Job Responsibilities:

The role involves managing all legal aspects of the Group's business, including M&As, JVs, and investments, as well as handling general corporate legal matters and compliance. Responsibilities include providing legal advice, managing litigation, ensuring regulatory compliance, and coordinating with external counsel. Additionally, the position entails overseeing compliance policies, corporate secretarial duties, and risk management activities. The incumbent is also responsible for facilitating training, driving continuous improvement initiatives, and liaising with stakeholders.

Requirements:

• Bachelor's Degree in Law required.
• Minimum of 5 years of relevant experience in corporate commercial law, ideally gained in-house or in a law firm.
• Strong understanding of legal advice related to general corporate advisory work, including company and contract law.
• Familiarity with SGX Listing Rules and Regulations is advantageous.
• Completion of ICSA or relevant postgraduate/professional qualifications would be beneficial.

Job Overview

The role of a Cyber Account Managers is responsible for effectively articulating the value of Ensign Infosecurity Cyber Security offerings to commercial prospects and clients through strategic selling skills.

Duties and Responsibilities

· Involved in the direct sales process by managing new and existing accounts

· Develop and lead security account plans and strategies for each assigned account using all available resources (executive sponsors, marketing, product partners, services BU, etc)

· Drive sales revenue growth through new project identification, creation and cross-sell opportunities.

· Forecast and report activity accurately in line with the sales target allocation

· Identify major projects within the accounts and running activities to build a strong client relationship

· Serves as a key point of contact between the client and the organization

· Informs clients of new integrated solutions offerings and recommends integrated solutions that suit clients’ business needs

· Craft high-level relationships within assigned accounts to win incremental product and services business

· Responsible for preparation and submission of bids documents and proposals

· Work with technical resources to present a competitive analysis, proposals and solutions to response to client requirement

Requirements

· Experience selling integrated cyber security solutions (that bring together both hardware and software products) in large or complex deal in commercial sector ($500K+) to achieve revenue/sales targets

· Validated track record of over-achievement

· Able to build and execute on an account plan with a security approach

· Adept at communicating with a largely technical audience

· Able to conduct product demonstrations

· Experience in applying solution-selling methodologies to improve corporate revenue growth

· Track record of closing both tactical and strategic opportunities

Preferred Skills /Qualities

· Good all round knowledge of Security Market in commercial sector

· Direct touch sales combined with experience working in a matrixed organisation

· Good interpersonal, communication and presentation skills

· Self starter

· High level of attention to detail

· Relevant security diploma, certifications or security vendor certifications is preferred

Key Responsibilities:

• Perform administration, support and operation of the project's security solution platforms and supporting infrastructure, focusing on Privileged Access Management (PAM), Network Intrusion Prevention System (NIPS), Wireless Intrusion Prevention System (WIPS), Network Access Control (NAC) and common systems (Windows and Linux OS, System Monitoring, Backup, Hypervisors and SAN Storage).
• Prepare professional reports and slide decks for submission to client on operational status
• Attend operational meetings with client
• Maintain and update documentation for operations, including asset lists, account lists, DR and health check plans
• Identity, evaluate and recommend enhancements to operational processes and procedures.
• Execute changes in accordance with the established change management process
• Support key activities including execution of BCP and DRP
• Implement approved service requests from the client within required timelines
• Support vulnerability assessments and remediate findings
• Support investigation of security incidents

Requirements:

• At least 5 years of experience in mid-sized Day 2 operations, out of which at least 2 years in providing technical support and administration of the focused security solutions
• At least 2 years of experience in supporting common systems and infrastructure is preferred
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Positive working attitude and a team player
• Strong interpersonal and communication skills, as this role entails 50% of time in client premises

Job Description Summary

Our Security Solutions team works closely with other security engineers to deliver security solutions to the project for our customers. You will play a part in the team to research, design, architect and implement security solutions such as Endpoint Protection, Endpoint Detection and Response (EDR), SIEM, SOAR, Threat Intel Platform, etc.

If you are someone with a strong passion in security technologies and is a team player who strives in a team setting, we welcome your application!

Key Responsibilities

• Carry out implementation, maintenance, support and operation of the project's security solution platforms.
• Maintain understanding of the architecture and work with security team to understand the use case and playbooks to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Perform day to day operational task, scheduled change requests, troubleshooting and maintenance of the implementation.
• Develop and maintain automation infrastructure for build and maintenance of security solutions
• Managing of security solutions, including patch management such security solutions.
• Support vulnerability assessments by reviewing and providing remediation to the security hardening of the security solutions.
• Involvement in improving and evolving workflow, processes and best practices to increase system maintenance efficiency and security standards.
• Sharing of knowledge through technical documentation, knowledge based articles and sharing sessions with fellow peers in the team.
• Collaborate with relevant parties and provide consultation as a Subject Matter Expert (SME) to deliver final project outcome
• Reviewing and finetuning firewall rules and IPS signatures for enhanced security controls
• Test and update Endpoint Protection and EDR signatures
• Extracting quarantined malware for reverse engineering
• Creating and maintaining EDR blacklist
• Onboarding new log sources to SIEM and Data Lake
• Crating and maintaining log parsers / data flow for onboarded logs

Requirements

• At least 3 years of experience in providing technical support and administration of the security solutions (Endpoint Protection, EDR, SIEM, SOAR, Threat Intel Platform, etc)
• Working experience in powershell, bash and/or python scripting
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Basic project management skills
• Positive working attitude and a team player
• Passionate in information security and keen attitude to learn
• Professional certificates such as SIEM Certified Administrator, SIEM Certified Architect, SOAR Certified Administrator, equivalent or more.
• Professional training or certificates in Splunk, McAfee, Carbon Black, Anomali, RSA SecurID will be an added advantage
• Disciplines in Computer Science, Computer or Electronics Engineering, Information Technology or related qualifications

