Job Description

You will be a member of the Group Information Security Team responsible for responding to threats and incidents to the corporate networks, systems (on-prem and cloud), and digital assets.

Key Responsibilities:

•Perform security monitoring and incident response activities across the scoot networks, leveraging a variety of tools and techniques.

•Manage Security Operations center.

•Detect incidents through proactive “hunting” across security-relevant data sets.

•Ability to correlate multiple events from different devices to identify abnormal behaviour

•Document incident response analysis activities thoroughly

•Develop new, repeatable methods for finding malicious activities

•Provide recommendations to enhance detection and protection capabilities.

•Effectively present technical topics to both technical and non-technical audiences

•Develop and follow detailed operational processes and procedures to appropriately analyze, escalate, and assist in the remediation of information security incidents

•Prioritize multiple high-priority tasks and formulate responses/recommendations in a fast-paced environment

•Prepare documentation for security technical standards, standard operational procedures, and hardening standards.

•Analyse endpoint, network, and application logs

•Assist other IT teams in security-related issues

•Engage with vendors and parent company SIA team members for security reviews.

Requirements:

•Degree in Computer Engineering, Computer Science, Information Systems, or equivalent qualification.

•At least 5-6 years of experience in Cybersecurity Incident and Security Operations.

•Demonstrate experience in Information Security with a focus on Cyber Security Operations, Incident Response and Detection.

•Experience working in the Security Operations Centre and/or Computer Incident Response Team.

•Excellent problem-solving skills combined with hands-on experience doing root cause analysis and post-incident reviews.

•Solid knowledge of computer networks and common protocols

•Knowledge of prominent cyber threat actors and APT groups.

•Experience with Threat Intelligence Platforms.

•Experience with SIEM (especially Splunk).

•Professional security related qualifications (i.e. GCIA, CISSP etc) will be an advantage

•Preferred certifications: CISSP, CISM, CISA, ISMS, TOGAF, SABS

•Good interpersonal skills

Job Description

The successful candidate will join the Information Technology Division, System Technology department and will be responsible for managing Content Delivery Network (CDN) which includes Cyber Security, as well as administering Monitoring and Log Management Tools.

Key Responsibilities include:

• Work closely with CDN providers and application teams to ensure internet websites/mobile apps are healthy in terms of availability, response time and security posture.

• Conduct regular security reviews and finetune WAF and BOT rules to mitigate any cyber threats.

• Administer various monitoring and logging tools, which includes application onboarding and advanced configuration.

• Perform system administration activities such as troubleshooting, root cause analysis and implement corrective/preventive actions during and after an incident.

• Support audit and infrastructure/network security scans, disaster recovery and security related drills and operate within assigned fiscal budget.

• Build automation wherever possible to improve development team’s agility and reduce human errors.

• Explore, learn and deploy new technologies and provide training to the IT community within the company.

• This position requires periodic system administration outside normal business hours.

Requirements:

• Possess a degree in Information Technology or related fields.

• Minimum of 3 years of IT Infrastructure experience with at least 1 year of hands-on experience in managing the infrastructure of an eCommerce website.

• Experience with Akamai or equivalent CDN providers preferred.

• Demonstrate strong knowledge in infrastructure areas such as Content Delivery Network (CDN), Cyber Security (WAF and Bot Mitigation), internet protocols, DNS, virtual server technologies, networking (LAN, WAN, SDN), Integration and Messaging Platform, scripting and monitoring tools.

• Administrator experience with Application Performance Monitoring (APM) tools such as Dynatrace and Log Management System (LMS) such as Splunk.

• Conversant with infrastructure definition tools such as Cloud Formation and Terraform, and with YAML/JSON deployment templates.

• Strong analytical, project management, communications and interpersonal skills.

We thank all candidates for your interest in Singapore Airlines, and regret that only shortlisted candidates will be notified.

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s Degree in Computer Science/Information Technology or equivalent.
• At least 5 years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:

- CompTIA Security+

- Certified Information Systems Security Professional (CISSP)

- Certified Information Systems Auditor (CISA)

- Certified Information Security Manager (CISM)

Position Overview

The IT Security Operations Analyst role’s is to safeguard the organization’s IT systems and data. This role requires the candidate's active participation in the implementation of security policies and procedures, the monitoring and analysis of security events and the maintenance of security tools. Other responsibilities are to identify, investigate and resolve any security threats, vulnerabilities and incidents. The candidate must keep up to date with the latest security trends, have excellent communication and problem-solving skills and have a deep understanding of security principles and technologies. The individual will have a functional role in mentoring other team members and share the off-hour support responsibilities.

Responsibilities

1. Monitor, maintain, and analyze network and computers for unusual activity or suspicious behavior by reviewing information security logs.
2. Manage and resolve security Level 2 support tickets per defined SLAs
3. Investigate and analyze security incidents to determine root cause and impact.
4. Report compliance failures to management for immediate remediation.
5. Responsible for the effective management of the organization’s Crowdstrike Falcon Admin Console.

• Deploy Crowdstrike Falcon EDR detection agent on all corporate devices.
• Ensure coverage of malware detection for all managed EDR Agent capable devices.
• Migrate existing server agents from alert-only mode to blocking mode.
• Provide EDR escalation support for agents already installed

1. Assist and collaborate with the Information Security Group and coordinate with IT Infrastructure on the following:

• IT Threats and Vulnerabilities Assessments, Protection, and Remediation
• IT security patch management follow-up and reporting
• Firewall rule documentation, review, and approval
• Promote within IT Infrastructure the proper Security controls aligned with the IT Security Program
• Validate and maintain operational security documentation.

1. Continuously assess the current Security Posture and provide recommendations for remediation and prevention of security incidents.
2. Collaborate with cross-functional teams to implement security solutions and technologies.
3. Stay up to date with industry trends and emerging security threats to proactively address potential risks.
4. Assist in the deployment of new security systems.
5. Participate in security audits and assessments to ensure compliance with regulations and standards.
6. Understand the dark and deep web ecosystem.
7. Manage and support the following applications:

• Palo Alto/Firewall
• Network security (Micro-segmentation)

1. Perform other duties as required

Qualifications and Experience

• Bachelor’s degree in Cybersecurity Engineering or Computer Sciences
• Strong professional experience in information security with a focus on security operations and technical support
• Strong Experience with Palo Alto and Crowdstrike platform
• Experience with VPN, SSL and other encryption technologies
• Good knowledge of server, workstation, and Active Directory technologies that impact security controls
• Deep understanding of TCP/IP, DNS and common network services
• Experience with security frameworks and compliance requirements such as GDPR, ISO 27001, NIST 800 and PCI DSS.

