As a Business Analyst, your band of adventurers rely on you to identify and analyze our clients’ requirements and then build them in the form of magnificent IT solutions. It is in no way an easy task, but it is key to accomplishing missions.

Responsibilities:

• Analyze and identify complex system's needs
• Communicate the client's requirements to the project team
• Provide IT-based solution and model
• Deliver technical documentation and IT solution proposals
• Support IT-based project and product management
• Enhance and document internal and external business process
• Research, document, and adapt new stack technology
• Have fun with the Analyst team.

Requirement

• Minimum Bachelor Degree from a reputable university
• Minimum 2 years’ experience as an Information Technology Business/System Analyst
• Strong analytical thinking to explore our journey and marvelous skills to work in a team, also have a keen attention to each of details
• Has experience in writing software requirement specification/technical design documents.
• Has experience in IT testing (Writing test cases, executing testing, supporting UAT)
• Good written and verbal communication skills
• Having a data analytic background will be preferable
• Strong analytical thinking to explore our journey and marvelous skills to work in a team, also have a keen attention to each of details
• Singaporean / Singapore PR that may apply

We are looking for a dedicated Senior Security Engineer to enhance our cybersecurity posture and ensure compliance across our operations at the client site. The successful candidate will be adept at triaging, understanding, and responding to threats identified by common Security Orchestration, Automation, and Response (SOAR) tools and Security Information and Event Management (SIEM) systems. Experience with TrendMicro, Fortinet, and an understanding of Network Detection and Response (NDR) and Managed Detection and Response (MDR) are critical.

Responsibilities:

• Monitor and analyze data from SIEMs and SOARs to identify and understand potential threats.
• Manage and configure cybersecurity tools such as TrendMicro and Fortinet to protect against threats.
• Provide feedback on compliance and work with teams to enhance cybersecurity measures.
• Develop and maintain an organization-wide cybersecurity framework that aligns with industry best practices and regulatory requirements to decrease threats and vulnerabilities.
• Lead incident response activities, including investigation, documentation, and coordination with relevant stakeholders to mitigate impacts.
• Conduct regular security assessments and penetration testing to identify vulnerabilities and implement corrective measures.
• Develop security awareness training programs to educate employees about cyber threats and safe computing practices.
• Manage security projects to enhance the organization's defense capabilities, including the selection and implementation of new security tools and technologies.
• Provide expert advice on data protection strategies, encryption technologies, and access control mechanisms to protect sensitive information.
• Liaise with external security organizations, industry groups, and regulatory bodies to stay updated on emerging threats and compliance requirements.
• Manage the security ticket lifecycle, from initial report to resolution and closure, prioritizing based on risk and impact to the business to ensure compliance with SLAs.
• Conduct regular reviews of security incident and request handling processes to identify opportunities for improvement, driving initiatives to enhance response times, effectiveness, and client communication.
• Provide detailed reports and analysis on security incidents and resolution performance, contributing to continuous improvement in security services and SLA adherence.

Requirements:

• Bachelor's degree in Cybersecurity, Information Technology, or a related field.
• Minimum of 5 years of experience in cybersecurity, with a strong background in threat analysis and protection.
• Proficient in using TrendMicro, Fortinet, and other cybersecurity tools.
• Extensive experience in conducting security assessments, technology consultations, and leading the deployment of cybersecurity measures within complex environments.
• Recognized as a Subject Matter Expert in cybersecurity, with deep knowledge of SIEMs, SOARs, TrendMicro, Fortinet, and an understanding of XDR, NDR and MDR technologies.
• Proven ability in developing and implementing comprehensive security frameworks and policies that meet industry standards and regulatory requirements.
• Certifications in cybersecurity (e.g., CISSP, CISM, CEH) and experience with ITIL service management practices related to security management.
• Strong problem-solving skills, with the ability to quickly understand and mitigate threats, ensuring business continuity and compliance with SLAs.
• Ability to effectively communicate security risks and strategies to non-technical stakeholders, facilitating informed decision-making and fostering a culture of security awareness.

What we offer in return:

● Amazing colleagues and culture that encourages you to do your best work while staying authentic and work rhythm that suits you and your team. We focus on outcomes and believe that you can deliver your best work, working anywhere, anytime.

● Amazing colleagues and culture that encourages you to do your best work while staying authentic and work rhythm that suits you and your team. We focus on outcomes and believe that you can deliver your best work, working anywhere, anytime.

● Wellness first. We believe that wellness goes beyond team celebrations and birthday parties.

Our holistic approach to wellness gives you opportunities to recharge, connect and explore, at and outside work. In addition to the standard leave entitlements, we offer:

o 1 day of wellness leave every quarter for you to take for your health and wellbeing, and explore your personal passions.

o 20 days to work from anywhere each year, allowing you more flexibility to explore and connect with your interests while delivering work you will be proud about.

About Us

When you work with us, you’ll find that we deliver results; without compromising on respect. We value each other’s differences while recognising individual strength.

We are the world’s leading contract logistics company. We create competitive advantage for our customers through customized warehousing and transportation services. We combine our global scale with local knowledge and sector expertise.

At DHL Supply Chain (DSC), there's more to a role than the work we do. Whatever your role is, we never forget that you make us who we are. We work hard to make sure a career with DHL is as satisfying and successful as it can be.

Join a supportive work environment where you’ll have the tools and training you need to grow and succeed.

DHL Supply Chain is Great Place To Work® certified.

Service Logistics IT unit supports bringing in new sales, managing projects for onboarding of new customers as well as providing Business Analyst expertise in solutioning of IT systems.

