Principal Security Management Engineer

Job Description:

1. Developing and implementing security policies, procedures, and guidelines to ensure compliance with industry standards and regulations.

2. Leading the design and implementation of security controls, including firewalls, intrusion detection systems, endpoint protection, and security information and event management (SIEM) systems.

3. Conducting regular security assessments and vulnerability scans to identify potential risks and vulnerabilities.

4. Responding to and investigating security incidents and breaches, and implementing measures to prevent future occurrences.

5. Managing and monitoring security systems and tools to detect and respond to security events and threats.

6. Collaborating with other IT teams to ensure security best practices are followed during system and software development.

7. Providing guidance and support to junior security operations engineers and other team members.

8. Staying up-to-date with the latest security trends, threats, and technologies, and making recommendations for improvement

9. Participating in incident response and disaster recovery planning and testing

Collaborating with external vendors and partners to ensure the security of third-party systems and services.

Requirements:

· Bachelor's degree in Computer Science, Information Systems, or related field.

· Strong technical knowledge and experience in security operations, network and systems administration, and incident response

· Experience with programming languages (Rust is a plus), Embedded Systems, Hardware peripherals.

· Familiarity with Operating System Security (e.g. Linux, Windows).

· Excellent problem-solving and analytical skills.

· 6+ years of professional experience in hardware and firmware security.

· Chinese speaking to liaise with Chinese counterparts

Interested applicants, Kindly email your updated resume to yvonne.chai@quesscorp.sg and we regret that only shortlisted candidates will be notified

Yvonne Chai Cheng Man

(EA License: 23115356 | UEN: 201715683K)

Disclaimer: The company is committed to ensuring the privacy and security of your information. By submitting this form, you consent to the collection, processing, and retention of the information you provide. The data collected (which may include your contact details, educational background, work experience and skills) will be used solely for the purpose of evaluating your qualifications for the position you're applying for. Your data will be stored securely and retained for the duration necessary to fulfill our hiring process. If you are not selected for the position, your data will be kept on file for a limited period in case future opportunities arise. You have the right to access, correct, or delete your data at any time by contacting us at Quess Singapore | A Leading Staffing Services Provider in Singapore (quesscorp.sg)

Job Purpose

A Red Team operator is a member of the Information Security Assurance group driving security improvement through continuous assessment of our threat landscape. The Red Team is a globally dispersed “testing” team.

Team Duties

• Red Team Core (70%): primarily, as a Red Team operator, you will work closely with team members to deliver sophisticated engagements focusing on high priority, global security objectives. This will take the form of engagements that deliver chained exploits and a full kill-chain of specific recommendations, to demonstrate and explain security gaps in the context of other vulnerabilities. These engagements may include working with externally contracted red teams and exploring Artificial Intelligence based applications such as Large Language Models (LLMs).
• Threat Automation and Detection development (15%): you will be developing and recreating atomic red team tests (“TTPs”) not developed as part of Red Team Core duties. These will be used to improve our Blue Team detection and response capabilities.
• Infrastructure support and development (15%): you will run, support and maintain our red team-owned tools and infrastructure alongside other team members.

Responsibilities
Seniority is determined by experience and demonstration of exceptional competencies including:

• Documenting and effectively publishing technology guidance and repeatable processes
• Mentoring peers in groups and individually
• Improving processes and incorporating advanced methodologies into engagements
• Taking initiative to learn business goals, liaise with other departments, and identify ways to increase productivity in other ICE groups and offices

Knowledge and Experience

• University degree in Mathematics, Computer Science, Engineering, or related discipline
• 4 years or more direct penetration testing and red teaming experience.
• Scripting - python, bash, Go etc, software engineering, and system administration
• Offensive Security Certified Expert (OSCE) or CREST CCT qualification
• Artificial Intelligence background is a plus

Schedule

This role offers work from home flexibility of one day per week.

Intercontinental Exchange, Inc. is an Equal Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin or ancestry, age, disability or veteran status, or other protected status.

Responsibilities

TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices including Los Angeles, New York, London, Paris, Berlin, Dubai, Singapore, Jakarta, Seoul and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.

Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day.

To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.

Join us.

Team Introduction

The TikTok privacy governance team is affiliated with the TikTok PDPO (Privacy and Data Protection Office), providing operational support for TikTok privacy security construction and privacy risk governance projects, including data security, APP security, application security, etc., and is committed to high-quality and efficient operation execution .

Job Responsibilities:

1. Support data classification and taxonomy methods and standards, understand business, cooperate with data team. Support analysis, identification and marking various data samples in storage, and ensure accuracy and recall rate.

2. Support AI team to improve algorithm recognition and machine learning ability, analyze badcase of algorithm recommended data labels, put forward suggestions and basis for annotation/labelling, and participate in the discussion of algorithm model improvement solutions

3. Deeply understand the business, investigate the data samples of each business line, and improve the classification standard of data labels and sample database

4. Improve the data annotation operation process, optimize the label sampling and review mechanism, and improve the efficiency of manual or automated standards

5. Participate in the functional optimization design of the annotation platform

Qualifications

1. Majored in Computer Science or IT related, with research and development in testing, data analyst or DBA experience, familiar with common data storage technologies.

2. Excellent communication and analysis skills and good reasoning skills, able to quickly understand the business and judge the sample type according to the business attributes

3. Be able to effectively do repetitive tasks and effectively with a minimum of errors

4. Knowledge of artificial intelligence and machine learning. Strong interest is preferred

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Responsibilities

TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices including Los Angeles, New York, London, Paris, Berlin, Dubai, Singapore, Jakarta, Seoul and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.

Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day.

To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.

Join us.

We built TikTok as a trusted platform to inspire creativity and enrich life. Our Privacy and Security team protects users on our platform by promoting privacy by design; we design architectures that treat user data respectfully, with transparency, and in line with reasonable practices. Data privacy engineering is a new technological territory that hasn't been well defined in our industry; by joining the team, you will have chance to refine the data privacy framework, use advanced privacy technology, and make a big impact on TikTok and our community.

As a Backend Software Engineer on the TikTok Privacy and Security team, you will:

• Design, build, and maintain systems that enhance privacy across the TikTok;

• Work with engineering and product teams to ensure that TikTok is compliant with privacy laws and regulations from a technical perspective;

• Respond to privacy incidents, if they occur, including collecting information on scope and root cause as well as managing remediation.

Qualifications

• BS/MS Degree in Computer Science or equivalent majors;

• Experienced in building backend services for large-scale consumer-facing applications;

• Proficiency in at least one of the following languages: Go, C++, Python, Java;

• Deep understanding of computer architectures, data structures and algorithms;

• Good team communication and collaboration skills.

Preferred Qualifications:

• Industry experience developing and implementing privacy features and solutions.

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Responsibilities

TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices including Los Angeles, New York, London, Paris, Berlin, Dubai, Singapore, Jakarta, Seoul and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.

Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day.

To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.

Join us.

We built TikTok as a trusted platform to inspire creativity and enrich life. Our Privacy and Security team protects users on our platform by promoting privacy by design; we design architectures that treat user data respectfully, with transparency, and in line with reasonable practices. Data privacy engineering is a new technological territory that hasn't been well defined in our industry; by joining the team, you will have chance to refine the data privacy framework, use advanced privacy technology, and make a big impact on TikTok and our community.