JOB DESCRIPTION

• Conduct investigations and gather evidence related to theft/fraud or lost items, noise complaints, assault complaints, food poisoning complaints, and other guest complaints and incidents.
• Conduct interviews with relevant parties in order to obtain statements and information related to incidents.
• Assist with and notify manager/supervisor, local police, or other appropriate individuals in the event of accidents, attacks, or other incidents.
• Complete incident reports to document all Security/Loss Prevention related incidents such as theft, accidents, physical hazards, and fire alarms.
• Handle business interruptions and complaints, such as suspicious individuals, civil disturbances or demonstrations, noise complaints, intoxicated individuals, etc.
• Escort any unwelcome persons from the property without interrupting the orderly flow of property operation.
• Defuse guest or employee disturbances/altercations, including summoning appropriate authorities if necessary, and documenting incident.
• Follow all company and safety and security policies and procedures; report accidents, injuries, and unsafe work conditions to manage.
• Maintain confidentiality of proprietary information; protect company assets.
• Welcome and acknowledge all guests according to company standards; anticipate and address guests’ service needs.
• Speak with others using clear and professional language; prepare and review written documents accurately and completely.
• Develop and maintain positive working relationships with others; support team to reach common goals; listen and respond appropriately to the concerns of other employees.
• Ensure adherence to quality expectations and standards.
• In addition, some states may have additional licensing/registration requirements to be considered for this position.
• Move, lift, carry, push, pull, and place objects weighing less than or equal to 10 pounds without assistance. Perform other reasonable job duties as requested by Supervisors, manager.

JOB REQUIREMENTS

• Minimum education of GCE "O" or "N" Level certificate
• At least 1 year working experience in a similar position in security & safety operations
• Possesses a valid security licence
• Applicants who have taken RTT will be prioritised
• First Aid and CPR+AED certified
• WSQ Respond to Fire and Hazmat Emergency certified
• 12 hour shift / Work 4 days

BENEFITS

• Company Transport Pick-up/Drop-off Provided
• Uniform Provided, Duty Meals, F&B Discount, Dental, and Medical
• Employee Room Rate, Learning & Development Opportunities, Staff Recognition Award

The purpose of the Palo Alto Strategic Leader and Cloud Security Sales at IBM is to drive net new pipeline development and sales progression of IBM Consulting Cybersecurity Services (CSS) client opportunities that incorporate Palo Alto Networks (PANW)’s technology in the broader solution offered by IBM Consulting (IBMC). These opportunities may be part of an even more comprehensive opportunity that an IBMC Lead Client Partner (LCP) is pursuing with or delivering to the client.

The focus of this role will be to develop new and high value IBMC opportunities for the PANW specific CSS portfolio, which currently includes:

· Threat Management, Cyber Trust, X-Force, and Strategy

· Consulting and Systems Integration (C&SI) services and Managed Security Services (MSS)

The CSS PANW portfolio will include all PANW cybersecurity products, including and not limited to:

· Prisma Cloud

· Prisma Access

· Cortex (XSIAM, XDR, Xpanse, XSOAR)

· Strata NexGen Firewalls

The Palo Alto Strategic Leader and Cloud Security Sales role is not a technical role, but a sales role and the individuals in this role will be expected to be/become a PANW subject matter expert (SME), as it pertains how to work with and do business with PANW. To this end, this role requires the ability to articulate, educate, support and be deemed a valued team member for LCPs and CSS consultants in their assigned Geo, Market and/or Industry.

The Palo Alto Strategic Leader and Cloud Security Sales role is client facing. The Palo Alto Strategic Leader and Cloud Security Sales is expected to work with the LCP and CSS Associate Partner (AP) to understand “lay of the land” of the client, including, but not limited to current sales motions, client/industry needs/issues and priorities that are planned, budgeted or currently out of scope and may require CSS advisory services. In conjunction with the LCP and CSS AP, the Business Development Leader is also expected to seek and engage the appropriate Palo Alto individual or teams to solidify teaming and to drive the development of a comprehensive and credible joint sales plan. The Business Development Leaders are to actively participate in key client facing discussions, as well as associated internal and PANW teaming discussions with the sole purpose of aiding the joint teams to qualify, progress and close joint opportunities.

Geo, Market, or Industry specific responsibilities include:

1. Sales Activation:

a. Evangelize the value of the PANW strategic partnership and sharing best ways of working together within and across all of IBMC, including within CSS

b. Build collaborative relationships across IBMC (LCPs and CSS) to expedite teaming, opportunity identification, and deal progression

c. Build collaborative relationships across PANW sales to expedite teaming, opportunity identification, deal progression, as well as possible removal of obstacles to close

2. Sales Enablement:

a. Work with across both parties to promote and educate sellers

i. CSS on PANW products and value propositions

ii. PANW sellers on the value of working with IBMC and its GTM strategies, capabilities, and value propositions

b. Manage, market, and promote CSS offerings and PANW as part of a broader IBMC client engagement

i. Articulate CSS offerings and PANW products strengths, potential weaknesses, and roadmap

ii. Assist in RFI and RFP responses

iii. Assist PANW in understanding client c-suite (above the CISO) requirements and how that translates to project scoping and pricing needs from PANW

iv. Maintain relationships with the Palo Alto product teams

c. Participate in joint events like RSA, IBM Think, Black Hat, PANW Ignite and others

d. Gather, develop (with marketing assistance) and promote win stories to drive greater sales velocity

3. Sales Engagement:

a. Target and track joint pursuits from identification through close, including loss reporting

b. Establish and maintain relationships with PANW product sales specialists to allow for internal PANW advocacy of client needs as it pertains to new opportunities and rapid issue resolution

c. Leading joint account workshops which includes:

i. Work with PANW and internal IBMC teams to identify opportunities to team – who, what, where, why and how

ii. Share best practices and identify risks, if applicable

iii. Outline a joint sales plan with actions, owners and timeline, assigned to individuals

iv. Establish ongoing cadence for joint read-outs to maintain alignment and communicate revisions to plan

v. Engage executives, as needed

vi. Monitor progress for leadership reporting, monthly and quarterly

d. Refresh as needed, PANW knowledge and/or certifications to maintain SME knowledge of market impact and/or industry trends that drive the need and value of CSS offerings and PANW products

Sample governance activities include:

1. Preparing collateral for Geo / Market specific cadence sessions, monthly reviews, and quarterly business reviews

2. Providing color commentary, e.g.win stories, best practices, lessons learned, issues to be resolved, etc., to pipeline, forecasts, and other internal and/or joint performance reports

3. Monitoring and reporting against individual metrics, showing current assumptions, progress to date and actions needed or anticipated to ensure achievement

The successful candidate will meet the following requirements:

1. Knowledge of the relevant CSS offerings portfolio in terms of the value to the client, to IBMC and to PANW

2. Ability to present the value of the strategic partnership and the CSS offerings to clients, PANW field sellers, and LCPs

3. Knowledge of the PANW product portfolio in terms of their value propositions to the client, to IBMC and PANW

4.Maintain an understanding of competitive products and technologies and accurately position PANW products in competitive scenarios.

