The Service Delivery Manager is responsible for overseeing the end-to-end management of security vulnerability remediation processes. This role requires a deep understanding of security best practices, risk management, and IT service delivery. The successful candidate will collaborate with cross-functional teams to identify, prioritise, and mitigate security vulnerabilities by rolling out patches and fixes, ensuring the protection of organisational assets.

Responsibilities:

Vulnerability Management:

• Engage the Cyber Security team closely on the vulnerability management program, in the identification, assessment and prioritization of business-relevant vulnerabilities.

Remediation Management:

• Identification of solutions for assessed vulnerabilities.
• Develop and implement effective remediation plans according to the designated timelines.
• Track and manage remediation progress, ensuring timely closure of vulnerabilities.
• Engage stakeholders for any scheduled downtime to deploy remediation in the production environment.
• Coordinate with IT teams to implement necessary patches, updates, and configuration changes.
• Establish and maintain a vulnerability remediation knowledge base.

Risk Management:

• Coordinate with stakeholders for impact analysis.
• Develop rollback contingency plans for implementation challenges.
• Develop and implement risk mitigation strategies.
• Maintain up-to-date risk registers and reports.

Service Delivery:

• Ensure the delivery of high-quality security vulnerability management services.
• Monitor service performance metrics and identify areas for improvement.
• Manage service-related incidents and problems.
• Build and maintain strong relationships with stakeholders.
• Prepare monthly reports on progress and status of the remediation program.
• Ensure adherence to designate Service-Level Agreements

Team Management:

• Lead and manage a team of specialists in the remediation program.
• Assign tasks, set goals, and provide performance feedback.
• Foster a culture of collaboration and continuous improvement.

• Minimum of Diploma or Bachelor’s in information technology or relevant field
• Proven experience in security vulnerability management and remediation.
• Strong understanding of IT service management frameworks (ITIL, ITSM).
• Knowledge of security standards and regulations (e.g., ISO 27001, PCI DSS).
• Experience with vulnerability scanning and assessment tools.
• Excellent project management and organizational skills.
• Team management skills
• Strong analytical and problem-solving abilities.
• Effective communication and interpersonal skills.
• Ability to work under pressure and meet deadlines.

Desired Skills

• Strong experience in execution of security incident management and response
• Relevant certifications in Information Security or IT service management.
• Conversant with the knowledge of software products ranging from Solaris OS, Linux OS, Windows OS, Hypervisors (Nutanix, VMWare, Microsoft Hyper-V, Azure, Oracle VM, Apache & IIS Web Servers, Open SSL, IBM Websphere & CA Siteminder.

We provide:

• Competitive salary and benefits package
• Opportunities for professional development and career growth
• A collaborative and supportive work environment
• The opportunity to work with leading organisations and make a significant impact on their service delivery strategies

We always ensure that all employees receive fair treatment and are given equal opportunities.

What are you waiting for? Apply now!

We regret to inform that only shortlisted candidates will be notified. Thank you for indicating your interest in joining our team.

- To answer occasional phone calls from public

- Station on Site to attend to feedbacks

- Attend monthly site meeting and prepare minutes of meeting

- Need to do site administration work:

Purchase orders, compilation of Delivery oders, Workers attendance and Work pass and safety course attendance

- Minimum 2 Years experience in public relations service or hospitalities and tourism field

- 5-Day work week

Site Office Location:

Ang Mo Kio Industrial Park 2

50 metres walking distance from Ang Mo Kio Ave 1

Bus Stop No: 54101

- To answer occasional phone calls from public

- Station on Site to attend to feedbacks

- Attend monthly site meeting and prepare minutes of meeting

- Need to do site administration work:

Purchase orders, compilation of Delivery oders, Workers attendance and Work pass and safety course attendance

- Minimum 2 Years experience in public relations service or hospitalities and tourism field

- Alternate Saturdays work week

Site Office Location:

Ang Mo Kio Industrial Park 2

50 metres walking distance from Ang Mo Kio Ave 1

Bus Stop No: 54101

Statement Of Purpose (Overall Purpose of Job)

To be ISO-team representative and manage the public relation issues and general project queries with residents effectively as well as plan and coordinate works.

Major Duties & Responsibilities

(A) Specific :

• Involve in Housing & Development Board (HDB) upgrading projects.
• Plan and launch public relation programs for Neighborhood Renewal Programme (NRP) such as preparing circulars, letters and notices.
• Conduct survey on condition of flats, spalling concrete and ceiling leakage etc. as well as take measurement.
• Plan and coordinate works to be carried out within the flats timely.
• Handle enquires, feedback and complaints pertaining to the projects as well as follow-up on actions to resolve it.
• Work closely and ensure smooth operation procedure during upgrading work between with the relevant parties such as residents, contractors, consultants and authorities like the Town Councils and Housing Development Board (HDB) etc. as well as take proactive measures in mitigating complaints arising from the construction activities.
• Attend and provide administrative assistance and logistic support in Construction Working Committee meeting, as and when directed by the SO Representative.
• Show, explain and demonstrate to residents the location and purpose of Enhancement For Active Senior (EASE) retrofits provisions.
• Maintain good rapport and positive relations with the residents.
• Conduct regular visits to residents / tenants affected by the NRP works to gather feedback and keep them posted of the work schedule’s changes and impacts.

(B) General :

• Coordinate and work with other departments and vendors as well as relevant authorities.
• Maintain proper documents and filing according to Client’s requirement.
• Other duties as assigned.

(C) Safety:

• To follow the safety procedures, rules and regulations and eliminate or reduce hazard at the work place.

Job Requirements

(A) Education, Qualifications & Special Training :

• GCE ‘A’ Level and above with at least 2 years of public relations work experience
• Job holder without the above qualification but with relevant experience would be considered.

(B) Knowledge & Skills :

• Certificate of Attendance in fall-prevention or equivalent training session organized by an approved Healthcare Service Provider or Professional Occupational Therapist specializing in Geriatrics or eldercare.
• General understanding of HDB upgrading work.
• A good team player and willing to be stationed at the site office.
• Good communication skills (verbal and written).
• PC literate and knowledge in MS Office.
• Positive and good working attitude, self-motivated and able to work independently.
• Willing to learn, neat and tidy.