Responsibilities

• Provide system solution that meets customers' requirements
• Manage and implement projects and change requests related to corporate systems
• Provide overall training to AP countries on systems and process deployments
• Convert functional requirement to system requirements, document the EDI specs & involve in testing and implementation activities
• Act as a single point of contact in AP for all training related implementations
• Bridge current gaps amongst AP operations and to ensure constant alignment between systems and operations leads
• Liaise closely with global and regional team to share and develop best practices
• Lead and support Regional initiatives to ensure a deep understanding of information associated with assigned clients, including SOPs and SLAs.
• Provide continuous operational support / guidance and information on systems training, processes introduction to operational users and updating internal stakeholders
• Work closely with regional teams from implementation to deployment phases to ensure timely and successful implementations that meet budgets and quality standards
• Serve as training point of contact for WMS and Technical Services applications on Service Logistics activities
• Analyze customer requirements and propose solutions, prepare documents specifications to regional and countries
• Validate and act as one of the reviewers for regional SOWs and country CWIs
• Provide regular updates on training progress to management and sponsors to enable overall training progress monitoring
• Drive best practices and training alignment amongst regions
• Demonstrate an ability to influence decisions / actions of country line and functional personnel by providing value-added inputs into the organization’s business processes
• Manage a matrix team that holds collective responsibility for the successful implementation of a customer’s logistics solution
• Manage countries in implementation and training planning with regards to resource requirements and skill set upgrade

Requirements

• Strong understanding of Service Supply Chain management principles, Service Logistics aftermarket operations, and equipped with strong training and IT implementation skills
• Good knowledge of warehouse management systems (preferably from a warehouse operations perspective) with some basic experience in warehousing and transport solution design (preferred)
• Strong analytical and problem solving skills with ability for quantitative analysis and modeling
• Good communication, presentation, facilitation, negotiation, interpersonal and intercultural skills, with an ability to work collaboratively with diverse groups on region-wide projects
• A positive and contributory attitude and strong team player
• A results-oriented multi-tasker with the ability to work under stress and tight deadlines while maintaining performance
• Total dedication to, and focus upon, servicing and supporting both internal and external customers; has the ability to work close together with other functional disciplines
• Able to handle ambiguity, resourceful and possessing the initiative to drive towards the end goals
• Computer literate (SQL ,Oracle, Excel, Word, PowerPoint, Outlook) with a comprehensive knowledge of DHL systems relating to customer service. It is expected that the individual will have exceptional skills in PowerPoint and Word
• Breaks down a problem, situation or process into its component parts, separates the main issues from side-issues, understands the nature of parts and their relationship to one another.
• Sets clear and realistic goals and objectives. Establishes a course of action and a sequence of steps to ensure that activities and objectives are efficiently achieved.
• Is focused on identifying and understanding each customer’s needs. Expresses and act on desire to assist customers in an efficient and friendly manner
• Makes timely and appropriate choices based on accurate analysis and experience. Uses sound judgment even in conditions of uncertainty. Anticipates impact of decisions and plans how to manage risk
• Continually seeks to accomplish critical tasks with measurable results. Overcomes obstacles and makes adjustments to achieve results. Focuses self and others to achieve targets aligned with business goals
• Works cooperatively with others to achieve target and objectives.
• Provides both verbal and written information in a timely, clear and concise manner. Expresses ideas effectively, adjusting style, tools and mode to the needs of others

Duties & Responsibilities [Lead OpenText Architect]

· Lead design and architecture of Java and OpenText ECM Projects Implementation

· Lead technical solution in OpenText bids/proposals.

· Interacting with the project team to understand the requirements and help define solutions to address the client’s needs.

· Key presenter for OpenText proposals or technical solution discussions

· Mentor for the technical team for OpenText project implementation

· Define technical solution risks for any OpenText projects/proposals.

· Analyse user requirements and perform estimations.

· Review and ensure the quality of project deliverables.

· Demo project/product release to key stakeholders

· Participate in defining technical direction and solution strategy.

· Provide assistance and support with OpenText ECM technical-related issues and Security Vulnerabilities issues to the customers.

· Establish and maintain processes for managing scope during the project lifecycle, setting quality and performance standards, and assessing risks.

· Assign and monitor resources to ensure project efficiency and maximize deliverables.

· Report project outcomes and/or risks to the appropriate management channels and escalate issues, as necessary, according to the project work plan.

· Produce Technical and Operational documentation.

Job Qualifications/ Skills Requirements

· Candidate must possess at least a bachelor’s degree in computer science, Business, Engineering, or similar field or equivalent in a technical field.

· Candidate must be certified in OpenText development and functions.

· Candidate with PMP and Agile Scrum certified will be an advantage.

· Minimally 16+ years of working experience in the design and architecture

· Experience in preparing project deliverables such as OpenText ECM Technical Design Document, etc.

· Experience in technical skills and knowledge in development using Java, Dot Net, K2 and Pega.

· Participate in defining technical direction and solution strategy.

· Working experience with one or more supporting technologies: Windows Servers, Unix Networking, and Databases.

· Proficient in techniques for performance testing and tuning RDBMS query performance

· Technical Knowledge of Storage, Network and Compute (Windows, UNIX, Linux) environments.

· High Availability, Disaster Recovery, Business Continuity, Data Management, Capacity Management, and/or Application Service Resiliency.

· Sound knowledge of application sizing and fair knowledge of HW infra.

· Good understanding of internet protocols, network and application security methods.

· Ability to multi-task in a fast-paced environment.

· Good communication skills in both written and oral with cross-cultural competence.

Role Purpose

Support to implement Business Intelligence, Data Analysis & Digital plans. To identify data science, business intelligence, reporting, and data analysis needs and provide data that is accurate, congruent, reliable, and in line with overall business objectives and needs. Understand, describe, and quantify business processes and translate them into Data analytics needs along with group guidelines and policies.

How will you contribute to the success of DHL?