5. Complete required online PANW sales training

- To answer occasional phone calls from public

- Station on Site to attend to feedbacks

- Attend monthly site meeting and prepare minutes of meeting

- Need to do site administration work:

Purchase orders, compilation of Delivery oders, Workers attendance and Work pass and safety course attendance

- Minimum 2 Years experience in public relations service or hospitalities and tourism field

- 5 Days work week

Site Office Location:

Ang Mo Kio

Summary

The Security Executive supports the Assistant Security Manager and the Head of Safety, Security, and Compliance in day-to-day operations. Reporting to the Assistant Security Manager, he/she will work closely with all departments in the company, including outsourced security vendors. He/she will assist the Assistant Security Manager in ensuring that aviation security measures are met.

Duties and Responsibilities

• Assist in ensuring dnata adheres to APD Security Directives.
• Manage access control systems and processes.
• Conduct investigations into security breaches and incidents.
• Assist in reviewing and updating Standard Operating Procedures (SOPs) to meet regulatory requirements.
• Assist in conducting security risk assessments to identify and address key risk areas.
• Enforce a security culture through engagement with business units.
• Identify and escalate breaches or concerns related to security, procedures, or systems.
• Issue staff passes and access rights for employees and contractors; ensure timely revocation and retrieval of passes upon resignation, and manage the secure disposal of access credentials.
• Support security incident response in the absence of the Assistant Security Manager.
• Oversee dnata Security Systems, including CCTV, EM Locks, drop arm barriers, and intrusion alarm systems.
• Issue parking decals for dnata staff and contractors; ensure accurate data submission to the finance department on a monthly basis for billing purposes.
• Assist in preparing and presenting security reports as needed.
• Conduct regular security checks and audits.
• Ensure 24/7 shift security deployment coverage across Catering, Cargo, and the Maintenance Base.
• Oversee 24/7 shift security coverage for all dnata contracted flights, including standard and non-standard services.
• Assist with airline/regulatory security audits of dnata operations.
• Address security findings from audits by ensuring timely closure of issues and integrating resolutions into operational processes and policies to enhance overall security effectiveness.
• Assist in developing and reviewing dnata’s Business Continuity Management Manual.
• Participate in emergency exercises organized by external stakeholders.
• Assist in developing and maintaining a training framework for staff on emergency response and business continuity.
• Assist in executing business continuity and resilience awareness initiatives.
• Assist in reviewing and updating corporate crisis plans and policies.
• Execute incident management plans for coordinated crisis response.
• Assist with additional duties as required.

Requirements

• Minimally attained Diploma/NITEC from a recognized tertiary institution
• Preferably with minimum 2 years’ experience with security policy work.
• Crisis Management & Business Continuity Management experience is appreciated
• Proficient in Microsoft Office Applications; Excel, Word, PowerPoint
• Preferably with Aviation background
• Preferably possess Class 3 driving license and be able to attain Airfield Driving Permit (ADP)

JOB PURPOSE:

The Security officer is responsible for the protection of people, property and information as it relates to the facility or the facility grounds.

PRINCIPAL ACCOUNTABILITIES:

• Control access to company facilities for the safety of all employees.
• Inspect employees and vendors upon entry to ensure that unauthorized items are not brought in and those items are not removed without proper clearance.
• Respond to emergencies and resolve conflict when required.
• Prepares reports of incidents.
• Monitor the Security System for the safety and security of all employees

JOB CONTENT:

• Security Officers must be in uniform and report to their Security and Maintenance Supervisor. They must present themselves in a tidy and professional manner. Uniforms must be clean and well-kept at all times.
• Reports directly to the Security and Maintenance Supervisor for the shift assigned. Performs duties as a roving or stationary security officer as assigned by the Supervisor. The security officer is responsible for assisting the Supervisor in accomplishing their duties, tasks and objectives. Included in this, but limited to are, access control, daily log maintenance, interior and exterior patrols, alarm response, and opening and closing of the 19 Loyang Way facility. A Future Electronics Security Officer must at all times maintain a high level of attention to detail, must promote delighting both internal and external customers, act as a team player while maintaining discipline in executing their duties and respect the Future Electronics Security Officer Code of Conduct.
• Maintains vigilance while on duty for the protection of the facility, employees and all property owned or leased by Future Electronics Corporation. Controls access to the building through the turnstile operation and ensures that all persons entering and exiting the building have either done so by use of an employee access card or have been manually signed in by the security officer. The manual signing-in of employees includes the tasks of issuing a temporary badge and ensuring that the register of employees without badges is duly completed.
• The security officer must monitor and be able to promptly react to all alarm systems including Fire Panels, ADT Alarm and CCTV system.
• Security Officers must promote adherence to the Future Electronics, Human Resources policy on Building Access and ensure that all employees are wearing their Employee Identification Card at all times and that the card is visible. Any employee not wearing their card must be reported in the Daily Journal.
• Maintains the Daily Journal and makes the appropriate entries. Prepares incident reports and other related administrative forms with the knowledge and direction of the Shift Leader.
• Checks fire emergency equipment such as fire extinguishers, fire hose cabinets and sprinkler valves. Knows fire alarm procedures; zone and alarm locations; and reset procedures. Look for safety hazards to include electrical or water conditions. Alerts facilities maintenance of any hazards or discrepancies that may require immediate corrective action. Ensure that these discrepancies are reported to the shift leader and are noted and entered into the Daily Journal.
• Reviews and learns all security operating procedures (SOP Manual). Reviews security memos, pass-on messages, or other directives. Become knowledgeable of the duties and responsibilities of each duty shift and post assignments.
• Performs escorts to contractors, vendors, and other visitors as necessary. Ensures that outside contractors performing duties within the facility adhere to internal security procedures and that these procedures are maintained and followed at all times. Ensures proper wear and display of contractor ID badges.
• Performs other related job tasks as assigned.

RECOMMENDED CREDENTIALS:

QUALIFICATIONS

• Valid PLRD certification is a must

EXPERIENCES

• Ability to work and communicate effectively.
• Ability to read and understand English.
• Effective in relating in an appropriate, positive manner with peers and supervisors.
• Self-motivated with the capacity to complete tasks unsupervised
• Great communication skills are a must
• Must have basic software skills, Excel and Word

COMPETENCIES

• Excellent communication skills
• Effective time management skills

PERSONALITY TRAITS

• Dedicated team player
• Flexible/adaptable to changing environment

LEARNING & DEVELOPMENT PLANS

Regular training and Certifications as required

About the role

The Legal division is made up of team members from Legal, Corporate Security, Compliance, Risk Management & Insurance, Privacy and Corporate Secretarial (“Legal”). The Group General Counsel (“GGC”) is the Head of Legal numbering more than 50 employees comprising legal counsels and respective teams based in Singapore and globally.

