Details of the Division and Team:

We are looking for a knowledgeable Information Security Analyst to operating as a member of the Chief Security Office (CSO) Third Party Security team (TPS).

As an Information Security Analyst, you will be responsible for supporting the development, execution, and maintenance of Deutsche Bank’s information security strategy and program under the management of the CSO. You will work in strategic alignment and partnership with Deutsche Bank’s Third-Party Risk Management (TPRM) program under Third Party Management (TPM).

What we will offer you:

A healthy, engaged and well-supported workforce are better equipped to do their best work and, more importantly, enjoy their lives inside and outside the workplace. That’s why we are committed to providing an environment with your development and wellbeing at its center.

You can expect:

• Flexible benefits plan including virtual doctor consultation services.
• Comprehensive leave benefits
• Gender Neutral Parental Leave
• Flexible working arrangements
• 25 days of annual paid leave, plus public holiday & Flexible Working Arrangement

Your key responsibilities:

• Conducting Information Security Third Party risk assessments as part of the overall Third-Party Risk Management process (incl. onsite visits/reviews at our Third Parties)
• Review Third Party policies and evidence related to Information Security, review Third Party security gap analysis against the Deutsche Bank security requirements.
• Conduct risk review and business impact analysis of the identified gaps and provide comprehensive documentation of the identified gaps.
• Track Third Party and services, escalate issues when necessary.
• Formulate remediation recommendations, and actively work with Third Partys and project managers on Information Security related findings to resolve issues as quickly as possible to help build and strengthen the relationship.
• Support and coordinate Third Party Information Security Review processes, track Third Parties and services, escalate issues, when necessary, negotiate with Third Party, business units, and legal team on the contractual security obligations.
• Assist with compliance and risk assessment programs which support corporate wide security programs and participate in additional key control projects related to the overall enhancement of the assessment function.
• Ability to provide constant communication with involved stakeholders (within in the Bank and outside the Bank)
• Provide response and necessary artifacts for Regulatory queries across all regions (globally).
• Supporting the team to improve the overall security control framework (e.g. new controls, enhancement of existing controls)
• Ability to document and present information security risks in a clear, concise, and understandable manner at various management levels in the bank and/or to the Third Party

Your skills and experience:

• Minimum 5 years of experience in IT Security and Information Security (both technical and organizational controls).
• Working Experience with ISO27001 standard and current industry and agency standards, best practices and frameworks including NIST, ENISA, ISO27001, ISO27017, SOC2, PCI, and MITRE ATT&CK.
• Proven Experience with Cloud Security Alliance (CSA), Cloud Controls Matrix (CCM), and/or CSS Consensus Assessment Initiative Questionnaire (CAIQ)
• Understanding of financial regulations or guidance’s which impact information security (e.g.: EU Cybersecurity Act, MAS & HKMA TRM, EBA Guidelines, DORA, GDPR, NYDFS, Sox, etc.)
• Knowledge of technical and organizational controls regarding Information Security, and Risk Management principles
• Understanding of banking/financial industry and services and the ability to evaluate impact of security risks on banking/financial institutions.
• Understanding of Governance Risk and Control (GRC) tools, services, frameworks, and best practices
• Proficiency in MS Office Suite - Microsoft Word, Excel, PowerPoint, etc. for reporting purposes
• Experience with (or Knowledge of) Shared Assessment Programs (e.g.: SIG, FSQS, etc.)
• Experience with (or Knowledge of) in Data Reporting including definition of metrics and data sources (a plus)

Role is required to be performed on-site at One Raffles Quay office. Relevant vaccination requirements may apply.

How we’ll support you:

• Flexible working to assist you balance your personal priorities
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs
• Training and development to help you excel in your career

About us and our teams:

Deutsche Bank is the leading German bank with strong European roots and a global network. Click click here to see what we do.

Deutsche Bank & Diversity

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

We're seeking a driven Security Analyst to work with a team to fortify and safeguard manufacturing environments by identifying vulnerabilities, strengthening security protocols, and fortifying our systems. You'll collaborate across teams to bolster our security posture while ensuring the integrity of sensitive data.

Responsibilities:

• Linux & AWS Security: Conduct audits and assessments specifically tailored for Linux and AWS environments, rectifying detected vulnerabilities to uphold stringent security standards.
• Collaborative Security Initiatives: Work closely with engineering teams dedicated to building, scaling, and managing manufacturing infrastructure, ensuring robust security in application services, data pipelines, and logging mechanisms.
• Monitoring and Investigation: Vigilantly monitor, analyze, and investigate security alerts within these environments, pinpointing root causes and implementing proactive measures.
• Comprehensive Audits: Conduct thorough security audits and assessments, both for cloud and manufacturing setups, enhancing the overall security posture.
• Operational Support: Provide operational assistance for security-related projects, aligning implementations with security objectives.

Requirements:

• Experience: 2+ years of hands-on experience in securing Linux or Windows/AD systems in large-scale production environments.
• Cloud Proficiency: Strong expertise in AWS cloud platforms, ideally with experience using tools like Terraform, Ansible, or Chef for configuration management.
• Tool Proficiency: Familiarity with security platforms and tools such as Wazuh, Osquery, Wireshark, Zeek, and Suricata.
• Network Security: In-depth understanding of TCP/IP fundamentals, network services, and adeptness in analyzing network and host security logs.
• Cryptography and Security Measures: Knowledge of applied cryptography principles, including PKI, SSL, and key management practices.
• Communication and Problem-Solving: Strong communication skills, adept problem-solving capabilities, and the ability to work independently.

Preferred Qualifications:

• Education: Bachelor's in Computer Science/IT/Cybersecurity or related field.
• Certifications: GIAC or related Cybersecurity Certifications are beneficial.

This is a renewable contract role.

The Security SOC Analystis responsible for monitoring, analyzing, and responding to security incidents in real-time within a Security Operations Center (SOC). This role involves ensuring the security and integrity of the organization's systems by identifying threats, mitigating risks, and collaborating with various teams to address vulnerabilities.

Key Responsibilities:

1. Monitoring & Threat Detection

• Continuously monitor and analyze alerts from security tools (e.g., SIEM, IDS/IPS, firewalls) to identify potential threats.
• Investigate and evaluate security incidents, determining severity and potential impact on systems.
• Escalate suspicious activities and unresolved incidents to senior analysts or response teams.

2. Incident Response

• Execute response plans for security incidents, ensuring containment, mitigation, and recovery.
• Collaborate with incident response teams to analyze, investigate, and resolve breaches or data loss events.
• Maintain detailed incident reports and documentation for accurate tracking and compliance purposes.

3. Threat Intelligence

• Leverage threat intelligence sources to identify emerging attack tactics, vulnerabilities, and trends.
• Correlate threat data across multiple systems to proactively detect potential intrusions or risks.

