Job Description Summary

We are seeking an experienced Senior Information Security Engineer SME with specialization in anti-malware/anti-virus solutions, Endpoint Detect and Response and Network Intrusion Detection Systems, with log analysis using SIEM tools such as Splunk. The ideal candidate should also have strong experience with standing up solutions selected by the business while providing operational guidance, architecture design, integrations including SSO, SIEM, monitoring and other platform integrations, cyber security expertise, incident response collaboration experience, proficiency in vulnerability detection solutions, File Integrity Monitoring (FIM) control and policy configuration experience, operational acumen, and a solid understanding of TCP/IP networking. This role involves architecting, implementing, and maintaining security solutions to protect our infrastructure and end user computing environments, leveraging platforms such as CrowdStrike Falcon, Microsoft Defender for Endpoint, Skyhigh Web Gateway, Trellix Endpoint Security for Storage, and Cisco Firepower Intrusion Detection Systems. The ideal candidate should also have extensive experience in configuring policy, integrations and providing platform support for multiple SaaS based security tools to act as the internal L3 escalation point for tool users and as a liaison between the users and vendor contacts for tools such as Cisco Umbrella, ThreatConnect and Palo Alto Cortex Xpanse.

Key Responsibilities:

Security Solutions Implementation and Management:

• Anti-malware/Anti-virus/Endpoint Detect and Response: Deploy, configure, and manage endpoint protection solutions to defend users and endpoints from malicious content.
• AV/EDR Policy Configuration: Implement and maintain platforms such as CrowdStrike Falcon, Microsoft Defender for Endpoint to protect against common threats. Configure policies to provide a balance between security and user/endpoint operational impact.

Log Analysis and Monitoring:

• SIEM Utilization: Analyze logs using Security Information and Event Management (SIEM) tools such as Splunk and Datadog to identify and respond to security incidents. Implement and manage log aggregation and monitoring solutions.
• Incident Response: Lead incident response efforts, providing root cause analysis, forensics, and remediation.

Deployment and Onboarding:

• Software Package Deployment: Manage the creation of endpoint security software packages for deployment via software distribution tools such as SCCM, JAMF, Puppet to ensure coverage to all endpoints in the environment.

Vulnerability Detection:

• Endpoint Vulnerability Detection: Manage and operationalize the vulnerability detection capabilities of endpoint security software tools for distribution and ingestion via aggregation platforms for consumption by the vulnerability management teams via platform integrations.

Cyber Security:

• Threat Analysis: Conduct thorough cyber security threat analysis and implement mitigation strategies to protect the organization’s assets.
• Policy Development: Develop and enforce cyber security policies, standards, and best practices to ensure a secure operating environment.
• Risk Management: Perform regular cyber security risk assessments and develop comprehensive risk management strategies.

Cloud Security:

• Cloud Platforms: Leverage cloud security best practices to protect services hosted on AWS, Azure, and GCP. Ensure secure configurations, access controls, and monitoring are in place.
• IAM: Manage identity and access management (IAM) policies to enforce least privilege and secure access to cloud resources.

Networking Expertise:

• TCP/IP Networking: Apply a solid understanding of TCP/IP networking principles to design, implement, and troubleshoot secure network configurations and protocols.

Collaboration and Compliance:

• Team Collaboration: Work closely with development, operations, network, and security teams to ensure cohesive and comprehensive security measures.
• Communication Channels: Utilize various communication channels effectively, including meetings, emails, Slack, and MS Teams, to collaborate efficiently with team members and other stakeholders.
• Compliance: Ensure alignment with industry standards and regulatory requirements such as GDPR, SOX, and PCI-DSS. Participate in compliance audits and risk assessments.

Training and Mentorship:

• Education: Provide guidance and training to junior team members and other stakeholders on best practices for edge and cloud security, including the use and management of WAF, DDoS protection, and bot management products.

Preferred Qualifications:

• Experience: 8+ years of experience in a Information Security Engineer role with a strong focus on endpoint AV/EDR, infrastructure based anti-malware solutions and network IDS products (Crowdstrike Falcon, Microsoft Defender for Endpoint, SkyHigh Web Gateway, Trellix Endpoint Security for Storage, and Cisco Firepower Intrusion Detection Systems.)
• Technical Skills:Strong experience with performing solution stand-up including architectural design and implementation.
  Strong experience with modern antimalware and endpoint detect and response solutions (CrowdStrike Falcon and Microsoft Defender for Endpoint)
  Experience with infrastructure focused antimalware solutions providing secure ICAP server services (Skyhigh Web Gateway)
  Experience with infrastructure focused antimalware solutions providing enterprise storage (NetApp) Antivirus services. (Trellix Endpoint Security for Storage)
  Experience in providing integrations with platforms such as SSO and SIEM tools.
  Expertise in log analysis and monitoring using SIEM tools like Splunk.
  Solid understanding of TCP/IP networking, network security principles, firewalls, IDS/IPS, and secure communication protocols
  Familiarity with cloud security best practices and secure configurations on AWS, Azure, and GCP.
  Knowledge of software deployment solutions and providing packages for deployment tools (SCCM, JAMF, Puppet)
  

Soft Skills:

• Problem-Solving: Excellent analytical and problem-solving skills.
• Communication: Strong communication and collaboration abilities.
• Leadership: Proven leadership and mentorship capabilities.
• Team Player: Strong ability to work effectively within a team environment and collaborate across various teams.
• Adaptability: Ability to work independently and handle multiple, complex priorities in a fast-paced environment.

Details of the Division and Team:

Everyday DB observes thousands of cyber security intrusion attempts. Deutsche Bank’s COO Chief Security Office (CSO) integrates both Corporate Security (CS) and Information Security (CISO) as both teams are responsible for mitigating these risks.

The CSO team enables the business of Deutsche Bank by providing agile security operational capabilities.

With their expertise in Threat Intelligence, Data Leakage Protection, Cyber Threat Analytics, Malware Response & Research, Security Monitoring, Incident Response, Forensics and Vulnerability Management, they provide global services from key locations in Frankfurt, Jacksonville and Singapore while leveraging offshore capabilities in Pune and Bucharest.

What we will offer you:

A healthy, engaged and well-supported workforce are better equipped to do their best work and, more importantly, enjoy their lives inside and outside the workplace. That’s why we are committed to providing an environment with your development and wellbeing at its center.

You can expect:

• Flexible benefits plan including virtual doctor consultation services.
• Comprehensive leave benefits
• Gender Neutral Parental Leave
• Flexible working arrangements
• 21 days of annual paid leave, plus public holiday & Flexible Working Arrangement

Your key responsibilities:

The Deutsche Bank Chief Security Office is looking for an experienced DLP Information Security Analyst.