As a Backend Software Engineer on the TikTok Privacy and Security team, you will:

• Design, build, and maintain systems that enhance privacy across the TikTok;

• Work with engineering and product teams to ensure that TikTok is compliant with privacy laws and regulations from a technical perspective;

• Respond to privacy incidents, if they occur, including collecting information on scope and root cause as well as managing remediation.

Qualifications

• BS/MS Degree in Computer Science or equivalent majors with minimum 3 years of working experience;

• Experienced in building backend services for large-scale consumer-facing applications;

• Proficiency in at least one of the following languages: Go, C++, Python, Java;

• Deep understanding of computer architectures, data structures and algorithms;

• Good team communication and collaboration skills.

Preferred Qualifications:

• Industry experience developing and implementing privacy features and solutions.

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too

We are looking for an experienced Senior Cloud Security Engineer to join the Cyber Security Operations team. This is a 12 months contract role to start with a potential to extend / convert based on the performance and business needs.

Roles and Responsibilities:

• The ideal candidate must have deep knowledge of security controls, tools, features, and operations for AWS / Azure. Candidate should be able to demonstrate relevant experience with implementing and enhancing detective capabilities in a fully managed AWS / Azure environment.
• The candidate should be intellectually curious about technology and the evolving threat landscape.
  This role will help to build a detection engineering process and culture for a SIEM platform covering on-prem and multi-cloud environments while serving as a technical subject matter expert for the AWS / Azure environment.
• It will partner with teams across Global Information Security to design, develop, tune, and maintain detection content to protect the and support the information security policies and/or procedures.

Skills and Experience

• Bachelor’s or Master’s Degree in Computer Science, Information Systems, Cyber Security, or related field.
• Eight (8) or more years relevant Cyber Security experience with at least five (5) years in Cloud SOC and/or Purple Team roles.
• Highly organized and motivated self-starter who can deliver results with minimal direction.
• Experience writing and tuning detections.
• Experience with SIEM tools.
• Experience designing and implementing technical solutions to enhance visibility, alerting capabilities, and reduce risk within AWS.
• Experience reviewing applications, infrastructure, and architectural designs to identify threats and vulnerabilities.
• Experience with a range of AWS . Azure native services and tools (i.e. Guard Duty, Security Hub)
• Understanding of threat frameworks, such as MITRE ATTCK for Cloud and D3FEND.
• Understanding of Risk Management principles.
• Experience in building, configuring, operating and/or securing cloud infrastructure and applications in AWS / Azure with either native cloud service provider capabilities or 3rd party vendor tools.
• Ability to independently assess risks and identify vulnerabilities in infrastructure with an eagerness to suggest new processes, policies, and overall improvements to internal security controls.
• Experience partnering with incident response teams, threat intelligence researchers, Red/Purple teams, and/or HUNT researchers.
• Familiarity with common Information Security and data protection frameworks and standards (i.e. CIS, NIST, HIPAA, GDPR, PCI DSSS, ISO 270001).
• Ability to navigate and collaborate effectively within a geographically complex and dispersed global corporation.
• Excellent verbal and written communication skills with ability to distill key data points and effectively present information.
• Preferable Certifications
  CCSP / CCSK
  CISSP / CISM / Security +

Argyll Scott Consulting Pte Ltd

Your new company

This is a multinational investment bank.

Your new role

• Develop and implement a comprehensive cloud DLP security strategy that aligns with the organization's goals and compliance requirements.
• Design and architect secure cloud solutions, considering aspects such as network security, identity and access management (IAM), encryption, and data protection.
• Guide implementation of proactive measures to address security concerns effectively.
• Ensure that cloud security practices adhere to industry standards and regulatory compliance, such as GDPR, HIPAA, or SOC 2.

What you'll need to succeed

• Minimum of 10 years of experience in information security, with at least 5 years focused on cloud security. Prior experience as a Security Architect or similar role is highly desirable.
• Experience with developing performance baselines for DLP tools.
• Proficiency in cloud platforms such as AWS, Azure, or Google Cloud, including knowledge of their security services and best practices.
• Certified Cloud Security Professional (CCSP) preferred.

What you'll get in return

• Challenging yet fulfilling career with an equal opportunity employer.
• Various opportunities to learn and upgrade your skill sets
• Competitive remuneration package and benefits

What you need to do now

If you’re interested in this role, click ‘apply now’ to forward an up-to-date copy of your CV, or call Shabnam at Hays on +65 60271964 or email [email protected] for a confidential discussion.

Referrals are welcome.

Registration ID No. R1873584 | EA License number: 07C3924 | Company Registration No. 200609504D

ASSET MANAGEMENT OPERATIONS
We provide customized service to our clients and enable our business to grow the Asset Management franchise across traditional and alternative products. Our teams execute within a front to back operating model, delivering support across the client, product, and investment lifecycle. We also conduct risk oversight, provide change management, business intelligence, and market solutions for the division.

OUR IMPACT

Goldman Sachs Asset Management Fund Services Limited (GSAMFSL) is a Super Management Company located in Dublin and Goldman Sachs Asset Management BV (GSAMBV) is a Management Company based in The Hague. GSAMFSL and GSAMBV appoint and oversee distribution partners for both Public and Alternative Funds of Goldman Sachs Asset & Wealth Management (AWM).

International Shareholder Services (ISS) is based in multiple locations globally, assisting the Sales teams in their AWM fund distribution efforts and providing world class client service to investors in AWM funds.

International Distributor Onboarding (DOB) sits within ISS and aims to strengthen the client franchise by providing world class client service and execution in a controlled and scalable manner. The DOB team has individuals located in London, Dublin, and Salt Lake City, and is responsible for on-boarding and overseeing distribution partners of AWM funds. The team interacts with key stakeholders across AWM and the broader Firm including Sales, Product Research & Development, Portfolio Management, Legal, Compliance, Financial Crime Compliance, Risk, and Operations, to manage our distribution partner experience.

YOUR IMPACT

As part of the DOB team the candidate will be required to manage ongoing responsibilities regarding onboarding and lifecycle management events for our distribution partners, specialising in the coordination of complex, high profile, and strategically important relationships across the AEJ region. In addition, the candidate will be involved in driving the execution of key strategic initiatives aimed at strengthening our distribution oversight framework and enhancing our distribution partner service offering.

The role entails stakeholder coordination and requires strong attention to detail, self-motivation, and pro-activity to deliver exceptional client service whilst adhering to regulatory and compliance requirements. As an owner of the end-to-end onboarding process, the candidate will have the opportunity to identify inefficiencies and drive enhancements to improve the client experience and ensure regulatory and compliance standards are met.

This role will allow the candidate to gain broad exposure to the workings of AWM and our distribution partners.

