On your day to day:

Support Information Security Risk Assessments

• Registration of application assets in Risk Assessment Inventory
• Information Technology Risk Classification
• Coordination of discussions, reviews and approvals from Technology and Business stakeholders

Management of risks related to Third party Mgmt

• Support business partners in due diligence of new and existing third party vendors
• Review gaps identified during assessments
• Facilitate risk reduction discussions and assessment of residual risk for further documentation of corrective action plans and risk acceptances
• Periodic review of External data transfers and their compliance with Citi standards
• Documentation of non-compliances in the Issue Management tools --

1. Data gathering from Tech, Business and IS partners
2. Raising control issues for Non compliances with Citi policy/standards
3. Facilitating discussions for residual risk rating, Reviews with control functions & Approvals as per approval matrix
4. Facilitate periodic review and renewal of Risk Exceptions.

• Follow-up on Regional Security Incidents with involved parties for timely closure. Support periodic Data gathering and Root Cause analysis of security incidents. Monitor improvements based on measures taken.
• Support time-sensitive global IS risk reduction initiatives by partnering with regional and country business partners
• Prepare Management reports, presentations, dashboards for key risk indicators
• Support appropriate data classification for application and infrastructure assets
• Occasional Audit support

Tool familiarity, soft skills and other qualifications:

• Essential: Intermediate to advanced knowledge of Information Security; Project Mgmt skills; Strong communication skills; MS Office - Access, Excel, Visio, Powerpoint

• Desirable: Experience with migration projects; Any InfoSec related certification; MS Project

Responsibilities

• Conduct secure code reviews and vulnerability assessments.

• Collaborate with development teams to implement secure coding practices.

• Use tools like SAST/DAST/IAST for automated security testing.

• Develop and enforce application security policies and standards.

• Integrate security practices into DevOps workflows and CI/CD pipelines.

• Automate security testing using tools like GitHub Dependabot or Snyk.

• Monitor container and infrastructure security.

• Perform manual and automated penetration tests on networks, applications, and systems.

• Simulate cyberattacks to identify security weaknesses.

• Develop detailed reports on findings and remediation recommendations.

• Stay updated with emerging threats and exploit techniques.

• Provide oversight of application security control metrics

• Communicate security risks and recommendations to senior management and other stakeholders.

• Conduct detailed threat modeling exercises for applications, systems, and architectures.

Skills/Requirement

• 4+ years’ experience in the domain of application security in web and mobile and development experience preferably in Java/python/.net

• Strong understanding of OWASP Top 10, secure SDLC, and common vulnerabilities.

• Hands-on experience with tools like Veracode, Checkmarx, or SonarQube.

• Collaborate with DevOps teams to secure CI/CD pipelines.

• Manage the lifecycle of vulnerabilities from detection to resolution.

• Knowledge of CVSS scoring and prioritizing vulnerabilities.

• Familiarity with patch management processes.

• Proficiency in tools like Jenkins, Docker, and Kubernetes.

• Strong scripting knowledge for automating tasks.

• Proven experience in application security, with a strong understanding of web application vulnerabilities (OWASP Top 10, etc.).

• Strong understanding of threat modeling methodologies like STRIDE, DREAD, or PASTA.

Interested applicants may submit your detailed resume to [email protected] .

We regret to inform that only shortlisted candidates will be contacted.

PURPOSE

Minimize and mitigate the risk and protect the organization’s information against a variety of cyberthreats (cyberattacks; theft or corruption from within; etc.), in line with FWD’s risk enterprise risk management framework.

KEY ACCOUNTABILITIES

• Works with IT teams and business functions to make sure that security tools and monitoring applications are compliant with security standards.
• Ensure IT operations and activities comply with Information Security standards set by FWD Group and regulatory standards as required by the Monetary Authority of Singapore (MAS).
• Analyze periodic vulnerability scan reports and collaborate with IT and business stakeholders to remediate identified vulnerabilities promptly. Monitor security patches, updates, exceptions and ensuring timely application across the organization’s systems.
• Analyze hardening configuration reports and collaborate with different stakeholders to remediate identified gaps. Monitor compliance and track exceptions as needed.
• Review and analyze data generated from other Information Security tools and follow-up for remediation action.
• Investigate security alerts and incidents, analyze root causes, and track corrective actions to closure.
• Assist in developing and enforcing security policies, standards, and guidelines.
• Analyze and collaborate with different stakeholders ensure security metric data is complete and accurate.
• Perform periodic Information Security controls as per FWD policies and regulatory compliance bodies (such as hardening configuration review, log reviews, user access review, etc.)
• Collaborate with Group Information Security Team on the various Information Security projects initiatives.
• Collaborate with business functions to ensure employees are aware & trained about cybersecurity issues & practices.
• Other Information Security tasks as required.

QUALIFICATIONS / EXPERIENCE

• Diploma or Degree in IT, Computer Science or equivalent
• At least 5 years experience
• Relevant certifications (e.g., CC, CISSP, CISM, CEH) or strong desire to obtain those certifications are advantageous.

