Job Description

You will be a member of the Group Information Security Team responsible for initiating, implementing, and maintaining security products and solutions to support enterprise security.

Key Responsibilities:

•Subject matter expert (SME) for the security systems owned by the Information Security Team.

•Ensure security systems are utilized to their maximum capabilities.

•Plan, identify, assess, design, operationalize, and maintain multiple security-related software and/or hardware.

•Recommend and drive cyber security solutions and initiatives to improve the cyber security of the organization.

•Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.

•Provide security consultancy, technical guidance, expertise, solutions, and education.

•Advise infrastructure teams on security design that is relevant and fit for purpose.

•Identify and assess cyber risks in the IT infrastructure environment.

•Review firewall requests.

•Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines, and deliverables.

•This is an individual contributor role. Deliver tasks with minimal supervision.

•Provide AUDIT support such as PCI-DSS, and Cyber Maturity Assessment.

•Strong communication skills.

•Coordinate and Deploy SIA Group/GIT cybersecurity initiatives in Scoot.

Requirements:

•Degree in IT or related field, with at least 5 years in information security, especially in the cybersecurity space.

•Professional security certifications (SANS, CISSP, CEH, OSCP, CISA, etc) preferred.

•Experience in security products POC and RFQ.

•Prior experience in implementing and maintaining any of the tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM, etc., and/or network security. Able to review firewall requests.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

•Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience is preferred.

•Knowledge of cyber security threats, vulnerabilities, hacking, exploit methods, etc.

•Strong oral, written, presentation, and inter-personal skills.

•Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

Key Responsibilities:

Cybersecurity Risk Assessment & Mitigation:

• Cyber Risk Assessment: Conduct comprehensive cyber risk assessments in support of technology initiatives, identifying IT-related risks and recommending appropriate security controls to mitigate those risks.
• Risk Monitoring & Management: Continuously track and manage risk mitigations and exceptions, ensuring that risk reduction measures are implemented and that monitoring capabilities are integrated into the solutions to detect and respond to evolving threats.
• Compliance & Best Practices: Ensure that all security measures and controls are in compliance with internal policies, industry standards, and regulatory requirements (e.g., GDPR, HIPAA, PCI-DSS).

Network Security Design & Implementation:

• Solution Design: Design High-Level (HLD) and Low-Level (LLD) network security solutions, tailoring the security architecture to meet specific business requirements and security needs.
• Firewall & UTM Solutions: Implement and manage firewall and Unified Threat Management (UTM) solutions, including but not limited to Checkpoint, Fortigate, Palo Alto firewalls, and AWS-based security configurations.
• Encryption & Authentication: Design and deploy robust encryption technologies (e.g., Symantec 12.1.4) and implement two-factor authentication solutions (e.g., RSA Secure ID) to ensure secure access to corporate resources.
• Cloud Security: Manage and secure cloud environments, including AWS firewalls, AWS Shield, and AWS WAF, to safeguard cloud-based assets and services.

Security Incident & Problem Management:

• Incident Management: Respond to and resolve security incidents, monitoring for any unauthorised access, vulnerabilities, or breaches in the network. Investigate the root cause and implement remediation strategies.
• Change Management: Oversee changes in the network security environment, including the installation, configuration, and maintenance of firewalls, load balancers (e.g., F5 LTM/ASM), and proxy servers (e.g., Bluecoat, ZIA, ZPA).
• Proxy & Web Security: Manage and secure proxy servers and web security gateways (WSGA, Websense), ensuring that all outbound and inbound traffic adheres to the organisation’s security policies.

Global Client Support & Collaboration:

• Client Communication: Act as a liaison for global clients, understanding their security requirements and proposing tailored solutions that address their unique needs.
• Client Support: Provide ongoing support for security infrastructure deployed across various client locations, including resolving incidents, handling requests, and managing vulnerabilities.

Security Monitoring & Reporting:

• Network Monitoring: Utilise network monitoring tools (e.g., SolarWinds, CA Spectrum, and E-Health) to proactively identify potential threats and vulnerabilities in the network.
• Reporting & Documentation: Maintain detailed records of risk assessments, security incidents, mitigations, and system configurations. Prepare reports for management and stakeholders on security posture and risk mitigation progress.

Training & Awareness:

• Security Awareness: Educate internal teams and clients on best security practices, risk management strategies, and incident response protocols.
• Continuous Improvement: Stay updated with the latest trends, tools, and technologies in network security, ensuring the company’s security measures remain current and effective.

Job Requirements:

Qualifications:

• Experience: 10+ years of experience in network security, systems security, and risk management, with a proven track record in implementing network security solutions and managing complex security infrastructures.
• Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience).
• Certifications:
  • ITIL Foundation (V3 or higher)
  • VMware 6.x or similar (preferred)
  • Relevant certifications in network security such as CISSP, CISM, or CompTIA Security+.

Technical Skills:

• Network Security: Expertise in designing and implementing network security solutions, including firewalls (Checkpoint, Fortigate, Palo Alto), VPN solutions, and UTM.
• Cloud Security: Proficient in securing cloud environments such as AWS, including AWS WAF, AWS Shield, and AWS Firewall management.
• Proxy & Web Security: Experience with proxy servers and web security gateways such as Bluecoat, ZIA, ZPA, WSGA, and Websense.
• Network Monitoring: Hands-on experience with network monitoring tools like SolarWinds, CA Spectrum, and E-Health to ensure security and performance.
• Authentication & Encryption: Strong knowledge of authentication mechanisms (e.g., RSA Secure ID Two-Factor Authentication) and encryption solutions (e.g., Symantec 12.1.4).
• Incident Management & Troubleshooting: Experience in handling security incidents, conducting root cause analysis, and troubleshooting security issues.
• Firewalls & Load Balancers: Expertise in managing firewalls, load balancers (e.g., F5 LTM/ASM), and network configurations to ensure a secure and efficient IT infrastructure.