HOW YOU WILL FULFILL YOUR POTENTIAL

• Develop a client service and risk control program focusing on AEJ distribution activity for EMEA and US domiciled AWM funds, including developing and maintaining relationships with stakeholders in all regions.
• Act as the local point of contact and subject matter expert in AEJ to assist Sales teams with understanding and complying with regulatory and compliance requirements, and local market practices, when onboarding and maintaining distribution partner relationships.
• Gain a depth of understanding of the distribution partner end-to-end onboarding and lifecycle management process including Know Your Client, Anti Money Laundering, Due Diligence, Legal Agreements, Fee Arrangements, and Operational Processes.
• Act as the subject matter expert to assist Sales teams with understanding and complying with regulatory and compliance requirements and policies when onboarding and maintaining distribution partner relationships.
• Partner with Sales teams to manage distribution partner expectations and ensure exceptional client experience.
• Manage pipeline of distribution partner onboarding and lifecycle management events by leading on information gathering and review, stakeholder approval collation, agreement execution, operational support, and record keeping.
• Coordinate, organize and lead all stakeholder discussions and serve as a point of escalation for issues throughout distribution partner onboarding and lifecycle management events.
• Develop detailed event management plans, target delivery dates, and key milestones based on a deep understanding of distribution partner activity and requirements, AWM fund characteristics, jurisdictional considerations, and service level agreements with stakeholders, ensuring all stakeholders are kept informed of event status.
• Develop a clear understanding of any bespoke distribution partner, AWM Fund, and jurisdiction requirements to provide solutions balancing the client experience with regulatory, compliance, and operational considerations.
• Coordinate and obtain requisite signoffs from senior management across stakeholders in all impacted functions, ensuring all prerequisite tasks are complete prior to event completion.
• Review and maintain internal controls and quality checks for the end-to-end onboarding and lifecycle management process, and escalate to Compliance, Legal, and Senior Management as appropriate.
• Review and maintain team policies and procedures to identify inefficiencies and drive enhancements with a view to increasing client service, controls, and scalability.
• Produce regular metrics and presentation materials, including board level reporting for activities related to the funds, and provide information for ad-hoc requests.
• Participate in, and present at, internal governance groups on distribution partner onboarding and lifecycle management events and distribution initiatives.
• The candidate will be required to work with senior members of Goldman Sachs Asset Management to cover day to day and project related tasks.

SKILLS & EXPERIENCE WE ARE LOOKING FOR

• Extremely diligent, organized, and results focused.
• Exceptional judgment with an ability to grasp concepts quickly and problem solve through an analytical mindset.
• Strong project management skills, including ability to organize, track and drive resolution to multiple threads of activity; hands-on approach to resolving issues.
• Strong communication skills with an ability to gain trust and confidence from clients, internal stakeholders, and senior management.
• Knowledge of the regulatory environment as it relates to cross border fund distribution is essential.
• Bachelor Degree or higher
• 5 + years experience specific to client onboarding, KYC, client services with a focus on Alternative Investments and/or Private Fund Vehicles

Our client is a global bank with regional IIT presence in Singapore. They are inviting applicant for their Project Manager (IT Security) role

Roles

· Managing project initiation including cost-benefit analysis and project papers for IT security projects

· Managing RFQ, RFP for outsourced projects

· Managing communications with stakeholders

· Preparing and tracking of project plans, resources, budgets , spent, etc

· Running Project Steering Comm

· Ensuring deliverables are tracked and issues managed accordingly

· Prepare management and status reports to various teams

· Ensuring project governance as well as preparing project management updates , reports to stakeholders

· Managing vendors deliverables and relationship

Requirements

• Strong and Proven Technology PM with min 10 years of experience
• Prior experience in managing large and complex infrastructure or IT security projects in banking are a must
• Experience working in banking or vendor environemtn or large regional projects
• Resourceful with excellent communication skills to manage stakeholders
• Strong people management skills
• Must have prior experience managing project value of Min SGD 1 Mil
• Knowledge in best Project Management practices, processes

Interested candidates please email your latest resume to [email protected]

• Experience in doing PowerPoint slides
• Good in Excel (VLOOKUP / pivot table)
• Salary: $4,000

Summary

We are seeking a proactive and efficient Legal Secretary to provide comprehensive administrative and secretarial support to our legal team. This role involves drafting and preparing various documents, managing calendars, handling correspondence, and other administrative duties.

Role and Responsibilities

• Provide secretarial and administrative support to the legal team.
• Draft and prepare various documents, including agreements, letters, and other legal documentation.
• Conduct case searches when necessary.
• File documents in the in-house legal platform.
• Assist with drafting, proofreading, marking-up, printing, and scanning of agreements, letters, and documents.
• Review Charterparties, Addendums, Fixing Notes, etc., against fixture recap and proforma CP.
• Update slot declaration lists and declare newly chartered vessels to insurance brokers.
• Communicate with external vendors regarding their matters and enquiries.
• Liaise with insurers for insurance certificates and assist with queries from other departments as required.
• Perform a variety of secretarial duties, including monitoring payment of invoices (insurance premiums, club invoices, legal invoices), handling calls, managing files/documents, monitoring deadlines, scheduling appointments/meetings, managing calendars, and responding to correspondence/emails/faxes.
• Maintain a positive attitude, willingness to learn, meticulous attention to detail, and the ability to multi-task.
• Work independently and as part of a team, with the flexibility to work overtime if required.
• Perform any other tasks assigned by the counsel or manager.

Requirements

• Minimum 1-2 years of experience as a legal secretary or in a related administrative role.
• Excellent command of English (both written and spoken).
• Proficiency in legal documentation and Microsoft Office applications.
• Good typing speed and accuracy.
• Possess a pleasant and dynamic personality, positive attitude, and the ability to think outside the box.
• Strong attention to detail and the ability to handle multiple tasks simultaneously.
• Ability to work independently and collaboratively as part of a team.
• Willingness to learn and adapt to new challenges.

Interested candidates please apply online or send your latest CV to [email protected]

Kindly note that only shortlisted candidates will be notified.

Triton AI Pte Ltd

Registration Number: R23118389

EA: 21C0661

We have an opening for the following position:

Legal Secretary

Responsibilities (not limited to):

• Assisting with the preparation of legal documents
• Answering calls and handling requests
• Scheduling of meetings/appointments and preparing of meeting materials
• Maintaining client contact list
• Performing general administrative duties such as photocopying, scanning, binding, file management
• Providing administrative support on a day-to-day basis, such as expense claims and time recording
• Preparing of billings
• Booking of flights and accommodations

Requirements :

• Minimum 5 GCE ‘O’ level credits including English
• Proficient in Microsoft office applications
• 2 years’ working experience in legal sector
• Takes initiative and is a team player
• Excellent communication, interpersonal and organizational skill
• Good time management

A competitive and attractive remuneration package awaits the successful candidate.

Please submit your resume stating qualifications, work experience, current and expected salary.

We regret to inform that only short-listed applicants will be notified.

Oon & Bazul is one of Singapore’s fastest-growing law firms as recognized by Asian Legal Business. The firm is a large leading commercial practice and our lawyers are known for their ability to deliver high-quality work as well as their commitment to helping clients achieve success.

We are looking for a Legal Executive to bolster our Litigation & Dispute Resolution practice. The general scope of work includes: -

• Provide legal support to the lawyers in the team which includes legal research, drafting legal documents and briefs, conducting searches, filing of documents via e-Litigation
• Any other duties and responsibilities as assigned

Requirements

• Law degree from a reputable university
• Excellent verbal and written communication skills
• High degree of attention to detail
• Keen ability to work effectively in a fast-paced environment and to manage conflicting priorities and deadlines
• Independent self-starter with the ability to work across various stakeholders
• A team player

Opportunity

Due to significant growth in our clients, and their demands for a significant build-out, we are looking for a Researcher with 1-5 years of recruitment or professional experience. Ideally you will be a Singaporean or Singapore PR holder, possess strong fluency in English and Mandarin. In addition, you will need to be extremely confident on the phone when making difficult cold approach or research calls. You will have an ‘eye for written detail’ in English, be socially confident in a business and social environment when presenting to or entertaining clients. The successful candidate will be based in the Singapore office, reporting to the Director, Head of Legal & Compliance, Asia. You will be exposed to all areas of the firm’s business, enabling you to develop a strong knowledge of the Commodity markets globally.