• Support the execution of data analytics projects by understanding and translating business context and facts into business intelligence and data science needs with little project manager supervision.
• Analysis of the business processes as well as the derivation of problem areas and analytical requirements.
• Interpret the model results in the business context and prepare them for discussions with the business.
• Help deploy solutions across regions and countries.
• Support to implement Business Intelligence, Data Analysis & Digital plans to identify digital automation, business intelligence, reporting, and data analysis needs and provide data that is accurate, congruent, reliable, and in line with overall business objectives and needs, Group guidelines, and policies.
• Support the anchoring of data-driven decisions in operating business through the building up of specialist methodical knowledge and knowledge transfer from completed projects.
• Support identification of new Data Analytics needs and opportunities.
• Contribute to process improvement in the working area.
• Support the definition of project contents, deliverables, and timelines.
• Implement best practices and lessons learned on business analysis and translation to and from data scientists.
• Largely independent preparation and presentation of results and implications of Digital Automation projects.
• Verify the accuracy and plausibility of analytics outcomes and communicate as such.
• Support onboarding of new team members.
• Derive analytical requirements, select, and interpret the results in consultation with the project lead.
• Data ability to gather, analyze, and mine data statistically.

Requirements

• Master's University degree in Business or equivalent work experience.
• With more than 2 years of experience, affinity with BI and Data Science is beneficial.
• At least 5 years experience in business analysis and/or leading (global) projects.
• Experience with project methodologies such as Agile methodology is a plus.
• Innovative, creative mindset Self-motivated, energetic, and enthusiastic.
• Analytical and process thinker with the ability to challenge the status quo effectively and constructively.
• Team player with a can-do attitude, continuously learning, and self-motivated.
• Strong communication skills, both verbal and written.
• Excellent influencing and persuading skills, strong ability to motivate and convince.
• Ability to overcome the complexities involved in changing complex processes, systems, and habits.
• Microsoft Excel and/or Access experience.
• Experience with Power BI is a plus; Python programming skills are a plus.
• Strong interest in Creating Value with Data.

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

We are seeking a highly skilled and motivated Cloud Security Specialist to join our dynamic team and play a pivotal role in ensuring the security, integrity, and compliance of our cloud-based systems and applications. As a Cloud Security Specialist, you will work collaboratively with cross-functional teams to design, implement, and maintain robust security measures that protect our organisation's assets and data in cloud environments.

• Cloud Security Strategy: Develop, implement, and maintain an effective cloud security strategy and architectures that adhere to best practices, industry standards, and regulatory requirements.

• Security Architecture: Collaborate with engineering teams to design and implement common cloud security architectures, ensuring principles of least privilege, zero trust, defense in depth, and security by design.

• Infrastructure Security: Implement and manage security controls for cloud infrastructure components, including networks, virtual machines, containers, and serverless services. Apply security groups, network segmentation, and encryption to safeguard data in transit and at rest.

• Identity and Access Management (IAM): Design and enforce robust IAM policies to manage user access, authentication, authorisation, and privilege escalation within cloud environments.

• Security Monitoring and Incident Response: Set up and manage continuous security monitoring, threat detection, and incident response processes for cloud environments. Respond to security incidents, perform root cause analysis, and implement preventive measures.

• Vulnerability Management: Conduct regular vulnerability assessments to identify and remediate security weaknesses. Know how to apply patches and updates in a timely manner.

• Security Compliance: Ensure and assess cloud environments adhere to relevant government ICT/SS compliance frameworks and regulations.

• Security Automation: Build and maintain security automation scripts and tools to streamline security processes such as provisioning, configuration management, and incident response.

You will be a Great Fit if you:

• Have experience (2+ years) in designing, implementing, and managing security solutions in cloud environments (AWS, Azure, Google Cloud, etc.).

• Understand cloud security principles, including network security, encryption, identity and access management, and security monitoring.

• Are proficient in security tools such as intrusion detection/prevention systems, SIEM, vulnerability scanners, network firewalls, and web application firewalls.

• Have implemented security best practices within Infrastructure-as-Code frameworks (e.g. Terraform, CloudFormation, Ansible) to ensure secure infrastructure provisioning and configuration management.

Good to Have:

• Relevant professional certifications such as Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, or equivalent.

• Proficiency in scripting or programming languages (e.g., Python, PowerShell) for security automation and orchestration.

• Experience in using containerisation technologies, such as Docker, Kubernetes, AWS ECS, and knowledge in securing containers.

• Proficiency in implementing DevSecOps and CI/CD pipelines, with experience in relevant CI technologies such as Git, Gitlab, and Jenkins. Hands-on experience with security testing tools (e.g., SAST, DAST, SCA) and vulnerability management.

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14414670/91f7c252-23c8-1ede-b5f2-dfee8c305275

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

• Work with key stakeholders to ensure high cybersecurity posture of HDB applications through activities such as the following:
i. Develop and promote Secure Coding Practices.
ii. Collaborate with project teams to ensure compliance with Vulnerability Assessment & Penetration Testing requirements.
iii. Review security test reports and provide recommendations on remediation measures to application project teams, where necessary.
iv. Procure and maintain security testing tools to support Static Application Security, Dynamic Application Security Testing and Vulnerability Assessment & Penetration Testing.
v. Study and propose CI/CD pipeline to support DevSecOps.
vi. Perform Software Composition Analysis.

• Develop, maintain, and operationalise a Threat Risk Assessment framework for HDB to identify and mitigate the threats and risks in its IT systems and programmes.

• Manage and promote IT security awareness and outreach programme.

You are also to:
• Keep abreast of the latest industry Software security practices and technologies to manage emerging threats and vulnerabilities.
• Recommend and implement appropriate measures to improve the HDB Applications security posture.
• Lead and/or participate in the research and adoption of new technological advances and best practices in software security to mitigate future security threats.

You will be a Great Fit if you:

• Possess a strong background in software development with popular web/mobile technologies such as HTML, Javascript, Node.js, Angular, Java, ASP.NET, C#, PHP, Ruby, etc with knowledge on ICT Security, Information Security and Secure Coding.

• Have at least 2 year of relevant ICT security work experience.

