• Supporting a range of Cyber Security tools including Exabeam, CarbonBlack, Tripwire, CyberArk, TrendMicro AV, Splunk, DAM, Tenable and RSA.

• Managing designated vendors for the specified Security tools.

• Driving the scheduling of security-related projects and remediation timelines.

• Maintaining, troubleshooting, patching, and updating various security tools and scanners used in MAS.

• Recommending process re-engineering and streamlining to enhance workflows and efficiencies.

• Delivering management reporting and dashboarding to stakeholders, including data and trend analysis, and recommending next steps.

• Following up on remediation actions, security and risk assessments with respective stakeholders and applications teams.

• Conducting daily health check and validating system availability through various monitoring/checks.

• Implementing of the service requests, change requests and support of incident management.

• Fine tuning of rules, updating of contents packs to suit the different use cases in

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions are developed and designed with security inbuilt.

Key Responsibilities

• Provide security consultancy, technical guidance, expertise, solutions, and education for the enterprise.

• Advise IT application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

• Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

• Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

• Advise and review security by design concepts in Cloud platforms such as GCP, AWS or Azure Cloud.

• Advise and review the compliance of integrating security tools and processes into the DevOps pipelines.

• Advice and review the adherence to security requirements for low code platforms.

• Perform threat modeling on security-critical applications. Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews, and audits to ensure security assurance is achieved.

• Manage individual project priorities, deadlines, and deliverables. Any relevant ad-hoc duties.

• Review RFP proposal compliance with security requirements.

• This is an individual contributor role. Strong communication skills are required.

• Note: You could be posted to any subsidiary in the SIA Group.

Requirements

• Degree in IT or related fields, with at least 7 years in information security, especially in the application security space.

• Professional security certifications (CISSP, CSSLP, CEH, CCSP, etc.) preferred.

• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

• Strong in-depth working knowledge of secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), and Software Composition Analysis (SCA).

• Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud platforms, such as AWS and GCP. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

• Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods, etc. Any prior vulnerability management experience is preferred.

• Strong understanding of technologies such as WAF, Anti Bot Protection

• Prior experience in application development and knowledge of the DevOps platform is desired.

• Strong oral, written, presentation and interpersonal skills.

• Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

• Able to work independently and in a team-oriented, collaborative environment.

Job description

• Troubleshooting security and network problems.
• Perform vulnerability assessment using automated tools and recommend actionable follow up to remediate the vulnerabilities and/or threats uncovered.
• Provide maintenance support for security systems and tools, including firewalls and other security technologies, as per the maintenance contract requirements.
• Perform system upgrades, patches, and backups to ensure the security systems are up-to-date and running efficiently.
• Provide incident response support, troubleshoot security incidents, and work closely with end users to resolve issues in a timely resolution.
• Proactivity monitoring, support and troubleshoot network bandwidth capacity and network performance to ensure uninterrupted services.
• Manage and maintain Cisco ISE for network access control and policy enforcement.
• Coordinate and manage local and regional ISP on maintenance, changes, and implementation of WAN (SD_WAN).
• Report network operational status by gathering and prioritizing information and managing network projects.

Requirements

• Diploma or Degree in IT or Computer Science
• Min 4 years of relevant experience in IT Infrastructure and Operations Automation Experience
• Knowledge of regulatory requirements and security compliance standards relevant to network infrastructure.
• Professional Certification and at least 4 years’ hands on experience in routing & switching - good to have CCNP.
• Professional Certification and at least 4 years’ hands on experience in network security - good to have PCNSE (Palo Alto).
• Professional Certifications and at least 2 years hands on experience in Cyber security and optional CEH, SSCP, ISC2, Microsoft Security Fundamentals (good to have)
• Any relevant Microsoft cloud security certifications (AZ-500, MS-101, MS-500)
• Good Understanding of network and security fundamentals (Concepts, Protocols. Troubleshoots).
• Experience with Windows Defender Advanced Threat Protection and latest Microsoft E5 Security Product set
• Experience in testing and evaluating Security products in a Lab environment.
• Ability to manage multiple priorities and work independently.
• Positive and professional working attitude, ability to work as a team or individual under stress with minimum supervision and deliver on tight deadlines in fast-paced environment.
• Hands on experience in one or more of the following technologies as below:
• Routing/Switching – Cisco, Meraki
• Network Security – Cisco ISE
• Firewalls/Proxy – Palo Alto, Cisco, Zscaler
• WAN – VeloCloud
• Cloud - Azure

Lead and responsible for the integrated team of Market Access and Government Affairs and being the strategic partner for local Government, Healthcare Institutes, Hospitals, Patients and Business Units to enable and improve market access of innovative therapeutic solutions for Edwards technologies and ensure the success of healthcare policy engagement.

How you will make an impact:

• 1. Oversight the development and execution of optimal patient access strategy for both public and private funding to ensure success of Edwards Lifesciences current and pipeline technologies.

