As a Cloud Security and Endpoint Management Specialist, you will be at the forefront of safeguarding our organization's cloud infrastructure and endpoint devices. This role encompasses managing security protocols for Office 365, AWS, and Azure, as well as overseeing Intune Mobile Device Management (MDM) solutions, and incorporating endpoint protection with tools like CrowdStrike.

Key Responsibilities:

1. Cloud Security Management:

• Implement and maintain security measures for Office 365, AWS, and Azure environments.
• Collaborate with cloud service providers to ensure adherence to security best practices.
• Conduct regular security assessments and audits, integrating threat intelligence for proactive defense.

2. Endpoint Security and Management:

• Administer and configure CrowdStrike and other endpoint protection tools to fortify defenses.
• Oversee and manage endpoint security solutions for a diverse range of devices.
• Implement and enforce security policies, ensuring compliance with industry standards and regulations.

3. Conditional Access in Azure:

• Design and implement conditional access policies in Azure, considering endpoint security parameters.
• Monitor and analyze access logs to identify and respond to potential security threats.

4. Intune Mobile Device Management (MDM):

• Administer and configure Intune MDM policies to ensure secure mobile device management.
• Collaborate with endpoint protection tools to enhance device-level security and threat detection.
• Implement and manage device compliance and conditional access policies for mobile devices.

5. Collaboration and Communication:

• Work closely with cross-functional teams, including IT, security, and compliance, to align cloud and endpoint security measures with organizational goals.
• Provide regular updates and reports on the status of cloud and endpoint security, emphasizing the integration of CrowdStrike for endpoint protection.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Proven experience in cloud security management, with a focus on Office 365, AWS, and Azure.
• Expertise in implementing and managing security measures for endpoint devices, including experience with CrowdStrike.
• Hands-on experience with Intune Mobile Device Management.
• Familiarity with conditional access policies in Azure.
• Strong analytical and problem-solving skills.
• Excellent communication and collaboration abilities.

Certifications (Preferred but not necessary):

• Microsoft Certified: Security, Compliance, and Identity Fundamentals
• AWS Certified Security - Specialty
• Certified Information Systems Security Professional (CISSP)
• CrowdStrike Falcon Certified Administrator

The main responsibilities and tasks of this position are listed as, but not limited to the following:

• To ensure compliance of Hotel Security Policies and Procedures
• To assume responsibilities during shifts.
• To keep abreast of developments within the hotel and community as they relate to security.
• To have a clear understanding of current and amended laws, employee’s handbook and all new policies and procedures which may be issued from time to time by the management.
• To take an active role in the implementation of the hotel’s fire plan including use of fire extinguishers and firefighting peripherals, rendering first aid and duties as member of CERT
• To conduct briefings for each shift, covering security information, important events or any other matter arising.
• To document all incidents occurring in the hotel in connection with crime, subversions, potential liabilities, and insurance requirements.
• To control the keys, lock system, alarm system and fire protection system.
• To make recommendations to the superiors on security related matters.
• To respond properly in any hotel emergency or safety situation.
• To observe the grooming policy as laid out in the employee’s handbook, as well as those set out by the department.
• To cooperate efficiently with all departments within the hotel directly or indirectly involved with the Security Department.
• Ensure all matter are reported to Security Supervisor /Assistant Security Manager /Security Manager.
• To perform any other duties that may be assigned by the Management.

Job Responsibilities:

1. Support sales efforts by attending security sales meetings when necessary, providing effort estimations, and outlining project timelines for security testing.
2. Develop security acceptance test plans.
3. Offer expert technical support during security testing activities.
4. Prepare for security tests by setting up testing environments, configuring, and installing security testing tools.
5. Conduct manual or automated security testing using commercial security testing tools.
6. Perform Greybox Testing (Authenticated) and/or Blackbox Testing (Unauthenticated) Penetration Tests.
7. Conduct Whitebox Testing and Secure Code Review.
8. Perform Network and Infrastructure Vulnerability Assessment and Penetration Testing.
9. Perform Web, Mobile, and Desktop Application Vulnerability Assessment and Penetration Testing.
10. Identify and pinpoint vulnerabilities in the assessed target systems/applications.
11. Document and report identified vulnerabilities in the system.
12. Provide professional recommendations and advice to mitigate and resolve vulnerabilities.
13. Present security testing results to relevant stakeholders.
14. Provide weekly status reports on the progress of security testing activities.