KNOWLEDGE, SKILLS & ABILITY

• Strong analytical skills, attention to detail, and problem-solving abilities.
• Technical skills and hands-on experience with Information Security related solutions considered an asset.
• Good understanding of Cyber Security, IT networking, Windows OS, technical troubleshooting, and problem solving.
• Awareness and understanding of common exploits and vulnerabilities, system hardening and cloud architecture.
• Good communication and analytical skills.
• Sound knowledge of Information Security management frameworks and guidelines such as NIST, ISO 27001, CIS baselines & best practices.

Summary:
The ICT Security Operations Analyst will play a vital role in monitoring, analyzing, and responding to security events for a global Corporate and Investment Banking client. This position focuses on maintaining and enhancing security monitoring systems, performing incident triage, and addressing recurring security issues to bolster the organization's cybersecurity posture.

Responsibilities:

• Perform real-time analysis and trending of security log data from various devices and systems.
• Maintain and manage data sources feeding the log monitoring systems, including development and upkeep of detection and alerting rules.
• Respond to user-reported security incidents and evaluate the type and severity of events.
• Conduct initial triage of security incidents to eliminate false positives.
• Identify recurring security issues, develop mitigation plans, and recommend process improvements.
• Provide technical expertise on networking and security mechanisms, including firewalls and web application firewalls.

Requirements:

• Strong understanding of networking principles and their practical applications.
• Hands-on experience with Checkpoint R81.10 and FortiGate firewalls.
• Proficiency with web application mechanisms and Web Application Firewalls (WAF) solutions.
• Familiarity with security incident detection, triage, and response processes.
• Ability to analyze security log data and develop actionable insights.
• Excellent problem-solving skills with a proactive approach to mitigating risks.

Qualifications:

• Bachelor's degree in Information Security, Computer Science, or a related field.
• 5+ years of experience in ICT security operations or a related role.
• Certifications such as CISSP, CISM, or CCSP are a plus.
• Strong communication skills to interact with cross-functional teams and stakeholders.

Your new company

This is a multinational investment bank.

Your new role

• Consults on-demand with internal stakeholders on alerts and advisories published by regional regulators.
• Responsible to collaborate with internal stakeholders in identifying, onboarding and submitting non-financial regulatory reports (NFRR) change requests related to information security in a timely and accurate manner.
• Responsible to solicit, review and deliver responses on information security processes and controls for regulatory exams, external audits and meetings.

What you'll need to succeed

• Understanding of information security principles, processes, and controls.
• Knowledge of APAC laws, rules, and regulations impacting information security.
• Bachelor’s degree in Information Technology or related field.
• CISSP or CISA Certification preferred.

What you'll get in return

• Market competitive remuneration
• An exciting opportunity to be part of a global organisation

What you need to do now

If you’re interested in this role, click ‘apply now’ to forward an up-to-date copy of your CV, or call Shabnam at Hays on +65 60271964 or email [email protected] for a confidential discussion.

Referrals are welcome.

Registration ID No. R1873584 | EA License number: 07C3924 | Company Registration No. 200609504D

About the role

The position is part of our Cyber Fusion Center’s SOC team and is responsible for real time security event monitoring and security incident investigation.

Job Responsibilities:

• Investigate and review computer intrusions focusing on initial infection vector determination, identification of new indicators of compromise (IOC), and tactics, techniques, and procedures in support of threat detection and remediation.
• Continuously monitor security alerts queue and perform initial triage to identify any false positives and initiate improvement as necessary.
• Monitors health of security sensors and managed security infrastructure, and provide necessary support, including root cause analysis, and prepare incident reports.
• Manage ticket queue and take ownership and responsibility of tickets assigned, within agreed SLA.
• Collects data, evidence, and context necessary for Level 2 escalation.
• Works closely with Level 2 & Level 3 team towards the continuous improvement of the service.
• Ensure that daily operations and tasks are properly completed or followed up.
• Escalate issues and liaise with subject matter experts as required to resolve issues.
• Able to work in day and night rotational shift covering weekend/public holiday.
• Prepare scheduled and ad-hoc security summary report.

Job requirements:

• Diploma/Degree in Computer Science/Computer Engineering/Information Engineering/Cybersecurity or equivalent.
• At least 2 years of knowledge experience with security solutions and tools such as Firewall, Router, Proxy, EDR, PAM, IDS/IPS, SIEM.
• Basic understanding of common networking protocols and system infrastructure.
• Strong analytical, problem solving and interpersonal skills.
• Proficiency in one or more general-purpose programming languages (Perl, Python, PHP, Java, Yara, Regular expression etc) will be a plus.
• Relevant certification e.g., Certified Ethical Hacker (CEH) or Security+ will be a plus.
• Ability to work independently, under the general guidance.
• Working experience and knowledge on system infrastructure with interest of exploring into security domain also welcome to apply.
• Fresh graduates are also welcomed to apply.