Key Responsibilities:

• Develop new custom parsers for parsing and field extraction of new log source types, including testing and finetuning
• Research, evaluate and identify the most appropriate mechanism for efficient parser development
• Modify and enhance existing parsers to adopt to log variants
• Document the newly created or modified parsers
• Work with engineering team to deploy and test the new or modified parsers
• Update development progress and issues to team lead
• Provide inputs to Delivery Managers on log format changes required to reuse existing parsers

Requirements:

• At least 3 years of relevant work experience in log management, log onboarding to SIEM, connector development, scripting and/or data engineering
• Certified as Splunk Core Power User or higher
• Experienced in Splunk Processing Language and Regex
• Good working knowledge of cloud environment (AWS and/or Azure)
• Please note that this role will be 8 months direct contract.

The professional will be joining a top team in delivering complex Cyber Security solutions to defend against cyber threats of the world. We are looking for a dedicated team player who wants to make a career in the Vulnerability Management (VM), Data Protection or Governance, Risk and Compliance (GRC) domain.

He/she will be responsible for his/her career by providing professional services to implement turnkey projects for our clients. A problem solver, he/she will treat each technical issue as a learning opportunity and challenge. No two days will be the same as opportunities are aplenty in deploying challenging solutions in various enterprise settings.

Roles & Responsibilities:

• Engage clients in identifying business and technical requirements relating to cyber security solutions for GRC, VMS, Data Protection (DLP)
• Deploy projects and provide consultation to clients as a Subject Matter Expert (SME) from Design to Implementation phase in System Development Lifecycle (SDLC)
• Create technical documentation for the solution deployment
• Empower clients through technical enablement
• Communicate and handover to support team (L1) after implementation
• Support as post-sales support services (L2) when necessary

The ideal candidate should possess:

• At least 2 to 5 years of IT or Cyber Security experience
• At least 1 to 2 years of implementation experience in one or more of Vulnerability Management (VM), Data Protection and Governance, Risk and Compliance (GRC) solutions
• Problem solver with strong analytical skills
• Dynamic individual and team player with positive working attitude
• Good communication and written skills
• Passionate about Cyber Security
• Relevant diploma or degree qualifications in Information Technology or Cyber Security

Candidates with more years of relevant experience may be considered for the role of a Senior Consultant.

Duties & Responsibilities

• Engage clients to identify requirements relating to cyber security solutions such as Database Security, Application and Cloud Native Security
• Conduct Solutions Presentations and Perform Proof of Concept (POC) / Proof of Value (POV) for clients to ensure the solution meets their requirements
• Respond to RFP, ITQ, RFQ, generate proposals, scope, and size technical solutions for clients
• Conduct project deployments and provide consultation to clients as a Subject Matter Expert (SME)
• Create technical documentation for the solution deployment
• Perform knowledge transfers / trainings to clients through technical enablement
• Provide post-project support services for corrective and preventive maintenance when necessary

Requirements

• Good diploma or bachelor’s degree in Information Technology
• Experience with Cloud Computing Platforms, Database Security and Application Security will be preferred
• Experience in leveraging and expanding the capabilities of existing analytical tools and technologies
• Experience with DevOps and Cloud Native Security is advantageous
• Knowledge in information security technologies & cyber threat actors, cyber-crimes and fraudulent activity targeting the technology or various industries
• Positive working attitude
• Good communication and written skills
• Passionate in information security
• Experience in programming and scripting is preferred

Responsibilities:

• Provide basic support to end-users and application teams for security tools, including installation, configuration, and troubleshooting.
• Collaborate with vendors to acquire necessary updates, patches, and support for security tools.
• Assist in monitoring security tool alerts and notifications, escalating potential issues to the appropriate teams when necessary.
• Maintain an up-to-date inventory of all IT security tools, including antivirus software, EDR, microsegmentation, and other security solutions.
• Regularly reconcile security tools inventory with active licenses and installations to identify discrepancies and ensure accurate asset management.
• Generate reports on tool inventory, license status, and reconciliation results for management and compliance purposes.
• Maintain organized records of reconciliation activities, updates, and communications with vendors.

Qualifications:

• Basic understanding of IT security principles and practices.
• Strong organizational and documentation skills.
• Attention to detail and a focus on accuracy.
• Familiarity with IT security tools and their functions.
• Effective communication skills to collaborate with internal teams and vendors.

Duties & Responsibilities:

• Managing and leading a team of engineers for presales and project deliveries
• Supporting pre-sales engagement for projects relating to Advanced Analytics
• Responsible for ensuring projects are delivered in a timely manner
• Responsible for supporting presales activities in relation to developing solution design, bill of materials and scope of work
• Deploy Advanced Analytics solution related projects and provide consultation with regard to the deployment as a Subject Matter Expert (SME)
• Create technical documentation for the AA deployment
• Provide post-sales support services for corrective and preventive maintenance
• Carry out technical enablement to sales team and/or junior members of the team
• Perform consultancy activities such as conducting technical presentations and engagement to prospective customers, preparing scope of work, bill of materials and technical proposal for submission for tender bids
• Identity, evaluate and recommend new technologies that would be relevant to Adaptive Defence
• Provide mentorship and guidance to junior staff

Requirements:

• Bachelor’s Degree in Information Technology or Cyber Security
• Professional certificates such as SANS or ISC2 would be advantageous
• At least 7 years of IT security experience and experienced in a wide range of cyber-security technologies
• Technical knowledge in the following information security technologies & solutions is preferred: SOAR Platform / Threat Intel Platform / Threat Intel Feeds
• Experience in IT Network / System Administration will be a strong advantage
• Experience as a technical lead in large-scale projects involving multiple technologies as part of a turn-key solution
• Strong troubleshooting and analytical skills that can resolve issues as the final point of escalation
• Strong presentation, communication and written skills
• Basic project management skills
• Positive working attitude
• Passionate in information security

Ninemer Communications is a local communication consultancy firm established in 2010. The agency has a strong roster of B2C and B2B clients spanning industries such as FMCG, government, MICE, travel and more. Our agency is looking for dedicated and dynamic individuals to add to our team.

