Who we are

Crédit Agricole Corporate and Investment Banking (Crédit Agricole CIB) is the corporate and investment banking arm of Crédit Agricole Group, world’s 10th largest bank by total assets.

Our Singapore center (“ISAP” or “Information Systems Asia Pacific”) is the 2nd largest IT setup (after Paris Head Office) for Crédit Agricole CIB's worldwide business. We work daily with international branches located in 30 markets by:

· Envisioning and preparing the Bank’s futures information systems

· Partnering and supporting core banking flagships and transverse areas in their large scale development projects

· Providing premium In-house Banking applications

This unique positioning empowers us to bring our core banking business a sustainable competitive advantage on the market.

We seek innovative and agile people sharing our mindset to support ambitious and forthcoming technological challenges.

Position

Computer Security Incident Response Team Expert (CSIRT Expert)

CSIRT Expert is a technical expert role within the Asia Information System Security (ISS) Team, Singapore, functionally aligned to Group’s ISS CSIRT team in Head Office, France.

ASIA ISS team oversees and supervise the Information System Security related matters in the region, including cybersecurity monitoring (SOC), incident response (CSIRT) and responding to each country's regulation proactively.

The ASIA ISS CSIRT oversees detection, control and reporting of cyber incidents when it occurs and work closely with IT Operations team to recover and restore the systems that are affected by the security incident.

In this role, CSIRT Expert role will be responsible for respondingand managing end to end Security Incident Management Lifecycle: Incident Identification, Triage, Containment, Eradication, Recovery and Lesson Learnt. Person will be technical point of contact to respond and drive the security incidents response in the region.

Job Responsibilities

The Expert has a wide spectrum of responsibilities and will be responsible for following activities (but not limited to) in day-to-day work:

• Identifying and detecting Incidents and taking immediate action on security incidents including (and not limited to) DoS attacks, malware attacks, phishing attacks, web attacks;
• End to end ownership in driving and leading Security Incident Response and Resolution activities;
• Participate and support performing forensics investigations as required to respond to the Security Incidents;
• Responding to Security Threats and Intelligence alerts & notifications from Group CERT, Regional Regulators and authorized Threat Intelligence groups and ensuring appropriate preventive and detective actions are coordinated and deployed in liaison with IT Operations teams as per the defined approach and in timely manner;
• Owning end to end coordination, communications and deployment of action plans for Threat Advisories or lesson learnt from Security Incidents;
• Prepare detailed Incident Post-mortem report and Executive Summary to document the Security Incident chronology, root cause, remediation and lesson learnt;
• Creating and updating the incident response plan (IRP) and playbooks and ensuring periodical review of playbooks to ensure the relevancy of response actions in current context, including updated information of all stakeholders involved;
• Collaborate with other Geo’s CSIRT team members on security matters and act as a backup to manage security incident and other security activities in scope as needed;
• Periodic review of security measures of Networks (Switches. Routers, Firewall, IPS, etc.) and Systems (Win*,*NIX, etc.) in support of management of vulnerabilities;
• Support and integrate with incident response, threat intelligence, and overall security strategy as needed;
• Complete all mandatory trainings as required to attain and maintain competence;
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer, zone wide.
• Support and run annual “table-top incidents” exercise with management.
• Vulnerability management: Ensure vulnerability remediation process is known followed and at the expected level of performance
• In case of severe security incident (suspected or effective attack): Coordination of investigation, mitigation, and remediation operation in relation with IT operation and application teams. on exceptional basis as occurred.

Work Schedule

• Work Hours: 8.45a.m. to 6. 30p.m (Monday to Friday) with one-hour lunch break.
• CSIRT team globally follows ‘follow-the-sun’ model and work on Critical incidents from other geographies during Asia business hours;
• Additionally, candidate may need to be involved in Crisis level Critical Security Incidents observed outside of Singapore working hours on exceptional basis.

Qualification Requirements

• Bachelors graduate or equivalent technical degree in Information Technology or Computer Science;
• Must have minimum 10 years of experience in ITand 5-7 years of working experience in cyber security incident response role managing Security Incidents and performing log analysis and forensic analysis for an enterprise level environment;
• Working experience in financial organisation is preferred;
• Expertise in SIEM and SOC Processes;
• Strong functional knowledge of enterprise level Security Detection and Prevention technologies e.g. Firewalls, IPS/IDS, Network Packet Analysis and Endpoint log analysis, server log analysis, SIEMs, Vulnerability Scanning tools, Threat intel, Anti-Malware, Phishing Prevention and Endpoint Detection & Response (EDR); Scripting knowledge using Python, Perl, PowerShell;
• Must have strong understanding of different domains of IT Security cyber kill chain, IOCs, and attack frameworks
• Ability to apply risk based approach while working on assigned responsibilities;
• Excellent in analytical and problem-solving skills, communication and documentation skills;
• Ability to work independently andpriories work as well as a part of team with minimal supervision;
• Demonstrate Strong sense of responsibility and initiative with excellent communication and interpersonal skillstime management skills;
• Excellent written and oral English language skills;

Professional Certifications:

• Must have at least one of the certifications in regards to IR (Incident First Responder) e.g. GCIH, E | CIH

Job Description:

• Participate in implementing Secure Software Development Life Cycle (SDLC), produce security solutions and security test reports, provide advice in patching vulnerabilities, and follow up with risk mitigation
• Evaluate the risk points of common application frameworks and develop security solutions to provide security support for each business line
• Embed security principles into the design of system architectures to mitigate the risks posed by new technologies and business practices
• Design artifacts, spanning design, development and implementation, into enterprise systems that describe security principles and how they relate to the overall enterprise system architecture
• Perform routine activities related to the periodic review and audit activities of infrastructure security systems

Requirements:

• Bachelor’s degree or higher in Computer Science, Information Technology, Programming & Systems Analysis, Engineering, or other related fields
• Minimum 3 years of work experience in cybersecurity-related positions
• Familiar with OWASP TOP 10 vulnerabilities, and have a deep understanding of the principle, utilization, patching and reinforcement of various vulnerabilities
• Familiar with the enterprise's SDLC process implementation, building secure SDLC for IT companies, and have been in-charge of secure SDLC for a large dev team
• Familiar with black box testing methods and paths, and able to independently complete source code auditing work
• Hands-on experience in security design checklist
• Familiar with at least one programming language such as Java, Python, PHP, Go, C, etc, and proficient in reading design documents and related codes

Preferred Experience

• Having been credited to high-risk CVEs for well-known projects
• Having contributed to the development of open-source projects. Experience working in team collaborative development and familiar with development tools
• Fluent English communication skills for effective collaboration with multinational teams

Interested applicants are invited to apply directly at the NUS Career Portal.