Adhering to internal and external policies, the role is required to work in a global team to identify and assess technical and personnel security breaches within a heterogeneous business and technical landscape. This will include working with a variety of technologies and business groups to detect, assess and document the escalation of security alerts and consequence management.

Additionally, the role will require collaboration with control functions as well as businesses to identify information that needs to be protected and controls that are best suited to address these requirements.

The work will also involve utilizing vendor solutions, bespoke control applications and supporting the development of team tasks, such as the continual assessment of preventive and detective controls.

• Continuously monitor DLP systems for alerts and act as a subject matter expert for all data leakage investigations globally across all regions where the bank has a footprint.
• Manage DLP incidents, ensuring coordinated response and timely escalations.
• Document all incidents, actions taken, and outcomes. Prepare detailed reports for management and compliance purposes.
• The incumbent also assumes responsibility for overseeing and coordinating all facets of incident management like initial evaluation, stakeholder management, technical triage, and incident resolution.
• Ensure DLP tools and technologies are maintained, optimized, and regularly evaluated through established cyber risk frameworks.
• Cooperate with control functions to understand regulatory requirements and applicable laws.
• Ability to methodically analyze complex data and requirements and provide accountable SME opinion.
• Design and implement new DLP monitoring use cases. Collaborate with business and control functions to identify sensitive information that needs to be protected.
• Propose ways to improve existing process to achieve better operational excellence via automation.

Your skills and experience:

• Minimum 3 years of working experience in either Data Loss Prevention (DLP) or Security Operations Center, with at least 1 year working in an enterprise-grade Operations Center.
• A Bachelor's degree in Information Technology, Computer Science, or a related field is required.
• Working experience with Data Loss related applications such as Symantec DLP, Digital Guardian; and SIEM tools such as Splunk, Sentinel.
• Working knowledge in IT Fundamentals such as networking, hardware/software.
• Analytical and critical thinking with an inquisitive mindset, collaboration, and conflict management with good communication skills.
• Mentor new team members and provide guidance and directions when required.
• Ability to work in fast paced environment and within tight deadlines.
• Certifications such as Symantec DLP certified specialist, CompTIA Security+, CISSP, Microsoft Information Protection, Certified Data Protection Officer etc.

Role is required to be performed on-site at One Raffles Quay office. Relevant vaccination requirements may apply.

How we’ll support you:

• Flexible working to assist you balance your personal priorities
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs
• Training and development to help you excel in your career

About us and our teams:

Deutsche Bank is the leading German bank with strong European roots and a global network. Click click here to see what we do.

Deutsche Bank & Diversity

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

Job Description

You will be a member of the Group Information Security Team responsible for initiating, implementing, and maintaining security products and solutions to support enterprise security.

Key Responsibilities:

•Subject matter expert (SME) for the security systems owned by the Information Security Team.

•Ensure security systems are utilized to their maximum capabilities.

•Plan, identify, assess, design, operationalize, and maintain multiple security-related software and/or hardware.

•Recommend and drive cyber security solutions and initiatives to improve the cyber security of the organization.

•Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.

•Provide security consultancy, technical guidance, expertise, solutions, and education.

•Advise infrastructure teams on security design that is relevant and fit for purpose.

•Identify and assess cyber risks in the IT infrastructure environment.

•Review firewall requests.

•Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines, and deliverables.

•This is an individual contributor role. Deliver tasks with minimal supervision.

•Provide AUDIT support such as PCI-DSS, and Cyber Maturity Assessment.

•Strong communication skills.

•Coordinate and Deploy SIA Group/GIT cybersecurity initiatives in Scoot.

Requirements:

•Degree in IT or related field, with at least 5 years in information security, especially in the cybersecurity space.

•Professional security certifications (SANS, CISSP, CEH, OSCP, CISA, etc) preferred.

•Experience in security products POC and RFQ.

•Prior experience in implementing and maintaining any of the tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM, etc., and/or network security. Able to review firewall requests.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

•Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience is preferred.

•Knowledge of cyber security threats, vulnerabilities, hacking, exploit methods, etc.

•Strong oral, written, presentation, and inter-personal skills.

•Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

We are hiring for Business Information Security Officer who will be responsible for driving information security efforts within the business unit or functional area.

Mandatory Skill Set:

• Serve as a point of contact for BISOs. providing guidance and support to various BUs;
• Ability to prioritize and provide necessary support on the security tasks for designated BUs;
• Offer regular updates or flag outstanding important issues to relevant stakeholders;
• Standardize information security process across BUS/countries. driving the adoption of best practices;
• Bridge gap between local technology or business team with GIS. able to articulate security risks to local teams and contribute back any feedback to GIS;
• Drive the learning culture within the information security team to accelerate skills and knowledge of the information security community.

Desired Skill Set:

• Possess at least one of the following certification CISSP. CCSP. CRISC. or CISM;
• Understand Cloud Infrastructure.

Responsibilities:

• Facilitate the investigation and management of security incidents for designated BUs and communicate to relevant stakeholders;
• Ensure clear documentation of the business justifications, risks, the existing mitigation controls (if any) and relevant approvals are in place;
• Support security assessment for technology solutions for designated BUs;
• Offer expertise to BUs with the help of Group Information Security (GIS) Subject Matter Expert (SME);
• Collaborate with enterprise risk management to conduct risk assessments and support the development of risk treatment plans for the BUs;
• Facilitate the local implementation of group information security initiative for the designated BUs;
• Assist with the security awareness programs for designated BUs to enforce security culture and understand the information security solutions in BUs;
• Help to develop the Business Information Security Officer (BISO) framework / handbook outlining BISOs roles and responsibilities. This standardizes practice across the organization;
• Establish and maintain BISO community to share insights or discussion of findings from audits, incidents, or latest security trend with each BUs to facilitate cross-learning and capture lessons teamed;
• Gather input or recommendations with regards to Group Information Security (GIS) functions and programs from BISOs across various countries/markets. Compile the feedback and contribute to GIS for continuous improvement of the Security Operation Model;
• Collaborate with security teams to develop and implement tailored security awareness programs for business units and devise a structured professional development pathway for BISOs.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE's website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gAHYjij4

• Strong support to invest in information security from the company
• Regional role with an established company

About the company

Our Client is an established company. With rapid expansion plan, they are now looking for a new Information Security Assistant Manager (GRC, ISO27001) to join their team.

