Contract Duration: Asap till end of March 2025, with possibility of extension

Location: Jurong West
Salary: Up to S$3,700

Reporting to: Academic Affairs Lead
Department: Student Life, Alumni, Outreach, and Communication (SLAOC) Team

Key Responsibilities

• Oversee logistics for events organized by the School of Social Sciences.
• Compose email communications to alumni regarding activities and events.
• Manage databases for Outreach and Alumni.
• Inform students about the Work-Study Scheme processes.
• Identify and source vendors and venues for corporate gifts, marketing materials, and sponsorships for Alumni Events and Student Clubs.
• Coordinate with vendors to arrange appointments, handle inquiries, and manage procurement and delivery of items.
• Maintain a comprehensive database of physical corporate giveaways for the Student Life, Outreach, and Alumni teams.
• Conduct general marketing activities, including creating electronic direct mail (EDM) using design software.
• Provide administrative support, including scheduling appointments, preparing correspondence, arranging courses, and processing payments related to Alumni and Student Life programs.

Requirements

• Bachelor’s degree with 2-3 years of relevant administrative experience, preferably with a background in digital marketing or event management. Diploma holders with relevant experience will also be considered.
• Familiarity with Sitefinity CMS and WordPress is preferred.
• General proficiency in tools such as Mailchimp, Brevo, Adobe Suite, and Canva is advantageous.
• Willingness to support beyond regular working hours and on weekends due to the nature of the work.

Brandon Lim | EA Registration No: R21102894

EPS Consultants Pte Ltd| 95C5630

Key Responsibilities

Design the database’s architecture and modelling strategies to ensure that the database is secure, scalable and performs reliably.

• Work with the application development team to define the application data model and work on tuning and optimizing database related operation.

• Be point of contact to principal vendors for software and hardware.

• Provide production support and responsible for the resolution of database related issues and duty rotation for after-office-hours support.

• Provide support on to application team on database related matters (e.g. data patching, application deployments, extracting data from database for reporting)

• Plan and strategize data mapping for migration of data from legacy systems to support the deployment of the project, ensuring no data loss during conversion.

• Review data mapping/conversion/integration specs between systems to ensure appropriate mapping quality and adherence to modelling strategies.

• Ensure timeliness and accuracy of data sync during co-existence with legacy systems.

• Develop and maintain database-related codes / scripts such as data sync scripts, data masking scripts, stored procedures etc.

• Ensure database services and servers availability.

• Install and configure Database and associated products.

• Provide operational support including:

o Ensuring database patches are performed in accordance with the patch release cycle.

o Troubleshoot and remediate security vulnerabilities reported by security scan.

o Reviewing and maintaining of database accounts.

o Monitoring and optimising database performance, such as optimising queries, creating indexes etc.

o Capacity planning.

o Configuring backup on database.

o Ensuring database is hardening in accordance with Authority standards.

What we are looking for

• Past track records with Oracle/MSSQL/DB2/MySQL/Postgres/Maria/Mongol databases including setting up and managing the environment.

• Experience in setting up and managing databases in a high availability active-active setup will be added advantage.

• Knowledge in PL/SQL scripting will be added advantage.

• Knowledge in working with ETL and data co-existence technology with legacy systems will be added advantage.

• Knowledge with DB audit and security will be added advantage.

• Knowledge with data masking products will be added advantage.

EA License # 14C6941

Cyber Security Specialist (VAPT)

Job Description

Architect, design, review and implement cyber security resilient in our product and projects. You are familiar with cloud security architectures and solutions, making sure the companies can operate in a safe, secure environment.

Responsibilities

• Responsible in managing CyberSecurity VAPT, Vulnerability Assessment, Risk Management and Testing.
• Manage Network and Cloud Security Risk Assessment and Audit.
• Involved in handling Government Projects related to risk, security attacks and system solutions.
• Consultancy on software and hardware for security vulnerabilities and risks
• Plan VAPT, execution, result analysis and provide fix recommendation.
• Provide guideline such as coding, key management, hardening, patch management, backup management, incident management, etc.
• Familiar with IM8 requirements and CIS, NIST security benchmark, cyber security tools to perform preliminary scan.

Skills Required

• Strong in knowledge in CyberSecurity, Risk Assessment, VAPT, Vulnerability and Cloud Security.
• Strong in VAPT management.
• Technically incline in CyberSecurity, Cloud, Risk and Vulnerabilities.
• Possess knowledge of IM8 and Government projects experience is preferred.
• Degree/Certifications in CyberSecurity.
• Possess CyberSecurity certifications.
• Possess Government domain is preferred.

We respect your privacy and all communication will be treated with confidentiality.

Please contact us or apply in-confidence to us with you updated MS Word Resume to : [email protected]

Yong Jeline (Reg. No. R1101621)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

Role Purpose:

The Security Consultant delivers penetration testing & offensive security projects to ensure a successful

outcome that at least meets or exceeds the expectations of our clients.

Role Outcomes:

• The customer recognises you as a subject matter expert and they have confidence in the comprehensiveness of the testing methodology and the accuracy of the results.
• The client has prepared the testing environment prior to the project start date so that the engagement is executed smoothly and without delay.
• Penetration testing projects are delivered efficiently and on schedule.
• The quality of the Penetration Testing Report by ensuring it has been peer reviewed and approved for release to the client.
• All client data is managed in strict accordance with Vantage Point Security data security and protection policies throughout the project.