Commodity Associate / Researcher Overview

To be responsible for the day to day delivery and execution of both client and wider practice needs relating to candidates, process management, data and research.

Specifically:

Client Assignments

• Manage the candidate research process in line with timeframe and deliverables (i.e. market map / longlist / best ideas...) that has been agreed with the client as well as to the standard and in the format that the company expects and uses, such as:

1. Systemically mapping out targeted organisations and talent pool
2. Identifying candidates through database searches, networking, and online platforms.
3. In most cases, making initial approaches to candidates to gain interest and set up further conversations
4. Assessing candidate qualifications and suitability
5. Collaborate with consultants to refine candidate profiles and search strategies

• Manage the interview process to include:

1. Ensuring that CVs and summary profiles are with the client in good time ahead of interviews and are presented in the company standard format (proofed and PDF’d).
2. Ensuring that all candidates receive a company standard format briefing note in good time ahead of the meeting, which include the time and venue details, client and company consultant contact details and, where possible a profile of the interviewer. These should be proofed and PDF’d.
3. When appropriate, taking and passing on feedback.
4. Ensuring that all aspects of the search are tracked on FileFinder, including meetings, feedback and any dialogue between the company / clients / candidates.
5. Producing and issuing the weekly status report for each search on the day agreed with the client (usually Friday afternoon).

Client / contact meetings

• Be responsible for taking notes during client / contact meetings, writing those notes up as soon as possible and circulating to the commodity team and anyone else internally deemed appropriate.
• Ensure that any market information included in those notes is reflected on FileFinder including names, firms, movement (hiring / firing, reporting lines, new businesses initiatives) and is logged against all of the organisations and firms involved with the subject line reflecting the name of the source.

General Market Information

• Be responsible for ensuring that any market data we receive, from industry or broader media, contacts, internet sourcing including (but not exclusively) FSA register, Bloomberg, LinkedIn etc. is reflected on FileFinder including data on colleagues and reporting lines.
• Ensure that colleagues are always aware of what is happening with the business specifically through email CCs of BCCs or contemporaneous notes.

If Successful, You Will:

• Earn a competitive basic salary, access to a first class private health scheme and expense account.
• Have the opportunity to develop and travel internationally across the company's main offices depending on requirements.
• Join a driven, dynamic, collegial and successful working environment.
• Be entitled to join the bonus scheme based on both personal and company performance and given a career development plan.

Ideal Candidates Will Have:

• Graduated with a minimum 2:1 degree from a top or well recognised University.
• An ideal minimum of 1 year professional or commercial experience through or post-University via work experience, internships or permanent roles.
• Broad understanding of legal and compliance issues (desirable)
• Fostered a natural energy, strong people skills, able to show ‘determination and drive’ throughout their background as this is what is needed to succeed in a pressurised commercial role.
• A polished and natural communication skillset both on the phone and in person with a high level of attention to detail.
• Solid organisational skills with the ability to multi-task.
• Strong working knowledge of Microsoft Office and experience in draft, building and finalising documents including general formatting and spell-checking.
• Excellent English-language skills, both verbal and written, and fluent Mandarin (verbal)

Summary of the role

The primary responsibility of the Red Team Analyst is to protect Marina Bay Sands' gaming, retail, and hospitality sectors from cyber threats. This includes conducting adversarial simulations, red/purple team exercises, and security assessments. All duties are to be performed following Marina Bay Sands’ policies and procedures. All duties are to be performed in accordance with the department and Marina Bay Sands’ policies, practices and procedures.

Job Scope

This Analyst is expected to perform within the areas of at least one of the following:

Adversarial Simulation:

• Perform comprehensive analyses and simulations to mimic cyber threats and identify vulnerabilities.
• Execute threat-led penetration testing and red/purple team exercises using frameworks such as MITRE ATT&CK and TIBER-EU.
• Conduct attack simulation exercises using Tactics, Techniques, and Procedures (TTPs) that cyber threat actors use to plan and execute cyber-attacks.

Red Team Activities:

• Conduct authorized offensive security operations to test the effectiveness of cyber defenses and simulate cyber-attacks.
• Execute penetration tests on external and internal infrastructures, web applications, and mobile applications to identify security weaknesses and misconfigurations.
• § Perform social engineering assessments (email phishing, vishing, physical access attacks) to simulate password theft, system infiltration, and malware/ransomware deployment.
• Perform source code reviews to identify software vulnerabilities and detect malicious embedded code.
• Assess security configurations for cloud, server, network, and middleware infrastructures.
• Review IT architecture for both cloud and on-premises environments.

Forensics and Incident Response:

• Lead cyber incident investigations and response efforts.
• Collaborate with cybersecurity specialists to maintain and update security testing methodologies.
• Perform other related duties as assigned.

Job Requirements

• Minimum diploma with at least 3-5 years of hands-on cybersecurity experience in relevant areas.
• Preferred certifications: CISSP, OSCP, CRTP, CRTO, OSWE.
• Experience in Gaming, Banking, or Critical Infrastructure InfoComm Industry is an advantage.
• Effective verbal and written communication skills.
• Proficiency with offensive security tools such as Cobalt Strike, Empire, Havoc, Mythic.
• Experience in setting up red teaming Command and Control (C2) infrastructure, including web/proxy servers, redirectors, domain frontingSkills in developing malicious payloads and understanding obfuscation and encryption techniques.
• · Proficiency in at least one scripting language (e.g., Bash, PowerShell) and/or programming language (e.g., Python, C, C#, C++, Java).
• Understanding of basic networking concepts and Internet protocols (e.g., TCP/IP, HTTP(S), SMTP, DNS, SSL/TLS).
• Knowledge of industry-recognized security testing standards and penetration testing methodology.
• Strong understanding of enterprise technologies, operations, and security evaluations.

Marina Bay Sands is committed to building a diverse, equitable and inclusive workforce, providing equal opportunities as we grow our talent base to match our growth ambitions in Singapore. Our employees are committed to adhere to and abide by all rules, regulations, policies and procedures, including the rules of conduct and business ethics of the Company.

Summary of the role

The primary responsibility of the Governance Analyst is to perform duties in one or more of the following areas: vulnerability management, cyber data governance, risk and verification, cyber policy/standards/standard operating procedures development, and penetration testing and red teaming. All duties are to be performed in accordance with departmental and Las Vegas Sands Corp.’s policies, practices, and procedures.

Job Scope

This Analyst is expected to perform within the areas of at least one of the following:

• Cyber governance, risk and verification which performs risk assessments, system security and industrial control system zone security plans including listing controls, gaps in implemented controls and tracking remediation of gaps, and provides input to the risk register
• Network and Operating Systems Security Configuration assessment which performs security configuration reviews including hardening controls, firewall rules review, web/application security configurations
• Penetration testing and red teaming which includes performing security testing to identify security vulnerabilities on LVSC applications and environment, providing recommendations for remediation, and tracking and remediating found issues.
• Cyber policy/standard and standard operating procedure creation, review, distribution, and maintenance
• Vulnerability management which includes successfully scanning the LVSC computing environment for secure configurations and vulnerabilities, researching and eliminating false positives, tracking and remediating found issues, and tracking and performing the exception processes
• Performs other related duties as assigned.

