At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will assist in the end to end implementation of security solutions for our clients and support our clients in their desire to protect the business.

The Opportunity

This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, advising stakeholders, providing workshops and supporting business development. If you’re flexible and ready to adapt to a constantly changing environment, there’s no better place to develop your skills. Since you’ll be working directly with clients, some travel will be required.

Your Key Responsibilities

As a Cyber Security Operations consultant, you will be part of the team to assess, design, build, implement and manage security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience.

Skills and Attributes for Success

• Familiarity with Security Information and Event Management (SIEM) solutions.
• Experience with network security monitoring and incident response activities.
• Ability to process impacts of activities and be able to collaborate with IT operations and Cybersecurity teams on mitigations and remediations.
• Ability to apply cybersecurity and privacy principles to organizational requirements.
• Ability to create standard operating procedures and other similar documentation.

To Qualify for the role, you must have

• A recognized university degree in Computer Science, Computer/Electrical Engineering, Information Technology or equivalent
• At least 3 years of relevant experience. Preferably with a year experience in business consulting role in a leading consultancy firm
• Strong interest in the field of information security
• Creative, independent with good problem-solving skills
• Excellent communicator with strong analytical, interpersonal and writing skills

Ideally, you’ll also have

• Industry related certification preferred (e.g. CISSP, CISA, CISM, SABSA, PRINCE2, TOGAF, ITIL).
• Solution Level Certifications, OSCP, CREST, GIAC would be advantageous, as well as penetration testing experience.

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.

What we offer

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

Apply now.

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will assist in the end to end implementation of security solutions for our clients and support our clients in their desire to protect the business.

The Opportunity

This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, advising stakeholders, providing workshops and supporting business development. If you’re flexible and ready to adapt to a constantly changing environment, there’s no better place to develop your skills. Since you’ll be working directly with clients, some travel will be required.

Your Key Responsibilities

As a Cyber Security Operations consultant, you will be part of the team to assess, design, build, implement and manage security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience.

Skills and Attributes for Success

• Familiarity with Security Information and Event Management (SIEM) solutions.
• Experience with network security monitoring and incident response activities.
• Ability to process impacts of activities and be able to collaborate with IT operations and Cybersecurity teams on mitigations and remediations.
• Ability to apply cybersecurity and privacy principles to organizational requirements.
• Ability to create standard operating procedures and other similar documentation.

To Qualify for the role, you must have

• A recognized university degree in Computer Science, Computer/Electrical Engineering, Information Technology or equivalent
• Relevant experience in business consulting will be an added advanatge.
• Strong interest in the field of information security
• Creative, independent with good problem-solving skills
• Excellent communicator with strong analytical, interpersonal and writing skills

Ideally, you’ll also have

• Industry related certification preferred (e.g. CISSP, CISA, CISM, SABSA, PRINCE2, TOGAF, ITIL).
• Solution Level Certifications, OSCP, CREST, GIAC would be advantageous, as well as penetration testing experience.

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.

What we offer

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

Apply now.

Job Description
You will be a member of the Group Information Security Team responsible for initiating, implementing and maintaining security products and solutions to support enterprise security.

Key Responsibilities

• Subject matter expert (SME) for the security systems owned by the Information Security Team.
• Ensure security systems are utilised to their maximum capabilities.
• Plan, identify, assess, design, operationalise and maintain multiple security related software and/or hardware.
• Recommend and drive cyber security solution and initiatives to improve cyber security of the organisation.
• Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
• Provide security consultancy, technical guidance, expertise, solutioning and education.
• Advise infrastructure teams on security design that is relevant and fit for purpose.
• Identify and assess cyber risks in the IT infrastructure environment.
• Review firewall requests.
• Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.
• Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables.
• This is an individual contributor role. Deliver tasks with minimal supervision.
• Strong communication skills.

Requirements

• Degree in IT or related field, with at least 5 years in information security, especially in the application security space.
• Professional security certifications (CISSP, CSSLP, CEH etc) preferred.
• Experience in security products POC and RFQ.
• Prior experience in implementing and maintaining any of tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM etc. and/or network security. Able to review firewall requests.
• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.
• Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience preferred.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc.
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions (both applications and infrastructure) are developed and designed with security inbuilt.

Key Responsibilities

•Provide security consultancy, technical guidance, expertise, solutioning and education for en-terprise.

•Advise application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

•Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

•Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

•Perform threat modelling on security critical applications. Keep up to date on emerging secu-rity threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews and audits to ensure security assurance is achieved.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables. This is an individual contributor role. Strong communication skills.

Requirements

•Degree in IT or related fields, with at least 5 years in information security, especially in the application security space.

•Professional security certifications (CISSP, CSSLP, CEH, CCSP etc) preferred.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.

•Strong in-depth working knowledge in secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), Software Compo-sition Analysis (SCA).

•Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud technolo-gies. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

•Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc. Any prior vulnerability management experience preferred.

•Strong oral, written, presentation and inter-personal skills.

•Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

GIC is one of the world’s largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world’s industry leaders. As a leading global long-term investor, we Work at the Point of Impact for Singapore’s financial future, and the communities we invest in worldwide.

Finance Department

Finance Department (FD) is responsible for financial management of the GIC group. We ensure financial stewardship and reporting for the GIC group, and act as Finance Business Partners to optimize corporate financial planning and the use of operating budgets for growth and sustainability. We harness data and technology to create insights for financial decision-making and achieve excellence in financial operations.

What impact can you make in this role?

We are looking for a suitable candidate to join the Finance Business Partner (FBP) team with the Finance Department. As a member of the Finance Business Partnering team, your responsibility includes financial performance management, stakeholder partnership and advisory, driving excellence in the deployment of resources, strategic benchmarking, business performance appraisal, planning and budgeting for the various departments of the GIC Group.

What will you do as VP, Finance Business Partner?

