Job Description

You will be a member of the Group Information Security Team responsible for responding to threats and incidents to the corporate networks, systems (on-prem and cloud), and digital assets.

Key Responsibilities:

•Perform security monitoring and incident response activities across the scoot networks, leveraging a variety of tools and techniques.

•Manage Security Operations center.

•Detect incidents through proactive “hunting” across security-relevant data sets.

•Ability to correlate multiple events from different devices to identify abnormal behaviour

•Document incident response analysis activities thoroughly

•Develop new, repeatable methods for finding malicious activities

•Provide recommendations to enhance detection and protection capabilities.

•Effectively present technical topics to both technical and non-technical audiences

•Develop and follow detailed operational processes and procedures to appropriately analyze, escalate, and assist in the remediation of information security incidents

•Prioritize multiple high-priority tasks and formulate responses/recommendations in a fast-paced environment

•Prepare documentation for security technical standards, standard operational procedures, and hardening standards.

•Analyse endpoint, network, and application logs

•Assist other IT teams in security-related issues

•Engage with vendors and parent company SIA team members for security reviews.

Requirements:

•Degree in Computer Engineering, Computer Science, Information Systems, or equivalent qualification.

•At least 5-6 years of experience in Cybersecurity Incident and Security Operations.

•Demonstrate experience in Information Security with a focus on Cyber Security Operations, Incident Response and Detection.

•Experience working in the Security Operations Centre and/or Computer Incident Response Team.

•Excellent problem-solving skills combined with hands-on experience doing root cause analysis and post-incident reviews.

•Solid knowledge of computer networks and common protocols

•Knowledge of prominent cyber threat actors and APT groups.

•Experience with Threat Intelligence Platforms.

•Experience with SIEM (especially Splunk).

•Professional security related qualifications (i.e. GCIA, CISSP etc) will be an advantage

•Preferred certifications: CISSP, CISM, CISA, ISMS, TOGAF, SABS

•Good interpersonal skills

• Shift pattern will be 4 working days with 2 days off / 5 days work with 1 day off
• 12 hours permanent shift
• Location: Islandwide
• Salary Package
  i. Gross salary: up to $2,850
  ii. Bonus of $2,500

Responsibilities:

• Screening of passengers at designated zones
• Manual bag checks
• Usage of security screening equipment for screening purposes
• X-ray screening of checked in luggages
• Any other security related roles at Airport

Requirements:

• 1 N Levels / 1 O Level / WPLN 3 x Level 4

If you are interested to apply, kindly WhatsApp me your updated resume in DOC file and allow our Consultant to match you with our Clients.

Whatsapp: +65 8525 2419

Email: [email protected]

Tan Man Ee Reg No: R22108289

The Supreme Hr Advisory Pte Ltd EA No: 14C7279

• Shift pattern will be 4 working days with 2 days off / 5 days work with 1 day off
• 12 hours permanent shift
• Location: Islandwide
• Salary Package
  i. Gross salary: up to $2,850
  ii. Bonus of $2,500

Responsibilities:

• Screening of passengers at designated zones
• Manual bag checks
• Usage of security screening equipment for screening purposes
• X-ray screening of checked in luggages
• Any other security related roles at Airport

Requirements:

• 1 N Levels / 1 O Level / WPLN 3 x Level 4

If you are interested to apply, kindly WhatsApp me your updated resume in DOC file and allow our Consultant to match you with our Clients.

Whatsapp: +65 8525 2419

Email: [email protected]

Tan Man Ee Reg No: R22108289

The Supreme Hr Advisory Pte Ltd EA No: 14C7279

Position Purpose

Financial Security Compliance Officer (Associate or AVP Grade) Singapore is part of Financial Security team responsible for the prevention of money laundering, the fight against terrorist financing, for economic sanctions compliance. Singapore Financial Security Compliance Officer, Sanctions is involved in the process to limit the exposure of the Bank to risks associated with violations of sanctions and to ensure the Bank must comply with applicable sanctions regulations.

Responsibilities

Direct Responsibilities

• Keep updated on OFAC sanctions programs, UNSC, EU and local sanctions measures and applications.

• Keep updated on developments on sanctions, embargoes and related Sanctions laws and regulations as well as group policies and procedures.

• Provide sanctions advisory to business lines and functions.

• Perform Level 3 alert control clearance process and all related matters in accordance with policies and procedures, including without limitation:

- review and analyze transaction alerts escalated by Level 2, trade operations;

- conduct appropriate enhanced due diligence and ensure proper clearance of such transaction alerts in accordance with prevailing AML & sanctions regulations and policies; and

- Ensure proper escalation of transaction alerts to Country and/or Regional Compliance where appropriate.

- Provide advisory support on Level 3 framework and all related matters.

• Implement sanctions monitoring standards in line with Head office and Regional policies, procedures and guidelines.

• Coordinate and assist in the list management process and dashboard reporting.

• Manage and coordinate all queries and matters related to alerts process.

• Coordinate and assist in the testing, implementation and maintenance of related sanctions tools and systems.

Contributing Responsibilities

• Ensure efficient framework for the identification and clearance of sanction alerts.

• Provide appropriate guidance to new joiners, businesses and functions to enhance sanctions risk awareness.

• Coordinate and participate in ad hoc projects, risk assessment and audit / regulatory inspections.

• Generally provide support into the Head of Financial Security KYC Singapore.

Technical & Behavioral Competencies

• Must have relevant AML & Sanctions Compliance experience.

• Good general knowledge of the international financial sanctions laws and regulations in an international financial institution or a regulatory body in Asia Pacific is preferred.

• Must have strong interpersonal skills, a flexible, collaborative and team-oriented approach to problem-solving and an ability to work in a fast-paced and rapidly changing environment.

• An ability to write concisely and clearly; and to produce clear constructive advice under pressure and within short timeframes.