Implement security operations strategy

• Contribute to the definition of the overall security strategy

• Align security operations functions with the organisation’s overall business objectives

• Advise senior leaders on critical issues that may affect corporate security objectives

• Advise the design and implementation of security policy and controls

• Provide expertise on security technologies and innovative security concepts

• Provide technical and operational oversight for security tool deployment and implementation

Operate/Monitor security systems

• Develop plans for operating/monitoring security systems (e.g. endpoint security tools, firewalls, etc)

• Guide the identification and measurement of critical security operations metrics

• Develop detection and alerting rules

• Review/approve firewall rules

• Review/approve changes on AV systems

• Monitor levels of service of the security operations

• Present periodic status reports to management

Security planning, review & compliance

• Coordinate ongoing reviews of existing security programs/protocols and planned upgrades

• Monitor compliance to security policies, regulations, rules and norms

• Participate in reviews/gap analysis of posture and compliance and follow-up with proposed treatment plan

• Authorised/Unauthorised software installation reviews

• Drive continuous improvement of security operations

Respond to security incidents

• Set internal guidelines for effective processing and escalation of incidents

• Review reports on incidents and breaches

• Develop contingency and disaster recovery plans for specific security incidents

• Coordinate prioritisation of alarms and resources for incident responses

• Oversee the development of emergency protocols

• Recommend systems and procedures for the prevention, detection, containment and correction of security breaches

• At least 15 years' of experience in IT Security

• Strong knowledge and experience in End User Computing, Server, Network and Security spaces

• Strong experience in supporting Windows, Linux, Vulnerability scanning tools, Firewalls and WAF

• Preferable experience in cloud-native security platforms and offerings from AWS or Azure

• Knowledge of patch management for OS and security products (Firewalls, Windows, Linux)

• Strong knowledge of endpoint security tools

• Preferred Knowledge of vulnerability assessment tools and techniques

• Preferred knowledge in conducting risk assessments

• Preferred Security/ITIL/Vendor certifications including but not limited to: (Fortinet NSE4, CISSP, CCSP, CEH, ITIL, CCNA-Security)

Responsibilities:

- Design and implement integration solutions for various physical security systems, including access control, video surveillance, intrusion detection, video analytics and alarm systems

- Ability to understand and address customer requirements and translate them into technical solutions

- Collaborate with product teams to address specific customer needs and feedback

- Design and propose security technology solutions tailored to different verticals

- Collaborate with cross-functional teams to gather requirements and define project scope

- Conduct site surveys and assessments to determine integration needs and best practices

- Conduct POC, demo, testing and setup of security system and video analytics

- Manage and execute projects with strong project management skills

- Develop documentation, including system specifications, integration plans, and user manuals

- Stay updated on industry trends, technologies, and best practices related to physical security

Requirements:

- Bachelor’s degree in Computer Science, Engineering, or a related subject

- Programming skills in Python, C++ and/or Javascript

- Fullstack experience is strongly preferred

- Strong understanding of networking, database management, and software integration

- Familiarity with industry standards and protocols (e.g., ONVIF, BACnet, etc.)

Nice to have:

- Professional experience working with VMS systems and integrating 3rd party solutions

- B2B (Business-to-Business) experience in physical security

- Technical security system certifications (I.e., Gallagher, Genetec, BICSI, Milestone) and/or related IT (i.e., CCNA) certifications preferred

- Possess market knowledge in physical security industry for verticals ie. transportation, commercial building, hospitality, etc.

Summary

Imagine what you could do here. At Apple, new ideas have a way of becoming extraordinary products, services, and customer experiences very quickly. Bring passion and dedication to your job and there's no telling what you could accomplish. Do you wish to be challenged to think creatively? The people here at Apple don’t just craft products - they build the kind of wonder that’s revolutionized entire industries. It’s the diversity of those people and their ideas that inspires the innovation that runs through everything we do, from amazing technology to industry-leading environmental efforts. Join Apple, and help us leave the world better than we found it.

Description

Apple is looking for a skilled security professional to join its Apple Information Security SPAN organization, within the Supplier Trust function. The ideal candidate will have a solid technical background and significant experience in Information Security, with a particular emphasis on the assessment to remediation lifecycle. In this role, you will collaborate with a global team of security experts operating to secure the posture of critical manufacturing and corporate suppliers, with a primary focus on identifying and remediating findings. Your contributions will play a key role in safeguarding Apple’s customers, brand, and data through essential security controls. This position offers the opportunity to work on innovative technologies and processes with worldwide impact.

Minimum Qualifications

• Ability to evaluate, conduct security assessments and monitor security posture of third-party Suppliers.
• Proven experience in handling and conducting large-scale security remediations with track record of effective threat mitigation.
• Ability to provide guidance to Suppliers on mitigating risks posed due to open Information Security gaps in assessment reports.
• Skills to deliver recommendations and timely updates to management on the risk level of Suppliers.
• Experience working with large-scale, globalized, multi-lingual business environments.
• Experience simultaneously working with multiple constituencies, balance disparate priorities, and solve problems in high-demand situations.
• Ability to develop security metrics to track efficiency of controls and remediation efforts and generate reports for management on insight of organization’s security posture.
• Ability and skills to ensure all security assessments and remediation activities are aligned with relevant regulatory requirements and industry standards.
• Strong ability to analyse complex data sets, identify patterns, anomalies and potential threats. Familiarity with data analytics tools is a plus.

Preferred Qualifications

• Outstanding communication skills and attention to details on sophisticated issues.
• Strong personal leadership traits such as self-accountability, priority management, and pride in work.
• Relevant industry certifications such as CISSP, CISM, CEH or OSCP.
• Proven ability to work within various cultural settings.

Apple is an Equal Opportunity Employer that is committed to inclusion and diversity. We also take affirmative action to offer employment and advancement opportunities to all applicants, including minorities, women, protected veterans, and individuals with disabilities. Apple will not discriminate or retaliate against applicants who inquire about, disclose, or discuss their compensation or that of other applicants. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Job Description

• Supporting CISO and Team lead with engagement and supporting Com Care Sector on Cyber Security initiatives.
• Drive the HIB Compliance program and outreach to the Sector.
• Support CISO in managing Sector Cyber Security team.
• Support the Sector & Digitization team engagement with Sector on Cyber Security
• Drive the Cyber Essential+ certification & Trust Mark certification program

Requirements

• Degree in Information technology with at least 10 years of working experience in Cyber Security or IT
• Professional certification in CISM, CRISM, CGEIT will be an advantage
• Has relevant work experience in both vendor and end user environment
• Demonstrate competency to provide consultancy or advisory to internal or external customer
• Cyber Security Governance and Assurance Knowledge
• Good stakeholder management, IT/Cyber Risk Management
• Good understanding of Cyber Security best practices and standards (NIST, ISO27000, Cyber Kill Chain, MITRE)
• Successful candidate will be offered a 2-year contract

Summary of the Position

He/She will be a technical RUN expert for all Network Security services in the company. As such, he/she will provide support and act as the last level of escalation point for all production support activities within the Network Security operations team in Singapore. He/She is accountable for the overall health and stability of the technical solutions within his scope. He/She has to effectively work with technical peers such as architects, peer experts and project teams on technology road maps and projects. He/She will have control over the scope of technical activities, develop best practices, manage knowledge and ensure the necessary trainings are imparted to the team wherever applicable.