4. Log Analysis

• Conduct thorough analysis of security logs, network traffic, and system behaviors to detect anomalies.
• Ensure compliance with security policies and regulatory standards through effective log management.

5. Reporting & Communication

• Prepare comprehensive incident reports, detailing findings, remediation efforts, and recommendations.
• Regularly update internal stakeholders on security incidents, vulnerabilities, and ongoing risks.

6. Security Tools & Technology

• Operate and manage security infrastructure, including SIEM platforms, IDS/IPS, firewalls, antivirus, and endpoint tools.
• Stay abreast of advancements in cybersecurity technologies and recommend updates to improve SOC effectiveness.

7. Collaboration

• Work with cross-functional teams (network engineers, administrators) to strengthen security postures.
• Participate in vulnerability assessments and penetration tests, addressing identified risks proactively.

Qualifications & Requirements:

• Bachelor’s degree in Cybersecurity, IT, Computer Science, or equivalent experience.
• 1-3 years in a Security Operations Center (SOC) or similar role.
• Proficiency with SIEM tools (e.g., Splunk, QRadar, SolarWinds SIEM) and security monitoring platforms.
• Hands-on experience with incident response and investigation of threats (e.g., malware, phishing, intrusions).
• Strong knowledge of networking concepts, TCP/IP, and common protocols.

Certifications (Preferred but not required)

• Security+ (CompTIA)
• Certified SOC Analyst (CSA)
• Certified Ethical Hacker (CEH)

Technical Skills

• Deep understanding of cybersecurity principles, incident response, and forensic analysis.
• Familiarity with malware analysis techniques and vulnerability management.
• Strong analytical skills and ability to prioritize in high-pressure situations.

Soft Skills

• Effective communication for clear reporting and team interaction.
• Ability to collaborate with internal and external partners.

Security Infrastructure Analyst

Main Duties

As an expert of his/her team, he/she:

• assigns technical tasks and manages delegation for technical issues,
• animates the team to encourage collaboration and sharing of best practices,
• has a role in supporting technical skills development and provides training when required,
• supports new technologies and leverages them to provide consistency of service across streams,
• manages service improvements for all Network and Security services supported throughout the organization,
• documents,reviews, maintains and shares relevant technical information to the team
• provides technical direction, supports services both proactively and reactively to maintain the availability and reliability of system infrastructure in accordance with the SLA,
• implements and develops improvements based on best practices,
• focuses on automation and optimum use of the team to improve efficiency,
• drives and delivers root cause for any high severity issue,
• reviews technology changes to identify potential risks,
• is responsible for problem management and resolution
• Perform real-time analysis and trending of security systems
• Respond to user incident reports and evaluates the type and severity of security events.
• Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.
• Interpret and apply security policies and procedures.
• Establish escalation processes for security incidents and develops contingency plans and disaster recovery procedures.

As an experienced professional in Network-Security Services, he/she:

• supports his/her team during diagnosis when technical issues rise in his/her scope of expertise,
• is aware of the global IT structure so that he/she anticipates interrelationships within the organization,
• engages with technical peer, Service managers, Architect and project teams on technology roadmap and projects,
• facilitates transformation projects and suggest future directions for new areas of improvement and change,
• guarantees the production readiness and license to operate of new projects and solutions
• is available and able to drive technically, any complex or high severity incidents that occur within the scope of their role,
• actively assists in identifying the most technical skilled candidates for open roles,

Legal and Regulatory Responsibilities

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time;Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• 15+ years of Experience in managing network and security infra.
• 10+ years Experience in handling major network security projects (ex: SDWAN )
• 10+ years Experience in handling Firewalls/IPS/F5/Pulse/Proxies, Routers/Switches.
• Atleast a Bachelor’s degree in any of these faculties:
• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Interested candidates may apply through the application system or send it to [email protected]. Shortlisted candidates will be notified.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan Mckinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.morganmckinley.com/sg/privacy-policy. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Morgan McKinley Pte Ltd
Dinu Dinesh

EA License No: 11C5502

EAP Registration No: R22110286

Summary of the Role :

The Cyber Security Analyst is responsible for safeguarding the organization’s digital assets by identifying and mitigating potential security risks, monitoring network activity for unusual behaviour, and responding to incidents. This role requires a strong understanding of security best practices, hands-on experience with various security tools, and the ability to respond quickly and effectively to emerging threats.

A key focus of this role is on the effective management and optimization of the Security Information

and Event Management (SIEM) system, ensuring it provides actionable intelligence for rapid threat response. This role will require strong analytical skills, good collaboration skills, detailed working knowledge of current and emerging security technologies, and the ability to correlate events to identify abnormal behaviour.

Responsibilities:

• Responsible to ensure accurate and rapid response to security events.
• Analyze security logs, SIEM alerts, and incident reports to identify and mitigate risks.
• Respond to and investigate security incidents, including breaches, malware outbreaks, and phishing attacks. Monitor networks and systems for security breaches, alerts, and anomalous activity.
• Conduct root-cause analysis to prevent future incidents and develop incident response procedures.
• Provide analysis and trending of security log data from various security devices.
• Configure and maintain SIEM tools to align with the organization’s security objectives and threat landscape.
• Create custom SIEM dashboards and reports for different stakeholders to visualize critical security metrics and incident data.
• Develop and optimize SIEM content, including rules, alerts, and correlation logic, to improve threat detection and response.
• Regularly review and tune SIEM rules to reduce false positives, enhance event correlation, and maintain relevance to evolving threats.
• Document and update SIEM processes and configurations, ensuring a high level of data accuracy and availability.
• Perform regular vulnerability scans and assist in patch management processes. Work with IT teams to prioritize and remediate them.
• Recommend solutions to mitigate risks in any activity that may potentially impact security of existing IT and information management
• Ensure compliance with industry regulations (e.g. GDPR, ISO 27001) and company policies.
• Assist in the development, implementation, and maintenance of security policies, standards, and guidelines.
• Assist in training staff on security best practices, including phishing awareness and data protection.
• Help develop educational materials and conduct periodic security awareness training.
• Advise and consult internal/ external customers on risk assessment, threat modelling and vulnerability management. Perform risk assessments and recommend security measures to mitigate potential risks.
• Document risks, vulnerabilities, and remediation strategies in a detailed risk management report.
• Maintain up-to-date knowledge of the IT security industry, including awareness of new or revised security solutions, improved security processes and development of new attacks and threat vectors.
• Manage and optimize security tools, such as firewalls, antivirus software, and intrusion detection/prevention systems (IDPS).
• Perform 1st level troubleshooting on servers and network issues with regards to log collection/security tools.
• Generate reports on security metrics, incidents, and remediation efforts for management.
• Maintain accurate documentation of incidents, security changes, and system configurations.
• Any other ad-hoc duties as required or assigned.