WHAT YOU WILL BE DOING

1. Assist our account teams in ongoing PR, social media and digital projects.
2. Research for media materials, social media outreach or new business proposals.
3. Monitor, collate and analyse media coverage.
4. Manage monthly reports to derive insights.
5. Other administrative duties.

QUALIFICATIONS AND BACKGROUND REQUIRED

A diploma in any subject is acceptable, although English, journalism, media studies or mass communications are preferred. In-house or Agency experience in corporate communications or public relations will be advantageous.

A SUITABLE CANDIDATE SHOULD ALSO HAVE THESE TRAITS

• Strong communication and interpersonal skills.
• Multitasking is a norm and able to work well under stress.
• Able to work independently and in a team.
• Meticulous and a real eye for detail.
• Knack for learning fast and hunger for knowledge.
• Responsible and diligent.
• Excellent time management and organisational skills to ensure deadlines are met.

HOW TO APPLY

We would love to hear from you! Send us your CV, Cover letter, recent photograph, expected salary and date of availability to us.

Please write in to [email protected]

PRODUCT AREA

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats.

ADDITIONAL JOB DESCRIPTION

As a Cyber Security Consultant, you will blend risk assessment, strategic planning, and client collaboration. You'll conduct in-depth cyber maturity assessments, develop forward-thinking strategies, and lead realistic simulations that help clients prepare for and respond to cyber threats. You will identify vulnerabilities and develop actionable mitigation plans. You'll empower clients with data-driven insights, enhancing their security posture.

Qualifications

JOB RESPONSIBILITIES

• Perform in-depth assessments to identify and analyze cyber vulnerabilities and threats. Prioritize risks based on their potential impact.
• Craft cyber risk mitigation strategies, ensuring alignment with regulations (e.g., GDPR, ISO 27001, NIST/CIS Controls). Develop effective policies.
• Develop and update policies and procedures (i.e. playbooks) for risk management and incident response.
• Collaborate with clients to tailor cyber security solutions. Generate clear reports and presentations that illustrate risks and mitigation plans. Scope and propose solutions to clients.

MINIMUM QUALIFICATIONS

• Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent practical experience.
• 5 years of experience in cyber security with a risk assessment focus.

PREFERRED QUALIFICATIONS

• Master's degree in a relevant field. Professional certifications in cyber security (e.g., CISSP, CISM, CRISC).
• Consulting and/or project management experience.
• Experience leading cyber security assessments, including Table-Top Exercises (TTX).
• Knowledge of security frameworks (e.g., ISO 27000, NIST CSF).
• Ability to present complex security concepts to varied audiences (e.g. technical and executive).
• Excellent communication and problem-solving skills.

Responsibilities

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Participate in regular threat focus meetings with fellow SOCs
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assist the Security Analysts with the investigative works
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations thru CESM IE/MCE Rules, DB scripts etc.
• Works with R&D for new signature package for deployment.
• Filtering and fine-tuning the security events flowing to our databases
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Working with engineering team to set up new initiatives i.e. honeypot on the Internet ADSL link to improve security incident detection capabilities
• Monitor real-time third party security feeds, forums, and mailing lists to gather information on vulnerabilities and exploits related to the client
• Assess each event based on factual information and wider contextual information available
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

• Provide guidance to National Electronic Health Record (NEHR) project team in ensuring that NEHR system complies with security policies (IM8) and the relevant legal and regulatory frameworks (such as PDPA or Cybersecurity Act) throughout the product lifecycle
• Perform adequate risk management, including identification, assessment and provide treatment of security risks associated with NEHR. Risk assessment has to be performed in accordance with IM8 Risk Management Methodology framework
• Provide guidance to vulnerability assessments, source code review and penetration tests of NEHR system so that remediation actions can be undertaken by NEHR project team within the agreed timelines
• Provide security consulting and advisory to NEHR project team
• Review RFP proposal compliance with security requirements
• Review architecture design developed by Enterprise/Solution/Security Architect
• Perform cybersecurity assurance activities across the different stages of SDLC
• Perform independent assessments of the technical security controls implemented within the projects/systems to determine the overall effectiveness of the controlsDegree in Computer Science, Information Systems, Engineering or equivalent
• At least 10 years of IT security experience in areas of security governance, risk management, application security design, security project management or security operation
• Strong risk management and risk articulation skills
• Professional security certification is preferable, such as CISSP, CISM, CISA or other similar security certifications
• Self-motivated with the ability to work independently and as a team member with minimal direction
• Strong interpersonal and stakeholder management skills
• Good written and communication skills

Who we are

Crédit Agricole Corporate and Investment Banking (Crédit Agricole CIB) is the corporate and investment banking arm of Crédit Agricole Group, world’s 10th largest bank by total assets.

Our Singapore center (“ISAP” or “Information Systems Asia Pacific”) is the 2nd largest IT setup (after Paris Head Office)” for Crédit Agricole CIB's worldwide business. We work daily with international branches located in 30 markets by:

• Envisioning and preparing the Bank’s futures information systems
• Partnering and supporting core banking flagships and transverse areas in their large scale development projects.
• Providing premium In-house Banking applications

This unique positioning empowers us to bring our core banking business a sustainable competitive advantage on the market.