• Join one of the world's largest global banks on a 6-month contract, maternity cover with potential for extension

We are looking for a motivated and passionate Cybersecurity Regulatory Specialist to join our dynamic team for a 6-month maternity cover. The Global Information Security Risk, Regulatory Policy team in Asia Pacific provides oversight for holistic alignment across laws, rules, and regulations (LRRs), information security policy, controls, and metrics in Asia Pacific to provide assurance of adherence and to enable GIS to continuously identify, analyze, and resolve cyber security risk in alignment with the company’s risk appetite.

They will be responsible to solicit, review and deliver responses on information security processes and controls for regulatory exams, external meetings, surveys, questionnaires, internal audits, and compliance engagements covering all countries in Asia Pacific. He/ She is required to collaborate with internal stakeholders and various global GIS control owners in formulating such responses for any enquiries. He/ She will also consult on-demand with internal stakeholders on alerts and advisories published by regional regulators.

This role will require competency in information security processes and controls and a strong operational mindset.

Key Responsibilities:

• Responsible to solicit, review and deliver responses on information security processes and controls for regulatory exams, external audits and meetings, surveys/questionnaires, attestations, internal audits, and/or compliance engagements, including obtaining senior management approvals for the release of all responses.
• Consults on-demand with internal stakeholders on alerts and advisories published by regional regulators.
• Responsible to collaborate with internal stakeholders in identifying, onboarding and submitting non-financial regulatory reports (NFRR) change requests related to information security in a timely and accurate manner.
• Assists Regulatory Exam Management team in providing regional governance and support for escalation of potentially regulatory-reportable cyber incidents.

Qualifications & Requirements:

• Ensure team’s processes and playbooks are up-to-date, effective and efficient.
• 5-7 years of cyber security/risk/regulatory experience
• Certification desired but not required: CISSP, CRISC, CISM
• A self-starter, team player with a strong people-influencing skillset
• Strong operational mindset and detail-oriented
• Drive Regulatory Exam Management team’s initiatives including globally driven ones based on annual strategy.
• Comfortable presenting to executives and senior management
• Understanding of information security principles, processes, and controls
• Knowledge of APAC laws, rules, and regulations impacting information security
• Bachelor’s degree in Information Technology or related field
• CISSP or CISA Certification preferred

Why Join Us?

• Work-Life Balance: We believe in maintaining a balance between professional and personal life and are committed to creating a supportive work environment.

If you are passionate about cybersecurity, regulatory compliance, and working with global stakeholders, we would love to hear from you!

Argyll Scott Consulting Pte Ltd

Assistant Manager, Information Systems & Cyber Security

Job Overview: The Assistant Manager, Information Systems & Cyber Security will support the Manager, Information Systems in planning, directing, and overseeing the company’s computer and information systems. The role will involve coordinating tasks related to hardware, software, and network systems while playing a leading role in implementing a cybersecurity framework across both local and regional operations.

Key Responsibilities:

• Develop and manage the organization’s cybersecurity strategies.
• Assess the organization’s IT requirements and identify opportunities to enhance existing products and systems for better productivity, security, and efficiency.
• Advise senior management on system upgrades and investments in new technologies, outlining the benefits for the organization.
• Plan, schedule, and supervise IT projects, including system updates, migrations, upgrades, and planned outages.
• Assist in managing the Information Systems team, provide performance evaluations, and offer guidance for employee development and advancement within the company.
• Identify and facilitate IT training opportunities to ensure employees are equipped to effectively utilize available products and systems.

Requirements:

• Bachelor's Degree in Computer Science, Information Technology, or a related field with at least 3 years of experience in cybersecurity best practices, compliance, and end-user computing.
• Experience conducting security risk assessments and managing incident responses.
• Proficiency in managing Microsoft technologies, including Office 365, Active Directory (ADFS, DHCP, CA, DNS, RMS), and Exchange Service (O365).
• Strong knowledge of security risk management, governance frameworks, compliance (including IT security audits/log reviews), vulnerability management (e.g., vulnerability assessments, penetration testing), application security, and security technologies (e.g., system hardening, IDS/IPS, firewalls).
• Experience with security incident response and security assessments.
• Relevant certifications such as CISSP, CISM, CEH, or other cybersecurity credentials are highly desirable.
• Exceptional project management skills, including experience with budgeting, resource planning, and risk management.

Interested candidates who wish to apply for the advertised position, please click on “Apply”. We regret that only shortlisted candidates will be notified.

