• According to the company’s long-term vision, formulate and integrate cybersecurity strategies into a companywide strategic plan by collaborating with cross-functional teams to design and implement secure infrastructure and application solutions
• Understand expectations of the company regarding continuous growth, establish concrete goals, and create mid-term strategies to achieve goals
• Drive the Global Cyber Defense Strategy, maintain ready forces and capabilities to conduct cybersecurity operations
• Anticipate future internal and external trends and implications and create appropriate cybersecuritymeasures
• Build understanding of cyber threats in each level. Develop detection & protection measures continuously, lead the technical solution implementations to be prepared to defend Santen from disruptive or destructive cyberattacks
• Ensure the security incident management process are executed properly by all parties by tracking the resolution process and making sure the known issues are addressed according to risk management methodology
• Lead the monthly operational meetings between SOC team and Santen, improve the overall process and ensure the KPIs are achieved
• Verify and continuously improve the Recovery Process performed during or after a security incident to ensure that it meets business requirements and is effective and practical
• Manage the Major Security Incident Management process, under Global Head of Information Security,and guide/train different stakeholders, including SOC team, DIT leaders and technical managers
• Support the Disaster Recovery and Business Continuity framework, initiatives, and execution
• Improve Santen’s cybersecurity maturity level by increasing overall awareness and providing security advice/insights on technical requirements to DIT and non-DIT leaders (both Information Systems and Industrial Control Systems global leaders)
• Lead global programs & project implementations, planning the delivery of risk mitigation solutions and answering technical questions, reviewing current security measures, recommending enhancements, and identifying areas of security weakness
• Perform technical risk assessments (IT & OT) of all new global solutions and third parties, identify potential gaps and make sound recommendations for mitigating the risks on a global scale
• Implement the Internal Cybersecurity Framework to support the state-of-art technologies and Santen regulatory and organizational requirements (ISO 27001, NIST, Data Privacy Laws)
• Implement and improve the Global Vulnerability Management Program focused on reducing the risk presented by vulnerabilities in Santen environment by continuously performing three core steps: Discovery, Reporting and Remediation
• Guide the technical teams (Global IT Infra, Regional IT Infra and Application teams, critical third parties) to make sure vulnerabilities are mitigated on a timely manner, perform the escalations on time
• Manage the global vulnerability scan and penetration test exercises
• Manage the relationship and contracts with the external suppliers to obtain the best value for Santen
• Determine the need for covering the risks on company’s threat landscape and continuously search for the most strategic product & services to deliver the needed capabilities
• Keep track of changes in Santen’s business, threat landscape, product innovations and rebalance according to the risk appetite
• Build and maintain robust partnerships with market leaders (e.g. Gartner, ISF) to deter shared threats in our industry
• Build close partnerships and implement efficient internal processes with business and technical teams to detect and mitigate threats before they can be exploited
• Lead projects to implement new cybersecurity solutions or frameworks by developing business cases or conducting opportunity studies when needed
• Understand projects and services specificities in a multi locations environment with many remote management situations
• Ensure there are continuous PDCA (Plan, Do, Check and Action) cycles to improve services and solution in place in relations with KPIs/SLAs in place or to be developed
• Maintain good working relationships with internal stakeholders globally, especially with Digital & IT management
• Support his/her Digital & IT peers in charge of infrastructure, service operations and business applications to provide the right information security advice or solutions allowing them to provide the contributions to business domains
• Manage the suppliers by defining clear guidelines and objectives, relying on KPIs in coordination with the governance in place. Challenge organization and governance in place to verify the company is obtaining best value and that vendors are meeting our information security needs and requirements
• Develop and own the budget proposal for the cybersecurity domain in accordance with the company guidance on budget directions
• Ensure financial governance and efficient use of resources to meet business objectives.
• Execute the budget in respect of its objectives in terms of services to operate, solutions to deliver
• Perform ongoing security maturity level assessment to evaluate the effectiveness of security controls and explain the effectiveness to project teams, business stakeholders and senior management

The Role

As Senior SOC Analyst (Tier-2), a threat hunter, you will work proactively to seek out weaknesses and stealthy attackers, conduct vulnerability assessments and deal with results. You will also remediate severe incidents from Security Analyst (Tier-1) to assess the impact and affected systems’ scope and collect data for further analysis.