We seek innovative and agile people sharing our mindset to support ambitious and forthcoming technological challenges.

ISAP/ITS Department Overview

ISAP IT Production Centre is an offshore delivery center managing IT Operations (RUN) for Paris, London and Asia. With over 250 people, it constitutes one of two main hubs for CA-CIB IT production teams. This setup is operated in partnership with a Service Provider, who provides most resources on site.

ISAP IT Production Centre is split in 4 departments covering the following aspects:

• INFRA: core infrastructure- systems and network services
• APS: application technical support
• Middleware: Data services and Middleware services
• End-user & Transverse: End-user Services and Transversal activities, including Control Tower, Global Operations Center and Data Security Services.

Position

The Head of Section for Data Security Services manages the RUN team and the related activities to data and endpoint security. He/She is the main point of contact for the service provider and the internal clients in the bank. He/She manages the budget for the scope. He/She is also responsible for the transition of the new services from other regions to Singapore and manages the project/transition. The role is a techno-managerial role and will have to be involved in DLP policy/rule modifications as well. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Expert on the technologieswithin data and endpoint security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France, UK, and Russia) remotely from Singapore. France infrastructure represents approximately 90% of the worldwide production activities of CA-CIB.

Team works in Asia and Europe time zones and flexible rotational shift is based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect,
• Encryption Solutions: Disk Encryption, File and Folder encryption,
• Database Audit Monitoring solutions
• Email and Web Phishing Prevention solutions.
• Vulnerability Management
• Idendiity Access Management

Detailed Job Responsibilities

The Manager has a wide spectrum of responsibilities and actions.

As the manager of his/her team, he/she:

• assigns the tasks and manages delegation,
• sets and reviews the work organization according to activity’s requirements and people’s needs and validates the schedules,
• animates the team to encourage collaboration and sharing of practices,
• has a role in supporting people development,
• participates to recruitment process for the team,
• Vendor relation management

As the manager of his/her team, he/she:

• Meets stakeholders on a regular basis to discuss improvement plans, action plans, evolving threats and changing risks, and provide feedback on policies, standards, procedures, guidelines. ISS leads security for GIT and is the main entry point for internal clients outside of GIT (Business Lines, BCP, LGL, and Compliance for security topics).
• The service includes, but is not limited to, incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management, but also global projects like End of Life, New Builds, migrations and upgrades etc., participation in global Infra events (like Power down and DR Tests)
• ensures activity is performed in compliance with norms, standards, processes and procedures,
• gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting,
• Reporting and auditing
• monitors operational KPI and ensure tickets are closed within SLA,
• ensures documentation is up to date and relevant for use,
• implements cross-functions activities including continuous improvement initiatives,
• estimates the yearly budget, sets monthly forecasts and follows up BAU/Project monthly balance.

As an experienced professional in Security domain, he/she:

• supports his/her team or experts’ diagnosis when technical issues raise in his/her scope of expertise,
• is aware of the global IT structure so that he/she anticipates interrelationships within the organization,
• manage L0/L1/L2/L3 activities which involve direct relationships with end users and L3 activities (architecture, design, project management, etc.)
• provide oversight to all Data Security activities to ensure adequate performance, efficiency, and availability,
• engage with technical peer, Service managers, Architect and project teams on technology roadmap and projects, especially with GIT architecture security team.
• ensures the IT Production activities regarding his/her perimeter are performed correctly by the team, complying with defined norms, standards, processes and procedures,
• has to make sure that the defined KPI is met on a day-to-day basis for Incident, request, problem, change management etc.
• has to monitor and push for improvements in the team’s productivity,
• be available and able to drive/manage any complex or high severity incidents that occur within the scope of their role,
• engage in Projects and project deliveries,
• drive and deliver root cause for any high severity issues,
• has to be responsible for providing direction, proactive and reactive support services to maintain the availability and reliability of systems infrastructure in accordance to the SLA,
• Is involved in security incident diagnosis or investigations to help provide evidence or facts during diagnosis or investigation.
• Manage requests from stakeholders on data security tools to provide extracts, reports or information when required

As the first point of contact for the Service Provider, he/she:

• manages the daily relationship with the Service Provider and escalates when needed,
• follows up Provider KPI and related actions,
• coach and develop partner resources to meet the objectives,

As the first point of contact for internal Clients, he/she:

• manages the daily relationship with internal Clients including planning, requests clarification, risks mitigation and service quality
• prepares client feedback for the monthly review.
• serve as point of escalation on major incidents
• have to maintain a smooth relation with partners, vendors and global clients/teams

As a member of ISAP/ITS, he/she:

• facilitates collaboration and spread of information from and to the team,
• participates to the department’s activities including brainstorming, team building and other team or transversal actions,
• fosters innovation mindset,
• contributes to ISAP/ITS global branding and communication
• manage budget (once a year) and forecast (monthly)
• focus on automation and optimum use of the team to improve efficiency
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

• Work Timing is flexible and is scheduled to manage the operations within business hours of Asia and Emea timezone.
• Role may have to attend and lead any critical issues escalated outside of working hours, when operational needs.