(C) Experience :

• Preferably 2 years working experience on past HDB projects or experience in Building Construction Industry.

Reporting to the Security & Safety Manager, the incumbent is to ensure the safety and security of associates, guests and items in the hotel, and must always maintain the highest standards of security for all concerned while adhering to standards required by the Hotel.

RESPONSIBILITIES

• Ensure only associates on duty are allowed to enter the hotel premises
• Ensure that no ex-associate enter the hotel premises without the approval of the Human Resource Manager or Security Manager
• Report and detain any hotel associate other than those authorized to be on the floor.
• Ensure no hotel property is taken out without proper authorization from the relevant Head of Department
• Randomly conduct parcel search for associates on an alternate day basis
• Act as a witness for Finance Department conducting checks on cashier
• To assist and witness Duty Managers in conducting DND room checks and unlocking of safes in unoccupied guest rooms
• Issue "Contractor" ID Tag to contract workers, and ensure they are escorted by the relevant department to the designated working areas
• To ensure that all outsiders who have been issued ‘Visitors, Contractors and Vendors” passes surrender the same, upon leaving the staff entrance/exit point
• Ensure all visitors (especially contractors and suppliers) wear proper shoes upon entering the hotel premises
• Ensure any vehicle coming into the loading/unloading bay area are properly parked so as not to cause any traffic congestion/obstruction
• Perform prowler duty on guest floors
• Stop unauthorized person(s) from entering guest rooms or loiter along the corridors of the guest floors
• Ensure all guestroom doors are properly locked and secured
• Ensure all floor pantries, risers are locked/closed and secured
• Ensure all fire extinguishers and fire hoses are in good working order
• Ensure all fire warning system (break-glass, sprinkler valves, smoke detectors) are in proper working condition
• Ensure that the fire emergency doors and staircase are not obstructed
• Prevent any form of soliciting by prostitutes or pimps
• Keep a close watch on people loitering in the vicinity of the guest lift lobby, and approach all suspicious characters. Politely enquire as to their purpose of being in the area. If they are non-guest or merely visitors, refer them to the Front Desk
• Stay alert and monitor the CCTV monitors constantly for any unexpected incident
• Ensure that the keys used on daily basis (eg. store, pantry keys, etc.) are accounted for and movement of these keys are properly recorded in the relevant logbook
• Record all relevant information (feedback) received from the Duty Manager in the Log Book.
• Monitor the lift system and report any malfunctioning to Engineering Department immediately
• Well versed with procedures relating to fire emergency and evacuation
• Ensure smooth traffic flow with no vehicle causing obstruction along the driveway
• Prevent any suspicious characters from loitering at the driveway.
• Perform any other duties assigned from time to time by the Security & Safety Manager

SKILLS & QUALIFICATION REQUIREMENTS

• GCE ‘O’ Level
• Possess a valid Security licence and preferably with experience in Hotel safety and security
• Possess good interpersonal and communication skills, with attention to details
• Able to work on rotating shifts, public holidays and weekends

Candidates with relevant skills or expeirence may be offered for the Senior Security Officer position.

We regret that only shortlisted candidates shall be notified.

Job Description

The successful candidate will join the Information Technology Division, System Technology department and will be responsible for managing Content Delivery Network (CDN) which includes Cyber Security, as well as administering Monitoring and Log Management Tools.

Key Responsibilities include:

• Work closely with CDN providers and application teams to ensure internet websites/mobile apps are healthy in terms of availability, response time and security posture.

• Conduct regular security reviews and finetune WAF and BOT rules to mitigate any cyber threats.

• Administer various monitoring and logging tools, which includes application onboarding and advanced configuration.

• Perform system administration activities such as troubleshooting, root cause analysis and implement corrective/preventive actions during and after an incident.

• Support audit and infrastructure/network security scans, disaster recovery and security related drills and operate within assigned fiscal budget.

• Build automation wherever possible to improve development team’s agility and reduce human errors.

• Explore, learn and deploy new technologies and provide training to the IT community within the company.

• This position requires periodic system administration outside normal business hours.

Requirements

• Possess a degree in Information Technology or related fields.

• Minimum of 3 years of IT Infrastructure experience with at least 1 year of hands-on experience in managing the infrastructure of an eCommerce website.

• Experience with Akamai or equivalent CDN providers preferred.

• Demonstrate strong knowledge in infrastructure areas such as Content Delivery Network (CDN), Cyber Security (WAF and Bot Mitigation), internet protocols, DNS, virtual server technologies, networking (LAN, WAN, SDN), Integration and Messaging Platform, scripting and monitoring tools.

• Administrator experience with Application Performance Monitoring (APM) tools such as Dynatrace and Log Management System (LMS) such as Splunk.

• Conversant with infrastructure definition tools such as Cloud Formation and Terraform, and with YAML/JSON deployment templates.

• Strong analytical, project management, communications and interpersonal skills.

We thank all candidates for your interest in Singapore Airlines, and regret that only shortlisted candidates will be notified.

Whether you’re at the start of your career or looking to discover your next adventure, your story begins here. At Citi, you’ll have the opportunity to expand your skills and make a difference at one of the world’s most global banks. We’re fully committed to supporting your growth and development from the start with extensive on-the-job training and exposure to senior leaders, as well as more traditional learning. You’ll also have the chance to give back and make a positive impact where we live and work through volunteerism.

Shape your Career with Citi

Citi’s Global Legal Affairs and Compliance (GLAC) empowers and protects Citi by providing legal, compliance, investigative, and security services to our firm. We manage compliance risk, provide legal analysis and advice, protect Citi’s people and businesses, advocate for legal and regulatory outcomes that benefit our firm and our clients, and ultimately promote behavior that is consistent with Citi’s mission and culture.