Key Requirements:

1. Possession of one of the following certifications:CREST Registered Penetration Tester (CREST CRT)
   Offensive Security Certified Professional (OSCP)
   
2. Knowledge of conducting security testing adhering to guidelines and standards such as:Open Web Application Security Project (OWASP Top 10 Frameworks)
   Common Vulnerability Scoring System (CVSS)
   Common Vulnerabilities and Exposures (CVE)
   Common Weakness Enumeration (CWE) / SANS Top 25 Software Errors
   
3. High proficiency in manual and automated techniques for penetration testing across various systems and applications, including but not limited to network equipment, servers, web applications, APIs, wireless systems, mobile applications, and databases. Techniques include vulnerability assessments for injection, privilege escalation, fuzzing, buffer overflows, etc.
4. Familiarity with tools such as Proxies, Port Scanners, Vulnerability Scanners, and Exploit Frameworks (e.g., Burp, Nessus, Nmap, Metasploit).

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected].

We regret to inform that only shortlisted candidates will be contacted.

PERSOLKELLY Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1875348 (Tewari Priyanka)

**********************************

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available

Our client, a leading financial institution within the region, is looking for a Senior Cyber Security Lead, with a strong understanding of the threat landscape to join their team here in Singapore. As the Senior Cyber Security Lead, you will play a critical role in ensuring the security and integrity of the organization’s external attack surface. You will be responsible for developing and implementing strategies to identify, monitor, and mitigate potential threats and vulnerabilities across the firm’s digital footprint.

Responsibilities

• Lead the development and implementation of the External Attack Surface Management Solution, including tools, processes, and procedures.
• Conduct regular assessments and audits of our external attack surface to identify vulnerabilities, weaknesses, and potential threats.
• Collaborate with cross-functional teams to prioritize and address security issues identified through external attack surface monitoring.
• Stay up-to-date on emerging cyber security threats, trends, and best practices to continuously enhance our security posture.
• Provide guidance and support to internal teams on security best practices related to external attack surface management.
• Develop and deliver training programs to raise awareness and promote a culture of security within the organization.
• Act as a subject matter expert on external attack surface management and provide strategic recommendations to senior leadership.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or related field.
• 8+ years of experience in cyber security, with a focus on external attack surface management.
• Strong understanding of cyber security principles, methodologies, and technologies.
• Hands-on experience with external attack surface management tools and platforms.
• Proficiency in conducting vulnerability assessments, penetration testing, and threat intelligence analysis.
• Excellent analytical and problem-solving skills, with the ability to think critically and strategically.
• Effective communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams.
• Relevant certifications such as CISSP, CEH, or CISM are highly desirable.

If you are passionate about security and possess the skills and expertise to make a difference, we want to hear from you.

We are looking for a security executive to join us as part of the Security team, assisting in the management of the overall security of properties and events managed by The Esplanade Co Ltd, as well as to ensure the safety of the properties and event area, installations within, visitors and staff.

KEY RESPONSIBILITIES

• Security planning and operating procedures including:
• Plans security rosters and daily operations schedule for security control
• Ensures that all policies and procedures regarding security measures, crowd management controls and emergency evacuation procedures are properly implemented and adhered to.
• Liaises with relevant parties like the Police and other government agencies regarding coordination for security measures or events with VIPs.
• Security operations including:
• Assist the Head, Security in the day-to-day operations of all properties’ command centres and to ensure that they are always manned.
• Performs daily checks, inspections, and monitoring of the properties.
• Report all unusual incidents, take quick and appropriate actions to ensure the security and safety of the properties and their visitors and staff.
• Assist Head, Security to manage access control for staff, venue hirers, contractors, etc.
• Check and ensure that no illegal foreign workers are engaged within the properties.
• Conduct investigation on security matters and submit report and recommendations to Head, Security. Outsourced security personnel and security equipment and systems
• Directly supervise outsourced security personnel in the overall security coverage of the properties.
• Explain and communicate security requirements and measures to all outsourced security personnel for performance venues during and after performances and for all other spaces within the properties. Ensure adherence to all security measures and controls.
• Monitor and ensure proper conduct of outsources security personnel.
• Make regular check on the security personnel and the security of the properties.
• Assist Head, Security to organize outsourced security personnel for crowd control, traffic control and safety management within the properties.
• Au fait with the security equipment and systems of the properties.
• Department capabilities and functions
• Assumes roles and responsibilities as per assigned by Head, Security and Security Manger with regards to the maintenance, execution and improvement of the department capabilities and functions in manpower planning, logistics and administration, key management, system and equipment doctrine and audit, intelligence, etc.
• Provides regular reports and updates on the assigned responsibilities within time frames set by Head, Security and Security Manager.
• Maintain traceable and auditable records actions involving the assigned responsibilities.
• Fire safety
• Assist the Head, Security and Fire Safety Managers in reviewing and improving the overall fire safety of the properties.
• Monitor any fire alarm tests and assist in any emergency evacuation exercises.
• Assist the Head, Security and Fire Safety Managers of all properties during fire emergencies and to liaise directly with the SCDF during after-office hours whenever necessary.
• Escalate any fire safety breaches promptly to the Fire Safety Managers of respective properties whenever discovered.
• Ensure all outsourced security personnel of respective properties are au fait with the fire safety procedures and evacuation routes.
• Crisis Management
• Implement appropriate crisis management plans whenever necessary
• Assist Head, Security and Security Manager during crisis and to liaise directly with SPF during after-office hours whenever necessary.
• Ensure all outsourced security personnel of respective properties are au fait with crisis management plans