Your application will be processed only if you apply via NUS Career Portal.

We regret that only shortlisted candidates will be notified.

Job Description

Research Assistant

We are recruiting a full-time Research Assistant to support the Principal Investigator, Associate Professor Natasha Howard, in the implementation and administration of research projects in the areas of health equity, infectious disease control, and global health.

Responsibilities:
The research assistant will focus on research and administration in infectious disease control policy and health system strengthening in the Asia region. This will include:
• Supporting qualitative and quantitative research, including contributing to design, implementation, analysis, and write-up of journal manuscripts and reports/policy outputs.
• Project management and administration for multiple research projects, including ethics review applications to NUS IRB and study country review boards, donor reporting, and liaison with relevant teams in NUS SPH and internationally.
• Assisting the PI in other day-to-day tasks as required.

Requirements:
• At least a Bachelor’s Degree in a relevant subject area.
• Excellent academic writing and communication skills in English.
• Experience of successfully managing multiple tasks concurrently.
• Strong qualitative and/or quantitative research skills and experience, including at least some experience with conducting or analysing semi-structured interviews, and capacity/interest to learn social science methodology.
• Highly organized and able to work effectively under pressure, use independent judgement, produce high-quality quality work, and problem solve within time constraints.
• Able to work independently as well as with a team.

Desirable:
• Degree or relevant experience using social science methodology.
• Experience with Atlas.ai/NVivo and R or similar, and capacity/interest to learn.
• Experience of research in global health and/or health policy and systems.

Only Singaporeans/SPRs/residents with existing right to work in the country may apply for this position.

Recruitment is open immediately and will continue until the position is filled.

Applicants should send the following documents during the job application:
1. Cover letter highlighting career goals and relevant experience
2. Curriculum Vitae, containing details of three named referees

Who Are We?

At HoYoverse, we are committed to creating immersive virtual world experiences for players around the world. In addition to game products such as Genshin Impact, Honkai Impact 3rd, Tears of Themis, and Honkai: Star Rail, HoYoverse also launched the dynamic desktop software N0va Desktop, the community product HoYoLAB, and created a variety of products such as animations, comics, music, novels, and merchandise around our original creative concept.

Adhering to our mission of Tech Otakus Save the World, we have always been committed to technology research and development, exploring cutting-edge technologies, and have accumulated leading technical capabilities in cartoon rendering, artificial intelligence, cloud gaming technology, and other fields.

HoYoverse is actively engaged in globalization, with offices in Singapore, Montreal, Los Angeles, Tokyo, Seoul, and other areas.

When you apply to a position with HoYoverse, we will process your personal data. To learn more about how we process your data, we encourage you to review our comprehensive Global Applicant and Candidate Privacy Policy. This policy provides detailed insights into how your information is collected, used, and protected throughout the application process.

What You Will Do:

• Responsible for the security operations of EDR, HIDS, email sandbox and other security devices in HoYoverse office, and participate in the operation of internal user portraits, internal risk identification and other operations.
• Participate in the construction of HoYoverse global security office network and the development of the office network's automated operation platform projects.

What We Are Looking For:

• Have certain experience in internal network security or penetration testing, and have a comprehensive knowledge of information security.
• Solid foundation in basic knowledge, familiar with security vulnerability principles, operating system principles, computer networks, data structures and other basic knowledge.
• Proficient in one programming language (Golang, Java, Python, C/C++), strong hands-on ability, and able to independently complete the development tasks of a module.
• Students with experience in security terminal confrontation, anti-virus bypass, driver development and system security research are preferred.

We are an equal opportunity employer that believes diverse backgrounds are key to bringing our concepts to life. If you're looking to play a key role in creating the best immersive virtual world experience for our users, we invite you to join our team.

Job Responsibilities:

1. Responsible for legal support in the overseas operations of a social gaming app, drafting compliance documents, and ensuring compliance in major global markets.
2. Monitor legal regulations and enforcement trends in overseas locations, provide assessments of compliance risks, offer recommendations, and drive implementation.
3. Clearly understand the needs of business departments, providing legal training and advocacy.
4. Establish and improve compliance systems related to company operations in regulatory domains and execute various compliance tasks.
5. Handle litigation, disputes involving overseas entities (Singapore entity), complaints, investigations, and dispute resolutions involving overseas law enforcement agencies.
6. Ensure daily operations of overseas entities comply with local laws and regulations.
7. Participate in legal affairs related to overseas business, such as business negotiations, drafting, revising, reviewing overseas business contracts and commercial agreements, intellectual property layout, and maintenance.

Requirements:

1. Bachelor's degree or above in a legal-related field.
2. 3 or more years of work experience, preferably in the gaming industry.

------------- Send me your resume via WhatsApp ❤

WhatsApp: (https://api.whatsapp.com/send?phone=6592377799)

I regret to share that only shortlisted candidates will be notified. www.dadaconsultants.com

EA Registration Number: R22108564

Data provided is for recruitment purposes only Business Registration Number: 201735941W. Licence Number: 18S9037

About Antina:

Founded in 2020, Antina is a JV between Starhub Mobile and M1 and is responsible for the rolling out of the 5G Standalone (SA) Radio Access Network (RAN) in Singapore for the two mobile network operators.
The Standalone 5G (SA) RAN is a game-changing ultra-high speed, low-latency network, and one which will enable new use cases across entertainment, cloud gaming, transportation, education and healthcare. 5G is used across three main types of connected services, including enhanced mobile broadband, mission-critical communications, and the massive IoT.

Non-standalone 5G (NSA) was the first stage of 5G, using a new 5G radio (or 5G NR) access network overlaid on an existing 4G LTE network core. Standalone (SA) 5G uses the 5G NR access network on a brand new 5G network core. Both approaches provide value, but many of the most exciting new features and innovative use cases of 5G can only be realized through a standalone 5G network.

