Company Overview

Kiteworks’ mission is to empower organizations to effectively manage risk in every send, share, receive, and save of sensitive content. To this end, we created a platform that delivers content governance, compliance, and protection to customers. The platform unifies, tracks, controls, and secures sensitive content moving within, into, and out of their organization, significantly improving risk management and ensuring regulatory compliance on all sensitive content communication.

Kiteworks is carrying its bold vision forward while maintaining strong profitability and growth. This is a perfect time to join the company as it moved into a high growth phase and there are many opportunities to make a meaningful contribution to its future.

The Role

We are looking for a highly driven, talented, and self-motivated Application Security Engineer to be part of our growing application security team. You will be part of a team that is up to date on emerging security vulnerabilities and threats, and works toward improving the security of our products.

Key Responsibilities

• Perform threat modelling using STRIDE on the product before each release.
• Consult in design and security reviews of all new features developed.
• Conduct product code reviews
• Conduct white box security scans; harden systems and the application platform.
• Document security fixes and assist customer support with security advisories.
• Maintain documentation and file CVEs.
• Verify and recommend fixes for security issues.
• Analyze reported vulnerabilities; perform impact analysis and risk determination using CVSS vulnerability rating methods.

Requirements

• Bachelor’s or master’s degree in computer science or computer engineering, ideally with a specialization in cybersecurity.
• 3+ years of application security-related work experience.
• An analytical mind with outstanding problem-solving skills and strong attention to detail.
• Experience running and interpreting results from SAST and DAST tools
• Experience with Linux system hardening, implementing CIS security standards.
• Experience with PHP and Python.
• Experience with blue team tasks, such as DFIR and security hardening.
• Experience with AWS and Azure is a plus.
• Security-related certifications, such as SANS, are a plus.
• Excellent written and oral communication skills.
• Excellent interpersonal skills and the ability to articulate to both technical and non-technical audiences.
• Passion for Kitework’s space and mission.

Compensation/Perks

You will be rewarded with a competitive compensation package, including excellent benefits and stock options. Other benefits include: medical, dental, and 18 days of PTO, going up to 21 days after 3 years.

Job Overview

• Perform Analytical Plan, Coordinate and Implement all change requests on existing network equipment.
• Provide technical support, propose solutions and project related queries for all Wired, Wireless network.
• Maintain records of system details (e.g. configuration, changes, problems, disaster recovery document) for network equipment.
• Manage enterprise firewalls from brands like Fortinet and Palo Alto
• Manage a wide variety of networking brands such as, Extreme Networks, Aruba and Juniper

Job Descriptions:

• Gather business and/or application requirements on the infrastructure to plan, design, install, test & implement systems in accordance with the specifications & service level.
• Aligned or enhanced ITSM/ITIL methodologies in daily operations e.g. Change, Incident, problem, release management & CMDB.
• Monitor & measure the performance & availability of systems proactively; implement corrective actions identified to improve performance & service level availability.
• Respond promptly to incident, root cause analysis & provide temporary and/or permanent resolution of incidents escalated. Provide timely status updates to relevant parties.
• Implement service continuity measures, i.e., backup/restore procedures & disaster recovery plan, to ensure continuous operation of the business.
• Create and maintain comprehensive documentation for all implemented networks.
• Assist in preparation of proposals and solution presentations.
• Attain key certifications for partnership with key vendors.

Qualifications:

• Bachelor’s degree in computer science or any related fields
• Preferably at least 2 years of experience in Checkpoint Firewall, Network (Routing and Switching), Firewall Administration and Operations
• Good interpersonal and communication skills
• Experience in managing multiple stakeholders preferred
• Result-oriented with the ability to work independently and under pressure
• A team player with a pleasant personality
• Dynamic and able to adjust in a fast-paced environment

Job Description

The successful candidate will join the Information Technology Division, System Technology department and will be responsible for managing Content Delivery Network (CDN) which includes Cyber Security, as well as administering Monitoring and Log Management Tools.

Key Responsibilities include:

• Work closely with CDN providers and application teams to ensure internet websites/mobile apps are healthy in terms of availability, response time and security posture.

• Conduct regular security reviews and finetune WAF and BOT rules to mitigate any cyber threats.

• Administer various monitoring and logging tools, which includes application onboarding and advanced configuration.

• Perform system administration activities such as troubleshooting, root cause analysis and implement corrective/preventive actions during and after an incident.

• Support audit and infrastructure/network security scans, disaster recovery and security related drills and operate within assigned fiscal budget.

• Build automation wherever possible to improve development team’s agility and reduce human errors.

• Explore, learn and deploy new technologies and provide training to the IT community within the company.

• This position requires periodic system administration outside normal business hours.

Requirements:

• Possess a degree in Information Technology or related fields.

• Minimum of 3 years of IT Infrastructure experience with at least 1 year of hands-on experience in managing the infrastructure of an eCommerce website.

• Experience with Akamai or equivalent CDN providers preferred.

• Demonstrate strong knowledge in infrastructure areas such as Content Delivery Network (CDN), Cyber Security (WAF and Bot Mitigation), internet protocols, DNS, virtual server technologies, networking (LAN, WAN, SDN), Integration and Messaging Platform, scripting and monitoring tools.

• Administrator experience with Application Performance Monitoring (APM) tools such as Dynatrace and Log Management System (LMS) such as Splunk.

• Conversant with infrastructure definition tools such as Cloud Formation and Terraform, and with YAML/JSON deployment templates.

• Strong analytical, project management, communications and interpersonal skills.

We thank all candidates for your interest in Singapore Airlines, and regret that only shortlisted candidates will be notified.

As a Network and Security Engineer (Level 3 Support), you will be responsible for providing advanced and in depth technical support and troubleshooting for network and security issues. You are required to have a very strong understanding of network infrastructure, security protocols, and the ability to work in a 24x7 environment.

What will you do?