JOB REQUIREMENTS

• Minimum full GCE ‘O’ level education.
• WSQ Diploma in Security Management will have an added advantage.
• More than 3 years’ experience in supervisory positions as Police/Auxiliary Police Sergeant or SAF Specialist.
• More than 2 years security experience in management positions at corporate organizations.
• Good leadership, interpersonal, communication and analytical skills.
• Required to perform shift duties (2 shifts)
• Perform emergency call back duty

We invite you to email us at [email protected] with your resume and an indication of your current and expected salary if you are keen to join us as Security Executive. We will only notify shortlisted candidates for interview.  We thank you for your interest in the position and in the Esplanade.

Responsibilities:

• Security products implementation for Public Key Infrastructure (PKI), Hardware Security Modules (HSM) and Privileged Access Management (PAM).

• Documentation for project requirements.

• Follow project implementation lifecycle.

• After sales support such as product incident escalation and technical support (24x7 SLA).

• Conduct user training and knowledge transfer session.

• Integration of security products.

Candidate requirements:

• Bachelor’s Degree in Computer Science/Computer Engineering/Information Engineering or equivalent.

• 1-5 years’ experience in security system integrator environment.

• Basic knowledge on networking such as TCP/IP, firewall, switching and routing.

• Working knowledge on setting up Windows/Linux servers and VM.

• Coding/scripting knowledge (Good to have).

• Knowledge in products such as Cyberark, Entrust a plus.

• May need to support after office hour and during weekend/public holiday.

• Strong analytical, problem solving and interpersonal skills.

• Keen in cyber security domain.

• Working experience and knowledge on system infrastructure with interest of exploring security product welcome to apply.

Company Introduction:

ITSEC Asia is an international information security firm offering a wide range of high-quality cyber security services and solutions in Singapore.

https://itsec.group/

Responsibilities:

Validate and provide feedback on scope of project to the sales team.

Oversee the delivery of project assigned for it's milestones, budget, quality and time of completion.

Review the completeness and accuracy of end of product.

Perform timely reporting to stakeholders regarding the status of the project.

Handle stakeholders feedback and assist with any project escalation.

Manage suppliers (in accordance to contractual obligations) to meet stipulated service levels within scope and schedule, and perform variation and technology refresh (when necessary).

Ensure cyber security projects’ comply to information control, Quality Management System (QMS) and contractual requirements.

Serve as the primary point of contact for stakeholder, communicating with stake holders is a day to day routine.

Assist with internal and external auditors on customers’ consumption of pattern.

The Successful Candidate:

Degree or Diploma in any of the following fields: IT or Computer Science, Business Administration.

Minimum 3 years of Project Management experience.

Excellent communication skills, both oral and written, with the ability to pitch ideas and manage stakeholders.

Good analytical, organization and planning skills.

A team player who can work independently.

Advantageous to have:

Experience in ICT Industry and/or Government.

Experience in leading cyber security audit, penetration testing, control reviews and others.

Knowledge in standard IT/Cyber Security policies.

Knowledge in Information systems, infrastructure topology, virtual machine technology, networking and IT security, with professional certifications are preferred.

Project Management related certification such as CITPM, PRINCE2 or PMI.

and/or to have CISA/ISO27K Audit certification

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will assist in the end to end implementation of security solutions for our clients and support our clients in their desire to protect the business.

The Opportunity

This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, advising stakeholders, providing workshops and supporting business development. If you’re flexible and ready to adapt to a constantly changing environment, there’s no better place to develop your skills. Since you’ll be working directly with clients, some travel will be required.

Your Key Responsibilities

As a Cyber Security Manager, you will be part of the team to assess, design, build, implement and manage security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience.