Job Requirements

• Minimum diploma with at least 5 - 8 years cyber security hands-on experience in one or more of the areas listed in place of a degree.
• Preferrable to have a current and in good standing CISSP or similar certification, and Offensive Security (OSCP, OSWE, OSEP) or Crest (CRT, CCT) certifications
• Demonstrated experience in at least 1 area in the following list:
• Cyber Vulnerability Management
• Cyber Governance, Risk and Verification
• Cyber Policy/Standard/Standard Operating Procedures
• Cyber Penetration Testing and Red Teaming
• Working knowledge of threats and vulnerabilities and their significance to cyber risk, network operations, and end-point security
• Strong interpersonal skills with the ability to communicate effectively with guests and other Team Members of different backgrounds and levels of experience.

Marina Bay Sands is committed to building a diverse, equitable and inclusive workforce, providing equal opportunities as we grow our talent base to match our growth ambitions in Singapore. Our employees are committed to adhere to and abide by all rules, regulations, policies and procedures, including the rules of conduct and business ethics of the Company.

The Lead of the SRAP APAC legal entity analytics will support the Head of APAC Business Servicing & Analytics in delivering all SRAP APAC entity planning and analysis, including quarterly financial analysis, closing/reporting, financial planning and forecasting, expense analysis, as well as ad hoc business analysis for senior management. The role is required to focus on SRAP entity level analysis (i.e. the analysis of full P&L and B/S under local reporting framework) to allow a wholistic assessment on dividend and capital repatriations to Group.

In addition, the role has a key component to further develop and enhance the Apac entity planning and analysis tool as the business in Asia Pacific grows. Key deliverable to enhance the efficiency of the tools and database supporting the overall consolidation of entity actuals and plan financials.

There is a specific requirement of this role to be a strong communicator to all stakeholders, including but not limited to entity CEOs and CFOs, regional finance teams with Asia Pacific and Head office, and senior management.

Key duties and responsibilities

1. Entity-level quarterly financial reporting and analytics

• Perform the quarterly financial reporting process for IFRS 17 P&L B/S under local reporting framework, including detail variance analysis (actual vs plan, actual vs prior year) and the underlying business/technical drivers
• Perform the entiy-level closing process in collaboration with Business Performance, Valuation and Technical Accounting teams to identify the early developments for the quarter and timely communication of key impacts; this will need to include a holistic assessment of net results on dividend and capital to Group
• Establish a holistic bridging analysis across all reporting bases (i.e., group reporting standard, local GAAP, market view, entity view)
• Provide effective and timely communication of entity level results to management team, including local entity CEOs and CFOs.
• Streamline the quarterly financial reporting process and requirements

2. Entity-level operating planning and forecast

• Perform the production process of local entity IFRS 17 Operational Planning for the APAC to ensure timely submission, good data quality and documentation of key drives/risks to plan
• Support the production process of local GAAP income statement and balance sheet for the SRAP APAC entities in collaboration with Valuation and Finance teams
• Support Capital Management Team to provide Operating Planning to allow for capital forecast
• Provide effective communication of local entity plan progression for each iterations of operating plans and the corresponding plan assumptions / key risks to plan

Required experience & competencies

• At least 7 years of relevant working experiences in fields related to insurance/reinsurance/accounting, preferably with at least 5 years in actuarial, accounting, reporting matters and data analysis or insurance audit
• Ideally a Qualified Actuary with very strong Actuarial or Accounting and IFRS knowledge, with insurance context
• Solid data management skills
• Strong experience on communication of complex financials to multiple stakeholders
• Strong analytical and conceptual competence
• Able to handle issues from macro perspective and delve into details when needed
• A strong multi-tasker and preferably have good project management experiences
• Innovative, versatile & committed
• Excellent Excel skills, preferably VBA, macros usage
• Possess good project management skills set
• Excellent analytical skills
• Great communication and interpersonal skills
• Self-motivated and reliable individual
• Leadership experience would be helpful, but not a must

Solution Sales is on a journey to innovate across ServiceNow’s go-to-market (GTM), delight our customers, and fuel our unparalleled climb to $16B. We are moving fast, and with this rapid scale and dynamic growth we are hiring a strategic sales & GTM leader to drive growth, scale and consistency.  

The BDM Go-to-Market leader will spearhead market success for the Security Business. This role will focus on driving growth strategy, enhancing solution sales capabilities, and orchestrating cross-functional ecosystem efforts to build a robust sales pipeline and capture market opportunities. As a seasoned sales executive, you will apply your expertise to drive business growth in partnership with various cross-functional teams, including sales, specialist sales, product, marketing, partners, and other key stakeholders.  

This role offers a unique opportunity to make a substantial impact on the organization's growth and success. The ideal candidate is a proven sales & GTM leader with the ability to collaborate effectively, foster relationships, and demonstrate a keen intellectual curiosity that builds trust with senior leaders and stakeholders throughout the organization. The candidate must bring a combination of GTM expertise, deep product & market domain knowledge, and sales excellence to drive results.  

Key Responsibilities:  

• Develop and implement a comprehensive business development strategy with a specific focus on transformation initiatives.  Identify potential business opportunities and partnerships to support the company's growth objectives, leveraging market insights and industry trends.  
• Conduct thorough market research and analysis to identify emerging trends and transformational opportunities within the industry.  
• Collaborate with cross-functional teams to define and refine the company's value proposition and develop innovative solutions to address market needs.  
• Build and maintain strong relationships with key stakeholders, including clients, partners, and industry influencers.  
• Evangelize ServiceNow’s Service value proposition for major deals, partnerships, and strategic alliances, ensuring alignment with the company's overall transformation objectives.  
• Provide guidance and mentorship to the sales team, fostering a culture of excellence, collaboration, and continuous improvement.  
• Monitor and analyze market trends, competitive landscape, and customer feedback to inform strategic decision-making and enhance business development efforts.  
• Collaborate with the executive team to define and execute the company's overall growth strategy, incorporating transformational initiatives.  

noco-noco is a fast-growing decarbonization solutions provider with a range of products and services across the clean energy and mobility space. Since our incorporation in 2019 and through our public listing in 2023, we have been driven by our commitment to solve tangible environmental challenges with game-changing technology and innovative service solutions for global impact. We collaborate with business/commercial and R&D partners across the value chain and spread across South and Southeast Asia.

noco-noco Inc. is seeking an experienced Legal Counsel with over 15 years of legal expertise, including experience managing the affairs of a US-listed company.

The ideal candidate will be proficient in handling documentation related to fundraising, private placement of shares and financing from US fund managers across equity, mezzanine, and debt instruments. Additionally, the candidate should possess significant experience in international mergers and acquisitions (M&A) and risks & compliance matters related to publicly listed companies. This role requires a highly skilled professional with a strong understanding of US securities laws, corporate governance, financial regulations, and international M&A.

Other supporting matters that require legal advisory include legal matters related to ESOW and ESOP implementation, employment and service agreements for senior executives, director engagements in Singapore and remote executives located in other jurisdictions in Asia, namely Thailand and Japan.