EA License No.: 01C4394 (PERSOLKELLY Singapore PTE LTD)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

At least 1-3 years in a cybersecurity role, with hands-on experience in SIEM content
management, network security, threat monitoring, or incident response.
• Strong knowledge of cybersecurity principles, practices, and technologies.
• Expertise in SIEM tools and content management, including rule creation, alert tuning, and report
customization.
• Proficiency with security tools like firewalls, IDPS, antivirus, and vulnerability scanners.
• Knowledge of scripting (Python, PowerShell) for automation within the SIEM environment is a
plus.
• Ability to analyze and interpret security data to identify vulnerabilities and potential threats.
• Excellent communication skills, with the ability to explain complex security concepts to nontechnical stakeholders.
• Strong analytical skills and attention to detail.
• Ability to work on-call or off-hours as needed to respond to security incidents.
• May require occasional travel for training or workshop.
• Experience in the application of threat modelling or other risk identification techniques.
• Detailed knowledge of system security vulnerabilities and remediation techniques, including
penetration testing and the development of exploits
• Breadth of knowledge in information security space with emphasis on TCP/IP network security,
operating system security, common attack patterns and exploitation techniques
• Relevant certifications (e.g., CompTIA Security+, Certified Information Systems Security
Professional (CISSP), Certified Ethical Hacker (CEH), GIAC Security Essentials (GSEC)) are a plus
• Effective leadership skills and a team player.
• Strong sense of ownership and drive

Roles and Responsibilities:

• Monitoring & Management of Network Security Solutions (8*5 on weekdays)
• Implement hardware, install patches and perform periodical upgrades
• Configure, maintain and manage IPSec and SSL Virtual Private Networks environments
• Support Tufin tool for incident management and reporting
• Implement Approved Policy Changes
• Create Certificates, Check the Partition and Issues New certificates
• Troubleshoot NAC Related Issues & Operations Support
• Add / Modify / Delete – Switch / Router / Wireless device to respective Plugin’s
• Continuity & Incident Mgmt. Coordination
• Implement Approved Plugins & upgrades.

Must Have:

• Palo alto Firewall
• Checkpoint Firewall
• Device installation & Upgrade

Good to Have:

• Firewall policy management and troubleshooting
• VPN troubleshooting
• Network & Incident management

About the company

CGS International Securities Pte. Ltd. (CGS International) is an award-winning and market leading integrated financial services provider, ranked among the top securities houses in Asia.

CGS International taps on our wealth of global and ASEAN insights to offer equities trading, leveraged products, wealth management, investment banking, equities research, Shariah-compliant financing, fixed income, currency and commodities, structured products and prime brokerage services in over 15 countries and regions.

Along with its parent organisation China Galaxy Securities, a leading securities house in China, CGS International is trusted by more than 15 million customers globally.

Job Description

1) Process Support:

- Keep up to date with latest procedures, forms and templates

- Assist to raise requests, complete forms, obtain approvals, etc. as required by process

- Track timeline and actions according to plan

- Coordinate and follow up to meet timelines

- Organize and file documents

2) Department Asset Inventory Management:

- Document purchases

- Regularly report expiries in advance and expenses against budget

3) Department Budget Record:

- Populate budget items

- Document submitted and approved budget

- Document allocation method and allocation

4) Department Initiative/Program/Project Tracking:

- Document all initiatives, programs, projects

- Record status in regular department meetings

5) Department Visitor Management:

- Manage access and refreshment if required

- Receive and bring visitors to meeting area

6) Department Communication Management:

- Regularly check department mailboxes, emails, tickets to ensure timely response

- Coordinate and schedule department meetings

- Manage and distribute Work From Home/Office schedule

7) Department Reporting:

- Assist in compiling committee and board reports

- Note and remind presenters of reporting schedules

8) Process Improvement:

Constantly look to enhance current process with better tools or methods

Job Requirement

• Proficiency in MS Office (Word, Excel, PowerPoint) and other office software
• Strong written and verbal communication skills
• Good time management and prioritization skills
• Preferably has experience working with cross-geographical teams
• Proven experience as an administrative assistant or similar role
• Diploma or equivalent
• Proactive
• Keen to learn
• Has an eye for detail
• Willing to share and collaborate

• Experience in an international setting with high adaptability
• In depth understanding of China’s laws (GRC)
• People Manager role with a strong track record in leadership

about the company
Our client is a multinational company and they are a prominent player in the industry, renowned for its extensive brand portfolio, commitment to quality, and dedication to sustainability and social responsibility.

about the job

• Develop, govern and enforce cybersecurity policies, standards, and guidelines to ensure robust security practices.
• Lead evaluations of security and privacy risks, coordinating swift responses to suspected cyber incidents/events.
• Monitor cybersecurity risks and report findings to relevant technical and business executive committees.
• Manage the Information Security GRC team, focusing on all cybersecurity aspects within the designated region, domains, and tech portfolio.
• Proactively drive risk reduction initiatives within the defined scope.
• Ensure effective security measures within the scope of assigned regions, domains, and technology areas.
• Collaborate on cyber strategy and roadmap creation for long-term security goals.
• Drive compliance with internal standards and regional cybersecurity regulations, both internally and externally.

skills and experience required
Minimum of 10 years' experience in Governance, Risk, and Compliance (GRC), with a solid understanding of cybersecurity frameworks such as ISO 27001, SOC 2, MITRE ATTACK, and NIST, as well as expertise in penetration testing and security audits.

Cloud Security and consulting background would be high preferred.

Skilled in managing incident response, evaluating cybersecurity risks, and conducting vulnerability assessments.

Proven ability to lead a team, with a track record of managing at least 2-3 direct reports.