We’re currently looking for a high caliber professional to join our team as Assistant Vice President, Legal Support Officer - Singapore - Hybrid (Internal Job Title: Legal Support Officer - C12) based in, Singapore. Being part of our team means that we’ll provide you with the resources to meet your unique needs, empower you to make healthy decision and manage your financial well-being to help plan for your future. For instance:

• Citi provides programs and services for your physical and mental well-being including access to telehealth options, health advocates, confidential counseling and more. Coverage varies by country.
• We believe all parents deserve time to adjust to parenthood and bond with the newest members of their families. That’s why in early 2020 we began rolling out our expanded Paid Parental Leave Policy to include Citi employees around the world.
• We empower our employees to manage their financial well-being and help them plan for the future.
• Citi provides access to an array of learning and development resources to help broaden and deepen your skills and knowledge as your career progresses.
• We have a variety of programs that help employees balance their work and life, including generous paid time off packages.
• We offer our employees resources and tools to volunteer in the communities in which they live and work. In 2019, Citi employee volunteers contributed more than 1 million volunteer hours around the world.

The Legal Support Officer is an intermediate level, non-attorney role, responsible for providing legal support to the Citi Legal team. This role requires a pragmatic, proactive professional with thorough understanding of the Citi Legal Team. The overall objective of this role is to provide support to the Legal Team

In this role, you’re expected to:

• Responsible for legal support activities related to legal operations, litigation/discovery/settlements or negotiation and contract administration.
• Manages the execution, review, processing and tracking of legal documentation, executes transactions and completes varied work requests from multiple sources that may be complex in character and have tight deadlines.
• Executes legal programs and projects to achieve coordinated and efficient process improvements and legal support solutions; liaises with other control/functional businesses in support of initiatives.
• Conducts independent research and analysis of matters, applying institutional knowledge and knowledge of laws, rules and regulations, to support in the identification of legal solutions situations or to formulate recommendations on approach or strategy.
• Applies in-depth understanding of how associated risks differ depending on product and documentation envisaged in relevant jurisdiction(s) and provides advice to the Risk function and business partners accordingly.
• Maintains detailed records and documentation while staying abreast of new and changing regulatory and legal issues and industry initiatives
• Interacts with senior leaders, internal and external peers to gather information and works closely with the team’s management to determine legal solutions
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

As a successful candidate, you’d ideally have the following skills and exposure:

• 5-8 years of relevant industry experience, preferably with some experience working in an in-house legal role within financial services
• Excellent communication skills (written and oral)
• Proven analytical and organizational skills.
• Teamwork and adaptability.
• Ability to manage complex documentation with organization and detail.
• Must possess excellent interpersonal and project management skills, as well as the ability to interact and communicate effectively with Senior management.
• A skilled negotiator who has the right attitude and can actively work with a wide range of colleagues of varying seniority in both business and support roles to respond to a broad range of needs and develop business friendly solutions to requirements while balancing compliance with multiple legal, regulatory, and internal policy requirements.
• Proficient in Microsoft Office: Word, PowerPoint, Excel, Outlook
• Comprehensive knowledge of legal customs and practices as well as understanding of financial services industry.
• Bachelors/University degree, Master’s degree preferred / LLB

Additional Job responsibilities / Job Purpose:

The candidate will assist with negotiation of markets trading documentation for Citi’s markets sales and trading desks, fund services throughout the Asia Pacific (AP) region.

Job Background/context:

Markets Legal Contract Management (MLCM) provides legal advisory and documentation services for markets sales and trading desks, fund services across the different regions. This candidate will be part of the global MLCM team that carries out this work for the Asia Pacific (AP) region specifically.

• Timely negotiation and preparation of ISDA Master Agreement, Global Master Repurchase Agreement, Global Master Securities Lending Agreement, CDEA and other markets trading documentation; negotiation of ancillary trading documentation, including review of corporate documentation, security and collateral documentation.
• Conduct due diligence to determine whether agreements are enforceable and meet the well-founded basis standard under applicable capital rules.
• Coordination and tracking of deviation approvals including compliance of documentation with legal, regulatory requirements and Citi policies.
• Legal support, advice, and guidance across a broad range of practice areas whilst appropriately assessing risk of business decisions made by driving compliance with applicable laws, rules and regulations and adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.
• Management of data inputting for trading documentation and interaction with other regional support teams regarding trading documentation data systems and related queries, amendments.
• Participation in global documentation regulatory and remediation projects
• Assist in the coordination and support of AP Markets Legal Contract Management processes and initiatives.
• Liaise with other control and functional business in support of the initiatives that the AP MLCM is involved in.
• Provides analysis of matters in support of resolution of complex and variable situations or to formulate an approach.
• Assist in monitoring industry developments in relation to documentation initiatives.
• Performs varied work requests from multiple sources that may be complex in character and have tight deadlines.

Development Value:

This position provides the opportunity to work with and support a wide range of Citi markets businesses across Asia Pacific. The candidate will work closely with Legal colleagues across the region, as well as with stakeholders in Risk, Operations, Business and other areas. The role will involve regular contact with clients across the Asia Pacific region.

Working at Citi is far more than just a job. A career with us means joining a family of more than 230,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Take the next step in your career, apply for this role at Citi today!

https://jobs.citi.com/dei

Whether you’re at the start of your career or looking to discover your next adventure, your story begins here. At Citi, you’ll have the opportunity to expand your skills and make a difference at one of the world’s most global banks. We’re fully committed to supporting your growth and development from the start with extensive on-the-job training and exposure to senior leaders, as well as more traditional learning. You’ll also have the chance to give back and make a positive impact where we live and work through volunteerism.

Shape your Career with Citi

Citi’s Global Legal Affairs and Compliance (GLAC) empowers and protects Citi by providing legal, compliance, investigative, and security services to our firm. We manage compliance risk, provide legal analysis and advice, protect Citi’s people and businesses, advocate for legal and regulatory outcomes that benefit our firm and our clients, and ultimately promote behavior that is consistent with Citi’s mission and culture.

We’re currently looking for a high caliber professional to join our team as Vice President, Lead Counsel, Markets Fixed Income Asia Legal - Hybrid (Internal Job Title: Lead Counsel 2 - Product - C13) based in Singapore

Description:

Markets Legal support all of Citi's global Markets businesses as a single, unified department. Singapore, Hong Kong and Mumbai serve as hubs for various Markets legal teams for the Asia clusters. The team provides legal advisory and documentation support for fixed income, derivatives, rates, foreign exchange, commodities, futures & clearing, prime finance, equities sales and trading businesses, credit and loan trading, structured products, and solutions businesses.