• Ensure the access and evidence strategy to meet the public and private payers’ requirements and engage with local authorities to ensure successful implementation of market access and procurement strategies, from evidence submissions to advocacy activities, adapting JAPAC value propositions to local requirements.

• Navigate the current healthcare/government market access processes and influence key opinion leaders within the environment to change future rules and approaches.

• Engage influential conversations and represent EW's interest in an industry wide and develop strong relationships with key stakeholders (KOL, payers, Health Tech Assessment, government public/governmental affairs).

• Develop and plan in-country and regional market access projects and activities with accountability for successful completion of all project deliverables.

• Perform constant monitoring about the changes in the access policy related to funding environment and conditions for the Edwards Lifesciences portfolio.

• Be an internal expert on reimbursement of designated technologies and identify risks and opportunities for business planning processes.

• Understand internal and external access environment related to medical device, including competitive landscape and impact of government health policies on Edwards’s business, and devise plans to leverage or manage upcoming changes and trends.

• 2. Develop, coordinate and drive government affairs strategies for Edwards, balancing appropriate priorities across the Business Groups and aligning with overall business strategy and the threats and opportunities in the external policy environment.

• Map key government and other stakeholder relationships considering the strategy and priorities and drive a plan to build and sustain excellent relationships with those stakeholders.

• Build a professional network to track healthcare policy, legislation, regulations, and reimbursement trends. This includes government bodies, interest groups, payers, and medical societies.

• Position Edwards as a thought leader and reliable and credible partner to government officials who shape the health policy environment, through understanding government policy priorities and shaping and advocating Edwards strategies in relation to government priorities.

• Leverage Edwards global corporate and regional JAPAC resources, support and best practices to support country strategies, through proactive participation and engagement with JAPAC and Global government affairs teams and coordinating bodies.

• Lead and coordinate the overall engagement with country industry associations to ensure Edwards’ position maintaining strong leadership in appropriate industry associations and drives associations for effective policy advocacy on priorities of concern to Edwards.

• 3. Represent the country/regional market access and government affairs team to work in collaboration with JAPAC Public Affairs and Global Public Affairs, as well as cross-functional business partners on the special strategic partnerships/projects including, but not limiting to, regional evidence generation and dissemination, regional stakeholder engagements with regional/global institutions to drive value recognition and addressing common access challenges across countries.

• Other incidental duties.

What you'll need (Required):

• Bachelor's Degree in health-care related field Health-Economics, Bioscience (including Medicine, Pharmacy) Business, Political sciences and previous experience in reimbursement and/or health economics or healthcare policy.

• Health-care field experience may be Pharmaceutical/Medical Device Required and

• Master's Degree or equivalent in related field Experience working in a regulated industry Preferred.

What else we look for (Preferred):

• Track record of successful reimbursement and funding achievements for medical technologies (pharma or devices).

• Knowledge of epidemiology, clinical study design and analysis of healthcare administrative databases including analysis, interpretation, and reporting.

• Deep knowledge of the reimbursement/funding policies in country of responsibility.

• Strong communication skills, oral and written.

• Ability to lead successfully projects and teams in a matrix environment and operate in lean matrix organization.

• Proven successful project management skills.

• Recognized as an expert in Public Affairs, Government Affairs and Market Access through great understanding of related aspects of pricing & reimbursement processes, healthcare system, policies and trends.

• Ability to manage competing priorities in a fast-paced environment.

• Ability to craft and drive key messages that support Edwards strategy and influence stakeholders.

• Leverage the JAPAC resources in support of the Public Affairs agenda.

• Strong network among government officials, policy makers and payers and an understanding of how things get done.

• Strong Business Acumen with To-do attitude and sense of urgency.

• The incumbent of the role is an active part of the regional Leadership Team in the given region. It is expected that he/she will actively contribute to all leadership responsibilities, such as participation in local meetings, communication, preparation / co facilitation of management reviews, regional strategy days, regional level TDR reviews etc.

• Ability to work and excel within a fast-paced, dynamic, and constantly changing work environment.

• Interacts internally and externally with executive level management, requiring negotiation of extremely critical matters; influences policymaking.

• Dedicated to quality client service and pro-active and responsive to client needs.

• Develop peer, cross functional and cross business relationships to maximize best practice sharing and team effectiveness.

• Provide leadership and direction to large cross-functional teams to successfully implement global enterprise systems and related solutions.

• Develop relationships and leverage them to influence change.

• Support and solicit input from team members at all levels within the organization.

• Adhere to all company rules and requirements (e.g., pandemic protocols, Environmental Health & Safety rules) and take adequate control measures in preventing injuries to themselves and others as well as to the protection of environment and prevention of pollution under their span of influence/control.

• Outgoing and able to communicate well.
• Maintain a positive relationship between company & public / coordinate with HOD.
• Prepare PO as per request.
• At least 3 years working experience.
• Proficient in MS Office and Excel Software.

