GIC is one of the world’s largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world’s industry leaders. As a leading global long-term investor, we Work at the Point of Impact for Singapore’s financial future, and the communities we invest in worldwide.

Chief Operating Officer (COO) Office
The COO Office supports our COO to streamline operations and align them with strategic goals. You will work with the COO, Heads of Departments, and stakeholders across GIC to achieve operational excellence.

Cyber Security, Information & Technology Risk Management
You will be a part of an independent risk management function to protect the firm’s information technology assets, including business data, from external threats and operational risks, and to facilitate the firm’s digitalisation journey in a secure manner.

What impact can you make in this role?
You will be empowered to be at the top of your game by providing strategic partnership, and innovative technology solutions that supports GIC’s vision of being a tech-driven, global, long-term investment firm.

What will you do as a VP, Cyber Security Engineering, Cloud Security & Data Protection Specialist?

• Identify and recommend improvement areas in existing enterprise security architecture to address evolving cybersecurity threats
• Align and balance business requirements with cybersecurity, information, and technology requirements, based on the organization’s risk appetite
• Evaluate, perform proof-of-value/proof-of-concept, design, build and implement enterprise-class cybersecurity systems
• Develop integrated security operating models and documentations to ensure operational efficiency, scalability, and sustainability
• Act as a domain expert and trusted partner in Cyber Security & Resilience; work closely with stakeholders in Technology Group and other business groups on cybersecurity engineering related matters.

What qualifications or skills should you possess in this role?

• Bachelor’s Degree in Information Technology, Computer Engineering or equivalent.
• At least 10 years of relevant experience preferably in financial services or asset management industries, with minimum 7 years in Cyber Security or Information Security.
• Professional qualification such as AWS and Azure certifications.
• Hands-on experience in implementing and operationalizing cloud security solutions (IaaS, PaaS, and SaaS) and data protection solutions (data classification, labelling, encryption, key management, HSM, KMS, data access controls, DLP, post-quantum computing).
• Experience must include provisioning with Infrastructure as Code (AWS CloudFormation and/or Azure Resource Manager), cloud IAM implementation, and data protection in cloud environments
• Scripting and coding skills, with proficiency in Java, Python, C#, or similar programming languages, and good understanding of REST API’s and JSON.
• Knowledge of DevSecOps tools, design, automation and and CI/CD tools, including IaC (Infrastructure as Code), GitLab/GitHub, Jenkins, application containers, as well as IAM (Identity and Access Management) in AWS and Azure.
• Working experience with other cybersecurity products such as SIEM, threat intelligence, security incident response and forensic investigation, network and endpoint protection, and others, would be advantageous.
• Must be meticulous, versatile, and inquisitive, having strong attention to detail with an analytical mind and outstanding problem-solving skills.
• Desire to learn, working in a diverse environment, interacting with multiple teams and functions to support strategic goals. Be a good team player and excellent communicator.
• Professional qualification in information security, such as CISSP / CISM / CEH will be advantageous.
• 
  

Work at the Point of Impact
We need to be forward-looking to attract the right people to help us become the Leading Global Long-term Investor. Join our ambitious, agile, and diverse teams - be empowered to push boundaries and pursue innovative ideas, share your views, and be heard. Be anchored on our PRIME Values: Prudence, Respect, Integrity, Merit and Excellence, which guides us in how we make our day-to-day decisions. We strive to inspire. To make an impact.

Flexibility at GIC
At GIC, our offices are vibrant hubs for ideation, professional growth, and interpersonal connection. At the same time, we believe that flexibility allows us to do our best work and be our best selves. Thus, our teams come into the office four days per week to harness the benefits of in-person collaboration, but have the flexibility to choose which days they work from home and adjust this arrangement as situational needs arise.

GIC is an equal opportunity employer
As an employer, we passionately believe every individual brings with them unique diversity of thought and perspectives to meaningfully enrich perspectives of GIC teams to drive competitive performance. An inclusive environment yields exceptional contribution.