Major duties and responsibilities:

• You will be a key member of the Management Team, advising the management on various issues related to the business and operation of Antina from a legal perspective.
• You will conduct effective sourcing, if required, for external and/or shareholders’ advice (legal or otherwise) on the various issues identified by the Company.
• You will be working on various matters including but not limited to commercial contracts drafting, reviewing and negotiation, corporate governance, compliance, and risk management.
• You will be maintaining and managing the regulatory risk and compliance to ensure that the Company complies with the various internal policies as set out by Management, as well as external legal and regulatory requirements.
• You will be managing external counsel and legal service providers as needed to safeguard the interest of the Company.
• You will be advising the management on updates of laws and regulations in relation to Antina’s business.
• You will be empowered to work independently and make your own business judgement, whilst training and support are available when needed.

Job requirements:

• 5 to 10 years legal experience as a practicing lawyer or as an in-house legal counsel, preferably in telecommunications, software or IT industry.
• Prior exposure to various areas of law, regulations and polices including but not limited to the technology industry is a plus.
• Keen interest in technological solutions and the industry, with willingness to learn and develop in-depth understanding of the various matters affecting the Company.
• Possess business acumen grounded with a touch of practicality and pragmatism.
• Collaboration with legal experts and the stakeholders to ensure the Company's compliance with internal policies and external legal and regulatory requirements.
• Analytical and logical with ability to work and make decisions under time pressure.
• Ability to work independently as well as in a team environment.

How to apply:

Visit our company website at www.antina.com.sg for more information or send your CV directly to [email protected].

Antina is a company driven by ability and hardwork. We adopt fair employment practices and employment decisions will be based on merit, qualifications and abilities. Antina does not discriminate in employment opportunities or practices on the basis of race, colour, religion, sex, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

At InnoEdge, we work with organisations to protect them from cyber threats. We help detect new unknown cyber threats through research, fortify networks, and defend critical information infrastructures. Based in Singapore, our team consists of cybersecurity experts who use the advanced techniques and technologies to deliver cutting-edge solutions and services.

InnoEdge believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Collaboration is key to our success. We prioritise open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We're looking for individuals who share our values and are excited to join us on our cyber mission.

Responsibilities

• Perform deep research into selected applications to understand how they are designed and implemented.
• Reverse engineer or apply static and/or dynamic analysis techniques on closed source binaries to understand it’s inner workings.
• Identify weakness in systems or software that makes it possible for an attacker to abuse.
• Develop proof of concept to demonstrate the severity of the discovered vulnerability and propose mitigations.
• Develop cutting edge tools to improve and scale up the analysis process.
• Keep abreast of the latest research into application security research and reverse engineering techniques.

Minimum Qualifications:

• Diploma/bachelor’s in a computing related field or relevant practical experience
• Software development experience in a general-purpose programming language for instance, Python
• Proficiency in C/C++, assembly (x86/64)

For a more senior role, we're looking for candidates who have:

• Competency in debugging, binary reverse engineering, bypassing of anti-RE and anti-debugging techniques.
• Experience in recognizing common algorithms and patterns (in line hashing function, obfuscator) in decompiled code and ability to perform type recovery on simple to intermediate data structures.
• Ability to apply public research materials to recover file format or encoded binaries.
• Participation in public disclosure of vulnerabilities, bug bounty programs or capture the flag (CTF) competitions.

If you meet these qualifications and are passionate about cyber security, we encourage you to apply for this exciting opportunity. We offer competitive compensation, a comprehensive benefits package, and a collaborative and dynamic work environment.

Job Summary:

We are currently looking for a Cyber Security Lead Engineer who will support the School by managing and maintaining the Cyber Security, Azure Infrastructure and Microsoft 365. The appointee works with the Director of Technology & Senior Cyber Security Manager to ensure the IT requirements of the end user are met.

The role reports to the Senior Cyber Security Manager.

Requirements:

· Minimum Degree in Computer Science, Engineering or equivalent

· Minimum relevant experience of 3 years and above

· Excellent knowledge of Cyber Security, Azure and Microsoft 365

· Experience in Microsoft Intune, Microsoft Defenders and Microsoft Sentinel

· Experience in managing Azure Identities and MDM

· Able to work independently as well as a good team player with good initiative

· A positive approach to working with people

· Will accept late hours and weekend work for maintenance and patching

The school is committed to safeguarding and promoting the welfare of children and young people and expects all staff and volunteers to share this commitment. We will conduct thorough background checks on all successful applicants.

Please refer to “Careers” on our website at www.tts.edu.sg for a detailed job description.

5-day week – working hours are from 7.30 am to 4.30 pm (41.25 nett hours per week). Interested applicants, please submit an application letter and detailed resume, stating your current and expected salary, date of availability and contact number via the online system at https://careers.tts.edu.sg/careerportal/main.aspx. In your application, please provide the names and addresses of three people from whom confidential references may be obtained. Please indicate their professional relationship to you.

(Only shortlisted applicants will be notified)

CPE Registration No.: 196100114C | Period of Registration: 7 June 2023 to 6 June 2029

At InnoEdge, we work with organisations to protect them from cyber threats. We help detect new unknown cyber threats through research, fortify networks, and defend critical information infrastructures. Based in Singapore, our team consists of cybersecurity experts who use the advanced techniques and technologies to deliver cutting-edge solutions and services.

InnoEdge believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Collaboration is key to our success. We prioritise open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We're looking for individuals who share our values and are excited to join us on our cyber mission.

Responsibilities

• Technical Leadership:

a. Recommend research directions, conceptualize new security tools, and mentor junior researchers.

b. Conduct internal training workshops on analysis techniques, vulnerabilities discovery, and mechanism.

• Research and Analysis:

a. Conduct in-depth research on applications, reverse engineer closed-source code, and identify exploitable weaknesses.

b. Continuously learn about the latest application security and reverse engineering techniques.

• Development:

a. Assess and verify security through design and execute tests against industry standards CIA triad: Confidentiality, Integrity, and Availability, plus Authorization and Non-repudiation).

b. Develop proof of concept (e.g. code, scripts) to demonstrate the severity of discovered vulnerabilities and propose mitigations.

c. Develop cutting-edge tools to streamline the analysis process and improve efficiency.

• Documentation and Reporting:

a. Document findings, methodologies, and recommendations for both technical staff and executive leadership.

b. Effectively communicate findings and strategy to stakeholders.

• Contribution:

a. Contribute to the Singapore cybersecurity community through publishing whitepapers, blog posts, or presenting findings at relevant conferences.