Requirements:

• Bachelor Degree or Advanced Diploma in Computer Science, Information Technology, Cybersecurity from a recognized university or related field (or equivalent experience)
• At least 1-3 years in a cybersecurity role, with hands-on experience in SIEM content management, network security, threat monitoring, or incident response.
• Strong knowledge of cybersecurity principles, practices, and technologies.
• Expertise in SIEM tools and content management, including rule creation, alert tuning, and report customization.
• Proficiency with security tools like firewalls, IDPS, antivirus, and vulnerability scanners.
• Knowledge of scripting (Python, PowerShell) for automation within the SIEM environment is a plus.
• Ability to analyze and interpret security data to identify vulnerabilities and potential threats.
• Excellent communication skills, with the ability to explain complex security concepts to non-technical stakeholders.
• Strong analytical skills and attention to detail.
• Ability to work on-call or off-hours as needed to respond to security incidents.
• May require occasional travel for training or workshop.
• Experience in the application of threat modelling or other risk identification techniques.
• Detailed knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits.
• Breadth of knowledge in information security space with emphasis on TCP/IP network security, operating system security, common attack patterns and exploitation techniques.
• Relevant certifications (e.g., CompTIA Security+, Certified Information Systems Security
• Professional (CISSP), Certified Ethical Hacker (CEH), GIAC Security Essentials (GSEC)) are a plus.
• Effective leadership skills and a team player.
• Strong sense of ownership and drive.

Job Summary

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

Mandatory Skill-set

• 5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;
• Strong knowledge of ISO 27001:2022 standards and requirements;
• Experience in developing and maintaining comprehensive project plans, including timelines and milestones;
• Experience in managing ISO 27001-related risks and conducting internal/external audits;
• Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

Desired Skill-set

• ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;
• PMP, CISSP, CISM, or similar certifications are a plus;

Responsibilities

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Internal Security Risk Management & Governance team is responsible for managing and mitigating information security risks posed within the organisation. To ensure that the company's risk management and governance strategies are up to date and aligned across the organisation, this team is responsible for working with stakeholders from cross-functional teams to perform regular risk assessments, designing and implementing risk mitigation controls. This team is also responsible for managing the optimization, operation, training, and data analysis of the internal threat platform and UEBA (User and Entity Behavior Analytics) and DLP (Data Loss Prevention) platforms within the company.

Responsibilities

- Develop and maintain the organization's insider risk security governance framework, including risk scenario mapping to controls, policies, procedures, and standards that align with industry best practices and regulatory requirements. Such framework must be sufficiently detailed to allow ease of execution with clarity in roles and responsibility amongst stakeholders.

- Communicate the insider threat governance framework to key stakeholders and build effective collaboration models with stakeholders with clear roles and responsibilities, transparent tracking of metrics and seamless management reporting.

- Conduct regular security risk assessments to identify risk trends, vulnerabilities and alert patterns, and work with relevant departments to develop mitigation and remediation strategies.

- Monitor and report on the effectiveness of security controls and the status of security risks to senior management. Communicate risk assessment and trend analysis findings, risks and gaps to both technical and non-technical program stakeholders.

- Coordinate with IT and business units to ensure insider threat security measures are integrated into technology projects and business processes.

- Identify and garner the support of internal and external stakeholders to collaborate on driving change, including risk remediation and leading parties involved to meet risk remediation objectives.

- Translate business and technology requirements into relevant insider threat rules for operational teams to implement

- Stay abreast of the latest security trends, threats, and technologies to continuously improve the organization's insider threat security posture.

- Conduct analysis of large complex datasets involving insider risks, track metrics and identify gaps and vulnerabilities

- Understanding emerging insider risks to build and improve proactive threat detection.

Minimum Qualifications

1. Bachelor's degree or above, with a preference for majors in Information Security, Computer Science, Information Technology, privacy, risk or a related field. Professional certifications such as CISSP, CISM, CRISC, or CGEIT are highly desirable.

2. Minimum of 5 years of work experience, with a preference for experience in DLP (Data Loss Prevention), UEBA (User and Entity Behavior Analytics), or security platforms-related work.

3. Experience with security risk assessment methodologies and tools.

4. Skilled in creating and maintaining risk registers, developing risk treatment plans, and effectively communicating risk posture to stakeholders at all levels of the organization.

5. Self-driven and results-oriented, enjoys challenging tasks, demonstrates enthusiasm for work, and can handle job pressures.

6. Excellent communication and interpersonal skills, with the ability to engage and influence stakeholders at all levels.

7. Proven ability to manage and prioritize multiple projects and tasks.

Preferred Qualifications

- Hands on in-house experience with designing, implementation and operation of commercial or in-house UBA/UEBA solutions (e.g., Splunk, Exabeam) are highly desirable

- Experience with threat modeling methodologies (e.g., STRIDE, PASTA) to analyze and assess security threats within software applications, systems, and networks.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Job Description:

• Able to implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with). Define the process, provisioning, interfaces and provide recommendations.
• Access management and control.
• Engage and execute Security Vulnerability Scanning activities (HCR/NVA/Pen Test/ SAST/DAST activities etc) and resolve findings.
• Manage Access management and SIEM tools in the environment.
• Facilitate auditing processes conducted by external parties.
• Familiar with operational security processes
o OS level patching
o Application-level patching
o Operational housekeeping and archival.
o Server and application hardening procedure & steps
o IM8 policy
o Vulnerability Assessment
o Security Incident detection and reporting
o SSL certificate renewal

Requirements:

Technologies & Skills Required
• OS Administration (Linux / Windows)
• IBM Security Verify Access
• IBM Qradar
• Thales HSM
• OpenSSL
• Tenable Nessus, Burp Suite Enterprise

Top 3 MUST have skills:
• Minimum 2+ years of experience with IT Security.
• CISSP/CCSP/CCSK certification or its equivalent is preferred
• 1-2 areas of Cyber Security domains such as Identity Access Management, Security and Risk Management, Application and Network security, Vulnerability Management with a broad understanding of other areas.

Good to have skills (Optional)
• Familiar with Singapore Government standards of security posture including planning and running SSAT, Security Compliance Check, Security Vulnerability Scanning, DAST & SAST.
• Work with security tools & environment.

Job Description Summary

We are seeking an experienced Senior Information Security Engineer SME with specialization in anti-malware/anti-virus solutions, Endpoint Detect and Response and Network Intrusion Detection Systems, with log analysis using SIEM tools such as Splunk. The ideal candidate should also have strong experience with standing up solutions selected by the business while providing operational guidance, architecture design, integrations including SSO, SIEM, monitoring and other platform integrations, cyber security expertise, incident response collaboration experience, proficiency in vulnerability detection solutions, File Integrity Monitoring (FIM) control and policy configuration experience, operational acumen, and a solid understanding of TCP/IP networking. This role involves architecting, implementing, and maintaining security solutions to protect our infrastructure and end user computing environments, leveraging platforms such as CrowdStrike Falcon, Microsoft Defender for Endpoint, Skyhigh Web Gateway, Trellix Endpoint Security for Storage, and Cisco Firepower Intrusion Detection Systems. The ideal candidate should also have extensive experience in configuring policy, integrations and providing platform support for multiple SaaS based security tools to act as the internal L3 escalation point for tool users and as a liaison between the users and vendor contacts for tools such as Cisco Umbrella, ThreatConnect and Palo Alto Cortex Xpanse.