• Responsible for providing strong finance business partnering support to the technology departments. As a key member of the technology FBP team, the incumbent will provide day-to-day finance support to the technology departments for all their financial reporting and analysis needs, and the go-to person for any finance support and advice
• Acquire deep knowledge of the technology departments and the various technology support that are provided to the cross-business functions. Ability to connect the dots across the technology support landscape to develop meaningful and insightful financial information and analysis to support leadership decisions
• Lead and execute on the annual planning and budgeting cycle for the technology departments. Partner the departments to develop a robust process to enable the efficient and effective delivery of the planning & budgeting package on a timely basis
• Support the technology departments in the execution of the annual budget and provide timely and accurate financial forecast to help departments identify financial opportunities and risks in a timely manner. Partner the business stakeholders to leverage on opportunities and find solutions to abate financial challenges
• Sound working knowledge of FP&A, financial modeling, business controls, processes, compliance to statutory & GIC Corporate policies and procedures are necessary to provide proper guidance to junior team member and business stakeholders
• Support technology departments in the financial benchmarking exercise and business initiatives to drive financial excellence
• Utilizing systems data and tools to support the gathering of meaningful financial information across the business to support stakeholders needs with speed and accuracy

What qualifications or skills should you possess in this role?

• Degree in Finance and Accounting
• At least 12 years of progressive career in accounting and finance with the recent years in the capacity of Finance Business Partner.
• Candidates with experience managing and executing on technology budget in financial institutions and/or large multinationals / conglomerates will be given preference.
• Possess strong stakeholders’ engagement as the role involves partnering and working closely with stakeholders across levels within and outside of the technology departments.
• A highly independent and resourceful individual who is quick to adapt to changing business demands and working collaboratively across functions to drive solutions.
• Ability to keep pace in a dynamic working environment and deliver results in an effective and timely basis.
• Possess strong working knowledge in FP&A, controllership, business controls, processes and compliance with the relevant statutory rules and regulations.
• Proficiency in using system tools (EPM, SAP, Tableau etc.) and prior experience supporting system implementation is an added advantage.

Work at the Point of Impact

We need to be forward-looking to attract the right people to help us become the Leading Global Long-term Investor. Join our ambitious, agile, and diverse teams - be empowered to push boundaries and pursue innovative ideas, share your views, and be heard. Be anchored on our PRIME Values: Prudence, Respect, Integrity, Merit and Excellence, which guides us in how we make our day-to-day decisions. We strive to inspire. To make an impact.

Flexibility at GIC

At GIC, our offices are vibrant hubs for ideation, professional growth, and interpersonal connection. At the same time, we believe that flexibility allows us to do our best work and be our best selves. Thus, our teams come into the office four days per week to harness the benefits of in-person collaboration, but have the flexibility to choose which days they work from home and adjust this arrangement as situational needs arise.

GIC is an equal opportunity employer

GIC is an equal opportunity employer, and we value diversity. We do not discriminate based on race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment.

Learn more about our Finance Department here: https://gic.careers/group/finance-department/

You can apply directly through our recruitment portal at:

https://careers.gic.com.sg/job-invite/15609/

Job Title: Postdoctoral Researcher in Transportation Mode Choice and Car Ownership Decisions

Job Description:

We are seeking a highly motivated and skilled Postdoctoral Researcher to join our team and contribute to an exciting project focused on understanding individual decisions regarding car ownership and transportation mode choice. The successful candidate will utilize advanced machine learning techniques to analyze real-world data and develop models that elucidate the factors influencing these decisions. This research aims to provide valuable insights for policymakers, urban planners, and transportation authorities to design more efficient and sustainable transportation systems.

Key Responsibilities:

1. Conduct in-depth literaturereviews to understand existing theories and methodologies related to transportation mode choice and car ownership decisions.
2. Collect, preprocess, and analyze large-scale datasets containing information on individual travel behavior, demographic characteristics, urban infrastructure, and environmental factors.
3. Develop machine learning models, including but not limited to regression, classification, and clustering algorithms, to identify patterns and predict individual choices regarding car ownership and transportation mode.
4. Collaborate with interdisciplinary team members including researchers in transportation engineering, urban planning, and data science to integrate findings into comprehensive frameworks.
5. Communicate research findings through high-quality publications in peer-reviewed journals, conference presentations, and reports.
6. Assist in the supervision of graduate students and contribute to the intellectual environment of the research group by participating in discussions, seminars, and workshops.
7. Engage with stakeholders such as government agencies, industry partners, and community organizations to disseminate research outcomes and facilitate knowledge exchange.

Qualifications:

1. A Ph.D. in transportation engineering, urban planning, computer science, applied mathematics, statistics, or a related field.
2. Strong background in machine learning, statistical analysis, and data mining techniques, with experience in applying these methods to real-world datasets.
3. Proficiency in programming languages commonly used in data analysis such as Python, R, or MATLAB.
4. Familiarity with transportation modeling software (e.g., TRANSIMS, MATSim) and geographic information systems (GIS) is advantageous.
5. Excellent written and oral communication skills, demonstrated through a track record of publications in reputable journals and presentations at academic conferences.
6. Ability to work both independently and collaboratively in a multidisciplinary research environment, with a proactive and creative approach to problem-solving.
7. Prior experience in transportation research, particularly in the areas of mode choice modeling, travel behavior analysis, or urban mobility, is preferred but not required.

Duration and Remuneration:

The position is full-time and renewable annually, contingent upon satisfactory performance and funding availability. The salary will be commensurate with qualifications and experience, in accordance with institutional guidelines for postdoctoral researchers.

About the job

-Work with Regional Chief Information Security Officer to drive and deliver the Bank's security transformation agenda including implementation of security strategy, technologies and building up operations for the region

-Manage projects within regional transformation program

-Maintain all relevant technical documentation, processes, procedures and reportable metrics

-Select technologies implementing bank's cyber security program and control objectives.

- Build and operate technologies which necessary to maintain bank's cyber security program

-Work with third party vendors to design, deploy, maintain and operate Bank's security solutions.

-Build cybersecurity engineering, maintenance and operational teams.