Key Responsibilities:

• Corporate Governance: Oversee and manage the legal aspects of corporate governance for the company, ensuring compliance with all relevant regulations and best practices.
• Securities Compliance: Ensure compliance with US securities laws and regulations, including the Securities Act of 1933, the Securities Exchange Act of 1934, and related rules and regulations.
• Fundraising and Financing Documentation: Prepare, review, and negotiate documentation related to fundraising and financing activities, including equity, mezzanine, and debt financing.
• Stakeholder Management: Liaise with US fund managers, investors, and other stakeholders to facilitate fundraising and financing transactions.
• Legal Advisory: Provide strategic legal advice to senior management and the board of directors on various legal and regulatory matters.
• Contract Management: Draft, review, and negotiate a wide range of commercial contracts and agreements.
• Risk Management: Identify and mitigate legal risks associated with the company’s operations and transactions.
• Litigation Management: Oversee and manage any litigation or disputes involving the company.
• International M&A: Manage and oversee all legal aspects of international mergers and acquisitions, including due diligence, structuring, negotiation, and integration.
• Listco Compliance: Ensure compliance with all regulations and requirements applicable to publicly listed companies, including disclosure requirements, corporate governance standards, and shareholder relations.
• Intellectual Property: Manage and safeguard the company’s intellectual property and develop strategies to protect and enforce these rights.
• Public Relations: Review and clear all external PR and Investor communications.
• Risk & Compliance Secretariat: Oversee and develop compliance policies and procedures. Regularly review and implement these policies, particularly those related to whistleblowing and ethical matters.

Qualifications:

• Degree from an accredited law school.
• Admission to the bar, preferably in a US jurisdiction.
• A minimum of 15 years of legal experience, with experience in a senior legal role preferably within a US-listed company.
• Experience with US securities laws, corporate governance, and financial regulations.
• Proven experience in managing documentation related to fundraising and financing from US fund managers, including equity, mezzanine, and debt.
• Strong experience in international mergers and acquisitions (M&A).
• In-depth knowledge of compliance matters related to publicly listed companies.
• Strong analytical, drafting, and negotiation skills.
• Excellent communication and interpersonal skills.
• Ability to work independently and as part of a team in a fast-paced environment.
• High ethical standards and professional integrity.
• Experience in the technology or financial services sectors.
• Understanding of international legal frameworks and cross-border transactions.
• Strong network within the legal and financial communities.

Wherever you are in the amazing world of Disney, you are contributing to the stories of our iconic brands, recognised by audiences everywhere for entertainment, information and inspiration. Innovation, imagination and inclusion are at the core of Disney, defining the experience that we deliver as well as providing the foundation of our success. The scope of our business, combined with global growth and collaboration result in an inclusive employee experience characterised by continuous learning, development and achievement.

The Executive Director will serve as a regional leader of integrated communications, proactively enhancing and protecting the reputation of the Disney Experiences APAC business. Overseeing the corporate communications function covering external communications, public relations, public affairs, and internal and executive communications across the Disney Experiences business.

Disney Experiences APAC business covers:

Disney Consumer Products, (DCP) is the division of Disney Experiences that brings beloved brands and franchises into the daily lives of families and fans through products – from toys to t-shirts, apps, books, console games and more – and experiences that can be found around the world, including on the disneystore.com e-commerce platform and at Disney Parks, local and international retailers, as well as Disney store locations globally. The business is home to world-class teams of product, licensing and retail experts, artists and storytellers, and technologists who inspire imaginations around the world.

Since launching in 1998, Disney Cruise Line has established itself as a leader in the cruise industry, providing a setting where families can reconnect, adults can recharge and children can experience all Disney has to offer. Today, the award-winning Disney Cruise Line continues to expand its blueprint for family cruising with a fleet of five ships — the Disney Magic, Disney Wonder, Disney Dream, Disney Fantasy and Disney Wish — and three more ships planned. One of these ships will exclusively homeport in Singapore for at least five years beginning in 2025, marking the cruise line’s debut in Southeast Asia.

Responsibilities:

• Develop and execute strategic and integrated communication plans to protect and enhance the reputation of the Disney Experiences business and drive the business objectives of both the DCP and DCL businesses in the region.
• Develop and execute the Executive and Internal Communications functions across DCP and DCL.
• Proactively identify/mitigate emerging issues using an integrated approach that considers all aspects of communications.
• Develop, educate and enhance relationships with key media stakeholders across the APAC region to support business objectives.
• Develop and enhance relationships with key stakeholders and partners, both externally and internally.
• Work hand in hand with Corp Comms in APAC to integrate APAC Disney Experiences into the TWDC narrative.
• Work hand in hand with Corp Comms in APAC to drive CSR programs that enhance the Disney Experiences business and garner staff engagement.
• Develop and execute efforts to maximize social media and online tools to drive and support the effective communications of key business messages.
• Lead the APAC DCP Comms team, including SEA comms lead in implementing internal and external communications, public affairs and media relations plans for key markets.
• Lead and work hand in hand with the regional Corp Comms team in implementing CPGP communications, public affairs and media relations plans for key markets.
• Build and lead an APAC DCL Comms team across Public Affairs, Internal and Executive Comms, Public Relations, and Events to implement internal and external communications, public affairs, and media relations plans for key markets.

Requirements:

• Bachelor’s degree or equivalent experience in Public Affairs, Communications, Journalism, Government, Broadcast Communications or other relevant areas.
• Preferred MBA degree or equivalent
• Experience with Asia Pacific markets, with strong knowledge of the media and consumer landscape.
• 15+ years of media relations experience dealing with leading brands, high-profile government work or agency experience.
• Proven regional leader with the ability to manage virtual teams across markets and regions
• Excellent oral/written communication and presentation skills.
• Issues and crisis communications experience.
• Demonstrated creative thinking and strong project management skills.
• Flexibility, resourcefulness and an ability to thrive in a fast-paced, changing environment.
• Strong leadership and interpersonal skills to influence and forge partnerships both internally (across Asia and the U.S.) and externally.
• Proactive, self-starter.
• Computer proficiency in Word, Excel, PowerPoint and Access.
• High level of corporate professionalism, maturity and political savvy.

The Walt Disney Company is an Equal Opportunity Employer. We strive to be a diverse workforce that is representative of our audiences, and where all can thrive and belong. We are committed to building a team that includes and respects a variety of voices, identities, backgrounds, experiences and perspectives.

• Responsible for developing and revising the Internal Control Program for security trade control.
• Handling contract matters, including contract review and management.
• Overseeing compliance issues like data privacy, anti-bribery, and anti-trust.

Requirements:

• Diploma and above.
• At least 3 years of experience in trade compliance.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R1326740

About the client

Our client is a prominent global trading platform, established in Australia, and serving millions of users worldwide. They specialize in delivering an integrated digital service platform designed for investors. Their offerings include market data, news, analysis, and comprehensive trading services, all within a user-centric fintech ecosystem.

About the role

The role involves planning, creating frameworks, roadmaps, processes, and controls, as well as coordinating across business and technical stakeholders to monitor and detect security threats and respond to security incidents.

• Develop and implement the company’s cyber/info-security efforts to ensure compliance with information security requirements stipulated by financial services regulators. Plan and construct the company's cybersecurity and protection systems, continuously enhancing cybersecurity management and environment to ensure network system security and availability.
• Manage the company’s response to and relationship with info-security-related audits/compliance matters and inquiries from regulators or appointed auditors. This includes overseeing security compliance activities such as PCI/GDPR audits and IT security compliance related to financial regulations.
• Conduct daily security checks, analyze and detect potential security threats and vulnerabilities in the company's business systems and internal office environment. Conduct security audits and provide employee security awareness training.
• Oversee safety inspections in the company's R&D process and optimize related processes.
• Manage internal and external network attacks, phishing attacks, virus infections, intrusion defense, and other security incidents. Provide monitoring, early warning, response, and emergency response.

