Job Description

You will be a member of the Group Information Security Team responsible for initiating, implementing, and maintaining security products and solutions to support enterprise security.

Key Responsibilities:

•Subject matter expert (SME) for the security systems owned by the Information Security Team.

•Ensure security systems are utilized to their maximum capabilities.

•Plan, identify, assess, design, operationalize, and maintain multiple security-related software and/or hardware.

•Recommend and drive cyber security solutions and initiatives to improve the cyber security of the organization.

•Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.

•Provide security consultancy, technical guidance, expertise, solutions, and education.

•Advise infrastructure teams on security design that is relevant and fit for purpose.

•Identify and assess cyber risks in the IT infrastructure environment.

•Review firewall requests.

•Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines, and deliverables.

•This is an individual contributor role. Deliver tasks with minimal supervision.

•Provide AUDIT support such as PCI-DSS, and Cyber Maturity Assessment.

•Strong communication skills.

•Coordinate and Deploy SIA Group/GIT cybersecurity initiatives in Scoot.

Requirements:

•Degree in IT or related field, with at least 5 years in information security, especially in the cybersecurity space.

•Professional security certifications (SANS, CISSP, CEH, OSCP, CISA, etc) preferred.

•Experience in security products POC and RFQ.

•Prior experience in implementing and maintaining any of the tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM, etc., and/or network security. Able to review firewall requests.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

•Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience is preferred.

•Knowledge of cyber security threats, vulnerabilities, hacking, exploit methods, etc.

•Strong oral, written, presentation, and inter-personal skills.

•Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

Key Responsibilities:

Cybersecurity Risk Assessment & Mitigation:

• Cyber Risk Assessment: Conduct comprehensive cyber risk assessments in support of technology initiatives, identifying IT-related risks and recommending appropriate security controls to mitigate those risks.
• Risk Monitoring & Management: Continuously track and manage risk mitigations and exceptions, ensuring that risk reduction measures are implemented and that monitoring capabilities are integrated into the solutions to detect and respond to evolving threats.
• Compliance & Best Practices: Ensure that all security measures and controls are in compliance with internal policies, industry standards, and regulatory requirements (e.g., GDPR, HIPAA, PCI-DSS).

Network Security Design & Implementation:

• Solution Design: Design High-Level (HLD) and Low-Level (LLD) network security solutions, tailoring the security architecture to meet specific business requirements and security needs.
• Firewall & UTM Solutions: Implement and manage firewall and Unified Threat Management (UTM) solutions, including but not limited to Checkpoint, Fortigate, Palo Alto firewalls, and AWS-based security configurations.
• Encryption & Authentication: Design and deploy robust encryption technologies (e.g., Symantec 12.1.4) and implement two-factor authentication solutions (e.g., RSA Secure ID) to ensure secure access to corporate resources.
• Cloud Security: Manage and secure cloud environments, including AWS firewalls, AWS Shield, and AWS WAF, to safeguard cloud-based assets and services.

Security Incident & Problem Management:

• Incident Management: Respond to and resolve security incidents, monitoring for any unauthorised access, vulnerabilities, or breaches in the network. Investigate the root cause and implement remediation strategies.
• Change Management: Oversee changes in the network security environment, including the installation, configuration, and maintenance of firewalls, load balancers (e.g., F5 LTM/ASM), and proxy servers (e.g., Bluecoat, ZIA, ZPA).
• Proxy & Web Security: Manage and secure proxy servers and web security gateways (WSGA, Websense), ensuring that all outbound and inbound traffic adheres to the organisation’s security policies.

Global Client Support & Collaboration:

• Client Communication: Act as a liaison for global clients, understanding their security requirements and proposing tailored solutions that address their unique needs.
• Client Support: Provide ongoing support for security infrastructure deployed across various client locations, including resolving incidents, handling requests, and managing vulnerabilities.

Security Monitoring & Reporting:

• Network Monitoring: Utilise network monitoring tools (e.g., SolarWinds, CA Spectrum, and E-Health) to proactively identify potential threats and vulnerabilities in the network.
• Reporting & Documentation: Maintain detailed records of risk assessments, security incidents, mitigations, and system configurations. Prepare reports for management and stakeholders on security posture and risk mitigation progress.

Training & Awareness:

• Security Awareness: Educate internal teams and clients on best security practices, risk management strategies, and incident response protocols.
• Continuous Improvement: Stay updated with the latest trends, tools, and technologies in network security, ensuring the company’s security measures remain current and effective.

Job Requirements:

Qualifications:

• Experience: 10+ years of experience in network security, systems security, and risk management, with a proven track record in implementing network security solutions and managing complex security infrastructures.
• Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience).
• Certifications:
  • ITIL Foundation (V3 or higher)
  • VMware 6.x or similar (preferred)
  • Relevant certifications in network security such as CISSP, CISM, or CompTIA Security+.

Technical Skills:

• Network Security: Expertise in designing and implementing network security solutions, including firewalls (Checkpoint, Fortigate, Palo Alto), VPN solutions, and UTM.
• Cloud Security: Proficient in securing cloud environments such as AWS, including AWS WAF, AWS Shield, and AWS Firewall management.
• Proxy & Web Security: Experience with proxy servers and web security gateways such as Bluecoat, ZIA, ZPA, WSGA, and Websense.
• Network Monitoring: Hands-on experience with network monitoring tools like SolarWinds, CA Spectrum, and E-Health to ensure security and performance.
• Authentication & Encryption: Strong knowledge of authentication mechanisms (e.g., RSA Secure ID Two-Factor Authentication) and encryption solutions (e.g., Symantec 12.1.4).
• Incident Management & Troubleshooting: Experience in handling security incidents, conducting root cause analysis, and troubleshooting security issues.
• Firewalls & Load Balancers: Expertise in managing firewalls, load balancers (e.g., F5 LTM/ASM), and network configurations to ensure a secure and efficient IT infrastructure.