About the job

Reporting to the Head of Security, you will be responsible for:

• Leading initiatives to assess the adequacy and effectiveness of IT controls and policies, ensuring that business users are compliant to the IS standards (ISO 27001, PDPA and etc).
• Planning and implementation Information Security, IT Risk Management, IT Audit and IT policy to improve the overall security posture for the organization across Asia. This includes reviewing and maintaining information security polices.
• Designing IT Security framework and roadmap to ensure the availability, integrity and confidentiality of IT system. This includes setting up the best practices and governance for Risk Control Security Assessment (RCSA). Designing processes to identify, improve and optimize IT risk management policies/practices.
• Identifying potential gaps in security control to enhance early detection capability. This is through leveraging internal security data (Performing analysis of forensic evidence, log data, compromised hosts, and network traffic) and external sources (Industry portals and etc) to identify existing gaps in security control and close the gaps.
• Overseeing the development and execution of corporate security awareness and training programs to business stakeholders to prevent and limit the impact of a potential cybersecurity event
• Monitoring compliance, keep abreast of legislative and regulatory trends to address potential impact and non-compliance/gaps.

Skills and experience required
As a successful applicant, you will have at least 5 years of experience in Information Security(ISO 27001, ISO 27701 or etc) / Governance, risk management, and compliance (GRC) Proven track record of engagement with C-level business stakeholder across Asia is required.

Whats on offer
This is an excellent opportunity to join an established company with lots of opportunity to improve the security posture of the company.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gAHYjij4 (EA: 94C3609/ R1219669)

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gM7-eVHS

• Decision making for Information Security including security strategy and roadmap for APAC
• Opportunity to implement information security with strong support from business stakeholders

About the company

Our Client is a Multi billion market leader within their industry. With rapid expansion across APAC, they are now looking for a new Manager, Information Security & GRC (Governance, Risk & Compliance) to join their team

About the job

• Reporting directly to the Head of Security based out of Asia, Your responsibility involves:
• Managing a lean team of information Security Analyst across Asia
• Developing and executing information security management framework and related IT Security policies within the organizations. This includes conducting continuous assessment of IT security practices and policies to improve the security posture of the company
• Leading initiatives to assess the adequacy and effectiveness of IT controls and policies, ensuring that business users are compliant to the IS standards (ISO 27001, PDPA and etc).
• Designing and implementing an on-going Information Security training and awareness programme for different levels of personnel. This includes monitoring the level of awareness to information security risk
• Planning and implementation Information Security, IT Risk Management, IT Audit and IT policy to improve the overall security posture for the organization across Asia. This includes reviewing and maintaining information security polices.

Skills and experience required

As a successful applicant, you will have at least 8 years of experience in IT frameworks (ISO 27001, NIST or etc) / IT control / Governance, risk management, and compliance (GRC) Proven track record of managing a team is required for this role.

Candidates with experience in cloud or SAP security will be of added advantage.

Whats on offer
This is an excellent opportunity to implement information security with strong support from business stakeholders.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gM7-eVHS (EA: 94C3609/ R1219669)

Singlife is a leading homegrown financial services company, offering consumers a better way to financial freedom. Through innovative, technology-enabled solutions and a wide range of products and services, Singlife provides consumers control over their financial wellbeing at every stage of their lives.

In addition to a comprehensive suite of insurance plans, employee benefits, partnerships with financial adviser channels and bancassurance, Singlife offers investment and advisory solutions through its GROW with Singlife platform. It also offers the Singlife Account, a mobile-first insurance savings plan.

Singlife is the exclusive insurance provider for the Ministry of Defence, Ministry of Home Affairs and Public Officers Group Insurance Scheme. Singlife is also an official signatory of the United Nations Principles for Sustainable Insurance and the United Nations-supported Principles for Responsible Investment, affirming its commitment to finding a better way to sustainability.

The merger of Aviva Singapore and Singlife was announced in September 2020 and created one of the largest homegrown financial services companies in Singapore in a deal valued at S$3.2 billion. It was the largest insurance deal in Singapore at the time.

Singlife was subsequently acquired by Sumitomo Life in March 2024, one of Japan’s leading life insurers, which valued Singlife at S$4.6 billion, making the transaction one of the largest insurance deals in Southeast Asia.

Purpose of the Role:

Responsible for the tactical and operational oversight of our information security program in term of managed security services. This role involves in implementing and maintaining robust security measures to safeguard our information and network infrastructure. One will be the driving force behind our cybersecurity strategy, ensuring our systems are resilient against threats, and our team is equipped with the knowledge and tools to maintain high security standards.

Role Attributes:

Running operation of Singlife’s Managed Security Services program for entire Singlife Group under the Cyber Fusion Centre team.

Key Responsibilities:

Security Measures Implementation and Performance Tracking

• Develop and implement effective security measures to protect company data and network infrastructure.
• Regularly track and report on the performance of these security measures.

Cybersecurity Architecture and Strategy

• Deep understanding of Singlife’s comprehensive cybersecurity architectures.
• Develop and update the company’s information security strategy, ensuring it aligns with industry best practices and business objectives.

System Security Requirements

• Identify, define, and document system security requirements.
• Prepare and maintain technical documentation.
• Recommend solutions to management based on these requirements.

Security Infrastructure Management

• Configure, troubleshoot, and maintain security infrastructure hardware and software.
• Install and manage software for monitoring systems and networks for security breaches and intrusions.

Behavior Monitoring and Preventive Measures

• Monitor systems for irregular behavior and anomalies.
• Establish and enforce preventive measures to mitigate potential security threats.

Staff Training and Awareness

• Educate and train staff on information system security best practices.
• Foster a security-aware culture within the organization.

Project Monitoring and Milestone Achievement

• Ensure regular monitoring of project activities.
• Guarantee that project milestones are met in a timely and efficient manner.

Managed Security Device Expertise:

• Proficient in managing a range of security devices, including but not limited to: Email Security, IDPS, Attack Surface Monitoring, Anti-Malware Solution, Web Application Firewall, Certificate Management System (CMS)

Key Decision within the Role:

• Standard Operating Procedure write-up
• BAU Operation Process write-up

Requirements:

Experience

• Preferable to have 3+ years of relevant experience
• Knowledge in managing security solution stated above.
• Strong understanding of cybersecurity principles, practices, and solutions.
• Effective communication and analytical abilities.
• Ability to analyze complex security systems and identify vulnerabilities and solution.
• Expertise in computer programming and scripting languages.

Education

• Academic: Bachelor’s degree in computer science / information technology(preferred)
• Professional Certification(s): CISSP, or any related vendor certification (preferred)

If you find yourself able to demonstrate the criteria above, apply with us now. We look forward to your application.

• Bachelor Degree or Advanced Diploma in Computer Science, Information Technology,

• Cybersecurity from a recognized university or related field (or equivalent experience)

• At least 3 years in a cybersecurity role, with hands-on experience in SIEM content management, network security, threat monitoring, or incident response.

• Strong knowledge of cybersecurity principles, practices, and technologies.

• Expertise in SIEM tools and content management, including rule creation, alert tuning, and report customization.