-Configure and Troubleshoot bank's security systems

skills and experience required

-Minimum 15 years of experience in hands on cybersecurity and project management roles

-Strong understanding of various cyber security technologies addressing the protection of identities, data, applications,endpoints and infrastructure.

-Demonstrated experience in applying security and risk frameworks such as: NIST, Mitre ATT&CK, Mitre DEFEND, ISO27K

-Demonstrated experience in applying technical solutions to meet regulatory requirements stipulated by regional authorities (examples: MAS, HKMA, BOJ, RBI, BNM, CFR-RBA, CBIRC, etc)

- Demonstrated experience is building the cyber security teams in the areas of engineering and/or operations. Program and project management skills

-Broad knowledge across all facets of modern cybersecurity program, including strong understanding of current and emerging trends and threats.

To apply online please use the apply function, alternatively you may contact Chloe Chen at chloe.chen(@)randstad.com.sg. (EA: 94C3609 /R1768253)

Responsibilities:

1. Develop distributed artificial intelligence systems and deploy them on large-scale clusters or clouds.
2. Develop and optimize algorithm systems from specific scenarios and problems, and produce solutions applied to the scenarios.
3. Participate in the integration design and optimization of artificial intelligence technology and existing tools to improve product performance.
4. Write high-quality scientific papers and have the opportunity to serve as the first author of important papers.

Requirements:

1. Proficient in TensorFlow/PyTorch, Ray/DeepSpeed/NVIDIA Megatron/Colossal-AI, and familiar with the internal operating mechanisms of these systems.
2. Familiar with various optimization algorithms and model architectures, proficient in Python or C++ optimization algorithm libraries, including various classical algorithms and models based on gradients (BERT, GPT-3, Swin Transformer, ViT, MLP-Mixer).
3. Familiar with SaaS, architecture, compilers, networks, CUDA, and other related knowledge or have relevant project experience.
4. Strong programming and engineering implementation abilities. Those who have won programming competition awards or published high-quality papers will be given priority in recruitment.
5. Bachelor's degree or above from 211, 985, or overseas well-known universities, majoring in computer science, software engineering, electronic information, automation, mathematics, physics, or other artificial intelligence-related majors.

Key Responsibilities:

• Design and develop AI systems(i.e. training acceleration framework, inference speedup framework or integration of framework) that meet business requirements, including natural language processing, computer vision, machine learning, and deep learning algorithms.
• Analyze and evaluate existing AI systems and propose improvements for increased performance, accuracy, and scalability.
• Collaborate with cross-functional teams, including software engineers, data scientists, and product managers, to integrate AI solutions into existing products and services.
• Stay up-to-date with the latest AI technologies and research, and evaluate their potential impact on our business and industry.
• Ensure that all AI systems are secure, reliable, and scalable, and comply with regulatory requirements.
• Develop and maintain documentation and user guides for AI systems.

Requirements:

1. Proficient in TensorFlow/PyTorch, Ray/DeepSpeed/NVIDIA Megatron/Colossal-AI, and familiar with the internal operating mechanisms of these systems.
2. Familiar with various optimization algorithms and model architectures, proficient in Python or C++ optimization algorithm libraries, including various classical algorithms and models based on gradients (BERT, GPT-3, Swin Transformer, ViT, MLP-Mixer).
3. Familiar with SaaS, architecture, compilers, networks, CUDA, and other related knowledge or relevant project experience.
4. Strong programming and engineering implementation abilities. Those who have won programming competition awards or published high-quality papers will be given priority in recruitment.
5. Bachelor's degree or above from 211, 985, or overseas well-known universities, majoring in computer science, software engineering, electronic information, automation, mathematics, physics, or other artificial intelligence-related majors.

About Klook

We are Asia’s leading platform for experiences and travel services, and we believe that we can help bring the world closer together through experiences.

Founded in 2014 by 3 avid travelers, Ethan Lin, Eric Gnock Fah and Bernie Xiong, Klook inspires and enables more moments of joy for travelers with over half a million curated quality experiences ranging from the biggest attractions to paragliding adventures, iconic museums to rich cultural tours, and other convenient local travel services across 2,300 destinations around the world.

About this role:

We are on the lookout for a Senior Graphic Designer for a global role, someone who is not only passionate about design but also understands how it impacts our broader business goals.

Your mission will be to utilize your keen eye for detail and innovative approach to contribute to a variety of projects. Your core responsibilities will include creating engaging visuals, logos, and typography, all grounded in solid design principles. Embracing the latest in design technology, you're expected to experiment with generative AI tools to push creative boundaries.

If you have additional skill sets in illustration, animation, or editing, you'll find your niche here. Success in this role also depends on your proficient time management, ability to work autonomously, and your collaborative spirit with teams across different cultures and regions.

What you’ll do:

Visual Creation Mastery and Innovation:

• Conceptualize and execute visually striking designs aligned with brand identity and campaign objectives.
• Explore new design approaches within our brand's style guidelines, integrating compelling illustrations and iterating based on feedback for maximum audience engagement.
• Display a strong sense of layout, color, composition, and typography

Logos, Toolkits Creation and Typography:

• Create impactful logos and toolkits that capture the essence of marketing campaigns and deeply resonate with the target audience.
• Dive deep into typography trends, experimenting with diverse font styles to enhance design aesthetics and communication efficacy.

Strategic Design and Business Alignment:

• Apply design expertise to address business challenges and meet organisational needs.
• Ensure design outputs align with Klook's strategic goals, fostering consistency and synergy.
• Collaborate cross-functionally to integrate business insights into design, driving measurable success and market relevance.

Proactive Work Style and Project Management:

• Efficiently manage multiple deadlines, prioritizing tasks to ensure timely delivery of exceptional design work while thriving in an autonomous environment.
• Take ownership of projects, driving them forward with precision and creativity, demonstrating a self-starting attitude to initiate tasks and take the lead in project execution.

Seamless Collaboration:

• Facilitate seamless collaboration with cross-functional teams across diverse locations through excellent communication skills.
• Foster cohesion and synergy in all design projects by being a team player.
• Ensure smooth interaction and effective coordination among team members to achieve project goals.