Senior Manager, Or Manager - Cyber Security & IT Governance

Responsible for the assessment, development, implementation and maintenance of enterprise-wide cyber security and IT Governance programmes to preserve the confidentiality, integrity, and availability of information resources. As part of the IT leadership team, this individual will be expected to provide technical leadership and consultation across the organisation. S/he will also work with external experts to implement security solutions, detect, and contain cyber security incidents.

Responsibilities

Cyber Security:

Assess and review environment and cybersecurity measures to ensure security and operational effectiveness, for e.g. network, system, application, endpoint security, physical and logical access security, etc.

Review and develop security framework, information security policies, processes, procedures, and guidelines.

Conduct cybersecurity risk assessments, penetration tests, and IT controls tests.

Identify security gaps and propose mitigating measures and escalate security incidents and non-compliances on a timely basis.

Evaluate, deploy, and maintain cybersecurity infrastructure to improve cybersecurity posture. Design, implement and maintain security incident response and escalation procedures.

Monitor, analyze and correlate events to determine the best course of action, to mitigate and contain threats when detected.

improve cybersecurity awareness of staff, for e.g. by conducting awareness training. Automate security controls, data, and processes.

IT Governance:

Review and enhance IT policies, standards, guidelines, and best practices regularly to ensure that these are aligned to organization objectives and industry best practices.

Develop and implement effective change management plans (such as communication plans and training programs) to drive adoption and compliance.

Participate in audit planning meetings with internal/external auditors, collate/provide the required materials on a timely basis, validate audit findings, provide remediation solutions, and implement the agreed solutions on a timely basis.

Drive security access and activity log reviews on regular basis.

Promote IT risk management, governance, and compliance culture across the organization.

IT Management:

Contribute to IT strategic planning and budgeting. Ensure IT vendors meet contractual obligations.

Maintain up-to-date knowledge on cybersecurity technologies and standards.

Attend to any other reasonable duties as assigned by Director, Information Technology.

Requirements

Degree in engineering, science or information technology, or equivalent education.

8-10 years of related work experience in cybersecurity management and security governance.

Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.

Strong understanding of cybersecurity standards.

Hands-on experience with cybersecurity tools such as Next Generation Firewalls, SASE, Endpoint Protection, Data Loss Protection, Email Security, etc.

To apply:

Please email Resume in Microsoft Word format

Please state your Position/ positions applied on the “on TOP” of your resume.

Please state Available Commencement Date or notice period

Please state current and last SALARY and Expected Salary in your resume.

Please state Reasons for leaving current & previous Employment.

Cyber Security, Associate Engineer

Salary: up to $4000+

Responsible in maintaining and improving the organization’s cybersecurity posture on an ongoing basis. S/he will work with external experts to implement security solutions, and work with vendors to monitor, detect and contain cybersecurity incidents to minimize impact to the organization.

Responsibilities

• Assist in the development of information security policies, processes / procedures and guidelines on an ongoing basis.

• Work with vendor to conduct security assessments and penetration tests.

• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.

• Standardize and refine security incident response and escalation processes.

• Mitigate and contain threats when detected.

• Escalate security incidents and non-compliances on a timely basis.

• Work with IT infrastructure team to evaluate, implement and enhance the network perimeter security, endpoint security, SIEM.

• Monitor information security alerts triage, mitigate, and escalate issues as needed.

• Conduct information security awareness training.

• Provide security advisory to end users on regular basis.

• IT Security Management of various aspects, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.

• Keep abreast of industrial IT security advancements and introduce appropriate security enhancements to IT infrastructure and systems.

• To perform daily monitoring of logs and review of security notifications and alerts, and assist on the assessment and reporting weekly trends, incidents and security events. Abnormalities found in the review of security events must be reported to the Cyber Security Manager.

• To provide daily technical support in terms of Cyber Security operations for Sophos Endpoint Protection, Cisco FTD Firewall, Advanced Email Threat Protection, Web Application Firewall, Cisco Email Security, DG DLP, Tenable SCCV, Splunk, Cisco Umbrella, etc.

• Attend to any other reasonable duties as assigned by the Senior Cyber Security & IT Governance Manager and IT Director.

Requirements

• Degree/ Diploma with min 2 years related work experience in cybersecurity management in Singapore.

• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.

• Good command of written and spoken English.

• Excellent interpersonal and communication skills.

• Pro-active, independent, resourceful, able to work in a team environment and work independently with minimal supervision.

To apply:

Please email Resume in Microsoft Word format

Please state your Position/ positions applied on the “on TOP” of your resume.

Please state Available Commencement Date or notice period

Please state current and last SALARY and Expected Salary in your resume.

Please state Reasons for leaving current & previous Employment.

JOB SCOPE

The role of the Security Officer/Senior Security Officer is to maintain the safety and security levels of all our guests, customers, employees, tenants and service vendors.