• Proficiency with security tools like firewalls, IDPS, antivirus, and vulnerability scanners.

• Knowledge of scripting (Python, PowerShell) for automation within the SIEM environment is a plus.

• Ability to analyze and interpret security data to identify vulnerabilities and potential threats.

• Excellent communication skills, with the ability to explain complex security concepts to nontechnical stakeholders.

• Strong analytical skills and attention to detail.

• Ability to work on-call or off-hours as needed to respond to security incidents.

• May require occasional travel for training or workshop.

• Experience in the application of threat modelling or other risk identification techniques.

• Detailed knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits

• Breadth of knowledge in information security space with emphasis on TCP/IP network security, operating system security, common attack patterns and exploitation techniques

• Relevant certifications (e.g., CompTIA Security+, Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), GIAC Security Essentials (GSEC)) are a plus

• Effective leadership skills and a team player.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gAHYjij4

• Strong support to invest in information security from the company
• Regional role with an established company

About the company

Our Client is an established company. With rapid expansion plan, they are now looking for a new Information Security Assistant Manager (GRC, ISO27001) to join their team.

About the job

Reporting to the Head of Security, you will be responsible for:

• Leading initiatives to assess the adequacy and effectiveness of IT controls and policies, ensuring that business users are compliant to the IS standards (ISO 27001, PDPA and etc).
• Planning and implementation Information Security, IT Risk Management, IT Audit and IT policy to improve the overall security posture for the organization across Asia. This includes reviewing and maintaining information security polices.
• Designing IT Security framework and roadmap to ensure the availability, integrity and confidentiality of IT system. This includes setting up the best practices and governance for Risk Control Security Assessment (RCSA). Designing processes to identify, improve and optimize IT risk management policies/practices.
• Identifying potential gaps in security control to enhance early detection capability. This is through leveraging internal security data (Performing analysis of forensic evidence, log data, compromised hosts, and network traffic) and external sources (Industry portals and etc) to identify existing gaps in security control and close the gaps.
• Overseeing the development and execution of corporate security awareness and training programs to business stakeholders to prevent and limit the impact of a potential cybersecurity event
• Monitoring compliance, keep abreast of legislative and regulatory trends to address potential impact and non-compliance/gaps.

Skills and experience required
As a successful applicant, you will have at least 5 years of experience in Information Security(ISO 27001, ISO 27701 or etc) / Governance, risk management, and compliance (GRC) Proven track record of engagement with C-level business stakeholder across Asia is required.

Whats on offer
This is an excellent opportunity to join an established company with lots of opportunity to improve the security posture of the company.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gAHYjij4 (EA: 94C3609/ R1219669)

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gM7-eVHS

• Decision making for Information Security including security strategy and roadmap for APAC
• Opportunity to implement information security with strong support from business stakeholders

About the company

Our Client is a Multi billion market leader within their industry. With rapid expansion across APAC, they are now looking for a new Manager, Information Security & GRC (Governance, Risk & Compliance) to join their team

About the job

• Reporting directly to the Head of Security based out of Asia, Your responsibility involves:
• Managing a lean team of information Security Analyst across Asia
• Developing and executing information security management framework and related IT Security policies within the organizations. This includes conducting continuous assessment of IT security practices and policies to improve the security posture of the company
• Leading initiatives to assess the adequacy and effectiveness of IT controls and policies, ensuring that business users are compliant to the IS standards (ISO 27001, PDPA and etc).
• Designing and implementing an on-going Information Security training and awareness programme for different levels of personnel. This includes monitoring the level of awareness to information security risk
• Planning and implementation Information Security, IT Risk Management, IT Audit and IT policy to improve the overall security posture for the organization across Asia. This includes reviewing and maintaining information security polices.

Skills and experience required

As a successful applicant, you will have at least 8 years of experience in IT frameworks (ISO 27001, NIST or etc) / IT control / Governance, risk management, and compliance (GRC) Proven track record of managing a team is required for this role.

Candidates with experience in cloud or SAP security will be of added advantage.

Whats on offer
This is an excellent opportunity to implement information security with strong support from business stakeholders.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gM7-eVHS (EA: 94C3609/ R1219669)

Key Responsibilities:
∙Coordinate with external vendors and collaborate with customers and SaaS providers to conduct IT Security Risk Assessments. Identify security threats, assess risks, and propose mitigation strategies for approval by the customer.
∙Coordinate the handling of security incidents, ensuring a timely response and resolution. Maintain a robust incident response process and documentation.
∙Manage and coordinate regular security audits, vulnerability scans, and penetration tests. Consolidate findings, ensure proper remediation, and provide feedback to stakeholders on risk mitigation efforts.
∙Maintain and update all security-related documentation, including policies, procedures, standards, and best practices. Ensure compliance with security frameworks such as ISO/IEC 27001, ISO/IEC 27018, SOC 2 Type 2, and CSA-STAR (Level 2).
∙Continuously monitor the security posture of the SaaS solution and related ICT systems. Provide regular reports on security risks and mitigation actions to stakeholders and customers.
∙Oversee the remediation of security vulnerabilities identified during security assessments, ensuring that appropriate actions are taken to address risks in a timely manner.
∙Provide clear, concise security reports and recommendations to customers, ensuring they understand the security posture of the SaaS solution and any risks or issues that need attention.
∙Take on ad-hoc security tasks as required to address emerging risks or assist with specific security projects or initiatives.

Qualifications:
∙Minimum of 3 years of experience in IT security, particularly in enterprise systems, cloud infrastructure, or SaaS environments.
∙A current professional information security certification (such as CISSP, CISM, CRISC, CGEIT, GSE) or equivalent is highly desirable.
∙In-depth knowledge of IT security management and governance, risk assessment, incident response, vulnerability assessments, penetration testing, and security audits.
∙Familiarity with international security standards and frameworks such as ISO/IEC 27001, ISO/IEC 27018, CSA-STAR, SOC 2 Type 2, NIST, and CIS.
∙Strong interpersonal, written, and verbal communication skills, with the ability to explain complex security concepts to non-technical stakeholders.
∙The position requires the candidate to be based locally.
∙Strong problem-solving skills and the ability to make decisions under pressure.
∙Proven ability to work effectively with cross-functional teams and external vendors.
∙Attention to detail and a commitment to maintaining the highest standards of security.

What you'll do:

As a Junior Cyber Security Analyst, your primary role will be to ensure the security and integrity of our client's digital assets. You will intake cybersecurity related requests from internal and external entities that require triage, remediation or escalation. Your excellent problem-solving skills will be put to use as you collaborate with your team members to resolve complex issues. Your commitment to accurate documentation will contribute significantly to record-keeping and analysis.