Key Responsibilities:

Security Solutions Implementation and Management:

• Anti-malware/Anti-virus/Endpoint Detect and Response: Deploy, configure, and manage endpoint protection solutions to defend users and endpoints from malicious content.
• AV/EDR Policy Configuration: Implement and maintain platforms such as CrowdStrike Falcon, Microsoft Defender for Endpoint to protect against common threats. Configure policies to provide a balance between security and user/endpoint operational impact.

Log Analysis and Monitoring:

• SIEM Utilization: Analyze logs using Security Information and Event Management (SIEM) tools such as Splunk and Datadog to identify and respond to security incidents. Implement and manage log aggregation and monitoring solutions.
• Incident Response: Lead incident response efforts, providing root cause analysis, forensics, and remediation.

Deployment and Onboarding:

• Software Package Deployment: Manage the creation of endpoint security software packages for deployment via software distribution tools such as SCCM, JAMF, Puppet to ensure coverage to all endpoints in the environment.

Vulnerability Detection:

• Endpoint Vulnerability Detection: Manage and operationalize the vulnerability detection capabilities of endpoint security software tools for distribution and ingestion via aggregation platforms for consumption by the vulnerability management teams via platform integrations.

Cyber Security:

• Threat Analysis: Conduct thorough cyber security threat analysis and implement mitigation strategies to protect the organization’s assets.
• Policy Development: Develop and enforce cyber security policies, standards, and best practices to ensure a secure operating environment.
• Risk Management: Perform regular cyber security risk assessments and develop comprehensive risk management strategies.

Cloud Security:

• Cloud Platforms: Leverage cloud security best practices to protect services hosted on AWS, Azure, and GCP. Ensure secure configurations, access controls, and monitoring are in place.
• IAM: Manage identity and access management (IAM) policies to enforce least privilege and secure access to cloud resources.

Networking Expertise:

• TCP/IP Networking: Apply a solid understanding of TCP/IP networking principles to design, implement, and troubleshoot secure network configurations and protocols.

Collaboration and Compliance:

• Team Collaboration: Work closely with development, operations, network, and security teams to ensure cohesive and comprehensive security measures.
• Communication Channels: Utilize various communication channels effectively, including meetings, emails, Slack, and MS Teams, to collaborate efficiently with team members and other stakeholders.
• Compliance: Ensure alignment with industry standards and regulatory requirements such as GDPR, SOX, and PCI-DSS. Participate in compliance audits and risk assessments.

Training and Mentorship:

• Education: Provide guidance and training to junior team members and other stakeholders on best practices for edge and cloud security, including the use and management of WAF, DDoS protection, and bot management products.

Preferred Qualifications:

• Experience: 8+ years of experience in a Information Security Engineer role with a strong focus on endpoint AV/EDR, infrastructure based anti-malware solutions and network IDS products (Crowdstrike Falcon, Microsoft Defender for Endpoint, SkyHigh Web Gateway, Trellix Endpoint Security for Storage, and Cisco Firepower Intrusion Detection Systems.)
• Technical Skills:Strong experience with performing solution stand-up including architectural design and implementation.
  Strong experience with modern antimalware and endpoint detect and response solutions (CrowdStrike Falcon and Microsoft Defender for Endpoint)
  Experience with infrastructure focused antimalware solutions providing secure ICAP server services (Skyhigh Web Gateway)
  Experience with infrastructure focused antimalware solutions providing enterprise storage (NetApp) Antivirus services. (Trellix Endpoint Security for Storage)
  Experience in providing integrations with platforms such as SSO and SIEM tools.
  Expertise in log analysis and monitoring using SIEM tools like Splunk.
  Solid understanding of TCP/IP networking, network security principles, firewalls, IDS/IPS, and secure communication protocols
  Familiarity with cloud security best practices and secure configurations on AWS, Azure, and GCP.
  Knowledge of software deployment solutions and providing packages for deployment tools (SCCM, JAMF, Puppet)
  

Soft Skills:

• Problem-Solving: Excellent analytical and problem-solving skills.
• Communication: Strong communication and collaboration abilities.
• Leadership: Proven leadership and mentorship capabilities.
• Team Player: Strong ability to work effectively within a team environment and collaborate across various teams.
• Adaptability: Ability to work independently and handle multiple, complex priorities in a fast-paced environment.

Our client, one of Asia-Pacific’s leading organizations is looking for:

Senior IT Security Analyst

Responsibilities:

• Oversee the entire incident response lifecycle from detection to resolution.
• Lead investigations of IT security incidents and ensure thorough root cause analysis and remediation.
• Develop and implement advanced threat detection and monitoring strategies.
• Utilize SIEM, EDR, and other security tools for timely incident detection.
• Prepare and present detailed reports on threat statistics to stakeholders.
• Use data visualization tools to communicate threat trends and insights.
• Evaluate and integrate new technologies to enhance security operations.
• Coordinate with internal, external stakeholders, and vendors during incidents.

Requirements:

• Degree in Information Systems, Computer Science, Cybersecurity, or a related field.
• Professional Certifications in incident handling and security analysis preferred.
• GCIH or its equivalent is preferred
• Experience in IT security, with a focus on Incident response
• Intermediate knowledge of security operations, incident analysis, incident handling, and vulnerability
• management or testing, system patching, log analysis, intrusion detection, or firewall administration
• Proficiency in Security Information and Event Management (SIEM), Endpoint Detection and Response
• (EDR), traffic and packet analysis, digital forensics, and cloud security.
• Experience in Blue/Purple teaming, firewall, Intrusion Prevention Systems (IPS), Web Application
• Firewalls (WAF) administration, virtualization, and cloud technologies.
• Knowledge and experience in Linux/Windows/Database technologies preferred.

-----------------------------------------------------------------------------------------------------

Interested applicants can also email CV at [email protected] (for faster processing, please state the exact job/position title applied “IT Security Analyst”)

Only shortlisted candidates will be notified.

-----------------------------------------------------------------------------------------------------

EA License Number: 10C3636
EA Personnel Name: Vimmi Baunthiyal
EA Personnel Registration Number: R1543982

The primary focus of this position is the support the maintenance of the human resource management system (HRMS) in addition to other systems supported by the HRIS team. This position serves as a technical point of contact for assigned functional areas and assists subject matter experts with ensuring data integrity, testing of system changes, report writing and analyzing data flows for process improvement opportunities. The HRIS analyst also supports HRMS upgrades, patches, testing and other technical projects as assigned.