Soft Skills:

• Analytical & Problem-Solving: Strong analytical skills with the ability to assess complex security risks, identify vulnerabilities, and recommend effective solutions.
• Communication Skills: Excellent written and verbal communication skills to liaise with clients, teams, and management. Ability to explain complex security issues to non-technical stakeholders.
• Collaboration & Teamwork: Able to collaborate with multiple teams, both internal and external, to implement solutions and drive security initiatives.
• Client-Focused: Strong client management skills with the ability to understand and address specific security needs for global clients.

The security analyst is responsible for analysing cybersecurity events, improving threat detection capabilities and procedures. If an event results in a security incident, the analyst will work with the relevant stakeholders to respond and contain the incident.

Key Responsibilities:

- Improving threat detection capabilities, driving lessons learn from incidents and identifying potential gaps in security controls.

- Responsible for maintaining detection capabilities for the SOC.

- Analyse large dataset and correlate information from various sources to identify the root cause to an incident.

- Enhance and drive improvements for SOC detection and response playbooks.

- Take the lead in incident response to minimize the impact of a security incident to our organization.

- Work cooperatively with various IT infrastructure team, applications and business units for the effective operations of the security.

Qualifications:

- 3 years or more relevant working experience in information security technologies.

- Understanding of the tactics, techniques and procedures of cyber advesaries.

- Insurance / Financial industry experience.

- Industry certifications CISSP, CEH, or GIAC preferred.

- Experience in Splunk preferred.

- Comfortable with analysing and processing large datasets.

- Good interpersonal and communication skills.

- Willing to learn and able to work well in a team.

• According to the company’s long-term vision, formulate and integrate cybersecurity strategies into a companywide strategic plan by collaborating with cross-functional teams to design and implement secure infrastructure and application solutions
• Understand expectations of the company regarding continuous growth, establish concrete goals, and create mid-term strategies to achieve goals
• Drive the Global Cyber Defense Strategy, maintain ready forces and capabilities to conduct cybersecurity operations
• Anticipate future internal and external trends and implications and create appropriate cybersecuritymeasures
• Build understanding of cyber threats in each level. Develop detection & protection measures continuously, lead the technical solution implementations to be prepared to defend Santen from disruptive or destructive cyberattacks
• Ensure the security incident management process are executed properly by all parties by tracking the resolution process and making sure the known issues are addressed according to risk management methodology
• Lead the monthly operational meetings between SOC team and Santen, improve the overall process and ensure the KPIs are achieved
• Verify and continuously improve the Recovery Process performed during or after a security incident to ensure that it meets business requirements and is effective and practical
• Manage the Major Security Incident Management process, under Global Head of Information Security,and guide/train different stakeholders, including SOC team, DIT leaders and technical managers
• Support the Disaster Recovery and Business Continuity framework, initiatives, and execution
• Improve Santen’s cybersecurity maturity level by increasing overall awareness and providing security advice/insights on technical requirements to DIT and non-DIT leaders (both Information Systems and Industrial Control Systems global leaders)
• Lead global programs & project implementations, planning the delivery of risk mitigation solutions and answering technical questions, reviewing current security measures, recommending enhancements, and identifying areas of security weakness
• Perform technical risk assessments (IT & OT) of all new global solutions and third parties, identify potential gaps and make sound recommendations for mitigating the risks on a global scale
• Implement the Internal Cybersecurity Framework to support the state-of-art technologies and Santen regulatory and organizational requirements (ISO 27001, NIST, Data Privacy Laws)
• Implement and improve the Global Vulnerability Management Program focused on reducing the risk presented by vulnerabilities in Santen environment by continuously performing three core steps: Discovery, Reporting and Remediation
• Guide the technical teams (Global IT Infra, Regional IT Infra and Application teams, critical third parties) to make sure vulnerabilities are mitigated on a timely manner, perform the escalations on time
• Manage the global vulnerability scan and penetration test exercises
• Manage the relationship and contracts with the external suppliers to obtain the best value for Santen
• Determine the need for covering the risks on company’s threat landscape and continuously search for the most strategic product & services to deliver the needed capabilities
• Keep track of changes in Santen’s business, threat landscape, product innovations and rebalance according to the risk appetite
• Build and maintain robust partnerships with market leaders (e.g. Gartner, ISF) to deter shared threats in our industry
• Build close partnerships and implement efficient internal processes with business and technical teams to detect and mitigate threats before they can be exploited
• Lead projects to implement new cybersecurity solutions or frameworks by developing business cases or conducting opportunity studies when needed
• Understand projects and services specificities in a multi locations environment with many remote management situations
• Ensure there are continuous PDCA (Plan, Do, Check and Action) cycles to improve services and solution in place in relations with KPIs/SLAs in place or to be developed
• Maintain good working relationships with internal stakeholders globally, especially with Digital & IT management
• Support his/her Digital & IT peers in charge of infrastructure, service operations and business applications to provide the right information security advice or solutions allowing them to provide the contributions to business domains
• Manage the suppliers by defining clear guidelines and objectives, relying on KPIs in coordination with the governance in place. Challenge organization and governance in place to verify the company is obtaining best value and that vendors are meeting our information security needs and requirements
• Develop and own the budget proposal for the cybersecurity domain in accordance with the company guidance on budget directions
• Ensure financial governance and efficient use of resources to meet business objectives.
• Execute the budget in respect of its objectives in terms of services to operate, solutions to deliver
• Perform ongoing security maturity level assessment to evaluate the effectiveness of security controls and explain the effectiveness to project teams, business stakeholders and senior management

The Security SOC Analystis responsible for monitoring, analyzing, and responding to security incidents in real-time within a Security Operations Center (SOC). This role involves ensuring the security and integrity of the organization's systems by identifying threats, mitigating risks, and collaborating with various teams to address vulnerabilities.