The 20-member Network-Security team operates the RUN activities and delivers projects for its infrastructure scope.

An Expert has a wide spectrum of responsibilities and actions.

Main Duties

As an expert of his/her team, he/she:

• assigns technical tasks and manages delegation for technical issues,
• animates the team to encourage collaboration and sharing of best practices,
• has a role in supporting technical skills development and provides training when required,
• supports new technologies and leverages them to provide consistency of service across streams,
• manages service improvements for all Network and Security services supported throughout the organization,
• documents, reviews, maintains and shares relevant technical information to the team
• provides technical direction, supports services both proactively and reactively to maintain the availability and reliability of system infrastructure in accordance to the SLA,
• implements and develops improvements based on the company's best practices,
• focuses on automation and optimum use of the team to improve efficiency,
• drives and delivers root cause for any high severity issue,
• reviews technology changes to identify potential risks,
• is responsible for problem management and resolution
• Perform real-time analysis and trending of security systems
• Respond to user incident reports and evaluates the type and severity of security events.
• Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.
• Interpret and apply security policies and procedures.
• Establish escalation processes for security incidents and develops contingency plans and disaster recovery procedures.

As an experienced professional in Network-Security Services, he/she:

• supports his/her team during diagnosis when technical issues rise in his/her scope of expertise,
• is aware of the global IT structure so that he/she anticipates interrelationships within the organization,
• engages with technical peer, Service managers, Architect and project teams on technology roadmap and projects,
• facilitates transformation projects and suggest future directions for new areas of improvement and change,
• guarantees the production readiness and license to operate of new projects and solutions
• is available and able to drive technically, any complex or high severity incidents that occur within the scope of their role,
• actively engages to understand new technologies and technology trends and reviews them with a view to incorporating them into the comapny's operations,
• actively assists in identifying the most technical skilled candidates for open roles,
• technically coach and develop partner resources to improve quality and productivity,
• Define the technical skillset required to support the company's technologies.

As the escalation point of contact for Clients, he/she:

• manages the daily relationship with Clients including planning, requests clarification, risks mitigation and service quality

Legal and Regulatory Responsibilities

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• Fluent in English, both written and spoken
• 15+ years of Experience in managing network and security infra.
• 10+ years Experience in handling major network security projects (ex: SDWAN )
• 10+ years Experience in handling Firewalls/IPS/F5/Pulse/Proxies, Routers/Switches.
• At least a Bachelor’s degree in any of these faculties:
• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Working Hours:

• Primarily match Europe business hours
• On-call support will be expected on a rotational basis

Next Step

Prepare your updated resume and expected package.

Simply click on 'Apply here' or email to [email protected] to drop your resume

All shortlisted candidates will be contacted.

Prasant Sirohi

EA License Number: 91C2918

Registration Number: R22106307

US Data Centre

• Design and implement advanced security architectures for IT and OT environments against emerging threats.
• Take lead in development and integration of custom security solutions to both digital and physical infrastructures.
• Conduct high-level vulnerability assessments and penetration testing to evaluate the security of both IT and OT systems.
• Develop and refine incident response strategies in respond to and recover from security breaches promptly and effectively.
• Collaborate with IT and OT teams to ensure the seamless integration of security technologies across all platforms.
• Technical lead for all projects involving cybersecurity technologies while meeting industry standards and compliance requirements.
• Stay update to date on the latest cybersecurity technologies and trends
• Mentor junior engineers and analysts,
• Prepare and present detailed technical reports and security briefings to senior management, making strategic recommendations

Requirement

• A master’s degree in Cybersecurity, Computer Science, Engineering, or a related field, with significant professional experience in cybersecurity.
• Expertise in designing and managing security solutions for both IT and Operational Technology systems.
• Advanced certifications in cybersecurity such as CISSP, CISM, or GIAC, with specific training in areas like SCADA or ICS security.
• Strong leadership skills with experience in managing complex security projects and leading cross-functional teams.
• Deep understanding of regulatory compliance and security frameworks such as ISO27001, NIST, SOC2, and others relevant to IT and OT cybersecurity.
• Exceptional problem-solving skills and the ability to make critical decisions under pressure.
• Excellent communication skills, capable of articulating complex security issues to stakeholders at all levels within the organization.

Job Description

The role is responsible to design, develop and implement secured application architecture. As an Application Security Manager, you will be responsible for ensuring the security of our applications throughout their lifecycle. You will work closely with development teams, architects, and other stakeholders to implement robust security measures and best practices. This role requires a deep understanding of application security principles, excellent leadership skills, and the ability to effectively communicate and collaborate across teams.

Responsibilities

• Develop and implement application security policies, standards, and procedures.
• Conduct regular security assessments and code reviews to identify vulnerabilities and risks.
• Design and execute security testing strategies (e.g., penetration testing, vulnerability scanning).
• Work closely with development teams to integrate security into the SDLC (Software Development Life Cycle).
• Evaluate, design, and support the build and implement security solutions for Mobile and Web applications
• Provide guidance and support on secure coding practices and security architecture.
• Collaborate with application and infrastructure teams to ensure end-to-end security of applications.
• Provide oversight of application security control metrics
• Deliver Application security training and awareness
• Coordinate red teaming exercise to simulate real-world cyberattacks and assess on defensive capabilities
• Stay up-to-date with the latest security threats, trends, and technologies.
• Communicate security risks and recommendations to senior management and other stakeholders.

Qualifications

• Degree in computer science or related field
• 6-10 years’ experience in the domain of application security and development
• Ideally, you have completed or are about to complete a Security certification (e.g. CISSP, CSSLP, CEH)
• Proven experience in application security, with a strong understanding of web application vulnerabilities (OWASP Top 10, etc.).
• Hands-on experience with security tools such as static analysis tools, dynamic analysis tools, and penetration testing tools.
• Experience in conducting security assessments.
• Solid understanding of cloud security principles and practices (AWS, Azure, etc.).
• Experience desirable with Java, .Net, C++ and IOS/Android development
• Excellent communication skills with the ability to explain technical issues to non-technical stakeholders.