What you’ll need:

• Qualification in graphic, brand, and digital design.
• Minimum of 3 years' experience as a designer within a creative team, in a marketing or creative agency setting
• Demonstrated expertise in visual creation, identity design, and typography exploration through a diverse portfolio.
• Proficient in Adobe Creative Suite (Photoshop, Illustrator, After Effects, Premiere), comfortable with navigating between softwares.
• Adept at prioritizing tasks to meet deadlines without compromising quality.
• Proven ability to excel in an independent work environment

Job Description

What you will do:

• Under the guidance of Head of Internal Control, the IT Internal Control Manager will play critical role in company’s continuous enhancement of internal controls across IT systems, platforms, and processes. Collaborating with diverse departments, this role ensures that controls such as ITGC, ITAC, and ITELC not only align with business objectives but also fortify data integrity and cybersecurity, while upholding SOX IT-related compliance. Positioned as a trusted advisor to the business, the person will offer insights and best practice recommendations on optimizing IT controls, emphasizing automation and standardization.

Key responsibilities include:

• Lead the assessment of IT Control Environment and framework that suits Traveloka’s needs
• Evaluate and update IT controls, cybersecurity protocols, and compliance processes in line with Traveloka’s Group SOX ICOFR guidelines.
• Analyse IT processes & controls to identify key IT risks, lapses, or potential enhancements across business operations.
• Advocate and drive the transition towards automated controls to boost efficiency.
• Lead coordination in remediating IT audit issues in collaboration with operations and technology divisions.
• Analyze and design IT SOX controls supporting business processes and other compliance topics to identify risk and control weaknesses.
• Manage SOX-specific IT activities, ensuring up-to-date documentation like system flowcharts and risk control matrices.
• Develop and provide IT control training to bridge organizational knowledge gaps, keeping teams abreast of compliance benchmarks.
• Work to mitigate and remediate identified deficiencies with the business in a timely manner.
• Promote the use of SOX control & risk management tool to PICs and assist PICs in managing control development effectively on the tool.

Requirements:

• Bachelor's degree in computing related majors with IT audit qualifications preferred.
• A minimum of 8 years in IT audit and control roles, encompassing IT control management, cybersecurity, IT audit, and operational management.
• Prior experience in Big 4 IT auditing is required.
• Over 6 years of expertise in SOX-oriented IT audit & controls.
• Certified Internal Audit (CIA), Certified Information System Auditor (CISA), or similar certifications highly desirable. Thorough understanding of internal control concepts, especially SOX and COSO frameworks.
• Comprehensive understanding of ITGC & ITELC best practices, cybersecurity protocols, and associated regulations.
• Capable of managing and prioritizing multiple IT projects.
• Excellent communication abilities for effective interactions with internal and external parties.

Job Description & Requirements
Responsible for Windows servers, AD, DHCP, DNS and GPO implementation and maintenance.
Responsible for insuring the day-to-day operation, reliability, and integrity of the client’s environment. This includes the installation, maintenance, and management of all system related technologies such as VMware, backup, patch management, anti-virus rollout/support/monitoring.
Perform cloud technology administration on platforms such as AWS, Azure, Office365, etc.
The Engineer is responsible to assist in the development of company policies and procedures to support operations, security, and integrity.
Responsible for performing system generation, tuning, configuration, upgrades, performance management, disaster recovery, network troubleshooting, end-user support and usage reporting as required.
This position is responsible to work with all technology team member to insure proper design of system architecture.
Analyses existing customer system infrastructure and identify potential enhancements to sustain and improve optimization and performance.
Perform MS Windows 2008/2012/2016 and health checks.
Create and maintain documentation, report generation/customization.
Provides clear oral and written communication.
Maintains high quality customer service to customers.

Requirements

Diploma/Degree in Computer Science Engineering in relevant discipline.
ITIL, MCSE/MCSA certification or equivalent preferred.
Minimum 3 years’ experience in supporting and implementing IT infrastructure.
Strong consultancy and interpersonal skills.
Good technical/engineering/development practice.
Hands-on system design and/or configuration experience with Microsoft Technologies, VMware, Backup Software and Cloud Technologies.
Experience in VMware server virtualization and administration.
Working knowledge of Microsoft Server OS Roles and Features is required.
Well rounded technologist willing to learn and understand networking, middleware, storage, backup/restore, automation, system and security.
Experience planning and developing support processes and adhering to best practices
Ability to quickly comprehend the functions and capabilities of new technologies.

Interested candidate please click "APPLY" to begin your job search journey and submit your CV directly through the official PERSOLKELLY job application platform - GO Mobile.

We regret to inform that only shortlisted candidates will be notified.
By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

PERSOLKELLY Singapore Pte Ltd
• RCB No. 200007268E • EA License No. 01C4394
• Reg. <R23118940> <Sharmaine Lim Sze Ying>

Responsibilities:

Designing, developing, and implementing high-quality software solutions using Core Java and J2EE technologies.

Collaborating with cross-functional teams to analyze requirements, develop technical specifications, and deliver solutions that meet business objectives.

Participating in the full software development lifecycle, including planning, coding, testing, debugging, and deployment.

Troubleshooting and resolving technical issues in production environments.

Conducting code reviews and providing constructive feedback to team members.

Keeping abreast of industry trends, best practices, and emerging technologies to continuously improve development processes and deliverables.

Mentoring junior developers and sharing knowledge within the team.

Requirements:

Bachelor's degree in Computer Science, Engineering, or a related field.

Minimum of 8 years of hands-on experience in Core Java and J2EE development.

Strong proficiency in object-oriented programming principles, design patterns, and data structures.

Experience with Spring Framework, Hibernate, and other Java-based frameworks.

Solid understanding of web technologies such as HTML, CSS, JavaScript, and AJAX.

Experience with relational databases (e.g., MySQL, Oracle) and SQL query optimization.

Excellent problem-solving skills and attention to detail.

Ability to work independently and collaboratively in a fast-paced environment.

Excellent communication skills and the ability to interact effectively with stakeholders at all levels.

