Job Summary:

We are seeking a skilled and dedicated Information Security Analyst/Consultant to join our team. In this role, you will be responsible for advising, assisting, and implementing information security programs for our clients using frameworks such as ISO/IEC 27001:2022 and Cyber Trust Mark, in addition you will also be involve in overseeing the implementation of security solutions to assist clients in improving their information security and cyber security posture. You will work closely with clients to assess their security needs, develop robust security strategies, and ensure compliance with industry standards and are expected to manage client’s requirements and expectations during the consulting process helping them to achieve ISO/IEC 27001:2022 or Cyber Trust Mark Certification.

Key Responsibilities:

• Client Advisory and Consultation: Provide pre-sales support, expert advice and consultation to clients on information security practices and strategies.
• Framework Implementation: Assist clients in developing and implementing information security programs using frameworks like ISO/IEC 27001:2022 and Cyber Trust Mark.
• Security Assessments: Conduct comprehensive security assessments to identify vulnerabilities and recommend mitigation strategies.
• Policy Development: Develop and maintain information security policies, procedures, and guidelines for clients.
• Compliance and Auditing: Ensure client compliance with industry standards and regulatory requirements through regular audits and assessments.
• Risk Management: Identify, analyze, and manage information security risks for clients.
• Incident Response: Assist clients in developing incident response plans and provide support during security incidents.
• Training and Awareness: Conduct training sessions and workshops to raise awareness about information security best practices among client employees.
• Documentation: Prepare detailed reports and documentation for security assessments, policies, and compliance efforts.
• Monitoring Emerging Technologies and Threats: Stay up-to-date with emerging technologies and threats in AI, blockchain, and other relevant fields, and integrate this knowledge into security strategies.
• Security solutions: Understand and learn new cybersecurity solutions and assisting to implement these solutions to improve their security posture.

Qualifications:

• Education: Minimum diploma in Cyber Security, Computer Science, or related field and minimum 3 years of experience in IT or Cyber Security field.
• Certifications: Good to have certifications such as CISSP, CISM, or ISO/IEC 27001 Lead Auditor/Implementer, Certified Ethical Hacker.
• Experience: Proven experience in information security consulting, with a focus on implementing security frameworks like ISO/IEC 27001:2022, NIST, CSA Star and CIS.
• Skills: Strong analytical, problem-solving, and communication skills. Proficiency in security assessment tools and methodologies.
• Knowledge: In-depth knowledge of information security principles, standards, and best practices.
• Project management: Understanding of stakeholder management and managing project lifecycle.

What We Offer:

Opportunities for professional development and career growth. A dynamic and collaborative work environment.

Cybersecurity certification training opportunities

As a Data Analyst/Engineer, you will be responsible for creating user-friendly applications that will be able to launch Machine

Learning (ML) models and trigger automation solutions. You will need to work closely with cross-functional team of data scientists, engineers, business stakeholders and IT team to support patient care and improve health services delivery.

You may also be required to act as the Trusted-Third Party (TTP) to provide data anonymization, de-identification or re-identification services for (internal) requestors

The Challenges:

• Lead in the gathering of requirements by working and coordinating with clinicians and business stakeholders.
• Translate business requirements into system and architecture design of applications.
• Work with cross-functional teams to successfully develop and deploy automation solutions (including ML Model), ensuring timelines and quality standards are met.
• Work with the IT/data management team to design, architect and maintain the required data inflow and outflow.
• Liaise with analytics platform and clinical system custodians for model deployment and workflow integration.
• Communicate effectively with stakeholders about progress, challenges, and outcomes, translating complex technical concepts into understandable terms.
• Drive continuous improvement model performance and facilitating adoption.
• Create and maintain proper project documentations.
• Perform de-identification and encryption for department managed datasets according to data management guideline.
• Take accountability in considering compliance to policies, guidelines and regulations and take appropriate steps to mitigate the risks.
• Provide prompt feedback to supervisor in anticipation of work-related problems.
• Perform general administrative duties as required.
• Carry out any other duties or responsibilities assigned by the Supervisor and/or the Head of Department

What it Takes:

• Minimum Bachelor's degree in Computer Engineering, Software Engineering or equivalent with at least two (2) years of experience.
• Proficient in programming languages such as Python (e.g., Flask, Django), R (e.g.,Shiny), SQL.
• Experience in managing AI/ML products is highly desirable.
• Experience in SharePoint, Excel (Visual Basic), HTML, XML, Java preferred.
• Knowledge in Data anonymization, de-identification and re-identification process and techniques is preferred.
• Possess skills in statistical modeling and machine learning with experience in data storage, processing, analytics and distribution software and platforms.
• Strong communication/people skills required to interact with data scientists, engineers, business end-users and vendors to design and develop solutions.
• Ability to write clear documentation of procedures, and ability to write specifications for data models to be developed.
• Participate actively as a team member in organizational development and quality improvement.
• Be a change agent and inculcate mindset for change for hospital-wide and departmental-level.
• Able to work beyond routine work responsibilities and office hours, in the exigencies of services e.g., during infectious disease outbreaks.

Sarah

Reg No: R2198293

EA License No: 21C0501

*We regret to inform that only shortlisted candidate will be notified. Thank you.

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Details of the Division and Team:

Everyday DB observes thousands of cyber security intrusion attempts. Deutsche Bank’s COO Chief Security Office (CSO) integrates both Corporate Security (CS) and Information Security (CISO) as both teams are responsible for mitigating these risks.

The CSO team enables the business of Deutsche Bank by providing agile security operational capabilities.

With their expertise in Threat Intelligence, Data Leakage Protection, Cyber Threat Analytics, Malware Response & Research, Security Monitoring, Incident Response, Forensics and Vulnerability Management, they provide global services from key locations in Frankfurt, Jacksonville and Singapore while leveraging offshore capabilities in Pune and Bucharest.

What we will offer you:

A healthy, engaged and well-supported workforce are better equipped to do their best work and, more importantly, enjoy their lives inside and outside the workplace. That’s why we are committed to providing an environment with your development and wellbeing at its center.