Learn More about out COO Office here:
https://gic.careers/departments/chief-operating-officer-office/

To be considered for the role, please submit a formal application through the GIC Careers site at

https://careers.gic.com.sg/job-invite/15964/

Responsibilities

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible. Together, we inspire creativity and enrich life - a mission we aim towards achieving every day. To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always. At TikTok, we create together and grow together. That's how we drive impact-for ourselves, our company, and the users we serve. Join us.

The Business Risk Integrated Control (BRIC) team of TikTok, is missioned to:

- Protect TikTok users, including and beyond content consumers, creators, advertisers.

- Secure platform health and authenticity of community experience .

- Collaborate with cross-functional stakeholders to improve TikTok infrastructures, services, tools and algorithms, towards a higher standard of privacy and security.

The BRIC team works to measure and minimize the damage implied by inauthentic behaviors on TikTok and its extended platforms, covering multiple classical and novel interity/security areas such as fake account, fake traffic, spam, scraping, cyberbullying, live room risks, incentive fraud, monetization abuse, etc.

In this team, you will have a unique opportunity to:

- Have a first-hand experience contributing to TikTok's key security initiatives.

- Build scalable, resilient, intelligent integrity solutions that are also privacy-safe and user-friendly.

- Solve product and technical challenges that are often first-seen and highly adversarial. Both quick short term tactics and long term strategical moves are expected at various paces.

- Be part of a diverse and enthusiastic global workforce, grow with and learn from security and integrity experts across Asia, Europe, North America, etc.

Responsibilities

- Research and develop cutting edge techniques to detect and prevent unwanted automation on the web

- Develop and maintain defensive, compatible, reusable, testable and low-footprint client-side JavaScript.

- Work together with other stakeholders to research malicious tools, identify newest attacks and build anti-automation measures.

Qualifications

Minimum Qualifications

- Computer science related majors, bachelor degree or above, more than 2 years of working experience

- Proficiency in JavaScript and browser APIs

- Deep understanding of HTTP, TLS stack and distributed systems architecture

- Familiarity with web development cycles (e.g. package management, module bundling, unit, and integration testing, browser capabilities, etc.)

Preferred Qualifications:

- Thrives with cross-team, cross-functional collaboration

- Strong interest in information security

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Job Responsibilities

• Provide comprehensive security assessments for IT operations, ensuring the implementation of suitable security measures.
• Assist in the development and maintenance of security policies, addressing risks, and implementing measures to enhance system reliability and prevent unauthorized access.
• Collaborate with internal vulnerability assessment teams to analyze systems, identify vulnerabilities, assess risks, and determine protective measures through annual security assessments.
• Conduct information security and risk management awareness training programs.
• Investigate corporate infosec incidents, identify threats and their impact, and coordinate remediation efforts.
• Work with teams to achieve international accreditations such as ISO 27001, ISO 27017, ISO 27018, CREST, SOC2, and more.

Requirements

• Experience with enterprise information security and information risk management

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

Join the largest and fastest growing New Law firm globally!

What are we looking for?

It's an exciting time to join Lawyers On Demand. We continue to expand in Singapore and our growing list of clients are seeking our assistance on a variety of interesting projects and transactions. We are therefore on the lookout for lawyers experienced in Finance work as well as General Corporate & Commercial work.

Who are we?

Lawyers On Demand is one of the world’s largest award winning law firms of assignment lawyers which provides a fresh, more adaptable and innovative alternative to the traditional legal and compliance services model. Our lawyers get closer to the action, are integrated within our clients' in house teams and we have over 600 lawyers and consultants around the world in Abu Dhabi, Dubai, London, New York, Sydney, Melbourne, Perth, Brisbane, Singapore and Hong Kong. Our clients include some of the biggest national and international companies, across a variety of different sectors.

Why join us?

So you can take the skills and knowledge you have developed over the years and apply them to a new model law firm that has already seen huge success and is growing quickly. We work hard, but we know how to have fun along the way and get a kick out of helping our clients find new solutions.

You will have the opportunity to undertake quality legal work, receive support to build your career, have more flexibility and all while being part of a fantastic team!

Want to know more?