Job Descriptions

Maintaining and administering the networks environments including hardware, and configurations.
Performing disaster recovery operations and data backups when required.
Protecting data, software, and hardware by coordinating, planning and implementing network security measures.
Troubleshooting, diagnosing and resolving hardware, software, and network problems.
Replacing faulty network hardware components when required.
Monitoring network performance to determine if adjustments need to be made.
Coordinating computer network access and use.
Administer, and troubleshoot network infrastructure devices, including wireless access points, firewall, routers, switches, controllers.
Responding to inquiries from users, IT peers, vendors and to provide technical assistance and support.
Ensure control and compliance for the systems and servers related are available to only authorize users which follows policies and SOPs closely.
Attending audit meetings and ensure proper documentation of all work done.
Vendor management
Establish/maintains customer relationship with partners or internal users to ensure complete understanding of business processes to enable the delivery of viable Infrastructure solution.
Provide PABX support based on Client’s SOP and documentation
Attending to machine faults related to network problems during office and after office hours.

Job Requirements:

3-4 years of network
Network security
HPE network
Wifi knowledge (Aruba or Cisco)
Fortigate, Palo, or Cisco firewall experience
Megapop and SD-WAN knowledge
Work with vendors
Networking best practices
PABX knowledge (will be good)

Interested candidate please click "APPLY" to begin your job search journey and submit your CV directly through the official PERSOLKELLY job application platform - GO Mobile.

We regret to inform that only shortlisted candidates will be notified.
By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

PERSOLKELLY Singapore Pte Ltd
• RCB No. 200007268E • EA License No. 01C4394
• Reg. <R23118940> <Sharmaine Lim Sze Ying>

Executive Summary

Smart IMS Inc provides Digital technology & Cloud transformation services, Application & Infrastructure Management Services, Unified Communications, and Insurance implementation services to customers across the Americas, Europe, Middle East, and Asia-Pacific regions. As the trusted technology and business partner of leading MNCs, including Global Investment Banks, Smart IMS is also a Microsoft Gold Certified Partner, Oracle Platinum Partner and AWS MSP Partner.

We are looking to hire a Cyber Security Engineer in Singapore to support our client, a statutory board, with the following responsibilities:

• Able to perform Security & Vulnerabilities Assessment and Remediations, and apply security Patches & Fixes
• Manage security incidents and conduct forensic analysis when necessary to determine the source and scope of any security breaches.
• Collaborate with cross-functional teams to implement security best practices and ensure compliance with regulatory requirements.
• Engage on Security incident management and response efforts.
• Respond to security alarms and analyze and escalate incidents by process or management.
• Perform Security & Vulnerabilities Assessment and Remediations
• Perform impact assessment and testing of security patches before applying them.
• Provide timely reports and status updates on the progress of fixes to stakeholders.
• Taking Owner ship of Security incident life cycle management
• Automate the security monitoring and incident response.
• Collaborate with system administrators and developers to address and remediate identified vulnerabilities.
• Conduct regular security audits and vulnerability assessments to identify weaknesses and potential threats to the organization's information systems.

Job Scope

· Fully follow up the product lines and ensure the instruction of Chairman on products are executed and implemented.

· Communicate with product and R&D teams of each product line, follow up project, grasp the details of project progress and feedback to Chairman.

· Participate in product scheduling, coordinate multiple resources, design, R&D, operation, and testing teams, promote the development process of each product before launch. After launch, facilitate team updates and iterate product features based on operational feedback.

· Organized and coordinated product-related meeting which involving Chairman, responsible for summarizing meeting minutes, followed up, established an effective communication between Chairman and Project team, play a bridge role in product positioning and execution.

· Stay attentive to market, analyse competitive products in relevant market, compare company product design, provide opinions and suggestions for Chairman's product decisions.

· According to the requirements of Chairman, organize related product, R&D, design resources, and independently complete specific projects.

Requirements

1. Educational Background: Bachelor's degree or higher.

2. Work Experience: Over 10 years of work experience with 5 years of team management experience.

3. Industry Experience: Relevant work experience in well-known/large internet companies, with practical experience in designing and managing internet products, ideally with at least one successful experience in internet product design and management.

4. Professional Qualifications:

· Strategic thinking and management in internet product field, with a strong forward-looking perspective on product field future development and market judgment.

· Ability to think user-centrically and data-driven, challenging authority and traditional experiences, with a habit of rapid and thorough verification.

· Strong team management, project management, and team training abilities.

· Excellent language, communication, organization, and coordination skills.

· Management training experience and advanced certificates in product development is an advantage.

5. Regional Experience: International perspective and experience, with deep insights into and experience in China, Southeast Asia, and other international markets, particularly preferred in terms of product and project implementation.

6. Language Requirements:

· Proficient in professional business writing and language communication.

· Fluent in Mandarin to communicate with Chinese associate.

Job Description

The Singapore Airlines Mobile application (available under “Singapore Airlines” on the Apple App Store) vision is to be the trusted travel companion for SIA passengers, offering features covering the customer journey from booking, pre-flight, day of travel, in flight and post flight.

The SIA Mobile team is currently hiring iOS developers. This is a full-time role with a hybrid WFH / Work from office arrangement, and includes travel benefits, access to ongoing learning, and an attractive work-life balance.

Key responsibilities:

• Work with our team of Product Managers, Product Owners, UX Designers, QA, and Developers to build, optimise and release features within the SIA Mobile application.
• Ensure the application features operate smoothly in production and deliver world class customer experience to our large base of monthly users.
• Learn and apply principles of Test Driven Development, Agile Methodologies, Extreme Programming and MVP/MVVM architecture to deliver highly usable, stable and maintainable code.
• Learn and work with tech stack comprising best-of-breed tools such as Swift, Git, Jenkins CI/CD, Sonarqube, automated test tools, a Java/Node.js back end, and AWS to deliver a monthly release of the mobile application.
• Integrate with a range of SIA’s backend systems using integration tech such as REST and JSON.
• Contribute to building a culture of openness, belonging, mutual support, ongoing learning, continuous improvement, enablement, and engineering excellence.
• Operations and L2 support work after hours may be needed from time to time. This will be kept to a minimum and shared across the team to ensure a sustainable work/life balance.
• Any relevant ad-hoc duties.