As a member of the Markets Fixed Income Asia Legal team based in Singapore, the individual is to assist with legal coverage of fixed income, derivatives, rates, foreign exchange, note issuances, credit and loans trading, commercial real estate and asset financing, securitization transactions and structured loans and products, amongst others.

The person will report directly to a senior member of the Markets Fixed Income Asia Legal team and be expected to cover all the requirements of the team, including providing advice on legal and regulatory matters, litigation management and regulatory/policy interpretation. Day-to-day functions will involve transactional and advisory work, documentation, business development and participation in industry-based initiatives.

In this role, you’re expected to be:

• Assisting the businesses around product structuring for large episodic trades and advising on flow trades.
• Advising on and managing multi-jurisdictional regulatory requirements and client document negotiations.
• Managing and prioritizing key jurisdictions for the business.
• Managing and prioritizing key clients with multiple Citi touch points; crypto-currency and digital-related matters.
• Bank programs and structures incorporating environmental sustainability elements.
• Product development and structures addressing capital adequacy and risk-weighted asset requirements.
• Actively fulfilling the One-Citi ethos by identifying and overcoming boundaries and working collaboratively with other Citi members.

As a successful candidate, you’d ideally have the following skills and exposure:

• 4 to 8 years of relevant work experience
• Relevant experience in a law firm or financial institution
• Rates, Markets Treasury, Foreign Exchange and Credit Derivatives and financial regulatory experience (in particular, familiarity with Singapore, Hong Kong, China and/or India regulatory requirements) would be an advantage.
• Strong communication, interpersonal and organizational skills
• Ability to engage with and manage senior business management representatives.
• A strong team player who is confident, possesses initiative and the ability to prioritize, multi-task and work under pressure.
• An eye for broader franchise issues and the ability to assess issues and their risks against the wider regulatory and compliance framework that Citi operates within
• Ability to work independently and interact with people of all levels and across regions
• Education Level: LLB or JD

Working at Citi is far more than just a job. A career with us means joining a family of more than 230,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Take the next step in your career, apply for this role at Citi today

https://jobs.citi.com/dei

Position Overview

Assist in managing Infrastructure and IT Security related, for Regional Office (South Asia Ocean Region).

Responsibilities

• Support tRhe Regional Cloud Infrastructure hosting all the Critical Regional Business Solutions.
• Support Cloud Consolidation and Integration to Common Cloud for the Region.
• Plan, Design and Setup adequate Infrastructure for Operation Companies (OPCOs) to connect to Global and Regional Solutions.
• Support various Regional IT Infra projects, with primarily focus on Infrastructure, Elimination of Legacy hosted Infra.
• Support SD-WAN and other Infra Initiatives for the Region.
• Work closely with Global / Regional / Country IT teams to implement & Support Global IT Security Initiatives
• Manage other duties as assigned for Automation of Patch Management (Using Manage Engine), for GSOC, implementing Multi-Factor Authentication (MFA), Zscaler, Rapid 7 (Vulnerability Management), Trend Micro EDR and Others.
• Supporting initiatives advised by Global Security Audit (GSA) teams, resulting in overall improvement of IT Security Posture for the region.
• Assist in Documentation of IT Section Policies.
• Regular PDCA and follow up with Countries, to ensure Adherence for the above Initiatives.

Requirements & Qualifications

• Minimum Bachelor’s degree in IT or related field.
• Minimum 5 to 7 years In-Depth experience in Handling IT Infrastructure & IT Security at a Regional Level.
• Business driven with a Strong understanding of Prevalent / Current IT infrastructure and IT Security Solutions.
• Infrastructure Management and IT Security Skills.
• Cloud Solution Skills with a Must have experience to handle a regional Cloud Setup using AZURE.
• Understanding of relevant technology requirements required to handle the Responsibilities mentioned above.
• Strong Project Management Skills.
• Proven strength in strategic and conceptual thinking and design, implementation, and execution of strategies.
• Strong problem-solving and Co-ordination skills.
• Strong Vendor Management Skills.
• Good verbal and written communication skills.
• Proficient in Microsoft O365 Tools (Word, Excel, PPT and Others)
• Business trravelling may be required for this position.

Job Location

2 Changi South Avenue 2, Singapore 486354

A World of Opportunities Awaits

Company Name: Dusit Thani Laguna Singapore

Job Title: Security Officer

JOB DESCRIPTION

• Conduct investigations and gather evidence related to theft/fraud or lost items, noise complaints, assault complaints, food poisoning complaints, and other guest complaints and incidents.
• Conduct interviews with relevant parties in order to obtain statements and information related to incidents.
• Assist with and notify manager/supervisor, local police, or other appropriate individuals in the event of accidents, attacks, or other incidents.
• Complete incident reports to document all Security/Loss Prevention related incidents such as theft, accidents, physical hazards, and fire alarms.
• Handle business interruptions and complaints, such as suspicious individuals, civil disturbances or demonstrations, noise complaints, intoxicated individuals, etc.
• Escort any unwelcome persons from the property without interrupting the orderly flow of property operation.
• Defuse guest or employee disturbances/altercations, including summoning appropriate authorities if necessary, and documenting incident.
• Follow all company and safety and security policies and procedures; report accidents, injuries, and unsafe work conditions to manage.
• Maintain confidentiality of proprietary information; protect company assets.
• Welcome and acknowledge all guests according to company standards; anticipate and address guests’ service needs.
• Speak with others using clear and professional language; prepare and review written documents accurately and completely.
• Develop and maintain positive working relationships with others; support team to reach common goals; listen and respond appropriately to the concerns of other employees.
• Ensure adherence to quality expectations and standards.
• In addition, some states may have additional licensing/registration requirements to be considered for this position.
• Move, lift, carry, push, pull, and place objects weighing less than or equal to 10 pounds without assistance. Perform other reasonable job duties as requested by Supervisors, manager.

JOB REQUIREMENTS

• Minimum education of GCE "O" or "N" Level certificate
• At least 1 year working experience in a similar position in security & safety operations
• Possesses a valid security licence
• Applicants who have taken RTT will be prioritised
• First Aid and CPR+AED certified
• WSQ Respond to Fire and Hazmat Emergency certified
• 12 hour shift / Work 4 days

BENEFITS

• Company Transport Pick-up/Drop-off Provided
• Uniform Provided, Duty Meals, F&B Discount, Dental, and Medical
• Employee Room Rate, Learning & Development Opportunities, Staff Recognition Award

*Only shortlisted candidates will be notified.