Reporting into the Group General Counsel, the duties include supporting the legal department technological tools including its Teams instances, litigation reporting tool (“Mitigate”), contractual risk management tool (“sAIgon”), corporate secretarial administrative support including management of Viewpoint.

Key responsibilities

Legal Department Operations Administrator

• Assist the Group General Counsel and Group Company Secretary and full legal team by managing team technology implementation.
• Administer and maintain databases of legal documents
• Office management support work include document management and procurement follow up with vendors.
• To maintain records and files (online and hard copy filing systems) in a systematic manner for easy access and retrieval using technology management
• To support and drive assignments / initiatives / projects related to compliance or legal matters as and when required.
• Assist GGC’s executive assistant in arranging meetings, seminars, trainings and events in support of technology initiatives.
• Assist with the preparation and formatting of presentations, reports, and communications materials.
• Support on legal and compliance reporting and documentation for the team.
• Liaise with other company departments, overseas counterparts, and external parties where necessary
• Ensure corporate messages are reiterated within the legal team
• Maintain and update Legal Department Teams instances and ensure efficient utilization and training of legal team.
• Maintain Mitigate and ensure efficient utilization by legal team including training.
• Maintain sAIgon and ensure efficient utilization by legal team including training.

Corporate Secretarial

• Prepare and coordinate with corporate secretarial team on documents for signing in original and despatch which includes ensuring that documents are in order and signers’ availability, or via electronic signing eg via DocuSign and collation of signed documents for statutory and other records
• Manage notarization and legalization requirements for corporate documentation including to communicate with the notary and courier despatch to arrange documents in good order for use in various countries
• Arrange translation and other administrative requirements upon team request
• Support accurate filing of physical corporate statutory records as applicable and accurate upload of statutory records with clear naming convention to corporate secretarial records online library
• Assist corporate secretarial team to update corporate information in software database and retrieval of corporate information or reports upon request from the corporate secretarial team or Legal team members
• Provide strong administrative support to Group Company Secretary including to communicate with the corporate secretarial team to provide organisation changes updates to circulate quarterly organisation charts and to draft customised chart extracts and related documents, entities’ list of addresses and all assigned jobs
• Support administration of Corp pass authorisation system to manage digital service access of employees for various functions to perform corporate transactions for Singapore companies. [there are more than 200 government digital services available at current time]
• Assist with basic provision of corporate information to Legal team to meet their requirements
• Assist on corporate secretarial actions for projects such as printing and binding of project bibles and upload to corporate secretarial records online library

About you

• Minimum 3 years relevant working experience with prior project management skills
• Good administrative and organizational skills
• Collaborative, proactive and resourceful
• Demonstrates the ability to multi-task and problem-solving skills
• Possess strong interpersonal and communication skills

Job Objectives:

Tasked with aiding the Security Manager in safeguarding properties and ensuring the well-being of guests, employees, and the hotel. Supervise all activities of security staff to ensure compliance and proper application of department regulations and hotel policies. Documents all action in the department, including: emergencies, loss, theft, or accident.

Primary Responsibilities

• Manages the Security Department, alongside with Security Manager.
• Oversees the security department and their day to day operations.
• Trains all security personnel in their areas of responsibilities.
• Reviews policies, procedures, and instructions on a regular basis.
• Evaluates possible hazards or threats to security.
• Promotes a safety attitude amongst all employees.
• Ensures safety of persons in the hotel and property assets.
• Reports irregularity in employee or guest behavior.
• Handles loss, damage and accidents.
• Handles, documents, and follows up with necessary persons any accidents occurring in the hotel premises.
• Investigates theft as reported by guest or employee.
• Documents all action in the department, including: emergencies, loss, theft, or accident.
• Participates in weekly department heads meeting in absence of Security Manager - Rooms Division Meeting and any others if requested.
• Secondary liaison for interacting with government officials, ministries, and law enforcement agencies.
• Reviews emergency procedures regularly.
• Delivers security training and promotes awareness within the hotel.
• Performs other duties as assigned by Security Manager.

Job Requirements

• Minimum education of High Vocational diploma in any discipline. Bachelor degree holder have an advantage.
• At least 3 years’ experience in a similar position in security & safety operations.
• Basic knowledge of local laws, investigative methods and fire safety.
• Criminal-free record
• Have good English communication skills both in written and spoken
• Possess professional disposition with good communication and interpersonal skills

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions (both applications and infrastructure) are developed and designed with security inbuilt.

Key Responsibilities

•Provide security consultancy, technical guidance, expertise, solutioning and education for en-terprise.

•Advise application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

•Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

•Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

•Perform threat modelling on security critical applications. Keep up to date on emerging secu-rity threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews and audits to ensure security assurance is achieved.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables. This is an individual contributor role. Strong communication skills.

Requirements

•Degree in IT or related fields, with at least 5 years in information security, especially in the application security space.

•Professional security certifications (CISSP, CSSLP, CEH, CCSP etc) preferred.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.

•Strong in-depth working knowledge in secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), Software Compo-sition Analysis (SCA).

•Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud technolo-gies. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

•Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc. Any prior vulnerability management experience preferred.

•Strong oral, written, presentation and inter-personal skills.

•Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

Job Description
You will be a member of the Group Information Security Team responsible for initiating, implementing and maintaining security products and solutions to support enterprise security.

Key Responsibilities

• Subject matter expert (SME) for the security systems owned by the Information Security Team.
• Ensure security systems are utilised to their maximum capabilities.
• Plan, identify, assess, design, operationalise and maintain multiple security related software and/or hardware.
• Recommend and drive cyber security solution and initiatives to improve cyber security of the organisation.
• Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
• Provide security consultancy, technical guidance, expertise, solutioning and education.
• Advise infrastructure teams on security design that is relevant and fit for purpose.
• Identify and assess cyber risks in the IT infrastructure environment.
• Review firewall requests.
• Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.
• Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables.
• This is an individual contributor role. Deliver tasks with minimal supervision.
• Strong communication skills.

Requirements

• Degree in IT or related field, with at least 5 years in information security, especially in the application security space.
• Professional security certifications (CISSP, CSSLP, CEH etc) preferred.
• Experience in security products POC and RFQ.
• Prior experience in implementing and maintaining any of tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM etc. and/or network security. Able to review firewall requests.
• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.
• Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience preferred.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc.
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Job Description

You will be a member of the Group Information Security Team responsible for ensuring corporate applications, systems, networks, and digital assets are adequately protected and mitigated against cyber threats and risks. You will help drive cybersecurity and risk management efforts and user awareness and education within the Singapore Airlines Group.