• SME for Network and Security: Provide escalation support for Network (Cisco, Aruba, Alcatel, F5) and Security Products (Check Point, Palo Alto and Fortinet)
• Troubleshoot and Resolve Issues: Provide advanced to in-depth troubleshooting for network and security incidents, including routers, switches, firewalls, VPNs, and other network devices.
• Incident Response: Respond and resolve network and security incidents in a timely manner, ensuring minimal downtime and impact on operations and strict adherence to committed SLA. First responder to Priority 1 incidents and resolved incidents within OneCare contractual SLA
• Documentation: Maintain detailed documentation of network configurations, changes, and incidents. Create and update technical documentation and standard operating procedures.
• Collaboration: Work closely with Level 2 and Level 1 support teams, remote and field support network/security engineers to resolve complex issues and improve network performance.
• On-call Support: Provide 24x7 on-call support on a rotating basis, ensuring availability to address critical issues as they arise

The ideal candidate should possess:

• Diploma / Degree in Computer Science / Computer Engineering / Information Technology related field, or IT equivalent
• Preferably 5 or more years of working experience with focus on network and security support roles
• In depth knowledge of network protocols (TCP/IP, DNS, DHCP), network devices (routers, switches, firewalls), and security technologies (VPN and IDS/IPS)
• Deep understanding of packet capture analysis and network physical and logical topologies
• Strong verbal and written communication skills, with the ability to explain technical concepts to non-technical users.
• Ability to express oneself to stakeholders
• Willingness to work in a 24x7 environment, including nights, weekends, and holidays as needed

What you might also need to have:

• CCIE, CCNP, Alcatel (ACFE), F5, Aruba, Check Point, Palo Alto, or any relevant certifications

As a Network Security Engineer, you will provide Level 1.5 centralize technical support (Network, Cyber and Server) for all NCS clients.

What will you do?

• Participate in maintenance standby duty to cover 24x7 support on rotational basis as pre-assigned by the team lead
• Ensure SLA Level is achieved every single fault case.
• Ensure escalation is carried out when a fault call is beyond the knowledge of L1.
• Attend to daily call assignment when not in standby during office hours.
• Perform weekend or after office hours duty though not on standby if required.
• Attend to preventive maintenance not limited to hardware inventory.
• Follow up case from opening till closure.
• Update incident tickets properly and promptly.
• Get certifications required to support key customers.
• New assignment by Ops manager or TSM when needed.

The ideal candidate should possess:

• Diploma / Degree in Computer Science / Computer Engineering / Information Technology related field, or IT equivalent
• Preferably 2 or more years of IT working experience
• Basic Cisco and Alcatel switches/routers/wireless knowledge
• Basic network troubleshooting skills on layer 2 and layer 3
• Basic Network Security Knowledge
• Basic Server Administration Knowledge
• Certification in CCNA or any other network certifications will be value-add
• Possess initiative and disposition with a strong commitment and orientation towards results and high-quality standards
• Strong problem-solving skills and ability to think out of the box
• Team player with strong communication and interpersonal skills
• Self-motivator with a positive attitude and with high energy
• Customer focused
• Proficient in written and spoken English
• Able to travel as required

COMPANY DESCRIPTION

The Salvation Army has been touching lives in Singapore since 1935 and we remain committed in serving the underprivileged in the community without discrimination. To us, every life is precious and we actively help those in need regardless of age, race or religion.

We are looking out for committed & passionate individuals who are eager to make a difference to the society to join our organisation.

RESPONSIBILITIES

1. Develop and execute fundraising strategies to acquire, nurture, engage and retain donors. Research and implement new initiatives to increase donor database and income.
2. Individually achieve $300,000 in FY 24 based on accounts in TSA database. Bring in new strategic partners and accounts.
3. Relationship management - Build and nurture relationships and CSR programmes with major donors, corporations, trusts and foundations through.
4. Pro-actively acquire and identify potential new donors/partnerships to increase funding.
5. Assist in organising Charity Events 3-4 times a year.
6. Project/Event Management - Working with vendors, manage event and project budgets, conduct post-event evaluations.
7. Public facing that involves giving presentations to donors, organisations and foundations, as well as attending networking events and conferences to build network of donors and partners.
8. Copywrite for appeals.
9. Develop new channels/partnerships for fund raising through webinars and corporate outreach.
10. Increase yield of digital marketing channels.
11. Build and grow database year on year.
12. Prepare database for the mailing of all appeals, PIC newsletter, event invitations, annual reports, desktop calendars, electronic mailers and other mailing as and when required.

• Diploma/Degree in business, communications, public relations or marketing.
• Proven experience in fundraising, business development, mass. communications, digital marketing.
• Team player.
• Good organisation, communication, marketing and graphic designing skills.
• Able to work independently and flexibly, and manage multiple projects and tasks simultaneously.
• Must be IT savvy and adept at using various social media platforms.
• Proficient in Microsoft Office.
• Heart of compassion for the vulnerable.
• Willingness to persevere and target driven.

Working Location

Singapore Regional Headquarters - Public Relations Department

20 Bishan Street 22, Singapore, 579768

Working Hours

8.30am to 5.00pm, 5 day work week 

As a Server / Network Security Support Engineer, you are required to provide maintenance support to clients. You will play a key part in Technology Services Delivery team to ensure security solution maintained at the highest quality and standard

What will you do?

• Perform Preventive Maintenance on customers solution with accuracy and adhere to high quality of work
• Perform Corrective Maintenance on any fault calls reported and comply closely to project SLA
• Perform Patch Management support, plan and apply regular updates to mitigate vulnerabilities, OS patching and maintain system compliance
• Provide support to customer asset discovery, consolidation, tracking, updating and monitoring to ensure they are up-to-date
• Perform regular health checks and activities to ensure operational effectiveness for customers
• Provide and prepare technical maintenance documentation to be delivered for customers
• Work closely and collaboration with different stakeholders from internal teams to vendors to provide end to end of assigned task
• Work closely with Team Leader or Service Manager to meet customer delivery milestones
• Participate in maintenance standby duty to cover 24x7 support on rotational basis as pre-assigned by the team lead

The ideal candidate should possess:

• Diploma / ITE in Computer Science / Computer Engineering / Information Technology related field, or IT equivalent
• Typically 1-2 or more years of experience in IT domain and some experience in patching for Window environments
• Understanding of System/Servers and Network technology
• Knowledge of network system, network architecture, routing, switching, firewall and security
• Knowledge of technical vulnerability management (vulnerability assessment, penetration testing), security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment
• Certification in CCNA, CISSP or equivalent network or IT security certifications will be value-add
• Team player with strong communication and interpersonal skills
• Self-motivator with a positive attitude and with high energy
• Independent and customer focused
• Proficient in written and spoken English
• Able to travel as required

We are seeking motivated and dedicated Cybersecurity Analysts to join our 24/7 Security Operations Center (SOC). The successful candidates will focus on continuous monitoring of security events, initial incident response, and vulnerability management. Ideal candidates should have 3-4 years of experience in cybersecurity, an understanding of networking and IT domains, and a keen interest in continuous learning and professional growth.