• Possess one or more appropriate IT security certifications, such as CSSLP, CISSP, CRISC, CISM, CISA, CEH, OSCP, CREST etc.

• Have strong knowledge and experience in Information and Cybersecurity Risks, Vulnerability Assessment & Penetration Testing, Cloud Security, Container Security, Mobile Security, DevSecOps, Cryptography and other industry IT/cyber security best-practices.

Good to Have:

• Able to drive new initiatives for Cloud Security.
• Possess good interpersonal and communication skills.
• Proactive to troubleshoot with excellent problem-solving skills.
• Fluent in written and spoken English.
• Meticulous attention to details
• Willing to work beyond business hours including weekend when necessary.

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14414808/91f7c252-23c8-1ede-b5f3-387aa11e3275

About Us!

As a Systems Analyst you are part of HDB’s IT Group to drive digital transformation. You will be part of an application development team that will leverage on innovation and technology to enable business excellence. You will have the opportunity to work closely with various stakeholders in HDB to manage, design and develop systems that support HDB’s wide spectrum of business domains.

What Will You Do?

We will provide a career, not only a job.  Your total development as an ICT professional is our focus rather than just getting a job done. There will be ample opportunities to build on your competencies with the training and exposure that we have available in the many technical platforms and range of digitalization projects we have.

You will be a Great Fit if you:

- Understand HDB’s business processes and work with users to design and develop an end-to-end solution
- Provide advice and assistance to business users in the effective use of application system and information technology
- Manage the development of the application system and ensure the project is implemented within budget and according to schedule
- Design solutions that are of quality and functional to ensure a good user experience
- Monitors the performance of the application and work with relevant stakeholders to troubleshoot any issues surfaced in the production environment
- Work closely with various technical, solution and information architects to ensure the application developed is robust and align with the Enterprise Architecture
- Produce technical documentation for application systems.
- Have a keen interesting in IT / programming / system designs
- Good understanding of SDLC
- Experience in application development using the following technologies and programming languages such as Mobile, web, object-oriented programming, SQL, Java, JavaScript etc

Good to Have:

- Experience/knowledge in Scrum /DevOps concepts
- Experience/knowledge in the various technologies supporting CI/CD such as Git, Maven, Jenkins, etc
- Experience/Knowledge in Cloud, microservices architecture and container technologies such Docker, Kubernetes, etc
- Great Attitude to bring the best out our team
- Team Player; we work together as a team
- Autonomous & Take ownership

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Entry level applicants are welcomed to apply.

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14414880/91f7c252-23c8-1ede-b5f3-81a50057d275

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

• Develop, maintain, and operationalise a Threat Risk Assessment framework for HDB to identify and mitigate the threats and risks in its IT systems and programmes.

• Work with key stakeholders to ensure high cybersecurity posture of application systems through activities such as the following:
i. Promote secure coding practices.
ii. Review of Vulnerability Assessment and Penetration Testing (VAPT) Cases
iii. Facilitate remediation of vulnerabilities arising from application security testing
iv. Setup DevSecOps through CI/CD pipeline
v. Securing Cloud Workloads
vi. Procure & Maintain Security testing Tools/services to support source code review and VAPT.

• Related works include Threat Risk Assessment, project specific cybersecurity specification, cybersecurity proposals evaluation, cybersecurity design review, System Security Acceptance Test and review, Vulnerability Assessment and Penetration Test.

• Manage and promote IT security awareness and outreach programme.

• Keep abreast of the latest industry ICT security practices and technologies as well as emerging threats and vulnerabilities and recommend appropriate controls for implementation to improve the enterprise security posture.

• lead and/or participate in the adoption of new technological advances and best practices in infrastructure security systems to mitigate security risks.

You will be a Great Fit if you:

• You should possess a strong background in ICT Security, Information Security, Information Technology, Computer Science, Cybersecurity or equivalent.

• At least 2 years of experience in ICT works involving the setup, development, and management of web-based systems, with at least 2years of relevant ICT security work experience.

• Preferably possess one or more appropriate IT security certifications, such as CISSP, CRISC, CISM, CISA, CEH, etc

• Preferably with strong knowledge and experience in information and cybersecurity risks, controls, vulnerability assessment/penetration testing, compliance, and industry IT/cyber security best-practices.

Good to Have:

• Domain knowledge of access control; telecommunications and network security; cloud security; Cybersecurity & information security governance and risk management; software development security; cryptography; security architecture and design; operations security; security incident response and management; business continuity and disaster recovery planning; legal regulations, investigations, and compliance; physical (environmental) security

• Knowledge in IT security principles and IT controls as well as industry best practices and frameworks pertaining to IT Controls (IM8, COBIT, ISO27001/2 etc.)

• Good understanding of the current IT/Cyber Security landscape Great Attitude to bring the best out our team
• work beyond business hours including weekend when necessary.

• possess good interpersonal and communication skills.

• demonstrate a strong sense of urgency and have good troubleshooting and problem-solving skills with good attention to detail.

• conduct research on ICT and cybersecurity technologies where necessary to perform the assigned tasks.

• have good command of written and oral English

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14414758/91f7c252-23c8-1ede-b5f3-141f99353275

About Us!

The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

You will be part of the Security Operations Centre (SOC) Team who will be responsible for the following areas Tier 2 SOC Analyst responsible for investigating alerts and incidents escalated by Tier 1 Analysts, Develop and enhance SOC processes and procedures, ensuring effective operations, Coordinate with stakeholders to address, follow up and resolve security alerts. Operate and maintain security monitoring tools such SIEM, EDR and SOAR. Gather and analyse Cyber intel. Conduct Threat hunting. Lead the adoption of new technological advances and best practices in cybersecurity monitoring and response.

You will be a Great Fit if you:

- Demonstrable experience and in-depth knowledge in cyber security operations, cyber intelligence gathering, incident response and investigations.