Essential Functions

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

1. System Maintenance (5% of time): Assist in the review, testing and implementation of HRMS upgrades or patches. Collaborate with functional and technical staff to coordinate application of upgrade or fix. Maintain HRMS tables. Document process and results.
2. Production Support (20% of time): Provide support for HRMS, including researching and resolving HRMS problems, unexpected results or process flaws; performing scheduled activities; recommending solutions or alternate methods to meet requirements.
3. Projects/Process Improvement (55% of time): Recommend process/customer service improvements, innovative solutions, policy changes and/or major variations from established policy that must be approved by appropriate leadership prior to implementation. Serve as a key liaison with third parties and other stakeholders (e.g. payroll). Use project management skills in managing projects. May provide overall project management for a given HR initiative.
4. Reports/Queries (10% of time): Write, maintain and support a variety of reports or queries using appropriate reporting tools. Assist in development of standard reports for ongoing customer needs. Help maintain data integrity in systems by running queries and analyzing data.
5. Training (5% of time): Develop user procedures, guidelines and documentation. Train clients on new processes/functionality. Train new system users.
6. Individual Development (5% of time): Maintain awareness of current trends in HRMS with a focus on product and service development, delivery and support, and applying key technologies. Examine trends in information systems training, materials and techniques. Through classes, reading, CBTs or other mechanisms, continuously increase both HR knowledge and HRIS application/tools knowledge. Participate in user group meetings/conferences.

Requirements

• Min Degree in Human Resources
• Min 4-5 years of experience would be at an advantage
• Office Hours/ 5 Days
• Excellent communication skills is a must
• Good management skills of team

If you are interested in the position, do kindly drop your most updated resume to [email protected]

Thank You.

Leon Leong De Cong

R1551708

Recruit Express Pte Ltd (Healthcare & Lifesciences Division)

EA License: 99C4599

Lico Resources, the specialist executive search firm, is partnering with a leading financial institution in searching for an Information Technology Risk Management Professional. The institution is a key player in the finance sector and is dedicated to fostering a secure and technologically advanced environment for its clients. they are seeking a dynamic professional to join their existing team in Singapore.

This role involves collaborating with internal and external teams to assess risks, implement effective security measures, and ensure the overall robustness of the technology landscape.

Key Responsibilities:

• Conduct comprehensive risk assessments for the firm's IT systems, applications, and processes.
• Develop, implement, and enforce risk management policies, procedures, and controls to mitigate potential threats.
• Collaborate with cross-functional teams to identify and address emerging risks associated with technological advancements.
• Monitor and analyze security incidents, providing timely response and remediation strategies.
• Stay abreast of industry trends, emerging threats, and best practices to enhance the firm's risk management capabilities.
• Communicate effectively with stakeholders, including IT teams, senior management, and regulatory bodies.

Qualifications:

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Minimum of 8 years of experience in information technology risk management.
• Strong understanding of information security frameworks, risk assessment methodologies, and regulatory requirements.
• Familiar with related regulations such as Technology Risk Management Guideline, CCoP2 Risk Management Practices, Guideline on Business Continuity Management, Guideline on Outsourcing and other relevant notices and guidelines
• Familiarity with industry frameworks and methodologies for technology risk management, such as NIST Cybersecurity Framework, ITIL, ISO 27001, and COBIT. Professional certifications such as CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), or CRISC (Certified in Risk and Information Systems Control) are advantageous.
• Experience with risk assessment tools and technologies.
• Excellent communication skills, both written and verbal.

If you are interested in this role, please send us your updated resume today to [email protected] quoting reference number A08915. Please note that only shortlisted candidates will be notified.

“Data provided is for recruitment purposes only.”

Job Reference No: A07415 EA Licence No.: 13C6733 EA Registration No.: R1333454

ABOUT THE NATIONAL INSTITUTE OF EDUCATION (NIE)

The National Institute of Education (NIE), Singapore, is Singapore’s national teacher education institute and we are proud to be an integral part of the nation’s education service. We play a key role in the preparation of teachers and in the provision of teacher professional and school leadership development programmes. We are committed to our vision of being An Institute of Distinction: Leading the Future of Education and our mission to Inspire Learning, Transform Teaching and Advance Research.

NIE invites suitable candidates to join the Division of Academic Computing & Information Services (ACIS) as a Senior IT Security Analyst (3-year contract).

Key Responsibilities:

Incident Response Leadership

• Oversee the entire incident response lifecycle from detection to resolution.
• Lead investigations of IT security incidents and ensure thorough root cause analysis and remediation.
• Develop and maintain incident response playbooks and procedures.
• Coordinate with internal, external stakeholders, and vendors during incidents.
• Conduct post-incident reviews and report findings to management.

Monitoring and Detection

• Develop and implement advanced threat detection and monitoring strategies.
• Utilize SIEM, EDR, and other security tools for timely incident detection.
• Perform threat hunting and proactive security assessments.
• Collaborate with IT teams to deploy and optimize security solutions.

AI and Automation

• Integrate AI and automation technologies to enhance security operations.
• Develop automated workflows and scripts for incident response and routine tasks using SOAR.
• Leverage machine learning and AI-driven tools for threat detection and analysis.
• Stay updated with advancements in AI and evaluate their applicability to security operations.
• Apply system design thinking to security solutions.

Threat Statistics and Reporting

• Analyze and compile statistics on threats relevant to the Institute.
• Prepare and present detailed reports on threat statistics to stakeholders.
• Use data visualization tools to communicate threat trends and insights.

Innovation and Continuous Improvement

• Evaluate and integrate new technologies to enhance security operations.
• Foster a culture of continuous improvement within the team.
• Encourage continuous learning and professional development.

Forensics Capability Development

• Enhance the team's digital forensics capabilities.
• Develop forensic investigation procedures and protocols.
• Train team members in forensic tools and methodologies.
• Oversee the collection, preservation, and analysis of digital evidence.
• Collaborate with legal and compliance teams to ensure regulatory alignment.
• Conduct regular drills and simulations for forensic readiness.