JOB RESPONSIBILITIES

1. Conduct random checks on goods and staff entering/leaving the hotel premises.

2. Perform CCTV surveillance and hotel patrolling duties, reports suspicious and or any unusual activities to the Supervisor.

3. Perform traffic enforcement patrols at hotel's driveway and carpark when necessary.

4. Ensure safekeeping of all lost and found items and record down in the Occurrence Book.

5. To be well versed with the fire alarm panel and the follow-up procedures.

JOB REQUIREMENTS

1. GCE O Level or N Level equivalents.

2. Minimum one (1) year's of related experience at the Senior level.

3. Able to carry out heavy physical tasks.

4. Possess valid PLRD licence and Recognised Terrorist Threat Certificate.

5. Able to perform three (3) rotating shifts on a six (6) working days.

Job Description
You will be a member of the Group Information Security Team responsible for initiating, implementing and maintaining security products and solutions to support enterprise security.

Key Responsibilities

• Subject matter expert (SME) for the security systems owned by the Information Security Team.
• Ensure security systems are utilised to their maximum capabilities.
• Plan, identify, assess, design, operationalise and maintain multiple security related software and/or hardware.
• Recommend and drive cyber security solution and initiatives to improve cyber security of the organisation.
• Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
• Provide security consultancy, technical guidance, expertise, solutioning and education.
• Advise infrastructure teams on security design that is relevant and fit for purpose.
• Identify and assess cyber risks in the IT infrastructure environment.
• Review firewall requests.
• Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.
• Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables.
• This is an individual contributor role. Deliver tasks with minimal supervision.
• Strong communication skills.

Requirements

• Degree in IT or related field, with at least 5 years in information security, especially in the application security space.
• Professional security certifications (CISSP, CSSLP, CEH etc) preferred.
• Experience in security products POC and RFQ.
• Prior experience in implementing and maintaining any of tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM etc. and/or network security. Able to review firewall requests.
• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.
• Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience preferred.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc.
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions (both applications and infrastructure) are developed and designed with security inbuilt.

Key Responsibilities

•Provide security consultancy, technical guidance, expertise, solutioning and education for en-terprise.

•Advise application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

•Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

•Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

•Perform threat modelling on security critical applications. Keep up to date on emerging secu-rity threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews and audits to ensure security assurance is achieved.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables. This is an individual contributor role. Strong communication skills.

Requirements

•Degree in IT or related fields, with at least 5 years in information security, especially in the application security space.

•Professional security certifications (CISSP, CSSLP, CEH, CCSP etc) preferred.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.

•Strong in-depth working knowledge in secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), Software Compo-sition Analysis (SCA).

•Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud technolo-gies. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

•Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc. Any prior vulnerability management experience preferred.

•Strong oral, written, presentation and inter-personal skills.

•Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

A. Overall Purpose of The Job

The primary role of the Infrastructure Security Engineer is to support our security technologies to ensure smooth daily operation and its maintenance. This includes project delivery and subsequent refresh program for all the in-scope security devices.

B. Key Responsibilities

● Provide expert guidance and oversight in the day-to-day administration of various security tools, including Crowdstrike EDR, Netskope SWG, CyberArk PIM/PAM, and others.

● Take a sme role in building, implementing, and maintaining the CyberArk PIM/PAM solution within the Organization environment, ensuring the smooth operation of CyberArk PAM/PIM activities on a daily basis.

● Proactively identify issues and suggest potential solutions in operations.

● Manage and execute maintenance tasks, system upgrades, and the implementation of service packs, patches, hot fixes, and security configurations.

● Lead in-depth investigations into complex technical issues, collaborating closely with vendors until resolutions are achieved, and delivering comprehensive Root Cause Analyses (RCAs).

● Collaborate effectively with Server/Network/DB/App teams to efficiently onboard and configure devices and privileged identities.

● Demonstrate expertise in creating customized reports and dashboards within security tools, tailored to meet specific requirements.

● Maintain and update Standard Operating Procedures (SOPs), security standards, and procedures, ensuring they reflect best practices and the latest security protocols.

● Operate within the established configuration and change management policies to ensure that all changes made to security devices are well-documented, approved, and ultimately successful.

● Play a crucial role in the implementation of new infrastructure security technologies and products at Organization. This includes selecting the most suitable product vendor, conducting Proof of Concepts (POCs), and overseeing the product's implementation in collaboration with a preferred Systems Integrator (SI) partner.

C. Job Profile

Required Skills and Knowledge

● 7-8 years of valid experience in Infrastructure Security operations and projects

● 5-6 years of hands on experience in CyberArk PIM/PAM

● 3-4 years of hands on experience in any Endpoint Detection & Response and Secure Web Gateway technologies preferably Crowdstrike and Netskope

● Good understanding of Network Technologies, Systems, and Database

● Good understanding of security concepts (e.g., encryption, least privilege, need to know basis access, unauthorised access)

● Strong verbal and written communication skills and ability to work with all levels of management

● Firm understanding of IT Service Management processes and project management (i.e., ITIL and Agile)

● Team player and self-motivated

Required Qualifications

● Certifications in CyberArk Certified Delivery Engineer is preferred

● Cybersecurity certification such as CompTIA Security+ or CEH is an advantage

● University degree in Computer Science or a related field is preferred

Human Resource

Provides administrative support to the HR team. This includes administrative for orientation, onboarding, termination and resignation.