You can expect:

• Flexible benefits plan including virtual doctor consultation services.
• Comprehensive leave benefits
• Gender Neutral Parental Leave
• Flexible working arrangements
• 21 days of annual paid leave, plus public holiday & Flexible Working Arrangement

Your key responsibilities:

The Deutsche Bank Chief Security Office is looking for an experienced DLP Information Security Analyst.

Adhering to internal and external policies, the role is required to work in a global team to identify and assess technical and personnel security breaches within a heterogeneous business and technical landscape. This will include working with a variety of technologies and business groups to detect, assess and document the escalation of security alerts and consequence management.

Additionally, the role will require collaboration with control functions as well as businesses to identify information that needs to be protected and controls that are best suited to address these requirements.

The work will also involve utilizing vendor solutions, bespoke control applications and supporting the development of team tasks, such as the continual assessment of preventive and detective controls.

• Continuously monitor DLP systems for alerts and act as a subject matter expert for all data leakage investigations globally across all regions where the bank has a footprint.
• Manage DLP incidents, ensuring coordinated response and timely escalations.
• Document all incidents, actions taken, and outcomes. Prepare detailed reports for management and compliance purposes.
• The incumbent also assumes responsibility for overseeing and coordinating all facets of incident management like initial evaluation, stakeholder management, technical triage, and incident resolution.
• Ensure DLP tools and technologies are maintained, optimized, and regularly evaluated through established cyber risk frameworks.
• Cooperate with control functions to understand regulatory requirements and applicable laws.
• Ability to methodically analyze complex data and requirements and provide accountable SME opinion.
• Design and implement new DLP monitoring use cases. Collaborate with business and control functions to identify sensitive information that needs to be protected.
• Propose ways to improve existing process to achieve better operational excellence via automation.

Your skills and experience:

• Minimum 3 years of working experience in either Data Loss Prevention (DLP) or Security Operations Center, with at least 1 year working in an enterprise-grade Operations Center.
• A Bachelor's degree in Information Technology, Computer Science, or a related field is required.
• Working experience with Data Loss related applications such as Symantec DLP, Digital Guardian; and SIEM tools such as Splunk, Sentinel.
• Working knowledge in IT Fundamentals such as networking, hardware/software.
• Analytical and critical thinking with an inquisitive mindset, collaboration, and conflict management with good communication skills.
• Mentor new team members and provide guidance and directions when required.
• Ability to work in fast paced environment and within tight deadlines.
• Certifications such as Symantec DLP certified specialist, CompTIA Security+, CISSP, Microsoft Information Protection, Certified Data Protection Officer etc.

Role is required to be performed on-site at One Raffles Quay office. Relevant vaccination requirements may apply.

How we’ll support you:

• Flexible working to assist you balance your personal priorities
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs
• Training and development to help you excel in your career

About us and our teams:

Deutsche Bank is the leading German bank with strong European roots and a global network. Click click here to see what we do.

Deutsche Bank & Diversity

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gAHYjij4

• Strong support to invest in information security from the company
• Regional role with an established company

About the company

Our Client is an established company. With rapid expansion plan, they are now looking for a new Information Security Assistant Manager (GRC, ISO27001) to join their team.

About the job

Reporting to the Head of Security, you will be responsible for:

• Leading initiatives to assess the adequacy and effectiveness of IT controls and policies, ensuring that business users are compliant to the IS standards (ISO 27001, PDPA and etc).
• Planning and implementation Information Security, IT Risk Management, IT Audit and IT policy to improve the overall security posture for the organization across Asia. This includes reviewing and maintaining information security polices.
• Designing IT Security framework and roadmap to ensure the availability, integrity and confidentiality of IT system. This includes setting up the best practices and governance for Risk Control Security Assessment (RCSA). Designing processes to identify, improve and optimize IT risk management policies/practices.
• Identifying potential gaps in security control to enhance early detection capability. This is through leveraging internal security data (Performing analysis of forensic evidence, log data, compromised hosts, and network traffic) and external sources (Industry portals and etc) to identify existing gaps in security control and close the gaps.
• Overseeing the development and execution of corporate security awareness and training programs to business stakeholders to prevent and limit the impact of a potential cybersecurity event
• Monitoring compliance, keep abreast of legislative and regulatory trends to address potential impact and non-compliance/gaps.

Skills and experience required
As a successful applicant, you will have at least 5 years of experience in Information Security(ISO 27001, ISO 27701 or etc) / Governance, risk management, and compliance (GRC) Proven track record of engagement with C-level business stakeholder across Asia is required.

Whats on offer
This is an excellent opportunity to join an established company with lots of opportunity to improve the security posture of the company.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gAHYjij4 (EA: 94C3609/ R1219669)

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gM7-eVHS

• Decision making for Information Security including security strategy and roadmap for APAC
• Opportunity to implement information security with strong support from business stakeholders

About the company

Our Client is a Multi billion market leader within their industry. With rapid expansion across APAC, they are now looking for a new Manager, Information Security & GRC (Governance, Risk & Compliance) to join their team

About the job

• Reporting directly to the Head of Security based out of Asia, Your responsibility involves:
• Managing a lean team of information Security Analyst across Asia
• Developing and executing information security management framework and related IT Security policies within the organizations. This includes conducting continuous assessment of IT security practices and policies to improve the security posture of the company
• Leading initiatives to assess the adequacy and effectiveness of IT controls and policies, ensuring that business users are compliant to the IS standards (ISO 27001, PDPA and etc).
• Designing and implementing an on-going Information Security training and awareness programme for different levels of personnel. This includes monitoring the level of awareness to information security risk
• Planning and implementation Information Security, IT Risk Management, IT Audit and IT policy to improve the overall security posture for the organization across Asia. This includes reviewing and maintaining information security polices.

Skills and experience required

As a successful applicant, you will have at least 8 years of experience in IT frameworks (ISO 27001, NIST or etc) / IT control / Governance, risk management, and compliance (GRC) Proven track record of managing a team is required for this role.

Candidates with experience in cloud or SAP security will be of added advantage.