Eligibility

For Ground Staff
- Non-Specialists: Minimum 2 years in current role, subject to meeting the requirements below.
- Specialists: Minimum 2 years in current role and minimum 5 years in current function, subject to meeting the requirements below.
- If you are successful, this will be considered a lateral transfer.

For Non-Ground Staff
- Subject to meeting the requirements below.

Requirements

• Possess a degree in Information Technology or related fields
• Hands on experience with Swift development is preferred. Recent graduates with no industry experience, or developers experienced in other tech stacks are welcome to apply if they wish to grow a career in mobile development.
• A willingness to learn and apply best practices in iOS (Swift) development, Extreme Programming principles, Pair Programming, Test Driven Development, DevOps, and defensive programming.
• Ability to communicate fluently in English. The team is a diverse team, and strong written and verbal English communication is essential to daily work.

Job Responsibilities:

· Drive the fortification and optimization of the wallet security system, including but not limited to security policies, patching vulnerabilities, and monitoring unusual activities.

· Responsible for the daily operational maintenance of the wallet system, including but not limited to node deployment, on-chain data synchronization, and system backup, etc.

· Provide reasonable and effective suggestions for the existing wallet system framework, assist in upgrading the security organizational framework, participate in the design and implementation of security policies, to ensure the security of the exchange wallet system.

· Design and collaborate on the development of a security framework with rational security logic.

· Enrich and optimize existing rules, participate in the emergency response to daily security incidents, as well as the maintenance of security systems.

· Continuously track the latest technologies and threats in the field of blockchain and digital asset security, providing professional advice and guidance to the team.

· Proactively identify and resolve potential system risks, improving the overall security awareness and capabilities of the team.

Qualification Requirements:

· Have a sense of infrastructure security, familiar with common security vulnerabilities and attack methods.

· Capable of independently developing, writing, and maintaining a security framework.

· Familiar with common Linux commands and tools, penetration testing processes and tools.

· Familiar with security risk management, security node upgrades.

· Familiar with WEB3 development technology, with priority given to those who have experience in Solidity smart contract development.

· Have a deep understanding of blockchain technology and digital assets, familiar with the application skills of common scenarios on the chain.

· Good communication and written expression abilities, able to effectively communicate and cooperate with colleagues in different positions.

Bonus Points:

· Experience in security framework design.

· Experience in handling security incidents & offensive and defensive real-world experiences.

· Priority given to those with practical project or tool development experience.
Senior Security Operations Engineer

· Capability to analyze the behavior of malware samples in Windows/macOS/Linux environments.

Job Description

The Singapore Airlines Mobile application (available under “Singapore Airlines” on the Google Play Store) vision is to be the trusted travel companion for SIA passengers, offering features covering the customer journey from booking, pre-flight, day of travel, in flight and post flight.

The SIA Mobile team is currently hiring Android developers. This is a full-time role with a hybrid WFH / Work from office arrangement, and includes travel benefits, access to ongoing learning, and an attractive work-life balance.

Key responsibilities:

• Work with our team of Product Managers, Product Owners, UX Designers, QA, and Developers to build, optimise and release features within the SIA Mobile application.
• Ensure the application features operate smoothly in production and deliver world class customer experience to our large base of monthly users.
• Learn and apply principles of Test Driven Development, Agile Methodologies, Extreme Programming and MVP/MVVM architecture to deliver highly usable, stable and maintainable code.
• Learn and work with a tech stack comprising best-of-breed tools such as Kotlin, Git, Jenkins CI/CD, Sonarqube, automated test tools, a Java/Node.js back end, and AWS to deliver a monthly release of the mobile application.
• Integrate with a range of SIA’s backend systems using integration tech such as REST and JSON.
• Contribute to building a culture of openness, belonging, mutual support, ongoing learning, continuous improvement, enablement, and engineering excellence.
• Operations and L2 support work after hours may be needed from time to time. This will be kept to a minimum and shared across the team to ensure a sustainable work/life balance.
• Any relevant ad-hoc duties.

Eligibility

• For Ground Staff
• Non-Specialists: Minimum 2 years in current role, subject to meeting the requirements below.
• Specialists: Minimum 2 years in current role and minimum 5 years in current function, subject to meeting the requirements below.
• If you are successful, this will be considered a lateral transfer.
• For Non-Ground Staff
• Subject to meeting the requirements below.

Requirements

• Possess a degree in Information Technology or related fields
• Hands on experience with Android development is preferred. Recent graduates with no industry experience, or developers experienced in other tech stacks are welcome to apply if they wish to grow a career in mobile development.
• A willingness to learn and apply best practices in Android (Kotlin) development, Extreme Programming principles, Pair Programming, Test Driven Development, DevOps, and defensive programming.
• Ability to communicate fluently in English. The team is a diverse team, and strong written and verbal English communication is essential to daily work.

Responsibilities:

1. Contribute to high-quality research and development work in TCOMS laboratory through:

· design of scaled physical test models, such as maritime vessels, offshore rigs, marine renewable platforms, and aquaculture systems for testing in TCOMS Ocean Basin.

· generation of detailed design, production, assembly, and as-built drawings of test models.

· leading a team of engineers and technicians on model fabrication and modification, calibration, instrumentation, and experimental setup.

· design of embedded sensors to enhance the measurement of models' behaviour and response.

· document design processes, methodologies, and results.

· engagement with external vendors for component sourcing and additional modification work that are beyond the present capabilities of TCOMS laboratory.

2. Perform research in the following areas:

· Offshore hydrodynamics

· Loads, motions and response analysis of Marine & Offshore platforms and floating structures

· Fluid-structure interactions

3. Collaborate with internal teams, affiliated research institutes and other relevant stakeholders in proposal preparation and submission.