Key Responsibilities:

1. Monitoring & Threat Detection

• Continuously monitor and analyze alerts from security tools (e.g., SIEM, IDS/IPS, firewalls) to identify potential threats.
• Investigate and evaluate security incidents, determining severity and potential impact on systems.
• Escalate suspicious activities and unresolved incidents to senior analysts or response teams.

2. Incident Response

• Execute response plans for security incidents, ensuring containment, mitigation, and recovery.
• Collaborate with incident response teams to analyze, investigate, and resolve breaches or data loss events.
• Maintain detailed incident reports and documentation for accurate tracking and compliance purposes.

3. Threat Intelligence

• Leverage threat intelligence sources to identify emerging attack tactics, vulnerabilities, and trends.
• Correlate threat data across multiple systems to proactively detect potential intrusions or risks.

4. Log Analysis

• Conduct thorough analysis of security logs, network traffic, and system behaviors to detect anomalies.
• Ensure compliance with security policies and regulatory standards through effective log management.

5. Reporting & Communication

• Prepare comprehensive incident reports, detailing findings, remediation efforts, and recommendations.
• Regularly update internal stakeholders on security incidents, vulnerabilities, and ongoing risks.

6. Security Tools & Technology

• Operate and manage security infrastructure, including SIEM platforms, IDS/IPS, firewalls, antivirus, and endpoint tools.
• Stay abreast of advancements in cybersecurity technologies and recommend updates to improve SOC effectiveness.

7. Collaboration

• Work with cross-functional teams (network engineers, administrators) to strengthen security postures.
• Participate in vulnerability assessments and penetration tests, addressing identified risks proactively.

Qualifications & Requirements:

• Bachelor’s degree in Cybersecurity, IT, Computer Science, or equivalent experience.
• 1-3 years in a Security Operations Center (SOC) or similar role.
• Proficiency with SIEM tools (e.g., Splunk, QRadar, SolarWinds SIEM) and security monitoring platforms.
• Hands-on experience with incident response and investigation of threats (e.g., malware, phishing, intrusions).
• Strong knowledge of networking concepts, TCP/IP, and common protocols.

Certifications (Preferred but not required)

• Security+ (CompTIA)
• Certified SOC Analyst (CSA)
• Certified Ethical Hacker (CEH)

Technical Skills

• Deep understanding of cybersecurity principles, incident response, and forensic analysis.
• Familiarity with malware analysis techniques and vulnerability management.
• Strong analytical skills and ability to prioritize in high-pressure situations.

Soft Skills

• Effective communication for clear reporting and team interaction.
• Ability to collaborate with internal and external partners.

Job Description

You will be a member of the Group Information Security Team responsible for responding to threats and incidents to the corporate networks, systems (on-prem and cloud) and digital assets.

Key Responsibilities:

• Act as the subject matter expert (SME) for the security systems owned by the security team.

• Recommend and drive cyber security solutions and initiatives to improve the organization's cyber security posture.

• Lead and drive major incidents towards mitigation and resolution in collaboration with multiple internal counterparts.

• Ensure excellent communication to stakeholders, providing timely and accurate updates during incidents.

• Respond to, assess, and investigate security events in collaboration with vendors.

• Coordinate with internal stakeholders such as applications, network, and infrastructure teams for investigations.

• Perform in-depth analysis and assess vulnerabilities, IOCs, cyber security intelligence, and open-source information to validate security risks and impacts, recommending appropriate countermeasures.

• Develop and maintain cyber incident response and handling playbooks for various threat scenarios.

• Recommend and implement tools to enhance detection, response, and recovery functions and overall security posture.

• Develop methodologies to identify threat adversary tactics, techniques, and procedures.

• Stay abreast of new and emerging cyber threats, attack vectors, etc., and assess their impact.

• Provide strategic guidance and oversight to vendors, ensuring adherence to agreed-upon SLAs and KPIs.

• Guide and mentor junior staff within the security operations team, providing support as needed.

• Perform any relevant ad-hoc duties as required.

Requirements:

• Degree in IT or related fields, with at least 6 years of relevant information security working experience.

• Professional security certifications (CISSP, CISA, CEH, GCIH, etc.) preferred.

• Hands-on experience with SIEM, EDR, XDR, UEBA and SOAR tools preferred.

• Strong in-depth working knowledge in Networking, Cloud, Active Directory, Windows and UNIX platforms, and Mitre framework.

• Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods, etc.

• Strong oral, written, presentation, and interpersonal skills.

• Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

• Able to work independently and in a team-oriented, collaborative environment.

• Experience in guiding and mentoring junior staff within a security operations team.

• Candidates will be considered for a senior role commensurate with their experience.

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities, and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Your background

• Familiarity with Cyber Security and Information Technology.
• Strong problem-solving and critical thinking skills.
• Effective communication and interpersonal skills.
• Basic knowledge in Cloud Security/Monitoring is a bonus.