Whats on offer
This is an excellent opportunity to implement information security with strong support from business stakeholders.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gM7-eVHS (EA: 94C3609/ R1219669)

Be the difference

If making a difference matters to you, then you matter to us.

We're looking for a Senior Technology Sales Support Specialist for Enablon software portfolio. You'll report to Associate Director, Solutions Consultants.

Enablon is a global leading provider of integrated software solutions for Risk & Compliance, Engineering & Operations, and EHSQ & Sustainability. Find more at https://www.wolterskluwer.com/en/solutions/enablon

This is a Permanent Full-Time position, to be based in Shenton Way, Singapore (hybrid working arrangements, working from home 2-3 days per week). #LI-Hybrid

About the Role

As a Senior Technology Sales Support Specialist you will be responsible for developing a solid understanding of the Enablon software platform functionality, in the field of Risk, Health and Safety, Control of Work, ESG, Quality and Process Safety. You will be part of the sales team building and presenting our solutions to ensure successful sales completion for existing and potential customers and responding to functional and technical requirements. In this role, you will also be capturing requirements to enhance our product Road Map and fuel product innovation.

• Consult and discover with existing and potential clients to understand their specific needs, challenges and industry issues that they face before providing specific solutions using the Enablon platform.
• Build a solution-oriented presentation based your expertise but as well on analysis and understanding of the customer problematic and needs/ build a technical solution based on the company portfolio.
• Work with EAM to prepare the presentation deck and deliver demonstration presentations to customers, both remotely and on site for, often, large audiences focused on areas of interest and solving challenges raised in discovery sessions
• Deliver Proofs of Concepts by applying solution functionalities using client’s sample data
• Preparing proposals and answer questions and requirements found in Request for Information/Proposal (RFI/RFP) documents tailoring responses based on information uncovered during discovery
• Prepare personalized demonstration platforms with relevant information for each existing/prospective customer
• Prepare individualized scoping document mapping prospective customer needs to Enablon products
• Serve as technical and functional expert for solutions
• Bridge the gap between our products and our customers’ needs (Product SME)
• Gather and document existing/prospective customer needs/gaps/new features for potential product enhancements
• Work closely/ regularly with professional services team to analyse requirements and determine product implementation strategies
• Attend and represent Enablon at various industry events such as conferences
• Continually learn new versions and features of the software as the product grows and enhances.

About You

• Bachelor’s degree from an accredited university OR minimum of three years as a Pre-Sales Consultant in a Software/SaaS firm
• Expertise in EHSQ, ESG or GRC domain topics.
• Knowledge of Process Safety would be beneficial.
• Fluent in English.
• Previous experience in a Pre-Sales role at a Software/SaaS firm delivering Demonstrations, POCs and participating in the sales cycle is a plus, along with any experience in Corporate Visions’ methodologies.
• Open to candidates that are interested in a Pre-Sales role with client facing Professional Services experience

About Us

Wolters Kluwer reported 2023 annual revenues of €5.58 billion. The group serves customers in over 180 countries, maintains operations in over 40 countries, and employs approximately 22,000 people worldwide. The company is headquartered in Alphen aan den Rijn, the Netherlands. Wolters Kluwer shares are listed on Euronext Amsterdam (WKL) and are included in the AEX and Euronext 100 indices.

For more information about our solutions and organization, visit www.wolterskluwer.com.

Equal Opportunity Employer

Wolters Kluwer and all of its subsidiaries, divisions and customer/business units is an Equal Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or any other protected status.

The Information Technology Services is dedicated to creating and delivering value to our business by leveraging on IT technology. The team is responsible for delivering customer-focused solutions and high-quality IT services internally to enable our business.

We invite a highly motivated & dynamic professional to join our ITS team as a Manager, Technology Governance, Risk and Compliance.

Your responsibilities will include:

Governance and Audits

• Establish and maintain a robust GRC framework, reinforcing ITS information security controls and service management processes to optimise IT service quality and compliance with organisational and user requirements.
• Develop and execute comprehensive information security risk assessments, ensuring alignment with regulatory requirements such as SOX ITGC, ISO 27001, MAS OSPAR, ACRA, and ISQM1.
• Actively contribute to Enterprise Risk Management efforts, participate in Information Protection Control Reviews (IPCR), and support IT-related personal data protection activities, collaborating with pertinent departments to formulate necessary policies and action plans.
• Monitor adherence to the organisation's security policies, standards, and procedures among ITS staff, contractors, and other third parties, and enforce corrective measures as needed.
• Identify, assess, and document non-conformities with KPMG policies and relevant standards, ensuring timely remediation and compliance with organisational security policies and regulatory mandates.
• Supervise and mentor ITS personnel in GRC activities and ITS service management process mapping, providing necessary training and guidance.

IT Service Management (SMS) and Information Security Management System (ISMS) Maturity

• Lead initiatives to enhance IT Service Management System (SMS) and Information Security Management System (ISMS) maturity within the Information Technology Services (ITS) department, focusing on process optimisation and alignment with ITS strategic objectives.
• Create and implement quality assurance protocols, performance metrics, and testing procedures to evaluate the maturity of information system processing.
• Conduct periodic evaluations of ITS internal processes, performance indicators, and metrics to ensure continuous improvement.
• Gather and analyse data to pinpoint improvement opportunities within ITS operations and infrastructure.
• Undertake proactive and preventive maintenance for ITS service management processes and information systems.

⠀

Requirements:

• Bachelor’s or Master’s degree in Business, Finance, Accounting, Risk Management, Law, or related fields.
• A minimum of 6 years of relevant work experience in governance, risk management, internal controls, external audit, internal audit, or process improvement.
• Experience in Big 4 firms, Fintech, or the Financial Services industry is a plus.
• Proven leadership and people management skills.
• Strong confidence in interacting with senior stakeholders.
• Demonstrated experience in leading and managing teams.
• Strong business acumen and commercial awareness.
• Conceptual skills in qualitative and quantitative risk management methods.
• Familiarity with risk management and internal control frameworks (e.g., COSO, ISO, COBIT).
• Knowledge of various functional areas, including Finance, Procurement, HR/Payroll, Operations, Logistics, IT, Legal, and Risk Management.
• Strong communication, presentation, and project management skills.
• Ability to build effective relationships and work collaboratively with internal departments, external service providers, and global teams.
• Capability to work independently, take initiative, and collaborate effectively.
• Previous experience with industry standards and best practices such as ISO/IEC 27001, SOC 2, and NIST.
• Knowledge in Business Process Management projects, ITSM (ITIL), ITSMS processes, and working experience with ServiceNow ITSM.
• ITIL V4 certification is preferred.
  