Job Summary

The cyber Security Architect is a senior-level position responsible for planning, designing, testing, implementing and maintaining our organization’s network security infrastructure. He also evaluates the security of the organization's systems for vulnerabilities. He participates to penetration tests, risk analyses on LANs, WANs, and VPNs. He also determines the efficacy and efficiency of routers, firewalls, and comparable systems, they also evaluate these systems.

Responsibilities

• Production Level 3 support for Network and Security infrastructure.
• Design, develop, and implement secure system architectures.
• Embed security principles into the design of system architectures to mitigate the risks posed by new technologies and business practices.
• Design artefacts, spanning design, development, and implementation, into enterprise systems that describe security principles and how they relate to the overall enterprise system architecture.
• Perform routine activities related to the periodic review and audit activities of infrastructure security systems and maintains documentation of security standards and procedures.
• Gaining a total understanding of the organization’s technology and information systems
• Planning, researching, and designing reliable, powerful, and flexible security architectures for all IT projects
• Defining, creating, implementing, and maintaining all needed corporate security policies and procedures, making sure that all employees abide by them
• Developing requirements for all IT assets including routers, firewalls, local area networks (LANs), wide-area networks (WANs), virtual private networks (VPNs), and any other related network devices
• Reviewing and approving the installation of all firewalls, VPN, routers, servers, and IDS scanning technologies
• Preparing cost estimates for all cybersecurity measures and identifying any potential integration issues
• Providing technical guidance and supervision for security teams
• Taking charge of any security awareness programs and educational efforts to better prepare non-IT personnel
• Responding immediately to any security-related incidents (e.g., data breaches, viruses, phishing scams)
• Updating and upgrading the organization’s security systems as needed

Legal and Regulatory responsibilities:

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer/Compliance Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• Minimum 8 years of experience in managing IT systems environment with about 5 years of experience in financial institutes.
• Subject matter expert on Systems , Network and Security.
• Knowledge and/or hands on working experience with emerging technologies.
• Excellent communication, interpersonal and logical skills.
• Customer service oriented and a strong team player.
• Ability to work under pressure and a commitment to solving issues.

Technology / Product Experience:

• Cisco: ACI, Nexus, Catalyst, DNAC, ISE , iOS, NXOS
• Arista: Switches, EOS
• Fortinet: Firewall, IPS
• F5: LTM, ASM, APM , TMOS
• Infoblox; DNS, DHCP
• Skyhigh: Proxy
• Ivanti: Remote access
• Checkpoint: Firewall, MDS
• Trendmicro: IPS/IDS

Technology / Product Experience:

• Programming: Python/Bash/Ansible
• Tools: Wireshark/Tshark/Netflow

Work Schedule

• Required to work on Paris and/or New York and/or Asia time zone*, i.e. 2pm to 11pm/4pm to 1am (summer season) or 3pm to 12am/ 5pm to 2am (winter season), or in accordance to the planned time schedule as required. If necessary, you may also be required to start work earlier or to extend working hours.
• May be required to be available for on-call support during non-business hours and/or on weekends. Allowance is claimable for such hours.

Education Requirements

At least a Bachelor’s degree in any of these faculties:

• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Position

Data Security Specialist - Data Security and Endpoint Security

Data Security Specialist is a technical Specialist role within the Data Security Services team and will be responsible for managing, administration and supporting the Data Security and Endpoint Security technologies for the bank.

Person will be the technical point of contact for the Run team and the related activities to data security and will be the last level of escalation for the Security specialists in the team. He/She is also responsible for the technical transition and validation of Security services from other regions to Singapore. He/She will be involved in projects and POC’s that may involve security services. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Specialist on the technologies within data security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France and UK) and Asia remotely from Singapore. France infrastructure represents approximately 80% of the worldwide production activities of the company in Singapore.

Team works in Europe time zones and this role will be aligned primarily to Paris working hours. Flexible rotations are followed based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect,
• Encryption Solutions: Disk Encryption, File and Folder encryption,
• Database Audit Monitoring solutions
• Email and Web Phishing Prevention solutions
• Vulnerability Management

Detailed Job Responsibilities

The Specialist has a wide spectrum of responsibilities and actions. Person will be responsible for following (but not limited to) responsibilities in day-to-day work:

As the Specialist of the team, he/she:

• act as the last level of escalation for the team members
• own Incident, Problem and change management process for the team
• assigns technical tasks and manages delegation
• animates the team to encourage collaboration and sharing of practices
• participates to recruitment process for the team

As the Specialist of his/her scope of activity, he/she:

• is actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management
• Is the final technical approver for any changes into Data Security systems and is accountable for any technical changes in the environment from a RUN/BAU perspective
• Is involved in projects like End of Life, New Builds, migrations and technical upgrades of the solution managed by the team
• Participates in global Infra events (like Power down and DR Tests)
• ensures activity is performed in compliance with norms, standards, processes and procedures
• gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting
• ensures documentation is up to date and relevant for use
• lead the continuous improvement initiatives
• responsible to drive and deliver root cause for any high severity issues
• Focus on automation and optimum use of the team to improve efficiency
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

• Work schedule is mainly focused to support Asia and EMEA (Paris) time zone; however, may have to support during non-offce hours for critical incidents or escalation as per the assigned on-call support requirements;
• Rotational Shift schedule is followed;
• Work Hours: 2 PM – 11 PM SGT (with 1 week of General shift 9 AM – 6 PM SGT).

Qualifications and Profile

Functional

• 8 - 10 years of IT Security experience in administration and management of IT Security technologies primarily Symantec Data Loss Prevention, Symantec Endpoint Protection, Email Security, Data Classification and other endpoint & data security solutions;
• Should be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;
• Knowledge of different domains of IT Security;
• Working & hands-on experience in administering the IT Security Solutions;
• Must have experience in working in similar Production setup in Run (Operations) mode;
• Ability to apply risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;
• Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;
• Excellent in analytical, communication and documentation skills;
• Ability to organize work and be able to priories work as per the needs of Production Operation’s needs;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Ability to work independently and as well as a part of team and is able to work under minimal supervision;
• Should have time management skills and able to manage work in fast moving environment;
• Excellent written and oral English language skills;
• Knowledge of French language is preferred.