• Must evidence an attention to detail and have an investigative and questioning nature.

• Ideally be flexible and have a hands-on in work style, with the ability to work independently to carry out projects.

• Ideally be familiar with navigating the operational tools which support Sanctions Compliance controls.

• Ability to maintain high quality in a risk intensive environment.

• The ideal candidate should have experience in corporate and investment banking (CIB) and exposure to security services.

• A good team player.

Why joining Compliance as Financial Security Compliance Officer?

As a Financial Security Compliance Officer, you will play a critical role in safeguarding our organisation against financial crime. In this position, you will stay current with OFAC Sanctions programs,

deliver expert sanctions advisory and conduct in-depth review and analysis of transaction alerts escalated by level 2.

Specific Qualifications (if required)

- Relevant industry certification (e.g. ACAMS or ICA) preferred

As the leading European Union bank, and one of the world’s largest financial institutions with an uninterrupted presence in the region since 1860, BNP Paribas offers a wide range of financial services for corporate, institutional and private investors spanning corporate and institutional banking, wealth management, asset management and insurance.

We passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued and encourage applicants of all backgrounds, including diversity of origin, age, gender, sexual orientation, gender identity, religion applicants who may be living with a disability. We have a number of internal employee networks in place to empower our staff to act and challenge the status quo.

•BNP Paribas PRIDE is highly active in favour of the LGBTQIA+ community

•BNP Paribas MixCity which fosters better representation of women at all levels of the organization

•Ability, the mutual aid network for employees with a disability or a disabling or chronic illness

•BNP Paribas CulturAll which celebrates diverse backgrounds

BNP is committed to financing a carbon-neutral economy by 2050. The Group is a founding member of the Net-Zero Banking Alliance and has set up its own Low Carbon Transition Group to support its clients through their energy transitions.

https://careers.apac.bnpparibas/

Award Obtained

BNPP has won Top employer Europe award in a 10th consecutive year

About the Team

We are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.

We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.

Get to know the Role (Lead Security Engineer):

• We are seeking a lead security engineer who can drive security strategy and initiatives from 0 to 1. This could be across a wide range of domains covering identity, application security, cloud, DevSecOps, or detection engineering. We are open to security engineers with deep skills in one or more of these domains.
• You will have excellent stakeholder management skills, and are able to operate and influence across the business.
• You should be excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.
• You will work with public cloud, terraform, commercial cloud posture security management tools, open-source and build tools that automate our security posture.

The day-to-day activities:

• Work with the wider security engineering team to take security requirements and build scalable applications and solutions that automate security and reduce the risk of the bank.
• Own the strategy for assigned security domains, consisting of tactical initiatives and strategic multi-year decisions.
• Partner with teams across the bank including SRE, Data Engineering, GenAI and Product to identify areas of security posture improvement, create the plan and execute.
• Maintain standards and procedures inline with regulatory and internal policy requirements.
• Lead engagements with internal and external audits that are applicable to first line technology.
• Mentor junior engineers to uplift their ability across security domains, increasing the teams knowledge and standard operating procedures.

The must-haves:

• Should have relevant experience of 8+ years within information security
• Experience with scripting/programming security automation.
• Knowledge of cloud platforms (AWS, Serverless, managed services, containers, etc)
• Excellent soft skills - able to handle pressure in a fast-paced environment. Open-minded, creative and innovative.
• Relevant certifications such as CISSP, CISM, CEH, or equivalent.
• In-depth knowledge of security frameworks, standards, and best practices.
• Proficiency in security technologies (e.g., SIEM, IDS/IPS, firewalls, endpoint protection).
• Strong understanding of network protocols, operating systems, and application security.
• Excellent problem-solving, analytical, and decision-making skills.
• Strong leadership, communication, and collaboration abilities.
• Ability to manage multiple projects and priorities in a fast-paced environment.

Our client one of the leading distributions of IT products, solutions, and services in APAC region. They are now looking to hire a I-Security Engineer to join their admirable team.

Responsibilities:

• Be responsible for Post-sales activities of Cybersecurity or Network Performance Monitoring products.
• Involve in Large-scale (Local & Regional) Project Implementation.
• Provide on-site implementation services including testing, deployment & documentation.
• Provide technical support in ensuring customer satisfaction.
• Analyse and clarify customer queries though troubleshooting and researching existing knowledge base articles/known issues.
• Be on routine standby to support 24×7 maintenance support calls.
• Requires the ability to communicate issues clearly and concisely.
• Excellent written and verbal communication skills are a necessary part of the job.

Requirements:

• Bachelor’s degree or Diploma in Cyber Security, Computer Science, Computer Engineering or related field.
• At least 1-2 years relevant experience in IT industry providing network support and administration.
• Equip with knowledge & experience in networking such as routing and switching technology.
• Possess CCNA or CCSA certification.
• Able to work independently as well as in a team environment.
• Willing to work hard and eager to learn about new technologies.
• Polite and able to communicate well to the clients.
• Analytical and possess good troubleshooting skills.
• Willing to work extended hours and on standby duty.
• Excellent interpersonal and communication skills.
• Independent and motivated.

If you are interested in this role, please click on Apply Now

Please note that only shortlisted candidates will be contacted, thank you.

Eng Ai Wen, Ivan

EA License Number: 23C2060

Registration ID is R1222887

Disclaimer: The company is committed to ensuring the privacy and security of your information. By submitting this form, you consent to the collection, processing, and retention of the information you provide. The data collected (which may include your contact details, educational background, work experience and skills) will be used solely for the purpose of evaluating your qualifications for the position you're applying for. Your data will be stored securely and retained for the duration necessary to fulfill our hiring process. If you are not selected for the position, your data will be kept on file for a limited period in case future opportunities arise. You have the right to access, correct, or delete your data at any time by contacting us at Quess Singapore | A Leading Staffing Services Provider in Singapore (quesscorp.sg)

About The Team

We are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.