Minimum Qualifications

• Fluent in OOP such as C++, Windows or Linux APIs/syscalls and knowledge of common file formats, network protocols and encryption. - Demonstrated ability to:
• Reverse engineer C/C++ compiled binaries and recognize common algorithms and patterns in decompiled code.
• Perform type recovery on intermediate data structures and uncover logic and indirect calls within a module.
• Bypass common anti-RE and anti-debugging techniques and uncover original code obfuscated by a public obfuscator. - For a more senior role, we're looking for candidates who has the demonstrated ability to:
• Reverse engineer sophisticated software and other programs compiled in newer languages such as Golang, Rust, newer Pythons and non-C binaries.
• Recover complex code logic and indirect calls across multiple modules or files.
• Recover undocumented file format or encoded binaries through deep analysis of the program.
• Develop custom tools to recover the logic or emulate parts of the program.
• Uncover logic of heavily obfuscated or custom packed code.

Benefits

• Training & Development
• Performance Bonus
• Medical Benefits
• Hybrid Work Arrangements

If you meet these qualifications and are passionate about cyber security, we encourage you to apply for this exciting opportunity. We offer competitive compensation, a comprehensive benefits package, and a collaborative and dynamic work environment.

We are JTI, Japan Tobacco International, and we are present in 130 countries. We have spent years innovating, creating new and better products for the consumers to choose from. This is our business. But not only. Our business is our people. Their talent. Their potential. We believe that when they are free to be themselves, and they are given the opportunity to grow, travel and develop, amazing things can happen.

That’s why our employees, from around the world, choose to be a part of JTI. It is why 80% of employees feel happy working at JTI. And why we’ve been awarded Global Top Employer status, ten years running.

So when you’re ready to choose a career you’ll love, in a company you’ll love, feel free to #JoinTheIdea.

Learn more: jti.com

Global Travel Retail (GTR) is among the largest volume markets in JTI, operating in 160+ countries with 37 brands. We sell JTI products to international travelers in various channels (airports, border shops, ferries, diplomatic shops, etc.) and aspire to become the No.1 Tobacco Company in Travel Retail.

GTR is a highly culturally diverse market with employees from 37 nationalities working across the globe, with the market HQ based in Geneva and several Regional Hubs around the world.

What this position is about – Purpose

The GTR Legal Manager will be responsible for providing legal advice to the GTR business on all legal matters affecting its operations. The aim is to achieve corporate and commercial objectives in a manner that ensures compliance with the law and appropriate monitoring and management of legal risk.

The Legal Manager will be responsible for all legal matters (marketing activities, products regulation, contracts, etc.) for the ASIA and MENEAT Hubs and act as 1st point of contact for the business teams. Active participation in business meetings as well as collaboration with Market and HQ Lawyers and other Legal and Regulatory Affairs functions are key.

What will you do – Responsibilities:

• Performs legal advice on Tobacco regulations to the business teams in the ASIA and MENEAT hubs and to GTR central functions. Performs complex research and analysis of local laws in GTR markets with a focus on product regulation and marketing activities.
• Works in close collaboration with Market Lawyers.
• Analyzes the potential impact of anticipated regulations and actively supports the Corporate Affairs Department in its advocacy efforts
• Responsible for the review, drafting, and legal negotiation of GTR agreements in the Regional hubs he/she is responsible for (e.g. sales and distribution agreements and on Smoking Lounges agreements).
• Supports the development of the GTR Route to Market strategy in these markets
• Works closely with the Legal Director on a variety of topics, such as the implementation and monitoring of JTI's Competition law Policy and International Economic Sanctions. Responsible for the preparation of training materials for these matters, including delivering the necessary training to GTR colleagues
• Closely cooperates with external counsels and ensures the quality of outsourced legal advice as well as cost control/follow-up

Whom are we looking for – Requirements:

• University Degree in Law
• Minimum 8 years of work experience in a law firm and/or multinational corporation
• Capacity to work autonomously and make effective decisions quickly, capacity to prioritize a diverse workload.
• Strong negotiation and excellent communications skills, cultural sensitivity, business and results oriented.
• Demonstrated competence as a practicing lawyer in international business transactions, contracts, distribution, and competition/antitrust areas as well as regulatory issues.
• Experience in the Travel Retail Industry is not required
• Fluency in the English language both written and verbal
• Fluency in Mandarin is an advantage.

Position

Service Manager, Data Security Services

The Service Manager for Data Security Services manages the RUN team and the related activities to data and endpoint security. He/She is the main point of contact for the service provider and the internal clients in the bank. He/She manages the budget for the scope. He/She is also responsible for the transition of the new services from other regions to Singapore and manages the project/transition. The role is a techno-managerial role and will have to be involved in DLP policy/rule modifications as well. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Expert on the technologies within data and endpoint security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France, UK, and Russia) remotely from Singapore. France infrastructure represents approximately 90% of the worldwide production activities of CA-CIB.

Team works in Asia and Europe time zones and flexible rotational shift is based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect.
• Encryption Solutions: Disk Encryption, File and Folder encryption.
• Database Audit Monitoring solutions.
• Email and Web Phishing Prevention solutions.
• Vulnerability Management Services.
• Access Management.

Detailed Job Responsibilities

The Team Manager has a wide spectrum of responsibilities and actions.

As the manager of his/her team, he/she:

• Assigns the tasks and manages delegation.
• Sets and reviews the work organization according to activity’s requirements and people’s needs and validates the schedules.
• Animates the team to encourage collaboration and sharing of practices.
• Has a role in supporting people development.
• Participates to recruitment process for the team.
• Vendor relation management.

As the manager of his/her scope of activity, he/she:

• Meets stakeholders on a regular basis to discuss improvement plans, action plans, evolving threats and changing risks, and provide feedback on policies, standards, procedures, guidelines. ISS leads security for GIT and is the main entry point for internal clients outside of GIT (Business Lines, BCP, LGL, and Compliance for security topics).
• The service includes, but is not limited to, incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management, but also global projects like End of Life, New Builds, migrations and upgrades etc., participation in global Infra events (like Power down and DR Tests).
• Ensures activity is performed in compliance with norms, standards, processes and procedures.
• Gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting.
• Reporting and auditing.
• Monitors operational KPI and ensure tickets are losed within SLA.
• Ensures documentation is up to date and relevant for use.
• Implements cross-functions activities including continuous improvement initiatives.
• Estimates the yearly budget, sets monthly forecasts and follows up BAU/Project monthly balance.