If you'd like to join us in our mission to shape the future of the legal and compliance services industry, please apply via this link https://mylodsg.lodlaw.com/ .

You can also check out our website at www.lodlaw.com.

Job Requirements

You will:

· Be available to start assignments at short notice and work on a part time or full time basis
· Have top/reputable private practice and in house/secondment experience
· Be commercially minded, have the ability to hit the ground running and manage relationships with all levels of a business

Personal data provided by job applicants will be used strictly in accordance with our privacy policy which can be found at www.lodlaw.com/privacy-policy/

Company’s Profile

Julian Grey’s client is a solution provider for security and enterprise applications.

Responsibilities

• Plan, implement, manage, monitor, and upgrade IT security solutions.
• Support projects by delivering project deliverables and completing milestones.
• Develop and maintain technical, operational, and configuration documentation necessary for project implementation.
• Coordinate and manage vendors for product implementation and troubleshooting.
• Evaluate security products and conduct Proof of Concept (POC) to verify the effectiveness of security measures, ensuring their continued efficacy post-implementation.
• Provide technical support and incident response for IT security infrastructure components to the maintenance team.

Requirements

• Proficient in Endpoint Security solutions, including Anti-Malware, Host Firewall, Application & Change Control, Disk Encryption, and EDR.
• Knowledgeable in Identity & Access Control solutions, such as PKI solutioning, Hardware Security Module (HSM), Privileged Access Management, 2FA, and OS Hardening Policies.
• Implement Endpoint or Identity & Access Control Security tools.
• Familiarity with various operating systems like Windows or Linux.

Follow us for more updates, interview tips!

https://www.instagram.com/juliangreygroup/

https://www.linkedin.com/company/juliangreygroup/

https://www.facebook.com/juliangreygroup/

Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei

Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.

EA License No: 19C9568

Responsibilities

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible. Together, we inspire creativity and enrich life - a mission we aim towards achieving every day. To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always. At TikTok, we create together and grow together. That's how we drive impact-for ourselves, our company, and the users we serve. Join us.

The Business Risk Integrated Control (BRIC) team of TikTok, is missioned to:

- Protect TikTok users, including and beyond content consumers, creators, advertisers.

- Secure platform health and authenticity of community experience .

- Collaborate with cross-functional stakeholders to improve TikTok infrastructures, services, tools and algorithms, towards a higher standard of privacy and security.

The BRIC team works to measure and minimize the damage implied by inauthentic behaviors on TikTok and its extended platforms, covering multiple classical and novel interity/security areas such as fake account, fake traffic, spam, scraping, cyberbullying, live room risks, incentive fraud, monetization abuse, etc.

In this team, you will have a unique opportunity to:

- Have a first-hand experience contributing to TikTok's key security initiatives.

- Build scalable, resilient, intelligent integrity solutions that are also privacy-safe and user-friendly.

- Solve product and technical challenges that are often first-seen and highly adversarial. Both quick short term tactics and long term strategical moves are expected at various paces.

- Be part of a diverse and enthusiastic global workforce, grow with and learn from security and integrity experts across Asia, Europe, North America, etc.

Responsibilities

- Research and develop cutting edge techniques to detect and prevent unwanted automation on the web

- Develop and maintain defensive, compatible, reusable, testable and low-footprint client-side JavaScript.

- Work together with other stakeholders to research malicious tools, identify newest attacks and build anti-automation measures.

Qualifications

Minimum Qualifications

- Computer science related majors, bachelor degree or above, more than 2 years of working experience

- Proficiency in JavaScript and browser APIs

- Deep understanding of HTTP, TLS stack and distributed systems architecture

- Familiarity with web development cycles (e.g. package management, module bundling, unit, and integration testing, browser capabilities, etc.)

Preferred Qualifications:

- Thrives with cross-team, cross-functional collaboration

- Strong interest in information security

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

• Provide legal advice to senior management and cross-functional project teams in a solution oriented and practical manner.
• Respond to legal related queries from business development and operating units as well as other functions.
• Oversee the selection, retention, management and evaluation of external legal counsels and service providers, including appropriate budget planning and control of group legal costs and expenses.
• Investment & Commercial Transactions
• Support the investment team within the group on the M&A/JV activities and investments in a variety of sectors.
• Facilitate in negotiations with in-depth participation on ad-hoc projects and transactions.
• Liaising with and managing external counsel and instructing them according to business requirement in an efficient and cost-effective manner.