What you can expect

As a Senior Cyber Security Analyst, you will play a crucial role in the team’s daily operations involving threat monitoring and detection. Collaborating with a dynamic team, you will intake cybersecurity related requests from internal and external entities that require triage, remediation, or escalation.

What you will do

• Perform deep dives into suspicious security events by collating data from various sources, working across multiple GIS Control Teams, to determine if a critical system or data has been impacted.
• Must be able to identify, analyze and address problems to resolve issues whenever possible in way that minimizes negative impact and risk to the organization.
• Ability to work independently with initiatives and minimum supervision.
• Strong analytical skills/problem solving/conceptual thinking.
• Ability to work with Technical and Non-Technical business owners.
• Assist with internal projects and development efficiently.
• Must be comfortable in delivering messages across a wide spectrum of individuals having varying degrees of technical understanding.
• Must have strong leadership skills and qualities enabling collaboration with peers and various levels of management.
• Assist in supervision of teams and provide mentorship to junior analysts to equip them with basic skills needed during operation support.
• Actively participate and be involved in the evolution of process/procedure and tools used within the team.
• Learn and perform monitoring activities with the use of Cloud Technologies.
• Perform ad-hoc reporting and investigation as required.
• Perform Quality Assurance (QA) check against various queues.
• Willing to work weekend on a rotational shift basis.
• Perform real-time analysis and trending of security log data from various security devices and systems.
• Maintain data sources feeding the log monitoring system, develop and maintain detection and alerting rules.
• Respond to user incident reports and evaluates the type and severity of security events.
• Execute initial triage of incidents to rule out false positives.
• Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.
• Interpret and apply security policies and procedures.
• Establish escalation processes for security incidents and develops contingency plans and disaster recovery procedures.

Role Description

This is a full-time on-site role for a SOC L1 Analyst located in Singapore.

Responsibilities:

• Monitoring and analyzing security events, identifying potential threats, conducting investigations, and responding to security incidents
• Work closely with the end client SOC team to ensure the timely and effective detection, containment, and mitigation of security incidents
• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure).
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits.
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to ensure compliance and regulatory requirements and industry standards.

Requirements:

• Diploma/degree in computer studies
• 2 years of experience working in a security operation, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role.
• Independent and capable of working in a high-pressure environment.
• Willing to work in rotational shift environment (including weekends and night shift).

We're seeking a driven Security Analyst to work with a team to fortify and safeguard manufacturing environments by identifying vulnerabilities, strengthening security protocols, and fortifying our systems. You'll collaborate across teams to bolster our security posture while ensuring the integrity of sensitive data.

Responsibilities:

• Linux & AWS Security: Conduct audits and assessments specifically tailored for Linux and AWS environments, rectifying detected vulnerabilities to uphold stringent security standards.
• Collaborative Security Initiatives: Work closely with engineering teams dedicated to building, scaling, and managing manufacturing infrastructure, ensuring robust security in application services, data pipelines, and logging mechanisms.
• Monitoring and Investigation: Vigilantly monitor, analyze, and investigate security alerts within these environments, pinpointing root causes and implementing proactive measures.
• Comprehensive Audits: Conduct thorough security audits and assessments, both for cloud and manufacturing setups, enhancing the overall security posture.
• Operational Support: Provide operational assistance for security-related projects, aligning implementations with security objectives.

Requirements:

• Experience: 2+ years of hands-on experience in securing Linux or Windows/AD systems in large-scale production environments.
• Cloud Proficiency: Strong expertise in AWS cloud platforms, ideally with experience using tools like Terraform, Ansible, or Chef for configuration management.
• Tool Proficiency: Familiarity with security platforms and tools such as Wazuh, Osquery, Wireshark, Zeek, and Suricata.
• Network Security: In-depth understanding of TCP/IP fundamentals, network services, and adeptness in analyzing network and host security logs.
• Cryptography and Security Measures: Knowledge of applied cryptography principles, including PKI, SSL, and key management practices.
• Communication and Problem-Solving: Strong communication skills, adept problem-solving capabilities, and the ability to work independently.

Preferred Qualifications:

• Education: Bachelor's in Computer Science/IT/Cybersecurity or related field.
• Certifications: GIAC or related Cybersecurity Certifications are beneficial.

This is a renewable contract role.

Job Summary

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

Mandatory Skill-set

• 5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;
• Strong knowledge of ISO 27001:2022 standards and requirements;
• Experience in developing and maintaining comprehensive project plans, including timelines and milestones;
• Experience in managing ISO 27001-related risks and conducting internal/external audits;
• Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

Desired Skill-set

• ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;
• PMP, CISSP, CISM, or similar certifications are a plus;

Responsibilities

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Internal Security Risk Management & Governance team is responsible for managing and mitigating information security risks posed within the organisation. To ensure that the company's risk management and governance strategies are up to date and aligned across the organisation, this team is responsible for working with stakeholders from cross-functional teams to perform regular risk assessments, designing and implementing risk mitigation controls. This team is also responsible for managing the optimization, operation, training, and data analysis of the internal threat platform and UEBA (User and Entity Behavior Analytics) and DLP (Data Loss Prevention) platforms within the company.

Responsibilities

- Develop and maintain the organization's insider risk security governance framework, including risk scenario mapping to controls, policies, procedures, and standards that align with industry best practices and regulatory requirements. Such framework must be sufficiently detailed to allow ease of execution with clarity in roles and responsibility amongst stakeholders.