Only shortlisted candidates will be contacted by KPMG Talent Acquisition team, personal data collected will be used for recruitment purposes only.

At KPMG in Singapore we are committed to creating a diverse and inclusive workplace. We believe that diversity of thought, background and experience strengthens relationships and delivers meaningful benefits to our people, our clients and communities. As an equal opportunity employer, all qualified applicants will receive consideration for employment regardless of age, race, gender identity or expression, colour, marital status, religion, sexual orientation, disability, or other non-merit factors. We celebrate the different talents that our people bring and support every staff member in their journey to achieve personal and professional growth. One of the ways we do this is through Take Charge: Flexi-work, our flexible working framework which enables agile and innovative teams to help deliver our business goals.

Key Responsibilities:

• Conduct comprehensive assessments of current production methodologies to identify opportunities for technological advancements that improve efficiency, safety, and product quality.
• Identify, evaluate, and integrate cutting-edge technologies to enhance operational efficiency, reduce waste, and ensure product quality. Present updates and results to stakeholders to showcase innovation progress.
• Plan, execute, and oversee engineering projects focused on innovating production processes through advanced technologies, ensuring timely and budget-conscious implementation.
• Implement rigorous testing protocols and quality control measures that leverage technology to uphold product safety and compliance with industry standards.
• Analyze existing processes to uncover inefficiencies, recommending innovative, cost-effective solutions that maintain quality and safety. Prepare and track budget estimates for technology upgrades and process improvements.
• Maintain detailed project records that capture design specifications, testing results, and performance evaluations, facilitating knowledge transfer and transparency in innovation efforts.
• Provide regular updates to stakeholders, emphasizing technological advancements, challenges, and overall project performance with a focus on innovation outcomes.

Job Requirements:

• Degree in Chemistry, Mechanical Engineering, or equivalent
• Minimum of 2 years in the packaging industry;
• Specialization in product development and process improvement with a strong emphasis on innovative packaging solutions.
• Proficient in Microsoft Office (Excel, Word, PowerPoint).
• Strong communication, problem-solving, analytical, planning, time-management, and multitasking skills.
• Knowledge of Project Management, Solidworks, and SAP would be advantageous.
• Excel in dynamic environments, demonstrating flexibility in response to technological changes and challenges.
• Anticipate and meet the evolving expectations of internal and external customers, striving for service excellence.
• Uphold high ethical standards, maintaining professionalism and reliability
• Collaborate effectively within teams to drive innovation and achieve business objectives.
• Monitor and track progress on innovative initiatives to ensure efficient and effective completion.

Qualification training shall be provided as necessary to attain competency to deliver job responsibilities.

Main Job Responsibilities:

• Conduct 3rd party audits to assess organizations' Information Security Management System and related Statement of Applicability (SoA) for conformity with ISO/IEC 27001 and in strict compliance with GIC's Code of Ethics and established audit procedures
• Conduct other related Information Security, Cybersecurity, Data Protection audits – ISO/IEC 27701, ISO/IEC 27017, ISO/IEC 27018, CSA Cyber Essentials mark, CSA Cyber Trust mark, IMDA Data Protection Trust mark, GDPR Compliance audits, Second Party IT audits
• Conduct Information Security, Cybersecurity, Data Protection trainings/workshops/seminars
• Manage the entire audit process from planning, conducting, reporting, and following up on the assigned audits.
• Support in technical review of audit reports and technical advice to Sales Team and Certification Team as and when required.

Job Qualifications / Requirements:

• Possess a professional degree in Computer Science/Information Security/Cybersecurity or related fields to Information Technology
• At least two years are in a role or function relating to information security/Cybersecurity
• Successfully completed a Lead Auditor Course in ISO/IEC 2700 Information Security Management System (ISMS)
• Having completed training courses in Singapore PDPA Fundamentals/Practitioner and holding industry certifications like CISA, CIPM, CISSP will be advantageous

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

• To analyse user requirements and design, develop, implement and maintain computer applications to support and assist users to meet their business objectives more effectively and efficiently.
• Develop, support and enhance the Data Download Centre (including Engineering Portal) and iSCM websites.
• Develop, support and enhance Excel productivity enhancement tools (VBA macros).
• Support end-users in usage of Plasma and ACCPAC and help to resolve any operational issues, including working together with vendor (Databit) if necessary.
• Develop and enhance data extraction and transformation mechanisms on source systems (e.g. Plasma, YEOS, NYQT, Oracle BI, SAP RFC, PTS etc.) and store the results into Plasma Info Server Monitor the space consumption of Plasma Info so that Server database so that potential problems (e.g. disproportionate consumption of disk space by a particular table, depletion of data tablespace, excessive consumption of temp tablespace) are detected and resolved early to avoid unscheduled database downtime.
• Perform ad-hoc retrieval of order/production/sales data to support incident investigation, reporting or other requests.
• Support Migration Activities of Existing Plasma Info Server to SAP.
• Support & ensure successful implementation of Company-wide Automation (ERP) Projects.

Requirements:

• Degree in Info Systems/Computer Science or its equivalent
• Prefer 2-3 years relevant experience in Manufacturing Industry.
• Entry level are welcome to appy as training will be provided.

Knowledge:

SQL; Oracle PL/SQL; MS SQL Server Transact-SQL

Object-oriented analysis and design

ASP.NET 4.5.1; C/C++/C#; XML

JavaScript; JQuery; CSS; HTML

Excel VBA; VBScript; PowerShell

PHP, VS.Net, MSOffice

Interested Applicants, kindly email your detailed resume to [email protected]

Tempserv Pte Ltd

License No: 06C3745

Attention: Audris Teo / EA Personnel No: R1102063

Job Description

The successful candidate will be part of the Cloud & Platforms team.