Soft Skills:

• Analytical & Problem-Solving: Strong analytical skills with the ability to assess complex security risks, identify vulnerabilities, and recommend effective solutions.
• Communication Skills: Excellent written and verbal communication skills to liaise with clients, teams, and management. Ability to explain complex security issues to non-technical stakeholders.
• Collaboration & Teamwork: Able to collaborate with multiple teams, both internal and external, to implement solutions and drive security initiatives.
• Client-Focused: Strong client management skills with the ability to understand and address specific security needs for global clients.

The security analyst is responsible for analysing cybersecurity events, improving threat detection capabilities and procedures. If an event results in a security incident, the analyst will work with the relevant stakeholders to respond and contain the incident.

Key Responsibilities:

- Improving threat detection capabilities, driving lessons learn from incidents and identifying potential gaps in security controls.

- Responsible for maintaining detection capabilities for the SOC.

- Analyse large dataset and correlate information from various sources to identify the root cause to an incident.

- Enhance and drive improvements for SOC detection and response playbooks.

- Take the lead in incident response to minimize the impact of a security incident to our organization.

- Work cooperatively with various IT infrastructure team, applications and business units for the effective operations of the security.

Qualifications:

- 3 years or more relevant working experience in information security technologies.

- Understanding of the tactics, techniques and procedures of cyber advesaries.

- Insurance / Financial industry experience.

- Industry certifications CISSP, CEH, or GIAC preferred.

- Experience in Splunk preferred.

- Comfortable with analysing and processing large datasets.

- Good interpersonal and communication skills.

- Willing to learn and able to work well in a team.

The Security SOC Analystis responsible for monitoring, analyzing, and responding to security incidents in real-time within a Security Operations Center (SOC). This role involves ensuring the security and integrity of the organization's systems by identifying threats, mitigating risks, and collaborating with various teams to address vulnerabilities.

Key Responsibilities:

1. Monitoring & Threat Detection

• Continuously monitor and analyze alerts from security tools (e.g., SIEM, IDS/IPS, firewalls) to identify potential threats.
• Investigate and evaluate security incidents, determining severity and potential impact on systems.
• Escalate suspicious activities and unresolved incidents to senior analysts or response teams.

2. Incident Response

• Execute response plans for security incidents, ensuring containment, mitigation, and recovery.
• Collaborate with incident response teams to analyze, investigate, and resolve breaches or data loss events.
• Maintain detailed incident reports and documentation for accurate tracking and compliance purposes.

3. Threat Intelligence

• Leverage threat intelligence sources to identify emerging attack tactics, vulnerabilities, and trends.
• Correlate threat data across multiple systems to proactively detect potential intrusions or risks.

4. Log Analysis

• Conduct thorough analysis of security logs, network traffic, and system behaviors to detect anomalies.
• Ensure compliance with security policies and regulatory standards through effective log management.

5. Reporting & Communication

• Prepare comprehensive incident reports, detailing findings, remediation efforts, and recommendations.
• Regularly update internal stakeholders on security incidents, vulnerabilities, and ongoing risks.

6. Security Tools & Technology

• Operate and manage security infrastructure, including SIEM platforms, IDS/IPS, firewalls, antivirus, and endpoint tools.
• Stay abreast of advancements in cybersecurity technologies and recommend updates to improve SOC effectiveness.

7. Collaboration

• Work with cross-functional teams (network engineers, administrators) to strengthen security postures.
• Participate in vulnerability assessments and penetration tests, addressing identified risks proactively.

Qualifications & Requirements:

• Bachelor’s degree in Cybersecurity, IT, Computer Science, or equivalent experience.
• 1-3 years in a Security Operations Center (SOC) or similar role.
• Proficiency with SIEM tools (e.g., Splunk, QRadar, SolarWinds SIEM) and security monitoring platforms.
• Hands-on experience with incident response and investigation of threats (e.g., malware, phishing, intrusions).
• Strong knowledge of networking concepts, TCP/IP, and common protocols.

Certifications (Preferred but not required)

• Security+ (CompTIA)
• Certified SOC Analyst (CSA)
• Certified Ethical Hacker (CEH)

Technical Skills

• Deep understanding of cybersecurity principles, incident response, and forensic analysis.
• Familiarity with malware analysis techniques and vulnerability management.
• Strong analytical skills and ability to prioritize in high-pressure situations.

Soft Skills

• Effective communication for clear reporting and team interaction.
• Ability to collaborate with internal and external partners.

Details of the Division and Team:

We are looking for a knowledgeable Information Security Analyst to operating as a member of the Chief Security Office (CSO) Third Party Security team (TPS).

As an Information Security Analyst, you will be responsible for supporting the development, execution, and maintenance of Deutsche Bank’s information security strategy and program under the management of the CSO. You will work in strategic alignment and partnership with Deutsche Bank’s Third-Party Risk Management (TPRM) program under Third Party Management (TPM).