- Communicate the insider threat governance framework to key stakeholders and build effective collaboration models with stakeholders with clear roles and responsibilities, transparent tracking of metrics and seamless management reporting.

- Conduct regular security risk assessments to identify risk trends, vulnerabilities and alert patterns, and work with relevant departments to develop mitigation and remediation strategies.

- Monitor and report on the effectiveness of security controls and the status of security risks to senior management. Communicate risk assessment and trend analysis findings, risks and gaps to both technical and non-technical program stakeholders.

- Coordinate with IT and business units to ensure insider threat security measures are integrated into technology projects and business processes.

- Identify and garner the support of internal and external stakeholders to collaborate on driving change, including risk remediation and leading parties involved to meet risk remediation objectives.

- Translate business and technology requirements into relevant insider threat rules for operational teams to implement

- Stay abreast of the latest security trends, threats, and technologies to continuously improve the organization's insider threat security posture.

- Conduct analysis of large complex datasets involving insider risks, track metrics and identify gaps and vulnerabilities

- Understanding emerging insider risks to build and improve proactive threat detection.

Minimum Qualifications

1. Bachelor's degree or above, with a preference for majors in Information Security, Computer Science, Information Technology, privacy, risk or a related field. Professional certifications such as CISSP, CISM, CRISC, or CGEIT are highly desirable.

2. Minimum of 5 years of work experience, with a preference for experience in DLP (Data Loss Prevention), UEBA (User and Entity Behavior Analytics), or security platforms-related work.

3. Experience with security risk assessment methodologies and tools.

4. Skilled in creating and maintaining risk registers, developing risk treatment plans, and effectively communicating risk posture to stakeholders at all levels of the organization.

5. Self-driven and results-oriented, enjoys challenging tasks, demonstrates enthusiasm for work, and can handle job pressures.

6. Excellent communication and interpersonal skills, with the ability to engage and influence stakeholders at all levels.

7. Proven ability to manage and prioritize multiple projects and tasks.

Preferred Qualifications

- Hands on in-house experience with designing, implementation and operation of commercial or in-house UBA/UEBA solutions (e.g., Splunk, Exabeam) are highly desirable

- Experience with threat modeling methodologies (e.g., STRIDE, PASTA) to analyze and assess security threats within software applications, systems, and networks.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Details of the Division and Team:

We are looking for a knowledgeable Information Security Analyst to operating as a member of the Chief Security Office (CSO) Third Party Security team (TPS).

As an Information Security Analyst, you will be responsible for supporting the development, execution, and maintenance of Deutsche Bank’s information security strategy and program under the management of the CSO. You will work in strategic alignment and partnership with Deutsche Bank’s Third-Party Risk Management (TPRM) program under Third Party Management (TPM).

What we will offer you:

A healthy, engaged and well-supported workforce are better equipped to do their best work and, more importantly, enjoy their lives inside and outside the workplace. That’s why we are committed to providing an environment with your development and wellbeing at its center.

You can expect:

• Flexible benefits plan including virtual doctor consultation services.
• Comprehensive leave benefits
• Gender Neutral Parental Leave
• Flexible working arrangements
• 25 days of annual paid leave, plus public holiday & Flexible Working Arrangement

Your key responsibilities:

• Conducting Information Security Third Party risk assessments as part of the overall Third-Party Risk Management process (incl. onsite visits/reviews at our Third Parties)
• Review Third Party policies and evidence related to Information Security, review Third Party security gap analysis against the Deutsche Bank security requirements.
• Conduct risk review and business impact analysis of the identified gaps and provide comprehensive documentation of the identified gaps.
• Track Third Party and services, escalate issues when necessary.
• Formulate remediation recommendations, and actively work with Third Partys and project managers on Information Security related findings to resolve issues as quickly as possible to help build and strengthen the relationship.
• Support and coordinate Third Party Information Security Review processes, track Third Parties and services, escalate issues, when necessary, negotiate with Third Party, business units, and legal team on the contractual security obligations.
• Assist with compliance and risk assessment programs which support corporate wide security programs and participate in additional key control projects related to the overall enhancement of the assessment function.
• Ability to provide constant communication with involved stakeholders (within in the Bank and outside the Bank)
• Provide response and necessary artifacts for Regulatory queries across all regions (globally).
• Supporting the team to improve the overall security control framework (e.g. new controls, enhancement of existing controls)
• Ability to document and present information security risks in a clear, concise, and understandable manner at various management levels in the bank and/or to the Third Party

Your skills and experience:

• Minimum 5 years of experience in IT Security and Information Security (both technical and organizational controls).
• Working Experience with ISO27001 standard and current industry and agency standards, best practices and frameworks including NIST, ENISA, ISO27001, ISO27017, SOC2, PCI, and MITRE ATT&CK.
• Proven Experience with Cloud Security Alliance (CSA), Cloud Controls Matrix (CCM), and/or CSS Consensus Assessment Initiative Questionnaire (CAIQ)
• Understanding of financial regulations or guidance’s which impact information security (e.g.: EU Cybersecurity Act, MAS & HKMA TRM, EBA Guidelines, DORA, GDPR, NYDFS, Sox, etc.)
• Knowledge of technical and organizational controls regarding Information Security, and Risk Management principles
• Understanding of banking/financial industry and services and the ability to evaluate impact of security risks on banking/financial institutions.
• Understanding of Governance Risk and Control (GRC) tools, services, frameworks, and best practices
• Proficiency in MS Office Suite - Microsoft Word, Excel, PowerPoint, etc. for reporting purposes
• Experience with (or Knowledge of) Shared Assessment Programs (e.g.: SIG, FSQS, etc.)
• Experience with (or Knowledge of) in Data Reporting including definition of metrics and data sources (a plus)

Role is required to be performed on-site at One Raffles Quay office. Relevant vaccination requirements may apply.