He/She will be responsible for the following:

• Deep exposure to on-premises Linux and/or Windows administration on VMWare including SAN and storage solutions.

• Perform system administration and troubleshooting activities (including outside normal business hours) in accordance with company policies and procedures.

• Create and maintain documentation, and processes.

• Provide a focus on automation and Infrastructure-as-Code (IaC) to improve agility using tools such as Ansible, Python, and Terraform.

• Support audit and infrastructure/network security scans, disaster recovery and security related drills.

• Explore, learn and deploy new technologies that will help the company to reduce cost or improve operational efficiencies.

Requirements

• Possess a degree in Information Technology or related fields.

• Minimum of 5 years of IT experience with at least 3 years of hands-on experience in a similar role.

• Experience managing both Unix (Linux and/or AIX) and Windows servers. Expert level (e.g. certified) in one at least one: covering installation, configuration, security, networking, storage, patching, hardening etc.

• Experience working in VMWare environments.

• Practical experience administering SAN and related storage technologies.

• Experience with Python/Ansible scripting skills for provisioning and automating dynamic infrastructure.

• Demonstrate strong knowledge in infrastructure areas such as virtual server technologies, storage, networking, internet protocols, operating systems, scripting & monitoring tools and IT Security.

• Experience in Agile methodologies, DevOps, CI/CD and related tools preferred.

• Strong analytical, project management, communications, and interpersonal skills.

Responsibilities

• Manage IT Projects end-to-end throughout the entire lifecycle ensuring that the IT Project is fit for purpose, delivered at its best and retains customer satisfaction.
• Manage projects with full responsibility for project results in the context of delivery to cost, quality, schedule, and stakeholder satisfaction.
• Create project schedules and drive projects in cooperation with stakeholders.
• Complete project within the defined requirements (eg, regarding targets for project cost, time, quality, functionality and customer satisfaction).
• Ensure business success and satisfaction of the customer by professional stakeholder management.
• Ensure timely decisions about open issues, escalating if necessary.
• Ensure adherence to architecture, design, quality guidelines as well as product security and product safety topics.
• Manage and ensure compliance to standards, working laws, rules and regulations, intellectual property rights.
• Perform risk and opportunity management.
• Perform budget and resource planning as well as generation of project agreement for project.
• Ensure appropriate Project documentation.
• Selection of appropriate project management approaches (Agile and/or Waterfall) based on customer and project requirements.
• Development of detailed project plans to track progress and use appropriate verification techniques to handle changes in technical project scope.
• Measure project performance using appropriate systems, tools and techniques and maintain com-prehensive project documentation.

Performing technical risk management to minimize project risks.

Requirements:

• 10+ years of experience in the software industry.
• Qualification: BE / B.Tech / MCA / ME / M.Tech/MBA.
• Proven experience in leading the technical team in software development environment.
• Experience in managing internal and external partners.
• Well versed with project planning, execution, monitoring, and controlling.
• Expertise as a Project Manager in a product development environment.
• Proven delivery record of multiple projects.
• Experience of managing multiple projects simultaneously.
• Hold relevant Project Management accreditations (APM,PMI, Prince2).
• Experience with MS Project.
• Excellent communication and presentation skills.
• Experience of working in both Classical and Agile (Scrum, SAFe) development environments desirable.
• Understanding of business strategy and emerging technology.

Cognita Schools are committed to safeguarding and promoting the welfare of children and young people and expects all staff, volunteers and other third parties to share this commitment. Safer recruitment practice and pre-employment background checks will be undertaken before any appointment is confirmed.

An exciting opportunity for a Secondary Design Technology Teacher has opened in AIS. If you are someone who is driven in making a positive difference and with passion for growth and development, this role is meant for you!

Position Requirements:

• IBDP/IGCSE and/or HSC experience preferred, but not essential
• Experience in an International School environment would be a distinct advantage
• Excellent communication skills, multi-tasking and time management
• Ability to work as a part of a team and an interest in participating in the wider school community

Qualifications:

• A minimum four year recognised teaching qualification including a Bachelor’s Degree and Postgraduate Teaching Diploma/University Qualification or a Bachelor of Education
• A minimum of 3 years Full Time teaching experience in a recognised educational institution ideal, however graduates may be considered

Further information about this position is available in the job description found in the AIS website at https://www.ais.com.sg/work-for-us-positions-vacant/

Applicants are required to read the job description for the role prior to applying and submit a cover letter, curriculum vitae and a duly completed copy of the School's Job Application Form (downloadable from the school's website) to the email address: [email protected] by 17 December 2024. Kindly ensure that the position title is clearly specified in the job application form.

Only applications submitted using the school's job application form will be considered.

Cognita Schools are committed to safeguarding and promoting the welfare of children and young people and expects all staff, volunteers and other third parties to share this commitment. Safer recruitment practice and pre-employment background checks will be undertaken before any appointment is confirmed.

An exciting opportunity for a Secondary Design Technology Teacher has opened in AIS. If you are someone who is driven in making a positive difference and with passion for growth and development, this role is meant for you!

Position Requirements:

• IBDP/IGCSE and/or HSC experience preferred, but not essential
• Experience in an International School environment would be a distinct advantage
• Excellent communication skills, multi-tasking and time management
• Ability to work as a part of a team and an interest in participating in the wider school community

Qualifications:

• A minimum four year recognised teaching qualification including a Bachelor’s Degree and Postgraduate Teaching Diploma/University Qualification or a Bachelor of Education
• A minimum of 3 years Full Time teaching experience in a recognised educational institution ideal, however graduates may be considered

Further information about this position is available in the job description found in the AIS website at https://www.ais.com.sg/work-for-us-positions-vacant/

Applicants are required to read the job description for the role prior to applying and submit a cover letter, curriculum vitae and a duly completed copy of the School's Job Application Form (downloadable from the school's website) to the email address: [email protected] by 17 December 2024. Kindly ensure that the position title is clearly specified in the job application form.