We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.

Get to know the Role:

• We are seeking security engineers who are excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.
• Our team covers line one control ownership of multiple domains, including cloud, DevSecOps, privileged access management, runtime, containers, kubernetes, cryptography, SaaS security and automated response.
• You will work on a public cloud security program with an aim of real-time vulnerability identification and automatic remediation.
• You will work with public cloud, terraform, commercial cloud posture security management tools, open-source kubernetes admission controllers (Kyverno) and build tools that automate our security posture.

The day-to-day activities:

• Design and implement cutting edge preventative and detective controls
• Shift security left in the engineering life-cycle by implementing commercial, security tools and scanners.
• Collaborate with experienced security engineers and engineering squad leads to research and build solutions geared towards identifying security issues at scale
• Evaluate/extend/contribute to existing open-source security tools and integrate them into pipelines.
• Constantly evaluate our progress and work on solutions to raise our security bar at scale. You understand that security is a continuous, ever evolving process.
• Design and implement cutting edge security tools and scanners, including static application security testing (SAST) and dynamic application security testing (DAST).
• Design and implement an automated security scanning solution for cloud infrastructure as code, experience using Sentinel policies for Terraform is preferred.

The must-haves:

• An understanding of public cloud security and cloud native security services is a plus
• An understanding of common global and industry standard control frameworks (CIS, NIST800-53, PCI-DSS)
• Should have relevant experience of 4 to 5 years
• Experience with scripting/programming security automation. While you do not need to be a full time programmer, we do strive for automation and are required to glue a lot of our processes together. Go, Python, etc.
• Experience with container platforms and frameworks is preferred (AWS EKS, Docker, Kubernetes, Admission Controllers, Kyverno).

Job Description

• Oversee day-to-day PKI operations, including the issuance, renewal, and revocation of digital certificates.
• Manage certificate lifecycle in both enterprise and cloud environments.
• Monitor and maintain certificate authorities (CA) and related infrastructure, ensuring high availability and security.
• Implement best practices for secure key management, including key rotation, backup, and recovery processes.
• Support cryptographic hardware devices, such as HSMs (Hardware Security Modules), ensuring proper configuration and compliance.
• Identify and resolve issues related to PKI infrastructure, certificates, and cryptographic hardware.
• Provide Level 1/2 support for PKI-related incidents and requests.
• Document troubleshooting steps and resolutions to improve future responses.
• Ensure PKI operations align with industry standards and regulatory requirements.
• Conduct regular audits of PKI systems and assist with compliance reporting.

Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent experience).

Experience:

• Minimum of 3 years in IT with a focus on systems administration, networking, or cybersecurity.
• At least 2 years of hands-on experience with PKI or certificate operations
• Strong understanding of PKI concepts, protocols (e.g., TLS/SSL, x.509), and standards (e.g., FIPS, NIST).
• Familiarity with certificate management tools and software.
• Experience with scripting languages (e.g., PowerShell, Python) is a plus.
• Excellent problem-solving skills and attention to detail.
• Effective communication skills to interact with technical and non-technical stakeholders.

Company’s Profile

Julian Grey’s client is a solution provider for security and enterprise applications.

Responsibilities

• Plan, implement, manage, monitor, and upgrade IT security solutions.
• Support projects by delivering project deliverables and completing milestones.
• Develop and maintain technical, operational, and configuration documentation necessary for project implementation.
• Coordinate and manage vendors for product implementation and troubleshooting.
• Evaluate security products and conduct Proof of Concept (POC) to verify the effectiveness of security measures, ensuring their continued efficacy post-implementation.
• Provide technical support and incident response for IT security infrastructure components to the maintenance team.

Requirements

• Proficient in Endpoint Security solutions, including Anti-Malware, Host Firewall, Application & Change Control, Disk Encryption, and EDR.
• Knowledgeable in Identity & Access Control solutions, such as PKI solutioning, Hardware Security Module (HSM), Privileged Access Management, 2FA, and OS Hardening Policies.
• Implement Endpoint or Identity & Access Control Security tools.
• Familiarity with various operating systems like Windows or Linux.

Follow us for more updates, interview tips!

https://www.instagram.com/juliangreygroup/

https://www.linkedin.com/company/juliangreygroup/

https://www.facebook.com/juliangreygroup/

Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei

Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.

EA License No: 19C9568

Risk Management:

• Assess technologies and solutions against cyber security standard.
• Identify, analyse, and prioritize cyber security risks.
• Assess and advise security by design concepts in Cloud platforms such as AWS or Azure
• Cloud. Develop and oversees implementation of risk mitigation strategies and controls.
• Maintain and update the organization's risk register.

Compliance:

• Stay up-to-date on relevant IT security regulations and standards (e.g., PCI-DSS, ITRM, IM8,etc).
• Develop and implement security policies and procedures.
• Monitor and audit compliance activities.
• Report on compliance status to relevant stakeholders.
• Establish compliance initiatives to ensure conformance with security requirements

Security Operations:

• Monitor and mitigate potential data loss events, and investigate suspected incidents.
• Investigate security incidents and implement appropriate response measures. Business Continuity Planning and Management:
• Review existing and/or develop new corporate crisis plans and policies to ensure relevance in tandem with the company or external changes.
• Plan and coordinate simulation exercises to ensure the company preparedness for potential disruptions.
• Execute business continuity & resilience awareness initiatives to enhance workforce resilience.

Collaboration:

• Work closely with IT operations, development, and other business units to promote security awareness and best practices.
• Provide guidance and training to employees on security policies and procedures.
• Collaborate with external auditors and regulators.
• Prepare regular management reports on overall IT security posture.

Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, or related field (or equivalent experience).
• Minimum of 3-5 years of experience in IT security, risk management, and compliance.
• Strong understanding of IT security concepts, frameworks, and methodologies.
• Working knowledge of relevant IT security regulations and standards.
• Experience with security tools and technologies (e.g., DLP solutions, SIEM, IDS/IPS).

Job Description:

The “Production Security” Domain is part of the Corporate & Institutional Banking Information Technology & Operations of the Bank, it manages all the security solutions.

The SSO team provide identity and access management tooling as a middleware delivery team, supporting authentication and authorisation for both internal and external customers. Using several standardised frameworks, the team maintains and governs access policies and works to deliver technologies to ensure that the right entities have the appropriate access to technology resources.

The jobholder will be part of multi-geographical (presence in 3 regions and 6 locations) and multi-disciplined team, providing support and project delivery for the SSO and Identity Management platforms in the following topics:

• Architecture
• Project Delivery
• Platform Support and Maintenance
• Incident and Problem Management
• Change Management
• General

The candidate will also be well versed with cryptographic notions such as RSA, symmetric and asymmetric encryption, certificates and digital signatures etc.

Main Activities:

Architecture

• To provide architectural expertise thereby driving change and improvement in technology and process.
• To contribute to the development of the SSO and LDAP technology roadmaps.
• To liaise with CIB architecture teams in undertaking architectural reviews.
• To stay abreast of emerging technologies and technology trends.
• To automatize the process to accelerate the delivery time

Project Delivery

• To take responsibility for the delivery of key projects around SSO and LDAP which are aligned to drive significant change within the platform.
• To work with the Application Production Support project managers in defining, designing, documenting and implanting new functionality for existing and new applications.
• To liaise with the Application Developers in low-level diagnosis of on-going issues.
• To provide subject matter expertise on SSO and IDM technologies to all business application teams.
• To act as technology evangelists for the improvement of process and technology in use for the Authentication services

Platform Support and Maintenance

• Pro-actively monitor, manage and improve availability and performance of the production environments (from presentation and application layers to Infrastructure layers)
• Pro-actively manage the capacity of production applications

Incident and Problem Management

• To work with partner teams to conduct analysis of major and critical incidents.
• To identify tactical or strategic improvements that can be introduced to help reduce the number of on-going incidents within the SSO and LDAP area.

Change Management

• To work within the change management framework adopted to ensure that all changes to the production environment are planned and executed in a controlled manner.
• To take responsibility for the quality of changes within the SSO and IDM environments, ensuring that changes raised are of sufficient standard in terms of technical and planning detail.
• Attending and sharing knowledge / updates in the Weekly Change Control Board Meetings and the Weekly Problem Management Meetings.

General

• Perform pre-assigned tasks to accomplish the function responsible for. The nature of these tasks are Change The Bank or Run The Bank
• Work cooperatively with the other members of the team
• Ensure adherence to processes and procedures
• Request improvement of knowledge (training) when needed
• Apply own initiative, within the levels of acceptable risk
• Whenever in doubt, escalate and seek advice and guidance
• If the nature of the position is user-facing, then all the guidelines and principles of user service mentality and behaviour should be applied
• Escalate risks / issues to the manager of the team
• Minimise operational failure, including but not exclusively, the risk of fraud, by helping to devise, and by implementing, sufficient regular controls.
• Ensure appropriate escalation to management and/or Permanent Control (or Compliance as appropriate) as soon as an issue is identified.

Job Requirements:

Technical Skills essential for the role include, but not limited to:

• CA Siteminder Web SSO
• SOA security - SAML / WS-Security
• Autoprovisionning tools such as BMC ControlSA, Sailpoint, or Forgerock
• LDAP
• Kerberos / SSL/TLS / PKI / GSS-API / SPNEGO
• oAuth2, OpenIDConnect
• IIS/WCF/WIF, WAS security models
• Infrastructure standards for network load balancers, servers, networks and storage
• Automation mind-set with experience in using tools like Ansible
• Scripting skills using Python/JS or shell
• Application Server : Good exposure in configuring and supporting web technologies such as Tomcat, Apache, nginx, IIS
• Proven logical and methodical problem analysis and troubleshooting skills
• Working with an industry recognised service desk and project management toolset

Ivy Tham Yi Ru | R1104692

Recruit Express Pte Ltd | EA No 99C4599

Your new company

This is a multinational investment bank.

Your new role

• Develop and implement a comprehensive cloud DLP security strategy that aligns with the organization's goals and compliance requirements.
• Design and architect secure cloud solutions, considering aspects such as network security, identity and access management (IAM), encryption, and data protection.
• Ensure that cloud security practices adhere to industry standards and regulatory compliance, such as GDPR, HIPAA, or SOC 2.
• Develop high-level presentations tailored for executives and stakeholders.

What you'll need to succeed

• Minimum of 5 years of experience in cloud security.
• Proficiency in AWS specifically for incident handling.
• Strong experience in using Splunk for monitoring.
• Certified Cloud Security Professional (CCSP) preferred.

What you'll get in return

• Challenging yet fulfilling career with an equal opportunity employer.
• Various opportunities to learn and upgrade your skill sets
• Competitive remuneration package and benefits

What you need to do now

If you’re interested in this role, click ‘apply now’ to forward an up-to-date copy of your CV, or call Shabnam at Hays on +65 60271964 or email [email protected] for a confidential discussion.

Referrals are welcome.