Dispute Resolution

• Partner with and manage external counsels in handling matters involving dispute resolution, such as mediation, litigation and arbitration. In collaboration with external litigation lawyers, analyze issues, develop and implement cost effective legal strategies on complex claims and lawsuits and prepare for settlement or trial, as appropriate.
• Corporate Secretarial
• Supervise and oversee group’s corporate secretarial matters (outsourced or in-house team), including, without limitation, the incorporation and closing of local companies, preparation of board and shareholders’ meeting minutes and/or resolutions, and making necessary filings with relevant authorities such as ACRA and IRAS.
• Coordination of meeting of board of directors and shareholders upon management’s request
• Maintain proper statutory records of group companies (originals will be kept by external service provider if outsourced).

Requirement

• Degree or Master of laws from a reputable university.
• 3 to 5 years’ experience in corporate legal department
• Experience in providing practical business solutions and sound legal and comprehensive advice to various business units and corporate functions, preferably in a dynamic organization.
• Good written and spoken in English and Mandarin in order to liaise with Chinese speaking associates and China HQ office
• Excellent relationship builder with strong interpersonal skills and working collaboratively.
• High integrity, a high standard of professionalism and high ethics.

Kindly submit your resume in MS Word format to [email protected]

EA Licence No 18C9228 Registration No. R1108261 (Tan Li Tze)

We regret to inform that only shortlisted candidate will be notify

Job Summary

This position reports to the Head of Legal, APAC, based in Singapore, and is an integral part of JGC Asia Pacific’s legal team. The successful candidate will play a pivotal role in advising business stakeholders on a wide range of legal issues, lead the Singapore legal team, and provide support for related FEED and EPC projects within Singapore.

Duties & Responsibilities

• Draft, review, and negotiate a comprehensive range of commercial agreements within the FEED/EPC domain.

• Advise business stakeholders on FEED/EPC project bids, associated risks, and other pertinent matters.

• Collaborate closely with the project team to facilitate effective project execution.

• Provide insights on potential legal risks to stakeholders and recommend mitigation strategies.

• Manage litigation and contentious matters across the region.

• Ensure compliance with the company's policies and regulatory requirements.

• Assist in the drafting of policies, guidelines, legal templates, and other documentation to promote best practices.

• Coordinate and liaise directly with external counsel.

• Prepare and implement corporate policies and procedures as necessary, assigned or designated by his/her superior.

Requirements

• LLB/LLM qualification with 3-7 years of post-qualification experience (PQE).

• Bar qualification from a Commonwealth jurisdiction, with a preference for Singapore.

• Relevant in-house experience in EPC, utilities, power, or infrastructure, and/or experience in a law firm specializing in construction or projects is advantageous but not mandatory.

• Experience in project execution and dispute resolution is preferred.

• Exceptional communication and interpersonal skills.

• Ability to work effectively as part of a team while also operating independently in a fast-paced environment.

• Prior experience in a multinational environment is beneficial, and familiarity with Japanese culture is an added asset.

• To excel in this role, you will need to be collaborative, self-reliant, proactive, and capable of thriving in a dynamic, fast-paced environment.