Key Responsibilities include:

• Provide cyber governance and risk management oversight.
• Manage the security policy framework and relevant standards.
• Oversee applicable security, regulatory, privacy, contractual cyber requirements.
• Manage cyber risk analysis and self-assessments program for various information services, systems, processes and recognized industry standards.
• Conduct risk assessments, document results, and propose and track remediation tasks.
• Develop compliance program top routinely assess existing infrastructure, systems, and applications for compliance and vulnerabilities and propose relevant mitigating controls.
• Conduct vulnerability assessments and track remediation status of identified vulnerabilities.
• Identify and assess cyber risks and recommend and drive cyber security solution and initiatives to improve cyber security posture.
• Define controls to meet regulatory, legislative, and industry specific compliance requirements.
• Manage third party cyber risk assessment standards.
• Prepare IT security related KPI reports and management reports for compliance monitoring and reporting.
• Drive the implementation of GRC tool.
• Maintain user cyber awareness and provide security advisory on emerging security threats and vulnerabilities.
• Develop, review and continuously improve IT security training material and conduct user training to improve user awareness and incident response readiness.
• This role may be seconded to any of SIA’s subsidiary group

Requirements

• Degree in IT or related fields, with 4-5 years relevant information security working experience, especially in the application security space.
• Professional security certifications (CISSP, CISA, CEH etc) preferred.
• Experience with Governance, Risk and Compliance (GRC) activities.
• Familiar with PCI, PDPA, GDPR requirements
• Experience in security technologies, practices, application/network/systems architecture and design, tests tools and processes.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Whether you’re at the start of your career or looking to discover your next adventure, your story begins here. At Citi, you’ll have the opportunity to expand your skills and make a difference at one of the world’s most global banks. We’re fully committed to supporting your growth and development from the start with extensive on-the-job training and exposure to senior leaders, as well as more traditional learning. You’ll also have the chance to give back and make a positive impact where we live and work through volunteerism.

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do. We keep the bank safe and provide the technical tools our workers need to be successful. We design our digital architecture and ensure our platforms provide a first-class customer experience. Our operations teams manage risk, resources, and program management. We focus on enterprise resiliency and business continuity. We develop, coordinate, and execute strategic operational plans. Essentially, Enterprise Operations & Technology re-engineers client and partner processes to deliver excellence through secure, reliable, and controlled services.

Trust is part of our DNA at Citi. As such, we take safeguarding our customer data very seriously. The Chief Information Security Office (CISO) is made up of deeply dedicated and talented colleagues who work together to ensure the safety of Citi’s and our clients’ assets and information. We manage information security as an end-to-end program – one with a clear mandate and accountability. Our mission is to continually execute and enhance a global security program that is fully anchored to modern control and security frameworks, fully aligned with the technology of the firm, threat-focused and data-driven, and deeply integrated across all Citi businesses globally.

Being talent-driven, we are focused on attracting, developing, and retaining diverse and inclusive talent with a high technical skill level. As a member of our team we will provide you with career development opportunities at all stages of your career. Our employees model a passion for protecting Citi and our clients and believe in treating others with dignity and respect.

Citi Infrastructure Defense/ Perimeter Security Services/Perimeter Reliability Engineering

Our commitment to diversity includes a workforce that represents the clients we serve globally from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.

Citi Infrastructure Defense, Perimeter Reliability Engineering is a network security subject matter expert team responsible for troubleshooting complex connectivity issues and outages often involving multiple support teams and improving network visibility and resiliency.

Responsibilities:

• Produce high quality documentation, schematics and presentation materials as needed
• Collaborate on initiatives toward reducing security risk for applications and network connectivity with third parties for countries in scope of Complex Operating Geographies (COG)
• Provide individual leadership in the realm of troubleshooting major incidents and problem management
• Troubleshoot complex networconnectivity issues and outages
• Adhere to corporate and Information Security and other functional standards and controls

Qualifications:

• Network knowledge of routing, switching and wide area networking with understanding of industry standard command line syntax, inclusive of modern network virtualization concepts to a professional level proficiency
  A hands-on practical familiarity with Network Security capabilities including:
• Firewalls, ACL’s, intrusion detection, proxies, vulnerability scanning, DNS, DDoS mitigation, SIEM platforms
• Experience with scripting preferably in Python
• Knowledge of Prometheus and Grafana

Critical Competencies:

Relevant Certifications: Fortinet, Check Point, Palo Alto firewalls. CISSP or CCNA/CCNP as a plus.

Education Level Required: Bachelor's Degree in Computer Science, Information Systems or related fields preferred.

Years of Related Experience: 6+

Working at Citi is far more than just a job. A career with us means joining a family of more than 230,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Take the next step in your career, apply for this role at Citi today

https://jobs.citi.com/dei

Job Description:

The role is for the position of VP – Network Security Architecture ASO TIS Job function in Singapore. The successful candidate will be part of a growing dynamic regional team that oversees IT design and development of Network Security Solutions In the region.

We are seeking a talented Network Security Architect to join our team. The Network Security Architect will be responsible for designing, implementing, and maintaining the network security infrastructure to ensure the confidentiality, integrity, and availability of our organization's data and systems.

Roles & Responsibilities:

• Work with stakeholders and other teams to ensure Network Security platforms are effectively integrated into the IT infrastructure, both on-premises and cloud workloads.
• Provide technical leadership on Network and Perimeter Security across complex environments and a variety of enterprise systems and applications.
• Engage multiple stakeholders and evaluate related security products or technologies to recommend solution architectures and designs that are regionally viable, scalable and robust to manage and monitor Network Security
• Develop, maintain procedures and standards.
• Ensure compliance with regulatory requirements related to perimeter controls.
• Collaborating with other IT staff to integrate Network Security framework with other security technologies.
• Work closely with the project managers, Security and Compliance personnel, application developers and other administrators in creating functional, scalable, and secure Network Security solutions from design and development through implementation for business clients.

Technical Capabilities

Design and Implement Network Security Solutions:

• Design and implement Network Security solutions to protect the organization's network from unauthorized access and attacks.
• Set up secure access controls to restrict access to sensitive data and systems.
• Review and re-design perimeter security controls

Develop and Maintain Network Security Policies, Standards, and Procedures:

• Develop network security policies that outline the organization's security objectives and requirements.
• Establish security standards and procedures for configuring and managing network security devices.
• Ensure that security policies, standards, and procedures are up to date and align with industry best practices and regulatory requirements.

