Principle Responsibilities:

• Work closely with the Security Operations Center (SOC) and Security Engineering teams to implement and improve existing SOC process automation
• Development of new tools, processes and procedures to enhance SOC monitoring and analysis capabilities
• Enhance current deployment of commercial tools used by Security Operations Center.
• Evaluate new technologies against SOC requirements in proof of concept

Requirements:

The candidate should have developer experience working in a Security Operations Center. He/she should have experience in web development with secure coding practices, and general knowledge of SOAR technologies. In addition to following experience:

• 5-8 years of relevant experience
• Bachelor's Degree or higher preferred
• Advanced proficiency with Microsoft Office tools and software
• Experience utilizing a SOAR platform with SIEM and case management solution
• Experience with various scripting languages - Python, PHP, etc.
• Experience working in a SOC environment and familiar with SOC Incident Response process
• Consistently demonstrates clear and concise written and verbal communication
• Proven influencing and relationship management skills
• Proven analytical skills
• Team player with the ability to work independently

Qualifications:

• Consistently demonstrates clear and concise written and verbal communication
• Proven influencing and relationship management skills
• Proven analytical skills

Education:

• Bachelor’s degree/University degree or equivalent experience

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

Job Description

You will be a member of the Group Information Security Team responsible for initiating, implementing, and maintaining security products and solutions to support enterprise security.

Key Responsibilities:

•Subject matter expert (SME) for the security systems owned by the Information Security Team.

•Ensure security systems are utilized to their maximum capabilities.

•Plan, identify, assess, design, operationalize, and maintain multiple security-related software and/or hardware.

•Recommend and drive cyber security solutions and initiatives to improve the cyber security of the organization.

•Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.

•Provide security consultancy, technical guidance, expertise, solutions, and education.

•Advise infrastructure teams on security design that is relevant and fit for purpose.

•Identify and assess cyber risks in the IT infrastructure environment.

•Review firewall requests.

•Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines, and deliverables.

•This is an individual contributor role. Deliver tasks with minimal supervision.

•Provide AUDIT support such as PCI-DSS, and Cyber Maturity Assessment.

•Strong communication skills.

•Coordinate and Deploy SIA Group/GIT cybersecurity initiatives in Scoot.

Requirements:

•Degree in IT or related field, with at least 5 years in information security, especially in the cybersecurity space.

•Professional security certifications (SANS, CISSP, CEH, OSCP, CISA, etc) preferred.

•Experience in security products POC and RFQ.

•Prior experience in implementing and maintaining any of the tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM, etc., and/or network security. Able to review firewall requests.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

•Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience is preferred.

•Knowledge of cyber security threats, vulnerabilities, hacking, exploit methods, etc.

•Strong oral, written, presentation, and inter-personal skills.

•Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

Job Description

You will be a member of the Group Information Security Team responsible for responding to threats and incidents to the corporate networks, systems (on-prem and cloud) and digital assets.

Key Responsibilities:

• Act as the subject matter expert (SME) for the security systems owned by the security team.

• Recommend and drive cyber security solutions and initiatives to improve the organization's cyber security posture.

• Lead and drive major incidents towards mitigation and resolution in collaboration with multiple internal counterparts.

• Ensure excellent communication to stakeholders, providing timely and accurate updates during incidents.

• Respond to, assess, and investigate security events in collaboration with vendors.

• Coordinate with internal stakeholders such as applications, network, and infrastructure teams for investigations.

• Perform in-depth analysis and assess vulnerabilities, IOCs, cyber security intelligence, and open-source information to validate security risks and impacts, recommending appropriate countermeasures.

• Develop and maintain cyber incident response and handling playbooks for various threat scenarios.

• Recommend and implement tools to enhance detection, response, and recovery functions and overall security posture.

• Develop methodologies to identify threat adversary tactics, techniques, and procedures.

• Stay abreast of new and emerging cyber threats, attack vectors, etc., and assess their impact.

• Provide strategic guidance and oversight to vendors, ensuring adherence to agreed-upon SLAs and KPIs.

• Guide and mentor junior staff within the security operations team, providing support as needed.

• Perform any relevant ad-hoc duties as required.

Requirements:

• Degree in IT or related fields, with at least 6 years of relevant information security working experience.

• Professional security certifications (CISSP, CISA, CEH, GCIH, etc.) preferred.

• Hands-on experience with SIEM, EDR, XDR, UEBA and SOAR tools preferred.

• Strong in-depth working knowledge in Networking, Cloud, Active Directory, Windows and UNIX platforms, and Mitre framework.

• Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods, etc.

• Strong oral, written, presentation, and interpersonal skills.

• Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

• Able to work independently and in a team-oriented, collaborative environment.

• Experience in guiding and mentoring junior staff within a security operations team.

• Candidates will be considered for a senior role commensurate with their experience.

Job Summary

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

Mandatory Skill-set

• 5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;
• Strong knowledge of ISO 27001:2022 standards and requirements;
• Experience in developing and maintaining comprehensive project plans, including timelines and milestones;
• Experience in managing ISO 27001-related risks and conducting internal/external audits;
• Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

Desired Skill-set

• ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;
• PMP, CISSP, CISM, or similar certifications are a plus;

Responsibilities

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

Job Description

You will be a member of the Group Information Security Team responsible for responding to threats and incidents to the corporate networks, systems (on-prem and cloud), and digital assets.

Key Responsibilities:

•Perform security monitoring and incident response activities across the scoot networks, leveraging a variety of tools and techniques.

•Manage Security Operations center.

•Detect incidents through proactive “hunting” across security-relevant data sets.

•Ability to correlate multiple events from different devices to identify abnormal behaviour

•Document incident response analysis activities thoroughly

•Develop new, repeatable methods for finding malicious activities

•Provide recommendations to enhance detection and protection capabilities.