How we’ll support you:

• Flexible working to assist you balance your personal priorities
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs
• Training and development to help you excel in your career

About us and our teams:

Deutsche Bank is the leading German bank with strong European roots and a global network. Click click here to see what we do.

Deutsche Bank & Diversity

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

My client is looking for qualified candidates with specialised and deep technical skills acquired through extensive industry experience. Pending experience, the candidate can apply for an Assistant/Manager, Senior or a Lead Professional Officer role.

The successful candidates will be part of their pool of academic staff under the Professional Officers (PO) scheme. They form the talent pool which brings a much-needed industry perspective to student learning. They facilitate applied learning and applied research in the institution, complementing the academic expertise of the faculty to bring industry practices and applications into the curriculum.

Professional Officers leverage on their industry experiences to create authentic learning environments, where discovery and innovation take place. They act as coaches and mentors to students during practical learning activities such as laboratory sessions, Capstone Projects and the work study programme. Professional Officers could also lead or work with faculty on industry innovation projects to provide solutions to the industry.

In addition to their role in applied learning and applied research, Professional Officers manage the centralised laboratory facilities and resources in the institution. With Technical Officers, laboratory safety professionals, and administrators in department, they jointly develop central policies and processes for the safe and seamless operation of laboratories in the institution.

Responsibilities

• Design and teach labs & practice modules.
• Mentor students in Capstone Projects and the work study programme.
• Lead or co-lead innovation projects with industry.
• Manage labs and equipment to support academic programmes and applied research.

Requirements

• A good degree in Electrical/Electronic Engineering or Computing from a recognized University. Major in Information Security or possessing a Master degree will be advantageous.
• Proven working experience as Certified Security Analyst or relevant experience, with good knowledge of industry practices and technological applications in the field.
• Have a firm grasp of cyber security domain, as well as proficient with a range of information security tools and techniques.
• Keen interests to support research and academic project work, with demonstrated competencies to manage and employ new security technologies.
• Possess strong supervisory skills and enjoy working closely with students in an educational environment.
• Self-starter with hand-on knowledge to implement security policies and establish layered defense for network and server systems as well as ability to perform penetration and vulnerability testing of the networks, operating systems, software applications and mobile devices.
• Demonstrate proficiency to stay up-to-date on the latest intelligence, including hackers’ methodologies and pursue professional certification programs. Industrial certifications in relevant areas will be an added advantage

Interested candidates are invited to submit their MS Word formatted CV with the current and expected salary remunerations.

• JonDavidson Pte Ltd • EA Lic-22S1412 • MOM Reg No-R1440770 •

Qualification training shall be provided as necessary to attain competency to deliver job responsibilities.

Main Job Responsibilities:

• Conduct 3rd party audits to assess organizations' Information Security Management System and related Statement of Applicability (SoA) for conformity with ISO/IEC 27001 and in strict compliance with GIC's Code of Ethics and established audit procedures
• Conduct other related Information Security, Cybersecurity, Data Protection audits – ISO/IEC 27701, ISO/IEC 27017, ISO/IEC 27018, CSA Cyber Essentials mark, CSA Cyber Trust mark, IMDA Data Protection Trust mark, GDPR Compliance audits, Second Party IT audits
• Conduct Information Security, Cybersecurity, Data Protection trainings/workshops/seminars
• Manage the entire audit process from planning, conducting, reporting, and following up on the assigned audits.
• Support in technical review of audit reports and technical advice to Sales Team and Certification Team as and when required.

Job Qualifications / Requirements:

• Possess a professional degree in Computer Science/Information Security/Cybersecurity or related fields to Information Technology
• At least two years are in a role or function relating to information security/Cybersecurity
• Successfully completed a Lead Auditor Course in ISO/IEC 2700 Information Security Management System (ISMS)
• Having completed training courses in Singapore PDPA Fundamentals/Practitioner and holding industry certifications like CISA, CIPM, CISSP will be advantageous

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

The Role

As Senior SOC Analyst (Tier-2), a threat hunter, you will work proactively to seek out weaknesses and stealthy attackers, conduct vulnerability assessments and deal with results. You will also remediate severe incidents from Security Analyst (Tier-1) to assess the impact and affected systems’ scope and collect data for further analysis.

Job Responsibilities

• Lead proactive hunting and analysis against the dataset (e.g., alerts, logs, etc.) and reverse engineering as needed to support Security Operation Centre (SOC) investigations and proactive threat detection and prevention.
• Coordinate and facilitates in-depth analysis, trending, and root cause analysis of security events/incidents while creating and maintaining processes and procedures.
• Perform advanced research on threats, vulnerabilities and potential threat vectors and work with multi-disciplines to improve prevention and detection methods.
• Act as the technical subject-matter-expert for SOC related topics or during incidents,
• Develops and documents the SOC procedures and processes based on industry best practices and internal requirements.
• Support or lead projects to improve SOC effectiveness, advancing technical capabilities on pace with the latest threats.
• Support and integrate with incident response, threat intelligence, and overall security strategy as needed.
• Perform other essential duties as assigned.