What we will offer you:

A healthy, engaged and well-supported workforce are better equipped to do their best work and, more importantly, enjoy their lives inside and outside the workplace. That’s why we are committed to providing an environment with your development and wellbeing at its center.

You can expect:

• Flexible benefits plan including virtual doctor consultation services.
• Comprehensive leave benefits
• Gender Neutral Parental Leave
• Flexible working arrangements
• 25 days of annual paid leave, plus public holiday & Flexible Working Arrangement

Your key responsibilities:

• Conducting Information Security Third Party risk assessments as part of the overall Third-Party Risk Management process (incl. onsite visits/reviews at our Third Parties)
• Review Third Party policies and evidence related to Information Security, review Third Party security gap analysis against the Deutsche Bank security requirements.
• Conduct risk review and business impact analysis of the identified gaps and provide comprehensive documentation of the identified gaps.
• Track Third Party and services, escalate issues when necessary.
• Formulate remediation recommendations, and actively work with Third Partys and project managers on Information Security related findings to resolve issues as quickly as possible to help build and strengthen the relationship.
• Support and coordinate Third Party Information Security Review processes, track Third Parties and services, escalate issues, when necessary, negotiate with Third Party, business units, and legal team on the contractual security obligations.
• Assist with compliance and risk assessment programs which support corporate wide security programs and participate in additional key control projects related to the overall enhancement of the assessment function.
• Ability to provide constant communication with involved stakeholders (within in the Bank and outside the Bank)
• Provide response and necessary artifacts for Regulatory queries across all regions (globally).
• Supporting the team to improve the overall security control framework (e.g. new controls, enhancement of existing controls)
• Ability to document and present information security risks in a clear, concise, and understandable manner at various management levels in the bank and/or to the Third Party

Your skills and experience:

• Minimum 5 years of experience in IT Security and Information Security (both technical and organizational controls).
• Working Experience with ISO27001 standard and current industry and agency standards, best practices and frameworks including NIST, ENISA, ISO27001, ISO27017, SOC2, PCI, and MITRE ATT&CK.
• Proven Experience with Cloud Security Alliance (CSA), Cloud Controls Matrix (CCM), and/or CSS Consensus Assessment Initiative Questionnaire (CAIQ)
• Understanding of financial regulations or guidance’s which impact information security (e.g.: EU Cybersecurity Act, MAS & HKMA TRM, EBA Guidelines, DORA, GDPR, NYDFS, Sox, etc.)
• Knowledge of technical and organizational controls regarding Information Security, and Risk Management principles
• Understanding of banking/financial industry and services and the ability to evaluate impact of security risks on banking/financial institutions.
• Understanding of Governance Risk and Control (GRC) tools, services, frameworks, and best practices
• Proficiency in MS Office Suite - Microsoft Word, Excel, PowerPoint, etc. for reporting purposes
• Experience with (or Knowledge of) Shared Assessment Programs (e.g.: SIG, FSQS, etc.)
• Experience with (or Knowledge of) in Data Reporting including definition of metrics and data sources (a plus)

Role is required to be performed on-site at One Raffles Quay office. Relevant vaccination requirements may apply.

How we’ll support you:

• Flexible working to assist you balance your personal priorities
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs
• Training and development to help you excel in your career

About us and our teams:

Deutsche Bank is the leading German bank with strong European roots and a global network. Click click here to see what we do.

Deutsche Bank & Diversity

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

• According to the company’s long-term vision, formulate and integrate cybersecurity strategies into a companywide strategic plan by collaborating with cross-functional teams to design and implement secure infrastructure and application solutions
• Understand expectations of the company regarding continuous growth, establish concrete goals, and create mid-term strategies to achieve goals
• Drive the Global Cyber Defense Strategy, maintain ready forces and capabilities to conduct cybersecurity operations
• Anticipate future internal and external trends and implications and create appropriate cybersecuritymeasures
• Build understanding of cyber threats in each level. Develop detection & protection measures continuously, lead the technical solution implementations to be prepared to defend Santen from disruptive or destructive cyberattacks
• Ensure the security incident management process are executed properly by all parties by tracking the resolution process and making sure the known issues are addressed according to risk management methodology
• Lead the monthly operational meetings between SOC team and Santen, improve the overall process and ensure the KPIs are achieved
• Verify and continuously improve the Recovery Process performed during or after a security incident to ensure that it meets business requirements and is effective and practical
• Manage the Major Security Incident Management process, under Global Head of Information Security,and guide/train different stakeholders, including SOC team, DIT leaders and technical managers
• Support the Disaster Recovery and Business Continuity framework, initiatives, and execution
• Improve Santen’s cybersecurity maturity level by increasing overall awareness and providing security advice/insights on technical requirements to DIT and non-DIT leaders (both Information Systems and Industrial Control Systems global leaders)
• Lead global programs & project implementations, planning the delivery of risk mitigation solutions and answering technical questions, reviewing current security measures, recommending enhancements, and identifying areas of security weakness
• Perform technical risk assessments (IT & OT) of all new global solutions and third parties, identify potential gaps and make sound recommendations for mitigating the risks on a global scale
• Implement the Internal Cybersecurity Framework to support the state-of-art technologies and Santen regulatory and organizational requirements (ISO 27001, NIST, Data Privacy Laws)
• Implement and improve the Global Vulnerability Management Program focused on reducing the risk presented by vulnerabilities in Santen environment by continuously performing three core steps: Discovery, Reporting and Remediation
• Guide the technical teams (Global IT Infra, Regional IT Infra and Application teams, critical third parties) to make sure vulnerabilities are mitigated on a timely manner, perform the escalations on time
• Manage the global vulnerability scan and penetration test exercises
• Manage the relationship and contracts with the external suppliers to obtain the best value for Santen
• Determine the need for covering the risks on company’s threat landscape and continuously search for the most strategic product & services to deliver the needed capabilities
• Keep track of changes in Santen’s business, threat landscape, product innovations and rebalance according to the risk appetite
• Build and maintain robust partnerships with market leaders (e.g. Gartner, ISF) to deter shared threats in our industry
• Build close partnerships and implement efficient internal processes with business and technical teams to detect and mitigate threats before they can be exploited
• Lead projects to implement new cybersecurity solutions or frameworks by developing business cases or conducting opportunity studies when needed
• Understand projects and services specificities in a multi locations environment with many remote management situations
• Ensure there are continuous PDCA (Plan, Do, Check and Action) cycles to improve services and solution in place in relations with KPIs/SLAs in place or to be developed
• Maintain good working relationships with internal stakeholders globally, especially with Digital & IT management
• Support his/her Digital & IT peers in charge of infrastructure, service operations and business applications to provide the right information security advice or solutions allowing them to provide the contributions to business domains
• Manage the suppliers by defining clear guidelines and objectives, relying on KPIs in coordination with the governance in place. Challenge organization and governance in place to verify the company is obtaining best value and that vendors are meeting our information security needs and requirements
• Develop and own the budget proposal for the cybersecurity domain in accordance with the company guidance on budget directions
• Ensure financial governance and efficient use of resources to meet business objectives.
• Execute the budget in respect of its objectives in terms of services to operate, solutions to deliver
• Perform ongoing security maturity level assessment to evaluate the effectiveness of security controls and explain the effectiveness to project teams, business stakeholders and senior management