Key Responsibilities:

• Continuously monitor security events and alerts using SIEM tools and other security technologies.
• Perform initial triage of security incidents and escalate as necessary.
• Conduct basic analysis to identify and mitigate potential security threats.
• Read, understand, and act upon cyber advisories from government source, following SOPs and instructions closely.
• Verify advisory requirements, check inventory, and communicate with system owners to confirm tool usage.
• Check old advisory emails and SharePoint records to prevent redundant inquiries.
• Collaborate with Tier 2 and Tier 3 analysts for complex incident resolution.
• Provide incident response phone support following SOPs and workflows.
• Conduct health checks for various SOC systems, ensuring they are functioning correctly.
• Maintain detailed records of security incidents and actions taken.
• Participate in shift rotations to ensure 24/7 coverage.
• Perform regular updates, checks, and removal of outdated Handover and Takeover (HOTO) emails to ensure all 24/7 analysts are in sync.
• Provide support for vulnerability assessments and remediation efforts.
• Stay current with the latest cybersecurity trends, threats, and best practices.

Requirements:

Educational Background:

• Relevant certifications such as CISSP, CISM, CEH, CompTIA Security+, or SANS/GIAC are highly preferred.

Experience:

• 3-4 years of experience in cybersecurity, focusing on incident detection and response.
• Experience with Security Information and Event Management (SIEM) systems.

Technical Skills:

• Understanding of security technologies and network security.
• Skills in vulnerability management and mitigation.
• Ability to read and understand cyber advisories from government source.
• Familiarity with different cybersecurity and IT domains.
• Basic scripting and automation skills for security tasks.
• Experience in managing and securing endpoints.

Analytical and Problem-Solving Skills:

• Strong analytical skills to identify and mitigate security threats.
• Excellent problem-solving abilities to address complex security issues.

Communication and Training Skills:

• Ability to convey complex security information clearly and effectively.
• Willingness to participate in and conduct training programs for continuous improvement.

Adaptability and Continuous Learning:

• Commitment to staying current with cybersecurity trends and advancements.
• Motivation to learn and grow within the cybersecurity field.

Attention to Detail and Collaborative Skills:

• Keen observation skills to detect subtle security threats.
• Ability to work effectively in a team-oriented environment.

Desired Technical Skills

• SIEM Proficiency: Skilled in using SIEM tools such as IBM QRadar or Splunk for security event monitoring and analysis.
• Network Security: Experience with network security tools like Fortinet and Palo Alto firewalls.
• Automation Tools: Familiarity with Palo Alto XSOAR automation tools.
• ITSM: Knowledge of IT Service Management (ITSM) tools like ServiceNow.
• IT Domains: Basic understanding of Windows and Linux operating systems.
• Scripting and Automation: Basic proficiency in scripting for automating security tasks.
• Advisory Skills: Ability to understand and act upon cybersecurity advisories.

Work location: Ang Mo Kio

The Automation Team Engineer plays a crucial role in automating and orchestrating security processes to enhance the efficiency and effectiveness of our Security Operations Center (SOC) in a multi-client Managed Security Services Provider (MSSP) environment.

This role involves managing and optimizing SOAR and ticketing platforms, integrating diverse tools and technologies across on-premises and cloud environments, and ensuring seamless functionality of automated workflows.

As the Subject Matter Expert (SME) in automation, you will lead the design, development, and refinement of playbooks, align automation solutions with customer-specific requirements, and support SOC operations by identifying and implementing process improvements.
The position also requires advanced scripting capabilities and the ability to troubleshoot and resolve automation-related issues proactively.

This role demands a collaborative mindset, strong problem-solving skills, and a passion for continuous improvement in a fast-paced and dynamic environment. The ideal candidate thrives on reducing manual tasks through automation and is committed to delivering high-quality security services.

Key Responsibilities

Automation and Orchestration:

• Proactively design and implement automated workflows using SOAR and Ticketing platform to optimize security operations and reduce manual processes.
• Integrate various security tools and systems (e.g., SIEM, EDR, firewalls) into the SOAR platform to enable seamless interoperability.
• Act as the SME for automation-related issues, troubleshooting and resolving escalated problems promptly.

Playbook Development and Maintenance:

• Develop, update, and refine playbooks to meet client-specific requirements and operational goals.
• Ensure all playbook creations, updates, and changes are meticulously documented.
• Collaborate closely with the operations team, customer success managers, and threat detection teams to align input and output with requirements.

Scripting and Customization:

• Develop custom scripts, primarily in Python, to create unique integrations or enhance existing workflows.
• Identify and execute opportunities for automation across SOC processes, leveraging creative and innovative solutions.

Collaboration and Knowledge Sharing:

• Work closely with internal and customer teams to understand operational challenges and provide effective automation solutions.
• Deliver mentoring and training sessions to enhance team capabilities in leveraging automation tools.

Process Improvement:

• Continuously evaluate SOC workflows to identify areas for improvement and automation opportunities.
• Contribute to the standardization of processes to ensure the highest level of quality and efficiency.

Ad-Hoc and After-Hours Support:

• Provide support after office hours for critical SOAR-related issues and activations.
• Assist in any ad-hoc tasks as necessary to ensure smooth SOC operations.

Key Requirements

Technical Expertise:

• Hands-on experience with SOAR platforms, preferably Palo Alto XSOAR, Servicenow, and SIEM tools like QRadar, Splunk, or Azure Sentinel.
• Strong knowledge of scripting languages, particularly Python, with 2-5 years of practical experience.
• Familiarity with ITSM platforms like ServiceNow, including the SecOps module, is an advantage.

Cybersecurity Knowledge:

• Solid understanding of cyber-attack vectors, security threats, and mitigation techniques.
• Experience in SOC environments (1-3 years preferred) with exposure to incident response processes and tools.
• Knowledge of reverse engineering of software is a plus.

Problem-Solving and Analytical Skills:

• Proven ability to analyze issues, identify root causes, and implement effective solutions.
• A mindset geared toward continuous improvement and process automation.

Soft Skills:

• Excellent communication and collaboration skills, with the ability to work effectively in diverse, fast-moving environments.
• Strong attention to detail and a proactive approach to problem-solving.
• A team player with a preference for automated workflows over manual processes.