Only applications submitted using the school's job application form will be considered.

As a Technology Consulting professional, you'll help businesses realise the value they can gain from their IT investments — supporting strategy and being a key growth driver. As part of a high-performing team, you'll deliver exceptional client service — providing advice on how technology enablement, digital transformation and enterprise intelligence contribute to performance improvement, as well as how IT can act as multiplying effect during major program transformations.

As organisations look to leverage the advantage IT offers, we'll work with you to develop the consultancy and analytical skills that you'll need in today's environment. Working on projects that cross borders and sectors, the experiences you gain here will be more valuable than anywhere else. So whenever you join, however long you stay, the exceptional EY experience lasts a lifetime.

About the opportunity

We're looking for Managers for Technology Consulting to join our team with experience in one or more of the following:

· IT Strategy / Planning

· IT Operating Model Assessment

· Design Thinking

· Agile Methodology

· Enterprise Architecture

Key Responsibilities:

· Ability to carry out As-Is assessment of IT, determine gaps, form hypothesis, design To-Be and develop IT Roadmap.

· Effectively manage performance improvement projects, develop analysis, run and engage client teams and stakeholders, and deliver high-quality work products.

· Process strong project delivery capabilities and familiar with project management and Agile methodology. Effectively manage both onshore and offshore resources.

· Cultivate and manage business development opportunities. Understand EY and its service lines and actively assess/present ways to serve clients. Develop and maintain long-term client relationships and networks. Develop relationships with team members across all EY practices to serve client needs.

· Demonstrate in-depth technical/functional capabilities and professional knowledge. Demonstrate ability to assimilate new knowledge. Possess good business acumen. Remain current on new developments in consulting services capabilities.

· Establish relationships with client personnel at appropriate levels. Consistently deliver quality client services. Monitor progress, manage risk and ensure key stakeholders are kept informed about progress and expected outcomes. Stay abreast of current business and industry trends relevant to the client's business.

· Provide constructive on-the-job feedback/coaching to team members. Foster an innovative and inclusive team-oriented work environment. Play an active role in counseling and mentoring junior consultants within the organization.

To qualify for the role, you must have

· A bachelor's degree in computer science, engineering, accounting, finance or a related field.

· A minimum of 10 years of experience in consultancy, professional services or project management.

· Demonstrated ability to build trust and manage high level, executive relationships.

· Demonstrated ability to manage and supervise teams through all phases of the project lifecycle, including requirements definition, process and prose creation, business re-engineering, and application mapping.

Ideally, you'll also have

· Strong written and verbal communication, interpersonal, presentation, client service and business writing and consulting skills, coupled with a strong interest in further designing, developing and integrating business operations and technology

· Ability to research client inquiries and emerging issues

· A dedication to teamwork and integrity within a professional environment

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.

What we offer

· Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.

· Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.

· Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.

· Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

Responsibilities

• Be the APAC marketing owner defining a short- and long-term GTM strategy for Work Dynamics Technology solutions, owning and executing optimal marketing programs and delivering against this strategy;
• Define geo-specific marketing plans that support the regional sales strategy; developing and implementing new and existing customer pipeline creation and acceleration sales plays and programs jointly with sales, field marketing, partners, and subject-matter experts;
• Strategize, build, and execute integrated field campaigns that involve digital marketing, email marketing, direct mail marketing, and other channels, as required, with a goal of increasing brand awareness locally/regionally, and driving leads and MQLs for tech and sustainability offerings that improve the value and performance of our accounts/client’s real estate;
• Manage account-based marketing activities, in partnership with sales including but not limited to, identifying target accounts, developing strategy, executing campaigns, accelerating existing sales opportunities, and deepen our existing customer relationships.
• Research, choose, design, and manage live events to be included as tactics in the overall marketing mix, and ensure there is a cohesive pre-event, at-event and post-event nurture strategy to increase engagement, response rates, leads to the business. Forecast, measure, analyze and report on impact of in-person/virtual events & programs.
• Help APAC technology sellers and business development teams with content conceptualisation and creation for email nurture campaigns, talk tracks, webinars, live events etc. Interlock to create consistent experience across marketing and outbound prospecting campaigns
• Produce and manage a regional/field marketing calendar that includes regional/local activations, paid/earned media, and support around regional/national campaigns (in-reach/outreach).
• Collaborate with regional/global marketing COEs to develop metrics to measure the success of marketing programs. This includes benchmarked ROI metrics by working with the sales and demand generation teams, managing, and analysing campaign data in Salesforce.
• Identify opportunities to improve marketing and program effectiveness through better audience.
• Manage regional/field marketing budget including, but not limited to local partnerships, sponsorships, brand ambassador labor, media spend etc. working closely with field marketing teams.
• Complete quarterly budget reviews and ROI analysis; pivot strategy to align with findings. Segmentation, account targeting, messaging, marketing techniques, PR, and processes.
• Communicate and educate the sales team regarding new and planned marketing activities, including global, regional, and local programs.
• Providing intel and market intelligence from different markets/industries in terms of audience pain points/trends. Conduct relevant market scans/industry sizing prior to running campaigns/BDR out reaches.
• Interface with sales to determine sales enablement needs, and work with sales enablement team to develop tools, training, and content.
• Evaluate, select, and work with vendors to help translate goals into deliverables and results.

Qualifications

• Singapore for role base.
• English fluency is essential.
• BS in marketing or business, MBA preferred.
• 8+ years of B2B/SaaS product marketing experience
• 3+ years of B2B field marketing leadership experience
• Experience working in commercial real estate industry is a plus.
• Proven experience working with sales teams to formulate and operationalise programs that drive sales.
• Excellent project and time management skills
• Ability to demonstrate track record of success in all key areas of responsibility.
• Highly motivated individual who thrives in a fast-paced team environment and is adaptable to changing market and organisational requirements.
• Experience building, executing, and scaling cross-functional marketing programs.

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

The Opportunity

In Technology Risk, the way we contribute to building a better working world, our purpose, is to translate uncertainty into confidence so that performance is accelerated. We do this for our clients, our people and ourselves. Confidence accelerates performance. Simply put, when people work better, business works better. When business works better, the world works better.