Job Description

You will be a member of the Group Information Security Team responsible for responding to threats and incidents to the corporate networks, systems (on-prem and cloud) and digital assets.

Key Responsibilities:

• Act as the subject matter expert (SME) for the security systems owned by the security team.

• Recommend and drive cyber security solutions and initiatives to improve the organization's cyber security posture.

• Lead and drive major incidents towards mitigation and resolution in collaboration with multiple internal counterparts.

• Ensure excellent communication to stakeholders, providing timely and accurate updates during incidents.

• Respond to, assess, and investigate security events in collaboration with vendors.

• Coordinate with internal stakeholders such as applications, network, and infrastructure teams for investigations.

• Perform in-depth analysis and assess vulnerabilities, IOCs, cyber security intelligence, and open-source information to validate security risks and impacts, recommending appropriate countermeasures.

• Develop and maintain cyber incident response and handling playbooks for various threat scenarios.

• Recommend and implement tools to enhance detection, response, and recovery functions and overall security posture.

• Develop methodologies to identify threat adversary tactics, techniques, and procedures.

• Stay abreast of new and emerging cyber threats, attack vectors, etc., and assess their impact.

• Provide strategic guidance and oversight to vendors, ensuring adherence to agreed-upon SLAs and KPIs.

• Guide and mentor junior staff within the security operations team, providing support as needed.

• Perform any relevant ad-hoc duties as required.

Requirements:

• Degree in IT or related fields, with at least 6 years of relevant information security working experience.

• Professional security certifications (CISSP, CISA, CEH, GCIH, etc.) preferred.

• Hands-on experience with SIEM, EDR, XDR, UEBA and SOAR tools preferred.

• Strong in-depth working knowledge in Networking, Cloud, Active Directory, Windows and UNIX platforms, and Mitre framework.

• Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods, etc.

• Strong oral, written, presentation, and interpersonal skills.

• Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

• Able to work independently and in a team-oriented, collaborative environment.

• Experience in guiding and mentoring junior staff within a security operations team.

• Candidates will be considered for a senior role commensurate with their experience.

We're seeking a driven Security Analyst to work with a team to fortify and safeguard manufacturing environments by identifying vulnerabilities, strengthening security protocols, and fortifying our systems. You'll collaborate across teams to bolster our security posture while ensuring the integrity of sensitive data.

Responsibilities:

• Linux & AWS Security: Conduct audits and assessments specifically tailored for Linux and AWS environments, rectifying detected vulnerabilities to uphold stringent security standards.
• Collaborative Security Initiatives: Work closely with engineering teams dedicated to building, scaling, and managing manufacturing infrastructure, ensuring robust security in application services, data pipelines, and logging mechanisms.
• Monitoring and Investigation: Vigilantly monitor, analyze, and investigate security alerts within these environments, pinpointing root causes and implementing proactive measures.
• Comprehensive Audits: Conduct thorough security audits and assessments, both for cloud and manufacturing setups, enhancing the overall security posture.
• Operational Support: Provide operational assistance for security-related projects, aligning implementations with security objectives.

Requirements:

• Experience: 2+ years of hands-on experience in securing Linux or Windows/AD systems in large-scale production environments.
• Cloud Proficiency: Strong expertise in AWS cloud platforms, ideally with experience using tools like Terraform, Ansible, or Chef for configuration management.
• Tool Proficiency: Familiarity with security platforms and tools such as Wazuh, Osquery, Wireshark, Zeek, and Suricata.
• Network Security: In-depth understanding of TCP/IP fundamentals, network services, and adeptness in analyzing network and host security logs.
• Cryptography and Security Measures: Knowledge of applied cryptography principles, including PKI, SSL, and key management practices.
• Communication and Problem-Solving: Strong communication skills, adept problem-solving capabilities, and the ability to work independently.