Job Responsibilities

• Lead proactive hunting and analysis against the dataset (e.g., alerts, logs, etc.) and reverse engineering as needed to support Security Operation Centre (SOC) investigations and proactive threat detection and prevention.
• Coordinate and facilitates in-depth analysis, trending, and root cause analysis of security events/incidents while creating and maintaining processes and procedures.
• Perform advanced research on threats, vulnerabilities and potential threat vectors and work with multi-disciplines to improve prevention and detection methods.
• Act as the technical subject-matter-expert for SOC related topics or during incidents,
• Develops and documents the SOC procedures and processes based on industry best practices and internal requirements.
• Support or lead projects to improve SOC effectiveness, advancing technical capabilities on pace with the latest threats.
• Support and integrate with incident response, threat intelligence, and overall security strategy as needed.
• Perform other essential duties as assigned.

Job Requirements

• Bachelor’s degree in IT or equivalent with min. 5 years of working experience and has 3 years of experience leading a SOC team.
• Strong knowledge in networking / major internet protocols and security concepts
• Min. 3 years of experience in cyber incident response and/or Security Operations center in an enterprise environment.
• Min. 2 years of experience with standard enterprise security tools (e.g., Database Activity Monitoring, Zero Trust Segmentation, Security Information & Event Management, Intrusion Detection Prevention System, Endpoint Detection & Response, etc)
• Min. 2 years of operational experience with Splunk or similar log aggregation/analysis platforms
• Expert execution of investigative concepts for escalated incidents to determine the impact and root cause.
• Strong foundation in security threat and attack countermeasure.
• Possess analytical and problem-solving skills, with the ability to manage multiple tasks in a fast-paced environment.
• Hands-on experience in SIEM and intrusion detection analysis as well as application layer protocols.
• Have experience in security related areas. Especially experience and expertise in security incident detection and threat intelligence are proven to be extremely useful.
• Advanced understanding of various operating systems and web technologies with professional security certifications would be a plus.
• Experience in multiple domains within IT or Information Security (e.g. Identity and access management, IT infrastructure operations, Key management, system administration etc.)
• Meticulous, team player, flexible, proactive and positive attitude
• Strong sense of responsibility and initiative.
• Excellent communication and interpersonal skills.
• Work Location: One@ChangiCity

Job Description

You will be a member of the Group Information Security Team responsible for initiating, implementing, and maintaining security products and solutions to support enterprise security.

Key Responsibilities:

•Subject matter expert (SME) for the security systems owned by the Information Security Team.

•Ensure security systems are utilized to their maximum capabilities.

•Plan, identify, assess, design, operationalize, and maintain multiple security-related software and/or hardware.

•Recommend and drive cyber security solutions and initiatives to improve the cyber security of the organization.

•Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.

•Provide security consultancy, technical guidance, expertise, solutions, and education.

•Advise infrastructure teams on security design that is relevant and fit for purpose.

•Identify and assess cyber risks in the IT infrastructure environment.

•Review firewall requests.

•Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines, and deliverables.

•This is an individual contributor role. Deliver tasks with minimal supervision.

•Provide AUDIT support such as PCI-DSS, and Cyber Maturity Assessment.

•Strong communication skills.

•Coordinate and Deploy SIA Group/GIT cybersecurity initiatives in Scoot.

Requirements:

•Degree in IT or related field, with at least 5 years in information security, especially in the cybersecurity space.

•Professional security certifications (SANS, CISSP, CEH, OSCP, CISA, etc) preferred.

•Experience in security products POC and RFQ.

•Prior experience in implementing and maintaining any of the tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM, etc., and/or network security. Able to review firewall requests.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

•Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience is preferred.

•Knowledge of cyber security threats, vulnerabilities, hacking, exploit methods, etc.

•Strong oral, written, presentation, and inter-personal skills.

•Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

You will play a pivotal role in managing, leading, and guiding a small team of junior staff while overseeing a range of responsibilities, including the following:

Responsibilities:

Contract Management:

Handle, review, draft, and assist in the execution of contracts related to:

• Sales and purchase of natural resources such as LNG.
• Derivative transactions based on ISDA agreements.
• Time charter party agreements for LNG ships.
• Other contract related matters.

Prepare necessary documentation to implement transactions, such as KYC documents, invoices, internal decision-making documents, and other relevant materials.

Legal Strategy Development:

Engage in legal work to develop strategies and solutions, especially in high-risk situations requiring quick assessments of alternatives through research, ideation, or relevant documentation.