- Have strong experience in various cyber security technologies such as IDS/IPS, firewalls, SIEM, APT, email security, web security, endpoint security, malware analysis, etc

- Have experience in threat hunting / red teaming will be preferred.

- Have at least 2 years of experience as a Tier 2 analyst in a SOC.

- Have professional certifications would be added advantage: CISSP, GIAC Certified Incident Handler, EC-Council CEH and CSA, or any other relevant qualifications

Good to Have:

- High attention to detail and quality.

- Be able to work under pressure and meet deadlines.

- Must be highly reliable, trustworthy, honest, and commitment oriented.

- Strong written and verbal communication skills

- Autonomous

- Take ownership

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14414711/91f7c252-23c8-1ede-b5f2-ff5ae5a19275

Systems analysts are computer software experts who assess the current state of a company's systems and work to implement new ones to improve performance and efficiency. If you're interested in information technology (IT) and working with software, learning about the typical responsibilities of a systems analyst can help you determine if the role is right for you. Understanding which industries hire these analysts and what skills they have can also aid you in preparing for career success.

JOB REQUIREMENTS:

• Reviewing current IT systems, such as network, software and hardware features for any errors or issues

• Collaborating with employees and department heads to determine which system requirements they need to remain efficient

• Building new systems that address and fix any issues shown in the current systems

• Creating analysis reports that represent the cost-benefit of any proposed upgrades

• Assisting the IT team in implementing any new system that was recently drawn up and approved

• Testing and troubleshooting any recently implemented plans to ensure they're operating efficiently

• Instructing other employees on how to use these new systems through training programs and documents

• Submitting and implementing all systems under strict deadlines and budget restrictions

Forms part of the software development team responsible for the development and maintenance of in-house software and applications. This will drive strategic initiatives for improved business performance and productivity.

KEY RESPONSIBILITIES INCLUDE:

· Analyse, design, development, testing and support of application software systems (in-house developed and off the rack software)

· Ongoing initiatives and proposal for new enhancement projects

· Analyse previous source codes, diagnose defects in applications and fix problems

· Develop user documentation and proper version control and technical documentation of the developed application

· Acceptance testing, including software fault diagnostic and resolution

· Create necessary bug fixes and integrate new enhancements into existing software architecture

· Prepare systems documentations (not limited to meeting minutes, technical documents and user manuals)

· Perform regular Database Administration tasks, Database improvements and support.

· End user support

· Support production system commissioning, server hardening and follow up on vulnerabilities identified during audit reviews and day to day reports by users or stakeholders

· Work with respective system stakeholders on UNIX/system enhancements and improvements on IT operation stability

· To handle other ad-hoc assignments required by the Management from time to time

SKILLS, KNOWLEDGE AND RELEVANT EXPERIENCE

· At least 2-4 years of programming experience using Java or Object-Oriented technologies

· Good communication skills

· Experience in J2EE, JSP, Servlets, HTML, JavaScript, CSS, JSON

· Knowledge in NodeJS will have an added advantage

· Develop web client / server type software based on Tomcat Application Server

· Previous involvement in stages of software development life cycle (SDLC)

· Knowledge and experience with MySQL database

· Familiar with Linux / UNIX environment

· Experience in healthcare applications is preferred

· To liaise with Chinese-speaking associates. Proficiency in English and Chinese is essential.

· Able to work independently and self-motivated with absolute integrity and discretion.

· Highly proficient in MS Office applications (e.g. MS Excel and Power-point).

· Ability to work under pressure and with reliability to perform the tasks assigned.

· Good team player, able to deal with people of all technical levels and backgrounds.

· Self-motivated with the ability to prioritize tasks and work independently or as a team whenever appropriate

· Strong analytical and problem-solving skills

· Enjoy challenges and trying out of new technology and ideas.

· Positive attitude and willingness to learn.

Only shortlisted candidates will be notified.

In house security Officers (day shift) needed in Toa Payoh condominum. Full CPF and benefits, salary up to 2.9k

As an Institution Business Analyst, your role will be to support the facilities under the cluster in strategic planning, integration, data analytics and developing new innovations in enabling technology to support hospital operations with people management.

Roles and Responsibilities:

Strategic direction

• Direct cluster-focused HIT solutions while enabling required alignment to IT technological governance, cybersecurity and strategic direction
• Support Institution Director in strategic IT planning and management that will address both cluster and institution’s imperatives and be aligned with national HIT directions
• Enable and drive innovation and process improvement in institution and cluster's projects to steer towards transformational change for better outcome

Workplan budgeting

• Collaborate with GCIO and Institution Director to identify IT strategic needs and projects for the cluster and consolidate into the workplan
• Input on high level pre-project assessment and feasibility studies to program
• Plan upcoming projects in conjunction with various stakeholders to ensure synergies for deployment
• Evaluate and prioritise cluster-specific projects for implementation to finalise projects for the work plan

Oversee project approval and delivery

• Manage stakeholders to obtain approval for projects from users
• Collaborate with Program and Project Delivery Teams to determine and manage project requirements and implementation approach, implementation details including technical knowledge, project staffing headcounts, project man-day costs for work plan
• Review risks to ensure that projects are completed on time, meeting requirements and within budget
• Conduct prioritization of projects in work plan and adhoc projects
• Oversee KTLO operations in institution to ensure that SLAs are met
• Oversee the cluster and institution portfolio of projects that projects are delivered according to plan (cost, quality, time) with program teams
• Manage vendors contracted for project delivery or KTLO operations together with program teams

People Management

• Identify the necessary competencies and domain experience required for project delivery and maintenance & support functions
• Determine resource allocation matters such as headcount, location deployment of project teams
• Foster better cooperation, communication, knowledge transfers and competency development amongst cluster, institutions and delivery teams
• Provide supervision to delivery resources dedicated to clusters, which includes providing day to day directions of tasks, review and approval of administrative claims and leave approval