Maintain human resource records for employees by recording the hiring, transfer, termination and change in job classification.

Handle foreign employee’s work pass of all categories.

Assist with employee’s exit process and interviews.

Administers the employee benefit program such as the renewing of insurance policies, leave, claims and payroll administration.

Submission of NS, GPPL, GMPL, and Childcare Leave.

Assist the team in the Annual Security Agencies Competencies Evaluation (SACE).

Assist with grievance handling.

Finance

Assist the Finance team on any Account Receivable and Payable.

Handle petty cash and monthly staff expenses claims.

Verify and ensure all invoices are recorded accurately in the MYOB system.

Admin

Monitoring of office supplies.

Assist with the day-to-day administrative operations of the office.

Assist with the technologies and software migration process.

Engage in all other activities directed by the Management to ensure the success of the Organization.

- To answer occasional phone calls from public

- Station on Site to attend to feedbacks

- Attend monthly site meeting and prepare minutes of meeting

- Need to do site administration work:

Purchase orders, compilation of Delivery oders, Workers attendance and Work pass and safety course attendance

- Minimum 2 Years experience in public relations service or hospitalities and tourism field

- 5-Day work week

Site Office Location:

Ang Mo Kio Industrial Park 2

50 metres walking distance from Ang Mo Kio Ave 1

Bus Stop No: 54101

The Manager will work closely with the LKCMedicine IT to support the running of the various cybersecurity programmes and raising the cyber resilience of LKCMedicine IT infrastructure.

Responsibilities:

• Ensuring cybersecurity policies, standards and procedures are practiced
• Liaise with auditors and ensuring compliance with regulations and relevant policies and standards
• Conduct risk analyses and maturity assessments for LKCMedicine IT systems, coordinate and execute penetration tests, perform security review for new and existing projects or major enhancements
• Handle and complete various cybersecurity projects with minimal supervision and able to articulate important cybersecurity concepts to senior management
• Provide timely support of major security incidents or data breaches, plan and participating in cyber security incident tabletop exercises.
• Technology enhancement and explore new security in the cloud

Requirements:

• Degree in Computer Science, Computer Engineering, or related discipline
• At least 5 years of IT related working experience with at least 3 years in IT/Cyber Security Domain practices
• CCSP (Certified Cloud Security Professional) certification is an advantage
• Relevant security assessment certifications such as OSCP (Offensive Security Certified Professional), Crest CRT (CREST Registered Penetration Tester) will be beneficial
• Strong stakeholder management and communication skills.
• Understanding and working experience in Cyber Security management and ability to work with cross-functional teams to enforce security policies and standards.
• Experience in implementing security controls, and mitigating measures on enterprise security solutions

Please submit your job application via

https://ntu.wd3.myworkdayjobs.com/Careers/job/NTU-Novena-Campus-Singapore/Manager--Cyber-Security--LKCMedicine-_R00016552-2

Job Objectives:

Tasked with aiding the Security Manager in safeguarding properties and ensuring the well-being of guests, employees, and the hotel. Supervise all activities of security staff to ensure compliance and proper application of department regulations and hotel policies. Documents all action in the department, including: emergencies, loss, theft, or accident.

Primary Responsibilities

• Manages the Security Department, alongside with Security Manager.
• Oversees the security department and their day to day operations.
• Trains all security personnel in their areas of responsibilities.
• Reviews policies, procedures, and instructions on a regular basis.
• Evaluates possible hazards or threats to security.
• Promotes a safety attitude amongst all employees.
• Ensures safety of persons in the hotel and property assets.
• Reports irregularity in employee or guest behavior.
• Handles loss, damage and accidents.
• Handles, documents, and follows up with necessary persons any accidents occurring in the hotel premises.
• Investigates theft as reported by guest or employee.
• Documents all action in the department, including: emergencies, loss, theft, or accident.
• Participates in weekly department heads meeting in absence of Security Manager - Rooms Division Meeting and any others if requested.
• Secondary liaison for interacting with government officials, ministries, and law enforcement agencies.
• Reviews emergency procedures regularly.
• Delivers security training and promotes awareness within the hotel.
• Performs other duties as assigned by Security Manager.

Job Requirements

• Minimum education of High Vocational diploma in any discipline. Bachelor degree holder have an advantage.
• At least 3 years’ experience in a similar position in security & safety operations.
• Basic knowledge of local laws, investigative methods and fire safety.
• Criminal-free record
• Have good English communication skills both in written and spoken
• Possess professional disposition with good communication and interpersonal skills

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions are developed and designed with security inbuilt.