(A) Specific :

• Involve in Housing & Development Board (HDB) upgrading projects.

• Plan and launch public relations programs such as preparing circulars, letters, and notices.

• Conduct a survey on the condition of flats, spalling concrete ceiling leakage, etc. as well as take measurements.

• Plan and coordinate works to be carried out within the flats timely.

• Handle inquiries, feedback, and complaints on the projects as well as follow up on actions to resolve it.

• Work closely and ensure smooth operation procedures during upgrading work between the relevant parties such as residents, contractors, consultants, and authorities like the Town Councils and Housing Development Board (HDB), etc. as well as take proactive measures in mitigating complaints arising from the construction activities.

• Attend and provide administrative assistance and logistic support in Construction Working Committee meetings, as and when directed by the SO Representative.

• Show, explain, and demonstrate to residents the location and purpose of Enhancement For Active Senior (EASE) retrofits provisions.

• Maintain good rapport and positive relations with the residents.

• Conduct regular visits to residents/tenants affected by the works to gather feedback and keep them posted on the work schedule’s changes and impacts.

(B) General :

• Coordinate and work with other departments and vendors as well as relevant authorities.

• Maintain proper documents and files according to the Client’s requirements.

• Other duties as assigned.

(C) Safety:

• To follow the Company safety procedures, rules, and regulations to eliminate or reduce hazards at the workplace.

Job Requirements

(A) Education, Qualifications & Special Training :

• GCE ‘O’ Level and above with at least 1 year of public relations work experience

• Job holders without the above qualification but with relevant experience would be considered.

(B) Knowledge & Skills :

• Certificate of Attendance in fall prevention or equivalent training session organized by an approved Healthcare Service Provider / Professional Occupational Therapist specializing in Geriatrics or eldercare.

• General understanding of HDB upgrading work.

• A good team player and willing to be stationed at the site office.

• Good communication skills (verbal and written).

• PC literate and knowledge in MS Office.

• Positive and good working attitude, self-motivated, and able to work independently.

• Willing to learn, and is neat and tidy.

• A good team player and willing to be stationed at the site office.

(C) Experience :

Preferably to have working experience on past HDB projects or experience in Building Construction Industry.

Job Summary

We are currently looking for a seasoned leader as the Head of IT Security. The incumbent will be responsible for leading the transformation while establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. This role oversees the development and implementation of security policies, standards, and procedures to ensure the protection of the organization's information systems and data.

Mandatory Skill-set

• Degree in Computer Science, Information Security, Information Systems or a related field;
• At least 12-15 years of experience in IT security & risk management preferably in a large scale organisation;
• Deep knowledge and understanding of internal controls, security frameworks, risk management and IT governance, auditing techniques, threat modeling and risk management principles;
• Good knowledge of enterprise IT systems and components (applications, operating systems, databases, networks, cloud, DevOps;
• Knowledgeable in using various cyber security monitoring and analysis tools and techniques depending on the organization's needs and requirements;
• Familiarity with security technologies such as firewalls, intrusion detection systems, and endpoint protection;
• Familiar with cyber security standards, protocols and frameworks such as NIST, CIS, PCI/ DSS, MAS TRM, ISO standards;
• Experience with Security operations centers (SOC) and setting up SOC models;
• Experience in driving enterprise initiatives for E2E security posture analysis;
• Ability to work with subsidiaries and understand regional security requirements;
• Strong in analytical thinking with attention to detail;
• Excellent communication and inter personal skills.

Desired Skill-set

• CISSP, CISM, CRISC, CGEIT and/or CISA certified.

Responsibilities

• Define and implement the Enterprise InfoSec (IS) landscape and roadmap;
• Responsible for documenting methodologies and tools to mitigate information security or cyber risk for on-prem and clous platforms;
• Prepare reports for information security or cyber risk related reporting, threat awareness and security awareness reports;
• Design and implement secure cloud architecture for various cloud platforms and act as an SME for cloud platforms (AWS, GCP, or Azure) using cloud-native security services;
• Recommend corrective actions or appropriate security controls to mitigate technical risk;
• Conduct Technology Security Risk Assessments on systems throughout their lifecycle to identify and mitigate security risks;
• Assist in the development of policies for conducting cyber security risk assessments and compliance audits;
• Formulate governance procedures for documenting and updating security policy, standards, guidelines and procedures;
• Perform information security or cyber risk assessment activities and assess third party security controls and internal security systems including onsite assessments;
• Establish scope of risk analysis for new technology initiatives and identify security risks in the Tech Obsolescence Risk program;
• Communicate with regulators such as MAS and ensure solutions meet external and internal requirements and guidelines
• Keep abreast of the dynamic cyber threat landscape and identify opportunities for enhancement of IT risk processes;
• Provide regular updates on the overall health of compliance, criticality assessment, audit findings, remediation and action plans.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

VP - ICT Security Operations Analyst

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and, in our clients’, best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do. We keep the bank safe and provide the technical tools our workers need to be successful. We design our digital architecture and ensure our platforms provide a first-class customer experience. Our operations teams manage risk, resources, and program management. We focus on enterprise resiliency and business continuity. We develop, coordinate, and execute strategic operational plans. Essentially, Enterprise Operations & Technology re-engineers client and partner processes to deliver excellence through secure, reliable, and controlled services.

Trust is part of our DNA at Citi. As such, we take safeguarding our customer data very seriously. The Chief Information Security Office (CISO) is made up of deeply dedicated and talented colleagues who work together to ensure the safety of Citi’s and our clients’ assets and information. We manage information security as an end-to-end program – one with a clear mandate and accountability. Our mission is to continually execute and enhance a global security program that is fully anchored to modern control and security frameworks, fully aligned with the technology of the firm, threat-focused and data-driven, and deeply integrated across all Citi businesses globally.

Being talent-driven, we are focused on attracting, developing, and retaining diverse and inclusive talent with a high technical skill level. As a member of our team we will provide you with career development opportunities at all stages of your career. Our employees model a passion for protecting Citi and our clients and believe in treating others with dignity and respect.