•Effectively present technical topics to both technical and non-technical audiences

•Develop and follow detailed operational processes and procedures to appropriately analyze, escalate, and assist in the remediation of information security incidents

•Prioritize multiple high-priority tasks and formulate responses/recommendations in a fast-paced environment

•Prepare documentation for security technical standards, standard operational procedures, and hardening standards.

•Analyse endpoint, network, and application logs

•Assist other IT teams in security-related issues

•Engage with vendors and parent company SIA team members for security reviews.

Requirements:

•Degree in Computer Engineering, Computer Science, Information Systems, or equivalent qualification.

•At least 5-6 years of experience in Cybersecurity Incident and Security Operations.

•Demonstrate experience in Information Security with a focus on Cyber Security Operations, Incident Response and Detection.

•Experience working in the Security Operations Centre and/or Computer Incident Response Team.

•Excellent problem-solving skills combined with hands-on experience doing root cause analysis and post-incident reviews.

•Solid knowledge of computer networks and common protocols

•Knowledge of prominent cyber threat actors and APT groups.

•Experience with Threat Intelligence Platforms.

•Experience with SIEM (especially Splunk).

•Professional security related qualifications (i.e. GCIA, CISSP etc) will be an advantage

•Preferred certifications: CISSP, CISM, CISA, ISMS, TOGAF, SABS

•Good interpersonal skills

Job Summary:

The Head of Security Services will lead and manage the security services offered by the Systems Integrator (SI) organization. This role involves developing and executing security strategies, overseeing security operations, and ensuring the protection of client information and infrastructure. The ideal candidate will have extensive experience in security management, risk assessment, and a deep understanding of security technologies and compliance.

Key Responsibilities:

• Develop and implement a comprehensive security services strategy aligned with the organization's objectives and client needs.
• Identify opportunities for expanding security services and developing new offerings based on market trends and client needs.
• Develop and present proposals, including security solutions and cost estimates, to support business development efforts.
• Stay updated on the latest security trends, threats, and technologies to ensure the organization’s security services are cutting-edge and effective.
• Build and maintain strong relationships with clients, understanding their security needs and delivering tailored solutions.
• Serve as the primary point of contact for all security-related matters, ensuring clear communication and alignment with client requirements.
• Collaborate with internal teams and clients to develop and implement security policies and practices.
• Oversee the day-to-day management of security operations, including threat detection, incident response, and vulnerability management.
• Ensure the effective deployment and maintenance of security technologies, including firewalls, intrusion detection systems, and encryption tools.
• Monitor security systems and processes, responding to security incidents and conducting root cause analyses.
• Lead, mentor, and develop a team of security professionals, including security analysts, engineers, and incident responders.
• Foster a culture of security awareness and continuous improvement within the team.
• Provide training and development opportunities to enhance team skills and knowledge.

Qualifications:

Education:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field. A master’s degree or relevant certifications (e.g., CISSP, CISM, CISA) are preferred.

Experience:

• Minimum of 8-10 years of experience in security management, with at least 5 years in a leadership role within a systems integration or IT consulting environment.
• Proven track record of managing complex security projects and client engagements.

Technical Skills:

• Extensive knowledge of security technologies, including network security, application security, and data protection.
• Proficiency in security frameworks and standards (e.g., NIST, ISO 27001).

Key Skills:

• Strong leadership and team management capabilities
• Excellent client-facing and communication skills
• Strategic thinking with the ability to translate strategy into actionable goals.
• Expertise in risk management and incident response
• Ability to manage multiple priorities and projects in a dynamic environment.

Preferred Qualifications:

• Experience with advanced security technologies such as AI-driven threat detection and cloud security solutions.
• Knowledge of industry-specific compliance requirements (e.g., GDPR, HIPAA)
• Experience in a client-facing role within a Systems Integrator (SI) organization.

Company Overview

Kiteworks’ mission is to empower organizations to effectively manage risk in every send, share, receive, and save of sensitive content. To this end, we created a platform that delivers content governance, compliance, and protection to customers. The platform unifies, tracks, controls, and secures sensitive content moving within, into, and out of their organization, significantly improving risk management and ensuring regulatory compliance on all sensitive content communication.

Kiteworks is carrying its bold vision forward while maintaining strong profitability and growth. This is a perfect time to join the company as it moved into a high growth phase and there are many opportunities to make a meaningful contribution to its future.

The Role

We are looking for a highly driven, talented, and self-motivated Application Security Engineer to be part of our growing application security team. You will be part of a team that is up to date on emerging security vulnerabilities and threats, and works toward improving the security of our products.

Key Responsibilities

• Perform threat modelling using STRIDE on the product before each release.
• Consult in design and security reviews of all new features developed.
• Conduct product code reviews
• Conduct white box security scans; harden systems and the application platform.
• Document security fixes and assist customer support with security advisories.
• Maintain documentation and file CVEs.
• Verify and recommend fixes for security issues.
• Analyze reported vulnerabilities; perform impact analysis and risk determination using CVSS vulnerability rating methods.

Requirements

• Bachelor’s or master’s degree in computer science or computer engineering, ideally with a specialization in cybersecurity.
• 3+ years of application security-related work experience.
• An analytical mind with outstanding problem-solving skills and strong attention to detail.
• Experience running and interpreting results from SAST and DAST tools
• Experience with Linux system hardening, implementing CIS security standards.
• Experience with PHP and Python.
• Experience with blue team tasks, such as DFIR and security hardening.
• Experience with AWS and Azure is a plus.
• Security-related certifications, such as SANS, are a plus.
• Excellent written and oral communication skills.
• Excellent interpersonal skills and the ability to articulate to both technical and non-technical audiences.
• Passion for Kitework’s space and mission.

Compensation/Perks

You will be rewarded with a competitive compensation package, including excellent benefits and stock options. Other benefits include: medical, dental, and 18 days of PTO, going up to 21 days after 3 years.

Job Description

The successful candidate will join the Information Technology Division, System Technology department and will be responsible for managing Content Delivery Network (CDN) which includes Cyber Security, as well as administering Monitoring and Log Management Tools.