Key Responsibilities

• Provide security consultancy, technical guidance, expertise, solutions, and education for the enterprise.

• Advise IT application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

• Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

• Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

• Advise and review security by design concepts in Cloud platforms such as GCP, AWS or Azure Cloud.

• Advise and review the compliance of integrating security tools and processes into the DevOps pipelines.

• Advice and review the adherence to security requirements for low code platforms.

• Perform threat modeling on security-critical applications. Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews, and audits to ensure security assurance is achieved.

• Manage individual project priorities, deadlines, and deliverables. Any relevant ad-hoc duties.

• Review RFP proposal compliance with security requirements.

• This is an individual contributor role. Strong communication skills are required.

• Note: You could be posted to any subsidiary in the SIA Group.

Requirements

• Degree in IT or related fields, with at least 7 years in information security, especially in the application security space.

• Professional security certifications (CISSP, CSSLP, CEH, CCSP, etc.) preferred.

• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

• Strong in-depth working knowledge of secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), and Software Composition Analysis (SCA).

• Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud platforms, such as AWS and GCP. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

• Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods, etc. Any prior vulnerability management experience is preferred.

• Strong understanding of technologies such as WAF, Anti Bot Protection

• Prior experience in application development and knowledge of the DevOps platform is desired.

• Strong oral, written, presentation and interpersonal skills.

• Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

• Able to work independently and in a team-oriented, collaborative environment.

Company Overview

Kiteworks’ mission is to empower organizations to effectively manage risk in every send, share, receive, and save of sensitive content. To this end, we created a platform that delivers content governance, compliance, and protection to customers. The platform unifies, tracks, controls, and secures sensitive content moving within, into, and out of their organization, significantly improving risk management and ensuring regulatory compliance on all sensitive content communication. Kiteworks is carrying its bold vision forward while maintaining strong profitability and growth. This is a perfect time to join the company as it moved into a high growth phase and there are many opportunities to make a meaningful contribution to its future.

The Role

We are looking for a highly driven, talented, and self-motivated Senior Applications Security Engineer to be part of our growing application security team. You will be part of a team that is up to date on emerging security vulnerabilities and threats, and works toward improving the security of our products and our CI/CD environment and process.

Key Responsibilities:

• Develop automation and security tools to enhance the security posture.
• Research, evaluate, and integrate new security technologies/tools within CI pipelines.
• Perform STRIDE threat modeling before each product release.
• Provide consultation in design and security reviews for new features.
• Conduct product code reviews with a security-focused lens.
• Execute white box security scans and implement system/application hardening measures.
• Document security fixes and support customer service with security advisories.
• Maintain comprehensive documentation and handle CVE filings.
• Analyze reported vulnerabilities, assess risks using CVSS methods, and determine impact.

Job Requirements:

• Bachelor’s or master’s degree in computer science or computer engineering, specializing in cybersecurity.
• at least 2 years of hands-on experience in cybersecurity roles.
• In-depth knowledge of common web application vulnerabilities and mitigation strategies.
• Proven ability to validate and implement security fixes; manage bug bounty reports effectively.

Key Skills and Experiences:

• Demonstrated expertise in integrating security measures into CI/CD pipelines using Jenkins, GitLab, etc.
• Proficiency in executing and interpreting results from SAST and DAST tools.
• Strong background in Linux system hardening and implementing CIS security standards.
• Proficiency in PHP and Python for security-related tasks.
• Hands-on experience with blue team responsibilities like DFIR and security hardening.
• Familiarity with AWS and Azure; additional experience considered advantageous.
• Security certifications (e.g., SANS) are highly valued.

Desired Attributes:

• Exceptional analytical skills coupled with a meticulous problem-solving approach.
• Excellent written and verbal communication skills.
• Proven ability to convey complex technical concepts to diverse audiences.
• Passionate about Kitework’s domain and mission.

Compensation/Perks

You will be rewarded with a competitive compensation package, including excellent benefits and stock options. Other benefits include: medical, dental, and 18-21 days annual leave

Responsibilities

• Evaluate an organization’s security measures, including firewalls, encryption, and authentication protocols.
• Conduct regular system tests to identify any vulnerabilities that could be exploited by cyber attackers.
• Create comprehensive plans to secure computing networks and systems.
• Oversee the implementation of security solutions to ensure they meet the needs of the organization.
• Continuously monitor security systems and networks for irregular activities.
• Lead the response to security breaches or incidents, including providing post-event analyses.
• Conduct staff training sessions on security best practices and awareness.
• Keep abreast of the latest cyber security threats and trends.
• Ensure all cyber security practices comply with regulatory standards.
• Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.