The Chief Information Security Office (CISO) is home to deeply talented colleagues that work to ensure the safety of Citi's clients' and our proprietary data. We manage information security as one end-to-end program – one with a clear mandate and accountability. Our mission is a program that is fully anchored to modern control and architectural frameworks, is fully aligned with the enterprise architecture of the firm and is deeply integrated into the sectors and functions.

CISO’s Cyber Security Engineering and Architecture is responsible for delivering integrated risk reduction capabilities and services aligned to the architectural goals and priorities associated with leading ‘Change the Bank’ (CTB) and ‘Run the Bank’ (RTB) initiatives. This role entails leading and coordinating the execution of SASE Services, across the network security domain. The successful candidate will have demonstrated success and be highly adept at: leading global programs and engineering change efforts; managing risk and execution of global programs by aligning resources and tactical/strategic decisions; and driving transformation across a complex enterprise to support cybersecurity goals. The candidate needs to have the ability to work on defining highly scalable and integrated security architectures, and influence roadmaps across a variety of product portfolios. The candidate needs to have the ability to define and drive interoperability with security components of a complex end to end network and cloud security ecosystem, focusing on client experience. Strong experience across cybersecurity, Technology Infrastructure, large enterprises will assist in delivering aspects of this service.

Our commitment to diversity includes a workforce that represents the clients we serve globally from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.

Responsibilities:

• Working with Transformation Program Directors, Senior Architects, Steering Committees, CISO and CTI partners in delivering the transformational Programs related to SASE. Onboarding of users on Zscalar and ensuring smooth transition.
• Troubleshooting issues and work on finding RCA.
• Zscaler Internet Access design and migration methods from legacy Internet Access solutions to SASE based architecture.
• Interface and support Citi’s Security Architecture Council and Working Groups building strong rapport across teams.
• Firewall rules Management (creation/ modification/ deletion) by following Change management process and via automation.
• Participate in migration activities and provide troubleshooting support from Infrastructure defense standpoint. Identify issues, provide support for isolating problems, finding RCA.
• Willing to work on weekends for migration activities off business hours.
• Completing additional tasks in connection with the role but not detailed in the current job description, charged by the direct manager, supervisor, or the functional head.

Qualifications:

• 8-12 years of extensive Security Experience with Checkpoint Firewalls, Juniper Networks Firewalls, Palo Alto Network Firewalls, Bluecoat Proxy, IPS/IDS, Illumio, Crowdstrike and EDR tools.
• Extensive knowledge on SASE Zscalar user onboarding and operational support experience.
• Strong troubleshooting skills over the Firewalls, Proxy and network infrastructure.
• Extensive Data Networking knowledge and an understanding of network security standards such as Firewall Rules, Security Zones, Multicast Data Feeds, Ultra Low Latency Network Architectures & Platforms.
• Hands-on experience in Zscaler Internet Access, Zscaler Private Access and Zscaler Digital Experience
• Proven influencing and relationship management skills.
• Exhibiting a high degree of flexibility and ability to multi-task, seeking guidance where necessary
• Strong communication skills, including verbal and written skills.
• Ability to work as part of a team with remote colleagues in other countries.
• Strong knowledge of Proxy functionality and Proxy features
• Consistently demonstrates clear and concise written and oral communication as well as strong presentation skills to both technical and non-technical audiences.
• Advanced analytical and problem-solving skills
• Demonstrated ability to take ownership and work with cross functional teams to manage multiple projects simultaneously under pressure.
• Thorough understanding of industry and corporate technology standards for Cyber Security services

Critical Competencies:

• Firewalls, Proxy and network infrastructure
• Zscaler Internet Access, Zscaler Private Access

Responsibilities

• Bachelor’s degree in computer science, Information Security, or related field.
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• Excellent communication skills and the ability to collaborate with diverse teams.
• Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• Good knowledge in security
• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Resposibilities:

• Background in Engineering or Computer Science
• 5 or more years of working experience in IT Security
• Relevant certifications in networking or cyber security, e.g. CISSP, CISM, CISA, CRSIS preferred
• Experience with DevSecOps methodologies and processes preferred
• Experience in security architecture of cloud native applications preferred
• Experience in providing security advisory and consultancy on application and services, including the design, development, implementation and/or management of the system
• Understanding of CI/CD tools
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Job Summary

Seeking IT Security professional with a keen interest in Information Technology (IT) Governance, Risk and Compliance to enable cyber resilience and information security for mission critical systems.
The individual will be responsible to conduct cyber risk assessment in support of technology initiatives to help identify IT related risk and determines appropriate controls to mitigate risks.

Mandatory Skill-set

• Degree in Computer Science, Information Security or Information Systems;
• At least 2-3 years of experience in IT security space with a strong experience in IT GRC ( Governance, Risk and Compliance ) related functions;
• Deep knowledge and understanding of internal controls, security frameworks, risk management and IT governance, auditing techniques and methodologies;
• Good knowledge of enterprise IT systems and components (applications, operating systems, databases, networks, cloud, DevOps;
• Knowledgeable in using various cyber security monitoring and analysis tools and techniques depending on the organization's needs and requirements;
• Familiar with cyber security standards, protocols and frameworks such as NIST CSF, CIS, PDPA;
• Strong in analytical thinking with attention to detail;
• Excellent communication and inter personal skills.

Responsibilities

• Act as a Subject Matter Expert on IT Governance, Risk management and Compliance (GRC) and related policies and procedures;
• Responsible for documenting methodologies and tools to mitigate information security or cyber risk;
• Prepare reports for information security or cyber risk related reporting, threat awareness and security awareness reports;
• Conduct compliance assessments and tracking the overall compliance health in relation to IT governance standards and procedures in compliance with regulatory requirements;
• Recommend corrective actions or appropriate security controls to mitigate technical risk;
• Continuously identify GRC Key risk indicators (KRI) and maintain IT Risk Register;
• Assist in the development of policies for conducting cyber security risk assessments and compliance audits;
• Formulate governance procedures for documenting and updating security policy, standards, guidelines and procedures;
• Perform information security or cyber risk assessment activities and assess third party security controls and internal security systems;
• Establish scope of risk analysis for new technology initiatives;
• Keep abreast of the dynamic cyber threat landscape and identify opportunities for enhancement of IT risk processes;
• Provide regular updates on the overall health of compliance, criticality assessment, audit findings, remediation and action plans.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

Duties and Responsibilities:

• Handle public complaints and feedback related to project site.
• Prepare letters and notices to communicate with community and residents regarding development of project.
• Implement public relationship programme.
• Arrange and attend meetings on public relation matters with project team where necessary.
• Prepare a monthly report to update on the feedbacks and complaints.
• Maintain good relationship with clients and residents.
• Assist other general administrative support to the project teams.
• Perform other duties as assigned.