Preferred Qualifications:

• Education: Bachelor's in Computer Science/IT/Cybersecurity or related field.
• Certifications: GIAC or related Cybersecurity Certifications are beneficial.

This is a renewable contract role.

Job Summary

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

Mandatory Skill-set

• 5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;
• Strong knowledge of ISO 27001:2022 standards and requirements;
• Experience in developing and maintaining comprehensive project plans, including timelines and milestones;
• Experience in managing ISO 27001-related risks and conducting internal/external audits;
• Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

Desired Skill-set

• ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;
• PMP, CISSP, CISM, or similar certifications are a plus;

Responsibilities

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Internal Security Risk Management & Governance team is responsible for managing and mitigating information security risks posed within the organisation. To ensure that the company's risk management and governance strategies are up to date and aligned across the organisation, this team is responsible for working with stakeholders from cross-functional teams to perform regular risk assessments, designing and implementing risk mitigation controls. This team is also responsible for managing the optimization, operation, training, and data analysis of the internal threat platform and UEBA (User and Entity Behavior Analytics) and DLP (Data Loss Prevention) platforms within the company.

Responsibilities

- Develop and maintain the organization's insider risk security governance framework, including risk scenario mapping to controls, policies, procedures, and standards that align with industry best practices and regulatory requirements. Such framework must be sufficiently detailed to allow ease of execution with clarity in roles and responsibility amongst stakeholders.

- Communicate the insider threat governance framework to key stakeholders and build effective collaboration models with stakeholders with clear roles and responsibilities, transparent tracking of metrics and seamless management reporting.

- Conduct regular security risk assessments to identify risk trends, vulnerabilities and alert patterns, and work with relevant departments to develop mitigation and remediation strategies.

- Monitor and report on the effectiveness of security controls and the status of security risks to senior management. Communicate risk assessment and trend analysis findings, risks and gaps to both technical and non-technical program stakeholders.

- Coordinate with IT and business units to ensure insider threat security measures are integrated into technology projects and business processes.

- Identify and garner the support of internal and external stakeholders to collaborate on driving change, including risk remediation and leading parties involved to meet risk remediation objectives.

- Translate business and technology requirements into relevant insider threat rules for operational teams to implement

- Stay abreast of the latest security trends, threats, and technologies to continuously improve the organization's insider threat security posture.

- Conduct analysis of large complex datasets involving insider risks, track metrics and identify gaps and vulnerabilities

- Understanding emerging insider risks to build and improve proactive threat detection.

Minimum Qualifications

1. Bachelor's degree or above, with a preference for majors in Information Security, Computer Science, Information Technology, privacy, risk or a related field. Professional certifications such as CISSP, CISM, CRISC, or CGEIT are highly desirable.

2. Minimum of 5 years of work experience, with a preference for experience in DLP (Data Loss Prevention), UEBA (User and Entity Behavior Analytics), or security platforms-related work.

3. Experience with security risk assessment methodologies and tools.

4. Skilled in creating and maintaining risk registers, developing risk treatment plans, and effectively communicating risk posture to stakeholders at all levels of the organization.

5. Self-driven and results-oriented, enjoys challenging tasks, demonstrates enthusiasm for work, and can handle job pressures.

6. Excellent communication and interpersonal skills, with the ability to engage and influence stakeholders at all levels.

7. Proven ability to manage and prioritize multiple projects and tasks.

Preferred Qualifications

- Hands on in-house experience with designing, implementation and operation of commercial or in-house UBA/UEBA solutions (e.g., Splunk, Exabeam) are highly desirable

- Experience with threat modeling methodologies (e.g., STRIDE, PASTA) to analyze and assess security threats within software applications, systems, and networks.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Security Infrastructure Analyst

Main Duties

As an expert of his/her team, he/she:

• assigns technical tasks and manages delegation for technical issues,
• animates the team to encourage collaboration and sharing of best practices,
• has a role in supporting technical skills development and provides training when required,
• supports new technologies and leverages them to provide consistency of service across streams,
• manages service improvements for all Network and Security services supported throughout the organization,
• documents,reviews, maintains and shares relevant technical information to the team
• provides technical direction, supports services both proactively and reactively to maintain the availability and reliability of system infrastructure in accordance with the SLA,
• implements and develops improvements based on best practices,
• focuses on automation and optimum use of the team to improve efficiency,
• drives and delivers root cause for any high severity issue,
• reviews technology changes to identify potential risks,
• is responsible for problem management and resolution
• Perform real-time analysis and trending of security systems
• Respond to user incident reports and evaluates the type and severity of security events.
• Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.
• Interpret and apply security policies and procedures.
• Establish escalation processes for security incidents and develops contingency plans and disaster recovery procedures.