Skills and Attributes for Success

• Experience in delivering multiple security projects and solutions across one or more of the following domains: (Information Security domains: Cyber Program Management, Cyber Threat Management, Identity & Access Management, Data Protection, Privacy, Security Operations and Cyber Analytics.) This experience should include both advisory, implementation and operation experience
• Understand security concepts and how they apply to business and technology solutions
• Be able to articulate threats and risk to business and technology leaders
• Understand project management concepts and how they can be applied to security related projects
• Strong technical security skills in assessment, design, implementation, architecture, and program / project delivery and work across various delivery models, (Waterfall, Agile, DevOps)

To Qualify for the role, you must have

• A recognized university degree in Computer Science, Computer/Electrical Engineering, Information Technology or equivalent
• At least 6 years of relevant experience. Preferably with 2 years of experience in business consulting role in a leading consultancy firm
• Possess a CISSP certification
• Mandatory skills: Threat Modelling and Cloud Technical Risk Assessment knowledge
• Strong interest in the field of information security
• Creative, independent with good problem-solving skills
• Excellent communicator with strong analytical, interpersonal and writing skills

Ideally, you’ll also have

• Industry related certification preferred (e.g. CISA, CISM, SABSA, PRINCE2, TOGAF, ITIL).
• Solution Level Certifications, OSCP, CREST, GIAC would be advantageous, as well as penetration testing experience.
• Solution design of Threat & Vulnerability Management solutions such as implementation of SIEM (e.g. ArcSight), Incident Response (e.g. Resilient) & Security Analytics (e.g. RSA Security Analytics) within the context of a Security Operating Centre framework
• Familiar with at least one of the following IAM technologies such as SailPoint, RSA Aveksa / VIA & Oracle (OIM, OIA)

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.

What we offer

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

Apply now.

Credit Bureau (S) Pte Ltd is looking for an IT Security Officer to support the IT Security Consultant with its company’s Information Security Program.

Responsibilities:

• Manage and monitoring of next generation firewalls, IPS, SIEM, WAF, EDR, 2FA.
• Evaluate security incidents and determines what response, if any, is needed
• Develop and provide security awareness training to end users.
• Conduct vulnerability assessment.
• Follow up on findings from vulnerability assessment and penetration test. Work with different stakeholders to address the findings.
• Manage vendors of IT security services and products.
• Assist in audit and compliance requirement.
• Work on new initiatives to enhance security.

To succeed in this role, you are likely to have the following eexperience/knowledge & skills:

• Minimum 2 years’ direct experience in information security related duties. Candidate with strong information security knowledge may be considered.
• Experience in SIEM would be advantageous.
• Candidate with relevant information security certification is preferred
• Candidate must be highly analytical and effectively able to troubleshoot and prioritize needs, requirements and other issues

Technical skills

• Architecture and Deployment
• Cisco/Aruba Switching /Routing & WLAN
• DDI, AAA/Cisco ISE
• Network Automation: Python & Ansible
• As Built, LLD, Testing & Acceptance Testing Documentation Skills
• ZScaler & Network Security
• Certification: CCNP/CCDA equivalent
• Meraki, Palo alto, f5 loadbalancer, UTP
• Experience in network operations/maintenance and passionate about providing troubleshooting support
• Knowledge on Internet Technologies (i.e. routing, switching and general network infrastructure), and technologies associated with the ISP market
• Strong analytical and problem-solving skills, and has a flair for dealing with technical and operational problems
• Experience in IT audit or CISA/CISM certified preferred or operational risk management and control self-assessment or prior experience in implementing security solution and information security governance
• Demonstrated knowledge of global cyber threats, threat actors and the tactics, techniques and procedures (TTPs) used by cyber adversaries, particularly as they relate to the financial sector.
• Experience with models for threat analysis, such as the Diamond Model, Cyber Kill Chain and MITRE ATT&CK framework.
• Enterprise Data Network (administration, patching, upgrade and migration activities), Design, Preparing of HLD/LLD, Implementation Team leading, Service Level management, demand, incident, change management.
• Provide network WAN/LAN design, implementation, consulting, Cisco, Aruba, Juniper
• Network audit Identify the gaps and suggest the remedial solution supporting in RFP/RFI response
• Experience in running operations with ITIL processes / Project Management - PMP

RESPONSIBILITIES

• Work closely with SOC, CERT and other security teams and Infrastructure skill teams in daily operation and review security requirements
• Exception management: Evaluate and manage infrastructure security exceptions
• Vulnerability management: Conduct scan, assessment and remediation follow-up
• Incident management: Report and follow security incidents and their remedial actions
• Request / Change management: Conduct security assessment for infrastructure request & changes
• Review security architecture proposed by other infrastructure teams
• Deliver innovation initiative to improve overall infrastructure security and efficiency
• Manage and execute the Infrastructure related security projects
• Be the security Interface with stakeholders at all levels, from technical engineers to senior management locally, regionally and globally
• Work closely with other risk and security departments, including all 3 lines of defence
• Cyber reporting: Production of various cyber security reporting (KPIs; KRIs). Coordinate among
• Infrastructure teams to contribute to external stakeholders reporting and requests
• Conduct security & risk awareness training to the Infrastructure teams
  