Requirements

• Min Bachelor’s degree in Computer Science, Cyber Security, or a related field.
• At least 3 years of experience in a cyber security role.
• Required certifications: CREST Registered Penetration Tester (CREST CRT) & Offensive Security Certified Professional (OSCP)
• Strong understanding of firewalls, VPNs, Data Loss Prevention, IDS/IPS, Web-Proxy, and Security Audits.
• Ability to identify and mitigate network vulnerabilities and explain complex security issues to non-technical stakeholders

Nafisah

R2096014

• Preparing payments and petty cash reimbursements.
• Preparing instalments of vehicles and loans.
• Updating of creditors listing.
• Oversee the function of Accounts Receivables.
• Submitting and monitoring of payroll via internet banking weekly and petty cash reimbursement for SO freelance wages.
• Assist the HR Department in any payments such as final wages or any other urgent payments.
• Weekly fund reporting.
• Prepare monthly costing for SO Full Time & Part Time.
• Monthly financial report to be prepared within 2 weeks after the month ends.
• Daily bank reconciliation.
• Preparing and submission of Good Service Tax (GST) evert quarterly to IRAS.
• Preparing yearly financial report to Auditor.
• Preparing of financial year budgeting and propose or provide recommendations to the following year’s budget accordingly.
• Managing of bank tokens for approval.
• Preparing report and present during monthly management meetings.
• Preparing documents for Secretarial.
• Updating sales in food platform eg: Foodpanda , Grabfood , Chopes.
• Managing reconciliation in MYOB system.

The Legal Manager will be based in Singapore and responsible for providing legal support for a variety of issues in customer contract negotiations, researching and enabling the launch of new products and services as well as regulatory and trade compliance support. The incumbent will be reporting to the Legal Director, Asia Pacific. He/she is expected to take on a broad and interesting range of legal matters and thus, a strong foundation in either a local or international law firm will be looked upon favorably.

Roles & Responsibilities:

• Reviewing and providing legal support for customer contracts throughout the Asia Pacific region
• Resolving disputes arising from customer contracts
• Advising on international trade and regulatory compliance matters
• Conducting legal research to enable the launch of new products and services
• Drafting and review legal commercial contracts and document
• Supervising outside law firms used by UPS
• Supervising junior Legal Department staff

Job Requirements:

• Possess a recognized Law Degree i.e. LLM or JD
• Minimum 4 years of relevant legal experience in law firm and/or in corporate legal department
• Candidates who possess relevant experience without Asia Pacific exposure will be considered as well.
• Possess advanced drafting skills in corporate and/or litigation matters.
• Ability to manage projects independently within minimal supervision in matrix company organization.
• Possess good planning, organizational and time management skills.
• Excellent communication and interpersonal skills and able to interact with different levels of people.
• Matured personality with strong professionalism and long-term view towards career development
• Fluent in English and preferably one other Asian language i.e. Mandarin, Japanese, Korean or etc.
• Business traveling opportunities will be available.

InfoCepts stands as a global leader in comprehensive data and analytics solutions, boasting nearly two decades of expertise. Recognized as Gartner's Customers' Choice for Data & Analytics providers in 2020, 2021, and 2022, we've sustained impressive year-over-year growth, now employing over 1,000 professionals globally. Committed to our mission since our inception in 2004, we aim to assist our clients in staying modern, enabling informed, data-driven decisions.

As part of our expansion, we seek dedicated professionals who share our passion for leveraging data's transformative power to contribute to a better world.

We are seeking a highly skilled and experienced IT Security and Infrastructure Manager to join our team. The ideal candidate will have a minimum of three (3) years of proven work experience in the IT security field, with a focus on enterprise systems, network, and cloud infrastructure.

• Develop and implement comprehensive IT security policies, procedures, and protocols to protect the organization's information assets and infrastructure.
• Manage and oversee the organization's network infrastructure, including routers, switches, firewalls, and VPNs, ensuring optimal performance, reliability, and security.
• Lead efforts to assess and mitigate cybersecurity risks, vulnerabilities, and threats across the organization's IT infrastructure.
• Collaborate with internal teams to design, implement, and maintain secure and resilient cloud-based systems and services.
• Conduct regular security audits, vulnerability assessments, and penetration testing to identify and address security weaknesses and gaps.
• Monitor and analyze security logs and alerts to detect and respond to security incidents and breaches in a timely manner.
• Stay up-to-date with the latest trends, technologies, and best practices in IT security and infrastructure management.
• Provide guidance, training, and support to IT staff and end-users on security best practices and compliance requirements.
• Prepare and present reports, metrics, and recommendations to senior management on the organization's security posture and risk exposure.
• Liaise with external vendors, partners, and regulatory agencies on security-related matters as needed.