* Answer incoming calls to assist with information security inquiries or issues.
* Document all interactions accurately for record-keeping and analysis.
* Follow established processes and guidelines to handle common issues.
* Collaborate with team members to resolve more complex problems or escalate as necessary.
* Monitor your assigned queues and work cases in an efficient and effective manner.

What you bring:

The ideal candidate for the Junior Cyber Security Analyst role is someone who has a strong understanding of Cyber Security and Information Technology. Your effective typing skills will enable you to document all interactions accurately, while your strong problem-solving and critical thinking skills will be crucial in handling common issues. Your effective communication and interpersonal skills will allow you to collaborate effectively with team members.

* Effective typing skills
* Familiarity with Cyber Security and Information Technology
* Strong problem-solving and critical thinking skills
* Effective communication and interpersonal skills

What sets this company apart:

Our client is a leading global organisation that values collaboration, commitment, and growth. They offer an inclusive work environment where every employee is valued for their unique contributions. They believe in providing opportunities for learning and development, making it an ideal place for individuals who are eager to grow their careers.

What's next:

Ready to take the first step towards a rewarding career in cybersecurity? Don't hesitate!

Apply today by clicking on the link!

Do note that we will only be in touch if your application is shortlisted. Robert Walters (Singapore) Pte Ltd ROC No.: 199706961E | EA Licence No.: 03C5451 EA Registration No.: R24123088 Josue Hoyos Pardavell

• Manage information technology and computer systems
• Plan, organize, control and evaluate IT and electronic data operations
• Manage IT staff by recruiting, training and coaching employees, communicating job expectations and appraising their performance
• Design, develop, implement and coordinate systems, policies and procedures
• Ensure security of data, network access and backup systems
• Act in alignment with user needs and system functionality to contribute to organizational policy
• Identify problematic areas and implement strategic solutions in time
• Audit systems and assess their outcomes
• Preserve assets, information security and control structures
• Handle annual budget and ensure cost effectiveness

Requirements and skills

The role will be responsible for 3 functions within the IT Business Group:

• IT Infrastructure
• Cybersecurity
• Governance

IT Infrastructure

• Lead a team of 24-by-7 team members to ensure technology operations are efficient and effective from cost and stakeholder satisfaction angles, and the IT environment is reliable.
• Develop and implement a systematic and rigorous approach to ensure data and system control, security and integrity.
• Ensure that policies and procedures are in accordance with evolving regulations, legal requirements and industry standards.
• Ensure that policies and procedures are complied with, and audit findings comprehensively addressed.
• Ensure the IT infrastructure has strong protection, detection, and response capabilities for cybersecurity threats.
• Maintain a business continuity and disaster recovery plans to ensure timely and effective restoration of data and IT services in the event of a disaster.

Cybersecurity

• Drive organization wide IT awareness initiatives through provisioning of CBT for security, identify possible gap of understanding in staff and facilitate re-training/awareness session.
• Facilitate Information Security Management System (ISMS) audit planning, coordination, management response, rationalisation and collation and tracking of audit action items with internal and external parties.
• Drive simulated phishing campaigns to improve security posture of organisation.
• Ensure compliance with ISO27001 and Cybersecurity Code of Practice under the Cybersecurity Act.

Governance

• Enforce IT policy, standards and procedures/guidelines in accordance to internal policies, and applicable regulations (such as PDPA, Cyber Security Act, EMA Regulations, and Computer Misuse Act).
• Perform periodic reviews of the IT system access.
• Facilitate IT audit planning, coordination, management response, and tracking of audit action items with internal and external parties.
• Perform IT compliance check by reviewing control effectiveness.
• Perform IT audit on established standards.

Financial Management

• Manage the annual IT budgeting exercise with Finance.
• Track OPEX and Capex spend against budgets.
• Manage purchase requisitions and process invoices for IT purchases.
• Prepare waiver of competition, variation order, evaluation and award papers where necessary.
• Track contracts – utilization and renewals.
• Track assets, licenses, maintenance expiry dates, end of life/support dates.

Requirements

• Degree in Information Systems, Engineering or related discipline.
• At least 10 years’ experience in an IT related field.
• Candidates from oil and gas industry, complex utilities and infrastructure corporations will be considered favorably.
• Demonstrated ability to lead and perform at a management capacity, demonstrating initiative, creativity, and consensus-building skills. Serve as a member and leader of various corporate committees and task force groups.
• Proven track record of successful large project implementations, broad IT infrastructure and application architecture knowledge. Have strong infrastructure domain knowledge around cloud computing.
• Self-starter, independent, and hands-on. Good interpersonal, facilitation skills, customer focused/service oriented, and has effectively affected change.
• Ability to work as part of larger teams and leading cross-function team initiatives

Candidates with more senior experience will be considered for the Senior Manager role.

Job Title : Senior Business Systems Analyst / Project Manager

Job Overview

· We are seeking an experienced Senior Business Systems Analyst or Project Manager to join our team of developers and business analysts, with the potential for renewal.

· This role is critical for driving high-impact projects and supporting our team in achieving exceptional results.

· The ideal candidate will bring strong stakeholder management skills, coupled with a proactive approach to team collaboration and problem-solving.

· We’re looking for someone who can enhance our team's productivity, foster engagement, and contribute to a dynamic, collaborative environment.

Key Roles and Responsibilities

Stakeholder Engagement

· Act as the primary point of contact for various stakeholders across the organization, ensuring clear, consistent, and effective communication.

Project Management:

· Lead projects from inception to completion, ensuring timely delivery and alignment with strategic objectives. Manage resources, timelines, and budgets while balancing competing priorities.

Requirements Gathering & Analysis:

· Collaborate with business analysts to deeply understand stakeholder requirements, translating them into actionable plans for developers.

Team Collaboration

· Work closely with developers and analysts, providing support, feedback, and guidance to ensure optimal team productivity and morale.

Problem Solving

· Address project-related challenges with a solution-oriented mindset and maintain composure under pressure

Risk Management

· Identify, assess, and manage risks to minimize impact on project timelines and outcomes.

Process Improvement

· Continuously evaluate and refine processes to increase efficiency and team engagement.

Reporting & Documentation

· Generate detailed reports on project status, milestones, and budget. Maintain accurate and accessible documentation.

Requirements

· Bachelor’s degree in Information Technology, Business Administration, or a related field

· Minimum 8 years of experience in project management or business systems analysis.

· Proven track record in stakeholder management, with demonstrated ability to handle complex or challenging personalities.

· Strong communication skills, with the ability to convey complex ideas clearly and concisely to stakeholders of all levels.

· Experience leading cross-functional teams in a collaborative environment.

Preferred Skills

· Relevant certifications (PMP, CBAP, or similar).

· Experience with Agile and Waterfall project methodologies.