Registration ID No. R1873584 | EA License number: 07C3924 | Company Registration No. 200609504D

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Job Responsibilities

• Provide comprehensive security assessments for IT operations, ensuring the implementation of suitable security measures.
• Assist in the development and maintenance of security policies, addressing risks, and implementing measures to enhance system reliability and prevent unauthorized access.
• Collaborate with internal vulnerability assessment teams to analyze systems, identify vulnerabilities, assess risks, and determine protective measures through annual security assessments.
• Conduct information security and risk management awareness training programs.
• Investigate corporate infosec incidents, identify threats and their impact, and coordinate remediation efforts.
• Work with teams to achieve international accreditations such as ISO 27001, ISO 27017, ISO 27018, CREST, SOC2, and more.

Requirements

• Experience with enterprise information security and information risk management

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

Our Client, an electricity producer is currently looking for a Facilities & Security Engineer.

Location: Jurong Island And Bukom

Responsibilities:

• Plan and coordinate infrastructure and equipment maintenance schedules & activities.
• Respond to work order requests and equipment maintenance schedules & activities.
• Investigate, analyze and determine root cause and report breakdowns and faults effectively.
• Carry out and review facilities’ maintenance programs and recommend actions as required.
• Identify and report on plant and equipment inefficiencies and possible improvement initiatives.
• Evaluate operational systems and facility infrastructure to ascertain and improve operational efficiencies.
• Monitor and review plant infrastructure, asset life expectancy and implement long-term maintenance plans.
• Prepare Purchasing Documents for the purchase of spares & the purchase of Work Services required to carry out the rectification works of the faulty equipment, faulty buildings’ infrastructure etc. (E.g. Preparation of tender specifications for service contracts such as cleaning, landscaping, pest control, waste disposals, card access systems, lifts & sewerage treatment plants’ service & maintenance works, auto-gates/ auto-barriers maintenance).
• Prepare the Facility Asset Management Plan (AMP).
• Design and oversee the implementation of facility expansion, layout, systems, and quality controls.
• Engage contractors and establish procedures to supervise and monitor the performance of contractors to ensure that the company’s requirements for work services are met.
• Ensure compliance with relevant regulations, building codes, and health and safety standards.
• Prepare technical reports on breakdowns, proposals and compliance documents.

Requirements:

• Degree in Civil, Mechanical, Electrical, Facilities Management Engineering or equivalent.
• At least 1 year of experience as a Facilities Engineer or in a similar role.
• Experience with SAP, and MS Office, especially Excel & PowerPoint.
• Knowledge of the building regulatory requirements in Singapore.
• Strong verbal and written communication skills.
• Strong troubleshooting, problem-solving and project management skills.
• Experienced in managing small to medium scale plant & building facilities incorporating maintenance plans, scheduling, costings, and cost controlling.
• Experienced in carrying out plant & buildings maintenance works, demonstrates personal creativity and/or flexibility in problem solving and budgeting process approaches

By sending your job resume to us, it shall be deemed that you have agreed and hereby give your consent to Merries Employment LLP in collecting, using and/ or disclosing your personal data for the purpose of accessing and processing your job application and/ or for future job opportunities within Merries and/ or with the client(s) of Merries. If you wish to withdraw your consent, please notify us.

We regret to inform only shortlisted candidates will be notified.

Merries Employment LLP

EA Licence No: 14C7362

Posting Personnel: Kong Fong Ting
EA Personnel Registration No: R1987853

Security Officer
Monthly Salary: $2,000
Working Location: Tanjong Pagar
Working Days & Hours: 4 Days (7-7 AM & PM Rotating)

Job Responsibilities

• Maintain peace and order within the Hotel premise and to provide safety and security to Hotel guests, patrons, employees and their belongings, and the Hotel's properties.
• Ensure no break-in and intrusion in secured and protected areas.
• Perform patrolling round in all areas of the Hotel’s premise.
• Conduct investigations on incidents involving disturbance, accidents, losses, thefts, etc. occurring in the Hotel.
• Report all matters that are harmful to the Hotel business
• Be familiar with the fire emergency plan.
• Take necessary action whenever the fire alarm is activated.
• Keep proper and updated records/entries in relevant security logs and records.

Job Requirement

• Relevant experience in hospitality industry will be an added advantage
• PLRD licensed
• Willing to work rotating shifts including weekends and public holidays

✅The Supreme HR Advisory Pte Ltd EA No: 14c7279

✅SAMUEL SIAW Reg No: R24124745

Product area

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

Job description

The Google Cloud Platform team helps customers transform and build what's next for their business — all with technology built in the cloud. Our products are developed for security, reliability and scalability, running the full stack from infrastructure to applications to devices and hardware. Our teams are dedicated to helping our customers — developers, small and large businesses, educational institutions and government agencies — see the benefits of our technology come to life. As part of an entrepreneurial team in this rapidly growing business, you will play a key role in understanding the needs of our customers and help shape the future of businesses of all sizes use technology to connect with customers, employees and partners.

Qualifications

Job responsibilities

• Construct and execute an effective territory development plan for your territory, meeting or exceeding quarterly goals.
• Build and maintain relationships to influence long-term strategic direction, and act as a trusted advisor to both the local Specialist and Google Cloud Platform (GCP) Sales leadership. Host Security product enablement sessions for GCP and Specialist team members through team or quarterly meetings, or large-scale events.
• Partner with Marketing, Customer Success, or Channels teams in your territory to educate clients, manage service providers and local technical communities on SCC Premium and other associated security offerings.
• Represent SCC in regional forecasts and team meetings. Serve as stakeholder to Cloud leads, reporting accurate and timely forecasting and business performance in tools.
• Assist Field Sales teams with complex agreements and help resolve blocked transactions in our sales systems.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 10 years of experience in an enterprise cybersecurity or IT field.

Preferred qualifications

• Experience securing/growing a customer base and carrying/exceeding strategic business goals.
• Knowledge of product and solution market trends in the cybersecurity industry such as ransomware, attack frameworks, zero trust, etc.
• Ability to build strong and continuous relationships, selling to C-level executives across security and IT business units; ensure customer success and adoption, leading to customer expansion.
• Ability to prioritize, plan, organize, and communicate sales activity, complex concepts, technical benefits in business terms at the executive level.
• Strong problem-solving, communication, presentation and active listening skills and a proven ability to create leverage by enabling others.