Skills and Experience requirements

• 5 years or more of experience in information security/cybersecurity.
• Familiarity with OWASP Top 10 and DDoS attack principles and protection.
• Proficiency in information security/cybersecurity skills such as offensive and defensive tactics, penetration testing, and vulnerability assessment.
• Familiarity with commonly used security tools and products.
• Experience with one or more public cloud security products.
• Understanding of TCP/IP principles.

Interested candidates who wish to apply for the advertised position, please click on "Apply Now". We regret that only shortlisted candidates will be notified.

Job Code: ANNH

EA License: 01C4394, R1872517 (Ho Hsien Ni)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its local and overseas subsidiaries and affiliates to collect, use and disclose your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services, complying with Government’s health advisories and such other purposes stated in our privacy policy. Our full privacy policy is available at https://www.persolkelly.com.sg/policies . If you wish to withdraw your consent, please drop us an email to let us know. Please feel free to contact us if you have any queries.

Overview

With over 18,000 employees worldwide, the Microsoft Customer Experience & Success (CE&S) organization is responsible for the strategy, design, and implementation of Microsoft’s end-to-end customer experience. Come join CE&S and help us build a future where customers come to us not only because we provide industry-leading products and services, but also because we provide a differentiated and connected customer experience.

Join our Security Customer Success Unit at Microsoft, a dynamic team dedicated to ensuring the security and success of our customers. As a Security CSA (Cloud Solution Architect) Lead, you will play a pivotal role in shaping our field execution strategies and driving customer success in a rapidly evolving cybersecurity landscape.

The Customer Success team will drive change management and adoption activities with key business decision makers and IT decision makers, helping reduce implementation risk, driving usage of existing solutions, and identifying opportunities to accelerate the path for customers to realize business value from their investments.

Responsibilities

Customer Centricity

• Drive positive Customer Satisfaction & become a trusted advisor. Provide feedback & insights from customers/partners. Be the Voice of Customer to share insights and best practices, connect with Global Security teams at Microsoft, Engineering and Product teams to remove blockers and influence the solution roadmap.
• Experience in the implementation (end to end) of Data Security projects with Data Security Platforms, preferably experience with Microsoft Purview (Information Protection, Data Loss Prevention, Information Risk Management)
• Guides other team members to focus on customer/partner experience through efficient delivery and ensuring a seamless and connected customer experience. Supports definition of customer/partner conditions of success. Anticipates customer/partner dissatisfaction and unmet needs and executes strategies to improve experience, value realization, and acceleration of customer transformation.
• Lead and execute Field Usage and Consumption Strategy projects, providing structure and guidance to ensure successful outcomes.

Business Impact

• Position and deliver solutions that drive Security product usage and develop opportunities to drive Customer Success business results & help Customers get value from their Microsoft investments. Identify resolutions to Customer blockers by leveraging SA subject matter expertise.
• Deliver according to MS best practices & using repeatable IP. Accelerate Business Value of overall Security adoption by improving security posture and ensuring that the solution exhibits “Secure by Design” framework, such as high-performance levels, security, scalability, maintainability, appropriate reusability, and reliability upon
• Collaborate and orchestrate with other CSAs and MS stakeholders including FastTrack, partner, and Microsoft Consulting in developing complex end-to-end Enterprise solutions with the Microsoft Security platform.
• Drives consumption and usage rigor and discipline by developing and leading inclusive and regular rhythm of business (ROB) processes for a large subsidiary. Delivers on business commitments, collect performance data, report performance to Global Lead and Strategy Team, and informs future plans and decisions (e.g., forecasting, anticipated barriers). Leads a coaching rhythm in alignment to Microsoft's coaching framework and worldwide rhythym framework practices, integrated both locally and with Corporate.
• Creates culture to drive operational and pipeline excellence, with particular focus on the key performance indicators (KPIs) covering operating model metrics (e.g., growth, velocity, efficiency, resource allocation) to ensure consistent execution against strategy. Escalates to ensure removal of blockers related to the customer business and/or internal processes to deliver technical and operational excellence in Customer Success teams and accelerate customer adoption. Leads area-level/global-level rhythm of business (ROB) and instills a sense of urgency for strategic agility through other leaders. Identifies widespread or global patterns in blockers and develops strategies to resolve and prevent them in the future. Assesses and prioritizes high-impact technical blockers, and coaches team to enable resolution. Leverages systems for identifying leading and lagging indicators of success across customer success pipeline at the area/regional level (as appropriate). Drives area/regional accountability (as appropriate) to identify gaps in execution leading to optimizing customer success delivery for value realization.

Technical Leadership

• Leverages credibility and expertise to act as executive-level technical sponsor and leader for customers and partner ecosystem to continuously evolve and grow through the digital transformation journey (e.g., increase usage/consumption to drive customer expansion, upsell and renewal recapture rates). Provides area/global thought leadership for technical integration and innovation with the area leadership team. Creates culture of technical community engagement with customers and partners to influence actions and results at senior and executive levels of their organizations. Drives technical executive sponsorship with the customer and partner and influences strategy for regional scale. Leads critical engagements with customer and partner senior leadership, providing executive support for the Customer Success Unit (CSU) team to align operational plans with the organization's strategies to drive customer and partner obsession.
• Advocates to drive customer technical requirements with corporate product and engineering teams. Creates an internal feedback loop to drive broad, systemic continuous improvement for customers across Microsoft (e.g., security, product support). Leverages and creates customer and employee forums for open feedback and collaboration across teams. Invests in building and maintaining a strong network with corporate engineers to quickly meet customer and partner needs.
• Serves as an expert/spokesperson, as appropriate around key technical, operational and customer success topics (e.g., product/service lifecycle, customer perspective) to influence and drive recognition for Microsoft solutions and brands by speaking at events, having an active presence on social media platforms, and encouraging organizational participation. Leverages subject matter expertise to be and influencial voice in the area/globally, clarifying technical and operational questions and technology position. Supports Customer Success Unit (CSU) community-building internally and externally by providing community thought leadership and orchestrating with professional network to promote learning.

Qualifications

Required/Minimum Qualifications

• Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, or related field AND 4+ years experience in cloud/infrastructure technologies, information technology (IT) consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, and/or consulting
• OR equivalent experience
• 4+ years of experience and understanding of large-scale security deployments in enterprise-wide environments.

Additional or Preferred Qualification

Desired Microsoft Technology & Industry Equivalent. Certification in one or more of the following areas:

• Programming experiences, using Microsoft Information Protection SDK (e.g. PowerShell, C#, Python)
• Technical Certification in Microsoft SC-400 – Microsoft Information Protection Administrator)

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Role

Application Security Engineer – Cyber Security

Position Overview

The primary responsibility of the Application Security Engineer – Cyber Security is to support technologies that enable the companies’ cyber security goals and objectives, securing the confidentiality, integrity and availability of software and computer information systems. The role will serve as a security engineer for software development, supporting technologies that facilitate security of the software products and services. Additional key responsibilities of role include review of vulnerabilities identified by application security technologies and processes and provide the true positive results to the appropriate software development teams, and coordination with those teams to support their triage and remediation efforts for identified, valid vulnerabilities. All duties are to be performed in accordance with departmental and Client's policies, practices, and procedures.

