Your role :

Are you passionate about Security Engineering and looking to work in Cyber Security area? Do you want to provide technology solutions that help us to identify security weaknesses in our applications? Are you motivated to work in a complex, divers and global environment?

We are looking for an Tech Cyber Security Specialist – Product Owner to join our team and help us to:

•own the suite of Application Security Testing Products
•liaise with the Cyber Hygiene operational team to understand their requirements for Application Security testing
•liaise with our application development community to understand their requirements for Application Security testing
•lead, prepare and execute a Technology Product Roadmap for Application Security Testing
•communicate the Technology Product Roadmap for Application Security Testing, gaining support from Stakeholders
•perform security research to identify opportunities to develop our Technology Products in the Application Security Testing space

Your team :

You'll be working in the Application Security Testing team, within the Cyber Hygiene Technology team and based in India. As an Tech Cyber Security Specialist, you will be instrumental in keeping UBS systems secure against attackers.

Our team is global, diverse and collaborative as we work across organizations to keep our technology, applications and the businesses they support secure.

Your expertise :

•proven experience in Product Management
•proven experience in Application Security testing techniques
•understanding of current threats specific to banking applications
•good understanding of basic risk management principles
•well organized with an innate sense of how to prioritize across a complex environment
•curious, collaborative and constantly interested in learning new things
•familiarity with IAST testing would be beneficial

Responsibility:

• Responsible for provision, deployment, configuration, and administration of many different pieces of network and security-related hardware and software.
• Responsible for evaluate, test, and troubleshoot technologies when new technologies are onboard
• Responsible for provide technical support for resolution of customer problems, incidents, issues, requests, and queries
• Responsible for IT Governance on Network Security with monitoring and control tasks to ensure processes and implementations are executed correctly
• Experience with firewall rules implementation and troubleshooting upon incidents.
• Involve in update/upgrade/migration of security tools used by the team
• Maintain clear and functional documentations on process guides, technical instructions, network details, etc.
• Manage cybersecurity projects & coordinate with customer to deliver security solutions and initiatives timely.
• Monitor, investigate and develop strategies to lead security incident responses efforts and recover from security breaches.
• Any other ad-hoc duties as assigned by supervisor

Requirements:

• Bachelor Degree/Diploma in Information Security or related field;
• Applicants with at least 1-3 years of relevant experience
• Strong knowledge and understanding of IT infrastructure and security operations
• Knowledge and understanding of Endpoint security, IDPS, WAF, APT, FW, Cloud Security
• Highly advantageous with hands-on experience in implementing CyberArk, McAfee, Fortinet, Cisco Extreme, Aruba, or Sophos solutions

Interested applicants, please Email , and look for

Jensen Fang Lifa

Recruit Express Pte Ltd

EA License No. 99C4599

EA Personnel Registration Number: R2197080

We regret that only shortlisted candidates will be contacted.

Make an Impact by

• Provide leadership and strategy for cybersecurity monitoring and incident response operations supporting Group IT and Singtel.
• Take leadership role to detect, manage and respond to cybersecurity incidents and provide updates to internal stakeholders and management. Work closely with Group Risk Management (GRM) to support crisis management processes and exercises.
• Manage a highly specialised team of security analysts, incident managers and incident responders to effectively monitor, defend and response to cyber threats and events. Develop critical in-house talent and capabilities, while leveraging on 3rd party services. Aggressively drive automation using AI and other technology.
• Build and maintain an effective threat intel capability and working collaboratively with other internal SOCs and partners to coordinate defensive tactics and playbooks against cyber threats.
• Continuously identify and enhance 24x7 operations, incident and crisis management processes, automation, and capabilities to progressively strengthen the security posture of Singtel and its group of companies.
• Experience in Security Ops and monitoring of Cloud set up
• Partner with Cyber Threat Intel team and perform Hunting as per event, or per time-driven calendar.
• Lead the automation of SOC and IR runbooks, moving the SOC team up the value chain.

Skills for Success

• Bachelor Degree in Computer Science, Computer Engineering, Electrical Engineering or other relevant field of study
• Professional security management certifications such as Certified Information Systems Security professional (CISSP), Certified Information Security Manager (CISM), specialised SANS certifications, or other similar credentials, is required.
• Minimum 10 years of experience as in IT or security roles.
• Minimum 5 years of practical experience managing security operations, SOCs or equivalent security programmes.
• Experience working with Internal Audit, Governance and Compliance teams.
• Expert or advance level competence in the following :Cyber Incident Management
  Partnership Management
  Network Security
  Platform Security
  Security Programme Management
  Stakeholder Management
  Threat Analysis and Defence
  Threat Detection and Response
  Security Monitoring Tools
• Advanced understanding in the following areas:Data Security
  Physical Security
  Regulatory requirements
  Data Loss Prevention strategies
• Expert competence in the following:Communication
  Leadership
  Decision Making
  Developing People
  Resource Management
• Have exposure to other compliance audits such as PCI, PDPA, GDPR, CCoP mostly related to security part.