Security Officer
Monthly Salary: $2,000
Working Location: Tanjong Pagar
Working Days & Hours: 4 Days (7-7 AM & PM Rotating)

Job Responsibilities

• Maintain peace and order within the Hotel premise and to provide safety and security to Hotel guests, patrons, employees and their belongings, and the Hotel's properties.
• Ensure no break-in and intrusion in secured and protected areas.
• Perform patrolling round in all areas of the Hotel’s premise.
• Conduct investigations on incidents involving disturbance, accidents, losses, thefts, etc. occurring in the Hotel.
• Report all matters that are harmful to the Hotel business
• Be familiar with the fire emergency plan.
• Take necessary action whenever the fire alarm is activated.
• Keep proper and updated records/entries in relevant security logs and records.

Job Requirement

• Relevant experience in hospitality industry will be an added advantage
• PLRD licensed
• Willing to work rotating shifts including weekends and public holidays

✅The Supreme HR Advisory Pte Ltd EA No: 14c7279

✅SAMUEL SIAW Reg No: R24124745

Job Description

The successful candidate will join the Information Technology Division, System Technology department and will be responsible for managing Content Delivery Network (CDN) which includes Cyber Security, as well as administering Monitoring and Log Management Tools.

Key Responsibilities include:

• Work closely with CDN providers and application teams to ensure internet websites/mobile apps are healthy in terms of availability, response time and security posture.

• Conduct regular security reviews and finetune WAF and BOT rules to mitigate any cyber threats.

• Administer various monitoring and logging tools, which includes application onboarding and advanced configuration.

• Perform system administration activities such as troubleshooting, root cause analysis and implement corrective/preventive actions during and after an incident.

• Support audit and infrastructure/network security scans, disaster recovery and security related drills and operate within assigned fiscal budget.

• Build automation wherever possible to improve development team’s agility and reduce human errors.

• Explore, learn and deploy new technologies and provide training to the IT community within the company.

• This position requires periodic system administration outside normal business hours.

Requirements:

• Possess a degree in Information Technology or related fields.

• Minimum of 3 years of IT Infrastructure experience with at least 1 year of hands-on experience in managing the infrastructure of an eCommerce website.

• Experience with Akamai or equivalent CDN providers preferred.

• Demonstrate strong knowledge in infrastructure areas such as Content Delivery Network (CDN), Cyber Security (WAF and Bot Mitigation), internet protocols, DNS, virtual server technologies, networking (LAN, WAN, SDN), Integration and Messaging Platform, scripting and monitoring tools.

• Administrator experience with Application Performance Monitoring (APM) tools such as Dynatrace and Log Management System (LMS) such as Splunk.

• Conversant with infrastructure definition tools such as Cloud Formation and Terraform, and with YAML/JSON deployment templates.

• Strong analytical, project management, communications and interpersonal skills.

We thank all candidates for your interest in Singapore Airlines, and regret that only shortlisted candidates will be notified.

Senior Security Engineer

We are looking for an experienced and proactive Senior Security Engineer for one of our clients. Reporting to the Senior Security Manager, the Senior Security Engineer will manage security incidents, conduct threat hunting with SIEM/SOAR tools, and support IT audits. You’ll oversee vulnerability assessments, security training, and IT security for vessels. Additionally, you lead security projects, provide advisory for projects, and engage with external parties on cyber threats.

The ideal candidates would have at least 3-5 years of relevant experience in IT and Cloud Security. He/she will have good communication skills, be resourceful, self-organized and a good team player.

Responsibilities

· Security Incidents

o Perform investigations of Security incidents.

o Perform threat hunting using SIEM and SOAR tools.

o SIEM/SOAR Tools: Hands-on experience with security monitoring tools like Microsoft

Sentinel or other relevant SIEM and SOAR platforms.

· Audit and Governance

o Participate in internal and external IT audits.

o Maintain Incident Response Plans and IT policies.

o Perform Vulnerability Assessment and Penetration Testing.

o Conduct Security awareness training for the organization.

o Conduct phishing campaigns.

o Design and review IT/Cyber security architectures.

o Works with external parties (eg; CSA, MPA) on the latest cyber threats and trends.

o Assist in vessel IT security setup, review, audit and remedial actions.

· Projects

o Manages Security related projects.

o Acts as Security Advisory for all projects.

o Participate in Request for Proposal and Request for Quote process.

Requirements

Education & Knowledge

· Degree in Information Security, Computer Science or related disciplines with at least 3 years of relevant experience.

· Knowledgeable in IT Security, Cloud Security, and security standards such as NIST, ISO 27000 and IMO.

· Azure Cloud Security: Strong expertise in Azure Security Center, Microsoft Defender for Cloud, and Azure Policy for real-time cloud threat management and compliance.

· IT Security Management experience of various aspects, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc will be an advantage.

· Knowledge managing network security devices (NextGen Firewalls, IDS, IPS, UTM, NAC, AV, etc.), Windows, Linux, and networking service will be an advantage.

· Preferred Certifications: CCSP (Certified Cloud Security Professional) and Azure Security Engineer Associate are highly preferred, in addition to other certifications such as CISSP, CISM, or CEH.

· Strong hands-on knowledge and experience with security architecture and implementation of Azure Cloud Computing (IaaS, Containers, AKS, DevOps, CI/CD) is mandatory.

· Proficiency in automating security workflows within CI/CD pipelines, focusing on Azure DevOps integration.

· Ideally completed 2 or more of the following certifications: SC-200, SC-300, AZ-500, MS-500 and SC-100.