Main Duties

As an expert of his/her team, he/she:

• assigns technical tasks and manages delegation for technical issues,
• animates the team to encourage collaboration and sharing of best practices,
• has a role in supporting technical skills development and provides training when required,
• supports new technologies and leverages them to provide consistency of service across streams,
• manages service improvements for all Network and Security services supported throughout the organization,
• documents, reviews, maintains and shares relevant technical information to the team
• provides technical direction, supports services both proactively and reactively to maintain the availability and reliability of system infrastructure in accordance to the SLA,
• implements and develops improvements based on LEAN-CA-CIB best practices,
• focuses on automation and optimum use of the team to improve efficiency,
• drives and delivers root cause for any high severity issue,
• reviews technology changes to identify potential risks,
• is responsible for problem management and resolution

As an experienced professional in Network-Security Services, he/she:

• supports his/her team during diagnosis when technical issues rise in his/her scope of expertise,
• is aware of the global IT structure so that he/she anticipates interrelationships within the organization,
• engages with technical peer, Service managers, Architect and project teams on technology roadmap and projects,
• facilitates transformation projects and suggest future directions for new areas of improvement and change,
• guarantees the production readiness and license to operate of new projects and solutions
• is available and able to drive technically, any complex or high severity incidents that occur within the scope of their role,
• actively engages to understand new technologies and technology trends and reviews them with a view to incorporating them into CACIB operations,
• actively assists in identifying the most technical skilled candidates for open roles,
• technically coach and develop partner resources to improve quality and productivity,
• Define the technical skillset required to support CA-CIB technologies.

As the escalation point of contact for Clients, he/she:

• manages the daily relationship with Clients including planning, requests clarification, risks mitigation and service quality

Legal and Regulatory Responsibilities

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• 15+ years of experience in managing network and security infra.
• 10+ years experience in handling major network security projects (ex: SDWAN )
• 10+ years experience in handling Firewalls/IPS/F5/Pulse/Proxies, Routers/Switches.

Working Hours:

• Primarily match Europe business hours
• On-call support will be expected on a rotational basis

Interested applicants, please email your resume to Shaun Quek Yew Meng

Email: [email protected]

CEI Reg No: R1660732

EA Licence No: 99C4599

Job Description

• Design and develop the red team's customized secure system (remote control program), and ensure that the endpoint protection can be bypassed such as Crowdstrike, Windows Defender, 360 Safeguard
• Reverse analysis of common EDR and HIDS to identify methods for bypassing detection, and embed security principles into the design of system architectures to mitigate the risks
• Research the persistence solutions under common operating systems such as Windows, MacOS, and Linux
• Perform red team engagements related to the periodic review and audit activities of infrastructure security systems (IDC network, office environment, cloud native) and maintain documentation of security standards and procedures

Requirements

• Bachelor’s degree or higher in Computer Science, Information Technology, Programming & Systems Analysis, Engineering, Statistics, or other related fields
• Minimum 3 years of relevant work experience
• Extensive experience in RAT (Remote Access Tool) development, with the ability to customize attack frameworks like Cobalt Strike
• Extensive experience in anti-endpoint protection, providing solutions to bypass the detection of EDR such as CrowdStrike, Windows Defender, 360 Safeguard
• Experience in persistence solutions under common operating systems (Windows, MacOS, Linux)
• In-depth understanding of security mechanisms of Windows/Linux systems, and familiar with offensive techniques in ring0/ring3
• Proficient in scripting/programming languages like C/C++, Go, PowerShell, Javascript, ASM, etc
• Strong reverse engineering skills with proficiency in tools such as IDA Pro, OllyDBG, WinDBG, GDB, etc
• Strong communication skills and effective teamwork spirit
• Self-starter and fast learning ability

Job Description

• Conduct cyber risk assessment (red team engagement) in support of technology initiatives to emulate the APT adversary scenarios, and help identify IT related risk and determine appropriate controls to mitigate risks
• Monitor, track, and manage unknown risk mitigations and exceptions, and ensure adequate monitoring capability is incorporated into solutions
• Research the undiscovered vulnerabilities (0-day) against different IT infrastructures, including operating systems (Windows/Linux), cloud native (Kubernetes/Docker), network devices (routers/switches/firewalls/VPNs), and endpoint management (VMware Workspace ONE/IPMI)
• Deliver the exploit code and plugins for identified vulnerabilities

Requirements

• Bachelor’s degree or higher in Computer Science, Information Technology, Programming & Systems Analysis, Engineering, Statistics, or other related fields
• Minimum 3 years of relevant work experience
• Hands-on experience in writing standalone PoCs of infrastructure vulnerabilities, including writing exploit codes based on known PoCs of vulnerability descriptions
• Familiar with common vulnerability classes such as buffer overflows, command injection, insecure deserialization
• In-depth understanding of modern security mitigations and methods to bypass them (e.g. stack cookies, SafeSEH, DEP, ASLR, CFG, etc)
• In-depth understanding of security mechanisms of Windows/Linux systems, and familiar with offensive techniques in ring0/ring3
• Experience in vulnerability analysis, fuzzing, reverse engineering, or advanced exploitation techniques, with proficiency in tools such as IDA Pro, OllyDBG, WinDBG, GDB, Burp Suite, etc
• Proficient in programming languages like Python, Go, or Java
• Strong communication skills and effective teamwork spirit
• Self-starter and fast learning ability

Responsibilities

• Filing
• Preparation of legal documents and opening of conveyancing cases. Working closely with the sales team in ensuring smooth completion of transactions.
• Communication
• Liaising with Agents, Brokers, clients and related parties for further verification and clarification.
• Data Collection
• Administrative support in requesting and retrieving of necessary documents.
• Scheduling of Appointment
• Setting up of appointment for client to sign legal documents with the Solicitor as well as monitoring deadlines.
• Bank notices

Requirements

• Meticulous, well-organised and good time management.
• Able to work long hours (if required).
• Able to work both independently and as a team.

Interested candidates are invited to apply online. Only shortlisted candidates will be notified. Thank you for applying.