• According to the company’s long-term vision, formulate and integrate cybersecurity strategies into a companywide strategic plan by collaborating with cross-functional teams to design and implement secure infrastructure and application solutions
• Understand expectations of the company regarding continuous growth, establish concrete goals, and create mid-term strategies to achieve goals
• Drive the Global Cyber Defense Strategy, maintain ready forces and capabilities to conduct cybersecurity operations
• Anticipate future internal and external trends and implications and create appropriate cybersecuritymeasures
• Build understanding of cyber threats in each level. Develop detection & protection measures continuously, lead the technical solution implementations to be prepared to defend Santen from disruptive or destructive cyberattacks
• Ensure the security incident management process are executed properly by all parties by tracking the resolution process and making sure the known issues are addressed according to risk management methodology
• Lead the monthly operational meetings between SOC team and Santen, improve the overall process and ensure the KPIs are achieved
• Verify and continuously improve the Recovery Process performed during or after a security incident to ensure that it meets business requirements and is effective and practical
• Manage the Major Security Incident Management process, under Global Head of Information Security,and guide/train different stakeholders, including SOC team, DIT leaders and technical managers
• Support the Disaster Recovery and Business Continuity framework, initiatives, and execution
• Improve Santen’s cybersecurity maturity level by increasing overall awareness and providing security advice/insights on technical requirements to DIT and non-DIT leaders (both Information Systems and Industrial Control Systems global leaders)
• Lead global programs & project implementations, planning the delivery of risk mitigation solutions and answering technical questions, reviewing current security measures, recommending enhancements, and identifying areas of security weakness
• Perform technical risk assessments (IT & OT) of all new global solutions and third parties, identify potential gaps and make sound recommendations for mitigating the risks on a global scale
• Implement the Internal Cybersecurity Framework to support the state-of-art technologies and Santen regulatory and organizational requirements (ISO 27001, NIST, Data Privacy Laws)
• Implement and improve the Global Vulnerability Management Program focused on reducing the risk presented by vulnerabilities in Santen environment by continuously performing three core steps: Discovery, Reporting and Remediation
• Guide the technical teams (Global IT Infra, Regional IT Infra and Application teams, critical third parties) to make sure vulnerabilities are mitigated on a timely manner, perform the escalations on time
• Manage the global vulnerability scan and penetration test exercises
• Manage the relationship and contracts with the external suppliers to obtain the best value for Santen
• Determine the need for covering the risks on company’s threat landscape and continuously search for the most strategic product & services to deliver the needed capabilities
• Keep track of changes in Santen’s business, threat landscape, product innovations and rebalance according to the risk appetite
• Build and maintain robust partnerships with market leaders (e.g. Gartner, ISF) to deter shared threats in our industry
• Build close partnerships and implement efficient internal processes with business and technical teams to detect and mitigate threats before they can be exploited
• Lead projects to implement new cybersecurity solutions or frameworks by developing business cases or conducting opportunity studies when needed
• Understand projects and services specificities in a multi locations environment with many remote management situations
• Ensure there are continuous PDCA (Plan, Do, Check and Action) cycles to improve services and solution in place in relations with KPIs/SLAs in place or to be developed
• Maintain good working relationships with internal stakeholders globally, especially with Digital & IT management
• Support his/her Digital & IT peers in charge of infrastructure, service operations and business applications to provide the right information security advice or solutions allowing them to provide the contributions to business domains
• Manage the suppliers by defining clear guidelines and objectives, relying on KPIs in coordination with the governance in place. Challenge organization and governance in place to verify the company is obtaining best value and that vendors are meeting our information security needs and requirements
• Develop and own the budget proposal for the cybersecurity domain in accordance with the company guidance on budget directions
• Ensure financial governance and efficient use of resources to meet business objectives.
• Execute the budget in respect of its objectives in terms of services to operate, solutions to deliver
• Perform ongoing security maturity level assessment to evaluate the effectiveness of security controls and explain the effectiveness to project teams, business stakeholders and senior management

Job Description: Duties include but not limited to following-

• Provide full secretarial support to lawyers in corporate practice
• Assist with preparation of legal documents
• Assist with matter management including file opening and closing, matter data input, management and monitoring of correspondence and deadlines
• Prepare and assist with issuance of bills
• Assist in incorporation of companies and preparation of corporate secretarial documents
• Prepare and lodge documents with ACRA and other statutory bodies as required
• Update and maintain corporate registers and records
• Communicate with external parties as required
• Any other related work as assigned or required.

Requirements:

• Higher Nitec, 'A' levels or Diploma
• Good written and communication skills
• Committed, diligent and organised
• Team player and cooperative
• Meticulous, able to multi-task and prioritise
• Proficient with MS Office applications
• Preferably with law firm experience, especially in non-contentious and corporate related work

Although relevant experience would be appreciated, on-the-job training and guidance will be provided.