Requirements:

Qualification & Field of Study:

· Bachelor's degree in following or related disciplines:

o Mechanical Engineering, Mechatronics,

o Ocean Engineering, Marine Engineering, Offshore Engineering,

o Electrical Engineering, Computer Engineering / Science

o Offshore/Civil/Structural Engineering, Applied Mathematics

Experience:

· 2 to 3 years of relevant work experience in the following areas:

o Mechanical design.

o Naval Architecture, ocean engineering, marine engineering, hydrodynamics, and systems engineering.

o Project management/productivity software/tools such as MS Office, MS Project.

o Marine structures, offshore structural engineering.

· Proficient with 3D modelling tools such as SolidWorks and AutoCAD.

· Prior experience / knowledge in one or more of the following software /programming languages will be preferred:

o SolidWorks, Rhino, and AutoCAD,

o WAMIT, OrcaFlex, SESAM Suite or equivalent,

o Finite Element analysis tools such as SESAM, ABAQUS, Ansys

· StarCCM+, OpenFOAM,

· Matlab, Fortran, Python and/or C++

· Model experiments in wave flumes, wave tank or ocean basin.

Other Requirements:

· Good interpersonal and communications skills.

· Good organization and interface management skills.

· Ability to adapt and work effectively as team player.

· Resourceful and self-driven with a high degree of professional integrity.

The above eligibility criteria are not exhaustive. A*STAR may include additional selection criteria based on its prevailing recruitment policies. These policies may be amended from time to time without notice. We regret that only shortlisted candidates will be notified.

Scientist

· Perform research in the areas of naval architecture and ship hydrodynamics: Resistance and propulsion, seakeeping and manoeuvring, motions and response analysis of ships and floating structures.

· Complement domain knowledge with AI: machine learning for maritime applications such as system identification of vessel behaviour, autonomous vessel control, wave dynamics, resistance and propulsion.

· Implementation and operationalization of optimization methods for efficient voyages for port environment as well as for international voyages.

· Digital twinning of ships for operational optimization.

· Conduct extensive and high-quality research to develop integrated physical-numerical modelling & simulations using combinations of:
physical experiments and field / experimental sensing, numerical simulations using CFD and/or potential flow-based models or other relevant techniques, machine learning and data analytics.

· Collaborate with industry partners, affiliated research institutes and other relevant stakeholders to make proposal and securing further research grants.

· Any other duties as assigned by supervisor.

Qualification & Field of Study

· PhD in Naval Architecture, Marine Engineering, Fluid dynamics, Applied Mathematics or other related disciplines.

Experience:

· Preferably 3 years of relevant postdoctoral/research/industry experience with knowledge in some of the following areas:

o Naval architecture, and ship hydrodynamics

o Potential flow and CFD software packages to simulate the seakeeping and manoeuvring behaviour of vessels / groups of vessels.

o Model test experiments in towing tank and ocean basin will be an advantage.

o Sensing, data analytics, machine learning at model- and full-scale will be an advantage.

o Hardware-in-the-loop (HIL) testing and development

· Prior experience / knowledge of the following software /programming languages will be preferred:

o StarCCM+, OpenFOAM, HydroStar,

o WAMIT, SESAM Suite or equivalent,

o Fortran, Python, MATLAB and/or C++

Other Requirements (e.g. Skills, Competencies):

· Good interpersonal and communications skills.

· Ability to adapt and work effectively as members of a team.

· Good command of written and spoken language.

· Resourceful and self-driven with a high degree of professional integrity.

The above eligibility criteria are not exhaustive. A*STAR may include additional selection criteria based on its prevailing recruitment policies. These policies may be amended from time to time without notice. We regret that only shortlisted candidates will be notified.

Job Description

• Develop modern web development and DevOps practices to develop, test, debug and deploy.
• Develop responsive and mobile friendly web design.
• Develop robust solutions with consideration to security, performance, internationalization, and browser-compatibility.
• Use the business process requirements to drive the detailed design of the application and technical architecture components.
• Configure, build, and test the application or technical architecture components.
• Work with other developers, designers, and architects to make sure that the configuration and custom components meet application requirements and performance goals.
• Plan and execute all required process steps as defined in our methodologies.
• Anticipate, identify, track, and resolve issues and risks affecting the delivery.
• Any relevant ad-hoc duties.
• This is an individual contributor role.

Requirements

• Bachelor's Degree in Computer Science or relevant field
• At least 4 years' experience in full stack development framework
• Ability to gain an understanding of customer process and issues
• Ability to work in teams and individually when needed
• Ability to demonstrate excellence in communicating and presenting complex information to technical and non-technical stakeholders, both verbally and in written form
• Familiar with the following technologies:
• Script: JavaScript, jQuery, TypeScript, ES6, jQuery
• Design & Style: HTML5, Responsive/Adaptive Design, Design Thinking, Usability Design, CSS3, LESS, SASS, Bootstrap
• Frameworks: (At least one of the following) ReactJS, AngularJS, Vue.js
• Web DevOps & Test: Git, Grunt, Bower, npm, Jasmine, Selenium
• Backend: REST API with Spring, SpringBoot, Node.js

Job Responsibilities:

1. Promote the construction and optimization of the security and security operation center system, including but not limited to log collection, analysis, alarms, SOAR, and BAS;

2. Responsible for tracking and analyzing security issues and promoting the completion of closed-loop processing of security incidents;

3. Enrich and optimize existing alarm scenarios and rules to improve alarm quality;

4. Participate in daily emergency response to security incidents and security system maintenance;

5. Participate in building security testing capabilities for office networks, production networks, and cloud environments;

6. Participate in the company’s office security offensive and defensive confrontation to improve office security capabilities;

job requirements:

1. More than 10 years of security-related work experience, and those who have engaged in Web3-related work are preferred;

2. Be familiar with vulnerability management, writing and maintaining security baseline detection rules, understand the principles of common vulnerabilities, and have the ability to write POC and EXP codes for vulnerabilities;

3. Familiar with at least one language such as Python and Java, and have API system integration development capabilities;

4. Familiar with big data development tools such as SQL, ELK, Kafka, etc., have log analysis and processing capabilities, and can be combined with security risk data;

5. Be familiar with the threat detection operation ideas in office networks, production networks and other environments, and can set up systematic detection solutions according to scenarios;

6. Familiar with the configuration management and rule writing of common security products such as Sysmon, Osquery, and Wazuh; familiar with the main tactics and techniques of the ATT&CK attack matrix and able to convert them into detection rules;

7. Have experience in intrusion detection and emergency response, and be able to quickly locate, block, and defend security incidents;

8. Have the ability to discover vulnerabilities and be able to complete the entire penetration testing process independently.