As an experienced professional in Security domain, he/she:

• Supports his/her team or experts’ diagnosis when technical issues raise in his/her scope of expertise.
• Is aware of the global IT structure so that he/she anticipates interrelationships within the organization.
• Manage L0/L1/L2/L3 activities which involve direct relationships with end users and L3 activities (architecture, design, project management, etc.).
• Provide oversight to all Data Security activities to ensure adequate performance, efficiency, and availability.
• Engage with technical peer, Service managers, Architect and project teams on technology roadmap and projects, especially with GIT architecture security team.
• Ensures the IT Production activities regarding his/her perimeter are performed correctly by the team, complying with defined norms, standards, processes and procedures.
• Has to make sure that the defined KPI is met on a day-to-day basis for Incident, request, problem, change management etc.
• Has to monitor and push for improvements in the team’s productivity.
• Be available and able to drive/manage any complex or high severity incidents that occur within the scope of their role.
• Engage in Projects and project deliveries.
• Drive and deliver root cause for any high severity issues.
• Has to be responsible for providing direction, proactive and reactive support services to maintain the availability and reliability of systems infrastructure in accordance to the SLA.
• Is involved in security incident diagnosis or investigations to help provide evidence or facts during diagnosis or investigation.
• Manage requests from stakeholders on data security tools to provide extracts, reports or information when required.

As the first point of contact for the Service Provider, he/she:

• Manages the daily relationship with the Service Provider and escalates when needed.
• Follows up Provider KPI and related actions.
• Coach and develop partner resources to meet the objectives.

As the first point of contact for internal Clients, he/she:

• Manages the daily relationship with internal Clients including planning, requests clarification, risks mitigation and service quality.
• Prepares client feedback for the monthly review.
• Serve as point of escalation on major incidents.
• Have to maintain a smooth relation with partners, vendors and global clients/teams.

As a member of ISAP/ITS, he/she:

• Facilitates collaboration and spread of information from and to the team.
• Participates to the department’s activities including brainstorming, team building and other team or transversal actions.
• Fosters innovation mindset.
• Contributes to ISAP/ITS global branding and communication.
• Manage budget (once a year) and forecast (monthly)
• Focus on automation and optimum use of the team to improve efficiency.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence.
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

v Work Timing is flexible and is scheduled to manage the operations within business hours of Asia and Emea timezone.

v Role may have to attend and lead any critical issues escalated outside of working hours, when operational needs.

Qualifications Requirements

Ø Minimum 12 years of IT Security experience and with 3-4 years of team management experience.

Ø Must be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science.

Ø Must have knowledge of different domains of IT Security.

Ø Must have managed a team size of 8 or more Security Specialists in an enterprise level environment;

Ø Must have prior hands-on experience in managing the IT Security Solutions.

Ø Must have experience in working in Production setup in Run (Operations) mode.

Ø Must have working experience in managing the endpoint and data security solutions for a Large enterprise level environment, working experience in financial organization is preferred.

Ø Ability to apply risk based approach while working on assigned responsibilities.

Ø Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions.

Ø Excellent in analytical, communication and documentation skills.

Ø Ability to organize work and be able to priories work as per the needs of Production Operation’s needs.

Ø Must have strong understanding of ITIL processes and comfortable working in process oriented environment.

Ø Ability to work independently and as well as a part of team and is able to work under minimal supervision.

Ø Should have time management skills and able to manage work in fast moving environment.

Ø Should have hands-on technical exposure on wide spectrum of endpoint and data security technologies e.g. Symantec Data Loss Prevention (DLP), Symantec Endpoint Protection, Phishing Prevention and other IT Security technologies.

Ø Must have experience in defining, designing and configuring DLP Policies as per the business requirements.

Ø Professional Certifications:

• CISSP, CISM certified is highly preferred.

Interested applicants, please email your resume to Shaun Quek Yew Meng.

Email: [email protected]

CEI Reg No: R1660732

EA Licence No: 99C4599

Purpose

The principal role is to manage the security platform for the 3.5GHz C-Band RAN system so as to ensure the RAN network is adequately protected and secured against cybersecurity threats and incidents.

Duties and Responsibilities:

1. Oversee the overall operation and functions of the JVCo security platform.
2. Monitor Cyber Security Events for the JVCo 3.5 GHz C-Band Radio systems, including: Review event logs from the respective systems and ensure that there are no anomalies in the logs. Raise report on any security incidents to IMDA/SH/M1.
3. Coordinate with StarHub and M1 to administer cybersecurity measures to prevent, manage and respond to cybersecurity threats and incidents.
4. Coordinate with StarHub and M1 to assess and monitor the compliance of the JVCo with the JVCo/SH/M1 organization cybersecurity policy.
5. Work with Starhub and M1 to engage external vendor to perform Vulnerability Assessment in order to ensure compliance to IMDA 5G security requirement.
6. Collaborate with StarHub and M1 to engage external parties to perform external and internal Penetration Test for Network and Applications.
7. Ensure the security platform is up to date with tracking and identifying the latest security threat to the JVCo network and system.
8. Conduct regular scanning of JVCo RAN System to ensure the accuracy of the Asset Inventory and track any Vulnerabilities in the Asset.
9. Facilitate and work with StarHub and M1 in the preparation for any audit (e.g TCS, Mobile TIRA).
10. Administer all system and user management functions of the 5G security platform, which include: Assigning access right to users of StarHub, M1 and the equipment vendors, upgrading softwares and hardwares, and system/database maintenance.

Job Requirements

Qualifications:

1. Degree in Computer / Telecommunication Engineering or related qualification or possess at least three years of related working experience.

Technical Skills:

1. Experience in conducting Vulnerability Assessment and Penetration Test
2. Experience in conducting security audit and setting cyber security policy
3. Experience in managing Cyber Security Operation
4. Candidates with CISSP/CISA/GIAC or equivalent certification is an advantage

Interpersonal skills:

1. Able to work independently and is also a good team player.
2. Possess good communication skills.
3. Strong commitment to work and have good initiatives.

How to apply

Apply via myCareersFuture or send your CV directly to [email protected].

Antina is a company driven by ability and hardwork. We adopt fair employment practices and employment decisions will be based on merit, qualifications and abilities. Antina does not discriminate in employment opportunities or practices on the basis of race, colour, religion, sex, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Visit our company website at www.antina.com.sg for more information.