Experience working in a regional setting, with the ability to navigate diverse regulatory environments and cultural considerations.

Whats on offer
The permanent opportunity for an Information Security & Risk Governance Lead (GRC), will pay a salary range of $15,000 - $ 17,000 plus benefits. This opportunity offers hybrid working arrangement.

To apply online please use the 'apply' function, alternatively you can reach me at
https://www.linkedin.com/in/Oliviatoh-032330132/. (EA: 94C3609 / R22109942)

We have an opening for the following position:

Information Systems Assistant Manager

Responsibilities:

• Provide user support
• Managing information technology and computer systems
• Design, develop, implement and coordinate systems, policies and procedures
• Ensure security of data, network access and backup systems
• Act in alignment with user needs and system functionality to contribute to organizational policy
• Identify problematic areas and implement strategic solutions in time
• Preserve assets, information security and control structures
• Install, configure, and maintain desktop operating systems and applications
• Provide Windows Server (2012/2016/2019) administration
• Provide Microsoft 365 administration

Requirements:

• Good networking skills
• Good communication and interpersonal skills
• Strong problem-solving, critical thinking and decision-making skills
• Advanced leadership and conflict management skills
• Excellent attention to detail
• Great project management skills, including organization, planning, time management and prioritization
• Experience with Windows Desktop OS
• Experience with Windows Server OS
• Experience with Microsoft 365

A competitive and attractive remuneration package awaits the successful candidate.

Please submit your resume stating qualifications, work experience, current and expected salary.

• Bachelor’s degree in Quality Management, Engineering, Business Administration, or a related field (or equivalent experience).
• Certification in Quality Management (e.g., Six Sigma, ISO 9001 Lead Auditor, or similar) is a plus.
• Proven experience (typically 4+ years) in quality management or quality assurance roles.
• Strong knowledge of quality management systems, process improvement methodologies, and regulatory standards.
• Familiarity with industry-specific regulations (e.g., FDA, GMP, ISO) depending on the sector.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work independently and collaboratively across departments.
• Proficiency in quality management software, data analysis tools, and MS Office.

At Pontiac Land, our Human Capital Vision is:

Each individual valued, respected and contributing.

Each team cohesive, learning and aligned.

Each leader serving, coaching and modelling excellence.

Exciting benefits and opportunities await talents who join us! We seek to offer the following:

• A nurturing and team-based culture, with structured training and career development opportunities
• Comprehensive medical coverage, health and wellness programmes and Flexible Benefits for customized suite of benefits
• Unique schemes and benefits and inclusive of employee rates at our hotels and retail mall, subsidized lunch, birthday leave, examination leave and volunteer leave.

Job Responsibilities

• Perform Patrolling duties for office towers/shopping malls/residential buildings
• Respond to emergencies which includes but not limit to lift traps, power failure, fire/security alarm activation
• Respond promptly to tenants and guests’ feedback and request
• Report of all security breaches and building defects
• Conduct routine checks to ensure workplace compliance to WSH and other legal requirements, Code of Practice and Singapore standards
• Provide high service standard to tenants and guests towards achieving customer delight

Job Requirements

• Minimum 1 year of related experience as a security officer (Candidates with relevant experience could be considered for a Senior role)
• Valid SIRD Security Licence is required
• Shift duty is required with overtime pay on an 8-hour rotating shift, 6 days a week

Role:

System Administrator (Information Technology)

• Singapore Based (City Hall)
• 5 Days work per week (8.30am to 5.30pm)
• Diploma or above in Information Technology, Computer Sciences, or related disciplines + Relevant Experience
• $3500 to $4000
• Career Progression Opportunities

Job Responsibilities:
Analyse user requirements to design and develop an in-house Accounting & Payroll System using the Software Development Life Cycle (SDLC).
Manage, backup and periodically purge the system source code and databases.
Install and test any software solution before handover to the end users.
Provide Training and User Guide to the end users.
Manage and administer the full suite of Microsoft Office 365, i.e.. Exchange, OneDrive, SharePoint etc.
Provide end-user training and support for the full Microsoft Office 365 suite.
Design and manage the company’s website built on WordPress.
Design and manage the company’s intranet built on SharePoint site.
Liaise with vendors for software licensing matter.
Manage and assign software licenses to qualified users upon request.
Prepare and document IT internal control reports for the Japan Headquarter.
Document asset (laptop) handovers during issuance or return.
Propose, research and procure new devices based on user requests.
Assist and recommend telecommunication products to end users upon request.
Manage and maintain external storage systems, such as NAS.
Respond to IT-related surveys from internal and external sources.
Provide ongoing support to resolve technical issues hardware and software and render ad-hoc support.

#SCR-vicky-wee

✅ Wee Yuan Huan
✅ Reg No: R21100383
✅ The Supreme HR Advisory Pte Ltd
✅ EA No: 14C7279

The Role

We are seeking an Investment Analyst based in Schonfeld Singapore office to provide integrated investment advice to Portfolio Manager. This person should be a team player with excellent communication skills, computer proficiency and high level of professionalism and familiar with Taiwan investment markets and technology sector.