Contribute into Risk Assessments and Security Audits:

• Participate in regular risk assessments to identify potential security vulnerabilities and threats.
• Contribute to security audits to assess the effectiveness of existing security controls and identify areas for improvement.
• Recommend security enhancements based on the findings of risk assessments and audits.

Collaborate with IT Teams:

• Work closely with IT teams to integrate security controls into network infrastructure and applications.
• Provide guidance on implementing security best practices and standards.
• Collaborate with application developers and system administrators to ensure that security requirements are met.

Enhance Network Traffic Monitoring and Investigate Security Violations:

• Enhance network traffic monitoring to effectively detect signs of security breaches or unauthorized activity.
• Investigate security violations and breaches to determine the cause and extent of the incident.
• Take appropriate actions to mitigate the impact of security incidents and prevent future occurrences.

Provide Technical Guidance and Support:

• Provide technical guidance and support to team on network security best practices.
• Assist in troubleshooting network security issues and implementing solutions to address them.

Stay Updated on Emerging Threats and Security Technologies:

• Stay abreast of emerging threats and security technologies to ensure that the organization's network security posture remains strong.
• Participate in security forums, conferences, and training sessions to stay informed about the latest trends and developments in network security.

Participate in Incident Response and Forensic Investigations:

• Participate in incident response activities to contain and mitigate security incidents.
• Conduct forensic investigations to determine the root cause of security incidents and identify corrective actions.
• Document incident response procedures and lessons learned for future reference.

Develop and Deliver Security Awareness Training : (if needed)

• Develop and deliver security awareness training to educate employees about the importance of network security.
• Train employees on how to recognize and respond to security threats.

Job Requirements:

• Min 15 of years’ experience in Network Security Management domain, with 7 years’ experience with technical security design and development, deployment, support, and maintenance of Security Solutions.
• Experience with design and deployment of Network Security / perimeter security controls/solutions for enterprise.
• Experience with firewall administration, intrusion detection/prevention systems, VPNs, DDOS, WAF, NAC,LBs, Proxies and secure access controls. Experience with product evaluation design and deployment of SASE (components) and micro-segmentation solutions.
• Strong track record of navigating complex organizational structures and managing varied requirements in achieving cohesion & relevance in network security designs.
• Demonstrate a deep understanding of risk and change management, security policies and controls, user account life-cycle management, access controls and management, AAA. Strong understanding of network security concepts, protocols, and technologies.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.

Educational Requirements:

• Bachelor’s or masters’ degree in computer science, Information Technology, or a similar field preferred.
• Knowledge of security standards and frameworks (e.g., NIST Cybersecurity Framework).
• Relevant certifications (e.g., CISSP, CCNP/CCIE Security, CEH or equivalent) a must.

We regret to inform that only shortlisted applicants will be notified.

Job ID: 10067213

Job Description

You will be a member of the Group Information Security Team responsible for responding to threats and incidents to the corporate networks, systems (on-prem and cloud), and digital assets.

Key Responsibilities:

•Perform security monitoring and incident response activities across the scoot networks, leveraging a variety of tools and techniques.

•Manage Security Operations center.

•Detect incidents through proactive “hunting” across security-relevant data sets.

•Ability to correlate multiple events from different devices to identify abnormal behaviour

•Document incident response analysis activities thoroughly

•Develop new, repeatable methods for finding malicious activities

•Provide recommendations to enhance detection and protection capabilities.

•Effectively present technical topics to both technical and non-technical audiences

•Develop and follow detailed operational processes and procedures to appropriately analyze, escalate, and assist in the remediation of information security incidents

•Prioritize multiple high-priority tasks and formulate responses/recommendations in a fast-paced environment

•Prepare documentation for security technical standards, standard operational procedures, and hardening standards.

•Analyse endpoint, network, and application logs

•Assist other IT teams in security-related issues

•Engage with vendors and parent company SIA team members for security reviews.

Requirements:

•Degree in Computer Engineering, Computer Science, Information Systems, or equivalent qualification.

•At least 5-6 years of experience in Cybersecurity Incident and Security Operations.

•Demonstrate experience in Information Security with a focus on Cyber Security Operations, Incident Response and Detection.

•Experience working in the Security Operations Centre and/or Computer Incident Response Team.

•Excellent problem-solving skills combined with hands-on experience doing root cause analysis and post-incident reviews.

•Solid knowledge of computer networks and common protocols

•Knowledge of prominent cyber threat actors and APT groups.

•Experience with Threat Intelligence Platforms.

•Experience with SIEM (especially Splunk).

•Professional security related qualifications (i.e. GCIA, CISSP etc) will be an advantage

•Preferred certifications: CISSP, CISM, CISA, ISMS, TOGAF, SABS

•Good interpersonal skills

To perform and execute all aspects of in-house legal counsel and company secretary (main or alternate), contracts and procurement management functions of our businesses. You will safeguard our reputation and minimise our exposure to legal, contractual and compliance risks by assuring that the Group and Company comply with laws and statutory requirements in the jurisdictions in which the Group and Company operate, and provide sound and practical legal advice to management and business partners on all relevant matters.

• Provide accurate and timely counsel to executives in a variety of legal, contractual and procurement topics (labour law, partnerships, local and international ventures, corporate finance, etc).
• Collaborate with Management to devise efficient defence strategies for the best positioning of the
• Group and the Company.
• Specify internal governance policies on contracts and procurement, and regularly monitor compliance.
• Research and evaluate different risk factors regarding business decisions and operations.
• Apply effective risk management techniques and offer proactive advice on possible legal, contractual and procurement issues.
• Communicate and negotiate with external parties (clients, vendors, regulators, external counsels, public authorities etc).
• Draft and solidify agreements, contracts and other legal documents to assure the full legal rights of the group and the company.
• Deal with complex matters with multiple stakeholders.
• Provide recommendations to the organisation on legal risk while balancing commerciality.
• Provide clarification on legal language or specifications to staff in the organisation.
• Conduct your work meticulously and with integrity, reliability and responsibility.
• Maintain current knowledge of alterations in legislations in the jurisdictions in which the Group and the Company operate.
• Perform corporate secretarial duties through participation in Board/Management Committee meetings, drafting Board/Management Committee papers/resolutions/minutes and ensuring follow through of action items required by the Board of Directors/Management Committees.
• Support contract and price negotiations, and prepare contract documents and/or agreements with clients, suppliers, business partners, employees and any other relevant parties.
• Assist with the administrative requirements of the legal team.
• Participate in special committees and drive projects for process improvement and innovation.
• Any other duties as assigned by the Group and Company.