Requirements:

• Degree in Information Systems, Computer Science, Cybersecurity, or a related field.
• Professional Certification(s) in incident handling and security analysis preferred.
• GCIH or its equivalent is preferred
• Minimum of 8 years of progressive experience in IT security, with a focus on Incident response
• Minimum of 4 years of experience in a security operations center, with proven leadership capabilities.
• Intermediate knowledge of security operations, incident analysis, incident handling, and vulnerability management or testing, system patching, log analysis, intrusion detection, or firewall administration
• Proven experience in managing incident response and performing threat hunting
• Proven experience in integrating AI and automation in IT Security using Security Orchestration Automated Response (SOAR) technologies.
• Proficiency in Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), traffic and packet analysis, digital forensics, and cloud security.
• Experience in Blue/Purple teaming, firewall, Intrusion Prevention Systems (IPS), Web Application Firewalls (WAF) administration, virtualization, and cloud technologies.
• Experience in monitoring and administering host-based intrusion detection systems.
• Knowledge and experience in Linux/Windows/Database technologies preferred.
• Strong knowledge of industry standards and information security policy frameworks.
• Hands-on experience with scripting and automation tools to enhance security operations.
• Ability to conduct gap analysis of current processes and identify opportunities for improvement.
• Evaluate internal and external environments for threats related to Information Security and act as a subject matter expert to ensure these are properly addressed and controlled.
• Continuously improve event correlation and alerting processes and use cases to detect potential incidents.
• Automate manual processes to enhance security incident response.
• Experience with network security assessment tools.
• Excellent leadership and team management skills, with the ability to inspire and motivate a team.
• Strong communication skills, with the ability to effectively interact with stakeholders at all levels, including University administration.
• Demonstrated ability to drive strategic initiatives and lead a team through change.
• Exceptional problem-solving skills and the ability to think critically under pressure.
• Ability to interview stakeholders to define and document business requirements.
• Provide advice and guidance on response action plans for information risk events and incidents based on incident type and severity.

Other Information

NIE staff can take chartered buses at their own expense from or near their home to the NIE campus. This is subject to the availability of bus routes and seats.

Req ID: R00018131

We are seeking a highly skilled and experienced DLP engineer with profound knowledge in leading DLP solutions such as Trellix, Forcepoint, Digital Guardian, Symantec, Skyhigh or Zscaler as well as database technologies like MSSQL. The successful candidate will be responsible for maintaining and fine-tuning an advanced DLP solution for a large organization, and will work closely with various stakeholders to ensure a successful implementation as well as manage an integrated reporting dashboard.

Responsibilities:

• Collaborate with stakeholders to create, review, and finalize DLP policies and rules
• Develop and maintain technical design documentation, configuration documents, and build guides
• Assess customer environment and validate pre-requisites prior to implementation
• Configure DLP solutions to work with Internet Content Adaptation Protocol (ICAP) for monitoring web traffic.
• Proficient in configuring ICAP and proxy integration for Data Loss Prevention (DLP) setups
• Develop, configure, and test DLP policies and rules to ensure effectiveness and compliance
• Manage the DLP appliance upgrade process, ensuring seamless updates and minimal disruption to operations
• Lead User Acceptance Testing (UAT) and pilot testing phases to address any issues and validate success
• On-site support for issue troubleshooting
• Execution of change requests to remediate issues

Requirements:

• 3 years experience in DLP Solutions and cyber security or a similar role
• Implementation or management experience of cyber security solutions
• Experience with MSSQL administration and crafting/running SQL queries
• Experience with Network DLP technologies a plus
• Experience with windows tools, administration and IIS a plus
• Demonstrate soft skills to interact and engage customers and various stakeholders
• Ability to work independently and with minimal supervision on projects
• Able to work in a team
• Strong problem solving, oral and written communication skills
• A strong desire to step out of your comfort zone and into an opportunity where you drive the work

Preferred Credentials:

• Relevant certifications in leading DLP solutions (e.g., Trellix, Forcepoint, Digital Guardian, Symantec)
• Industry certifications in information security, such as CISSP, or CCSP
• Familiarity with change management procedures a plus

Interested candidates may send their CV to MAC (Reg No. R1221300) at [email protected] quoting the job title in the Subject line. We regret that only shortlisted candidates will be notified.

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Requirement

• Diploma/Bachelor's Degree in Computer Science, Information systems, or related field.
• At least 2 years of experience in Cyber Security.
• Direct Information Security experience in a security engineer, consultant or a similar role, preferably with incident management experience in a SOC environment.
• Skills in Cyber security: Cyber kill chain, TTP, threat intelligence, malware triage.
• Knowledge in Internet infrastructure, networking technology and network security

Responsibilities

• Analyzing cybersecurity events, improving threat detection capabilities and procedures
• Correlate with SIEM and other sources of information and conduct investigative works into all traffic anomalies against established, historical baselines to identify the root cause to an incident.
• To monitor and analyze real-time security investigations to initiate triage, containment and remediation of security threats and other malicious activity, and escalate issues as needed.
• Digital forensics to analyze security tool events/alerts, while maintaining proper evidence-handling best-practices during an incident.
• Provide of reporting and metrics around security monitoring by designing dashboards for asset owners and management consumption.
• Responsible for continuous monitoring, tracking and closure of security events and requests from managed SOC, systems and users.

Interested applicants, Please send your updated resume in Word format to [email protected]

Please indicate Job Code 109 on email subject

We regret that only shortlisted candidates will be notified.

IT Consultancy & Services Pte Ltd

EA No: 92C5311 | EA Reg No. R1104129

Please visit www.itcspl.com to learn more information about ITC

Position Overview:

We are looking for a seasoned Senior Information Technology Analyst to join our technology team in the fast-paced and high-stakes trading sector. In this role, you will be responsible for the maintenance, enhancement, and optimization of our trading systems, infrastructure, and network security. Your expertise will directly impact our ability to trade effectively and securely in a highly volatile and competitive environment.

This is a demanding role that requires an individual who thrives under pressure, works with urgency, and can handle mission-critical responsibilities, often with little room for error. You will be expected to work on complex technical issues related to low-latency trading systems, risk management software, data analytics, and cybersecurity in a 24/7 operational environment.

Key Responsibilities:

• Trading Systems Support & Optimization: Maintain and optimize low-latency trading platforms and ensure they perform at the highest levels of efficiency and reliability under market stress.
• Infrastructure Management: Oversee network infrastructure, servers, and storage solutions that support high-frequency trading (HFT) and algorithmic trading systems.
• Security & Compliance: Manage and enforce strict security protocols to protect sensitive trading data, including risk management and regulatory compliance.
• Incident Management: Quickly troubleshoot, resolve, and document incidents impacting trading systems, with a focus on minimizing downtime and optimizing recovery times.
• Continuous Monitoring: Implement real-time monitoring tools and automated alerting systems to detect system anomalies, security breaches, or any potential failures before they impact trading operations.
• Collaboration: Work closely with traders, quantitative analysts, and other IT teams to ensure technology solutions align with business objectives and trading strategies.
• Project Leadership: Lead key projects related to infrastructure upgrades,security improvements, or the integration of new trading technologies.
• Performance Tuning: Fine-tune trading applications, databases, and network components to achieve ultra-low latency and maximum throughput.