About Us

Green Link Digital Bank is Singapore's inaugural wholesale digital bank focusing on supply chain finance, mainly serving MSMEs and aiming to help MSMEs grow and improve digitization.

We are seeking a highly motivated and detail-oriented IT Security Intern to join our team. The successful candidate will work closely with our IT Security team to ensure the confidentiality, integrity, and availability of our information systems. The IT Security Intern will be responsible for assisting in the development, implementation, and maintenance of security policies, procedures, and standards. The intern will also assist in the identification, analysis, and resolution of security incidents.

Duration: 6 months

Responsibilities

• Assist in the development, implementation, and maintenance of security policies, procedures, and standards.
• Assist in the identification, analysis, and resolution of security incidents.
• Assist in the development and delivery of security awareness training programs.
• Assist in the evaluation and testing of security technologies.
• Assist in the development and maintenance of security documentation.
• Assist in the monitoring and reporting of security metrics.

Requirements

• Currently pursuing a bachelor’s degree in Computer Science, Information Security, or a related field.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work independently and as part of a team.
• Knowledge of security technologies and concepts is a plus.
• Able to commit for a minimum of 6-months.
• Full-time interns preferred, but open to part-time interns of minimally 3 working days.

Job Description:

Summary:

This candidate plays a crucial role in ensuring the security of project systems, applications, and data. They are responsible for planning, coordinating, and executing security testing processes to identify vulnerabilities and weaknesses in the project’s IT application and infrastructure. This role requires a deep understanding of cybersecurity principles, testing methodologies, and strong leadership skills.

Key Responsibilities:

• Security Test Strategy: Develop and implement a comprehensive security testing strategy to identify and mitigate vulnerabilities across various technology stacks and platforms.
• Test Planning: Create test plans, schedules, and resource allocation for security testing activities, considering the criticality of systems and applications.
• Team Leadership: Manage and lead a team of security testers, ensuring they are well-equipped, motivated, and focused on delivering high-quality results.
• Threat Assessment: Collaborate with security experts to identify potential threats and vulnerabilities, and prioritize testing efforts accordingly.
• Test Execution: Performing and coordinating security testing activities, such as penetration testing, vulnerability scanning, code review, and more.
• Reporting and Analysis: Analyze test results, prepare detailed reports on identified vulnerabilities, and recommend remediation measures.
• Compliance: Ensure that security testing aligns with industry standards, regulatory requirements, and best practices.
• Reporting: Maintain comprehensive documentation of security test procedures, results, and improvement recommendations.
• Communication: Effectively communicate security findings and recommendations to stakeholders, including IT teams, management, and external auditors.
• Risk Management: Identify and assess security risks, and work with stakeholders to develop risk mitigation strategies.

Qualifications:

• Mandatory relevant certifications such as CISSP/OSCP/CREST
• Bachelor's degree in computer science, cybersecurity, or related field
• Proven experience in security testing and vulnerability assessment.
• Proficiency in using various penetration testing tools such as Metasploit, Nmap, Burp Suite, and others.
• Strong knowledge of security testing tools and methodologies. Leadership and team management skills.
• Excellent problem-solving and analytical abilities.
• Knowledge of relevant security standards and compliance requirements.

Nice to have skills :

• Candidates for this role should have 6+ years of experience in cybersecurity, with at least 2 years in a leadership or managerial position.

About Us!

The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

• Develop, maintain, and operationalise a Threat Risk Assessment framework for HDB to identify and mitigate the threats and risks in its IT systems and programmes.

• Work with key stakeholders to ensure high cybersecurity posture of application systems through activities such as the following:
i. Promote secure coding practices.
ii. Review of Vulnerability Assessment and Penetration Testing (VAPT) Cases
iii. Facilitate remediation of vulnerabilities arising from application security testing
iv. Setup DevSecOps through CI/CD pipeline
v. Securing Cloud Workloads
vi. Procure & Maintain Security testing Tools/services to support source code review and VAPT.

• Related works include Threat Risk Assessment, project specific cybersecurity specification, cybersecurity proposals evaluation, cybersecurity design review, System Security Acceptance Test and review, Vulnerability Assessment and Penetration Test.

• Manage and promote IT security awareness and outreach programme.

• Keep abreast of the latest industry ICT security practices and technologies as well as emerging threats and vulnerabilities and recommend appropriate controls for implementation to improve the enterprise security posture.

• lead and/or participate in the adoption of new technological advances and best practices in infrastructure security systems to mitigate security risks.

You will be a Great Fit if you:

You should possess a strong background in ICT Security, Information Security, Information Technology, Computer Science, Cybersecurity or equivalent.

• At least 2 years of experience in ICT works involving the setup, development, and management of web-based systems, with at least 2years of relevant ICT security work experience.

• Preferably possess one or more appropriate IT security certifications, such as CISSP, CRISC, CISM, CISA, CEH, etc

• Preferably with strong knowledge and experience in information and cybersecurity risks, controls, vulnerability assessment/penetration testing, compliance, and industry IT/cyber security best-practices.

Good to Have:

• Domain knowledge of access control; telecommunications and network security; cloud security; Cybersecurity & information security governance and risk management; software development security; cryptography; security architecture and design; operations security; security incident response and management; business continuity and disaster recovery planning; legal regulations, investigations, and compliance; physical (environmental) security

• Knowledge in IT security principles and IT controls as well as industry best practices and frameworks pertaining to IT Controls (IM8, COBIT, ISO27001/2 etc.)

• Good understanding of the current IT/Cyber Security landscape Great Attitude to bring the best out our team
• work beyond business hours including weekend when necessary.

• possess good interpersonal and communication skills.

• demonstrate a strong sense of urgency and have good troubleshooting and problem-solving skills with good attention to detail.