As an experienced professional in Network-Security Services, he/she:

• supports his/her team during diagnosis when technical issues rise in his/her scope of expertise,
• is aware of the global IT structure so that he/she anticipates interrelationships within the organization,
• engages with technical peer, Service managers, Architect and project teams on technology roadmap and projects,
• facilitates transformation projects and suggest future directions for new areas of improvement and change,
• guarantees the production readiness and license to operate of new projects and solutions
• is available and able to drive technically, any complex or high severity incidents that occur within the scope of their role,
• actively assists in identifying the most technical skilled candidates for open roles,

Legal and Regulatory Responsibilities

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time;Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• 15+ years of Experience in managing network and security infra.
• 10+ years Experience in handling major network security projects (ex: SDWAN )
• 10+ years Experience in handling Firewalls/IPS/F5/Pulse/Proxies, Routers/Switches.
• Atleast a Bachelor’s degree in any of these faculties:
• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Interested candidates may apply through the application system or send it to [email protected]. Shortlisted candidates will be notified.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan Mckinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.morganmckinley.com/sg/privacy-policy. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Morgan McKinley Pte Ltd
Dinu Dinesh

EA License No: 11C5502

EAP Registration No: R22110286

Our client, one of Asia-Pacific’s leading organizations is looking for:

Senior IT Security Analyst

Responsibilities:

• Oversee the entire incident response lifecycle from detection to resolution.
• Lead investigations of IT security incidents and ensure thorough root cause analysis and remediation.
• Develop and implement advanced threat detection and monitoring strategies.
• Utilize SIEM, EDR, and other security tools for timely incident detection.
• Prepare and present detailed reports on threat statistics to stakeholders.
• Use data visualization tools to communicate threat trends and insights.
• Evaluate and integrate new technologies to enhance security operations.
• Coordinate with internal, external stakeholders, and vendors during incidents.

Requirements:

• Degree in Information Systems, Computer Science, Cybersecurity, or a related field.
• Professional Certifications in incident handling and security analysis preferred.
• GCIH or its equivalent is preferred
• Experience in IT security, with a focus on Incident response
• Intermediate knowledge of security operations, incident analysis, incident handling, and vulnerability
• management or testing, system patching, log analysis, intrusion detection, or firewall administration
• Proficiency in Security Information and Event Management (SIEM), Endpoint Detection and Response
• (EDR), traffic and packet analysis, digital forensics, and cloud security.
• Experience in Blue/Purple teaming, firewall, Intrusion Prevention Systems (IPS), Web Application
• Firewalls (WAF) administration, virtualization, and cloud technologies.
• Knowledge and experience in Linux/Windows/Database technologies preferred.

-----------------------------------------------------------------------------------------------------

Interested applicants can also email CV at [email protected] (for faster processing, please state the exact job/position title applied “IT Security Analyst”)

Only shortlisted candidates will be notified.

-----------------------------------------------------------------------------------------------------

EA License Number: 10C3636
EA Personnel Name: Vimmi Baunthiyal
EA Personnel Registration Number: R1543982

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Qualification training shall be provided as necessary to attain competency to deliver job responsibilities.

Main Job Responsibilities:

• Conduct 3rd party audits to assess organizations' Information Security Management System and related Statement of Applicability (SoA) for conformity with ISO/IEC 27001 and in strict compliance with GIC's Code of Ethics and established audit procedures
• Conduct other related Information Security, Cybersecurity, Data Protection audits – ISO/IEC 27701, ISO/IEC 27017, ISO/IEC 27018, CSA Cyber Essentials mark, CSA Cyber Trust mark, IMDA Data Protection Trust mark, GDPR Compliance audits, Second Party IT audits
• Conduct Information Security, Cybersecurity, Data Protection trainings/workshops/seminars
• Manage the entire audit process from planning, conducting, reporting, and following up on the assigned audits.
• Support in technical review of audit reports and technical advice to Sales Team and Certification Team as and when required.

Job Qualifications / Requirements:

• Possess a professional degree in Computer Science/Information Security/Cybersecurity or related fields to Information Technology
• At least two years are in a role or function relating to information security/Cybersecurity
• Successfully completed a Lead Auditor Course in ISO/IEC 2700 Information Security Management System (ISMS)
• Having completed training courses in Singapore PDPA Fundamentals/Practitioner and holding industry certifications like CISA, CIPM, CISSP will be advantageous

My client is looking for qualified candidates with specialised and deep technical skills acquired through extensive industry experience. Pending experience, the candidate can apply for an Assistant/Manager, Senior or a Lead Professional Officer role.

The successful candidates will be part of their pool of academic staff under the Professional Officers (PO) scheme. They form the talent pool which brings a much-needed industry perspective to student learning. They facilitate applied learning and applied research in the institution, complementing the academic expertise of the faculty to bring industry practices and applications into the curriculum.

Professional Officers leverage on their industry experiences to create authentic learning environments, where discovery and innovation take place. They act as coaches and mentors to students during practical learning activities such as laboratory sessions, Capstone Projects and the work study programme. Professional Officers could also lead or work with faculty on industry innovation projects to provide solutions to the industry.

In addition to their role in applied learning and applied research, Professional Officers manage the centralised laboratory facilities and resources in the institution. With Technical Officers, laboratory safety professionals, and administrators in department, they jointly develop central policies and processes for the safe and seamless operation of laboratories in the institution.

Responsibilities

• Design and teach labs & practice modules.
• Mentor students in Capstone Projects and the work study programme.
• Lead or co-lead innovation projects with industry.
• Manage labs and equipment to support academic programmes and applied research.

Requirements

• A good degree in Electrical/Electronic Engineering or Computing from a recognized University. Major in Information Security or possessing a Master degree will be advantageous.
• Proven working experience as Certified Security Analyst or relevant experience, with good knowledge of industry practices and technological applications in the field.
• Have a firm grasp of cyber security domain, as well as proficient with a range of information security tools and techniques.
• Keen interests to support research and academic project work, with demonstrated competencies to manage and employ new security technologies.
• Possess strong supervisory skills and enjoy working closely with students in an educational environment.
• Self-starter with hand-on knowledge to implement security policies and establish layered defense for network and server systems as well as ability to perform penetration and vulnerability testing of the networks, operating systems, software applications and mobile devices.
• Demonstrate proficiency to stay up-to-date on the latest intelligence, including hackers’ methodologies and pursue professional certification programs. Industrial certifications in relevant areas will be an added advantage

Interested candidates are invited to submit their MS Word formatted CV with the current and expected salary remunerations.