Job Requirements

• Bachelor’s degree in IT or equivalent with min. 5 years of working experience and has 3 years of experience leading a SOC team.
• Strong knowledge in networking / major internet protocols and security concepts
• Min. 3 years of experience in cyber incident response and/or Security Operations center in an enterprise environment.
• Min. 2 years of experience with standard enterprise security tools (e.g., Database Activity Monitoring, Zero Trust Segmentation, Security Information & Event Management, Intrusion Detection Prevention System, Endpoint Detection & Response, etc)
• Min. 2 years of operational experience with Splunk or similar log aggregation/analysis platforms
• Expert execution of investigative concepts for escalated incidents to determine the impact and root cause.
• Strong foundation in security threat and attack countermeasure.
• Possess analytical and problem-solving skills, with the ability to manage multiple tasks in a fast-paced environment.
• Hands-on experience in SIEM and intrusion detection analysis as well as application layer protocols.
• Have experience in security related areas. Especially experience and expertise in security incident detection and threat intelligence are proven to be extremely useful.
• Advanced understanding of various operating systems and web technologies with professional security certifications would be a plus.
• Experience in multiple domains within IT or Information Security (e.g. Identity and access management, IT infrastructure operations, Key management, system administration etc.)
• Meticulous, team player, flexible, proactive and positive attitude
• Strong sense of responsibility and initiative.
• Excellent communication and interpersonal skills.
• Work Location: One@ChangiCity

Security Infrastructure Analyst

Main Duties

As an expert of his/her team, he/she:

• assigns technical tasks and manages delegation for technical issues,
• animates the team to encourage collaboration and sharing of best practices,
• has a role in supporting technical skills development and provides training when required,
• supports new technologies and leverages them to provide consistency of service across streams,
• manages service improvements for all Network and Security services supported throughout the organization,
• documents,reviews, maintains and shares relevant technical information to the team
• provides technical direction, supports services both proactively and reactively to maintain the availability and reliability of system infrastructure in accordance with the SLA,
• implements and develops improvements based on best practices,
• focuses on automation and optimum use of the team to improve efficiency,
• drives and delivers root cause for any high severity issue,
• reviews technology changes to identify potential risks,
• is responsible for problem management and resolution
• Perform real-time analysis and trending of security systems
• Respond to user incident reports and evaluates the type and severity of security events.
• Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.
• Interpret and apply security policies and procedures.
• Establish escalation processes for security incidents and develops contingency plans and disaster recovery procedures.

As an experienced professional in Network-Security Services, he/she:

• supports his/her team during diagnosis when technical issues rise in his/her scope of expertise,
• is aware of the global IT structure so that he/she anticipates interrelationships within the organization,
• engages with technical peer, Service managers, Architect and project teams on technology roadmap and projects,
• facilitates transformation projects and suggest future directions for new areas of improvement and change,
• guarantees the production readiness and license to operate of new projects and solutions
• is available and able to drive technically, any complex or high severity incidents that occur within the scope of their role,
• actively assists in identifying the most technical skilled candidates for open roles,

Legal and Regulatory Responsibilities

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time;Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• 15+ years of Experience in managing network and security infra.
• 10+ years Experience in handling major network security projects (ex: SDWAN )
• 10+ years Experience in handling Firewalls/IPS/F5/Pulse/Proxies, Routers/Switches.
• Atleast a Bachelor’s degree in any of these faculties:
• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Interested candidates may apply through the application system or send it to [email protected]. Shortlisted candidates will be notified.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan Mckinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.morganmckinley.com/sg/privacy-policy. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Morgan McKinley Pte Ltd
Dinu Dinesh

EA License No: 11C5502

EAP Registration No: R22110286

JOB DESCRIPTION:

Division: Business Engineering Division

Reports to: Department Manager of Battery SCM and DX Innovator department

Functional relationships:

- ASEAN and India Sales and Marketing companies, Singapore Battery Manufacturing division group, and Singapore MLCC manufacturing group

POSITION PROFILE:

This position is responsible for developing the IT strategy and solutions to lead and supervise the two IT department with department manager and provide the best IT services for the ASEAN and India regions, working closely with Japan headquarters.

Key Duties & Responsibilities:

• Align the department policy, strategy, and direction with the Singapore (& ASEAN) branch direction and Battery Business strategy through close communication with the functional head and management in Singapore office, Japan HQ and the other group companies.
• Customize the global policy headed by Japan HQ, including any local requirements to implement and permeate to the ASEAN and India region
• Organize and supervise the IT team from recruitment strategy-making to hiring, developing, and retaining staff based on the human resource strategy
• Responsible for high-quality, consistently clear, and regular communications to provide our IT services to related business units in the ASEAN and India sales functions and Singapore Manufacturing groups
• Embrace operational excellence at all levels of IT services and operations in the ASEAN and India and Singapore factories

Ability/Competency required:

• Bachelor's degree or master's degree in any field
• Minimum 12 years of working experience in the information technology field
• Experience in general IT governance (corporate management, technology evaluation, vendor management, program planning)
• Proficient in speaking & writing in Japanese and English languages to support communication with Japan and other overseas affiliates
• Relevant certifications (e.g., Information Technology Infrastructure Library, AWS cloud practitioner, or Project Management Professional, Salesforce qualifications) are preferable

JOB SUMMARY
The Information Technology Associate is a technology professional proficient in many facets of information technology without any specific specialty, who possesses general business knowledge and soft-skills allowing him/her to be adaptable in a wide array of IT-related work environments. The IT Associate is able to fulfill different supporting roles depending on specific technology needs, ranging from technology support, web page design, or application training, to data security, software testing, project management, etc. The IT Associate performs basic and recurring functions of IT departments within the organization, and often is the front line workers for those departments. He/she has knowledge of commonly-used concepts, practices, and procedures within the IT field. Relies on instructions and pre-established guidelines to perform the functions of the job.