What you’ll do

- Assist portfolio manager on investment research, financial statement analysis covering Asia Pacific including Taiwan market

- Ensure knowledge of entire investment solution suite, recommend investment solutions to Portfolio Manager;

- Prepare meeting materials; generate research materials – proprietary, economic commentary and Bloomberg etc. as needed

- Review exceptions and recommend strategy to resolve exceptions; and

- other tasks or projects as required.

What you’ll bring

What you need:

- A minimum of 7-10 years’ experience in the role of investment industry (such as Investment banks, Hedge Fund or Private Equity)

- In-depth knowledge in investment with focus on Taiwan equity market is a must

- Proven track record in particular with industrial knowledge or experience on financial,technology sector equities will be a strong plus

- Proficient in Python programming;

- Degree or above in computer Science, computer engineering or related disciplines; and

- Business fluent English

About the Role

The Medical Writer and Analyst positions are ideal for those with experience in scientific research and for enthusiastic recent graduates in the sciences who are seeking the opportunity to be part of a growing team. You will be based in our Singapore office working in our Asia-Pacific team, as well as collaborating with colleagues from our UK and US teams.

Medical Writers and Analysts work on projects involving the detailed analysis of data from clinical trials and the assimilation and creative presentation of this analysis in different formats including posters, slide sets, value dossiers, reports and peer-reviewed publications. These deliverables are used directly by our clients in communication with external stakeholders instrumental to the successful uptake of novel therapies. The work is structured on a project-by-project basis and you will usually be working on several projects in different disease areas at any one time.

You will work in project teams alongside experienced colleagues in both the Singapore UK and US offices who provide one-to-one training in the technical aspects of the role, including project management and effective client communication. Delivering project work requires close collaboration with clients and, following a successful induction period, you will increasingly engage in teleconferences and face-to-face meetings with external stakeholders.

Positions are available for those looking for an entry-level role as well as those with some prior experience. We are looking for ambitious individuals with the potential to progress rapidly into more senior roles involving greater project management and client responsibility.

Requirements

We are looking for individuals who are collaborative, self-motivated and enthusiastic, with a passion for scientific writing and an interest in providing a great service to clients. Positions are available for those looking for an entry-level role in the field as well as those with some prior experience.

Essential requirements for the role are:

• A degree level or higher qualification in a scientific discipline (minimum CAP or GPA 4/5 or equivalent). We welcome applications from candidates with a diverse range of specialisms, including but not limited to; biology, chemistry, pharmacy and medicine
• An excellent written and spoken fluency in English in order to deliver high quality scientific materials in English for clients in the Asia-Pacific region
• An ability to communicate scientific materials clearly in both written and oral form
• An excellent understanding of and ability to apply scientific concepts
• A close attention to detail
• An aptitude for and experience of scientific writing which could include dissertations, research summaries, lab reports, poster or oral presentations, peer-reviewed scientific publications, book chapters, grant applications, regulatory documents, and articles for websites or student magazines
• A competency in Microsoft Word, Excel and PowerPoint
• An exceptional level of organisational skills and the ability to effectively manage your time and meet deadlines

No previous experience in this sector is necessary, but you should display a genuine interest in healthcare and an eagerness to learn about new areas of clinical science. Applicants with higher-level qualifications in a scientific discipline are welcomed but this is not a requirement.

Our client is actively searching for a IT Project Manager to join their team!
If you are a dynamic individual seeking a new career opportunity, read further!

The responsibilities of this role are:

• Lead the planning and execution of project
• Manage project plan, schedule, budget and resources
• Manage project team, stakeholders, vendors and outsourcing contracts
• Monitor and report project status to the project steering committee, stakeholders and team
• Deliver project and system documentation according to the Project Development Methodology
• Form good user relations by cultivating trust and building good rapport with users
• Value-add by providing advice on best practices in using appropriate technology
• Review and improving work processes; facilitate and support users' change management process
• Influence alignment of changes with the overall organisation goals
• Conduct post implementation reviews to gather users' feedback
• Assist supervisor to review and QC team members' deliverables

The ideal candidate will need to have the following qualities and experience:

• Degree / Diploma in Computer Science or IT
• At least 8 years of relevant work experience, with a proven track record and minimum 5 years of hands-on experience as a project manager
• Extensive project leadership / management experience and proficient in project management methodology, techniques and tools
• Certification in Project Management (e.g. PMP, CITPM) preferred
• Experience in business process management (preferably in human resources, financial and procurement administration) will be advantageous
• Good knowledge of software development life cycles and structured project development methodology
• Excellent communication (oral and written), interpersonal, conflict management and negotiation skills
• Strong critical thinking and problem solving skills
• Ability to multi-task and take on concurrent projects

Are you passionate about protecting organizations against cyber threats? Our client, a renowned solutions provider, is seeking a skilled Cyber Security Consultant to join their dynamic and expanding team.