Provide advice to other departments on contractual, commercial and financial risks associated with trading transactions and develop commercial solutions where applicable.

Collaboration with External Legal Teams:

Supervise, coordinate, and collaborate on legal work outsourced to external law firms.

Risk Management:

Understand, identify, and mitigate risks related to energy trading transactions, including market risk, operational risk, and others.

Dispute Resolution:

Provide assistance and advice in managing disputes, including litigation and arbitration, involving counterparties or external stakeholders.

Educate and advise traders and operators on such developments.

General Legal Support:

Provide effective and timely advice on laws and regulations in Singapore affecting business operations, including those arising from corporate structures and business models.

Stay informed about the latest legal and regulatory developments in Singapore and the LNG trading industry affecting the business.

Minimize contractual risks for the company (if qualified).

Liaise with parent company in Japan to provide commercial and legal advice and/or highlight key legal and contractual risks on operations issues and disputes

Perform ad-hoc assignments as assigned.

Requirements:

• Bachelor’s degree in Law or Legal Studies; a Master of Laws is advantageous.
• Substantial practice experience in a law firm or corporate environment is highly advantageous.
• At least 3 years of experience handling contracts and documentation for trading, sales, and purchase of commodities, with a focus on international transactions in LNG or oil and gas markets (job title and compensation package shall commensurate based on experience and skills).
• Willingness and ability to be hands-on in contract management as well as invoicing management, including but not limited to drafting and reviewing in support of junior legal staff
• Experience working with Japanese companies is highly advantageous.
• Strong knowledge of Singapore law is highly advantageous but not required .
• Excellent written and spoken English is required.
• Proficiency in Japanese or other Asian languages is advantageous but not essential.
• Strong drafting, negotiation, and legal analytical skills.
• Solid business acumen and proactive problem-solving abilities.
• Effective communication skills and the ability to work in cross-functional teams, including collaboration with the parent company in Japan.
• Ability to identify and escalate issues in a timely and appropriate manner.
• High accountability with a sense of urgency and priority management.
• Respectful and inclusive in a multicultural work environment.
• Honesty, integrity, and a commitment to ethical practices.
• Ability to develop process-driven solutions for recurring issues is advantageous.

What you will be working on:

● Innovate and Build: Design and develop new, cutting-edge features for WebOrion®,

enhancing its ability to safeguard against web and API vulnerabilities.

● Pioneer AI Security: Research and create advanced modules for our next-gen AI firewall

that defends against AI-driven cyber threats.

● Full-Stack Impact: Manage and maintain databases, APIs, software, servers, and cloud

infrastructure.

● Agile Development: Contribute to an agile lifecycle—coding, debugging, testing, deploying,

and improving software releases.

● Customer-Centric Support: Provide top-notch technical support for our global enterprise

customers.

What we are looking for:

● Bachelor’s or Master’s Degree in Computer Science/ Engineering, Information Technology or

equivalent

● Hands on experience with Docker and programming languages such as Golang or Python.

● Interest in Security for AI. Defending against the next wave of AI attacks.

● Have a good understanding of RESTful APIs, databases, messaging queues, CI/CD tools

and software testing. Experience with Linux command-line and Git

● Able to write and document technical concepts

● Teamwork skills with a problem-solving attitude

● Preferably 1–2 years of relevant experience, though exceptional fresh graduates with

solid internship experience are welcome.

● Must be based in Singapore.

Why Join Us:

• Innovate for Impact: Be part of the team that's building a revolutionary AI firewall to
• defend against AI-driven threats, redefining the cybersecurity landscape.
• Global Exposure: Work with enterprise customers across ASEAN, Europe, and the
• US, gaining valuable international experience.
• Cutting-Edge Projects: Build cool cybersecurity products while working at the nexus of
• web, cloud, and AI security.
• Career Growth: Join a fast-growing company where your contributions make a real
• difference.

Interested applicants, please drop us a note at [email protected] with your CV and cover letter.

Job Description

You will be a member of the Group Information Security Team responsible for responding to threats and incidents to the corporate networks, systems (on-prem and cloud) and digital assets.

Key Responsibilities:

• Act as the subject matter expert (SME) for the security systems owned by the security team.

• Recommend and drive cyber security solutions and initiatives to improve the organization's cyber security posture.

• Lead and drive major incidents towards mitigation and resolution in collaboration with multiple internal counterparts.