Job Responsibilities:

• Brief all Security Officers on the daily events in the hotel, current instructions and any other matters
• To check all areas of the hotel to ensure that everything is in order. To take necessary action of any incident that may occur
• To conduct investigation into all incidents and record relevant statements and briefly highlight them in the Incident Book
• To conduct checks of all places as stated in the Guard Tour Monitoring System
• To perform any administrative and operational duties as described in the 3 basic duty posts

Job Requirements:

• Detail-focused and guest-oriented
• Good communication
• Able to work independently and in a team

JOB DESCRIPTION:

As Regional Head of Security and Compliance, you create peace of mind by driving the safety and security culture for the region, ensuring that H&M is a place where both colleagues and customers can feel safe. This is achieved through your accountability for your region’s compliance with our global safety and security policies; ensuring that ways of working, standards, compliance strategies and auditing programs are managed with excellence. As a partner to the Regional Manager, you lead the business and people according to H&M values, standards, policies and procedures, in the markets of Singapore, Malaysia, Vietnam, Philippines, Japan and Korea – Region East Asia (EAS).

Key responsibilities:

•Secure that Risk Analysis & Risk Management is conducted within your region and corrective measures are taken to minimize disruptions to the business operation.

•Ensure your region is compliant with global policies, standards and local legislation including security requirements and Code of Ethics programs.

•Audits, internal controls, KPI’s and any major deviations, are conducted and reported via global tools and communicated to the relevant person, as well as H&M Group Security Governance team.

•Detect any potential areas of compliance vulnerability, risks and threats in the region and act on these.

•Steer, support and lead the Crisis team in your region by ensuring the company’s crisis management process and trainings are implemented and followed according to global standards.

•Raise awareness on areas such as safety & security, and health & safety, through ensuring qualitative implementation of trainings and engagement on a regular basis following global requirements and local needs.

•Drive implementation of loss prevention strategies on a regional level and follow up with analysis of shrinkage results, target setting, upskilling on use of loss prevention tools and suggestion corrective actions.

•Ensuring responsibility and awareness is taken to reach and maintain compliance with PCI DSS and information security; support the local security teams with implementation of information security awareness engagement programs and trainings.

•Create conditions to enable performance of teams and individuals through talent identification and development; proactive pipeline and succession planning, building a future organization and diverse team.

Key qualifications:

Being part of this journey means there is not one clear path. We ask of you to be open to change and take part in creating an organization for the future. This is an opportunity for open minded team players that by being curious, innovative and forward-thinking want to change our business and the whole industry. We ask you to be yourself, drive results, work towards goals and go for it with everything you’ve got.

Besides your personality we see that you have / are:

•Formal education in business administration with relevant certification (e.g CPP, PSP, APP, PMP, etc).

•An experienced manager in security and compliance sector or relevant industry, with expert level knowledge in safety standards and procedures, work environment, health and safety, as well as information and data security.

•Handled various size and multi country service procurement, negotiations, vendor management and contract reviews.

•Relevant experience as a leader to varied teams in a multi-country context.

•Strong business acumen and ability to translate business context into needed actions with exceptional stakeholder management.

•Experience in working strategically (e.g Project Management) and strong analytical skills.

•You are a networker who easily connects with other people and mentalities across departments.

•You have proactive and solution-oriented mindset.

Responsibility:

• Responsible for provision, deployment, configuration, and administration of many different pieces of network and security-related hardware and software.
• Responsible for evaluate, test, and troubleshoot technologies when new technologies are onboard
• Responsible for provide technical support for resolution of customer problems, incidents, issues, requests, and queries
• Responsible for IT Governance on Network Security with monitoring and control tasks to ensure processes and implementations are executed correctly
• Experience with firewall rules implementation and troubleshooting upon incidents.
• Involve in update/upgrade/migration of security tools used by the team
• Maintain clear and functional documentations on process guides, technical instructions, network details, etc.
• Manage cybersecurity projects & coordinate with customer to deliver security solutions and initiatives timely.
• Monitor, investigate and develop strategies to lead security incident responses efforts and recover from security breaches.
• Any other ad-hoc duties as assigned by supervisor

Requirements:

• Bachelor Degree/Diploma in Information Security or related field;
• Applicants with at least 1-3 years of relevant experience
• Strong knowledge and understanding of IT infrastructure and security operations
• Knowledge and understanding of Endpoint security, IDPS, WAF, APT, FW, Cloud Security
• Highly advantageous with hands-on experience in implementing CyberArk, McAfee, Fortinet, Cisco Extreme, Aruba, or Sophos solutions

Interested applicants, please Email , and look for

Jensen Fang Lifa

Recruit Express Pte Ltd

EA License No. 99C4599

EA Personnel Registration Number: R2197080

We regret that only shortlisted candidates will be contacted.