Cluster and Institution Outcomes and KPIs

• Formalise SLAs with cluster and institution users
• Manage and report cluster and institutions portfolio for project development and maintenance & support activities to CIO
• Track KPIs and ensure compliance with target ratings
• Oversee and manage cluster and institution IT audits
• Participate in cluster and institution IT governance, workgroups, hospital operations and project steering committees
• Oversee set-up / participate in cluster / national exercises (e.g. BCP, JCI, DR exercise/ mass casualty/ emergency planning)
• Review relevant cluster policies and procedures (e.g. research data policies)

Qualifications/ Requirements:

• Possess a degree in Computer Science, Computer Engineering, Information Technology or any other relevant discipline
• At least 5-7 years of relevant working experience
• Able to write approval / project funding paper for submission
• CITPM / PMP certification will be an added advantage
• Excellent problem solving skills with good written/communication and interpersonal skills
• Possess strong organisational and customer service skills and able to lead and work with cross functional teams
• Experience in healthcare industry is an added advantage

Roles & Responsibilities

1) Traffic control.

2) Daily building patrolling/clocking.

3) Security check on visitors/delivery workers.

4) Assist public/visitors/drivers when required.

5) Member ot CERT team/First Aider/Fire Warden.

Requirements

1) A valid Security Officer License issued by the Security Industry Regulatory Department (SIRD).

2) Able to work 12-hour rotating shift, 4-day work week (including weekends and public holidays).

3) Able to work independentaly as well as in a team.

Job Description

The incumbent is a member of the Managed Services Business Unit (MSBU) Business Planning and Support Team, which is responsible to carry out all aspects of the business and project related tasks assigned by the Business Unit Head/Team Lead, to ensure the smooth running of MSBU’s business operations.

The position requires flexibility, good communication and interpersonal skills. The incumbent has to be highly organized, enthusiastic, responsible, self-motivated, with ability to work independently, as well as part of a team.

Responsibilities:

Project Life-Cycle Activities

• Participate in project life-cycle financial operations from pipeline opportunities, including tender process for Managed Services projects to technically, completion of projects
• Perform analysis on projects’ costs spent and pricing, provide information and insights on expenses and determine profitability margins
• Identify and report on variances on margin growth and recommend actions for optimization/recovery to improve business performance

Business Analysis and Reporting

• Monitor business performance progress through analysis of financial results and business drivers, variances and trend/risks
• Assist in preparing the monthly and quarterly business performance reports and commentary, focusing on sold revenue, sales traction and client profitability
• Perform business operational metrics tracking, revenue recognition analysis, cost analysis and prepare reports and projections based on this analysis
• Evaluate current capital expenditures and depreciation and aid in the capital budgeting and expenditure planning processes
• Perform all relevant regular system checks to ensure the integrity of the numbers
• Support the invoice approval flow and cost allocation for the Delivery team
• Identify and drive process improvements, including developing automated reports, tools and Excel dashboards
• Work closely with Finance, Middle Office, Sales, Delivery and other stakeholder groups in managing information flow
• Liaise with stakeholders to identify business needs
• Review existing business processes to identify opportunities and propose alternative solutions to streamline business processes
• Establish requirements for the implementation of changes in the business processes
• Adopt systematic approach to address complex issues with sound judgement and effective solutions
• Participate in related projects, system implementation and enhancement as required
• Any other ad-hoc duties as required or assigned

Requirements:

• Bachelor Degree in Accounting/Finance/Economics
• At least 1 year of relevant experience in business requirement analysis or related field
• Understanding of ICT industry is an advantage

We are a Japanese manufacturer and distributor of electronic components. The main role is to manage the internal system and troubleshoot issues when required.

Reporting to: IT Manager

【What you will be working on】
- Create & maintain in-house ERP system (Fujitsu (Glovia) system)
- Provide end-user daily support
- Create RPA
- New mapping for EDI customers
- Perform improvement projects to minimize manual jobs in the company (such as preventing manual entry mistakes, etc.)
- Improve data accuracy
- Help other subsidiary office with their ERP system

【What they are looking for】
- Diploma holder in IT or Computer
- At least 3 years experience using Pro-IV programming or experience in maintaining the Glovia system
- Experience in using Oracle, PL SQL statement, and Superlayer
- Willing to learn and able to think out of the box to suggest automation for manual entry
- Training will be provided for junior staff

==========================

For interested applicants, kindly email your latest resume (with stated job position and Ref No.) to: [email protected] with following information in order for us to process your application faster:

1. Reason for leaving past and present employment(s)

2. Expected Salary

3. Availability date

Registration No.: R1874034 (Niltasha Binte Ibrahim)

Recruitment License : 12C5051

Main Responsibilities:

• Produce high-quality cross-border content and industry reports, in English and Chinese.
• Work with the innovation consulting team to serve cross-border enterprises and startups in Asia. This includes analysing customer demands and requirements, proposal planning and project execution.
• Liaise and manage clients from around the world (in English and Chinese).
• Communicate with vendors and suppliers in China and Southeast Asia to execute projects.
• Actively support other projects run by other business units, in Southeast Asia, China, and Japan.

Requirements:

• Strong analytical skills in emerging business models and technologies
• High proficiency in English
• Native proficiency in Mandarin Chinese (strong command of reading, writing and speaking)
• Understanding and familiarity with the Chinese market, ideally lived in China for a few years
• Have experience writing professional business reports in Chinese

The interview process will involve a written test to ascertain the candidate's command of the Chinese language. After that, the candidate will have to go through a spoken test with native Chinese colleagues.