PROFILE REQUIRED

• Knowledge and hands-on experiences in IT, Infrastructure and information security
• Knowledge and experience in IT infrastructure (speak the language, expertise not required)
• Knowledge in technology regulatory requirement like HKMA, SFC, MAS, GDPR, CBIRC, etc. is required
• Project management experience is desired
• Knowledge and experience in a banking environment will be beneficial but not essential
• Knowledge in the MITRE ATT&CK framework and hands-on experience on security incident investigation processes & techniques
• Security knowledge in the Public Cloud, development and specific Infrastructure domains are a plus
• Professional certification recognized by Regulatory bodies like HKMA, e.g. CISM, CISA or CISSP, is mandatory

Behavioral Skills

• Client - Understanding and Respect: I listen to clients and colleagues in order to understand and anticipate their needs
• Client - Risk: I strive to satisfy clients while taking into account risks for the company
• Team Spirit - Synergies: I make cooperation with colleagues in and outside my team a priority
• Team Spirit - Collective mindset: I Favour the team’s interest over my own results
• Responsibility - Courage: I express my convictions and make decisions with courage and respect
• Responsibility - Accountability: I make decisions in my scope of responsibilities

Company Description

Societe Generale is one of the leading European financial services groups. Based on a diversified and integrated banking model, the Group combines financial strength and proven expertise in innovation with a strategy of sustainable growth. Committed to the positive transformations of the world’s societies and economies, Societe Generale seeks to build together with its clients, a better and sustainable future through responsible and innovative financial solutions. Active in the real economy for over 150 years, with a solid position in Europe and connected to the rest of the world, Societe Generale has over 117,000 employees and supports 25 million individual clients, businesses and institutional investors worldwide (figures as of August 2023). We have a presence in 11 locations across Asia Pacific. With our regional headquarters in Hong Kong – a core hub of the worldwide Societe Generale Group – we employ around 2,300 employees in the region. In addition, Societe Generale's Global Solution Centre (SGGSC) in Bangalore and Chennai supports the Group in Asia Pacific and globally with customized business solutions.

Department Description

The IT Infrastructure department, Global Technical Services (GTS), is one of the major stakes for the bank and is at the heart of Societe Generale group's strategy.Today, the Digital Transformation raises important challenges around IT Architecture, Infrastructure and Security. Many of these challenges are opportunities to imagine new experiences for our clients and new way to deliver IT services.Within the Resources and Innovation division, GTS department plays a key role in the Digital Transformation. With more than 3500 GTS staff located across the world, GTS develops innovative projects while delivering operational excellence for infrastructure services to 117,000 employees and 32 million external clients.GTS staff motivation comes from the new technologies they deliver to enhance agility of the various business lines (Cloud, Big Data, Continuous Delivery).GTS/SEC is the operational risks and security management function of GTS. Being the first line of defence for Societe Generale, its main objectives includes:

• Protecting the GTS infrastructures, the associated IT services and manages the operational risks
• Secure Infrastructure of the bank via detect and respond security incidents
• Improve the level of operational risk and security management for GTS
• Provide seamless security by design, focusing on critical assets and data protection
• Raise Security Awareness for SG staffs
• Be the Governance, Risk & Compliance Expert Center for GTS
  

At Toku, we create bespoke cloud communications and customer engagement solutions to reimagine customer experiences for enterprises. We provide an end-to-end approach to help businesses overcome the complexity of digital transformation in APAC markets and enhance their CX with mission-critical cloud communication solutions. Toku combines local strategic consulting expertise, bespoke technology, regional in-country infrastructure, connectivity and global reach to serve the diverse needs of enterprises operating regionally.

As we continue creating momentum for our products in the APAC region and helping customers with their communications needs, we are seeking a Security Analyst to be a trusted consultant and advisor on all matters relating to threat detection, alerts monitoring, and incident response. Reporting to our Information Security Manager, you will be a key point of contact both on in-house initiatives at Toku and consultatively for specific client projects. You will have ownership on identifying, diagnosing, solutioning, escalating, documenting and reporting incidents and threats, performing risk assessments and working towards improving and optimising systems and procedures.