• Ensure excellent communication to stakeholders, providing timely and accurate updates during incidents.

• Respond to, assess, and investigate security events in collaboration with vendors.

• Coordinate with internal stakeholders such as applications, network, and infrastructure teams for investigations.

• Perform in-depth analysis and assess vulnerabilities, IOCs, cyber security intelligence, and open-source information to validate security risks and impacts, recommending appropriate countermeasures.

• Develop and maintain cyber incident response and handling playbooks for various threat scenarios.

• Recommend and implement tools to enhance detection, response, and recovery functions and overall security posture.

• Develop methodologies to identify threat adversary tactics, techniques, and procedures.

• Stay abreast of new and emerging cyber threats, attack vectors, etc., and assess their impact.

• Provide strategic guidance and oversight to vendors, ensuring adherence to agreed-upon SLAs and KPIs.

• Guide and mentor junior staff within the security operations team, providing support as needed.

• Perform any relevant ad-hoc duties as required.

Requirements:

• Degree in IT or related fields, with at least 6 years of relevant information security working experience.

• Professional security certifications (CISSP, CISA, CEH, GCIH, etc.) preferred.

• Hands-on experience with SIEM, EDR, XDR, UEBA and SOAR tools preferred.

• Strong in-depth working knowledge in Networking, Cloud, Active Directory, Windows and UNIX platforms, and Mitre framework.

• Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods, etc.

• Strong oral, written, presentation, and interpersonal skills.

• Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

• Able to work independently and in a team-oriented, collaborative environment.

• Experience in guiding and mentoring junior staff within a security operations team.

• Candidates will be considered for a senior role commensurate with their experience.

Our client, a Singapore-listed healthcare company, is seeking an experienced and proactive Sole Legal Counsel.

Key Responsibilities:

• Oversee all legal and regulatory matters of the company, ensuring compliance with SGX listing rules and other relevant regulations.
• Provide legal advice on corporate governance, commercial contracts, and operational matters.
• Draft, review, and negotiate a wide range of agreements and documents.
• Liaise with external counsel when necessary.
• Stay updated on legal developments and advise on their implications for the business.
• Support the Group Director in strategic decision-making and corporate initiatives.

Qualifications:

• Bachelor’s degree in Law (LLB) and admission to practice law in a common law jurisdiction.
• Minimum of 6 years of legal experience, ideally from leading law firms or in-house roles.
• Conversational Mandarin is preferred to liaise with Mandarin-speaking clients and stakeholders.

Roles & Responsibilities:

• Legal support services within the CAO group of companies which may include drafting, reviewing and negotiating of various types of commercial contracts including contracts involving the sale and purchase of oil products, charter-party agreements, storage leases, corporate guarantees, letters of intent, multi-party settlement agreements, financing documents, supply agreement and logistics agreements, insurance contracts;
• Legal support to associated companies: Review of all legal documents, board resolutions, shareholders' resolutions, and by-law amendments;
• Projects Investment-related: Assist in the review of investment-related transactional documents which may include the review and negotiation of non-disclosure agreements, terms of engagement of professional advisers, legal due diligence reports, joint venture agreement, long-term storage agreement, land leases and other related documents, liaise with external legal counsels or other professional advisers and coordinate with other parties involved in the project;
• Disputes Resolution: Manage legal disputes including any demurrage-related disputes, and assist with drafting of relevant reports to the Management and providing updates and progress on the disputes， where necessary;
• Others: Plan, organise and coordinate legal knowledge/information sharing sessions for all personnel of the Company. Assist in the drafting and/or updating of contract templates;
• Other ad-hoc duties as assigned by the Head of Legal and Compliance.

Requirements:

• Recognised degree in law, preferably admitted to the Singapore Bar or a common law jurisdiction;
• At least 3 years post-qualifying experience in an established law firm or general corporate and commercial work in a corporation, preferably as a legal counsel in an in-house environment in the energy industry;
• Excellent people skills and communication skills;
• Strong attention to details and effective analytical skills with ability to understand complex information and apply logical reasoning and assessment;
• Good ethics and professional conduct, and with strong sense of responsibility and teamwork spirit;
• Good organisational, time management skills and stress tolerance with proven ability to deal with multiple priorities;
• Excellent command of the English and Chinese languages (as the position needs to frequently communicate with English/Chinese-speaking stakeholders verbally/ in writing as well as to prepare and proof-read English/Chinese official documents and presentations whenever appropriate).