Essential Duties & Responsibilities

• Act as a primary technical resource in development of a comprehensive security program to support various Software Development Lifecycles (SDLCs) and ensure that software developed in this SDLC is free of security vulnerabilities.

• Manage application security program across multiple SDLCs.

• Ensure cybersecurity requirements are met prior to production release.

• Triage potential vulnerabilities identified by application security program with context of application and related business knowledge.

• Maintain understanding of core functionality of supported software and first-party applications.

• Review and understand code from both business logic and technical standpoint.

• Coordinate with developers to prioritize and remediate identified true positive vulnerabilities.

• Collaborate with software development and quality assurance teams to ensure code is free from security defects.

• Communicate cybersecurity standards applicable to technology and coding workflows.

• Working with Application Security Engineers, optimize security with existing technologies and processes.

• Provide technical guidance to developers and engineers on cybersecurity best practices.

• Review performance of controls such as threat modeling, SCA, SAST, DAST, IAST, RASP, Secrets Scanning, Container Scanning, Misconfiguration Identification, Secure Code Review, CI/CD Pipeline Security, Deployment Environment Security.

• Coordinate with software development leadership, operations leadership, IT leadership, and cybersecurity leadership to integrate application security practices across departments.

• Actively seek ways to improve secure software development processes.

Additional Responsibilities:

• Develop and maintain security policies, standards, and guidelines.

• Conduct code analysis of first-party enterprise applications, through both manual and automation-enabled processes.

• Provide remediation guidance and recommendations to developers and administrators based on identified vulnerabilities and existing technology stack.

• Work with software development teams to prioritize and validate the urgency of mitigation of identified product vulnerabilities and security feature enhancement requests.

• Stay updated with the latest cybersecurity threats and trends and incorporate this knowledge into security architecture designs and practices.

• Conduct training and awareness programs to enhance the security posture of the organization. Participate in security audits and assist in regulatory compliance efforts.

• Work closely with IT operations and software development teams to ensure secure systems deployment and operations.

• Actively contribute to the organization’s cybersecurity strategy and roadmap.

Minimum Qualifications

• Outstanding collaboration and communication skills. •Any of the following combinations of education, professional experience, or both:

At least 2 years of experience in a relevant DevSecOps role and technical degree in computer / information science; or

At least 4 years of experience in a relevant DevSecOps role; or

At least 6 years of related field work experience, at least 1 year of which in a software development role, and at least 1 of which in a cyber security role and technical degree in computer / information science; or

At least 8 years of relevant field experience, at least 1 year of which in a software development role, and at least 1 year of which in a cyber security role.

•Demonstrated experience working with technical and non-technical staff.

•Knowledge of application security, software development, and cyber security concepts.

•Basic knowledge of a broad range of IT, Security, Controls and Service Delivery standards and frameworks for example, International Standards Organization (ISO) 27001, IT Infrastructure Library (ITIL), Control Objectives for IT (CoBIT), and Capability Maturity Model Integration (CMMI).

•Experience with Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure or other cloud platforms, with experience in developing and implementing software.

•Experience developing software in various coding languages such as Java, C#, PHP, etc.

• Demonstrated knowledge of web applications, cyber security, and open-source technologies.

• Safety is an essential function of this job.

• Consistent and regular attendance is an essential function of this job.

•Ability to execute multiple projects and tasks under tight deadlines.

• Provide off-hours support on an infrequent, but as needed basis. (Potential shifts may run 24/7 dueto the needs of the business).

• Strong interpersonal skills with the ability to communicate effectively with guests and other Team Members of different backgrounds and levels of experience.

• Must be able to work varied shifts, including nights, weekends, and holidays.

Additional Experience Recommended

• Professional certification in multiple programming languages (C#, .NET, Java, etc.) recommended.

• Professional certifications in cyber security (CISSP, OSCP, etc.) recommended.

• Experience with CI/CD and pipeline tools such as Jenkins, Docker, Kubernetes, and others.

• Knowledge of cloud platforms and services, with experience in cloud security.

• Experience with automated software and security testing tools and techniques.

• Ability to stay updated with the latest industry trends and advancements in cybersecurity.

• Understanding of enterprise software development practices.

• Experience working with software development teams.

• Experience identifying cybersecurity vulnerabilities and weaknesses in software.

• Experience reading, writing, and auditing software in multiple programming languages.

• Strong familiarity with common vulnerabilities and attack vectors.

• Knowledge of common encryption technologies (AES, PGP, SSH, SSL, etc.).

• Knowledge of common authentication protocols (OpenID Connect, OAUTH, SAML, RADIUS, LDAP, KERBEROS, etc.).

• Previous work experience as an Application/Product Security Engineer or Software Developer.

• Experience integrating security testing into an SDLC.

• Experience with incident response and handling methodologies.

• Experience with security technologies such as intrusion detection/prevention systems (IDS/IPS), firewalls, SIEM, etc.

• Physically access all areas of the property and drive areas with or without reasonable accommodation.

• Maintain composure under pressure and consistently meet deadlines with internal and external customers and contacts.

• Ability to interact appropriately and effectively with guests, management, other team members, and outside contacts.

• Work in a fast-paced and busy environment.

Role:

You will be part of the Security team (Governance, Risk and Compliance) and will work in a highly collaborative environment with cross-functional teams, to ensure compliance to the applicable regulatory requirements.

Responsibilities:

• Maintain cyber security policies, standards and procedures
• Manage and perform cyber risks and assessments
• Develop cyber risk documents
• Mitigate cyber security risks
• Conduct research on emerging cyber security & risk management trends, issues and alerts
• Track and monitor new security regulatory guidelines, and assess the compliance of and impact to the organization
• Assess the security deviations and risk acceptance raised by other business units
• Review and update cybersecurity risk assessment methodology and conduct cybersecurity risk assessment for critical systems
• Track remediation efforts for security & audit deficiencies

Requirements:

• Degree or Diploma in Computer Science, Computer Engineering or Information Security related fields
• At least 5 years’ of experience working in technology and/or cybersecurity governance
• Working experience in a highly regulated environment is preferred
• Strong understanding and familiarity with regulatory requirements such as IM8, MAS Notice on TRM, MAS Notice on Cyber Hygiene, MAS Technology Risk Management Guidelines, MAS Outsourcing Guidelines and the CSA Cybersecurity Code of Practice
• Strong understanding of NIST Cybersecurity Framework
• Cybersecurity professional qualifications such as CISSP, CISM, CRISC, CISA, GSEC, CCSK or equivalent would be advantageous
• Familiar with emerging technologies and possess an interest to stay abreast of industry developments (e.g. DevOps, Cloud, APIs, service-oriented architectures etc).
• Proficiency with application development experience and programming/coding/Powershell scripting will be an advantageous
• Prior experience in implementing Cybersecurity products such as IAM tools is a plus

Interested candidates are requested to send their resumes to [email protected] with current, expected salaries, notice period etc

• Providing legal advice on public procurement related activities and participating in multi-disciplinary task force for public tenders
• Negotiation, drafting, analysis, and review of various commercial agreements (distribution, agency, license, services, etc.) 
• Management of litigation in close cooperation with local lawyers
• Advising the subsidiaries on an occasional basis on a variety of legal matters relating to e.g. competition law, financing solutions, social law and HR matters in order to harmonize good legal practices
• Contribute to elaborate various internal policies and procedures
• Risk management
• Provide training and guidance to the business