This role offers broad exposure over a number of information security aspects, with potential growth paths towards GRC, InfoSec, Cybersecurity and more. In addition, you be part of a new and growing security function at Toku, and will be highly visible across stakeholders and teams, liaising regularly with senior architecture, development, cybersecurity and network stakeholders both in-house and externally. Join us as we strengthen our security posture, inspire a culture of compliance, and drive our organization towards a secure and resilient future.

Want to be part of our journey?

What would you be doing?

• Identify and evaluate existing security risks, both in-house and on client projects, and implement enhancements.
• Review and respond to alarms/tickets, taking action to prioritise, resolve / escalate, log and report to internal and external stakeholders according to best practices. From here, perform and document risk assessment reports.
• Attend client site meeting periodically, answering clients’ risk management and security questions and addressing / reporting security concerns.
• Review security incident and event logs, and monitor threat intelligence feeds, optimising and contributing to ongoing threat intelligence.
• Collaboratively work with security vendors for incident response and alerts monitoring.
• Analyse, and report compliance against security controls, identifying areas for improvement in data collection, assurance processes, and security procedures.
• Identify acceptable levels of residual risk and assist with action plans, policy, and procedural changes for risk mitigation.
• In addition to monitoring and threat detection, proactively assist / manage various in-house security projects and initiatives and provide guidance on security matters for other projects.
• Ensuring audit trails, system logs and other monitoring data sources are reviewed periodically and follow and adhere to regulatory policies.
• Coordinate and oversee security testing procedures (vulnerability assessment, code scanning) to verify the security of systems, networks, and applications, and assist in the remediation of identified risks.
• Stay up to date on latest security trends and standards, conduct research on security improvements and provide recommendations to clients and stakeholders.

We would love to hear from you if you have:

• A degree in a reputable university.
• At least 3-5 years of relevant work experience in IT information security analysis, governance, risk, and compliance.
• Working knowledge of Security Information & Event Management (SIEM) systems, Vulnerability Management, and Patch Management
• Experience in monitoring, tracking, and troubleshooting user activity logs using AWS CloudWatch and CloudTrail.
• Experience in scripting languages like Python, Powershell, Bash and SQLs.
• Knowledge of networks, firewalls, proxies, intrusion detection/prevention systems, concepts, and technologies, ideally with knowledge of EC2 incidences, GuardDuty or similar, and actions using AWS Lambda
• 3+ years of endpoint administration or support experience with Linux and Windows devices
• Experience with intrusion/manipulation techniques, and standard methodologies for Linux system hardening and process isolation.
• Prior experience in incident response and threat hunting
• Knowledge of DevSecOps principles and practices
• Professional information security certifications such as CISSP, CompTIA Security+, AWS Security Certifications, or equivalent are a bonus for this role.
• Confidence in presenting, with strong verbal and written business communication skills, and the ability to educate a non-technical audience about various security measures.
• Excellent analytical skills and attention to detail.

What would you get?

Flexible working locations

Training and Development

Discretionary Yearly Bonus & Salary Review

Healthcare Coverage based on location.

20 days Paid Annual Leave (excluding Bank holidays)

If you would love to experience working in a start-up growing at an accelerated speed, and you think you tick most of the requirements, join us!

• Conducting maintenance service, commissioning of alarm systems
• Address to customer request on alarm and card access systems

Requirements:

• Basic Security certified
• At least 2 years of working experience
• Possess valid class 3 driving license

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

Job Summary

Thales is seeking suitable candidate for the position of Engineer (System Security).

You will be looking after the governance of the infrastructure and systems for mission-critical Command and Control (C2) system that Thales Solutions Asia (TSA) have developed for government agency. You will be part of a team to manage the security of system, to ensure the system adhere to the security policies, and is well protected from any threats, risks or exploits.

Job Duties

Provide security expertise and management services to support Authority in activities such as:

• Internal / external audits (IM8, Cybersecurity, etc)
• Policies compliance (IM8, Cybersecurity, etc), work with vendor on:
• Disaster Recovery (DR) and Business Continuity Planning (BCP):
• ICT/Threat Risk Assessments (TRA)
• Monthly reviews of privileged accounts and non-privileged account, disable inactive accounts
• Seek security waivers (IM8, Cybersecurity Act, Circulars etc)
• Circulate security notifications/alerts to vendors and ensure status updates too all stakeholders including cybersecurity centre
• Security monitoring/tracking:

-     Monitor alerts from SOC

-     Update stakeholders regarding SOC alerts

-     Review compliance reports with vendors to ensure that system is compliant

-     Manage, track and update any security incidents/ issues to all stakeholders

-     Review Incident Report (if any)

• Patching:

-     Ensure patches are tested and verified before seeking approval for patching downtime