Certifications (Preferred):

• Palo Alto Cortex XSOAR certification.
• Industry certifications such as CISSP, CEH, or GCIH.

Work Environment:

• Willingness to work in a fast-paced environment with short turnaround times.
• Availability for after-hours support when needed to resolve SOAR-related issues.

Work location: Ang Mo Kio

1.Perform daily financial operations roles:

1. Handling of petty cash and daily expenses
2. Managing inward/outward payments and telegraphic transfers
3. Weekly updating of bank ledger for all bank accounts (excel)
4. Post sales invoices into Sage (accounting software) on monthly basis
5. Preparation of quarterly GST submissions and annual corporate tax submissions to IRAS
6. Perform reconciliation and provide supporting documents for audits annually to Chartered Public Accountant after AGM

2. Perform monthly closings, which consists of the following roles and responsibilities:

1. Bookkeeping, issuing, Bank reconciliation and filing invoices and payments bills timely
2. Accounts receivables and Accounts Payable review and reconcile sub ledger to general ledger and verify invoices timely and accurately
3. Handle full set of accounts
4. Preparation of monthly management accounts and annual financial statements in accordance with financial reporting standards

3. Payroll

1. Ensure headcount of 60 monthly and part-time staff salary payments via Sage Payroll System, together with reimbursement claims, are processed promptly.
2. Ensure compliance with local tax rules and local legislations for payroll, benefits, and leave administration
3. Monitor and approve submission of leave claims from Sage Employee Self Service System
4. Respond to staff enquiries for payroll matters
5. Submit employees’ income information to Inland Revenue Authority of Singapore via Auto-Inclusion Scheme.
6. Prepare and submit monthly contributions details to Central Provident Fund Board via Sage Payroll software.

4. Assist any other such daily/ general/ ad-hoc as assigned.

Requirements:

1. 5.5-day work week (Including Saturday, Sunday or Public Holiday)
2. Minimum Degree in Finance, Accounting or Business fields
3. 3-4 years of relevant experience preferred
4. Experience working in fast paced SME environment
5. Responsible to be on-call offsite during weekends and PH
6. Able to work independently with good initiative, self-motivated and a team player

Job Responsibilities:

• General Screening.
• Guarding and Patrolling.
• Access and Egress Control.
• Basic Incident Report.

Skills and Experience:

• 2 Basic Licensing units to be Security Officers.
• RTT – Recognise Terrorist Threats.
• WSQ – Handle security incidents and services.
• WSQ – Provide guard and patrols services.
• Those who are new but keen can join this industry may apply too.

- To answer occasional phone calls from public

- Station on Site to attend to feedbacks

- Attend monthly site meeting and prepare minutes of meeting

- Need to do site administration work:

Purchase orders, compilation of Delivery oders, Workers attendance and Work pass and safety course attendance

- Minimum 2 Years experience in public relations service or hospitalities and tourism field

- 5 Days work week

Site Office Location:

Ang Mo Kio

Overall Responsibilities:

As the senior security and client engagement officer, you will play a crucial role in execution of security plans and exercises within the premises. you will spearhead the implementation and enforcement of rigorous security protocols, ensuring the safety and well-being of our premises and occupants. Your pivotal role involves meticulous management of access control systems, diligent surveillance, and proactive incident handling.

Duties and Responsibilities:

• Ensure strict adherence to security plans, protocols, and SOPs.
• Conduct rigorous access control measures.
• Manage pass exchanges and oversee access card management.
• Implement comprehensive security surveillance within the work compound.
• Conduct vigilant patrols and monitor CCTV systems.
• Verify the authorization of all personnel present on the premises.
• Effectively manage incidents and promptly report them in the designated Group Chat.
• Assist in maintaining the overall cleanliness of the compound and coordinate janitorial support as needed.
• Report any malfunction or breakdown of facilities or machinery items (e.g., turnstiles, ceiling lights) to the SCC.
• Collaborate in Fire Safety Management during both drills and actual fire incidents.
• Undertake additional duties as assigned.
• Extend a professional welcome to and greet arriving tenants/guests.
• Assist with both phone and walk-in inquiries in a courteous manner.
• Deliver high-quality service to tenants/guests by responding promptly, efficiently, and courteously to their requests.
• Handle complaints and suggestions from tenants/guests with professionalism and courtesy.
• Acquire and maintain a comprehensive working knowledge to provide tenants/guests with information regarding directions, available services, and facilities when required.

Requirements:

• Able to commit to Shift Work
• Proven experience in security supervision.
• Knowledge of security protocols and emergency response procedures.
• Strong communication and interpersonal skills.
• Ability to handle incidents professionally and efficiently.
• Attention to detail in access control and surveillance.
• Customer service orientation.
• Problem-solving skills and ability to handle complaints.
• Flexibility to perform various duties as assigned.

Employee Benefits:

• Uniforms provided
• Leave entitlement as per MOM regulations
• Performance-based bonuses
• Health and medical insurance coverage

The AVP - Perimeter Security Build Engineer seats within the Perimeter Security Services Team, focusing on maintaining next generation, large scale perimeter security solutions for the enterprise globally. The purpose is to ensure the overall health and integrity of Citi’s network and perimeter defence.

In this role you will be responsible to work on various large scale security initiatives, establish and utilize processes for perimeter security lifecycle management, influence stakeholders and drive the general security posture along with various peer groups and organizations.

As an Perimeter Security Build Engineer you will

• Configure, deploy and integrate firewall and remote access infrastructure for Citi environment
• Work with aligned technology teams to ensure deployment and decommissioning of devices happen according to approved Citi standard build baselines
• Perform troubleshooting related to project rollouts
• Create and maintain documentation and reports for the configuration procedures & support checklists
• Perform process review, reengineering and standardization to ensure risk-free efficiency
• Work with perimeter security engineering and vendors on understanding and utilizing standard builds
• Participate in new product/solution testing and rollout

Ideal background

• 3+ years of experience with multiple security disciplines and understanding of perimeter security solutions and concepts
• Experience with Check Point, Juniper SSL and Palo Alto firewall solutions
• Unix / linux experience
• Advanced written and verbal English communications skills
• Stakeholder management skills, with ability to communicate with stakeholders of varying seniority across business and technical functions.
• University degree or certifications in a relevant cyber security / networking area

Benefits

• exposure to a broad range of investment technology businesses and products
• access to our world-class testing lab with physical hands on using hundreds of devices in the IT security ecosystem
• competitive compensation package
• access to Citi’s huge training database and subscription to external online trainings
• a socially active team and communities with diverse networking opportunities