Job Specification:

• Diploma or Degree in any field.
• Minimum 3 years’ relevant experience working in a public-facing role.
• Willing to work at site office environment.
• Good communication skills.
• MRT working experience would be an added advantage.
• Independent, possess excellent interpersonal and communication skills and emotional maturity.
• Working Location: Tampines

- To answer occasional phone calls from public

- Station on Site to attend to feedbacks

- Attend monthly site meeting and prepare minutes of meeting

- Need to do site administration work:

Purchase orders, compilation of Delivery oders, Workers attendance and Work pass and safety course attendance

- Minimum 2 Years experience in public relations service or hospitalities and tourism field

- 5-Day work week

Site Office Location:

Ang Mo Kio Industrial Park 2

50 metres walking distance from Ang Mo Kio Ave 1

Bus Stop No: 54101

• Supporting a range of Cyber Security tools including Exabeam, CarbonBlack, Tripwire, CyberArk, TrendMicro AV, Splunk, DAM, Tenable and RSA.

• Managing designated vendors for the specified Security tools.

• Driving the scheduling of security-related projects and remediation timelines.

• Maintaining, troubleshooting, patching, and updating various security tools and scanners used in MAS.

• Recommending process re-engineering and streamlining to enhance workflows and efficiencies.

• Delivering management reporting and dashboarding to stakeholders, including data and trend analysis, and recommending next steps.

• Following up on remediation actions, security and risk assessments with respective stakeholders and applications teams.

• Conducting daily health check and validating system availability through various monitoring/checks.

• Implementing of the service requests, change requests and support of incident management.

• Fine tuning of rules, updating of contents packs to suit the different use cases in

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions are developed and designed with security inbuilt.

Key Responsibilities

• Provide security consultancy, technical guidance, expertise, solutions, and education for the enterprise.

• Advise IT application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

• Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

• Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

• Advise and review security by design concepts in Cloud platforms such as GCP, AWS or Azure Cloud.

• Advise and review the compliance of integrating security tools and processes into the DevOps pipelines.

• Advice and review the adherence to security requirements for low code platforms.

• Perform threat modeling on security-critical applications. Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews, and audits to ensure security assurance is achieved.

• Manage individual project priorities, deadlines, and deliverables. Any relevant ad-hoc duties.

• Review RFP proposal compliance with security requirements.

• This is an individual contributor role. Strong communication skills are required.

• Note: You could be posted to any subsidiary in the SIA Group.

Requirements

• Degree in IT or related fields, with at least 7 years in information security, especially in the application security space.

• Professional security certifications (CISSP, CSSLP, CEH, CCSP, etc.) preferred.

• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

• Strong in-depth working knowledge of secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), and Software Composition Analysis (SCA).

• Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud platforms, such as AWS and GCP. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

• Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods, etc. Any prior vulnerability management experience is preferred.

• Strong understanding of technologies such as WAF, Anti Bot Protection

• Prior experience in application development and knowledge of the DevOps platform is desired.

• Strong oral, written, presentation and interpersonal skills.

• Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

• Able to work independently and in a team-oriented, collaborative environment.

Job description

• Troubleshooting security and network problems.
• Perform vulnerability assessment using automated tools and recommend actionable follow up to remediate the vulnerabilities and/or threats uncovered.
• Provide maintenance support for security systems and tools, including firewalls and other security technologies, as per the maintenance contract requirements.
• Perform system upgrades, patches, and backups to ensure the security systems are up-to-date and running efficiently.
• Provide incident response support, troubleshoot security incidents, and work closely with end users to resolve issues in a timely resolution.
• Proactivity monitoring, support and troubleshoot network bandwidth capacity and network performance to ensure uninterrupted services.
• Manage and maintain Cisco ISE for network access control and policy enforcement.
• Coordinate and manage local and regional ISP on maintenance, changes, and implementation of WAN (SD_WAN).
• Report network operational status by gathering and prioritizing information and managing network projects.

Requirements

• Diploma or Degree in IT or Computer Science
• Min 4 years of relevant experience in IT Infrastructure and Operations Automation Experience
• Knowledge of regulatory requirements and security compliance standards relevant to network infrastructure.
• Professional Certification and at least 4 years’ hands on experience in routing & switching - good to have CCNP.
• Professional Certification and at least 4 years’ hands on experience in network security - good to have PCNSE (Palo Alto).
• Professional Certifications and at least 2 years hands on experience in Cyber security and optional CEH, SSCP, ISC2, Microsoft Security Fundamentals (good to have)
• Any relevant Microsoft cloud security certifications (AZ-500, MS-101, MS-500)
• Good Understanding of network and security fundamentals (Concepts, Protocols. Troubleshoots).
• Experience with Windows Defender Advanced Threat Protection and latest Microsoft E5 Security Product set
• Experience in testing and evaluating Security products in a Lab environment.
• Ability to manage multiple priorities and work independently.
• Positive and professional working attitude, ability to work as a team or individual under stress with minimum supervision and deliver on tight deadlines in fast-paced environment.
• Hands on experience in one or more of the following technologies as below:
• Routing/Switching – Cisco, Meraki
• Network Security – Cisco ISE
• Firewalls/Proxy – Palo Alto, Cisco, Zscaler
• WAN – VeloCloud
• Cloud - Azure

Senior Manager, Or Manager - Cyber Security & IT Governance

Responsible for the assessment, development, implementation and maintenance of enterprise-wide cyber security and IT Governance programmes to preserve the confidentiality, integrity, and availability of information resources. As part of the IT leadership team, this individual will be expected to provide technical leadership and consultation across the organisation. S/he will also work with external experts to implement security solutions, detect, and contain cyber security incidents.