Who we are

Crédit Agricole Corporate and Investment Banking (Crédit Agricole CIB) is the corporate and investment banking arm of Crédit Agricole Group, world’s 10th largest bank by total assets.

Our Singapore center (“ISAP” or “Information Systems Asia Pacific”) is the 2nd largest IT setup (after Paris Head Office) for Crédit Agricole CIB's worldwide business. We work daily with international branches located in 30 markets by:

· Envisioning and preparing the Bank’s futures information systems

· Partnering and supporting core banking flagships and transverse areas in their large scale development projects

· Providing premium In-house Banking applications

This unique positioning empowers us to bring our core banking business a sustainable competitive advantage on the market.

We seek innovative and agile people sharing our mindset to support ambitious and forthcoming technological challenges.

Position

Data Security Expert- Data Security and Endpoint Security

Data Security Expert is a technical expert role within the Data Security Services team and will be responsible for managing, administration and supporting the Data Security and Endpoint Security technologies for the bank.

Person will be the technical point of contact for the Run team and the related activities to data security and will be the last level of escalation for the Security specialists in the team. He/She is also responsible for the technical transition and validation of Security services from other regions to Singapore. He/She will be involved in projects and POC’s that may involve security services. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Expert on the technologies within data security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France and UK) and Asia remotely from Singapore. France infrastructure represents approximately 80% of the worldwide production activities of CA-CIB in Singapore.

Team works in Europe time zones and this role will be aligned primarily to Paris working hours. Flexible rotations are followed based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect,
• Encryption Solutions: Disk Encryption, File and Folder encryption,
• Database Audit Monitoring solutions
• Email and Web Phishing Prevention solutions.
• Vulnerability Management

Detailed Job Responsibilities

The Expert has a wide spectrum of responsibilities and actions. Person will be responsible for following (but not limited to) responsibilities in day-to-day work:

As the Expert of the team, he/she:

• act as the last level of escalation for the team members
• own Incident,Problem and change management process for the team
• assigns technical tasks and manages delegation
• animates the team to encourage collaboration and sharing of practices
• participates to recruitment process for the team

As the Expert of his/her scope of activity, he/she:

• is actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management
• Is the final technical approver for any changes into Data Security systems and is accountable for any technical changes in the environment from a RUN/BAU perspective
• Is involved in projects like End of Life, New Builds, migrations and technical upgrades of the solution managed by the team
• Participates in global Infra events (like Power down and DR Tests)
• ensures activity is performed in compliance with norms, standards, processes and procedures
• gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting
• ensures documentation is up to date and relevant for use
• lead the continuous improvement initiatives
• responsible to drive and deliver root cause for any high severity issues
• Focus on automation and optimum use of the team to improve efficiency
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

• Work schedule is mainly focused to support Asia and EMEA (Paris) time zone; however, may have to support during non-offce hours for critical incidents or escalation as per the assigned on-call support requirements;
• Rotational Shift schedule is followed;
• Work Hours: 2 PM – 11 PM SGT (with 1 week of General shift 9 AM – 6 PM SGT).

PRODUCT AREA

Whether it is paying online with Autofill, using tap and pay in stores, or using the Google Pay app, the Payments team at Google is focused on making payments simple, seamless, and secure. In addition to consumer payment technologies, the Payments team also powers the money movement between Google and its consumers and businesses.

JOB DESCRIPTION

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google’s needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

With your technical expertise you will manage project priorities, deadlines, and deliverables. You will design, develop, test, deploy, maintain, and enhance software solutions.

Qualifications

JOB RESPONSIBILITIES

• Write and review backend infrastructure code.
• Triage product or system issues and debug/track/resolve by analyzing the sources of issues and the impact on hardware, network, or service operations and quality.
• Perform technical security assessments, code audits and design reviews.
• Develop technical solutions to help mitigate security vulnerabilities.
• Advocate security and secure practices throughout Google Payments.

MINIMUM QUALIFICATIONS

• Bachelor’s degree in Computer Science, or a related technical field, or equivalent practical experience.
• 3 years of experience with software development in one or more programming languages, or 1 year of experience with an advanced degree in an industry setting.
• 3 years of experience in software or application security.

PREFERRED QUALIFICATIONS

• Master's degree or PhD in Computer Science or related technical field.
• Software development experience in C++ or Java.
• Knowledge of security engineering, computer and network security, authentication, security protocols and applied cryptography.
• Effective communication skills.

Interested applicants are invited to apply directly at the NUS Career Portal.

Your application will be processes only if you apply via NUS Career Portal.

We regret that only shortlisted candidates will be notified.

Job Description:

Applications are invited for the following full-time position in the Saw Swee Hock School of Public Health at the National University of Singapore (NUS):

Research Assistant (1 year)

We are looking for a full-time research assistant to support an MOE-funded research project on cancer and public health. The successful candidate will work closely with the principal investigator and a team of cancer clinicians and researchers, and will have the opportunity to gain hands-on experience in socio-behavioural research to improve cancer care.

Responsibilities:

• Assist with the administration and management of research projects, including coordinating the research team’s meetings and activities and preparing the research ethics application.
• Conduct research fieldwork, including recruiting participants, coordinating interview schedules, administering informed consent forms, conducting qualitative interviews and transcribing interviews verbatim.
• Conduct qualitative data analysis, and work with the research team in preparing research reports/manuscripts.

Requirements:

• Excellent academic writing and communication skills in English.
• Experience of successfully managing multiple tasks concurrently.
• Some qualitative research skills and experience, including at least some experience with conducting semi-structured interviews and/or analysing qualitative data and interest in learning how to conduct socio-behavioural research in cancer care.
• Highly organized and able to work effectively under pressure, use independent judgement, produce high-quality quality work, and problem solve within time constraints.
• Able to work independently as well as with a team.

Desirable:

• Degree or relevant experience in social science methodology or health care.
• Experience with Atlas.ai/NVivo and R or similar software to manage qualitative data or the interest to learn.
• Experience in conducting qualitative interviews.
• Able to speak Mandarin/Chinese dialects or Malay/Tamil is an advantage as some research participants may only speak their mother tongue.

Recruitment is open immediately and will continue until the position is filled. Applicants should send the following documents during the job application:

1. Cover letter highlighting career goals and relevant experience
2. Curriculum Vitae, containing details of three named referees

Qualifications

• Bachelor’s Degree in a social science or health discipline.