Education:

• Bachelor’s degree/University degree or equivalent experience

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

• Providing leadership, direction and management of the finance and accounting matters in the Company
• Providing strategic recommendations to the Director and Management
• Managing the processes for financial forecasting and budgets, and overseeing the preparation of all financial reporting
• Advising on long-term business and financial planning
• Provide commercial insight and leadership across the business in order to exceed business plan targets
• Responsible for ensuring the risk and compliance management framework is embedded and operational for the Group
• Establishing and developing relations with external partners and stakeholders
• Reviewing all formal finance, HR and IT related procedures
• Reviewing of Hiring process and sustainabilty of Manpower
• Establishing of Automation to replace manpower wherever possible
• Implementation of better business development strategies to increase the current sales

Summary

The Regional Director Security Operations (RDSO) is responsible for leading a multi-disciplinary team that executes a global security operations program for a multi-national IT organization. Services provided include security operations, safety, budget and financial execution, logistics, and employee recruitment, onboarding and training. The security operations program is comprised of regional security man-guarding functions, a security operations center, development and management of security operations metrics, branch liaison, personnel management and driving key security operations projects and initiatives for datacenters on a multi $100M global Client account. Direct reports may include field based Regional Security Managers, as well as shared services/program management resources to include Regional Operations Coordinator, Security Design PMOs and other Security Operations personnel. The RDSO is accountable for datacenter security operations service delivery, enhancing safety culture, driving innovation and process change across the program and staff engagement and development. The RDSO is expected to advance operational security and business relevancy while collaborating with the client, fellow RDSOs, Securitas business divisions, associate contractors, global business partners, and other supporting teams. This position reports directly to the Global Director of Operations.

Essential Functions

1. Strategically aligns a multi-disciplinary team into a singular, cohesive group; prioritized to meet the client’s data center security operations requirements.
2. Anticipates, develops, drives, and operationalizes the business’ most strategic priorities to meet service requirements, exceed quality targets and optimize field security operations effectiveness.
3. Acts as a trusted advisor to the Global Director of Operations and Client directors while also facilitating a healthy rhythm of team and business operations forums.
4. Proactively manages the region’s multi-disciplinary team to effectively execute and communicate (inward and outward) the security operations scope, strategic goals and deliverables.
5. Create strong internal and external networks, ensuring alignment between the regional operations teams, the shared services platform, and the Client.
6. Nurture Client relationships and internal relationships across all pillars.
7. Ensures the multi-disciplinary regional team is functioning effectively and efficiently, with security operation non- negotiables, process enhancement and scalability at the forefront of decision-making.
8. Holds team members accountable for their commitments, removes roadblocks to their work, and leverages organizational resources to improve delivery.
9. Provides regular reports that communicate team performance, project delivery, progress to milestones, and impacts to service delivery, meeting required client SLAs and KPIs.
10. Acts as the Datacenter subject matter expert on Operations Standard Operating Procedures (SOP); evaluates effectiveness and adherence to the Operations SOP and provides recommendations for improvement.
11. Actively seeks and creates opportunities for collaboration across customers, partners, and internal groups to drive long- term solutions.
12. Leads program-wide projects and initiatives that encourage process improvement and innovation and the use of tools that support the program across teams.
13. Drives an effective and holistic approach to project completion and consistent communication and messaging.
14. Facilitates teamutilization of data analytics; leads development and execution of strategic, analytical frameworks and high- quality complex models and forecasts to guide operational decisions.
15. Create and deliver executive level presentations and dashboards on business strategy, insights, and execution to client senior management.

Performs additional functions, duties and specific tasks of a similar nature and scope as necessary to achieve assigned business objectives.

• The functions listed describe the business purpose of this job. Specific duties or tasks may vary and be documented separately. The employee might not be required to perform all functions listed. Additional duties may be assigned, and functions may be modified, according to business necessity.
• All assigned duties or tasks are deemed to be part of the essential functions, unless such duties or tasks are unrelated to the functions listed, in which case they are deemed to be other (non-essential) functions.
• Employees are held accountable for successful job performance. Job performance standards may be documented separately, and may include functions, objectives, duties or tasks not specifically listed herein.
• In performing functions, duties or tasks, employees are required to know and follow safe work practices, and to be aware of company policies and procedures related to job safety, including safety rules and regulations. Employees are required to notify superiors upon becoming aware of unsafe working conditions.
• All functions, duties or tasks are to be carried out in an honest, ethical and professional manner, and to be performed in conformance with applicable company policies and procedures. In the event of uncertainty or lack of knowledge of company policies and procedures, employees are required to request clarification or explanations from superiors or authorized company representatives.

Minimum Hiring Standards

Additional qualifications may be specified and receive preference, depending upon the nature of the position.

• Must have a reliable means of communication, such as cell phone.
• Must have a reliable means of transportation (public or private).
• Must hold or be able to obtain a valid driver’s license or equivalent.
• Must have the legal right to work in the country where the position is located.
• Must have the ability to speak, read, and write English proficiently.
• Must have a high school diploma, secondary education equivalent, or GED.
• Must be willing to participate in the Company’s pre-employment screening process, including drug screen and background investigation.

Education/Experience

• Bachelor’s degree in business, management or related field and 10-15 years of progressive management roles in physical security, contract security, or account management, or an equivalent combination of education and experience sufficient to perform the essential functions of the job, as determined by the company.
• 3-5 years of experience in a director level position.
• Datacenter experience a plus.

Special Requirements

• Able to travel (international or domestic, as required) approximately 25% of the time or more, occasionally with limited notice.
• Able to work evening or weekend hours when required, such as during an emergency event or crisis.

Competencies

• Ability to influence without authority and identify shared goals to achieve business objectives.
• Ability to provide positive direction and motivate performance.
• Ability to build relationships quickly and work collaboratively across multiple teams.
• Excellent oral and written communication skills required for preparing clear, concise, and grammatically correct materials and communicating information effectively to others.
• Experience communicating with the C-Level employee down to the entry-level employee
• Able to conduct presentations and facilitate group meetings, both in person and online.
• Ability to track and maintain scheduled assignments.
• Ability to maintain professional composure when dealing with unusual and stressful circumstances.
• Knowledge of business operations management and human resources administration.
• Demonstrates leadership skills, including planning, organizing delegating, problem solving, training, coaching, and praising or disciplining staff in a positive manner.
• Strong customer service and service delivery orientation.
• Ability to adapt to change in the external environment and organization.
• Ability to multi-task and complete assignments concurrently in a fast-paced environment.
• Experience communicating and presenting to an executive level audience.
• Knowledge of security operations and procedures applicable to a 24-hour facility.
• Knowledge of supervisory practices and procedures.