Responsibilities

• Monitor third party security feeds, forums, and mailing lists to gather information related to the client through automated means

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting

• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds

• Review vulnerabilities advisories

• Review and process threat intelligence reports

• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients

• Assess each event based on factual information and wider contextual information available

• Review, propose and generate reports to automate or reduce low value event escalations

• Build rules and intelligence to detect such threats and proliferate to all monitored networks

• Implementing and devising detection method of such threats in our security operations through SIEM Rules, DB scripts etc

• Perform periodic analysis of security events, network traffic, and logs to engineer new detection methods, or create efficiencies when available

• Supports the development of tactics, techniques, and procedures in providing proactive threat hunting and analysis against the available information sources (e.g. Netflow, DNS and Firewall logs, etc.)

• Assist the Security Analysts with the investigative works

• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst

• Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to detection Use Case

• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity

• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT)

• Possessed deep interest in open source research and critical thinking / contextual analysis abilities

• Investigative and analytical problem solving skills

• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security

• Related professional cyber security certification, such as GCIA, CEH, will be preferred

• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor

• Ability to research and characterize security threats to include identification and classification of threat indicators

Responsibilities

• Serve as the principal advisor to Customer’s business systems involving the security of the operating unit’s IT Systems.
• Perform security related statistics assessment, recommendation and reporting
• Develop and maintain baseline security standards (BSS) for servers, databases, network devices and monitoring tools
• Plan, schedule and conduct periodic BSS compliance assessment against servers, databases, network equipment and monitoring tools
• Fronting of Security Audit
• Lead in investigations, identification and managing risks, into Medium to Low Information Security incidents and threat.
• Escalate Critical/High Security incident to Incident Manager and support incident manager in the investigation.
• Oversee resolution of security related incident
• Monitor, analyze, recommend and follow through the appropriate action for security vulnerabilities and patches
• Project Advisory on IT Security and Compliance
• Administration and Control of Privileged Accounts Access Authentication Systems
• Participate in Cyber Security activation and Disaster Recovery exercise
• Perform verification, validation and risk assessment of report generated from Vulnerability Assessment and/or Web Application Penetration Test
• Expected to be attached to customer’s site as and when required.

Job Requirement

• Bachelor Degree or Diploma in Electronics, Computer Engineering or related disciplines.
• At least 3 years of relevant experiences in a cyber security setting.
• Possesses relevant experiences with any of the following:
• Vulnerability Assessment, IDS/IPS configuration/monitoring, Firewalls, TCP/IP packet analysis, Log analysis, and understanding of exploiting vectors
• Familiar with information security requirements/ standards across various industries.
• Working knowledge of best practices for incident response, network architecture, current networking technologies, security requirements, features of networks and applications, Cyber Security trends and related security issues.
• Relevant certifications such as CISSP, CISA will be advantageous

Duties and Responsibilities

• Act as Incident first responder for a 24/7 staffed SOC, reviewing and verifying system alerts
• Assist with the development of incident response plans, workflows, and SOPs
• Maintain security sensors and tools
• Monitor security sensors and review logs to identify intrusions
• Escalate security incidents using established policies and procedures
• Perform initial analysis of security events, network traffic, and logs to engineer new detection methods, or create efficiencies when available
• Work directly with threat intelligence analysts to convert intelligence into useful detection
• Identify incident root cause and take proactive mitigation step
• Perform lessons learned activities
• Provide analysis of security log data from a large number of heterogeneous security devices
• Review vulnerabilities and track resolution
• Review and process threat intel reports
• Implement detection use cases
• Liaise with Ensign customers on security intrusions and provide swift and accurate remedial action.

Requirements

• Diploma/Degree in Information System/Information Security from a recognized institution.
• 0-2 year of working experience in networking environment.
• Basic, yet sound knowledge of network routing and switching fundamentals to include knowledge of Multiprotocol Layer Switching (MPLS)
• Basic, yet sound technical understanding of operating systems, network architecture and design
• Basic, yet sound knowledge of encryption, key management and cryptology
• Proven ability to plan and prioritize work, both their own and that of project team.
• Sound understanding of organizational issues and challenges. Able to work effectively with participants at all levels in an organization
• Ability to analyze problems and determine root causes, generating alternatives, evaluating and selecting alternatives and implementing solutions.
• Possess excellent writing skills and the ability to communicate to teammates as well as technical and executive level staff
• Results Oriented
• Fresh graduates with passion for cyber security are welcome and they will be enrolled in an extensive On-Job-Training (OJT) and training for professional certification

Preferred Skills /Qualities

• Professional information technology/security certifications such as ITIL, CCNA and CEH will be preferred but related qualification (i.e. GCIA, CISSP etc.) will be an advantage

Other Special Working Conditions

• Able to perform 12-hour shift duties (2 days’ work with 2 off-days). Working hours: AM - 8:30am to 8:30pm; PM - 8:30pm to 8:30am. Shift patterns and duration may vary from time to time.

Job Overview

The role of a Cyber Account Managers is responsible for effectively articulating the value of Ensign Infosecurity Cyber Security offerings to commercial prospects and clients through strategic selling skills.

Duties and Responsibilities

· Involved in the direct sales process by managing new and existing accounts

· Develop and lead security account plans and strategies for each assigned account using all available resources (executive sponsors, marketing, product partners, services BU, etc)

· Drive sales revenue growth through new project identification, creation and cross-sell opportunities.