• conduct research on ICT and cybersecurity technologies where necessary to perform the assigned tasks.

• have good command of written and oral English

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14317734/a94bccfb-172f-1ede-b0fe-e1923775726c

A job with Merlin isn’t like a job anywhere else. With attractions around the world, from rollercoasters to wax figures, we don’t trade in suits, handshakes or briefcases. We trade in fun. In smiles, shrieks and spine-tingles. In Memories. In magic. But there are no tricks behind our magic. Instead, there are people like you. Passionate, dedicated people who are committed to making sure our worldwide attractions and guests’ experiences are the best they can be.

Due to continuing growth and development of Merlin’s attractions and brands on a global scale, we are looking for a Group Health, Safety & Security (HSS) Auditor to join our HSS team on a permanent basis. The role can be based at our Madame Tussauds Singapore or LEGOLAND Malaysia offices, and will entail extensive international travel.

About The Role...

Join us as the Group Health, Safety & Security Auditor, reporting into the Health, Safety and Security Director (Standards and Assurance). Together, we'll champion the implementation of Merlin's robust HSS assurance program. This innovative program employs a triple-lock strategy, integrating site-based self-audits, internal Group HSS audits, and external audits conducted independently.

Your role as the HSS Auditor will be pivotal in supporting the execution of annual independent internal HSS audits. Here are the key objectives that will drive your impact:

Compliance Assurance: Conduct audits across Merlin’s attractions, production sites, and associated business activities. Your mission is to ensure unwavering compliance with legal requirements and internal standards, safeguarding the health, safety, and security of our valued guests, employees, contractors, and all stakeholders.

Policy Vigilance: Take an active role in monitoring HSS policies, procedures, and working practices within Merlin's operations. Your expertise will be instrumental in ensuring sustained compliance with legal, internal, and other pertinent requirements, fostering consistency across all facets of our diverse business operations.

By joining our dynamic team, you'll play a pivotal role in upholding Merlin's commitment to safety and security, making a real impact on the well-being of everyone connected to our fun world. If you're ready to contribute to a safer, more secure Merlin experience, we invite you to be a key player in our journey towards excellence.

About You...

Experience;

• Experience and knowledge of best-in-class HSS practices and systems
• Experience of HSS auditing, in an objective and thorough manner. Process and detail-oriented
• Able to scrutinise complex work practices, assess compliance against set HSS standards, determine risk levels and provide reasoned judgments
• Strong practical knowledge and expertise in the implementation and on-going development of management systems, based on recognised standards such as ISO 45001, ISO 9001 or ISO 14001 (desirable but not essential).
• Considerable experience in a similar position(s), or where skills / experience are readily transferable into this role
• Strong communications skills and cultural sensitivities
• Experience in the implementation, maintenance and certification of ISO 45001 management systems or equivalent is desirable
• First-class teamwork skills, able to build solid relationships across multiple Operating Groups
• Experience of working internationally in high-risk industries is desirable
• Business and commercial awareness to enable pragmatic resolution of compliance issues
• Creative and keen to trial new concepts to help keep Merlin at the forefront of HSS
• Determination to help deliver a first-class HSS audit function
• Ability to use own initiative and work / travel alone
• Flexible approach to working hours due to global audit / travel commitments
• Ability to prioritise own workload and meet strict deadlines

Qualifications;

• A NEBOSH Diploma, or similar, and/or proven experience in health and safety compliance auditing Successful completion of either a registered Lead Auditor course and/or Internal Auditor Course to ISO 45001 (desirable but not essential).

Other;

• The successful candidate should live in reasonable distance to an international airport, and be willing and able to complete extensive travel throughout the year

The Benefits…

We’re growing fast and alongside a fun and friendly environment, we offer a fabulous package and amazing prospects – ideal if you’re already fantastic and want to become even better (our magic can help here).

Everyone Matters at Merlin.

At Merlin we welcome the world to our magical attractions and resorts every day and we want to reflect that same multicultural mix inside our business too. We strive to create an inclusive and diverse workplace where people can be themselves, have the same opportunities and thrive together. Because at Merlin, everyone matters!

Together, we work to create a workplace where everyone feels valued, no matter their age, race, gender, disability or sexual orientation. Although we understand that we'll always be learning and growing, we aim to be the most inclusive and flexible employer in our industry.

If you have any questions or if you require any adjustments due to disability or a medical condition, we'd love to hear from you at [email protected] and one of the team will get back to you as soon as possible.

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

We are seeking a highly skilled and motivated Cloud Security Specialist to join our dynamic team and play a pivotal role in ensuring the security, integrity, and compliance of our cloud-based systems and applications. As a Cloud Security Specialist, you will work collaboratively with cross-functional teams to design, implement, and maintain robust security measures that protect our organisation's assets and data in cloud environments.

• Cloud Security Strategy: Develop, implement, and maintain an effective cloud security strategy and architectures that adhere to best practices, industry standards, and regulatory requirements.

• Security Architecture: Collaborate with engineering teams to design and implement common cloud security architectures, ensuring principles of least privilege, zero trust, defense in depth, and security by design.

• Infrastructure Security: Implement and manage security controls for cloud infrastructure components, including networks, virtual machines, containers, and serverless services. Apply security groups, network segmentation, and encryption to safeguard data in transit and at rest.

• Identity and Access Management (IAM): Design and enforce robust IAM policies to manage user access, authentication, authorisation, and privilege escalation within cloud environments.

• Security Monitoring and Incident Response: Set up and manage continuous security monitoring, threat detection, and incident response processes for cloud environments. Respond to security incidents, perform root cause analysis, and implement preventive measures.