· Familiarity with JIRA, Confluence, MS Project and other Project Management tools

· Experience with Product Information Management (PIM) Solutions

· Experience in Salesforce and other Enterprise CRM platforms

· Background in the higher education sector, with an understanding of its unique challenges and requirements.

Generic Competencies

· Analysis

· Communication

· Change Agent

· Problem Solving and Execution

· Developing People (For staff with direct reports only)

· Leadership (For staff with direct reports only)

Technical Competencies

· Familiarity with Agile and Scrum methodologies and related tools such as JIRA and Confluence.

· Familiarity with IT security best practices and compliance standards.

· Experience with enterprise software and ERP systems.

EA License No: 11C4879 / Registration ID : R1218583

Apar Technologies Pte Ltd, Singapore

This position is assigned to Diplomatic Technology (DT) Office and crucial for the design, development, testing, and implementation of the Embassy’s applications and intranet web presence, with a special focus on AI systems development and integration. The incumbent will provide technical assistance and support for queries and issues related to developed applications, development of new applications, and SharePoint support for more than 300 customers and 21 agencies at the U.S. Mission in Singapore. Additionally, the incumbent will provide user training and augment the rest of the IT support staff as needed.

Key Responsibilities:

• Design, develop, test, and implement Embassy applications and intranet web presence, with a focus on AI systems development and integration.
• Provide technical assistance and support for developed applications.
• Develop new applications and provide SharePoint support.
• Offer user training and support IT staff as required.
• Ensure proper implementation of cybersecurity practices.
• Occasionally provide support at the Chief of Mission and Deputy Chief of Mission residences and VIP visit sites around the city.
• Work in server rooms with high voltage equipment and handle computer installations and office renovations.

Requirements:
All applicants must address each selection criterion detailed below with specific and comprehensive information supporting each item in their application. Failure to do so may result in a determination that the applicant is not qualified.

· Bachelor's degree in computer science, computer software engineering, information technology or host country equivalent, AND at least three (3) years of technical experience in Computer programming, including experience in managing software development lifecycles and methodologies such as analysis, design, development, quality assurance, deployment and release is required.

OR

· At least two (2) years of college or university studies in any field or other equivalent post-secondary education, AND at least five (5) years of technical experience in Computer programming, including experience in managing software development lifecycles and methodologies such as analysis, design, development, quality assurance, deployment, and release is required.

• Fluent in (speaking/reading/writing) English is required.
• In-depth knowledge of administrative duties for administering the latest Microsoft Windows Server, SharePoint, and Desktop operating systems.
• Advance knowledge in database design and development, Client/Server and Multi-tier architectures and Internet working operations and management; systems analysis/design techniques; telecommunications and management advisory services.
• Strong working knowledge of PowerApps, Power Automate, .NET, C#, Framework, AJAX, JavaScript, PHP, jQuery, XML, SharePoint API is required.
• In-depth knowledge of proper implementation of cybersecurity practices.
• Advance knowledge of Office Suite programs (e.g. Word, Excel, Outlook, Power Point, Share Point, etc)
• General experience in areas of end-user support in a Microsoft environment.
• Familiar with the planning, migration and operations for both on-premise and cloud only SharePoint configurations.
• Experience developing SharePoint applications using PowerApps and Power Automate workflows.
• Experience using SharePoint reusable components, publishing sites, add-ins and Frameworks.
• Good communication skills both verbally and in writing.
• Must have the ability in building solutions on Microsoft's SharePoint and/or O365 development platform required.
• Ability to analyze user requirements, plan strategies and manage multiple tasks/projects simultaneously.
• Ability to thoroughly document solutions via flow charts, review instructional manuals (for users or systems staff) and provide guidance as necessary.
• Ability to research current technologies and design practices to develop solutions.
• Must be able to lift up to 50 pounds consistently with or without a non-motorized lifting device.

Additional job details can be requested by emailing [email protected]

Please note:

· Emailed applications are no longer accepted.

· To maintain an open and fair recruitment process, the U.S. Embassy only accepts applications that are completed in full and submitted via the Electronic Recruitment Application (ERA) website: https://erajobs.state.gov/dos-era/sgp/vacancysearch/searchVacancies.hms

· To apply for the above position: Please complete the on-line ERA form and upload any supporting documents (including educational certificates and/or transcripts related to the position requirements state above) using this site https://erajobs.state.gov/dos-era/sgp/vacancysearch/searchVacancies.hms by December 3, 2024.

Only shortlisted candidates will be notified. Thank you for your interest in U.S. Embassy Singapore.

RESPONSIBILITIES:

Your job is to provide management/strategy consulting services to companies in Singapore, Japan and ASEAN region.

• Conduct primary, secondary research and competitive analysis (e.g., offerings, market positioning, customers, financial performance, etc.)
• Evaluate potential opportunities for acquisitions, divestitures and strategic partnerships
• Perform data analysis to drive insights and make recommendations (e.g., financial modelling, cost benefit analysis)
• Develop go-to-market strategies to grow clients’ businesses; including preparation of business plans and presentation decks for board meetings
• Conceptualize and build marketing, training and investment materials

REQUIREMENTS:

• Possess understanding in finance/quantitative modeling
• A strong team player who is comfortable with diverse and dynamic work environment. Strong interpersonal and communication skill
• Ability to facilitate communications (written and oral) in Japanese language, as well as transcript writing in English and Japanese language is a plus
• Prior experience in management/strategy consulting in East Asia or ASEAN market is a plus

Job Requirements:

· Minimum of a secondary education.

· Successfully completed the following WSQ modules:

o Guard and Patrol: Provide Guard and Patrol Services.

o Incident Response: Handle Security Incidents and Services.

o Threat Observation: Recognise Terrorist Threats.

· Possession of PLRD license.

· 1 – 3 years’ relevant experience in the security field.

· Able to read and write simple English.

· Basic computer knowledge is preferred.

· Willing to work on rotating shifts including weekends/public holidays.

· Able to conduct a basic investigation into incidents.

We're thrilled to announce that we are looking for talented Vice President, Information Technology to lead our Singapore IT Team! If you're seeking a fantastic workplace where you can develop professionally and contribute meaningfully, we’d love to hear from you!