• JonDavidson Pte Ltd • EA Lic-22S1412 • MOM Reg No-R1440770 •

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

The Role

As Senior SOC Analyst (Tier-2), a threat hunter, you will work proactively to seek out weaknesses and stealthy attackers, conduct vulnerability assessments and deal with results. You will also remediate severe incidents from Security Analyst (Tier-1) to assess the impact and affected systems’ scope and collect data for further analysis.

Job Responsibilities

• Lead proactive hunting and analysis against the dataset (e.g., alerts, logs, etc.) and reverse engineering as needed to support Security Operation Centre (SOC) investigations and proactive threat detection and prevention.
• Coordinate and facilitates in-depth analysis, trending, and root cause analysis of security events/incidents while creating and maintaining processes and procedures.
• Perform advanced research on threats, vulnerabilities and potential threat vectors and work with multi-disciplines to improve prevention and detection methods.
• Act as the technical subject-matter-expert for SOC related topics or during incidents,
• Develops and documents the SOC procedures and processes based on industry best practices and internal requirements.
• Support or lead projects to improve SOC effectiveness, advancing technical capabilities on pace with the latest threats.
• Support and integrate with incident response, threat intelligence, and overall security strategy as needed.
• Perform other essential duties as assigned.

Job Requirements

• Bachelor’s degree in IT or equivalent with min. 5 years of working experience and has 3 years of experience leading a SOC team.
• Strong knowledge in networking / major internet protocols and security concepts
• Min. 3 years of experience in cyber incident response and/or Security Operations center in an enterprise environment.
• Min. 2 years of experience with standard enterprise security tools (e.g., Database Activity Monitoring, Zero Trust Segmentation, Security Information & Event Management, Intrusion Detection Prevention System, Endpoint Detection & Response, etc)
• Min. 2 years of operational experience with Splunk or similar log aggregation/analysis platforms
• Expert execution of investigative concepts for escalated incidents to determine the impact and root cause.
• Strong foundation in security threat and attack countermeasure.
• Possess analytical and problem-solving skills, with the ability to manage multiple tasks in a fast-paced environment.
• Hands-on experience in SIEM and intrusion detection analysis as well as application layer protocols.
• Have experience in security related areas. Especially experience and expertise in security incident detection and threat intelligence are proven to be extremely useful.
• Advanced understanding of various operating systems and web technologies with professional security certifications would be a plus.
• Experience in multiple domains within IT or Information Security (e.g. Identity and access management, IT infrastructure operations, Key management, system administration etc.)
• Meticulous, team player, flexible, proactive and positive attitude
• Strong sense of responsibility and initiative.
• Excellent communication and interpersonal skills.
• Work Location: One@ChangiCity

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Job responsibilities

Coordination with stakeholders relevant to new Information Security System

• Coordinate with APAC stakeholders on general planning & logistic matters (such as meeting scheduling, explaining background of the initiative and prepare meeting minutes post meeting with stakeholders)
• Coordinate with APAC stakeholders to distribute relevant documentation, survey and follow up with stakeholders on a timely manner for submission.
• Ensure completeness of documentation and/or survey submitted by the stakeholders, and conduct necessary follow-ups on any insufficient information identified.

Respond to queries from stakeholders pertaining to new Information Security System

• Observe and learn the basic functionality and workflows of new Information Security System.
• Provide thorough and timely response towards APAC stakeholders pertaining to Information Security System governance matters.
• Assist Direct Manager on Governance Operations activity such as conducting analysis on data generated from the system to identify any trends.
• Support the DLP team on end-to-end collaboration matters with all relevant stakeholders.

Others

• Continuous learning to enhance knowledge on targeted new Information System environment with guidance from Direct Manager.
• Able to grasp and understand the queries from Business users and respond rightly in a timely manner.
• Assist Direct Manager on ad-hoc basis for other DLP related matters.

Job Requirements:

• 1 to 2 years understanding and operation of Information Security relevant system. Experience in Financial service would be preferred.
• Experience in interpersonal and analytical skills attributes
• Good written and visual presentation skills (Excel, Word, PowerPoint)
• Good and thorough communication with
• Ability to work effectively in a team environment, and takes initiatives to collaborate and challenge status quo, and adaptable to embrace new changes
• Self-motivated and able to work with minimum instructions and source for information, systematically evaluate options and recommend solutions
• Degree in Information Security, Computer Engineering, Information Systems, Computer Science or equivalent
• IT professional with at least 1 to 2 years of relevant experience in IT Security, DLP relevant system and operations within the Banking and Finance industry

“This is in partnership with the Employment and Employability Institute Pte Ltd (“e2i”).

e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance and skills upgrading services, and partnering employers to address their manpower needs through recruitment, training, and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation-wide manpower and skills upgrading initiatives. By applying for this role, you consent to A-IT Software Services Pte Ltd’s PDPA and e2i PDPA.