Key Responsibilities include:

• Work closely with CDN providers and application teams to ensure internet websites/mobile apps are healthy in terms of availability, response time and security posture.

• Conduct regular security reviews and finetune WAF and BOT rules to mitigate any cyber threats.

• Administer various monitoring and logging tools, which includes application onboarding and advanced configuration.

• Perform system administration activities such as troubleshooting, root cause analysis and implement corrective/preventive actions during and after an incident.

• Support audit and infrastructure/network security scans, disaster recovery and security related drills and operate within assigned fiscal budget.

• Build automation wherever possible to improve development team’s agility and reduce human errors.

• Explore, learn and deploy new technologies and provide training to the IT community within the company.

• This position requires periodic system administration outside normal business hours.

Requirements:

• Possess a degree in Information Technology or related fields.

• Minimum of 3 years of IT Infrastructure experience with at least 1 year of hands-on experience in managing the infrastructure of an eCommerce website.

• Experience with Akamai or equivalent CDN providers preferred.

• Demonstrate strong knowledge in infrastructure areas such as Content Delivery Network (CDN), Cyber Security (WAF and Bot Mitigation), internet protocols, DNS, virtual server technologies, networking (LAN, WAN, SDN), Integration and Messaging Platform, scripting and monitoring tools.

• Administrator experience with Application Performance Monitoring (APM) tools such as Dynatrace and Log Management System (LMS) such as Splunk.

• Conversant with infrastructure definition tools such as Cloud Formation and Terraform, and with YAML/JSON deployment templates.

• Strong analytical, project management, communications and interpersonal skills.

We thank all candidates for your interest in Singapore Airlines, and regret that only shortlisted candidates will be notified.

Overall Responsibilities:

As the senior security and client engagement officer, you will play a crucial role in execution of security plans and exercises within the premises. you will spearhead the implementation and enforcement of rigorous security protocols, ensuring the safety and well-being of our premises and occupants. Your pivotal role involves meticulous management of access control systems, diligent surveillance, and proactive incident handling.

Duties and Responsibilities:

• Ensure strict adherence to security plans, protocols, and SOPs.
• Conduct rigorous access control measures.
• Manage pass exchanges and oversee access card management.
• Implement comprehensive security surveillance within the work compound.
• Conduct vigilant patrols and monitor CCTV systems.
• Verify the authorization of all personnel present on the premises.
• Effectively manage incidents and promptly report them in the designated Group Chat.
• Assist in maintaining the overall cleanliness of the compound and coordinate janitorial support as needed.
• Report any malfunction or breakdown of facilities or machinery items (e.g., turnstiles, ceiling lights) to the SCC.
• Collaborate in Fire Safety Management during both drills and actual fire incidents.
• Undertake additional duties as assigned.
• Extend a professional welcome to and greet arriving tenants/guests.
• Assist with both phone and walk-in inquiries in a courteous manner.
• Deliver high-quality service to tenants/guests by responding promptly, efficiently, and courteously to their requests.
• Handle complaints and suggestions from tenants/guests with professionalism and courtesy.
• Acquire and maintain a comprehensive working knowledge to provide tenants/guests with information regarding directions, available services, and facilities when required.

Requirements:

• Able to commit to Shift Work
• Proven experience in security supervision.
• Knowledge of security protocols and emergency response procedures.
• Strong communication and interpersonal skills.
• Ability to handle incidents professionally and efficiently.
• Attention to detail in access control and surveillance.
• Customer service orientation.
• Problem-solving skills and ability to handle complaints.
• Flexibility to perform various duties as assigned.

Employee Benefits:

• Uniforms provided
• Leave entitlement as per MOM regulations
• Performance-based bonuses
• Health and medical insurance coverage

The AVP - Perimeter Security Build Engineer seats within the Perimeter Security Services Team, focusing on maintaining next generation, large scale perimeter security solutions for the enterprise globally. The purpose is to ensure the overall health and integrity of Citi’s network and perimeter defence.

In this role you will be responsible to work on various large scale security initiatives, establish and utilize processes for perimeter security lifecycle management, influence stakeholders and drive the general security posture along with various peer groups and organizations.

As an Perimeter Security Build Engineer you will

• Configure, deploy and integrate firewall and remote access infrastructure for Citi environment
• Work with aligned technology teams to ensure deployment and decommissioning of devices happen according to approved Citi standard build baselines
• Perform troubleshooting related to project rollouts
• Create and maintain documentation and reports for the configuration procedures & support checklists
• Perform process review, reengineering and standardization to ensure risk-free efficiency
• Work with perimeter security engineering and vendors on understanding and utilizing standard builds
• Participate in new product/solution testing and rollout

Ideal background

• 3+ years of experience with multiple security disciplines and understanding of perimeter security solutions and concepts
• Experience with Check Point, Juniper SSL and Palo Alto firewall solutions
• Unix / linux experience
• Advanced written and verbal English communications skills
• Stakeholder management skills, with ability to communicate with stakeholders of varying seniority across business and technical functions.
• University degree or certifications in a relevant cyber security / networking area

Benefits

• exposure to a broad range of investment technology businesses and products
• access to our world-class testing lab with physical hands on using hundreds of devices in the IT security ecosystem
• competitive compensation package
• access to Citi’s huge training database and subscription to external online trainings
• a socially active team and communities with diverse networking opportunities

Education:

• Bachelor’s degree/University degree or equivalent experience

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

Summary

The Regional Director Security Operations (RDSO) is responsible for leading a multi-disciplinary team that executes a global security operations program for a multi-national IT organization. Services provided include security operations, safety, budget and financial execution, logistics, and employee recruitment, onboarding and training. The security operations program is comprised of regional security man-guarding functions, a security operations center, development and management of security operations metrics, branch liaison, personnel management and driving key security operations projects and initiatives for datacenters on a multi $100M global Client account. Direct reports may include field based Regional Security Managers, as well as shared services/program management resources to include Regional Operations Coordinator, Security Design PMOs and other Security Operations personnel. The RDSO is accountable for datacenter security operations service delivery, enhancing safety culture, driving innovation and process change across the program and staff engagement and development. The RDSO is expected to advance operational security and business relevancy while collaborating with the client, fellow RDSOs, Securitas business divisions, associate contractors, global business partners, and other supporting teams. This position reports directly to the Global Director of Operations.