Job Requirements and Qualifications

• Recognised degree in law, preferably admitted to the Singapore Bar or qualified to do so. Fresh graduates or those recently called are welcome to apply.
• Experienced legal executives with a recognised diploma in law and management may be considered.
• Proven experience as a legal counsel in business environment with a commercial perspective.
• Excellent knowledge and understanding of corporate and contract laws, practices and procedures.
• Full comprehension of the influences of the external environment of a corporation.
• Demonstrated ability to create legal defensive or proactive strategies.
• High degree of attention to detail and professional ethics and integrity.
• Sound judgement and ability to analyse situations and information.
• Strong command of English and the use of Microsoft Office.
• Proactive and self-motivated individual with a growth mindset and composure under pressure.
• Must be prepared to travel on occasion, depending on the Company’s requirements.

Applied Materials is a leader in materials engineering solutions used to produce virtually every new chip and advanced display in the world. Our expertise in modifying materials at atomic levels and on an industrial scale enables customers to transform possibilities into reality. Our innovations make possible™ the technology shaping the future. We are looking for a Data Scientist to support our Data Analytics team in the Legal Department promoting legal, technical and commercial initiatives across the company’s business activities. The position is located at Applied Materials Singapore.

Principal Duties & Responsibilities

Primary responsibilities involve analyzing highly complex data to drive impactful business decisions for clients across Applied’s business. You will by collaborate globally across Applied’s legal, engineering, product development, business and marketing groups to understand their business challenges, convert the challenges into data analytics problems, identify appropriate metrics, design/develop models, design dashboards and other interactive data visualization to result in tangible analytics insights.

In addition, you will identify new areas of opportunity for the legal department by automating business workflow, developing forecasting models and making recommendation on emerging technologies such as new digital analytics tools and GenAI.

Qualification & Work Experience

• Bachelor degree or higher in a relevant field such as computer science, data science, business intelligence, statistics, mathematics, physics, engineering or a related field
• At least 2 years’ experience with converting real-life business challenges into data analytics problems, leveraging state-of-art techniques to solve the problems, and explaining complex data analytics methodologies to non-technical stakeholders
• Preferred experience in structural querying languages (e.g. MySQL, PostgreSQL), data preprocessing languages (e.g. R, Python) and big data processing tools (e.g. Hadoop, Spark)
• Preferred experience in extracting/integrating structured & unstructured data (e. e.g. text, documents)
• Preferred experience in development & deployment of data visualization dashboards to track business metrics (e.g. Tableau, Power BI)
• Experience in development & implementation of machine learning models (e.g. random forecast, gradient boosting, transformers), experience with NLP & LLM is advantageous
• Experience in design and/or introduction of process automation solutions (e.g. Uipath, MS Power Platforms) to streamline operational workflow is advantageous
• Familiarity with designing & conducting statistical analysis (e.g. A/B test, Hypothesis test)
• Familiarity with data analytics techniques such as cloud computing, CI/CD, data security

Skills & Competencies

• Strong fundamentals of applied data science in a business setting
• Strong ability to distill complex scientific and technical concepts into actionable analysis
• Capability to communicate data science solutions to business and/or non-technical stakeholders
• Strong analytical capability, ability to think critically and possessing learning agility to quickly attain understanding of new technology areas
• Proactive, thorough, working with high accuracy and attention to detail with good time management
• Adaptability to changing priorities and project focus while remaining flexible in shifting conditions
• Ability to work effectively with people from a variety of culturally and scientifically diverse backgrounds and collaborate effectively with other team members

Work Location

• Science Park II (Alpha building)

The Senior AE/ Engineer is responsible for maintaining and improving the organization’s cybersecurity posture on an ongoing basis. S/he will work with external experts to implement security solutions, and work with vendors to monitor, detect and contain cybersecurity incidents to minimize impact to the organization.

Responsibilities :

• Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis
• Work with vendor to conduct security assessments and penetration tests.
• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.
• Standardize and refine security incident response and escalation processes.
• Mitigate and contain threats when detected.
• Escalate security incidents and non-compliances on a timely basis.
• Work with IT infrastructure team to evaluate, implement and enhance the network perimeter security, endpoint security, SIEM, secured remote access, MFA, Identity Access Management and Privileged Access Management.
• Monitor information security alerts triage, mitigate, and escalate issues as needed.
• Provide security advisory to end users on regular basis.
• IT Security Management of various aspect, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.
• Keep abreast of industrial IT security advancements and introduce appropriate security enhancements to IT infrastructure and systems.
• Attend to any other reasonable duties as assigned by the Senior Cyber Security & IT Governance Manager and IT Director.

Requirements :

• Degree in engineering, science or information technology, or equivalent education.
• At least 3-5 years of related work experience in cybersecurity management and security governance.
• Candidates with additional experience will be considered for the Senior Cyber Security Analyst position
• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.
• Strong understanding of ISO27001 standard.
• Hands-on experience at least 4 of the following IT Security Tools:

a) Next Generation Firewall (e.g., FortiGate, Palo Alto, Cisco FirePower)

b) SASE (Zscaler, Netskope, Skyhigh)

c) Tenable Security Center Continuous View

d) Endpoint Protection (e.g., Symantec, Trend Micro, Sophos Endpoint)

e) Email Security (e.g., Mimecast, ProofPoint, Cisco Email Security)

f) Data Loss Prevention (e.g., Symantec, ForcePoint, Digital Guardian)

g) SIEM (e.g., Splunk, QRadar)

h) CyberArk PAM and IAM

• Understand Risk Management, Disaster Recovery, Business Continuity and IT Regulatory Compliance.
• Good command of written and spoken English.
• Excellent interpersonal and communication skills.
• Pro-active, independent, resourceful, able to work in a team environment and work independently with minimal supervision.
• Work well with all functional levels in the organization.
• CISSP, CISM, CISA or equivalent IT security certifications will be advantageous.
• Prior IT security consulting and/or IT Network experience will be advantageous.

Interested applicants are requested to write in with detailed resume indicating current and expected salary and availability.

We regret only shortlisted candidates will be notified.

JOB DESCRIPTION

• Helps to manage the Security Department in concurrence with the Assistant Security Manager.
• Trains all security personnel in their areas of responsibilities.
• Supervises all activities of security staff to ensure compliance with and proper application of department regulations and resort policy.
• Promotes a safety attitude amongst the associates.
• Ensures safety of persons in the resort and property assets.
• Reports irregularity in associate or guest behavior.
• Handles loss, damages and accidents.
• Handles documents and follows up with necessary persons any incidents occurring in the resort premises.
• Investigates theft as reported by guest or associate.
• Documents all action in the department, including emergencies, loss, theft or accident.
• To be the key contributor in covering the role of the company emergency response team.
• Carpark management.
• Performs other duties as assigned by the Assistant Security Manager.