The primary focus of this position is the support the maintenance of the human resource management system (HRMS) in addition to other systems supported by the HRIS team. This position serves as a technical point of contact for assigned functional areas and assists subject matter experts with ensuring data integrity, testing of system changes, report writing and analyzing data flows for process improvement opportunities. The HRIS analyst also supports HRMS upgrades, patches, testing and other technical projects as assigned.

Essential Functions

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

1. System Maintenance (5% of time): Assist in the review, testing and implementation of HRMS upgrades or patches. Collaborate with functional and technical staff to coordinate application of upgrade or fix. Maintain HRMS tables. Document process and results.
2. Production Support (20% of time): Provide support for HRMS, including researching and resolving HRMS problems, unexpected results or process flaws; performing scheduled activities; recommending solutions or alternate methods to meet requirements.
3. Projects/Process Improvement (55% of time): Recommend process/customer service improvements, innovative solutions, policy changes and/or major variations from established policy that must be approved by appropriate leadership prior to implementation. Serve as a key liaison with third parties and other stakeholders (e.g. payroll). Use project management skills in managing projects. May provide overall project management for a given HR initiative.
4. Reports/Queries (10% of time): Write, maintain and support a variety of reports or queries using appropriate reporting tools. Assist in development of standard reports for ongoing customer needs. Help maintain data integrity in systems by running queries and analyzing data.
5. Training (5% of time): Develop user procedures, guidelines and documentation. Train clients on new processes/functionality. Train new system users.
6. Individual Development (5% of time): Maintain awareness of current trends in HRMS with a focus on product and service development, delivery and support, and applying key technologies. Examine trends in information systems training, materials and techniques. Through classes, reading, CBTs or other mechanisms, continuously increase both HR knowledge and HRIS application/tools knowledge. Participate in user group meetings/conferences.

Requirements

• Min Degree in Human Resources
• Min 4-5 years of experience would be at an advantage
• Office Hours/ 5 Days
• Excellent communication skills is a must
• Good management skills of team

If you are interested in the position, do kindly drop your most updated resume to [email protected]

Thank You.

Leon Leong De Cong

R1551708

Recruit Express Pte Ltd (Healthcare & Lifesciences Division)

EA License: 99C4599

JOB DESCRIPTION:

Division: Business Engineering Division

Reports to: Department Manager of Battery SCM and DX Innovator department

Functional relationships:

- ASEAN and India Sales and Marketing companies, Singapore Battery Manufacturing division group, and Singapore MLCC manufacturing group

POSITION PROFILE:

This position is responsible for developing the IT strategy and solutions to lead and supervise the two IT department with department manager and provide the best IT services for the ASEAN and India regions, working closely with Japan headquarters.

Key Duties & Responsibilities:

• Align the department policy, strategy, and direction with the Singapore (& ASEAN) branch direction and Battery Business strategy through close communication with the functional head and management in Singapore office, Japan HQ and the other group companies.
• Customize the global policy headed by Japan HQ, including any local requirements to implement and permeate to the ASEAN and India region
• Organize and supervise the IT team from recruitment strategy-making to hiring, developing, and retaining staff based on the human resource strategy
• Responsible for high-quality, consistently clear, and regular communications to provide our IT services to related business units in the ASEAN and India sales functions and Singapore Manufacturing groups
• Embrace operational excellence at all levels of IT services and operations in the ASEAN and India and Singapore factories

Ability/Competency required:

• Bachelor's degree or master's degree in any field
• Minimum 12 years of working experience in the information technology field
• Experience in general IT governance (corporate management, technology evaluation, vendor management, program planning)
• Proficient in speaking & writing in Japanese and English languages to support communication with Japan and other overseas affiliates
• Relevant certifications (e.g., Information Technology Infrastructure Library, AWS cloud practitioner, or Project Management Professional, Salesforce qualifications) are preferable

Job level: 15+ Years

Technical Skills:

SAS tools like SAS VIYA, SAS VA, SAS DI and other related technologies

Key Responsibilities:

· Overall experience of 15+ years with recent experience in Project Management implementing large-scale projects managing the end-to-end technical delivery, including scope, cost, quality, and time management; stakeholder communications; risk, issue, and dependency management; and project reporting and governance.

· Develop and maintain project plans, status reports, and other project-related documentation to ensure effective communication among stakeholders and project team members.

· Lead and mentor a team of developers, providing guidance and support throughout the project lifecycle.

· Collaborate with cross-functional teams, including business analysts, project managers, and other stakeholders, to ensure alignment and effective communication.

· Identify and mitigate risks and issues related to technical deliverables, proactively resolving any roadblocks to ensure project success.

· Ensure adherence to coding standards, best practices, and security guidelines across all development activities.

· Provide regular updates on project progress, highlighting key milestones, risks, and issues to relevant stakeholders.

· Contribute to the continuous improvement of development processes and methodologies.

· Conduct code reviews and provide constructive feedback to team members to ensure high-quality deliverables.

Key Requirements:

· Between 6-8 years of working experience in various SAS tools like SAS VIYA, SAS VA, SAS DI and other related technologies

· Working experience in any Credit Portfolio Management application / tool

· Certification in any SAS tool

· Good understanding and experience in Software Development Life Cycle

· Experience of working in a vendor environment

· Ability to work in a fast-paced, team-oriented environment

· A strong & assertive communicator in speaking & writing Analytical mindset and good problem-solving skills.

Good-to-have Skills

· Pre-sales experience

· Experience in writing Test Plans, Test Scripts, Test cases for SAS applications

· L3 Support experience