• Skills & Expertise:

• System Management & Optimization:
• Oversee and maintain the company’s IT infrastructure, including hardware, software, and network systems.
• Ensure that all IT systems are up-to-date and compliant with international trade regulations.
• Monitor the performance of software systems used for tracking imports and exports and troubleshoot any issues.
• Data Management & Security:
• Manage the import/export data, ensuring it is accurate and properly stored in the company’s databases.
• Safeguard sensitive trade data, such as customs information, product specifications, and shipping details, ensuring compliance with data protection regulations.
• Implement security protocols to protect company data and information from cyber threats.
• Software Implementation & Support:
• Support the integration of IT systems that help streamline the import/export process, such as Enterprise Resource Planning (ERP) systems,transportation management systems (TMS), and customs management software.
• Work with external software vendors to ensure seamless operations, including training staff on software usage.
• Automation of Business Processes:
• Identify areas within the supply chain where automation can be introduced to reduce time, errors, and manual work, such as automating order processing, shipment tracking, and invoicing.
• Design and implement custom IT solutions to improve efficiency and reduce operational costs.
• Collaboration with Stakeholders:
• Collaborate with the logistics, shipping, and customs departments to understand their IT needs and provide solutions.
• Work with external stakeholders like suppliers, customs authorities, and freight forwarders to ensure smooth data exchange and compliance with international regulations.
• Reporting & Analysis:
• Generate and maintain reports on import/export operations, helping senior management analyze performance, trends, and issues.
• Use data analytics to forecast demand, optimize routes, and improve supply chain management.
• Compliance & Regulatory Support:
• Stay updated on IT-related regulations in the import/export industry, such as compliance with customs laws, international trade regulations, and data privacy laws.

o Ensure that the company's IT systems support compliance with various global standards for international trade.

• Problem Solving & Troubleshooting:
• Troubleshoot IT issues related to logistics systems, shipment tracking, customs paperwork, and other import/export functions.
• Provide timely solutions to minimize downtime or delays in operations.
• Training & Support:
• Provide training to staff on new IT tools and systems to ensure efficient use and understanding.
• Offer ongoing technical support to employees regarding the use of trade and logistics software or any related IT systems.
• Project Management:
• Manage IT projects related to upgrading systems or implementing new technologies that improve the import/export process.
• Ensure that IT projects are completed on time, within budget, and meet the needs of the business.

Required Qualifications:

• Education: Bachelor’s or master’s degree in computer science, Information Technology, Engineering, or a related field.
• Experience: 3+ years of IT experience with at least 1 years in a senior or leadership role within the trading sector or related industries.
• Able to Drive a Car and Meet with Clients Indepentently
• Valid Driving License is Preferable

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Job responsibilities

Coordination with stakeholders relevant to new Information Security System

• Coordinate with APAC stakeholders on general planning & logistic matters (such as meeting scheduling, explaining background of the initiative and prepare meeting minutes post meeting with stakeholders)
• Coordinate with APAC stakeholders to distribute relevant documentation, survey and follow up with stakeholders on a timely manner for submission.
• Ensure completeness of documentation and/or survey submitted by the stakeholders, and conduct necessary follow-ups on any insufficient information identified.

Respond to queries from stakeholders pertaining to new Information Security System

• Observe and learn the basic functionality and workflows of new Information Security System.
• Provide thorough and timely response towards APAC stakeholders pertaining to Information Security System governance matters.
• Assist Direct Manager on Governance Operations activity such as conducting analysis on data generated from the system to identify any trends.
• Support the DLP team on end-to-end collaboration matters with all relevant stakeholders.

Others

• Continuous learning to enhance knowledge on targeted new Information System environment with guidance from Direct Manager.
• Able to grasp and understand the queries from Business users and respond rightly in a timely manner.
• Assist Direct Manager on ad-hoc basis for other DLP related matters.

Job Requirements:

• 1 to 2 years understanding and operation of Information Security relevant system. Experience in Financial service would be preferred.
• Experience in interpersonal and analytical skills attributes
• Good written and visual presentation skills (Excel, Word, PowerPoint)
• Good and thorough communication with
• Ability to work effectively in a team environment, and takes initiatives to collaborate and challenge status quo, and adaptable to embrace new changes
• Self-motivated and able to work with minimum instructions and source for information, systematically evaluate options and recommend solutions
• Degree in Information Security, Computer Engineering, Information Systems, Computer Science or equivalent
• IT professional with at least 1 to 2 years of relevant experience in IT Security, DLP relevant system and operations within the Banking and Finance industry

“This is in partnership with the Employment and Employability Institute Pte Ltd (“e2i”).

e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance and skills upgrading services, and partnering employers to address their manpower needs through recruitment, training, and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation-wide manpower and skills upgrading initiatives. By applying for this role, you consent to A-IT Software Services Pte Ltd’s PDPA and e2i PDPA.

Responsibilities:

Under minimal direction, formulate and define system scope and objectives based on both user needs and a good understanding of information technology, business processes, and industry requirements.
Act as a liaison between client and technical solutions/ support groups, using advanced communication skills to elicit, document, analyze and validate client requirements.
Apply extensive knowledge of the client's business and industry to develop requirements specifications.
Document requirements and translate into proper system requirements specifications using high-maturity methods, processes and tools.
Develop visualization, user experience and configuration elements of solution design.
Execute and coordinate requirements management and change management processes.
Develop and maintain internal and external relationships to support management of scope and expectations.
Participate in proposals, feasibility studies, implementations, and new business development.
Operates as a team member and as a team leader. Advise on methods to improve business processes.
Consider the business implications of the application of technology to the current and future business environment.
Develop and execute acceptance test plans and test cases.
May lead the training of clients and peers.

Interested candidate please click "APPLY" to begin your job search journey and submit your CV directly through the official PERSOLKELLY job application platform - GO Mobile.

We regret to inform that only shortlisted candidates will be notified.
By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

PERSOLKELLY Singapore Pte Ltd
• RCB No. 200007268E • EA License No. 01C4394
• <R21100074> <Cheryl Thng Wei Lin>

Job Description

The successful candidate will be part of the Cloud & Platforms team.

He/She will be responsible for the following:

• Deep exposure to on-premises Linux and/or Windows administration on VMWare including SAN and storage solutions.

• Perform system administration and troubleshooting activities (including outside normal business hours) in accordance with company policies and procedures.

• Create and maintain documentation, and processes.

• Provide a focus on automation and Infrastructure-as-Code (IaC) to improve agility using tools such as Ansible, Python, and Terraform.

• Support audit and infrastructure/network security scans, disaster recovery and security related drills.

• Explore, learn and deploy new technologies that will help the company to reduce cost or improve operational efficiencies.

Requirements

• Possess a degree in Information Technology or related fields.

• Minimum of 5 years of IT experience with at least 3 years of hands-on experience in a similar role.

• Experience managing both Unix (Linux and/or AIX) and Windows servers. Expert level (e.g. certified) in one at least one: covering installation, configuration, security, networking, storage, patching, hardening etc.

• Experience working in VMWare environments.

• Practical experience administering SAN and related storage technologies.

• Experience with Python/Ansible scripting skills for provisioning and automating dynamic infrastructure.

• Demonstrate strong knowledge in infrastructure areas such as virtual server technologies, storage, networking, internet protocols, operating systems, scripting & monitoring tools and IT Security.