· Knowledge of Vessel IT will be an advantage.

· Maritime Cybersecurity: Familiarity with maritime cybersecurity standards such as IMO guidelines and TMSA (Tanker Management and Self-Assessment) is a strong advantage for vessel IT security.

Others

• UK MNC and good corporate culture

• 5-day work week (Centralised location)

To apply, please send your CV to [email protected]

We regret that only shortlisted candidates will be notified.

Role Overview:

The role involves safeguarding systems, applications, and infrastructure through proactive vulnerability management, the application of security controls, secure development practices, incident response, and continuous threat monitoring. You will collaborate with both internal teams and external service providers to enhance the cybersecurity posture and align with best practices and industry standards.

Key Responsibilities:

Vulnerability Management & Assessment:

• Evaluate the cybersecurity aspects of design proposals across various systems, applications, and infrastructure.
• Source, manage, and oversee external vendors conducting annual vulnerability assessments and penetration tests.
• Review assessment reports and recommend remediation actions for identified weaknesses.

Implementation of Security Controls:

• Recommend and implement security controls based on industry best practices, standards, and guidelines (e.g., OWASP Top 10, NIST, CIS).
• Contribute to the development and maintenance of security policies, procedures, configurations, and standards aligned with ISO 27001.
• Participate in internal audits and reviews to ensure the effectiveness of the ISMS and security controls.

Secure Development Practices:

• Integrate secure coding practices and OWASP Top 10 recommendations throughout the software development lifecycle (SDLC).
• Collaborate with developers to identify and address security vulnerabilities during design and coding phases.

Incident Response & Recovery:

• Monitor logs for signs of malicious activity and potential data breaches.
• Coordinate with contractors, security vendors, and internal teams to manage incidents, identify root causes, and implement recovery procedures.

Continuous Learning & Threat Awareness:

• Stay informed on the latest cybersecurity threats, vulnerabilities, mitigation techniques, and emerging technologies.
• Attend training, read industry publications, and participate in conferences as needed to maintain up-to-date knowledge.

Collaboration & Security Awareness:

• Work closely with security professionals and the governance team to educate colleagues on security best practices and raise awareness about potential threats.

Qualifications:

Educational Background:

• Degree in Information Systems/Technology, Computer Engineering, Computer Science, Information and Communications Technology (ICT), or a related field.

Certifications:

• Preferred certifications: CISSP, CISA, CISM, CompTIA Security+, or equivalent.

Experience & Skills:

• Strong understanding of cybersecurity principles and best practices, with at least 5 years of relevant experience managing contractors and designing cybersecurity solutions.
• Experience in drafting tender specifications for vulnerability assessments, penetration testing, and creating SOPs for incident response.
• Proficiency with security tools, log extraction techniques, and related technologies.

Interested candidate who wish to apply for the advertised position, please click on “Apply Now”. We regret that only shortlisted candidates will be notified.

EA License NO.: 01C4394

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its overseas subsidiaries and affiliates collecting, using and disclosing your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services and such other purposes stated in our privacy policy. Our full privacy policy is available at www.persolkelly.com.sg. If you wish to withdraw your consent, please drop us an email to let us know

• Develop/Implement security strategies in accordance with HQ policies to protect against security risks
• Oversee daily security operations, ensuring compliance with local regulations and coordinating with security personnel/vendors.
• Conduct regular audits and risk assessments; recommend security improvements, corrective and preventive measures
• Manage security systems, including surveillance, access control, visitor management and coordinate safety protocols across departments.
• Deliver security awareness training to employees and contractors
• Support audits, prepare security related documentation, respond to security incidents/breaches and assist with emergency response plans or additional projects
• Liaise with local authorities and stay updated on regulations and industry trends

Job Requirements:

• Bachelor’s degree in Security Management or equivalent
• 4-6 years of experience in security management
• Experience in managing physical security measures, including access control systems, surveillance equipment, and alarm systems will have added advantageous
• Strong knowledge of security regulations, Workplace Safety and Health guidelines, related compliance standards

Interested candidates who wish to apply for the advertised position, please click on “Apply Now”. We regret that only shortlisted candidates will be notified.

EA License No: 01C4394 (PERSOLKELLY SINGAPORE Pte Ltd)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

As an Information Security Engineer, you will play a crucial role in our Security Operations Center. Your responsibilities will include monitoring, detecting, investigating, analyzing, and responding to security events within our IT infrastructure, including Operational Technology (OT) systems. Your expertise in cybersecurity frameworks, risk management, and incident response protocols will help fortify our defenses. A thorough understanding of Operational Technology security principles is essential, as you will oversee the integration of security practices in both IT and OT environments to protect our critical infrastructure. You will also apply Scaled Agile Scrum methodologies to coordinate technical meetings and manage security projects efficiently.

Roles and Responsibilities

• Design and implement advanced security architectures for IT and OT environments to ensure robust protection against emerging threats.
• Lead the development and integration of custom security solutions tailored to the specific needs of our digital and physical infrastructures.
• Conduct high-level vulnerability assessments and penetration testing to evaluate the security of IT and OT systems.
• Develop and refine incident response strategies to enhance our ability to respond to and recover from security breaches swiftly and effectively.
• Collaborate with IT and OT teams to ensure seamless integration of security technologies across all platforms.
• Serve as the technical lead on projects involving cybersecurity technologies, ensuring compliance with industry standards and regulatory requirements.
• Mentor junior engineers and analysts, providing guidance on complex technical issues and fostering a culture of technical excellence and innovation.
• Stay current with the latest cybersecurity technologies and trends, applying this knowledge to continuously improve our security posture.
• Prepare and present detailed technical reports and security briefings to senior management, offering strategic recommendations based on your assessments and findings.