Essential Functions

1. Strategically aligns a multi-disciplinary team into a singular, cohesive group; prioritized to meet the client’s data center security operations requirements.
2. Anticipates, develops, drives, and operationalizes the business’ most strategic priorities to meet service requirements, exceed quality targets and optimize field security operations effectiveness.
3. Acts as a trusted advisor to the Global Director of Operations and Client directors while also facilitating a healthy rhythm of team and business operations forums.
4. Proactively manages the region’s multi-disciplinary team to effectively execute and communicate (inward and outward) the security operations scope, strategic goals and deliverables.
5. Create strong internal and external networks, ensuring alignment between the regional operations teams, the shared services platform, and the Client.
6. Nurture Client relationships and internal relationships across all pillars.
7. Ensures the multi-disciplinary regional team is functioning effectively and efficiently, with security operation non- negotiables, process enhancement and scalability at the forefront of decision-making.
8. Holds team members accountable for their commitments, removes roadblocks to their work, and leverages organizational resources to improve delivery.
9. Provides regular reports that communicate team performance, project delivery, progress to milestones, and impacts to service delivery, meeting required client SLAs and KPIs.
10. Acts as the Datacenter subject matter expert on Operations Standard Operating Procedures (SOP); evaluates effectiveness and adherence to the Operations SOP and provides recommendations for improvement.
11. Actively seeks and creates opportunities for collaboration across customers, partners, and internal groups to drive long- term solutions.
12. Leads program-wide projects and initiatives that encourage process improvement and innovation and the use of tools that support the program across teams.
13. Drives an effective and holistic approach to project completion and consistent communication and messaging.
14. Facilitates teamutilization of data analytics; leads development and execution of strategic, analytical frameworks and high- quality complex models and forecasts to guide operational decisions.
15. Create and deliver executive level presentations and dashboards on business strategy, insights, and execution to client senior management.

Performs additional functions, duties and specific tasks of a similar nature and scope as necessary to achieve assigned business objectives.

• The functions listed describe the business purpose of this job. Specific duties or tasks may vary and be documented separately. The employee might not be required to perform all functions listed. Additional duties may be assigned, and functions may be modified, according to business necessity.
• All assigned duties or tasks are deemed to be part of the essential functions, unless such duties or tasks are unrelated to the functions listed, in which case they are deemed to be other (non-essential) functions.
• Employees are held accountable for successful job performance. Job performance standards may be documented separately, and may include functions, objectives, duties or tasks not specifically listed herein.
• In performing functions, duties or tasks, employees are required to know and follow safe work practices, and to be aware of company policies and procedures related to job safety, including safety rules and regulations. Employees are required to notify superiors upon becoming aware of unsafe working conditions.
• All functions, duties or tasks are to be carried out in an honest, ethical and professional manner, and to be performed in conformance with applicable company policies and procedures. In the event of uncertainty or lack of knowledge of company policies and procedures, employees are required to request clarification or explanations from superiors or authorized company representatives.

Minimum Hiring Standards

Additional qualifications may be specified and receive preference, depending upon the nature of the position.

• Must have a reliable means of communication, such as cell phone.
• Must have a reliable means of transportation (public or private).
• Must hold or be able to obtain a valid driver’s license or equivalent.
• Must have the legal right to work in the country where the position is located.
• Must have the ability to speak, read, and write English proficiently.
• Must have a high school diploma, secondary education equivalent, or GED.
• Must be willing to participate in the Company’s pre-employment screening process, including drug screen and background investigation.

Education/Experience

• Bachelor’s degree in business, management or related field and 10-15 years of progressive management roles in physical security, contract security, or account management, or an equivalent combination of education and experience sufficient to perform the essential functions of the job, as determined by the company.
• 3-5 years of experience in a director level position.
• Datacenter experience a plus.

Special Requirements

• Able to travel (international or domestic, as required) approximately 25% of the time or more, occasionally with limited notice.
• Able to work evening or weekend hours when required, such as during an emergency event or crisis.

Competencies

• Ability to influence without authority and identify shared goals to achieve business objectives.
• Ability to provide positive direction and motivate performance.
• Ability to build relationships quickly and work collaboratively across multiple teams.
• Excellent oral and written communication skills required for preparing clear, concise, and grammatically correct materials and communicating information effectively to others.
• Experience communicating with the C-Level employee down to the entry-level employee
• Able to conduct presentations and facilitate group meetings, both in person and online.
• Ability to track and maintain scheduled assignments.
• Ability to maintain professional composure when dealing with unusual and stressful circumstances.
• Knowledge of business operations management and human resources administration.
• Demonstrates leadership skills, including planning, organizing delegating, problem solving, training, coaching, and praising or disciplining staff in a positive manner.
• Strong customer service and service delivery orientation.
• Ability to adapt to change in the external environment and organization.
• Ability to multi-task and complete assignments concurrently in a fast-paced environment.
• Experience communicating and presenting to an executive level audience.
• Knowledge of security operations and procedures applicable to a 24-hour facility.
• Knowledge of supervisory practices and procedures.

Working Conditions and Physical/Mental Demands

With or without reasonable accommodation, it requires the physical and mental capacity to effectively perform all essential functions. In addition to other demands, the demands of the job include:

• Required ability to manage multiple tasks concurrently.
• Computer usage, which may include prolonged periods of data analysis.
• Handling and being exposed to sensitive and confidential information.
• Regular talking and hearing.
• May be required to use vehicle in the performance of duties.
• Frequent lifting and/or moving up to 10 pounds, and occasionally up to 25 pounds.
• Close vision, distance vision, and ability to adjust focus.