-     Communicate system downtime to all stakeholders

-     Ensure system availability after patching is completed

• Obsolescence management for software licenses, hardware, operating systems and certificates
• Security enhancement/ integration
• Support the submission of security clearance for related vendors
• Perform other related duties as assigned or requested

Job Requirements

• Working hours will be 0830 hrs to 1800 hrs (for Monday to Thursday) and 0830 hrs to 1730hrs (for Friday), excluding weekends and Public Holidays
• Outside of working hours, to provide online support via emails and group chats when required based on the priority and severity of issues related to the system
• Able to cope in a highly pressured fast-paced environment
• Prior working experience in cyber security and vulnerability management is preferred
• Strong knowledge of security principles, best practices, and industry standards, such as NIST, ISO 27001, and CIS Critical Security Controls
• Able to understand security posture of systems
• Prior working experience in Project Management is a plus point
• Able to understand the system and software architecture, and user operations environment
• Willingness to pick up any new technologies

Education

Diploma or Bachelor’s Degree in Cybersecurity/ InfoSec/ Information Technology / Information Systems / Business IT or its equivalent

Relevant professional certifications, such as CISSP, CISM, CEH, or other security certifications

Experience

Minimally 3-5 years of experience in cybersecurity and supporting mission critical systems with very stringent SLA e.g. 99.9%

Well-versed in cybersecurity best practices and establishing of its policies

Well-versed in IT Service Management (ITSM) standards, processes, guidelines and best practices

Job Summary

• This role is responsible for maintaining and improving the organizations cybersecurity posture on an ongoing basis. S/he will work with external experts to implement security solutions, and work with vendors to monitor, detect and contain cybersecurity incidents to minimize impact to the organization.

Responsibilities

• Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis
• Work with vendor to conduct security assessments and penetration tests.
• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.
• Standardize and refine security incident response and escalation processes.
• Mitigate and contain threats when detected.
• Escalate security incidents and non-compliances on a timely basis.
• Work with IT infrastructure team to evaluate, implement and enhance the network perimeter security, endpoint security, SIEM, secured remote access, MFA, Identity Access Management and Privileged Access Management.
• Monitor information security alerts triage, mitigate, and escalate issues as needed.
• Provide security advisory to end users on regular basis.
• IT Security Management of various aspect, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.
• Keep abreast of industrial IT security advancements and introduce appropriate security enhancements to IT infrastructure and systems.
• Attend to any other reasonable duties as assigned by the Senior Cyber Security & IT Governance Manager and IT Director.

Requirements

• Degree in engineering, science or information technology, or equivalent education with 3-5 years of related work experience in cybersecurity management and security governance.
• Candidates with additional experience will be considered for the Senior Cyber Security Analyst position
• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.
• Strong understanding of ISO27001 standard.
• Hands-on experience at least 4 of the following IT Security Tools:Next Generation Firewall (e.g., FortiGate, Palo Alto, Cisco FirePower)
  SASE (Zscaler, Netskope, Skyhigh)
  Tenable Security Center Continuous View
  Endpoint Protection (e.g., Symantec, Trend Micro, Sophos Endpoint)
  Email Security (e.g., Mimecast, ProofPoint, Cisco Email Security)
  Data Loss Prevention (e.g., Symantec, ForcePoint, Digital Guardian)
  SIEM (e.g., Splunk, QRadar)
  CyberArk PAM and IAM
  
• Job Reference: QW8VR6R9

All Successful candidates can expect a very competitive remuneration package and a comprehensive range of benefits.

Kindly email your resume in a detailed Word format to [email protected]

We regret that only shortlisted candidates will be notified

People Profilers Pte Ltd

Tel: 6950 9754

EA Registration Number: R22110899

EA License number: 02C4944

EA Personnel: Celeste Wong Xin Yann

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R22111604

• Implement software development/support for automated computer vision equipment.
• Participate in Software Development Life Cycle.

Requirements:

• Diploma in Engineering
• At least 2 years of working experience in Visual Studio Development Environment.
• Good understanding of automated Computer Vision equipment, image procession automatic

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

• Responsible for growing and maintaining sales revenue for assigned portfolio
• Learn products at a professional and technical level
• Create strategic relationship with partners and vendors

Requirements:

• Diploma in Information Security or equivalent
• At least 3 years of experience in managing Network Security / Electronic / IT products

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Reg No. R21100996

Job Summary

• This role is responsible for maintaining and improving the organizations cybersecurity posture on an ongoing basis. S/he will work with external experts to implement security solutions, and work with vendors to monitor, detect and contain cybersecurity incidents to minimize impact to the organization.