Working Conditions and Physical/Mental Demands

With or without reasonable accommodation, it requires the physical and mental capacity to effectively perform all essential functions. In addition to other demands, the demands of the job include:

• Required ability to manage multiple tasks concurrently.
• Computer usage, which may include prolonged periods of data analysis.
• Handling and being exposed to sensitive and confidential information.
• Regular talking and hearing.
• May be required to use vehicle in the performance of duties.
• Frequent lifting and/or moving up to 10 pounds, and occasionally up to 25 pounds.
• Close vision, distance vision, and ability to adjust focus.

This position is a contract position from Jan 2025 to July 2025 and is responsible for supporting the sales team in the preparation of sales quotations and tender preparations, and other sales support activities.

Responsibilities include supporting the project administrator when required, with project documentation and other project activities

Job Responsibilities

• Supporting Sales Team on preparing Sales quotations, Sales/Maintenace tender, catalogues and other document required for submissions, etc.
• The Sales Administrator is responsible for the following specific responsibilities:
  - To support all the sales functions of the department.
  - Regularly review tender portals, industry publications, and network contacts for upcoming opportunities relevant to our business.
  - Registration of site/tender brief and provide timely feedback to Sales Personnel of any change of schedule.
  - Evaluate, document, record, highlight, and track/monitor critical/important clauses and deadlines for tender and quotation submission including entering key details such as submission dates, requirements and scope of work for each opportunity.
  - Assist the sales team promptly and efficiently with the timely submission of comprehensive tender bids and quotations.
  - Keeping standard tender and quotation submission documents for reference and easy retrieval including maintaining the formal for tender and quotation submission documents for quick access and reference.
  - Organize the storage of all sales inquiries and quotations in a tidy and easily retrievable system. This include managing the filling of all related sales inquiries and quotations in SharePoint to be in a traceable and organised manner.
  - Generate monthly sales reports.

Job Requirements

• Diploma in Administration or its equivalent
• With 2 to 3 years’ relevant experience in related industry
• Excellent organization skills and ability to multi-task
• Meticulous and pay great attention to detail
• Good communication and interpersonal skills
• A team player and work independently with minimum supervision
• Ability to interact and work with people of all levels
• Ability to work under pressure and meet tight deadlines.
• Proficient in MS Project and MS Office software

If you are keen to be part of our team and possess the above pre-requisites, kindly submit your detailed resume stating your current & expected salary via the button "APPLY NOW" to:

HR Department

Securitas Electronic Security Singapore Pte Ltd

To know more about us, please visit us at www.securitas-singapore.com.

(*we regret that only shortlisted candidates will be notified.)

Job Description:

• Assistant to Project Lead to manage and coordinate with CSIS vendors or Citi business stakeholders inclusive of attending/ initiating meetings and all to ensure we meet the scheduled timeline, stakeholders’ expectations, facilitate on the testing programs for the newly installed security systems
• Conduct site inspections and assesses the condition of the facility as well as propose the necessary requirements per Citi Security Standards
• Coordinate and facilitate our Citi Business stakeholders and provide guidance on the access card submissions and approvals etc.
• Conduct inventory checks for all completed projects, reviewing of floorplan system plotting diagram and updates. Supporting role function on finance administration mainly on project expense tracking
• Leading the execution works onsite, supervising the vendors and may also be the overall lead for small independent project works

Requirement:

• Minimum of at least 1 year working experience
• Minimum High School/ Diploma in any faculty
• Security certifications will be desirable
• Good communication, coordination skills both spoken and written. Able to command and manage vendors/ suppliers
• Must be able to work under a fast-paced environment, aggressive culture, and timeline
• Basic knowledge on security systems i.e. access control, CCTV, IDS
• Fundamentals of physical security and security system installation

Responsibilities:

• Designing, implementing, and managing security solutions to protect against cyber threats while ensuring seamless IT Infrastructure, Servers and Applications performance.
• Continuously optimize existing IT Infrastructure, Servers and Applications security policies and models, monitor and respond to threat detection event alerts and response handling, and enhance overall detection levels and coverage.
• Be responsible for vulnerability management (CVE, CVSS, OWASP Top 10), container, network & systems security, as well as cloud security tools and services
• Design, configure, and maintain firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and other security devices.
• Monitor and analyze security events and logs to identify potential vulnerabilities and incidents.
• Threat Prevention & Incident Response: Identify, investigate, and resolve security breaches and incidents.
• Develop and implement strategies to mitigate identified risks and vulnerabilities.
• Ensure all compliance and security control functions are performed timely and orderly.
• Drive continuous improvement of procedures and processes related to cybersecurity process and operations monitoring.
• Conduct regular audits of IT Infrastructure, Servers and Applications security to ensure compliance with security policies.
• Maintain compliance with industry standards such as ISO 27001, GDPR, or SOC 2.
• Create and maintain detailed network diagrams and security documentation.
• Work closely with IT teams to ensure robust security integration across systems.
• Educate employees on security best practices and emerging threats.
• Manage tools like SIEM, antivirus solutions, IDS/IPS and DLP software.
• Stay updated with the latest technologies, trends, and vulnerabilities in cybersecurity.

Requirements:

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Relevant certifications (e.g., CISSP, CEH, CCNP Security, Palo Alto PCNSA) are a plus but not mandatory.
• 7 to 12 years of experience in the designing, implementing, and managing of IT Infrastructure, Servers and Applications security according to industry standards such as ISO 27001, GDPR, or SOC 2.
• Expertise in one or more IT Security Engineering topics, such as Secure Browsing, PAM, PKI, or Multifactor Authentication.
• Proven ability to contribute to the development of architecture, concepts, and processes in IT security.
• Strong understanding of network protocols (TCP/IP, DNS, HTTP, etc.), firewalls, VPNs, intrusion detection / prevention systems (IDS/IPS), vulnerability management (CVE, CVSS, OWASP Top 10) and etc.
• Proficiency in firewall technologies (e.g., Fortinet, Palo Alto, Cisco ASA).
• Experience with vulnerability scanning tools and penetration testing.
• Experienced with cloud environments and cloud security principles. Knowledge in AWS/Azure cloud security tools and services.