Technical

• Hands-on experience on Symantec Data Loss Prevention (DLP);
• Highly proficient in data leakage prevention (DLP) technologies - troubleshooting and configuration management;
• Deployment, integration and administration experience of various components of Symantec DLP:

- Symantec Endpoint Protect

- Symantec Web Prevent

- Symantec Email Prevent

- Symantec Enforce

• Must have experience in defining, designing and configuring DLP Policies as per the business requirements;
• Deploy, upgrade and troubleshooting knowledge on Symantec DLP solution;
• Scripting knowledge (Phyton, Regular Expression, Powershell) is desirable;
• Professional Certifications:

- CISSP certified is highly preferred

- Symantec Certified Specialist: Administration of Data Loss Prevention (any version) is highly preferred.

• Must be experienced to cover the scope as mentioned in the SKILLS MATRIX section of this document.

SKILLS MATRIX

Technical skills

• Symantec Data Loss Prevention Administration (DLP Policy/Rules creation Specialistise): Must to have
• Trend Micro Deep Discovery Email Inspector (Phishing Prevention): Good to have
• Symantec Endpoint Protection (Anti-Virus): Good to have
• Phyton, Regular Expression, Powershell: Good to have

General skills

• Ability to prioritize effectively: Must to have
• Ability to work autonomously: Must to have
• Ability to work successfully in a team: Must to have
• Adaptability to changing environments: Must to have
• Inter-personal skills: Must to have

Management skills

• Ability to deal with issues, time management: Critical
• Manage escalated incidents: Critical
• Capacity to cooperate / work across discipline: Critical
• Capacity to develop others: Desired

Language skills

• English: Must to have
• French: Good to have

Next Step

Prepare your updated resume and expected package.

Simply click on 'Apply here' or email to [email protected] to drop your resume

All shortlisted candidates will be contacted.

Prasant Sirohi

EA License Number: 91C2918

Registration Number: R22106307

Position

Data Security Expert is a technical expert role within the Data Security Services team and will be responsible for managing, administration and supporting the Data Security and Endpoint Security technologies for the bank.

Person will be the technical point of contact for the Run team and the related activities to data security and will be the last level of escalation for the Security specialists in the team. He/She is also responsible for the technical transition and validation of Security services from other regions to Singapore. He/She will be involved in projects and POC’s that may involve security services. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Expert on the technologies within data security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France and UK) and Asia remotely from Singapore. France infrastructure represents approximately 80% of the worldwide production activities of the company in Singapore.

Team works in Europe time zones and this role will be aligned primarily to Paris working hours. Flexible rotations are followed based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect,
• Encryption Solutions: Disk Encryption, File and Folder encryption,
• Database Audit Monitoring solutions
• Email and Web Phishing Prevention solutions.
• Vulnerability Management

Responsibilities

The Expert has a wide spectrum of responsibilities and actions. Person will be responsible for following (but not limited to) responsibilities in day-to-day work:

As the Expert of the team, he/she:

• act as the last level of escalation for the team members
• own Incident, Problem and change management process for the team
• assigns technical tasks and manages delegation
• animates the team to encourage collaboration and sharing of practices
• participates to recruitment process for the team

As the Expert of his/her scope of activity, he/she:

• is actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management
• Is the final technical approver for any changes into Data Security systems and is accountable for any technical changes in the environment from a RUN/BAU perspective
• Is involved in projects like End of Life, New Builds, migrations and technical upgrades of the solution managed by the team
• Participates in global Infra events (like Power down and DR Tests)
• ensures activity is performed in compliance with norms, standards, processes and procedures
• gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting
• ensures documentation is up to date and relevant for use
• lead the continuous improvement initiatives
• responsible to drive and deliver root cause for any high severity issues
• Focus on automation and optimum use of the team to improve efficiency
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Qualifications and Profile

Functional

• 5 - 7 years of IT Security experience in administration and management of IT Security technologies primarily Endpoint Protection, Email Security and DLP, Data Classification and other endpoint & data security solutions;
• Knowledge of different domains of IT Security;
• Working & hands-on experience in administering the IT Security Solutions;
• Must have experience in working in similar Production setup in Run (Operations) mode;
• Ability to apply risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;
• Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;
• Excellent in analytical, communication and documentation skills;
• Ability to organize work and be able to priories work as per the needs of Production Operation’s needs;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Ability to work independently and as well as a part of team and is able to work under minimal supervision;
• Should have time management skills and able to manage work in fast moving environment;
• Excellent written and oral English language skills;
• Knowledge of French language is preferred.

Technical

• Hands-on experience on Symantec Data Loss Prevention (DLP);
• Highly proficient overall security solutions like, Endpoint Protection, Email Security and Vulnerability Management;
• Deployment, integration and administration experience of various components of Symantec DLP:

- Symantec Endpoint Protect

- Symantec Web Prevent

- Symantec Email Prevent

- Symantec Enforce

• Good to have experience in defining, designing and configuring DLP Policies as per the business requirements;
• Deploy, upgrade and troubleshooting knowledge on Symantec DLP solution;
• Deploy, Upgrade and troubleshoot on DAM Solutions like IMPERVA or Guardium
• Expertise knowledge in Email Security Solutions
• Hands-on to Expertise knowledge in MS Defender for endpoint and or Cloud.
• Scripting knowledge (Phyton, Regular Expression, Powershell) is desirable;
• Professional Certifications:
• CISSP certified is highly preferred
• Symantec Certified Expert: Administration of Data Loss Prevention (any version) is highly preferred.
• Must be experienced to cover the scope as mentioned in the SKILLS MATRIX section of this document.

Technical skills

• Symantec Data Loss Prevention Administration (DLP Policy/Rules creation expertise): Good to have
• Database Access Monitoring: Good to have
• Symantec Endpoint Protection (Anti-Virus): Good to have
• Microsoft Defender Suite: Good to have
• Email Security: Knowledge
• Python, Regular Expression, Powershell: Knowledge

General skills

• Ability to prioritize effectively: Must to have
• Ability to work autonomously: Must to have
• Ability to work successfully in a team: Must to have
• Adaptability to changing environments: Must to have
• Inter-personal skills: Must to have

Management skills

• Ability to deal with issues, time management: Critical
• Manage escalated incidents: Critical
• Capacity to cooperate / work across discipline: Critical
• Capacity to develop others: Desired

Language skills

• English: Critical
• French: Good to have

Work Schedule

• Required to work on Paris and/or New York and/or Asia time zone*, i.e. 2pm to 11pm/4pm to 1am (summer season) or 3pm to 12am/ 5pm to 2am (winter season), or in accordance to the planned time schedule as required. If necessary, you may also be required to start work earlier or to extend working hours.
• May be required to be available for on-call support during non-business hours and/or on weekends. Allowance is claimable for such hours.