Job Descriptions:

1. Strategic Leadership:

• Develop and implement the IT strategy aligned with the organization’s goals and objectives
• Provide strategic direction and guidance for the IT department to support business growth and innovation

2. IT Infrastructure and Operations:

• Oversee the design, implementation, and maintenance of the organization’s IT infrastructure
• Ensure high availability, security, and scalability of IT systems and networks
• Manage IT operations, including systems monitoring, disaster recovery, and business continuity planning

3. Team Management:

• Lead and mentor a team of IT professionals, providing guidance and support for their professional development
• Foster a culture of collaboration, innovation, and continuous improvement within the IT department

4. Vendor and Stakeholder Management:

• Collaborate with internal stakeholders to understand IT requirements and priorities
• Communicate IT initiatives, progress, and challenges to executive leadership and other stakeholders

5. Budget and Resource Management:

• Develop and manage the IT department budget, ensuring cost-effective use of resources
• Monitor IT expenditures and justify investments based on business value and ROI
• Identify opportunities for cost savings and efficiencies in IT operations

6. Compliance and Security:

• Ensure compliance with regulatory requirements and industry standards for data security and privacy
• Implement and enforce IT policies and procedures to safeguard organizational assets
• Lead efforts to respond to and mitigate IT security incidents and breaches

Requirements:

• Bachelor’s degree in Computer Science, Information Technology, or related field; Master’s degree preferred
• Proven experience (at least 10 years) in IT leadership roles, with a track record of successfully managing complex IT projects and teams
• Experienced in startup environment will be an advantage
• Proficient in reading and writing in both English and Mandarin
• Strong knowledge of IT systems and infrastructure, including cloud technologies, network administration, software and cybersecurity
• Strategic thinker with a demonstrated ability to translate business requirements into IT solutions
• Strong leadership and people management skills, with a focus on team development and collaboration

Job Description

The successful candidate will join the one of SIA Group's Cloud/DevOps teams and will be responsible for the following:

• Administering cloud-based Infrastructure deployment which includes tasks such as provisioning/de-provisioning of resources, maintaining security posture, user administration, monitoring computing resource utilization, network setup, backup/restore and incident management.
• Performs system administration activities in accordance with company policies and procedures.
• Troubleshoot, performs root cause analysis, implements corrective/preventive actions during and after an incident.
• Create and maintain documentation and processes for troubleshooting, maintaining, and configuring systems.
• Operates within assigned budget and demonstrates fiscal responsibility.
• Support audit and infrastructure/network security scans, disaster recovery and security related drills.
• Build automation wherever possible to improve development team’s agility.
• Implement Infrastructure-as-Code (IaC) on AWS, Azure or GCP.
• Provide training or conduct talks to the cloud community within the company.
• Explore, learn and deploy new technologies that will help the company to reduce cost or improve operational efficiencies.
• This position requires periodic system administration outside normal business hours.
• Note: You could be posted to any subsidiary in SIA Group.

Requirements

• Possess a degree in Information Technology or related fields.
• Minimum of 3 years of IT experience with at least 1 year of hands-on experience in AWS Cloud.
• AWS Certified Solution Architect (Associate) preferred.
• Conversant with infrastructure definition tools such as Cloud Formation and Terraform, and with YAML/JSON deployment templates.
• Advanced python/ansible scripting skills for provisioning and automating dynamic cloud infrastructure.
• Hands-on experience with Docker containerization and Kubernetes orchestration preferred.
• Strong analytical, project management, communications and interpersonal skills.
• Demonstrate strong knowledge in infrastructure areas such as virtual server technologies, networking, internet protocols, scripting & monitoring tools and IT Security.
• Experience in API Management (AWS API Gateway, Tibco Mashery), Platform as a Service (OpenShift, Cloud Foundry) and DevOps are preferred.

Research:

• Preparing market and industry research reports highlighting key issues, trends and outlook as advised by the senior team
• Undertake research on special projects or sector to identify business opportunities including Potential Clients for the various products at Avista
• Track identified companies/sectors on a regular basis for key events and announcements
• Prepare and circulate newsletters/reports relating to the research on a monthly basis
• Provide the industry related inputs for the creation of transaction materials
• Conduct detailed industry analysis and develop firm Industry knowledge of one or more sectors

Transaction Execution:

• Provide execution support to the senior team
• Assist in the preparation of company valuations, financial models, company marketing documents and client presentations
• Research background material and provide inputs for the preparation of key transaction documents:
• Client profiles
• Information Memorandums, Pitch Books and Teaser documents.
• Management presentations
• Work with the senior team on the financial model and analysis including:
• DCF analysis
• Valuation of companies based on comparable company analysis
• Precedent transaction analysis

Administrative:

• Provide administrative support to the deal team
• Responsible for all client files – hard copy and soft versions to be maintained and kept up to date and backed up on the server.
• Ensure that deal critical documents like NDA’s, Mandate letter etc. are stored correctly in hard and softcopy and backed up on server
• Set up and send out meeting and conference call requests
• Ensure that the closed deal process is followed (necessary client communication, preparation of tombstones, website updation, preparation of case study etc.)
• Regular document archiving , filing and appropriate destruction
• Creating and updating company databases in a timely manner
• Assisting the senior team in drafting client engagement letters
• Maintain client relationships by managing day to day inquires & obtaining appropriate information to execute assignments

As a Business Information Security Officer, you will play a key role in proactively managing the information security and Data privacy landscape within the organization. Your expertise will help guide strategic decision-making on technology risk and security matters, ensuring robust IT security architecture, practices, and compliance across the organization.

Key Responsibilities:

• Lead proactive management of InfoSec & privacy.
• Provide thought leadership on technology risk and security.
• Drive the development and implementation of IT security policies and solutions.
• Ensure secure software development practices and change management processes.
• Plan and manage security incident responses and investigations.
• Oversee global adoption of cybersecurity and privacy controls.
• Act as the main point of contact for InfoSec and privacy matters.
• Collaborate with external auditors and regulators for compliance.

Required Skills and Qualifications:

• Extensive experience in IT security architecture, policy, and procedure development.
• Demonstrated leadership with strong decision-making abilities.
• Knowledge of software development life cycle security and asset management.
• Proven track record in incident response management and cybersecurity investigations.
• Excellent communication skills for non-technical stakeholders.
• Proficiency in current and emerging security trends.
• Familiarity with Singapore regulatory IT security requirements (e.g., MAS TRM, Cyber Hygiene notice).
• Bachelor's degree in IT/Computer Science or related field.
• Preferred certifications: CISSP, CISA, CISM, GIAC.

Personal Attributes:

• Team-oriented and able to work collaboratively.
• Strong communication skills for engaging senior stakeholders.
• Analytical problem-solver with a creative mindset.
• Independent and hands-on approach with strong attention to detail.

Application Process:
If you are interested in this role, please send your resume to [email protected]

Role Overview:

The role involves safeguarding systems, applications, and infrastructure through proactive vulnerability management, the application of security controls, secure development practices, incident response, and continuous threat monitoring. You will collaborate with both internal teams and external service providers to enhance the cybersecurity posture and align with best practices and industry standards.

Key Responsibilities:

Vulnerability Management & Assessment:

• Evaluate the cybersecurity aspects of design proposals across various systems, applications, and infrastructure.
• Source, manage, and oversee external vendors conducting annual vulnerability assessments and penetration tests.
• Review assessment reports and recommend remediation actions for identified weaknesses.