Bonus Point:

1. Responsible for the complete R&D cycle of security defense products

2. Have in-depth understanding of offense and defense, and experience in actual combat with APT

3. Ability to analyze the behavior of malware samples in Windows/macOS/Linux environments

4.Able to communicate in different Language with teams based in Europe or China

Executive Summary

Smart IMS Inc provides Digital technology & Cloud transformation services, Application & Infrastructure Management Services, Unified Communications, and Insurance implementation services to customers across the Americas, Europe, Middle East, and Asia-Pacific regions. As the trusted technology and business partner of leading MNCs, including Global Investment Banks, Smart IMS is also a Microsoft Gold Certified Partner, Oracle Platinum Partner and AWS MSP Partner.

We are looking to hire a Service Desk Engineer in Singapore to support the IT operations of our client, a global MNC, with the following responsibilities:

Responsibilities:

· Perform IT support for end users, ensuring user satisfaction

· Provide technical troubleshooting and support for hardware, software, network, and application issues.

· Escalate complex or unresolved issues to appropriate support teams or specialists for further investigation and resolution.

· Coordinate with users on projects tasks, providing regular updates on migration status

· Assist in Knowledge Base, Assets Management for ServiceNow

· Knowledge of Active Directory is preferred of adding, deletion of accounts. NTFS permissions based on global groups. Apply GPO on end points

· Perform imaging of laptops, through SCCM imaging

Requirements:

· ITE or Diploma in Information Technology or related discipline

· Excellent Interpersonal with the ability to communicate (both verbally and written) and interact effectively at all levels

· Understanding of desktop, laptop and printer and TCP /IP networking

· Knowledge of Windows 10, Office 0365 applications

· Vendor interaction (laptops / desktops) for repair and replacement of parts

· Knowledge in basic networking and troubleshooting

· Knowledge in ITIL practices and processes

· Must be self – motivated, a team player and demonstrate effective learning skills

· Committed, pro –active and dynamic working attitude

· Must have passion in technology, computers and people

JOB PURPOSE:

The Regional Security Head (RSH) will be responsible for managing the FAB’s Information Security Program at the regional level.

The Regional Security Head will report to Head of International Security and shall be responsible to plan, implement, monitor, and review the information security program in the consultation with Group Security Office – Head office team. The RSH shall ensure the information security program is in alignment with the regulatory, legal, and statutory requirement of the region and the business strategy. The Regional Security Head role will be operating out of FAB Regional office and will require travel within the region while fulfilling the responsibilities.

The Information Security Officer (ISO) will be responsible for managing the FAB’s Information Security and Data Privacy Program for Singapore. He/She serves as the process owner of the appropriate second-line functional activities related to confidentiality, integrity, availability, privacy and recovery of information owned or processed by the business unit in compliance with regulatory requirements.

KEY ACCOUNTABILITIES:

• Review and Maintain Security Policies, Standards, and Procedures pertaining to the regional locations.
• Participate in discussion and coordinate activities between local business units, support functions, Compliance Team, IT and GSO – HO for information security, planning, implementations, and review
• Ensure information security compliance as per regulatory requirements (MAS-SNG, BNM, HKMA Standards, GDPR, PCI DSS and any other)
• Update International Location Executive management regarding information security initiatives, major risk, threats, attacks, and incidents.
• Review new regulatory legislations; promptly communicate all regulatory notices/circulars to all concerned areas, provide interpretations if necessary; develop/monitor action plans towards its implementation.
• Assist Head office during Regulatory Examinations; ensure implementation/regularization of observations linked to compliance while meeting the deadline(s).
• Review Technology Risk Assessments, RCSA and Third-party Risk assessments.
• Assist and support for Internal and External Audits. Monitor and track all open issues with IT/IS and concerned international SPOCS for regional locations.
• Oversee the tracking and closure of related findings.
• Govern the security awareness program for respective regional staff.
• Provide support to FAB CSIRT for information security incident and data breach handling.
• Coordination with International Business units/Fraud Risk / GSO for digital forensic investigation
• Review and assess the regulatory compliance circulars/notices, discuss with GSO- HO and enforce security controls as applicable.
• Assist Group Security – Head Office team in vulnerability assessment and penetration testing.
• Review Management Dashboards/Security MIS related to Patching, VA, PT, Baselines, and end point security controls
• Assess and Review Change Requests and Security Exceptions pertaining to regional IT services.
• Review BRDs, Solution Design, Concept Design and any other requirements from regional business units and local IT teams.
• Review and track compliance for Data Privacy and Protection controls.
• Review KPIs and KRIs for regional information security processes.
• Perform the role of 2nd line of defence oversight over Technology, Data Privacy, Business Continuity Management and Vendor Management functions.
• Perform the role of GSO SPOC for the Singapore Branch.

QUALIFICATIONS & EXPERIENCE:

• Information Security or IT Security or IS Audit background
• Must be having a minimum 10 years of Information Security Experience.
• Expert knowledge of Information Security Domains and should be certified (CISA, CISSP or CISM or any other relevant security certification)
• Experience in a similar type of role in a multinational business and dealing with regulatory authorities, governments, and industry bodies
• Experience in managing international security or regional security teams
• Ability to make good judgments regarding security risk and to prioritize resources and activity around managing those risks
• Able to conduct the role independently and with integrity
• Ability to plan, organize and prioritize tasks and projects
• Good personal communication skills capable of dealing with wide range of stakeholders, including senior management
• Fluent in English