Education Requirements

At least a Bachelor’s degree in any of these faculties:

• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Next Step

Prepare your updated resume and expected package.

Simply click on 'Apply here' or email to [email protected] to drop your resume

All shortlisted candidates will be contacted.

Prasant Sirohi

EA License Number: 91C2918

Registration Number: R22106307

About BCS:

BCS is NETS’ wholly owned subsidiary, and is an entity within the NETS Group. It manages and operates clearing and payment infrastructure for the Singapore Automated Clearing House, including Fast And Secure Transfers (FAST), Inter-bank GIRO (IBG), Cheque Truncation System (CTS), and provides services for PayNow and SGQR Central Repository.

Position Summary:

You will be part of the BCS Security team where you will work in a highly collaborative environment with cross-functional teams.

You will work in the Governance, Risk & Compliance (GRC) team. You are an expert in cybersecurity frameworks, policies and standards. You are part of the line 1.5 team that ensures the organisation’s compliance to the applicable regulatory requirements.

Key Responsibilties:

• Maintain cyber security policies, standards and procedures
• Manage and perform cyber risks and assessments
• Develop cyber risk documents
• Mitigate cyber security risks
• Conduct research on emerging cyber security & risk management trends, issues and alerts
• Track and monitor new security regulatory guidelines, and assess the compliance of and impact to the organization
• Assess the security deviations and risk acceptance raised by other business units
• Review and update cybersecurity risk assessment methodology and conduct cybersecurity risk assessment for critical systems
• Track remediation efforts for security & audit deficiencies

Requirements:

• Degree or Diploma in Computer Science, Computer Engineering or Information Security related fields
• At least 8 years’ of experience working in technology and/or cybersecurity governance
• Working experience in a highly regulated environment is preferred
• Strong understanding and familiarity with regulatory requirements such as IM8, MAS Notice on TRM, MAS Notice on Cyber Hygiene, MAS Technology Risk Management Guidelines, MAS Outsourcing Guidelines and the CSA Cybersecurity Code of Practice
• Strong understanding of NIST Cybersecurity Framework
• Cybersecurity professional qualifications such as CISSP, CISM, CRISC, CISA, GSEC, CCSK or equivalent would be advantageous
• Excellent problem-solving and analytical skills with a keen eye for details
• Good written and communication skills with ability to interact and engage with stakeholders and all levels of management, including non-technical colleagues
• Ability to work well under pressure and respond to tight deadlines
• Keen interest to constantly improve competency with a positive attitude
• Familiar with emerging technologies and possess an interest to stay abreast of industry developments (e.g. DevOps, Cloud, APIs, service-oriented architectures etc).
• Proficiency with application development experience and programming/coding/Powershell scripting will be an advantageous
• Prior experience in implementing Cybersecurity products such as IAM tools is a plus

Responsibilities

• Provide L3 Network and Security support.
• Support L2 Engineer to streamline incident calls and ensure service level agreements are met.
• Perform Support to L3 escalations of all network security across Fortinet,F5 Load Balancer,McAfee Proxies,Checkpoint.
• Assist with the documentation of standard operating procedures relating to installations and fixes.
• Act as coach and mentor to more junior Implementation Engineers and Technicians.
• Assume responsibility for the co-ordination of the activities of the Engineers, in line with performance targets.
• Included in higher complexity design work, with input to the design expected.
• Expected to take ownership of relevant technologies according to domain or specialization.

Requirements

• Good understanding and appreciation of technical design and business principles
• Demonstrates project management and administration ability
• Good project skills which are demonstrated in the execution of installations and other assignments
• Demonstrate customer engagement skills
• Demonstrate relevant domain specialist knowledge
• Good verbal communication skills
• Client focused and display a proactive approach to solving problems
• Ability to work under pressure
• Ability to coach, mentor and provide guidance to team members
• Good understanding of project management principles.

1. Traineeship Description

This position reports to the Director and oversees all departmental matters related to compliance within the company, ensuring adherence to both government and non-government legislation.

2. Role

• Conduct Risk Assessments: Evaluate potential risks and ensure compliance with all requirements.
• Policy Development: Oversee the production of policy positions related to legislation and organizational policies.
• Manage Client Expectations: Communicate effectively with clients to align expectations with deliverables.
• Policy Formulation and Evaluation: Develop, implement, and evaluate policies to ensure alignment with the organization’s strategic objectives

3. Competencies to learn

• To learn legislation, policies, and practices in the security sector
• To be able to multitask and apply surveillence skills
• To be able to work closely within government and non-government organisation
• To be able to address and manage all documentations in compliance

4. Qualifications

• WSQ Certification related to security services
• Proficient with Microsoft Word and Excel
• Effective Oral and wriiten management Communication Skills

5. Duration of Attachment Offered

6 months

Job Description & Requirements

Job Description:

Conduct crowd & traffic control at deployed sites and events.

Assist ministries, statutory boards or government departments in law enforcement duties

Any other duties as directed by management, within the reasonable scope of the position hereof.

Job Requirements:

A valid PLRD license with a Min of Senior Security Officer grade

A valid Conduct Crowd & Traffic Control certificate

Medically fit

Possess a class 2 license (preferred)

Able to work shift duties (Including extended shift, weekends & public holidays)

If interested, please contact 8893 5386 / 65706161 for more information.

PURPOSE

As the Manager of Sales Admin Operations Department, you will lead and oversee various functional teams responsible for optimizing all aspects of the company's operational processes, including procurement, sales administration/order fulfilment, lease management, and logistics operations.

Your primary objective will be to efficiently fulfil customer orders, manage end-of-lease (EOL) operations, and ensure operational effectiveness while meeting budgetary goals and ensuring customer satisfaction. Your leadership and strategic insights will be instrumental in driving operational excellence and contributing to the company's overall success and growth.

NATURE & SCOPE

Manage sales order fulfilment, procurement, and logistics operations for the company while efficiently fulfilling orders to achieve budget goals.

PRINCIPAL ACCOUNTABILITIES

Leadership and Team Management:

Lead, motivate, and manage a diverse team of operations professionals, including team leads, senior professionals, and specialists, fostering a collaborative and inclusive team culture focused on accountability, service excellence, and continuous improvement.