Interested candidates may send in applications with detailed resume and salary expectation by email to [email protected] (only shortlisted candidates will be notified).

The Role

As Senior SOC Analyst (Tier-2), a threat hunter, you will work proactively to seek out weaknesses and stealthy attackers, conduct vulnerability assessments and deal with results. You will also remediate severe incidents from Security Analyst (Tier-1) to assess the impact and affected systems’ scope and collect data for further analysis.

Job Responsibilities

• Lead proactive hunting and analysis against the dataset (e.g., alerts, logs, etc.) and reverse engineering as needed to support Security Operation Centre (SOC) investigations and proactive threat detection and prevention.
• Coordinate and facilitates in-depth analysis, trending, and root cause analysis of security events/incidents while creating and maintaining processes and procedures.
• Perform advanced research on threats, vulnerabilities and potential threat vectors and work with multi-disciplines to improve prevention and detection methods.
• Act as the technical subject-matter-expert for SOC related topics or during incidents,
• Develops and documents the SOC procedures and processes based on industry best practices and internal requirements.
• Support or lead projects to improve SOC effectiveness, advancing technical capabilities on pace with the latest threats.
• Support and integrate with incident response, threat intelligence, and overall security strategy as needed.
• Perform other essential duties as assigned.

Job Requirements

• Bachelor’s degree in IT or equivalent with min. 5 years of working experience and has 3 years of experience leading a SOC team.
• Strong knowledge in networking / major internet protocols and security concepts
• Min. 3 years of experience in cyber incident response and/or Security Operations center in an enterprise environment.
• Min. 2 years of experience with standard enterprise security tools (e.g., Database Activity Monitoring, Zero Trust Segmentation, Security Information & Event Management, Intrusion Detection Prevention System, Endpoint Detection & Response, etc)
• Min. 2 years of operational experience with Splunk or similar log aggregation/analysis platforms
• Expert execution of investigative concepts for escalated incidents to determine the impact and root cause.
• Strong foundation in security threat and attack countermeasure.
• Possess analytical and problem-solving skills, with the ability to manage multiple tasks in a fast-paced environment.
• Hands-on experience in SIEM and intrusion detection analysis as well as application layer protocols.
• Have experience in security related areas. Especially experience and expertise in security incident detection and threat intelligence are proven to be extremely useful.
• Advanced understanding of various operating systems and web technologies with professional security certifications would be a plus.
• Experience in multiple domains within IT or Information Security (e.g. Identity and access management, IT infrastructure operations, Key management, system administration etc.)
• Meticulous, team player, flexible, proactive and positive attitude
• Strong sense of responsibility and initiative.
• Excellent communication and interpersonal skills.
• Work Location: One@ChangiCity

Job Description

You will be a member of the Group Information Security Team responsible for initiating, implementing, and maintaining security products and solutions to support enterprise security.

Key Responsibilities:

•Subject matter expert (SME) for the security systems owned by the Information Security Team.

•Ensure security systems are utilized to their maximum capabilities.

•Plan, identify, assess, design, operationalize, and maintain multiple security-related software and/or hardware.

•Recommend and drive cyber security solutions and initiatives to improve the cyber security of the organization.

•Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.

•Provide security consultancy, technical guidance, expertise, solutions, and education.

•Advise infrastructure teams on security design that is relevant and fit for purpose.

•Identify and assess cyber risks in the IT infrastructure environment.

•Review firewall requests.

•Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines, and deliverables.

•This is an individual contributor role. Deliver tasks with minimal supervision.

•Provide AUDIT support such as PCI-DSS, and Cyber Maturity Assessment.

•Strong communication skills.

•Coordinate and Deploy SIA Group/GIT cybersecurity initiatives in Scoot.

Requirements:

•Degree in IT or related field, with at least 5 years in information security, especially in the cybersecurity space.

•Professional security certifications (SANS, CISSP, CEH, OSCP, CISA, etc) preferred.

•Experience in security products POC and RFQ.