Responsibilities:

• Lead project execution, ensuring compliance with security standards
• Conduct security reviews, audits, and testing to identify risks and address vulnerabilities to strengthen overall security posture
• Provide guidance to stakeholders on secure design and risk management practice
• Keep abreast with the evolving cyber security trends and practices

Requirements:

• Preferably 2 years’ consultancy experience in the cyber security domain
• Good working knowledge in enterprise security solutions like Endpoint security, Network Security and Reviewing Security Architecture
• Experienced in managing complex, multi-platform IT projects
• Strong communication and stakeholder management skills

Ready to make an impact in cyber security? Apply now!

The Talent and Key Responsibilities:

• Proven experience in a network support role, with a strong focus on datacenter and building networks.
• In-depth knowledge of firewall management and experience with firewall technologies, including Checkpoint and Palo Alto.
• Proficiency in supporting a variety of network devices, including Cisco routers and switches.
• Familiarity with WAN and LAN technologies, including routing protocols and network segmentation.
• Strong troubleshooting and analytical skills, with the ability to diagnose and resolve complex network issues.
• Relevant certifications in network technologies, such as CCNA, CCNP, Check Point Certified Systems Administrator (CCSA), and Palo Alto Networks Certified Network Security Engineer (PCNSE), are advantageous.

We regret that only shortlisted candidates will be notified.

Please kindly send in your updated CV (please include your current salary package with full breakdown and expected salary) to [email protected]. Your interest will be treated in strict confidence.

People Profilers Pte Ltd

DID: 6950 9738

http://www.peopleprofilers.com

Lim Yi Tian, Candy

EA License No. 02C4944
Registration No. R1109829

We are seeking a highly skilled and experienced Senior Application Security Manager to join our Information Risk Management (IRM) Team. In this role, you will be responsible for evaluating and improving the security posture of our applications by identifying, assessing, and mitigating security risks. You will also provide expert security consultation related to security architecture and conduct comprehensive project and vendor risk assessments. You will work closely with cross-functional teams to ensure our applications are designed and implemented with security best practices.

Key Responsibilities:

• Conduct comprehensive security assessments of applications, including threat modelling, vulnerability scanning, and penetration testing.
• Identify, document, and communicate security risks and vulnerabilities to stakeholders, providing actionable recommendations for mitigation.
• Collaborate with development, operations, and security teams to integrate security into the software development lifecycle (SDLC).
• Lead security training and awareness initiatives for development and operations teams to promote secure coding practices and risk management.
• Provide expert security consultation and guidance on security architecture to ensure the design and implementation of secure systems.
• Perform information risk assessments for new/existing projects, IT outsourcing security reviews, and 3rd party risk assessments and ensure compliance with security standards.
• Provide security consultations to internal customers by identifying possible security threats and determining the best security measures.
• Lead security incident management domain by responding to security incidents and conducting cyber tabletop exercise.
• Stay up-to-date with the latest security trends, vulnerabilities, and technologies to ensure ongoing protection of applications.
• Prepare and present detailed reports and dashboards on security assessment findings and remediation progress to management.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field; relevant certifications (e.g., CISSP, CISM, CEH, OSCP) are a plus.
• Minimum 8 years of experience in application security, information security, or a related field, with a focus on security architecture, risk assessment, and security incident management.
• Strong understanding of application security principles, practices, and technologies, as well as security architecture frameworks and methodologies.
• Experience with security assessment tools such as Burp Suite, OWASP ZAP, Nessus, or similar.
• Proficiency in scripting and programming languages (e.g., Python, Java, JavaScript) for security testing and automation.
• Familiarity with secure coding practices and frameworks (e.g., OWASP Top Ten, SANS CWE Top 25).
• Excellent analytical, problem-solving, and communication skills.
• Ability to work independently and manage multiple projects and priorities effectively.
• Experience in cloud security (e.g., AWS, Azure) and security architecture is a plus.

When you join our team:

• We’ll empower you to learn and grow the career you want.
• We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.
• As part of our global team, we’ll support you in shaping the future you want to see.

About Manulife and John Hancock

Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html.

Manulife is an Equal Opportunity Employer

At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact [email protected].

Responsibilities:

• Security products implementation for Public Key Infrastructure (PKI), Hardware Security Modules (HSM) and Privileged Access Management (PAM).
• Documentation for project requirements.
• Follow project implementation lifecycle.
• After sales support such as product incident escalation and technical support (24x7 SLA).
• Conduct user training and knowledge transfer session.
• Integration of security products.

Candidate requirements:

• Bachelor’s Degree in Computer Science/Computer Engineering/Information Engineering or equivalent.
• 1-5 years’ experience in security system integrator environment.
• Basic knowledge on networking such as TCP/IP, firewall, switching and routing.
• Working knowledge on setting up Windows/Linux servers and VM.
• Coding/scripting knowledge (Good to have).
• Knowledge in products such as Cyberark, Entrust a plus.
• May need to support after office hour and during weekend/public holiday.
• Strong analytical, problem solving and interpersonal skills.
• Keen in cyber security domain.
• Working experience and knowledge on system infrastructure with interest of exploring security product welcome to apply.