Requirements:

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Minimum of three (3) years of progressive experience in the IT security field, with a focus on enterprise systems, network, and cloud infrastructure.
• Professional certifications such as CISSP, CISM, or CCSP are highly desirable.
• In-depth knowledge of cybersecurity principles, practices, technologies, and frameworks.
• Hands-on experience with network security, firewalls, intrusion detection/prevention systems (IDS/IPS), and endpoint security solutions.
• Proficiency in cloud security concepts and technologies, including identity and access management (IAM), encryption, and security monitoring.
• Strong analytical and problem-solving skills, with the ability to assess complex security issues and develop effective solutions.
• Excellent communication and interpersonal skills, with the ability to effectively communicate technical information to non-technical stakeholders.
• Ability to work independently and collaboratively in a fast-paced, dynamic environment.
• Demonstrated leadership and project management skills, with the ability to prioritize tasks, meet deadlines, and deliver results.

• Monitor traffic flow during rain or whenever there is congestion
• Monitor and ensure no illegal vehicles are parked along the road near TMC rubbish bin area
• Activate LTA enforcement officers when necessary
• Patrolling and clocking duties
• Maintain security by ensuring a safe and secure environment for staff and customers at the hospital
• Ensure optimum guest service through the delivery of excellent customer service
• Perform roving and static security functions at assigned posts and areas
• Escort personnel or carry valuables as assigned or directed
• Conduct incident report as and when necessary
• Any other duties as assigned

Requirements

• Candidate must possess at least Primary/Secondary School/"O" Level in Others or equivalent
• At least 2 Year(s) of working experience in the related field is required for this position
• Have valid PLRD security license and Class 3 Driving License
• Able to perform 12-hours shift duties, especially night shift

JOB SCOPE

The role of the Senior Security Officer is to maintain the safety and security levels of all our guests, customers, employees, tenants and service vendors.

JOB RESPONSIBILITIES

1. Conduct random checks on goods and staff entering/leaving the hotel premises.

2. Perform CCTV surveillance and hotel patrolling duties, reports suspicious and or any unusual activities to the Supervisor.

3. Perform traffic enforcement patrols at hotel's driveway and carpark when necessary.

4. Ensure safekeeping of all lost and found items and record down in the Occurrence Book.

5. To be well versed with the fire alarm panel and the follow-up procedures.

JOB REQUIREMENTS

1. GCE O Level or N Level equivalents.

2. Minimum one (1) year's of related experience at the Senior level.

3. Able to carry out heavy physical tasks.

4. Possess valid PLRD licence and Recognised Terrorist Threat Certificate.

5. Able to perform three (3) rotating shifts on a six (6) working days.

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s Degree in Computer Science/Information Technology or equivalent.
• 5+ years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:

- CompTIA Security+

- Certified Information Systems Security Professional (CISSP)

- Certified Information Systems Auditor (CISA)

- Certified Information Security Manager (CISM)

NTU’s Lee Kong Chian School of Medicine (LKCMedicine) is a leading medical school at the forefront of medical research and education. The Office of Patient Engagement (OPEN) is a new unit to deepen LKCMedicine’s patient & public partnerships in medical research and education. You will be part of a dynamic team to embed Patient and Public Involvement and Engagement (PPIE) into the School’s programmes and foster partnerships with patient advocates, patient organisations and other stakeholders in the patient engagement eco-system.

As the Assistant Manager, Patient and Public Engagement, you will be part of the team to grow patient and public involvement and engagement (PPIE) for medical research and education. You will also be developing strong partnerships with patients, patient organisations, researcher and educators and organise events to build capability. To bring patient voices into medical research and education, we are looking for a dynamic individual who has a strong interest in patient and community engagement, enjoys engaging with people to improve healthcare and has excellent communication and organisational skills.

Responsibilities:

• Oversee assigned PPIE projects in research and education, by building relationships with all stakeholders, providing PPIE support to the research/education team, preparing patients/public and researchers for engagement, and working with the team to monitor progress and measure impact of this work.
• Engage with existing and new patient advocates and patient/community organisations to be involved in PPIE initiatives at the school.
• Organise PPIE meetings, workshops and events.
• Manage and implement administrative systems and processes for sustainability of PPIE in the school.
• Support the production of communication materials (eg. EDMs, newsletter, video, social media content) on the School’s PPIE projects for outreach to patient advocates and patient/community organisations and other stakeholders.

Requirements:

• Degree from an accredited university
• Possess at least 4 years of relevant working experience
• Experience in health promotion/patient experience/communications and advocacy/outreach and partnership in healthcare/social care/community care settings.
• Experience in organising events and workshops is advantageous
• Experience in Patient and Public Involvement and Engagement (PPIE) and working with patient organisations is advantageous
• Excellent written and verbal communication skills
• Project management capability
• Excellent communication and interpersonal skills and versatility in working with people from diverse backgrounds : from researchers and clinicians to patients and family caregivers.
• Strong organizational and administrative skills
• Resourceful and possess strong initiative to drive change
• Team-player with pleasant disposition and outgoing personality

This is a contract appointment till 31 March 2027.

Please submit your application via

https://ntu.wd3.myworkdayjobs.com/Careers/job/NTU-Novena-Campus-Singapore/Assistant-Manager--Patient-and-Public-Engagement--LKCMedicine-_R00016300-1