FIRST or Future in Reshaping Sustainability Together ( We are committed to facilitating economic growth in a sustainable manner leveraging our roles as a key player in the ecosystem a business regulator and listed company. With climate action as a key priority we aim to be a leading sustainable and transition financing and trading hub offering trusted quality end-to-end products and solutions. As Asias most international multi-asset exchange we provide listing trading clearing settlement depository and data services with about 40% of listed companies and over 80% of listed bonds originating outside of Singapore. We are the worlds most liquid international market for the benchmark equity indices of China India Japan and foreign exchange we are Asias leading marketplace and most comprehensive service provider for global FX over-the-counter and futures participants. Headquartered in AAA rated Singapore we are globally recognised for our risk management and clearing capabilities.

Be a part of this fast-paced world where your contributions count. SGX offers you the unique experience of gaining insights into the Exchange business and the finance value chain. You will be immersed in the respective specialist functions at SGX we believe that our interns are involved in real-time work from Day 1.

Note: Leave of Absence (LOA) may be required to take on the internship.

Brief Overview:

The Information Security Team encompasses key functions covering Governance & Risk Design & Engineering Defense & Response and Security Operations. The team strengthens the cyber resiliency of SGX services to service its customers and internet users.

Learning Objectives:

The shortlisted intern would participate and contribute in the Information Security projects daily operations development of new and enhancement to existing processes/procedures the implementation and governance of these set of controls. The intern will learn about security practices and implementation driven by industry best practice regulatory and business requirements. Specific for areas in Defence & Response Design & Engineering and Security Operations.

• Security Architecture of the Enterprise.
• Security Operations for the tools deployed within the SGX environment.
• Determine/ identify how security intelligence is used within an organization
• Understand how threat vulnerability changes the way we look at vulnerability management
• Determine/ identify how we can leverage on process automation for manual tasks

Job Description

• Data Loss Prevention (DLP)

• • Assist in configuring and refining Microsoft Purview DLP policies and sensitivity labels across Microsoft 365 workloads.
  • Support the development and testing of advanced classifiers including Exact Data Match (EDM) Document Fingerprinting and Trainable Classifiers.
  • Monitor DLP policy alerts investigate incidents and document findings for review by the DLP Champion network.
  • Contribute to the DLP Champions programme by preparing communications training materials and awareness content.
  • Analyse policy effectiveness and produce periodic reporting on data protection posture.
  • Research emerging DLP capabilities and recommend improvements aligned to SGXs data governance framework.

• Identity & Access Management (IAM)

• • Support day-to-day access provisioning and de-provisioning workflows in line with least-privilege principles.
  • Assist with periodic user access reviews and recertification campaigns across enterprise systems.
  • Help maintain IAM runbooks role matrices and access control documentation.
  • Contribute to the review and enforcement of Privileged Access Management (PAM) controls.
  • Liaise with application owners and HR to ensure joiner-mover-leaver processes are correctly executed.
  • Support audit and compliance activities related to access governance (e.g. MAS TRM ISO 27001).

• Security Design & Engineering

• • Support the design development and enhancement of security engineering solutions across enterprise platforms and services.
  • Assist in building scripts utilities and proof-of-concept solutions using structured programming languages such as Python Java C# JavaScript or similar technologies.
  • Apply Artificial Intelligence and automation concepts to explore opportunities for improving security processes analysis detection and operational efficiency.
  • Work with security architects and engineers to document security design patterns technical standards and implementation guidelines.
  • Develop a strong understanding of foundational cybersecurity concepts including secure design threat modelling vulnerability management identity security data protection and defense-in-depth principles.
  • Participate in technical research on emerging security technologies AI-enabled security capabilities and secure software engineering practices.
  • Support cloud security-related engineering activities where applicable including understanding cloud infrastructure cloud-native security controls and security considerations across major cloud platforms.
  • Contribute to documentation testing and validation of security controls to ensure solutions are aligned with regulatory expectations enterprise standards and industry best practices.

• Threat & Vulnerability Management (TVM)

• • Support the team in vulnerability tracking remediation coordination and security reporting activities.
  • Develop and enhance automation solutions to streamline data collection analysis and management reporting processes.
  • Coordinate penetration testing activities conducted by independent security assessors and facilitate the discussion for remediation.
  • Collaborate with Technology teams to gather validate and consolidate data for reporting.
  • Explore and evaluate AI-assisted approaches to improve operational efficiency reporting accuracy and response time to emerging cybersecurity threats.
  • Contribute to continuous improvement initiatives within cybersecurity operations and technology risk management.

Knowledge and Skill Requirements

• Good communication and stakeholder management skill.
• Good command of English
• Basic knowledge of networking operating systems cloud technologies or cybersecurity concepts.
• Strong interest in Cybersecurity Technology Risk Management Automation Data Analytics or Artificial Intelligence.
• Proactive self-motivated and willing to learn in a fast-paced environment.
• Experience in PowerShell Python Tableau PowerBI and any other tools related to data analytics
• Good understanding of concepts around Identity and Access Management and Data Loss Prevention
• Detail oriented