Responsibilities

• Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis
• Work with vendor to conduct security assessments and penetration tests.
• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.
• Standardize and refine security incident response and escalation processes.
• Mitigate and contain threats when detected.
• Escalate security incidents and non-compliances on a timely basis.
• Work with IT infrastructure team to evaluate, implement and enhance the network perimeter security, endpoint security, SIEM, secured remote access, MFA, Identity Access Management and Privileged Access Management.
• Monitor information security alerts triage, mitigate, and escalate issues as needed.
• Provide security advisory to end users on regular basis.
• IT Security Management of various aspect, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.
• Keep abreast of industrial IT security advancements and introduce appropriate security enhancements to IT infrastructure and systems.
• Attend to any other reasonable duties as assigned by the Senior Cyber Security & IT Governance Manager and IT Director.

Requirements

• Degree in engineering, science or information technology, or equivalent education with 3-5 years of related work experience in cybersecurity management and security governance.
• Candidates with additional experience will be considered for the Senior Cyber Security Analyst position
• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.
• Strong understanding of ISO27001 standard.
• Hands-on experience at least 4 of the following IT Security Tools:Next Generation Firewall (e.g., FortiGate, Palo Alto, Cisco FirePower)
  SASE (Zscaler, Netskope, Skyhigh)
  Tenable Security Center Continuous View
  Endpoint Protection (e.g., Symantec, Trend Micro, Sophos Endpoint)
  Email Security (e.g., Mimecast, ProofPoint, Cisco Email Security)
  Data Loss Prevention (e.g., Symantec, ForcePoint, Digital Guardian)
  SIEM (e.g., Splunk, QRadar)
  CyberArk PAM and IAM
  
• Job Reference: QW8VR6R9

All Successful candidates can expect a very competitive remuneration package and a comprehensive range of benefits.

Kindly email your resume in a detailed Word format to [email protected]

We regret that only shortlisted candidates will be notified

People Profilers Pte Ltd

Tel: 6950 9754

EA Registration Number: R22110899

EA License number: 02C4944

EA Personnel: Celeste Wong Xin Yann

Cyber Security Roles in Singapore
Job Posting by Belle Lim, Senior Consultant at Hays Singapore
[email protected]

Data Security Architect, VP

Cyber Security jobs in Singapore
ACTIVELY HIRING NOW

Hi Everyone,

An established global investment bank is looking for a Data Security Architect expert to join their Global IT Security team. This individual will be responsible for designing, implementing, and maintaining a comprehensive security architecture framework to protect sensitive data and secrets across the organization. They will be responsible to design and implement the program from end to end holistically.

Your new role

· Design and implement a comprehensive security architecture framework and reference architectures for data protection, secrets management and cryptography.

· Continuously develop and mature the program and roadmaps,

· Ensure data security requirements are properly implemented and integrated into technical projects.

· Partner with cross-functional teams including the Global Data Management Group to identify and address data security risks across the organization.

What you’ll need to succeed

· 3 to 5 years of experience in Data Security architecture with 10 years of experience in Cyber Security

· Experience with cloud security, especially related to data protection and secrets management.

· Strong knowledge of encryption standards and technologies, such as AES, RSA, and PKI.

What you’ll get in return

· You will be part of a highly recognized, high performance leading culture firm

· Leadership Opportunities with attractive career development (You will be able to grow your team)

· Attractive Remuneration Package

What you need to do now
If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV to [email protected]. If this job isn't quite right for you but you are looking for a new position, please contact me for a confidential discussion on your career.

Apply now or refer a friend (Get rewarded with $200 CapitaStar Gift voucher upon a successful friend referral!)

At Hays, we value diversity and are passionate about placing people in a role where they can flourish and succeed. We actively encourage people from diverse backgrounds to apply.

EA License Number: 07C3924 l Registration Number: R21100438 l Company Registration ID No.: 200609504D

• Responsible for growing and maintaining sales revenue for assigned portfolio
• Learn products at a professional and technical level
• Create strategic relationship with partners and vendors

Requirements:

• Diploma in Information Security or equivalent
• At least 3 years of experience in managing Network Security / Electronic / IT products

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Reg No. R21100996

• Conducting maintenance service, commissioning of alarm systems
• Address to customer request on alarm and card access systems

Requirements:

• Basic Security certified
• At least 2 years of working experience
• Possess valid class 3 driving license

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

• Implement software development/support for automated computer vision equipment.
• Participate in Software Development Life Cycle.

Requirements:

• Diploma in Engineering
• At least 2 years of working experience in Visual Studio Development Environment.
• Good understanding of automated Computer Vision equipment, image procession automatic

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996