• Experience in Agile methodologies, DevOps, CI/CD and related tools preferred.

• Strong analytical, project management, communications, and interpersonal skills.

Job Responsibilities

• Responsible for the Engineering Project Information / Data Management functions but not limited to collection and management of information from one or more sources and the distribution of that information to one or more audiences
• Under general supervision, solves complex problems requiring detailed knowledge of field and industry best practices
• Uses experience and problem solving skills to develop and improve processes
• Proficient in steady-state simulation using Aspen Plus, Aspen Hysys, UniSim, and HTRI.
• May provide guidance to less experienced team members
• Perform regular Data validation checks and Flag inconsistencies to Engineering and resolve the inconsistencies
• Perform Data Loading / importing to databases
• Tag and Data Management
• Data Class Library management for Project
• To support the detailed engineering design effort by the use of standard tools, as well as support the project close-out and turn-over effort
• To support in developing digital transformation solutions based on Seeq and Forge platforms.
• To support data and document submittal to Client as per the scope of work
• To support and manage the flow of data and documentation to the Client
• To follow the contractual requirements for information/data turnover to assure a seamless transfer of information to Client.

Job Requirements

• Bachelor of Science Engineering Degree with minimum 10 years of experience
• Knowledge and proficiency on Engineering Systems and Tools and its work processes
• Specialization in Oleflex, Aromatics, and Platforming process technologies, will be an added advantage
• Good understanding on Engineering Work flow and key deliverables
• Experience with O&G Offshore/Onshore projects with hands-on Project Information Management OR digital engineering solutions but not limited to:

1. Class library, Naming Rules, Attribute data definition
2. Data collection and validation methods
3. Data exchange interfaces
4. Data Exports and metrics reporting
5. Engineering and Supplier Tag & Data Management
6. Engineering software systems & tools

• Good Knowledge of Engineering Database Warehouse systems
• Experience in Engineering Data Class library Management
• Experience in Database Management System, SQL development, VBA, SQL Server Reporting services,
• Proficient in using Aspen Plus, Aspen Hysys, UniSim, and HTRI for simulation and modeling.
• Preparation of Data Management Plan / procedures

Job Description

Major job scope includes but not limited to:

• Manage IT infrastructure, including on-premises and cloud-based servers, storage, and networking systems.
• Ensure high availability and performance through proactive monitoring and maintenance of systems.
• Plan and implement IT infrastructure upgrades to meet evolving business needs.
• Troubleshoot and resolve infrastructure and network-related problems efficiently.
• Lead and mentor the IT team, fostering a collaborative and productive work environment.
• Assign tasks, monitor team performance, and provide opportunities for skill development.
• Work closely with departments to address IT requirements and ensure alignment.
• Develop and enforce IT security policies and procedures (IT-related SOPs) to protect company assets and to ensure compliance with regulatory requirements.
• Ensure compliance with PDPA and cybersecurity frameworks.
• Monitor systems for vulnerabilities and manage timely responses to incidents.
• Oversee access management, firewalls, antivirus, and endpoint security systems.
• Plan and execute IT projects aligned with company goals and priorities.
• Manage IT budgets, resources, and relationships with vendors effectively.
• Partner with vendors and service providers to ensure high-quality IT service delivery.
• Provide regular updates on IT projects, operations, and performance improvements.
• Establish protocols for monitoring infrastructure and network performance.
• Implement robust data backup, disaster recovery, and business continuity plans.
• Manage cloud resources and ensure seamless integration with on-prem systems or data centres.
• Act as the primary contact for internal and external IT-related matters.
• Present IT performance metrics and improvement plans to senior management.

Requirement

• Bachelor’s degree in Computer Science, Information Technology Engineering, or a related field.
• Minimum of 5 years of experience in IT infrastructure, network management, and team leadership.
• Strong knowledge of Window Operating System, Microsolf, server administration, networking, storage solutions, and cloud platforms (e.g., AWS, Azure, Google Cloud).
• Hands-on experience with IT security tools and practices, including firewalls, antivirus, and endpoint security.
• Familiarity with backup solutions, disaster recovery, and business continuity planning.
• Candidates with these certifications will have a distinct advantage: ITIL, CISSP, CISM, Cloud certifications such as AWS Certified Solutions Architect or Microsoft Azure Administrator, CCNA, CCNP and MCSE. Equivalent experience may also be considered.
• Excellent analytical skills for diagnosing and resolving complex IT issues with strong decision-making and critical-thinking capabilities

Guidelines for Applicants:

• You may apply thru Mycareers Future or email to [email protected]

Job Description

Major job scope includes but not limited to:

• Manage IT infrastructure, including on-premises and cloud-based servers, storage,and networking systems.
• Ensure high availability and performance through proactive monitoring and maintenance of systems.
• Plan and implement IT infrastructure upgrades to meet evolving business needs.
• Troubleshoot and resolve infrastructure and network-related problems efficiently.
• Lead and mentor the IT team, fostering a collaborative and productive work environment.
• Assign tasks, monitor team performance, and provide opportunities for skill development.
• Work closely with departments to address IT requirements and ensure alignment.
• Develop and enforce IT security policies and procedures (IT-related SOPs) to protect company assets and to ensure compliance with regulatory requirements.
• Ensure compliance with PDPA and cybersecurity frameworks.
• Monitor systems for vulnerabilities and manage timely responses to incidents.
• Oversee access management, firewalls, antivirus, and endpoint security systems.
• Plan and execute IT projects aligned with company goals and priorities.
• Manage IT budgets, resources, and relationships with vendors effectively.
• Partner with vendors and service providers to ensure high-quality IT service delivery.
• Provide regular updates on IT projects, operations, and performance improvements.
• Establish protocols for monitoring infrastructure and network performance.
• Implement robust data backup, disaster recovery, and business continuity plans.
• Manage cloud resources and ensure seamless integration with on-prem systems or data centres.
• Act as the primary contact for internal and external IT-related matters.
• Present IT performance metrics and improvement plans to senior management.

Requirement

• Bachelor’s degree in Computer Science, Information Technology Engineering, or a related field.
• Minimum of 5 years of experience in IT infrastructure, network management, and team leadership.
• Strong knowledge of Window Operating System, Microsolf, server administration, networking, storage solutions, and cloud platforms (e.g., AWS, Azure, Google Cloud).
• Hands-on experience with IT security tools and practices, including firewalls, antivirus, and endpoint security.
• Familiarity with backup solutions, disaster recovery, and business continuity planning.
• Candidates with these certifications will have a distinct advantage: ITIL, CISSP, CISM, Cloud certifications such as AWS Certified Solutions Architect or Microsoft Azure Administrator, CCNA, CCNP and MCSE. Equivalent experience may also be considered.
• Excellent analytical skills for diagnosing and resolving complex IT issues with strong decision-making and critical-thinking capabilities.

Guidelines for Applicants:

• You may apply thru Mycareers Future or email to [email protected]