Job Description:

• Assistant to Project Lead to manage and coordinate with CSIS vendors or Citi business stakeholders inclusive of attending/ initiating meetings and all to ensure we meet the scheduled timeline, stakeholders’ expectations, facilitate on the testing programs for the newly installed security systems
• Conduct site inspections and assesses the condition of the facility as well as propose the necessary requirements per Citi Security Standards
• Coordinate and facilitate our Citi Business stakeholders and provide guidance on the access card submissions and approvals etc.
• Conduct inventory checks for all completed projects, reviewing of floorplan system plotting diagram and updates. Supporting role function on finance administration mainly on project expense tracking
• Leading the execution works onsite, supervising the vendors and may also be the overall lead for small independent project works

Requirement:

• Minimum of at least 1 year working experience
• Minimum High School/ Diploma in any faculty
• Security certifications will be desirable
• Good communication, coordination skills both spoken and written. Able to command and manage vendors/ suppliers
• Must be able to work under a fast-paced environment, aggressive culture, and timeline
• Basic knowledge on security systems i.e. access control, CCTV, IDS
• Fundamentals of physical security and security system installation

Whether you’re at the start of your career or looking to discover your next adventure, your story begins here. At Citi, you’ll have the opportunity to expand your skills and make a difference at one of the world’s most global banks. We’re fully committed to supporting your growth and development from the start with extensive on-the-job training and exposure to senior leaders, as well as more traditional learning. You’ll also have the chance to give back and make a positive impact where we live and work through volunteerism.

Shape your Career with Citi

Citi’s Global Legal Affairs and Compliance (GLAC) empowers and protects Citi by providing legal, compliance, investigative, and security services to our firm. We manage compliance risk, provide legal analysis and advice, protect Citi’s people and businesses, advocate for legal and regulatory outcomes that benefit our firm and our clients, and ultimately promote behavior that is consistent with Citi’s mission and culture.

We’re currently looking for a high caliber professional to join our team as Officer, Legal Support Specialist 3 - Corporate Secretariat - Hybrid (Internal Job Title: Legal Support Specialist 3 - C11) based in, Singapore. Being part of our team means that we’ll provide you with the resources to meet your unique needs, empower you to make healthy decision and manage your financial well-being to help plan for your future. For instance:

• Citi provides programs and services for your physical and mental well-being including access to telehealth options, health advocates, confidential counseling and more. Coverage varies by country.
• We believe all parents deserve time to adjust to parenthood and bond with the newest members of their families. That’s why in early 2020 we began rolling out our expanded Paid Parental Leave Policy to include Citi employees around the world.
• Citi provides access to an array of learning and development resources to help broaden and deepen your skills and knowledge as your career progresses.

The Legal Support Specialist 3 is a developing professional role. Deals with most problems independently and has some latitude to solve complex problems. Integrates in-depth specialty area knowledge with a solid understanding of industry standards and practices. Good understanding of how the team and area integrate with others in accomplishing the objectives of the subfunction/ job family. Applies analytical thinking and knowledge of data analysis tools and methodologies. Requires attention to detail when making judgments and recommendations based on the analysis of factual information. Typically deals with variable issues with potentially broader business impact. Applies professional judgment when interpreting data and results. Breaks down information in a systematic and communicable manner. Developed communication and diplomacy skills are required in order to exchange potentially complex/sensitive information. Moderate but direct impact through close contact with the businesses' core activities.

Quality and timeliness of service provided will affect the effectiveness of own team and other closely related teams.

The successful incumbent will be working closely with the Company Secretary and expected to handle the following key responsibilities to provide high quality, professional company secretarial support for all the Singapore entities as well as supporting the Asia South Corporate Governance outsourcing related function.

In this role, you’re expected to:

• Provide comprehensive corporate secretarial support to a number of boards and board committees, including liaison with various stakeholders, preparation of agendas, creation and collation of board packs, taking minutes following up on action points and providing governance advice.
• Scheduling the board and board committee calendars, seeking and monitoring director availability for additional meetings as and when necessary.
• Maintain proper documentation of corporate governance activities and processes, including updating and maintaining the statutory registers and databases for all the Singapore legal entities.
• Ensuring compliance with relevant statutory and regulatory requirements including necessary filings with the regulators.
• Monitoring the effectiveness and appropriateness of the corporate governance framework of each legal entity.
• Provide administrative support to the board of directors and company secretary.
• Undertaking ad hoc projects as and when assigned.
• 
  

As a successful candidate, you’d ideally have the following skills and exposure:

• A recognized tertiary education or an Associate member of the Institute of Chartered Secretaries and Administrators with at least 4 years of relevant corporate secretarial experience in the banking or finance industry.
• Ability to multi-task and function effectively in a dynamic environment.
• Strong knowledge and understanding of the corporate secretariat work and corporate governance principle.
• Strong knowledge of relevant regulations and directive of financial institutions would be an advantage.
• Meticulous with good organizational and time management skills.
• Proficient in Microsoft Office suite of tools.
• A team worker with ability to work independently.
• Excellent written and spoken communication skills.
• Good rapport building skills, accuracy, attention to details, flexibility, and the ability to prioritize work.

Working at Citi is far more than just a job. A career with us means joining a family of more than 230,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Take the next step in your career, apply for this role at Citi today!

https://jobs.citi.com/dei

Job Description

You will be a member of the Group Information Security Team responsible for initiating, implementing, and maintaining security products and solutions to support enterprise security.

Key Responsibilities:

•Subject matter expert (SME) for the security systems owned by the Information Security Team.

•Ensure security systems are utilized to their maximum capabilities.

•Plan, identify, assess, design, operationalize, and maintain multiple security-related software and/or hardware.

•Recommend and drive cyber security solutions and initiatives to improve the cyber security of the organization.

•Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.

•Provide security consultancy, technical guidance, expertise, solutions, and education.

•Advise infrastructure teams on security design that is relevant and fit for purpose.

•Identify and assess cyber risks in the IT infrastructure environment.

•Review firewall requests.

•Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines, and deliverables.

•This is an individual contributor role. Deliver tasks with minimal supervision.

•Provide AUDIT support such as PCI-DSS, and Cyber Maturity Assessment.

•Strong communication skills.

•Coordinate and Deploy SIA Group/GIT cybersecurity initiatives in Scoot.

Requirements:

•Degree in IT or related field, with at least 5 years in information security, especially in the cybersecurity space.

•Professional security certifications (SANS, CISSP, CEH, OSCP, CISA, etc) preferred.

•Experience in security products POC and RFQ.

•Prior experience in implementing and maintaining any of the tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM, etc., and/or network security. Able to review firewall requests.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

•Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience is preferred.

•Knowledge of cyber security threats, vulnerabilities, hacking, exploit methods, etc.

•Strong oral, written, presentation, and inter-personal skills.

•Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

We are hiring for Business Information Security Officer who will be responsible for driving information security efforts within the business unit or functional area.

Mandatory Skill Set:

• Serve as a point of contact for BISOs. providing guidance and support to various BUs;
• Ability to prioritize and provide necessary support on the security tasks for designated BUs;
• Offer regular updates or flag outstanding important issues to relevant stakeholders;
• Standardize information security process across BUS/countries. driving the adoption of best practices;
• Bridge gap between local technology or business team with GIS. able to articulate security risks to local teams and contribute back any feedback to GIS;
• Drive the learning culture within the information security team to accelerate skills and knowledge of the information security community.

Desired Skill Set:

• Possess at least one of the following certification CISSP. CCSP. CRISC. or CISM;
• Understand Cloud Infrastructure.

Responsibilities:

• Facilitate the investigation and management of security incidents for designated BUs and communicate to relevant stakeholders;
• Ensure clear documentation of the business justifications, risks, the existing mitigation controls (if any) and relevant approvals are in place;
• Support security assessment for technology solutions for designated BUs;
• Offer expertise to BUs with the help of Group Information Security (GIS) Subject Matter Expert (SME);
• Collaborate with enterprise risk management to conduct risk assessments and support the development of risk treatment plans for the BUs;
• Facilitate the local implementation of group information security initiative for the designated BUs;
• Assist with the security awareness programs for designated BUs to enforce security culture and understand the information security solutions in BUs;
• Help to develop the Business Information Security Officer (BISO) framework / handbook outlining BISOs roles and responsibilities. This standardizes practice across the organization;
• Establish and maintain BISO community to share insights or discussion of findings from audits, incidents, or latest security trend with each BUs to facilitate cross-learning and capture lessons teamed;
• Gather input or recommendations with regards to Group Information Security (GIS) functions and programs from BISOs across various countries/markets. Compile the feedback and contribute to GIS for continuous improvement of the Security Operation Model;
• Collaborate with security teams to develop and implement tailored security awareness programs for business units and devise a structured professional development pathway for BISOs.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE's website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

This position is a contract position from Jan 2025 to July 2025 and is responsible for supporting the sales team in the preparation of sales quotations and tender preparations, and other sales support activities.

Responsibilities include supporting the project administrator when required, with project documentation and other project activities

Job Responsibilities

• Supporting Sales Team on preparing Sales quotations, Sales/Maintenace tender, catalogues and other document required for submissions, etc.
• The Sales Administrator is responsible for the following specific responsibilities:
  - To support all the sales functions of the department.
  - Regularly review tender portals, industry publications, and network contacts for upcoming opportunities relevant to our business.
  - Registration of site/tender brief and provide timely feedback to Sales Personnel of any change of schedule.
  - Evaluate, document, record, highlight, and track/monitor critical/important clauses and deadlines for tender and quotation submission including entering key details such as submission dates, requirements and scope of work for each opportunity.
  - Assist the sales team promptly and efficiently with the timely submission of comprehensive tender bids and quotations.
  - Keeping standard tender and quotation submission documents for reference and easy retrieval including maintaining the formal for tender and quotation submission documents for quick access and reference.
  - Organize the storage of all sales inquiries and quotations in a tidy and easily retrievable system. This include managing the filling of all related sales inquiries and quotations in SharePoint to be in a traceable and organised manner.
  - Generate monthly sales reports.

Job Requirements

• Diploma in Administration or its equivalent
• With 2 to 3 years’ relevant experience in related industry
• Excellent organization skills and ability to multi-task
• Meticulous and pay great attention to detail
• Good communication and interpersonal skills
• A team player and work independently with minimum supervision
• Ability to interact and work with people of all levels
• Ability to work under pressure and meet tight deadlines.
• Proficient in MS Project and MS Office software

If you are keen to be part of our team and possess the above pre-requisites, kindly submit your detailed resume stating your current & expected salary via the button "APPLY NOW" to:

HR Department

Securitas Electronic Security Singapore Pte Ltd

To know more about us, please visit us at www.securitas-singapore.com.

(*we regret that only shortlisted candidates will be notified.)

Key Responsibilities:
∙Coordinate with external vendors and collaborate with customers and SaaS providers to conduct IT Security Risk Assessments. Identify security threats, assess risks, and propose mitigation strategies for approval by the customer.
∙Coordinate the handling of security incidents, ensuring a timely response and resolution. Maintain a robust incident response process and documentation.
∙Manage and coordinate regular security audits, vulnerability scans, and penetration tests. Consolidate findings, ensure proper remediation, and provide feedback to stakeholders on risk mitigation efforts.
∙Maintain and update all security-related documentation, including policies, procedures, standards, and best practices. Ensure compliance with security frameworks such as ISO/IEC 27001, ISO/IEC 27018, SOC 2 Type 2, and CSA-STAR (Level 2).
∙Continuously monitor the security posture of the SaaS solution and related ICT systems. Provide regular reports on security risks and mitigation actions to stakeholders and customers.
∙Oversee the remediation of security vulnerabilities identified during security assessments, ensuring that appropriate actions are taken to address risks in a timely manner.
∙Provide clear, concise security reports and recommendations to customers, ensuring they understand the security posture of the SaaS solution and any risks or issues that need attention.
∙Take on ad-hoc security tasks as required to address emerging risks or assist with specific security projects or initiatives.