• Vulnerability Management: Conduct regular vulnerability assessments to identify and remediate security weaknesses. Know how to apply patches and updates in a timely manner.

• Security Compliance: Ensure and assess cloud environments adhere to relevant government ICT/SS compliance frameworks and regulations.

• Security Automation: Build and maintain security automation scripts and tools to streamline security processes such as provisioning, configuration management, and incident response.

You will be a Great Fit if you:

• Have experience (2+ years) in designing, implementing, and managing security solutions in cloud environments (AWS, Azure, Google Cloud, etc.).

• Understand cloud security principles, including network security, encryption, identity and access management, and security monitoring.

• Are proficient in security tools such as intrusion detection/prevention systems, SIEM, vulnerability scanners, network firewalls, and web application firewalls.

• Have implemented security best practices within Infrastructure-as-Code frameworks (e.g. Terraform, CloudFormation, Ansible) to ensure secure infrastructure provisioning and configuration management.

Good to Have:

• Relevant professional certifications such as Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, or equivalent.

• Proficiency in scripting or programming languages (e.g., Python, PowerShell) for security automation and orchestration.

• Experience in using containerisation technologies, such as Docker, Kubernetes, AWS ECS, and knowledge in securing containers.

• Proficiency in implementing DevSecOps and CI/CD pipelines, with experience in relevant CI technologies such as Git, Gitlab, and Jenkins. Hands-on experience with security testing tools (e.g., SAST, DAST, SCA) and vulnerability management.

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14317657/a94bccfb-172f-1ede-b0fe-a14612ad726c

The successful candidate will join a team of Systems Engineer primarily responsible for maintaining on-premises and cloud applications, servers, storage, and network equipment. The position reports to the IT Delivery Manager/Lead and will be expected to plan, install, configure, and manage all aspects of IT infrastructure to ensure reliable, secure, and cost-effective delivery of services.

Staff level, for the successful candidate will be determined based on their experience level and the technologies they are skilled in.

[Primarily Duties]

· Improve and maintain the network infrastructure and network security setup and architecture.

· Design, configure, deploy, and maintain all network and security solutions, both on-premises and in the cloud.

· Proactively work to improve reliability, stability, and security of the cloud and on-premises environments.

· Perform troubleshooting, performance tuning and capacity planning.

· Create and update documentation.

· Work with developers to deploy and maintain applications, including hardening and vulnerability remediation.

· Research and evaluate new hardware and software solutions.

[Secondary Duties- common]

On top of the primary responsibility, he/she will be required to perform the following duties on a rotational basis

1. Daily operation task, e.g. backup, system maintenance, system performance monitoring, end user PC support.

2. After office hours standby duty to attend to system alerts and to provide 2nd level support to our helpdesk and software developer when they encounter problems

Requirements

· Degree/Diploma in Information Technology, Computer Science or equivalent.

· Preferably to have sound working experience in implementing, managing and perform disaster recovery for the following: -

a) Network Infrastructure and security architecture, i.e. Subnetting, Micro segmentation technologies, security zoning, air gapping, WAN optimization, zero trust networking, etc.

b) Kubernetes architecture on premise and Azure

c) Microsoft Azure architecture and security solution

d) Good understanding of networking and security solutions, e.g. Core switch, Cisco Routers, F5/Azure WAF, F5 load balancer/GTM, Allot, Fortigate, Palo Alto.

a) IPv4/v6 Networking

b) Security related certification, CISSP, CEH or equivalent will be desirable but not essential

· Additional experience/certification in the following is not mandatory but will be strongly advantageous:

a) Enterprise Storage

b) AWS experience

c) Worked in a system integrator environment before.

· Candidates must possess strong analytical and problem-solving skills, have good aptitude in learning new skills, be a team player, and can work in a fast pace environment with minimum supervision.

JOB DESCRIPTION

The Google Cloud Platform team helps customers transform and build what's next for their business — all with technology built in the cloud. Our products are engineered for security, reliability and scalability, running the full stack from infrastructure to applications to devices and hardware. Our teams are dedicated to helping our customers — developers, small and large businesses, educational institutions and government agencies — see the benefits of our technology come to life. As part of an entrepreneurial team in this rapidly growing business, you will play a key role in understanding the needs of our customers and help shape the future of businesses of all sizes use technology to connect with customers, employees and partners.

ADDITIONAL JOB DESCRIPTION

As a Security Sales Specialist, you will enable secure cloud transformations for organizations yearning to revolutionize their approach. You will bridge the gap between security solutions and business needs, empowering organizations to proactively hunt threats with advanced analytics, streamline operations with a unified platform, and conquer complex situations with unparalleled expertise. You will become a catalyst for achieving proactive threat detection, automated incident response, and airtight data safeguarding, ultimately unlocking the transformative power of Google cloud security and propelling businesses with confidence and agility.

Qualifications

JOB RESPONSIBILITIES

• Be responsible for new business development via prospecting, qualifying, promoting, and closing software, hardware solutions, or services and products.
• Lead the Channel Partner network for products under the distribution product portfolio and work collaboratively with the Regional Channels Sales Manager.
• Understand the technology footprint, strategic growth plans, business drivers, and technology strategy of assigned accounts.
• Drive business development, forecast accurately, and achieve strategic goals by leading customers through the entire business cycle.
• Build relationships with government customers, influence long-term strategic direction, and serve as a business partner.

MINIMUM QUALIFICATIONS

• 15 years of experience with solutions-promoting in security solutions.
• Experience with security and networking technologies.
• Experience in promoting to the enterprise sector.

PREFERRED QUALIFICATIONS

• Experience working with and presenting to C-level executives.
• Understanding of broad range of security and networking technologies.
• Ability to provide accurate forecasting to the reporting manager regularly.