We are part of FSO Consulting providing technology risks solutions to our clients through delivering services on the design, implementation, rationalization of controls and remediation for the purpose of mitigating and preventing risks in our client’s applications, infrastructure and data. A transversal area of specialization in the area of information technology, information security and third-party risk management.

Using our proprietary methodology, our professionals help clients conduct internal controls diagnostics, perform internal controls transformations and risk remediation, and deliver internal controls testing outsourcing or co-sourcing services.

Your Key Responsibilities

As a Senior Consultant in the Technology Risk team, you will be expected to deliver assignments of high-level client satisfaction, work independently, discuss and articulate your deliverables with our clients and within the team, lead your team members to succeed in their assigned tasks including providing on-the-job coaching, share knowledge and be able to draw on subject matter specialist accordingly. You will contribute to help our clients enhance their IT risk strategy, embed an enterprise approach to risk management, optimize risk management functions and improve controls and processes.

Skills and Attributes for Success

• Practical experience and understanding of information technology risks, processes and controls.
• Possess strong interpersonal, communication and teaming skills.
• Leverage technology to continually learn, improve service delivery and maintain our leading-edge best practices.
• Strong presentation skills and proficiency in the use of PowerPoint, Word and Excel.

To Qualify for the role, you must have

• A recognized university degree in accounting, business, information technology, engineering or other relevant discipline.
• Minimally 2 years of relevant experience in the Big 4 Accounting firm, consulting or industry experience in IT risks including information technology and information security working on areas such as IT audit, risks, regulatory compliance and/or IT-related implementation. Candidates with lesser experience will be considered at Associate Level.
• Experienced in Data Visualisation e.g. Tableau, Cloud Security
• Have at least an understanding of MAS regulations around IT risk management such as Technology Risk Management, Outsourcing and PDPA.

Ideally, you’ll also have

Candidates who possess professional certifications such as Certified Public Accountant (CPA), Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA) and Certified Information Systems Security Professional (CISSP) are highly encouraged to apply.

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.

What we offer

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

Apply now.

Benefits:

• Basic up $5500
• Monday - Friday, Office Hour
• MNC
• AWS + Bonus
• Central

Job Scope:

• Manage the implementation, integration, maintenance, and optimization of MarTech platforms, including CRM systems, automation tools, and analytics software.
• Analyze marketing and customer data to derive actionable insights and enhance campaign performance.
• Leverage workflow automation tools such as Zapier, AppScript, and RPA to streamline marketing processes and boost efficiency.
• Collaborate with cross-functional teams to develop hyper-personalized campaigns and deliver cutting-edge digital solutions.
• Optimize content and user experiences across owned channels, including eDMs, social media platforms, and websites, to support digital engagement strategies.
• Stay abreast of MarTech trends and experiment with innovative tools to enhance marketing outcomes.

Job Requirement:

• Diploma/Degree in IT or related field
• Experience in analytics role

Please submit your updated resume in MS word format by using the APPLY NOW BUTTON.

We regret that only shortlisted candidates will be notified.

Staffking Pte Ltd (20C0358) | Cheang Wei Yang (R21102313)

Job Description

The successful candidate will join the Business Technology Department in SIA Finance Division. You will be required to work with Finance business users, IT Division and IT vendors to plan and implement Finance digital initiatives and to provide effective operational support for implemented Finance systems.

Key Responsibilities

1) Drive business value through system capabilities and enhancements by working with IT Division and Finance business users

2) Collaborate with functional units to identify, define, and document business needs and objectives, current operational procedures, problems, and user requirements for enhancements

3) Facilitate business process review and formulate use case with business users.

4) Manage the end-to-end delivery for new projects and application enhancements, where key activities include

- Collaborating with internal and external stakeholders for smooth and timely delivery of projects and achieve set business KPIs

- Leading requirements gathering and technical solutioning with users and technical teams

- Reviewing feasibility and sustainability of proposed solutions

- Executing User Acceptance Testing (UAT), including pro-active follow ups on bug fixesto ensure that all test scenarios are comprehensively tested and all business requirements are met

- Identifying and mitigating project and business risks by collaborating with all impacted stakeholders.

- Strategising and leading change management through regular communications and coordination

- Managing change requests and conducting post-implementation review

5) Provide effective operational support for Finance systems. Activities include:

- Assisting users on system usage, authorization and administration

- Managing resolution of reported incidents (e.g. bugs) based on Service Level Agreement terms

- Ensuring regularly periodic jobs are completed in accordance with agreed timeline

- Partnering with businee units (BUs) to identify areas of improvements in the work processes and system flow/functions

- Assisting with the audit of IT applications

Requirements

• Bachelor Degree in Finance, Computer Science, Business IT, or IT-related discipline
• 2 years of working experience in Finance or similar role preferred
• Fresh graduates with strong learning capabilities and right attitude will be considered
• Experience in Agile methodology is a plus
• Experience in SAP FICO, Sharepoint and Tableau will be an advantage
• Self-starter and result oriented with strong numerical, analytical, critical thinking and problem-solving skills
• Strong inter-personal skills and be able to communicate well with both technical team and business users
• Proven project management skills.
• Ability to manage own time and priority accordingly
• Meticulous and good attention to details

Team

ServiceNow is seeking a Solution Consulting Manager to build a high-performing team of pre-sales Solution Consultants and Architects in our IT workflow specialist team, which covers Strategic Portfolio Management, IT Asset Management, Security Operations, and Governance Risk & Compliance portfolio of products. This is your chance to get in front of developing your team in a fast-paced environment. The Solution Consulting Manager is responsible for individual Solution Consulting career planning and development, team development and hiring according to the dynamic needs of the sales organisation, and other administrative duties relative to team management.

Role

The Solution Consulting Manager is expected to maintain strong relationships with counterparts in Sales, Services, Support, Marketing, and other organisations to ensure alignment of organisational activities and directions. These responsibilities directly support the Solution Consulting Manager's primary goal: developing and maintaining a team that consistently secures the technical win in every deal they support for the sales teams.

The role will report to the APAC Technology Workflows Solution Consulting Senior Director.