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span across industries such as financial services, TMT (Telecommunications, Media and Technology), Education, Healthcare, Retail, Government, Manufacturing and Professional services. Our focus is to engage in the dynamics of our customers’ vertical markets and apply the skills of our employees in modernising key digital pillars, Data centres and Cloud services, Security and Network Infrastructure, Workspace communications and collaboration, Data and information strategies, and IT operations modernisation.

Logicalis Group has an annualised revenue of over $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4 billion.

As we continue to grow as a business, our people are our key differentiator with our competitors, and developing and retaining our talent is a key priority for all of our businesses. We will recommend that you watch this short video with input from our employees around the world.

Logicalis - A Great Place to Work

Job Summary:

We are currently looking for a Senior Security Project Engineer to join our Professional Services Team delivering Security Projects encompassing predominantly NAC, Firewall, PS and MFA solutions. Qualified candidate is expected to have hands-on experience in delivering such solutions. This role presents itself with considerable learning opportunities on the state-of-the art security technologies.

Accountabilities:

· Develop low level design document for the project delivery detailing the scope with the sensible technology write up.

· Participate in Internal/Customer meetings to develop the LLD document.

· In-depth technical knowledge and good working experience in implementing and supporting Cisco ISE and HPE Aruba ClearPass NAC solutions.

· Prepare UAT document and perform UAT as per document.

· Understanding of Windows Active Directory and Integration with NAC Solutions

· Proficient with hands-on experience delivering Firewall migrations and fine-tuning Firewall/IPS policies.

· Ability to deliver MFA Solutions for specific use case requirements.

· Assist in reviewing Technical Design Specifications (TDS) document for security projects

· Proactively participate in maintaining internal knowledgebase sharing technical findings within the Team.

The Individual and their Experience:

· Network Access Control (dot1x) experience of Cisco ISE and HPE Aruba ClearPass (Mandatory).

· Firewall Migration expertise across multi-vendor platforms- Cisco ASA/FTD, Palo Alto, Fortigate, Checkpoint.

· Hands on experience Cisco FirePower NGIPS.

· Basic understanding of Networking – Routing and Switching Protocols.

· Ability to manage medium to large size project and ensure completion within the projected timeline.

· Build customer relationship to manage the projects in a congenial way.

· Team Player highly spirited, sharing project experience with peers.

· Able to learn and adopt new skills when projects warrant based on the relevant training provided.

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Responsibilities

• Give accurate and timely counsel to executives in a variety of legal topics (labor law, partnerships, international ventures, corporate finance etc.)
• Collaborate with management to devise efficient defense strategies
• Specify internal governance policies and regularly monitor compliance
• Research and evaluate different risk factors regarding business decisions and operations
• Apply effective risk management techniques and offer proactive advise on possible legal issues
• Communicate and negotiate with external parties (regulators, external counsel, public authority etc.), creating relations of trust
• Draft and solidify agreements, contracts and other legal documents to ensure the company’s full legal rights
• Deal with complex matters with multiple stakeholders and forces
• Provide clarification on legal language or specifications to everyone in the organization
• Conduct your work with integrity and responsibility
• Maintain current knowledge of alterations in legislation

Requirements and skills

• BSc degree in Law
• Proven experience as a Legal Counsel in business environment
• Excellent knowledge and understanding of corporate law and procedures
• Full comprehension of the influences of the external environment of a corporation
• Demonstrated ability to create legal defensive or proactive strategies
• High degree of professional ethics and integrity
• Sound judgement and ability to analyse situations and information
• Outstanding communication skills

If you are interested, kindly apply through mycareersfuture.

I regret to share that only shortlisted candidates will be notified.

www.dadaconsultants.com

EA Registration Number: R21100604

Data provided is for recruitment purposes only

Business Registration Number: 201735941W.

Licence Number: 18S9037

As an individual contributor on our Cybersecurity engineering team, youll have a broad set of responsibilities including (the mix will depend on your interests and skill level):

• Troubleshooting security problems
• Assist in the management and deployment of security products on endpoints, servers, and virtual desktops
• Design, operate, and maintain a vulnerability management program
• Assist the Security Team in responding to and remediating system and/or network security breaches
• Plan, implement, manage, monitor, and upgrade security measures for the protection of the organizations data, systems, and networks
• Ensure that the organizations data and infrastructure are protected by enabling the appropriate security controls
• Plan, create, and implement cybersecurity processes and policies
• Engage in domain-specific threat modeling and attack surface analysis/reduction
• Identify information and logs to monitor, then design and engineer the process for gathering that information
• Promotes best practices and design patterns
• Willing to do remote support for Helpdesk team escalated suppprt cases
• Willing to learn newer technology / product / solutions based on customers needs.

Required Skills:

• Proficient in exploring, evaluating, and integrating new technologies, programming languages, data models, or frameworks.
• Easily pick up new technologies and are keen to expand your knowledge
• Experience in the development of projects related to network and security automation.
• Experience in infrastructure and automation processes and tools including Ansible, and Terraform
• Fundamental knowledge of SSH, TCP/IP, UDP, SSL, HTTP, HTTPS, PKI, DNS, and other common protocols.
• Advanced experience in development in languages such as Python, bash, or Golang
• Advanced knowledge of security controls, audits, and configurations related to: Windows, Linux, ChromeOS, and macOS
• AWS

Preferred Experience (Optional but valued)

• Experience in common continuous integration tools such as GitHub Actions, Jenkins and CircleCI.
• Advanced experience with the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework
• Experienced DevOps or DevSecOps practitioner
• Advanced knowledge of security controls, audits, and configurations including SIEM (Splunk, QRadar) & EDR (Crowdstrike, Carbon Black)

Only for Singaporeans/PR's

Job Responsibilities:

1. Responsible for legal support in the overseas operations of a social gaming app, drafting compliance documents, and ensuring compliance in major global markets.
2. Monitor legal regulations and enforcement trends in overseas locations, provide assessments of compliance risks, offer recommendations, and drive implementation.
3. Clearly understand the needs of business departments, providing legal training and advocacy.
4. Establish and improve compliance systems related to company operations in regulatory domains and execute various compliance tasks.
5. Handle litigation, disputes involving overseas entities (Singapore entity), complaints, investigations, and dispute resolutions involving overseas law enforcement agencies.
6. Ensure daily operations of overseas entities comply with local laws and regulations.
7. Participate in legal affairs related to overseas business, such as business negotiations, drafting, revising, reviewing overseas business contracts and commercial agreements, intellectual property layout, and maintenance.