Qualifications:
∙Minimum of 3 years of experience in IT security, particularly in enterprise systems, cloud infrastructure, or SaaS environments.
∙A current professional information security certification (such as CISSP, CISM, CRISC, CGEIT, GSE) or equivalent is highly desirable.
∙In-depth knowledge of IT security management and governance, risk assessment, incident response, vulnerability assessments, penetration testing, and security audits.
∙Familiarity with international security standards and frameworks such as ISO/IEC 27001, ISO/IEC 27018, CSA-STAR, SOC 2 Type 2, NIST, and CIS.
∙Strong interpersonal, written, and verbal communication skills, with the ability to explain complex security concepts to non-technical stakeholders.
∙The position requires the candidate to be based locally.
∙Strong problem-solving skills and the ability to make decisions under pressure.
∙Proven ability to work effectively with cross-functional teams and external vendors.
∙Attention to detail and a commitment to maintaining the highest standards of security.

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions (both applications and infrastructure) are developed and designed with security inbuilt.

Key Responsibilities

•Provide security consultancy, technical guidance, expertise, solutioning and education for en-terprise.

•Advise application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

•Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

•Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

•Perform threat modelling on security critical applications. Keep up to date on emerging secu-rity threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews and audits to ensure security assurance is achieved.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables. This is an individual contributor role. Strong communication skills.

Requirements

•Degree in IT or related fields, with at least 5 years in information security, especially in the application security space.

•Professional security certifications (CISSP, CSSLP, CEH, CCSP etc) preferred.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.

•Strong in-depth working knowledge in secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), Software Compo-sition Analysis (SCA).

•Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud technolo-gies. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

•Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc. Any prior vulnerability management experience preferred.

•Strong oral, written, presentation and inter-personal skills.

•Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

Job Description
You will be a member of the Group Information Security Team responsible for initiating, implementing and maintaining security products and solutions to support enterprise security.

Key Responsibilities

• Subject matter expert (SME) for the security systems owned by the Information Security Team.
• Ensure security systems are utilised to their maximum capabilities.
• Plan, identify, assess, design, operationalise and maintain multiple security related software and/or hardware.
• Recommend and drive cyber security solution and initiatives to improve cyber security of the organisation.
• Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
• Provide security consultancy, technical guidance, expertise, solutioning and education.
• Advise infrastructure teams on security design that is relevant and fit for purpose.
• Identify and assess cyber risks in the IT infrastructure environment.
• Review firewall requests.
• Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.
• Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables.
• This is an individual contributor role. Deliver tasks with minimal supervision.
• Strong communication skills.

Requirements

• Degree in IT or related field, with at least 5 years in information security, especially in the application security space.
• Professional security certifications (CISSP, CSSLP, CEH etc) preferred.
• Experience in security products POC and RFQ.
• Prior experience in implementing and maintaining any of tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM etc. and/or network security. Able to review firewall requests.
• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.
• Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience preferred.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc.
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

To perform and execute all aspects of in-house legal counsel and company secretary (main or alternate), contracts and procurement management functions of our businesses. You will safeguard our reputation and minimise our exposure to legal, contractual and compliance risks by assuring that the Group and Company comply with laws and statutory requirements in the jurisdictions in which the Group and Company operate, and provide sound and practical legal advice to management and business partners on all relevant matters.

Responsibilities

• Provide accurate and timely counsel to executives in a variety of legal, contractual and procurement topics (labour law, partnerships, local and international ventures, corporate finance, etc).
• Collaborate with Management to devise efficient defence strategies for the best positioning of the
• Group and the Company.
• Specify internal governance policies on contracts and procurement, and regularly monitor compliance.
• Research and evaluate different risk factors regarding business decisions and operations.
• Apply effective risk management techniques and offer proactive advice on possible legal, contractual and procurement issues.
• Communicate and negotiate with external parties (clients, vendors, regulators, external counsels, public authorities etc).
• Draft and solidify agreements, contracts and other legal documents to assure the full legal rights of the group and the company.
• Deal with complex matters with multiple stakeholders.
• Provide recommendations to the organisation on legal risk while balancing commerciality.
• Provide clarification on legal language or specifications to staff in the organisation.
• Conduct your work meticulously and with integrity, reliability and responsibility.
• Maintain current knowledge of alterations in legislations in the jurisdictions in which the Group and the Company operate.
• Perform corporate secretarial duties through participation in Board/Management Committee meetings, drafting Board/Management Committee papers/resolutions/minutes and ensuring follow through of action items required by the Board of Directors/Management Committees.
• Support contract and price negotiations, and prepare contract documents and/or agreements with clients, suppliers, business partners, employees and any other relevant parties.
• Assist with the administrative requirements of the legal team.
• Participate in special committees and drive projects for process improvement and innovation.
• Any other duties as assigned by the Group and Company.

Job Requirements

• Recognised degree in law, preferably admitted to the Singapore Bar or qualified to do so. Fresh graduates or those recently called are welcome to apply.
• Experienced legal executives with a recognised diploma in law and management may be considered.
• Proven experience as a legal counsel in business environment with a commercial perspective.
• Excellent knowledge and understanding of corporate and contract laws, practices and procedures.
• Full comprehension of the influences of the external environment of a corporation.
• Demonstrated ability to create legal defensive or proactive strategies.
• High degree of attention to detail and professional ethics and integrity.
• Sound judgement and ability to analyse situations and information.
• Strong command of English and the use of Microsoft Office.
• Proactive and self-motivated individual with a growth mindset and composure under pressure.