Sales Administration and Order Fulfilment Management:

Oversee sales administration support and the processing of sales orders from customer PO receipt to delivery and billing, ensuring accuracy, timeliness, and customer satisfaction.

Collaborate closely with sales teams to address any issues or concerns related to order fulfilment and delivery, actively managing customer feedback to optimize performance.

Procurement Operations Management:

Manage procurement processes, encompassing inventory part number creation, purchase order issuance, order tracking, and goods receipt entry. Maintain good supplier/ partner relationships to ensure timely delivery of goods and services.

Collaborate closely with suppliers/partners to coordinate shipment delivery and promptly escalate any supply shortages as needed to mitigate disruptions.

Conduct regular inventory checks to uphold accuracy and promptly identify discrepancies, implementing corrective actions to maintain optimal inventory levels and operational efficiency.

End-of-Lease (EOL) Management:

Provide leadership for the smooth management of EOL processes for all leased assets, overseeing activities such as tracking EOL assets collection progress, providing management with visibility of EOL assets status, and highlighting challenges/business impacts with resolution recommendations, resolving disputes, and driving process improvements.

Manage the process of selling used equipment to third-party buyers, ensuring timely buyout from the leasing company to prevent penalties. Fasten late and defect quoting processes to customers to minimize unrecoverable costs and improve profitability.

Logistics Operations:

Oversee logistics operations, including inventory management, warehouse operations, and delivery processes leveraging logistics service providers. Continuously optimize workflows to minimize costs and enhance delivery service levels.

Monitor logistics service provider performance closely, providing regular feedback to maintain the high service level standards.

Conduct a vendor evaluation process upon contract expiry, ensuring that the best forwarder/service provider is chosen based on criteria such as reliability, cost-effectiveness, and service quality.

Budgeting and Financial Management:

Develop and manage budgets for operations-related expenses and monitoring expenses to ensure adherence to budgetary constraints.

Audit and Compliance:

Ensure compliance with relevant regulations and company policies related to procurement, order processing, and logistics, supporting internal and external audits as needed.

REQUIREMENTS

- Bachelor’s degree in business administration, Supply Chain Management or a related field.

- Proven experience in operations management, preferably in a distribution and technology sector.

- Strong leadership skills with the ability to motivate and manage a diverse team.

- Excellent analytical and problem-solving abilities, proficiency in relevant software and systems for inventory management, procurement, and logistics.

- Effective communication and interpersonal skills, with the ability to thrive in a fast-paced environment and meet deadlines.

Join a dynamic back-office development team where you’ll be responsible for designing and delivering high-performance software solutions for the Automatic Fare Collection (AFC) system. This is a great opportunity to work on complex, high-volume systems that power public transportation infrastructure. Your role will involve everything from gathering requirements to development, documentation, and ongoing support of the software.

Key Responsibilities:

• Requirements Gathering: Work with stakeholders to understand and collect software requirements.
• Software Development: Design, develop, and maintain software for high-performance back-office AFC systems.
• SDLC Documentation: Prepare comprehensive documentation throughout the Software Development Lifecycle (SDLC), including business rules, architecture, design specs, interface specs, testing specifications, and operational manuals.
• Application Support: Provide day-to-day application support, troubleshooting issues as they arise.
• Collaboration: Collaborate with users to address design, development, and testing challenges, ensuring software meets user needs.

Job Overview:

We are seeking an experienced and dynamic Service Delivery Manager (SDM) to oversee the delivery of Microsoft 365 (M365) Managed Services. The SDM will manage the service management framework, ensuring that service levels meet the agreed-upon Service Level Agreements. The ideal candidate will have a strong background in service delivery management, incident and problem management, and a keen focus on continuous service improvement.

Key Responsibilities:

· Ensure service delivery meets the defined SLAs

· Lead and coordinate the Managed Services team

· Oversee the management of incidents and problems, ensuring proper tracking, root cause analysis, and timely resolution.

· Change and Configuration Management:

· Conduct regular review meetings with service providers to discuss performance, address issues, and identify improvement opportunities.

· Service Improvement and Risk Management:

· Manage the transition process for taking over managed services from existing teams or vendors.

Qualifications:

• 5 years’ experience as a Service Delivery Manager or similar role within IT Managed Services.
• Strong understanding of M365 services, including Exchange Online, MS Teams, SharePoint, and OneDrive.
• Experience in SLA management, incident and problem management, and service improvement.
• Solid leadership skills with the ability to manage and guide technical teams.

Skills:

• Excellent organizational and coordination skills.
• Strong communication skills, able to manage stakeholder relationships effectively.
• Analytical thinking with a problem-solving approach.
• Ability to work in a fast-paced environment and manage competing priorities.

Preferred Certifications:

• ITIL Foundation Certification (v3 or 4).
• Microsoft 365 Certified: Enterprise Administrator Expert.
• Microsoft Certified: Security Operations Analyst Associate.

Job Overview:

We are seeking a skilled and dedicated Support Engineer to join our team, responsible for supporting Microsoft 365. The ideal candidate will have a strong understanding of M365 services, including Exchange Online, MS Teams, SharePoint Online, OneDrive, and Intune. You will be responsible for ensuring smooth operations, providing support, and maintaining configurations while adhering to strict security and compliance standards.

Key Responsibilities:

· Daily Operations and Support

· Configuration and Administration

· Service Request and Change Management

· Security and Compliance Management

· M365 License Management

· Proactive Monitoring and Problem Prevention

Qualifications:

• 3 years of experience in administering and supporting Microsoft 365 services.
• Strong knowledge of Exchange Online, MS Teams, SharePoint Online, OneDrive, and Intune.
• Familiarity with Conditional Access rules, DLP policies, and security best practices.
• Hands-on experience with Incident/Problem and Change Management processes.
• Understanding of M365 security and compliance requirements.
• Ability to monitor and manage M365 licenses effectively.

Skills:

• Strong problem-solving and troubleshooting skills.
• Excellent communication skills, both written and verbal.
• Attention to detail and the ability to maintain accurate documentation.
• Ability to work in a fast-paced environment and manage multiple tasks.