ESSENTIAL DUTIES AND RESPONSIBILITIES
· Perform technical and/or administrative tasks to ensure functionality and efficiency of the IT ecosystem.
· Collaborate with other IT professionals (including remote ones) to maintain the department’s standards, functionality, and performance.
· Ensure Customer Satisfaction with the utilization and results of the established processes and procedures.
· Maintain positive relations with all employees and seek suggestions/ways of improving compliance of IT processes and systems
· Participate in process, procedure, and systems continuous improvement, identify creative ways to reduce costs by streamlining them, and assure they are efficient and not redundant.
· Participate in project activities and ensure timely project delivery. Organize own work effectively and efficiently.
· Maintain discretion and confidentiality in all areas pertaining to data and proprietary information whether internal to Jabil or customer specific
· Maintain discretion and confidentiality in all areas pertaining to IT systems
· Participate in the exchange of ideas within the department. Ask questions and encourage input from other team members
· Understand and embrace the business and IT strategic direction
· Provide regular updates to appropriate managers and conference with them on complex or unusual situations
· Demonstrate commitment to customer service: anticipate, meet and exceed customer expectations, solve customer problems quickly and effectively, make customer issues a priority
· Exchange knowledge and information with other Jabil facilities to ensure best practices are shared throughout the Jabil organization
· Ensure 100% adherence to all company, IT and department policy, processes and procedures
· Comply and follow all procedures within the company security policy.
· May perform other duties and responsibilities as assigned.

JOB QUALIFICATIONS
KNOWLEDGE REQUIREMENTS
Must demonstrate self-sufficiency on the following skills/competencies:
· Has the ability to follow written and verbal directions.
· Has the ability to work effectively under pressure with constantly changing priorities and deadlines.
· Proficiency in use of personal computers, Microsoft Office products (Excel, Word and PowerPoint) and e-mail.
· Business Relationship Management – Practices building strong relationships with business, operations, and other IT groups.

Must be able to acquire the following skills/competencies under direction of others:
· Accountability – Accounts for his/her activities, accepts responsibility for them, and to discloses the results in a transparent manner.
· Action/Results Oriented - Brings full energy to things he/she sees as challenging; enjoys working hard; can act with a minimum of planning; seizes more opportunities than others.
· Business acumen - Knows how the business works; demonstrates knowledge in current and possible future policies, practices, trends, technology, and information affecting his/her business and organization; knows the competition; understands how strategies and tactics work in the marketplace.
· Detail oriented - Has an eye for details and makes a conscious effort to understand the actual cause behind an occurrence.
· Emotional intelligence - Has the ability to monitor his/her own and other people's emotions, to discriminate between different emotions and label them appropriately, and to use emotional information to guide thinking and behavior.
· Presentation Skills - Is effective in a variety of formal presentation settings: one-on-one, small, and large groups, with peers, direct reports, and bosses.
· Sense of urgency - Acts with the realization that efficiency is vital to success, and makes decisions and drives activities in the organization to meet important windows of opportunity.
· Business results orientation - Understands the process of figuring out how to get the right requirements, no matter the challenges faced, and stays resolutely focused on the core principles of gaining alignment and achieving clarity. Ensures that the project and efforts are consistently focused on delivering value for the organization.
· Communication skills - Is able to convey information to another effectively and efficiently.
· Decision making (problem solving) - Is able to forecast the outcome of each option, and based on all these items, determine which option is the best for that particular situation.
· Learning agility - Has the ability to learn, grow, and change over time and consequently develop new skills, rather than simply enhance those that he/she may already have.
· Teamwork - Works collaboratively with a group of people in order to achieve a goal.
· Project Management methodologies – Displays and applies knowledge on Project Management methodologies, specifically on Waterfall and Agile.
· Risk and issues management - Understands the process of identification, analysis, assessment, control, and avoidance, minimization, or elimination of unacceptable risks and/or issues.
· KPAs, metrics and SLA tracking - Understands and applies the tools and techniques to define, measure and control the performance of the project.

EDUCATION & EXPERIENCE REQUIREMENTS

• Bachelor’s degree required; degree in Computer Science, Engineering or Business discipline preferred. Diploma holders with experience will be considered.
• 0 to 1 year IT experience preferred or an equivalent combination of education, training or experience.

RESPONSIBILITIES

• Maintain essential IT infrastructure, including operating systems, security tools, applications, servers, email systems, laptops, desktops, software, and hardware
• Take responsibility for projects and solutions within the larger business initiative
• Handle business-critical IT tasks and systems administration
• Research and evaluate emerging technologies, hardware, and software
• Track and maintain hardware and software inventory
• Setting and monitoring Service Level Agreements (SLA) for IT support to ensure timely response and issue resolution and maintain high service availability.
• Implementing and managing security measures to protect the organisation’s IT systems and data
• Performing regular risk assessments and implementing disaster recovery plans.
• Investing in the professional growth of their team members by identifying training opportunities, certifications and skill-building activities.
• Assessing opportunities for improvement via inspirational leadership and innovations in IT products and processes

REQUIREMENTS

• Bachelor’s degree (or equivalent) in Information Technology or Computer Science
• Professional certification
• Minimum 10 years of relevant work experience in a managerial role