Requirements

• A master’s degree in Cybersecurity, Computer Science, Engineering, or a related field, along with significant professional experience in cybersecurity.
• Expertise in designing and managing security solutions for both IT and Operational Technology systems.
• Advanced certifications in cybersecurity such as CISSP, CISM, or GIAC, with specific training in areas like SCADA or ICS security.
• Strong leadership skills with experience in managing complex security projects and leading cross-functional teams.
• Deep understanding of regulatory compliance and security frameworks such as ISO 27001, NIST, SOC 2, and others relevant to IT and OT cybersecurity.

Interested candidates, who wish to apply for the advertised position, please email us an updated copy of your resume.

We regret that only shortlisted candidates will be notified.

EA License No.: 01C4394

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s degree in computer science, information technology, or equivalent experience.
• 5+ Years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:CompTIA Security+
  Certified Information Systems Security Professional (CISSP)
  Certified Information Systems Auditor (CISA)
  Certified Information Security Manager (CISM)
  

Interested candidates who wish to apply for the advertised position, please clock on “Apply”. We regret that only shortlisted candidates will be notified.

EA License No.: 01C4394 (PERSOLKELLY Singapore PTE LTD)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Job Description:
We are seeking a highly skilled and experienced Cybersecurity Manager to lead and strengthen our Clients' organization’s security posture. The successful candidate will be responsible for analyzing vulnerabilities, developing security strategies, leading incident response efforts, and managing security technologies across the enterprise. This role involves close collaboration with cross-functional teams to ensure the security of systems, networks, and data, while keeping abreast of the latest cybersecurity threats and best practices. If you have a passion for cybersecurity and a proven track record in security management, we’d love to hear from you!

Key Responsibilities:

1. Vulnerability Analysis & Mitigation

• Analyze and prioritize vulnerabilities based on severity, potential impact, and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and recommend appropriate improvements.

2. Incident Response & Management

• Lead and participate in the development, implementation, and continuous improvement of incident response procedures and processes.
• Collaborate with geographically diverse teams to investigate and document security incidents, perform root cause analysis, and recommend remediation actions.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.

3. Security Systems & Network Management

• Manage and configure security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitor systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Plan and appraise ongoing assessments of antivirus, application control, firewall, SIEM, VPN, SSL, and other network component policies.

4. Security Policy & Compliance

• Develop and implement security policies and procedures to ensure the organization’s data and systems are protected against cyber threats.
• Stay up to date with the latest cybersecurity threats, attack techniques, and incident response strategies.
• Contribute to security awareness training programs for employees to enhance security awareness and best practices.

5. Strategic Guidance & Collaboration

• Provide strategic guidance and direction on technological, cybersecurity, and policy-related topics.
• Collaborate across teams to drive the implementation of security solutions and initiatives that align with business objectives.
• Communicate technical security concepts to non-technical stakeholders effectively, ensuring clarity and alignment on security measures.

Education & Certifications:

• Bachelor’s degree in Computer Science, Information Technology, or a related field.

Requirements:

Experience & Knowledge

• 5+ Years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, and modern cybersecurity concepts and technologies, including but not limited to:Zero Trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, and Azure Well Architected Framework.
  
• Experience in domains such as Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management is preferred.
• Proficiency in using industry-standard tools for vulnerability scanning, assessment, and penetration testing.

Skills & Abilities

• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments, and respond to security incidents.
• Strong analytical and problem-solving skills, with the ability to think critically under pressure.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• 
  
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.

Interested candidates who wish to apply for the advertised position, please click on “Apply”. We regret that only shortlisted candidates will be notified.

EA License No.: 01C4394 (PERSOLKELLY Singapore PTE LTD)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

The successful candidate will support the development and implementation of a comprehensive compliance and governance framework to ensure ongoing adherence to relevant IT legislative and regulatory requirements (e.g., PDPA, MAS TRM, PCI). They will report regularly to IT Management on compliance status and engage with various teams to promote a strong organizational security posture.

Key Responsibilities:

• Compliance & Governance Framework Development: Assist in the creation and implementation of a compliance framework to maintain ongoing adherence to relevant IT legislative and regulatory requirements. Prepare and submit reports to IT Management on the framework’s effectiveness and any compliance gaps.
• Policy Compliance Monitoring: Support the development of a governing framework to uphold organizational information security policies, standards, and procedures, and report compliance status to IT Management.
• Risk Management for Emerging Technologies: Contribute to the evaluation and formulation of a risk management framework that addresses new technologies, such as the Internet of Things (IoT).
• Policy Review & Recommendations: Review and recommend updates to information security policies, standards, and procedures, accounting for deviation requests and audit findings.
• Information Security Scorecard Development: Develop and maintain an Information Security scorecard framework that assesses and reflects the organization’s compliance level against established policies, standards, and procedures.
• IT Risk Management & Assessment: Assist in developing the organizational IT risk management framework, performing periodic risk assessments.
• Awareness & Phishing Programs: Support the design and execution of information security awareness and phishing simulations to strengthen organizational security culture.
• IT Security Project Support: Collaborate on the evaluation, planning, and implementation of IT Security projects, ensuring alignment with compliance requirements.

Requirements:

• Experience: Minimum of 2 years in Information Security, with a focus on consultancy and IT risk management.
• Certifications: Security certifications such as CISSP, CISM, or CISA are preferred, with solid knowledge of IT legislation (e.g., PDPA, MAS TRM, PCI) and industry best practices.

Interested candidate who wish to apply for the advertised position, please click on “Apply Now”. We regret that only shortlisted candidates will be notified.

EA License NO.: 01C4394

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its overseas subsidiaries and affiliates collecting, using and disclosing your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services and such other purposes stated in our privacy policy. Our full privacy policy is available at www.persolkelly.com.sg. If you wish to withdraw your consent, please drop us an email to let us know.