Whether you’re at the start of your career or looking to discover your next adventure, your story begins here. At Citi, you’ll have the opportunity to expand your skills and make a difference at one of the world’s most global banks. We’re fully committed to supporting your growth and development from the start with extensive on-the-job training and exposure to senior leaders, as well as more traditional learning. You’ll also have the chance to give back and make a positive impact where we live and work through volunteerism.

Shape your Career with Citi

Citi’s Global Legal Affairs and Compliance (GLAC) empowers and protects Citi by providing legal, compliance, investigative, and security services to our firm. We manage compliance risk, provide legal analysis and advice, protect Citi’s people and businesses, advocate for legal and regulatory outcomes that benefit our firm and our clients, and ultimately promote behavior that is consistent with Citi’s mission and culture.

We’re currently looking for a high caliber professional to join our team as Officer, Legal Support Specialist 3 - Corporate Secretariat - Hybrid (Internal Job Title: Legal Support Specialist 3 - C11) based in, Singapore. Being part of our team means that we’ll provide you with the resources to meet your unique needs, empower you to make healthy decision and manage your financial well-being to help plan for your future. For instance:

• Citi provides programs and services for your physical and mental well-being including access to telehealth options, health advocates, confidential counseling and more. Coverage varies by country.
• We believe all parents deserve time to adjust to parenthood and bond with the newest members of their families. That’s why in early 2020 we began rolling out our expanded Paid Parental Leave Policy to include Citi employees around the world.
• Citi provides access to an array of learning and development resources to help broaden and deepen your skills and knowledge as your career progresses.

The Legal Support Specialist 3 is a developing professional role. Deals with most problems independently and has some latitude to solve complex problems. Integrates in-depth specialty area knowledge with a solid understanding of industry standards and practices. Good understanding of how the team and area integrate with others in accomplishing the objectives of the subfunction/ job family. Applies analytical thinking and knowledge of data analysis tools and methodologies. Requires attention to detail when making judgments and recommendations based on the analysis of factual information. Typically deals with variable issues with potentially broader business impact. Applies professional judgment when interpreting data and results. Breaks down information in a systematic and communicable manner. Developed communication and diplomacy skills are required in order to exchange potentially complex/sensitive information. Moderate but direct impact through close contact with the businesses' core activities.

Quality and timeliness of service provided will affect the effectiveness of own team and other closely related teams.

The successful incumbent will be working closely with the Company Secretary and expected to handle the following key responsibilities to provide high quality, professional company secretarial support for all the Singapore entities as well as supporting the Asia South Corporate Governance outsourcing related function.

In this role, you’re expected to:

• Provide comprehensive corporate secretarial support to a number of boards and board committees, including liaison with various stakeholders, preparation of agendas, creation and collation of board packs, taking minutes following up on action points and providing governance advice.
• Scheduling the board and board committee calendars, seeking and monitoring director availability for additional meetings as and when necessary.
• Maintain proper documentation of corporate governance activities and processes, including updating and maintaining the statutory registers and databases for all the Singapore legal entities.
• Ensuring compliance with relevant statutory and regulatory requirements including necessary filings with the regulators.
• Monitoring the effectiveness and appropriateness of the corporate governance framework of each legal entity.
• Provide administrative support to the board of directors and company secretary.
• Undertaking ad hoc projects as and when assigned.
• 
  

As a successful candidate, you’d ideally have the following skills and exposure:

• A recognized tertiary education or an Associate member of the Institute of Chartered Secretaries and Administrators with at least 4 years of relevant corporate secretarial experience in the banking or finance industry.
• Ability to multi-task and function effectively in a dynamic environment.
• Strong knowledge and understanding of the corporate secretariat work and corporate governance principle.
• Strong knowledge of relevant regulations and directive of financial institutions would be an advantage.
• Meticulous with good organizational and time management skills.
• Proficient in Microsoft Office suite of tools.
• A team worker with ability to work independently.
• Excellent written and spoken communication skills.
• Good rapport building skills, accuracy, attention to details, flexibility, and the ability to prioritize work.

Working at Citi is far more than just a job. A career with us means joining a family of more than 230,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Take the next step in your career, apply for this role at Citi today!

https://jobs.citi.com/dei

Job Description

You will be a member of the Group Information Security Team responsible for initiating, implementing, and maintaining security products and solutions to support enterprise security.

Key Responsibilities:

•Subject matter expert (SME) for the security systems owned by the Information Security Team.

•Ensure security systems are utilized to their maximum capabilities.

•Plan, identify, assess, design, operationalize, and maintain multiple security-related software and/or hardware.

•Recommend and drive cyber security solutions and initiatives to improve the cyber security of the organization.

•Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.

•Provide security consultancy, technical guidance, expertise, solutions, and education.

•Advise infrastructure teams on security design that is relevant and fit for purpose.

•Identify and assess cyber risks in the IT infrastructure environment.

•Review firewall requests.

•Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines, and deliverables.

•This is an individual contributor role. Deliver tasks with minimal supervision.

•Provide AUDIT support such as PCI-DSS, and Cyber Maturity Assessment.

•Strong communication skills.

•Coordinate and Deploy SIA Group/GIT cybersecurity initiatives in Scoot.

Requirements:

•Degree in IT or related field, with at least 5 years in information security, especially in the cybersecurity space.

•Professional security certifications (SANS, CISSP, CEH, OSCP, CISA, etc) preferred.

•Experience in security products POC and RFQ.

•Prior experience in implementing and maintaining any of the tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM, etc., and/or network security. Able to review firewall requests.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

•Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience is preferred.

•Knowledge of cyber security threats, vulnerabilities, hacking, exploit methods, etc.

•Strong oral, written, presentation, and inter-personal skills.

•Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

Role Description

AtomIT Networks Pte Ltd is seeking a highly skilled and motivated Cyber Security Engineer to join our team in Singapore. This is a full-time, on-site role requiring hands-on expertise in Cybersecurity operations and solutions delivery. The Cyber Security Engineer will play a pivotal role in safeguarding our clients' networks, systems, and data against sophisticated cyber threats and vulnerabilities. This position demands a dynamic professional capable of operating in a fast-paced environment with 24x7 standby responsibilities to respond to critical incidents and ensure uninterrupted security operations.