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;

Strong knowledge of ISO 27001:2022 standards and requirements;

Experience in developing and maintaining comprehensive project plans, including timelines and milestones;

Experience in managing ISO 27001-related risks and conducting internal/external audits;

Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;

PMP, CISSP, CISM, or similar certifications are a plus;

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE's website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

What you will be doing:

• Ensure compliance of all Company's IT policies, standard and
• procedures with relevant agency
• Handle any company's IT policy procedures and standards related questions from staff covered by policies
• Review all company' IT policy procedures and standards on a regular basis
• Respond promptly to company IT service issues and requests
• Arrange IT security/cyber trainings and awareness to company staff
• Responsible to ensure compliance of PDPA
• Provide data protection and handle company staff training an awareness to staff
• Work with other staff when required to ensure any publicity initiative abide by data protection
• Handle data protection related questions from staff and anyone else covered by date
• protection policy
• Provide administrative support to the company IT department

You are:

• Minimally NITEC in IT or any other relevant discipline
• Minimum 1 year of relevant experience in IT
• Meticulous, to ensure all policy procedures and standards are align
• Able to communicate well with difference stakeholders

Why join Cushman & Wakefield?

As one of the leading global real estate services firms transforming the way people work, shop and live working at Cushman & Wakefield means you will benefit from;

• Career development and a promote from within culture
• An organisation committed to Diversity and Inclusion

We have a vision of the future, where people simply belong.

That's why we support and celebrate inclusive causes, not just on days of recognition throughout the year, but every day. We embrace diversity across race, colour, religion, gender, national origin, sexual orientation, gender identity or persons with disabilities or protected veteran status. We ensure DEI is part of our DNA as a global community - it means we go way beyond than just talking about it - we live it. If you want to live it too, join us

Job Description

You will be a member of the Group Information Security Team responsible for responding to threats and incidents to the corporate networks, systems (on-prem and cloud), and digital assets.

Key Responsibilities:

•Perform security monitoring and incident response activities across the scoot networks, leveraging a variety of tools and techniques.

•Manage Security Operations center.

•Detect incidents through proactive “hunting” across security-relevant data sets.

•Ability to correlate multiple events from different devices to identify abnormal behaviour

•Document incident response analysis activities thoroughly

•Develop new, repeatable methods for finding malicious activities

•Provide recommendations to enhance detection and protection capabilities.

•Effectively present technical topics to both technical and non-technical audiences

•Develop and follow detailed operational processes and procedures to appropriately analyze, escalate, and assist in the remediation of information security incidents

•Prioritize multiple high-priority tasks and formulate responses/recommendations in a fast-paced environment

•Prepare documentation for security technical standards, standard operational procedures, and hardening standards.

•Analyse endpoint, network, and application logs

•Assist other IT teams in security-related issues

•Engage with vendors and parent company SIA team members for security reviews.

Requirements:

•Degree in Computer Engineering, Computer Science, Information Systems, or equivalent qualification.

•At least 5-6 years of experience in Cybersecurity Incident and Security Operations.

•Demonstrate experience in Information Security with a focus on Cyber Security Operations, Incident Response and Detection.

•Experience working in the Security Operations Centre and/or Computer Incident Response Team.

•Excellent problem-solving skills combined with hands-on experience doing root cause analysis and post-incident reviews.

•Solid knowledge of computer networks and common protocols

•Knowledge of prominent cyber threat actors and APT groups.

•Experience with Threat Intelligence Platforms.

•Experience with SIEM (especially Splunk).

•Professional security related qualifications (i.e. GCIA, CISSP etc) will be an advantage

•Preferred certifications: CISSP, CISM, CISA, ISMS, TOGAF, SABS

•Good interpersonal skills

Job Description

The successful candidate will join the Information Technology Division, System Technology department and will be responsible for managing Content Delivery Network (CDN) which includes Cyber Security, as well as administering Monitoring and Log Management Tools.

Key Responsibilities include:

• Work closely with CDN providers and application teams to ensure internet websites/mobile apps are healthy in terms of availability, response time and security posture.

• Conduct regular security reviews and finetune WAF and BOT rules to mitigate any cyber threats.

• Administer various monitoring and logging tools, which includes application onboarding and advanced configuration.

• Perform system administration activities such as troubleshooting, root cause analysis and implement corrective/preventive actions during and after an incident.

• Support audit and infrastructure/network security scans, disaster recovery and security related drills and operate within assigned fiscal budget.

• Build automation wherever possible to improve development team’s agility and reduce human errors.

• Explore, learn and deploy new technologies and provide training to the IT community within the company.

• This position requires periodic system administration outside normal business hours.

Requirements:

• Possess a degree in Information Technology or related fields.

• Minimum of 3 years of IT Infrastructure experience with at least 1 year of hands-on experience in managing the infrastructure of an eCommerce website.

• Experience with Akamai or equivalent CDN providers preferred.

• Demonstrate strong knowledge in infrastructure areas such as Content Delivery Network (CDN), Cyber Security (WAF and Bot Mitigation), internet protocols, DNS, virtual server technologies, networking (LAN, WAN, SDN), Integration and Messaging Platform, scripting and monitoring tools.

• Administrator experience with Application Performance Monitoring (APM) tools such as Dynatrace and Log Management System (LMS) such as Splunk.

• Conversant with infrastructure definition tools such as Cloud Formation and Terraform, and with YAML/JSON deployment templates.

• Strong analytical, project management, communications and interpersonal skills.

We thank all candidates for your interest in Singapore Airlines, and regret that only shortlisted candidates will be notified.

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s Degree in Computer Science/Information Technology or equivalent.
• At least 5 years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:

- CompTIA Security+

- Certified Information Systems Security Professional (CISSP)

- Certified Information Systems Auditor (CISA)

- Certified Information Security Manager (CISM)