•Prior experience in implementing and maintaining any of the tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM, etc., and/or network security. Able to review firewall requests.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

•Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience is preferred.

•Knowledge of cyber security threats, vulnerabilities, hacking, exploit methods, etc.

•Strong oral, written, presentation, and inter-personal skills.

•Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

Job Description

You will be a member of the Group Information Security Team responsible for responding to threats and incidents to the corporate networks, systems (on-prem and cloud) and digital assets.

Key Responsibilities:

• Act as the subject matter expert (SME) for the security systems owned by the security team.

• Recommend and drive cyber security solutions and initiatives to improve the organization's cyber security posture.

• Lead and drive major incidents towards mitigation and resolution in collaboration with multiple internal counterparts.

• Ensure excellent communication to stakeholders, providing timely and accurate updates during incidents.

• Respond to, assess, and investigate security events in collaboration with vendors.

• Coordinate with internal stakeholders such as applications, network, and infrastructure teams for investigations.

• Perform in-depth analysis and assess vulnerabilities, IOCs, cyber security intelligence, and open-source information to validate security risks and impacts, recommending appropriate countermeasures.

• Develop and maintain cyber incident response and handling playbooks for various threat scenarios.

• Recommend and implement tools to enhance detection, response, and recovery functions and overall security posture.

• Develop methodologies to identify threat adversary tactics, techniques, and procedures.

• Stay abreast of new and emerging cyber threats, attack vectors, etc., and assess their impact.

• Provide strategic guidance and oversight to vendors, ensuring adherence to agreed-upon SLAs and KPIs.

• Guide and mentor junior staff within the security operations team, providing support as needed.

• Perform any relevant ad-hoc duties as required.

Requirements:

• Degree in IT or related fields, with at least 6 years of relevant information security working experience.

• Professional security certifications (CISSP, CISA, CEH, GCIH, etc.) preferred.

• Hands-on experience with SIEM, EDR, XDR, UEBA and SOAR tools preferred.

• Strong in-depth working knowledge in Networking, Cloud, Active Directory, Windows and UNIX platforms, and Mitre framework.

• Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods, etc.

• Strong oral, written, presentation, and interpersonal skills.

• Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

• Able to work independently and in a team-oriented, collaborative environment.

• Experience in guiding and mentoring junior staff within a security operations team.

• Candidates will be considered for a senior role commensurate with their experience.

What you will be working on:

● Innovate and Build: Design and develop new, cutting-edge features for WebOrion®,

enhancing its ability to safeguard against web and API vulnerabilities.

● Pioneer AI Security: Research and create advanced modules for our next-gen AI firewall

that defends against AI-driven cyber threats.

● Full-Stack Impact: Manage and maintain databases, APIs, software, servers, and cloud

infrastructure.

● Agile Development: Contribute to an agile lifecycle—coding, debugging, testing, deploying,

and improving software releases.

● Customer-Centric Support: Provide top-notch technical support for our global enterprise

customers.

What we are looking for:

● Bachelor’s or Master’s Degree in Computer Science/ Engineering, Information Technology or

equivalent

● Hands on experience with Docker and programming languages such as Golang or Python.

● Interest in Security for AI. Defending against the next wave of AI attacks.

● Have a good understanding of RESTful APIs, databases, messaging queues, CI/CD tools

and software testing. Experience with Linux command-line and Git

● Able to write and document technical concepts

● Teamwork skills with a problem-solving attitude

● Preferably 1–2 years of relevant experience, though exceptional fresh graduates with

solid internship experience are welcome.

● Must be based in Singapore.

Why Join Us:

• Innovate for Impact: Be part of the team that's building a revolutionary AI firewall to
• defend against AI-driven threats, redefining the cybersecurity landscape.
• Global Exposure: Work with enterprise customers across ASEAN, Europe, and the
• US, gaining valuable international experience.
• Cutting-Edge Projects: Build cool cybersecurity products while working at the nexus of
• web, cloud, and AI security.
• Career Growth: Join a fast-growing company where your contributions make a real
• difference.

Interested applicants, please drop us a note at [email protected] with your CV and cover letter.