Implementation of Security Controls:

• Recommend and implement security controls based on industry best practices, standards, and guidelines (e.g., OWASP Top 10, NIST, CIS).
• Contribute to the development and maintenance of security policies, procedures, configurations, and standards aligned with ISO 27001.
• Participate in internal audits and reviews to ensure the effectiveness of the ISMS and security controls.

Secure Development Practices:

• Integrate secure coding practices and OWASP Top 10 recommendations throughout the software development lifecycle (SDLC).
• Collaborate with developers to identify and address security vulnerabilities during design and coding phases.

Incident Response & Recovery:

• Monitor logs for signs of malicious activity and potential data breaches.
• Coordinate with contractors, security vendors, and internal teams to manage incidents, identify root causes, and implement recovery procedures.

Continuous Learning & Threat Awareness:

• Stay informed on the latest cybersecurity threats, vulnerabilities, mitigation techniques, and emerging technologies.
• Attend training, read industry publications, and participate in conferences as needed to maintain up-to-date knowledge.

Collaboration & Security Awareness:

• Work closely with security professionals and the governance team to educate colleagues on security best practices and raise awareness about potential threats.

Qualifications:

Educational Background:

• Degree in Information Systems/Technology, Computer Engineering, Computer Science, Information and Communications Technology (ICT), or a related field.

Certifications:

• Preferred certifications: CISSP, CISA, CISM, CompTIA Security+, or equivalent.

Experience & Skills:

• Strong understanding of cybersecurity principles and best practices, with at least 5 years of relevant experience managing contractors and designing cybersecurity solutions.
• Experience in drafting tender specifications for vulnerability assessments, penetration testing, and creating SOPs for incident response.
• Proficiency with security tools, log extraction techniques, and related technologies.

Interested candidate who wish to apply for the advertised position, please click on “Apply Now”. We regret that only shortlisted candidates will be notified.

EA License NO.: 01C4394

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its overseas subsidiaries and affiliates collecting, using and disclosing your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services and such other purposes stated in our privacy policy. Our full privacy policy is available at www.persolkelly.com.sg. If you wish to withdraw your consent, please drop us an email to let us know

Profile Summary:

The Senior Systems Engineer supports security systems and operations administration, monitoring and maintenance. Monitors security alerts and events. Collects and documents contextual information based on established practices and supports the preparation and publishing of security advisories. Assists with the analysis of security-related information and events, escalation of incidents for validation and remediation.

Able to be alert and vigilant in performing monitoring activities, and is able to analyze and resolve security-related issues critically. He/She communicates clearly in his/her interactions with others and coordinates effectively with his/her team to perform security operations.

Roles & Responsibilities:

Monitor security systems

• Perform non-routine security monitoring activities

• Perform prioritization and allocation of security incidents

• Track security monitoring rules and alerts

• Compile regular reports on the performance of security operations

Maintain security operations

• Assist with the implementation of agreed security system changes and maintenance routines

• Assist with implementation of new security programs

• Support vulnerability, penetration testing and assessments

• Support the development of reports on security penetration testing results

• Recommend security products, services and/or procedures

• Support the alignment of security systems with established service agreement standards

• Support the implementation of new enterprise security architecture, technologies and enhancements

Respond to queries

• Support live response to security issues

• Support investigation of security breaches such as forensic threat investigation

• Support the resolution of security related issues

• Support the simulation of user problems to identify security system drawbacks

• Recommend security system modifications to reduce user problems

Facilitate compliance

• Assist with the implementation security policies, procedures and programs

• Educate users on the security standards and practices

• Identify improvement areas to existing security policies and procedures

• Deliver user training

Optimize security system performance

• Support piloting of new tools, technologies, and processes as well as installation of hardware and software

• Support security system testing and ongoing optimization or changes such as scheduled upgrades and updates

• Maintain documentation of all optimization activities

• Suggest improvements to operational processes, procedure manuals, and documentation

Requirements/ Qualifications:

• Minimum Bachelor in Computer Science or equivalent
• 2-3 years of relevant experience
• Experience in firewall, network scanning or asoc
• Possessed Risk assessment experience
• Required to be on standby with on-call availability with varied shifts including nights, weekends and holidays.
• Experience in AD/ID administration as per best security practices
• Exposure in IM8 or equivalent

We are looking for YOU, an IT Lead that can help us planning, establishing, and maintaining IT services and development operations for H2i as well as maintaining our IT infrastructure.

You will be part of a growing team providing unique and state of the art prediction services using Machine Learning for weather and flood forecasts to various clients, as well being involved in software related projects. These clients include, but not limited to, big clients in SE Asia providing transport and distribution services as well as other private clients and governmental organizations. We are a growing company and are looking for dedicated people that help us grow with their skills and know-how.

About you:

- To possess a degree in Computer Science or related area

- Be fluent in English, both spoken and written as we are a multi nationalities company.

- Proven solid experience with IT offline and online services administration and maintenance (mandatory)

- Proven solid experience with DevOps in the Azure ecosystem (mandatory).

- Be a good team player and mentor to other team members on a daily basis but mostly when it’s of utmost importance.

- Ability to perform independently with minimal guidance

- Be a pro-active person that can anticipate challenges but also react when new challenges arise.

- Be a person with a positive attitude and a “Can Do” mentality.

- Possess the ability to plan strategical changes in terms of infrastructure when the need becomes apparent.

- Willing to pick up new technologies

Job Description:

- Online services administration

- Onsite IT support

- Monitor and periodically apply the latest security patches and software updates to production systems

- Deploy IT systems in customer sites and Government Data Centres and GCC

- Work with the team to understand different software components and deployment strategies

- Automate and simplify various tasks and increase efficiency

- Write and maintain documentation for deployment, administration etc.

We expect you to have mastered some of the following tech skills:

- Online services administration like emails, domains, DNS

- Onsite IT support

- Possess knowledge of various Azure services like Azure Container Registry, Azure Container Instance, Azure Logic App, Azure App Service, Azure Blob Storage, and Azure Database for PostgreSQL.

- Monitor service stability, performance, and uptime; formulate strategies for scaling up/out and down/in

- Proficiency in scripting with PowerShell and Azure CLI.

- Manage source control using Git, encompassing branching strategy, pull request workflows, and version control.

- Develop CI/CD pipelines using tools like Azure DevOps for automating the build, test, and deployment processes in the current system.

- Create and manage infrastructure utilizing ARM templates and IaC principles; familiarity with Terraform or Bicep is an advantage.

- Manage pipeline security and safeguard sensitive information.

- Be familiar with both Windows and Linux administration.

- Familiarity with Python is a plus