As a Systems Specialist, will be providing support in the following areas:

a) Develop and implement a threat hunting framework to provide a comprehensive structure for planning, executing, and managing threat hunting initiatives.

b) Develop and refine threat hunting methodologies and procedures to enhance the organization's ability to detect and respond to advanced threats.

c) Continuously enhance threat hunting techniques, processes, and tools to improve the organization's overall cybersecurity posture.

d) Stay updated with the latest vulnerabilities, security trends, and techniques in cyber threats and hacking methodologies.

e) Conduct research on emerging threats and vulnerabilities and provide recommendations for enhancing the organization's security posture.

f) Conduct proactive threat hunting exercises to identify and investigate potential security incidents and suspicious activities within the network.

g) Document all findings, analysis, recommendations and investigation results in a clear and concise manner and generate reports for management and stakeholders.

h) Develop and tune security monitoring rules, correlation logic, and detection signatures.

i) Be proficient in utilizing various security technologies, including SIEM (Security Information and Event Management) tools, network traffic analysis tools, endpoint detection and response (EDR) systems, vulnerability management system and threat intelligence platforms.

j) Work closely with other cybersecurity teams, such as for incident response, security operations, and threat intelligence, to share findings and collaborate on incident investigations.

k) Develop and implement a cyber intelligence framework to provide a systematic and organized framework for collecting, processing, and leveraging intelligence to enhance HDB's cybersecurity posture and decision-making capabilities.

l) Integrate the cyber intelligence framework with the HDB's Security Operations Center (SOC) and incident response team and ensure that the intelligence gathered is effectively used to detect, prevent, and respond to cyber threats.

m) Continuously monitor and collect information from multiple sources, including threat intelligence feeds, security vendors, dark web forums, social media, and other online platforms, to identify emerging cyber threats and attack trends.

n) Analyze the collected threat intelligence data to identify patterns, trends, and potential cybersecurity risks.

o) Prioritize and triage threats based on their relevance and potential impact to HDB.

p) Conduct in-depth analysis of threat actors, their motivations, capabilities, and tactics, and provide insights on potential risks and impacts to the organization's systems, networks, and data.

q) Produce regular and ad-hoc reports, briefings, and alerts on emerging threats, trends, and risk assessments to relevant stakeholders, including senior management, incident response teams, and other cybersecurity teams. The report shall also provide technical information in a clear and actionable format for various stakeholders.

r) Provide timely and accurate intelligence support during security incidents, assisting incident response teams in understanding the nature and scope of the threat, and providing guidance on containment, remediation and recovery strategies.

s) Support vulnerability management efforts by analyzing threat intelligence data to identify vulnerabilities, exploit trends, and potential targets, and prioritize patching and mitigation activities.

t) Collaborate with threat hunters and other cybersecurity teams to develop and refine threat hunting strategies based on threat intelligence insights and analysis.

Qualifications

a) Possess fundamental application security knowledge like interpretation of HTTP response status codes and WAF violations.

b) Display understanding of network security best practices.

c) Display understanding of techniques in cyber threats and hacking methodologies.

d) Strong problem-solving skills and ability to work under pressure. Willingness to learn.

e) Fundamental skills on Microsoft Office products like Word and Excel.

f) Additional certifications like CCNA, CCNP, CISSP or related certifications are a plus.

g) Must be able to work beyond business hours including weekend when necessary

About the role

The position is part of our Cyber Fusion Center’s managed support and operations team and is responsible for day-to-day support and operations of assigned cybersecurity solutions and platforms.

Job Responsibilities:

• Provide support for assigned security platforms, including onsite troubleshooting, root cause analysis, prepare and present incident reports.
• Provide security knowledge in security architecture recommendation and perform the necessary best configuration.
• Provide collaboration efforts in assisting the SOC teams in incident investigation.
• Manage ticket queue and take ownership and responsibility of tickets assigned, within agreed SLA.
• Perform change requests activities per change window allocated, including planning, review, tracking & verification and documentation.
• Ensure that daily operations and tasks are properly completed and followed up.
• Escalate issues and liaise with subject matter experts as required to resolve issues.
• Support after-office hours activities and standby requirements as necessary.
• Support shift rotation as necessary.
• Prepare activities report and work documentation.

Job requirements:

• Educational background in Information Systems, Cybersecurity or related disciplines.
• 2-5 years of hands-on engineering, support or operations experience in Infrastructure, Network or Security Tools
• Broad understanding of systems, network infrastructure; working experience with databases, LDAP and directory services, application servers, operating systems, and network infrastructure.
• Proficiency in one or more general-purpose programming languages (Perl, Python, PHP, Shell, PowerShell, Windows Scripting, Windows console programs, .Net, Yara, Regular expression) will be a plus.
• Certificates such as ITIL Foundations, Microsoft MCSA, CISA, CISSP will be a plus.
• Ability to work independently, under the general guidance.
• Support after office hour and during weekend/public holiday.