· Forecast and report activity accurately in line with the sales target allocation

· Identify major projects within the accounts and running activities to build a strong client relationship

· Serves as a key point of contact between the client and the organization

· Informs clients of new integrated solutions offerings and recommends integrated solutions that suit clients’ business needs

· Craft high-level relationships within assigned accounts to win incremental product and services business

· Responsible for preparation and submission of bids documents and proposals

· Work with technical resources to present a competitive analysis, proposals and solutions to response to client requirement

Requirements

· Experience selling integrated cyber security solutions (that bring together both hardware and software products) in large or complex deal in commercial sector ($500K+) to achieve revenue/sales targets

· Validated track record of over-achievement

· Able to build and execute on an account plan with a security approach

· Adept at communicating with a largely technical audience

· Able to conduct product demonstrations

· Experience in applying solution-selling methodologies to improve corporate revenue growth

· Track record of closing both tactical and strategic opportunities

Preferred Skills /Qualities

· Good all round knowledge of Security Market in commercial sector

· Direct touch sales combined with experience working in a matrixed organisation

· Good interpersonal, communication and presentation skills

· Self starter

· High level of attention to detail

· Relevant security diploma, certifications or security vendor certifications is preferred

Key Responsibilities:

• Perform administration, support and operation of the project's security solution platforms and supporting infrastructure, focusing on Privileged Access Management (PAM), Network Intrusion Prevention System (NIPS), Wireless Intrusion Prevention System (WIPS), Network Access Control (NAC) and common systems (Windows and Linux OS, System Monitoring, Backup, Hypervisors and SAN Storage).
• Prepare professional reports and slide decks for submission to client on operational status
• Attend operational meetings with client
• Maintain and update documentation for operations, including asset lists, account lists, DR and health check plans
• Identity, evaluate and recommend enhancements to operational processes and procedures.
• Execute changes in accordance with the established change management process
• Support key activities including execution of BCP and DRP
• Implement approved service requests from the client within required timelines
• Support vulnerability assessments and remediate findings
• Support investigation of security incidents

Requirements:

• At least 5 years of experience in mid-sized Day 2 operations, out of which at least 2 years in providing technical support and administration of the focused security solutions
• At least 2 years of experience in supporting common systems and infrastructure is preferred
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Positive working attitude and a team player
• Strong interpersonal and communication skills, as this role entails 50% of time in client premises

Job Description Summary

Our Security Solutions team works closely with other security engineers to deliver security solutions to the project for our customers. You will play a part in the team to research, design, architect and implement security solutions such as Endpoint Protection, Endpoint Detection and Response (EDR), SIEM, SOAR, Threat Intel Platform, etc.

If you are someone with a strong passion in security technologies and is a team player who strives in a team setting, we welcome your application!

Key Responsibilities

• Carry out implementation, maintenance, support and operation of the project's security solution platforms.
• Maintain understanding of the architecture and work with security team to understand the use case and playbooks to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Perform day to day operational task, scheduled change requests, troubleshooting and maintenance of the implementation.
• Develop and maintain automation infrastructure for build and maintenance of security solutions
• Managing of security solutions, including patch management such security solutions.
• Support vulnerability assessments by reviewing and providing remediation to the security hardening of the security solutions.
• Involvement in improving and evolving workflow, processes and best practices to increase system maintenance efficiency and security standards.
• Sharing of knowledge through technical documentation, knowledge based articles and sharing sessions with fellow peers in the team.
• Collaborate with relevant parties and provide consultation as a Subject Matter Expert (SME) to deliver final project outcome
• Reviewing and finetuning firewall rules and IPS signatures for enhanced security controls
• Test and update Endpoint Protection and EDR signatures
• Extracting quarantined malware for reverse engineering
• Creating and maintaining EDR blacklist
• Onboarding new log sources to SIEM and Data Lake
• Crating and maintaining log parsers / data flow for onboarded logs

Requirements

• At least 3 years of experience in providing technical support and administration of the security solutions (Endpoint Protection, EDR, SIEM, SOAR, Threat Intel Platform, etc)
• Working experience in powershell, bash and/or python scripting
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Basic project management skills
• Positive working attitude and a team player
• Passionate in information security and keen attitude to learn
• Professional certificates such as SIEM Certified Administrator, SIEM Certified Architect, SOAR Certified Administrator, equivalent or more.
• Professional training or certificates in Splunk, McAfee, Carbon Black, Anomali, RSA SecurID will be an added advantage
• Disciplines in Computer Science, Computer or Electronics Engineering, Information Technology or related qualifications

Duties and Responsibilities

• Act as Incident first responder for a 24/7 staffed SOC, reviewing and verifying system alerts
• Assist with the development of incident response plans, workflows, and SOPs
• Maintain security sensors and tools
• Monitor security sensors and review logs to identify intrusions
• Escalate security incidents using established policies and procedures
• Perform initial analysis of security events, network traffic, and logs to engineer new detection methods, or create efficiencies when available
• Work directly with threat intelligence analysts to convert intelligence into useful detection
• Identify incident root cause and take proactive mitigation step
• Perform lessons learned activities
• Provide analysis of security log data from a large number of heterogeneous security devices
• Review vulnerabilities and track resolution
• Review and process threat intel reports
• Implement detection use cases
• Liaise with Ensign customers on security intrusions and provide swift and accurate remedial action.

Requirements

• Diploma/Degree in Information System/Information Security from a recognized institution.
• 0-4 year of working experience in networking environment.
• Basic, yet sound knowledge of network routing and switching fundamentals to include knowledge of Multiprotocol Layer Switching (MPLS)
• Basic, yet sound technical understanding of operating systems, network architecture and design
• Basic, yet sound knowledge of encryption, key management and cryptology
• Proven ability to plan and prioritize work, both their own and that of project team.
• Sound understanding of organizational issues and challenges. Able to work effectively with participants at all levels in an organization
• Ability to analyze problems and determine root causes, generating alternatives, evaluating and selecting alternatives and implementing solutions.
• Possess excellent writing skills and the ability to communicate to teammates as well as technical and executive level staff
• Results Oriented
• Fresh graduates with passion for cyber security are welcome and they will be enrolled in an extensive On-Job-Training (OJT) and training for professional certification

Preferred Skills /Qualities

• Professional information technology/security certifications such as ITIL, CCNA and CEH will be preferred but related qualification (i.e. GCIA, CISSP etc.) will be an advantage

Other Special Working Conditions

• Able to perform 12-hour shift duties (2 days’ work with 2 off-days). Working hours: AM - 8:30am to 8:30pm; PM - 8:30pm to 8:30am. Shift patterns and duration may vary from time to time.