What you get to do in this role:

• Understand the needs of the Asia, India & Korea sales organisation and develop plans to ensure outstanding support. Focus on strategic sales opportunities
• Represent the Technology Workflows business at company and industry events via collaboration with our marketing and communication functions
• Create solutions that show the broader value of IT Workflows, especially in conjunction with strategic partners
• Develop team members according to the demands of the business and according to their individual professional goals
• Develop and maintain a recruiting pipeline of potential Solution Consulting candidates to meet future business demands
• Work with our sales directors to prioritise regional Solution Consulting efforts
• Assign resources to sales opportunities and consistently evaluate progress against goals
• Assign resources as required to marketing and other efforts to support demand generation
• Develop and deploy team training curriculums to meet the changing demands of the sales organisation
• Evaluate team members regularly through analysis of direct observation, peer feedback and sales feedback
• Ensure proper alignment of resources and effective utilization of skill sets within the assigned region
• Manage day-to-day activities such as resource scheduling conflicts, expense review and approval, activity reporting etc.

The Senior Director IT is responsible for establishing and maintaining the information security program to ensure that information assets and associated technology, applications, systems, infrastructure and processes are adequately protected in the digital ecosystem in which we operate. The individual is responsible for identifying, evaluating and reporting on legal and regulatory, compliance, IT and cybersecurity risk to information assets, while supporting and advancing business objectives.

Description

Establish Governance and Build Knowledge

• Facilitate an information security governance structure through the implementation of a hierarchical governance program, including the formation of an information security steering committee or advisory board.
• Provide regular reporting on the current status of the information security program to enterprise risk teams and senior business leaders
• Work with the vendor management office to ensure that information security requirements are included in contracts by liaising with vendor management and procurement organizations.
• Create and manage a targeted information security awareness training program for all employees, contractors and approved system users, and establish metrics to measure the effectiveness of this security training program for the different audiences.
• Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems and services, including privacy, risk management, compliance and business continuity management.
• Provide clear risk mitigating directives for projects with components in IT, including the mandatory application of controls.

Develop the Frameworks

• Develop and enhance an up-to-date information security management framework based on one of the following: International Organization for Standardization (ISO) 2700X, ITIL, ENISA, ISA-62443, COBIT/Risk IT and National Institute of Standards and Technology (NIST) Cybersecurity Framework.
• Create and manage a unified and flexible control framework to integrate and normalize the wide variety and ever-changing requirements resulting from global laws, standards and regulations.
• Develop and maintain a document framework of continuously up-to-date information security policies, standards and guidelines. Oversee the approval and publication of these information security policies and practices.
• Create a framework for roles and responsibilities with regard to information ownership, classification, accountability and protection of information assets.
• Facilitate a metrics and reporting framework to measure the efficiency and effectiveness of the program, facilitate appropriate resource allocation, and increase the maturity of the information security, and review it with stakeholders at the executive and board levels.

Architecture/Engineering Support

• Work with IT staff to ensure that security is factored into the evaluation, selection, installation and configuration of hardware, applications and software.
• Recommend and coordinate the implementation of technical controls to support and enforce defined security policies.
• Research, evaluate, design, test, recommend or plan the implementation of new or updated information security hardware or software, and analyze its impact on the existing environment; provide technical and managerial expertise for the administration of security tools.
• Work with the enterprise architecture team to ensure that there is a convergence of business, technical and security requirements; liaise with IT management to align existing technical installed base and skills with future architectural requirements.

Operational Execution

• Coordinate, measure and report on the technical aspects of security management.
• Manage outsourced vendors that provide information security functions for compliance with contracted service-level agreements.
• Manage and coordinate operational components of incident management, including detection, response and reporting.
• Maintain a knowledgebase comprising a technical reference library, security advisories and alerts, information on security trends and practices, and laws and regulations.
• Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend treatment plans and communicate information about residual risk.
• Manage security projects and provide expert guidance on security matters for other IT projects.
• Assist and guide the disaster recovery planning team in the selection of recovery strategies and the development, testing and maintenance of disaster recovery plans.
• Ensure audit trails, system logs and other monitoring data sources are reviewed periodically and are in compliance with policies and audit requirements.
• Design, coordinate and oversee security testing procedures to verify the security of systems, networks and applications, and manage the remediation of identified risks.

Qualifications

• Bachelor’s Degree in Engineering, Computer Science, Information Systems, or related discipline required.
• Master’s Degree in a related field is preferred.
• Professional security management certification is desirable, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials

Experiences

• A minimum of ten years of IT experience, with seven years in an information security role and at least five years in a managerial capacity is required.
• Experience working with legal, audit and compliance staff is preferred.
• Experience developing and maintaining policies, procedures, standards and guidelines is required.
• Familiarity with applicable legal and regulatory requirements, including, but not limited to, the U.S. Sarbanes-Oxley Act, the U.S. Health Insurance Portability and Accountability Act (HIPAA), the European Union Privacy Directive, and the Japanese Financial Instruments and Exchange Law ("J-SOX").

Skill Sets

• Excellent analytical skills, the ability to manage multiple projects under strict timelines, as well as the ability to work well in a demanding, dynamic environment and meet overall objectives
• Project management skills: financial/budget management, scheduling and resource management
• Ability to lead and motivate the information security team to achieve tactical and strategic goals, even when only "dotted line" reporting lines exist
• A master of influencing entities and decisions in situations where no formal reporting structures exist, but achieving the desirable outcome is vital
• Excellent communication, interpersonal and collaborative skills. Experience working with a multi-continent technical team preferred
• High degree of initiative, dependability and ability to work with little supervision while being resilient to change

Technical Competencies

• Experience with common information security management frameworks, such as International Standards Organization (ISO) 2700x, the IT Infrastructure Library (ITIL) and Control Objectives for Information and Related Technology (COBIT) frameworks
• An understanding of operating system internals and network protocols.
• Familiarity with the principles of cryptography and cryptanalysis.
• Experience in application technology security testing (white box, black box and code review).
• Experience in system technology security testing (vulnerability scanning and penetration testing).