Key Responsibilities

• Design, implement, and manage robust cybersecurity measures to protect networks, applications, and systems.
• Regularly monitor latest cybersecurity news and proactively identify & mitigate potential security risks.
• Monitor and analyze network traffic, logs, and alerts to detect and respond to security incidents promptly.
• Collaborate with cross-functional teams to align security strategies with business objectives.
• Create and update detailed documentation, including implementation plan, procedures, and incident reports.
• Stay updated with emerging threats and security technologies to implement proactive defenses.
• Provide 24x7 standby duty support to address urgent security incidents and maintain system integrity.

Qualifications

• Proven expertise in Cybersecurity, Network Security, and Information Security.
• Proficiency in security technologies such as firewalls, SD-WAN, IDS/IPS, WAF, SIEM, ZTNA, SASE, EDR and etc.
• Familiarity with cloud security across platforms like AWS, Azure, or GCP.
• Relevant certifications such as Fortinet NSE, Cisco CCNP Security, CISSP, CEH, AWS & Azure Security Specialization, or equivalent are highly desirable.
• Strong analytical skills and the ability to troubleshoot complex security challenges.
• Excellent communication and collaboration skills with a proactive, detail-oriented mindset.
• Hands-on experience in Vulnerability Assessment, threat modeling, and risk analysis is a plus point.
• Bachelor's or Master's degree in Computer Science, Information Technology, or a related field.
• Priority will be given to Singapore Citizens and Permanent Residents.

We are hiring for Business Information Security Officer who will be responsible for driving information security efforts within the business unit or functional area.

Mandatory Skill Set:

• Serve as a point of contact for BISOs. providing guidance and support to various BUs;
• Ability to prioritize and provide necessary support on the security tasks for designated BUs;
• Offer regular updates or flag outstanding important issues to relevant stakeholders;
• Standardize information security process across BUS/countries. driving the adoption of best practices;
• Bridge gap between local technology or business team with GIS. able to articulate security risks to local teams and contribute back any feedback to GIS;
• Drive the learning culture within the information security team to accelerate skills and knowledge of the information security community.

Desired Skill Set:

• Possess at least one of the following certification CISSP. CCSP. CRISC. or CISM;
• Understand Cloud Infrastructure.

Responsibilities:

• Facilitate the investigation and management of security incidents for designated BUs and communicate to relevant stakeholders;
• Ensure clear documentation of the business justifications, risks, the existing mitigation controls (if any) and relevant approvals are in place;
• Support security assessment for technology solutions for designated BUs;
• Offer expertise to BUs with the help of Group Information Security (GIS) Subject Matter Expert (SME);
• Collaborate with enterprise risk management to conduct risk assessments and support the development of risk treatment plans for the BUs;
• Facilitate the local implementation of group information security initiative for the designated BUs;
• Assist with the security awareness programs for designated BUs to enforce security culture and understand the information security solutions in BUs;
• Help to develop the Business Information Security Officer (BISO) framework / handbook outlining BISOs roles and responsibilities. This standardizes practice across the organization;
• Establish and maintain BISO community to share insights or discussion of findings from audits, incidents, or latest security trend with each BUs to facilitate cross-learning and capture lessons teamed;
• Gather input or recommendations with regards to Group Information Security (GIS) functions and programs from BISOs across various countries/markets. Compile the feedback and contribute to GIS for continuous improvement of the Security Operation Model;
• Collaborate with security teams to develop and implement tailored security awareness programs for business units and devise a structured professional development pathway for BISOs.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE's website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

Key Responsibilities:
∙Coordinate with external vendors and collaborate with customers and SaaS providers to conduct IT Security Risk Assessments. Identify security threats, assess risks, and propose mitigation strategies for approval by the customer.
∙Coordinate the handling of security incidents, ensuring a timely response and resolution. Maintain a robust incident response process and documentation.
∙Manage and coordinate regular security audits, vulnerability scans, and penetration tests. Consolidate findings, ensure proper remediation, and provide feedback to stakeholders on risk mitigation efforts.
∙Maintain and update all security-related documentation, including policies, procedures, standards, and best practices. Ensure compliance with security frameworks such as ISO/IEC 27001, ISO/IEC 27018, SOC 2 Type 2, and CSA-STAR (Level 2).
∙Continuously monitor the security posture of the SaaS solution and related ICT systems. Provide regular reports on security risks and mitigation actions to stakeholders and customers.
∙Oversee the remediation of security vulnerabilities identified during security assessments, ensuring that appropriate actions are taken to address risks in a timely manner.
∙Provide clear, concise security reports and recommendations to customers, ensuring they understand the security posture of the SaaS solution and any risks or issues that need attention.
∙Take on ad-hoc security tasks as required to address emerging risks or assist with specific security projects or initiatives.

Qualifications:
∙Minimum of 3 years of experience in IT security, particularly in enterprise systems, cloud infrastructure, or SaaS environments.
∙A current professional information security certification (such as CISSP, CISM, CRISC, CGEIT, GSE) or equivalent is highly desirable.
∙In-depth knowledge of IT security management and governance, risk assessment, incident response, vulnerability assessments, penetration testing, and security audits.
∙Familiarity with international security standards and frameworks such as ISO/IEC 27001, ISO/IEC 27018, CSA-STAR, SOC 2 Type 2, NIST, and CIS.
∙Strong interpersonal, written, and verbal communication skills, with the ability to explain complex security concepts to non-technical stakeholders.
∙The position requires the candidate to be based locally.
∙Strong problem-solving skills and the ability to make decisions under pressure.
∙Proven ability to work effectively with cross-functional teams and external vendors.
∙Attention to detail and a commitment to maintaining the highest standards of security.

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions (both applications and infrastructure) are developed and designed with security inbuilt.

Key Responsibilities

•Provide security consultancy, technical guidance, expertise, solutioning and education for en-terprise.

•Advise application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

•Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

•Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

•Perform threat modelling on security critical applications. Keep up to date on emerging secu-rity threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews and audits to ensure security assurance is achieved.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables. This is an individual contributor role. Strong communication skills.

Requirements

•Degree in IT or related fields, with at least 5 years in information security, especially in the application security space.

•Professional security certifications (CISSP, CSSLP, CEH, CCSP etc) preferred.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.

•Strong in-depth working knowledge in secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), Software Compo-sition Analysis (SCA).

•Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud technolo-gies. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

•Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc. Any prior vulnerability management experience preferred.

•Strong oral, written, presentation and inter-personal skills.

•Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.