Preferred Certifications:

• Microsoft 365 Certified: Modern Desktop Administrator Associate
• Microsoft Certified: Security Administrator Associate

Job Summary:

We are seeking a skilled and dedicated Power BI & Power Platform Support Engineer to join our Managed Services team. In this role, you will provide expert support and troubleshooting for Power BI, Power Apps, Power Automate, and other Power Platform technologies. You will ensure smooth operation, monitor performance, resolve issues, and provide ongoing support to end users and clients to meet service level agreements (SLAs).

Key Responsibilities:

• Support & Troubleshooting:
  • Provide day-to-day support for Power BI, Power Apps, Power Automate, and related Power Platform services.
  • Diagnose, troubleshoot, and resolve technical issues related to the Power Platform, ensuring minimal downtime for clients.
  • Assist users with Power BI report/dashboard issues, including performance optimization, data connections, and refresh scheduling.
• Monitoring & Maintenance:
  • Monitor system performance and implement measures to optimize resource usage and performance across Power Platform services.
  • Manage Power BI environments, including capacity planning, workspace management, and report governance.
  • Administer and monitor Power Automate flows and Power Apps applications for operational continuity.
• Client Engagement & Support:
  • Act as the primary point of contact for clients for all Power BI and Power Platform support-related queries.
  • Ensure timely communication and resolution of tickets in line with SLAs.
  • Document client issues, resolutions, and system changes for knowledge sharing and reporting purposes.
• Development & Configuration:
  • Provide configuration and development assistance for Power BI reports and dashboards, Power Apps applications, and Power Automate flows as required.
  • Collaborate with clients to understand reporting needs, design solutions, and implement enhancements to Power BI reports and Power Platform apps.
• Continuous Improvement:
  • Stay up-to-date with the latest features, best practices, and updates within Power BI and the broader Power Platform.
  • Provide recommendations to improve the scalability, reliability, and efficiency of Power Platform services.
  • Contribute to the enhancement of internal processes and procedures for Power Platform support services.

Qualifications:

• Technical Skills:
  • Strong knowledge and experience with Microsoft Power BI, including DAX, Power Query, and data modeling.
  • Experience with Power Apps and Power Automate (Flow) for designing and troubleshooting solutions.
  • Familiarity with SQL databases and data integration concepts.
  • Knowledge of Azure cloud services, including Azure Data Factory, Azure SQL, and other data-related services, is a plus.
  • Understanding of governance, security, and compliance aspects of Power Platform services.
• Experience:
  • Minimum of 3 years of experience in a similar role supporting Power BI and Power Platform solutions.
  • Hands-on experience in troubleshooting, optimizing, and supporting Power Platform solutions.
• Soft Skills:
  • Strong communication skills and ability to engage with clients and internal stakeholders.
  • Analytical and problem-solving mindset with the ability to prioritize and manage multiple tasks effectively.
  • Customer-focused with an ability to work effectively under pressure and meet deadlines.

Certifications (Preferred but not mandatory):

• Microsoft Certified: Power BI Data Analyst Associate
• Microsoft Certified: Power Platform Fundamentals (PL-900) or Power Platform Functional Consultant Associate

Join a dynamic back-office development team where you’ll be responsible for designing and delivering high-performance software solutions for the Automatic Fare Collection (AFC) system. This is a great opportunity to work on complex, high-volume systems that power public transportation infrastructure. Your role will involve everything from gathering requirements to development, documentation, and ongoing support of the software.

Key Responsibilities:

• Requirements Gathering: Work with stakeholders to understand and collect software requirements.
• Software Development: Design, develop, and maintain software for high-performance back-office AFC systems.
• SDLC Documentation: Prepare comprehensive documentation throughout the Software Development Lifecycle (SDLC), including business rules, architecture, design specs, interface specs, testing specifications, and operational manuals.
• Application Support: Provide day-to-day application support, troubleshooting issues as they arise.
• Collaboration: Collaborate with users to address design, development, and testing challenges, ensuring software meets user needs.

The purpose of this role is to provide technical security assurance, guidance / various levels of stakeholder influence and direction across the APAC (Life) region, focusing on project lifecycle and security related improvements to IT\business process. This is a hands-on type of role, and the incumbent will be responsible/ownership for helping ensure and assure that what projects deliver is safe and secure, and compliant to our Information Security policy and standards. This role reports to the Head of Technical Security, primarily responsible for APAC Life but will also be a primary delegate in other areas that need leadership based on manager capacity/availability.

Responsibilities

• Security assurance, assessments, advisory of Chubb Life IT and Business projects. Build Permit & Agile.
• Security assurance, assessments, advisory of Chubb Life IT for BaU technical security matters, acting as the RISO TechSec lead to the APAC Life business.
• Participate in SDLC and Agile projects as the lead APAC Life lead RISO team security representative, driving good practice through consultancy and advice.
• Monitor and advise on Security issue management identified through projects. Support Security issue escalations to RISO and GIS leadership helping frame and articulate technical security control gaps & weaknesses.
• Provide technical security advise guidance where required aligned to Chubbs Information Security policy, standards, and industry practice.
• Help support, implement, and monitor standards with regional\outsourced Life IT and Development
• Collaborate, guide, and influence Life IT and Business units, to correct non-compliant processes identified by security tools and processes, with a focus on local requirements where necessary.
• Identify gaps in technical security policy and process, help develop standards and processes.
• Assist and contribute to strategic, global, and regional security project plans and deployment within Life.
• Provide metrics and mechanism for gathering metrics for relevant areas of responsibility when required supporting Technical security and RISO Cyber governance requests and activities.

Qualifications

• Good knowledge working knowledge of securing applications managed in modern stacks such as CI/CD pipeline, Containers, and hybrid cloud / multicloud.
• Proven ability to adapt to fast paced and changing environment and driving for positive outcomes.
• Excellent communication skills, ability to explain technical issues to mixed audience ranging from technical to business, project management to leadership
• Knowledge of project lifecycles, with working experience of Agile project methodology
• Good understanding of Securing IT technologies such as networking, servers, IOT etc.
• Demonstrated ability to understand and analyse complex business processes and technologies to make sound recommendations to constituents
• Experience interpreting and applying information security standards and frameworks (e.g., ISO/IEC 27001/27002, PCI-DSS, NIST Cybersecurity Framework, etc.)
• Experience within the insurance industry or financial services preferred
• At least 5-10 years IT experience, working in a technical discipline
• At least 5-10 years working experience of security technologies
• At least 5-10 years’ experience working in a technical managerial role, with exposure to senior management and decision making