JOB REQUIREMENTS

• Acknowledges and screens daily work schedule in concurrence with the Assistant Security Manager.
• Conducts daily briefing and de-briefing in the absence of the regular trainer.
• Proposes an effective duty to ensure sufficiency of manpower in accordance with volume of business.
• Establishes two-way communication with related departments.
• Communicates effectively with guests, subordinates, immediate supervisors and other section heads.
• Manages time effectively by meeting deadlines on time.
• Identifies and solves problems in a professional manner.
• First Aid and CPR+AED certified.
• WSQ Respond to Fire and Hazmat Emergency certified
• 12 hour shift / Work 4 days / Rest 3 days

BENEFITS

• Company Transport Pick-up/Drop-off Provided
• Uniform Provided, Duty Meals, F&B Discount, Dental, and Medical
• Employee Room Rate Globally, Learning & Development Opportunities, Staff Recognition Award

Responsibilities:

• Experience in leading and delivering multiple security projects and solutions across one or more IT Security domains (Cyber Program Management, Cyber Threat Management, Identity & Access Management, Data Protection, Privacy, Cyber Analytics). This experience should include both advisory, implementation and operation experiences.
• Design and develop a customized security architecture, evaluate and select the best security system in one or more of the above security domains.
• Provide high-level input and security consultation in a project-based environment and ensure adequate security controls in all Business IT solutions.
• Responsible for project planning, execution and managing scope due to any new information and/or changes to initial assumptions, including implications for project time, cost, quality and risk
• Ensure the security enhancements / new security project delivery is done in line with stakeholder’s requirements, timeline and cost.
• Develop and maintain a detailed security project plan which deliver to the cost, quality and time for enhancements
• The position will be heavily involved in IT security operations, including:Security solution delivery
  Security monitoring
  Administration for security systems (e.g. firewall, anti-malware system, IDS/IPS)
  Incident Response
  Level 2 support for IT Security operations.
  

Requirements:

• Min. Bachelor's degree in Computer Science
• Min. 6-8 years’ experience working in a large-scale IT environment; Including five (5) years of information security and risk experience within the past six (6) years; including risk analysis, endpoint, server, network and web application security
• Possess Security Industry Certifications such as CISSP, CISM, SANS, GSEC and PMP, ITIL, Microsoft, CISCO
• Having good understanding of TCP/IP protocol and OSI Seven Layer Model.
• Strong technical security skills in assessment, design, implementation architecture, and program / project delivery and work across various delivery models, (Waterfall, Agile, DevOps)
• Analyzes & prepares recommendations relating to security for existing IT infrastructures / Applications.
• Expert understanding of firewall technologies.
• Ability to plan, organize and prioritize tasks to complete within established time frames.
• Highly result oriented and can work independently.
• Ability to build relationships and interact effectively with internal and external parties.
• Strong analytical, technical, and communication (both oral and written) skills.

The Service Delivery Manager is responsible for overseeing the end-to-end management of security vulnerability remediation processes. This role requires a deep understanding of security best practices, risk management, and IT service delivery. The successful candidate will collaborate with cross-functional teams to identify, prioritise, and mitigate security vulnerabilities by rolling out patches and fixes, ensuring the protection of organisational assets.

Responsibilities:

Vulnerability Management:

• Engage the Cyber Security team closely on the vulnerability management program, in the identification, assessment and prioritization of business-relevant vulnerabilities.

Remediation Management:

• Identification of solutions for assessed vulnerabilities.
• Develop and implement effective remediation plans according to the designated timelines.
• Track and manage remediation progress, ensuring timely closure of vulnerabilities.
• Engage stakeholders for any scheduled downtime to deploy remediation in the production environment.
• Coordinate with IT teams to implement necessary patches, updates, and configuration changes.
• Establish and maintain a vulnerability remediation knowledge base.

Risk Management:

• Coordinate with stakeholders for impact analysis.
• Develop rollback contingency plans for implementation challenges.
• Develop and implement risk mitigation strategies.
• Maintain up-to-date risk registers and reports.

Service Delivery:

• Ensure the delivery of high-quality security vulnerability management services.
• Monitor service performance metrics and identify areas for improvement.
• Manage service-related incidents and problems.
• Build and maintain strong relationships with stakeholders.
• Prepare monthly reports on progress and status of the remediation program.
• Ensure adherence to designate Service-Level Agreements

Team Management:

• Lead and manage a team of specialists in the remediation program.
• Assign tasks, set goals, and provide performance feedback.
• Foster a culture of collaboration and continuous improvement.

• Minimum of Diploma or Bachelor’s in information technology or relevant field
• Proven experience in security vulnerability management and remediation.
• Strong understanding of IT service management frameworks (ITIL, ITSM).
• Knowledge of security standards and regulations (e.g., ISO 27001, PCI DSS).
• Experience with vulnerability scanning and assessment tools.
• Excellent project management and organizational skills.
• Team management skills
• Strong analytical and problem-solving abilities.
• Effective communication and interpersonal skills.
• Ability to work under pressure and meet deadlines.

Desired Skills

• Strong experience in execution of security incident management and response
• Relevant certifications in Information Security or IT service management.
• Conversant with the knowledge of software products ranging from Solaris OS, Linux OS, Windows OS, Hypervisors (Nutanix, VMWare, Microsoft Hyper-V, Azure, Oracle VM, Apache & IIS Web Servers, Open SSL, IBM Websphere & CA Siteminder.

We provide:

• Competitive salary and benefits package
• Opportunities for professional development and career growth
• A collaborative and supportive work environment
• The opportunity to work with leading organisations and make a significant impact on their service delivery strategies

We always ensure that all employees receive fair treatment and are given equal opportunities.

What are you waiting for? Apply now!

We regret to inform that only shortlisted candidates will be notified. Thank you for indicating your interest in joining our team.

- To answer occasional phone calls from public

- Station on Site to attend to feedbacks

- Attend monthly site meeting and prepare minutes of meeting

- Need to do site administration work:

Purchase orders, compilation of Delivery oders, Workers attendance and Work pass and safety course attendance

- Minimum 2 Years experience in public relations service or hospitalities and tourism field

- 5-Day work week

Site Office Location:

Ang Mo Kio Industrial Park 2

50 metres walking distance from Ang Mo Kio Ave 1

Bus Stop No: 54101

- To answer occasional phone calls from public

- Station on Site to attend to feedbacks

- Attend monthly site meeting and prepare minutes of meeting

- Need to do site administration work:

Purchase orders, compilation of Delivery oders, Workers attendance and Work pass and safety course attendance

- Minimum 2 Years experience in public relations service or hospitalities and tourism field

- Alternate Saturdays work week

Site Office Location:

Ang Mo Kio Industrial Park 2

50 metres walking distance from Ang Mo Kio Ave 1

Bus Stop No: 54101