Responsibilities

Cyber Security:

Assess and review environment and cybersecurity measures to ensure security and operational effectiveness, for e.g. network, system, application, endpoint security, physical and logical access security, etc.

Review and develop security framework, information security policies, processes, procedures, and guidelines.

Conduct cybersecurity risk assessments, penetration tests, and IT controls tests.

Identify security gaps and propose mitigating measures and escalate security incidents and non-compliances on a timely basis.

Evaluate, deploy, and maintain cybersecurity infrastructure to improve cybersecurity posture. Design, implement and maintain security incident response and escalation procedures.

Monitor, analyze and correlate events to determine the best course of action, to mitigate and contain threats when detected.

improve cybersecurity awareness of staff, for e.g. by conducting awareness training. Automate security controls, data, and processes.

IT Governance:

Review and enhance IT policies, standards, guidelines, and best practices regularly to ensure that these are aligned to organization objectives and industry best practices.

Develop and implement effective change management plans (such as communication plans and training programs) to drive adoption and compliance.

Participate in audit planning meetings with internal/external auditors, collate/provide the required materials on a timely basis, validate audit findings, provide remediation solutions, and implement the agreed solutions on a timely basis.

Drive security access and activity log reviews on regular basis.

Promote IT risk management, governance, and compliance culture across the organization.

IT Management:

Contribute to IT strategic planning and budgeting. Ensure IT vendors meet contractual obligations.

Maintain up-to-date knowledge on cybersecurity technologies and standards.

Attend to any other reasonable duties as assigned by Director, Information Technology.

Requirements

Degree in engineering, science or information technology, or equivalent education.

8-10 years of related work experience in cybersecurity management and security governance.

Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.

Strong understanding of cybersecurity standards.

Hands-on experience with cybersecurity tools such as Next Generation Firewalls, SASE, Endpoint Protection, Data Loss Protection, Email Security, etc.

To apply:

Please email Resume in Microsoft Word format

Please state your Position/ positions applied on the “on TOP” of your resume.

Please state Available Commencement Date or notice period

Please state current and last SALARY and Expected Salary in your resume.

Please state Reasons for leaving current & previous Employment.

Cyber Security, Associate Engineer

Salary: up to $4000+

Responsible in maintaining and improving the organization’s cybersecurity posture on an ongoing basis. S/he will work with external experts to implement security solutions, and work with vendors to monitor, detect and contain cybersecurity incidents to minimize impact to the organization.

Responsibilities

• Assist in the development of information security policies, processes / procedures and guidelines on an ongoing basis.

• Work with vendor to conduct security assessments and penetration tests.

• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.

• Standardize and refine security incident response and escalation processes.

• Mitigate and contain threats when detected.

• Escalate security incidents and non-compliances on a timely basis.

• Work with IT infrastructure team to evaluate, implement and enhance the network perimeter security, endpoint security, SIEM.

• Monitor information security alerts triage, mitigate, and escalate issues as needed.

• Conduct information security awareness training.

• Provide security advisory to end users on regular basis.

• IT Security Management of various aspects, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.

• Keep abreast of industrial IT security advancements and introduce appropriate security enhancements to IT infrastructure and systems.

• To perform daily monitoring of logs and review of security notifications and alerts, and assist on the assessment and reporting weekly trends, incidents and security events. Abnormalities found in the review of security events must be reported to the Cyber Security Manager.

• To provide daily technical support in terms of Cyber Security operations for Sophos Endpoint Protection, Cisco FTD Firewall, Advanced Email Threat Protection, Web Application Firewall, Cisco Email Security, DG DLP, Tenable SCCV, Splunk, Cisco Umbrella, etc.

• Attend to any other reasonable duties as assigned by the Senior Cyber Security & IT Governance Manager and IT Director.

Requirements

• Degree/ Diploma with min 2 years related work experience in cybersecurity management in Singapore.

• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.

• Good command of written and spoken English.

• Excellent interpersonal and communication skills.

• Pro-active, independent, resourceful, able to work in a team environment and work independently with minimal supervision.

To apply:

Please email Resume in Microsoft Word format

Please state your Position/ positions applied on the “on TOP” of your resume.

Please state Available Commencement Date or notice period

Please state current and last SALARY and Expected Salary in your resume.

Please state Reasons for leaving current & previous Employment.

Job Description
You will be a member of the Group Information Security Team responsible for initiating, implementing and maintaining security products and solutions to support enterprise security.

Key Responsibilities

• Subject matter expert (SME) for the security systems owned by the Information Security Team.
• Ensure security systems are utilised to their maximum capabilities.
• Plan, identify, assess, design, operationalise and maintain multiple security related software and/or hardware.
• Recommend and drive cyber security solution and initiatives to improve cyber security of the organisation.
• Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
• Provide security consultancy, technical guidance, expertise, solutioning and education.
• Advise infrastructure teams on security design that is relevant and fit for purpose.
• Identify and assess cyber risks in the IT infrastructure environment.
• Review firewall requests.
• Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.
• Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables.
• This is an individual contributor role. Deliver tasks with minimal supervision.
• Strong communication skills.

Requirements

• Degree in IT or related field, with at least 5 years in information security, especially in the application security space.
• Professional security certifications (CISSP, CSSLP, CEH etc) preferred.
• Experience in security products POC and RFQ.
• Prior experience in implementing and maintaining any of tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM etc. and/or network security. Able to review firewall requests.
• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.
• Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience preferred.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc.
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions (both applications and infrastructure) are developed and designed with security inbuilt.

Key Responsibilities

•Provide security consultancy, technical guidance, expertise, solutioning and education for en-terprise.

•Advise application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

•Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

•Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

•Perform threat modelling on security critical applications. Keep up to date on emerging secu-rity threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews and audits to ensure security assurance is achieved.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables. This is an individual contributor role. Strong communication skills.

Requirements

•Degree in IT or related fields, with at least 5 years in information security, especially in the application security space.

•Professional security certifications (CISSP, CSSLP, CEH, CCSP etc) preferred.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.

•Strong in-depth working knowledge in secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), Software Compo-sition Analysis (SCA).

•Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud technolo-gies. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

•Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc. Any prior vulnerability management experience preferred.

•Strong oral, written, presentation and inter-personal skills.

•Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.