Requirements:

1. Bachelor's degree or above in a legal-related field.
2. 3 or more years of work experience, preferably in the gaming industry.

------------- Send me your resume via WhatsApp ❤

WhatsApp: (https://api.whatsapp.com/send?phone=6592377799)

I regret to share that only shortlisted candidates will be notified. www.dadaconsultants.com

EA Registration Number: R22108564

Data provided is for recruitment purposes only Business Registration Number: 201735941W. Licence Number: 18S9037

PRODUCT AREA

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats.

ADDITIONAL JOB DESCRIPTION

As a Strategic Services Function Manager, you will blend risk assessment, strategic planning, and client collaboration. You will manage a team of cyber security consultants. You'll conduct in-depth cyber maturity assessments, develop forward-thinking strategies, and lead realistic simulations that help clients prepare for and respond to cyber threats.

In this role, you will identify vulnerabilities and develop actionable mitigation plans. You'll empower clients with data-driven insights, enhancing their security posture.

Qualifications

JOB RESPONSIBILITIES

• Manage and inspire a highly skilled team towards surpassing our goals by driving performance and outcomes, while managing workload, scheduling resources, and ensuring the quality of their output.
• Foster expansion in the APAC region for our Strategic Services Practice through the identification and advancement of opportunities, aiding in the creation and development of Statements of Work, and participating in responses to RFPs/RFIs/RFQs. Promote a culture of continuous learning and development within the cyber security practice.
• Perform in-depth assessments to identify and analyse cyber vulnerabilities and threats. Prioritize risks based on their potential impact.
• Craft cyber risk mitigation strategies, ensuring alignment with regulations (e.g., GDPR, ISO 27001, NIST/CIS Controls).
• Collaborate with clients to tailor cyber security solutions. Generate clear reports and presentations explaining risks and mitigation plans. Scope and propose solutions to clients.

MINIMUM QUALIFICATIONS

• Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent practical experience.
• 10 years of experience in cyber security with a risk assessment focus.

PREFERRED QUALIFICATIONS

• Master's degree in a relevant field.
• Professional certifications in cyber security (e.g., CISSP, CISM, CRISC)
• Consulting and/or project management experience, and experience leading cyber security assessments, including Table-Top Exercises (TTX).
• Knowledge of security frameworks (e.g., ISO 27000, NIST CSF).
• Ability to present complex security concepts to varied audiences (e.g., technical and executive).
• Excellent communication and problem solving skills.

Job Description

We are looking to hire an in-house counsel to be based in our Singapore office.

Job Requirements

• The ideal candidate for this position should be a qualified lawyer and have at least 7 years of post-qualification experience in wealth management, either at a reputable law firm or in-house company.
• The candidate must enjoy working in a fast-paced high-intensity environment, show excellent legal and commercial judgment, be a good team player and be highly efficient and hardworking.

Who Are We?

At HoYoverse, we are committed to creating immersive virtual world experiences for players around the world. In addition to game products such as Genshin Impact, Honkai Impact 3rd, Tears of Themis, and Honkai: Star Rail, HoYoverse also launched the dynamic desktop software N0va Desktop, the community product HoYoLAB, and created a variety of products such as animations, comics, music, novels, and merchandise around our original creative concept.

Adhering to our mission of Tech Otakus Save the World, we have always been committed to technology research and development, exploring cutting-edge technologies, and have accumulated leading technical capabilities in cartoon rendering, artificial intelligence, cloud gaming technology, and other fields.

HoYoverse is actively engaged in globalization, with offices in Singapore, Montreal, Los Angeles, Tokyo, Seoul, and other areas.

When you apply to a position with HoYoverse, we will process your personal data. To learn more about how we process your data, we encourage you to review our comprehensive Global Applicant and Candidate Privacy Policy. This policy provides detailed insights into how your information is collected, used, and protected throughout the application process.

What You Will Do:

• Improve existing security monitoring, intrusion detection capabilities.
• Conduct incident response for security incidents, including forensic investigation and mitigation.

What We Are Looking For:

• Understanding of the principles and nature of common vulnerabilities, with strong analytical and adversarial thinking skills.
• Experience in independently discovering general vulnerabilities in web applications/frameworks or systems.
• Participation in forensic investigations of intrusion/0-day emergency response incidents.
• Familiarity with security strategies in the fields of web applications, network protocols, and operating system.
• Knowledge of the principles and strategies of industry-standard security defense capabilities such as HIDS, WAF, and RASP.
• Proficiency in common programming languages such as Java, C, Python, or Go, with the ability to quickly develop simple tools.

We are an equal opportunity employer that believes diverse backgrounds are key to bringing our concepts to life. If you're looking to play a key role in creating the best immersive virtual world experience for our users, we invite you to join our team.

Summary of the Position

He/She will be a technical RUN expert for all Network Security services in CA-CIB. As such, he/she will provide support and act as the last level of escalation point for all production support activities within the Network Security operations team in Singapore. He/She is accountable for the overall health and stability of the technical solutions within his scope. He/She has to effectively work with technical peers such as architects, peer experts and project teams on technology road maps and projects. He/She will have control over the scope of technical activities, develop best practices, manage knowledge and ensure the necessary trainings are imparted to the team wherever applicable.

The 20-member Network-Security team operates the RUN activities and delivers projects for its infrastructure scope.

An Expert has a wide spectrum of responsibilities and actions.

Main Duties

As an expert of his/her team, he/she:

• assigns technical tasks and manages delegation for technical issues,
• animates the team to encourage collaboration and sharing of best practices,
• has a role in supporting technical skills development and provides training when required,
• supports new technologies and leverages them to provide consistency of service across streams,
• manages service improvements for all Network and Security services supported throughout the organization,
• documents, reviews, maintains and shares relevant technical information to the team
• provides technical direction, supports services both proactively and reactively to maintain the availability and reliability of system infrastructure in accordance to the SLA,
• implements and develops improvements based on LEAN-CA-CIB best practices,
• focuses on automation and optimum use of the team to improve efficiency,
• drives and delivers root cause for any high severity issue,
• reviews technology changes to identify potential risks,
• is responsible for problem management and resolution
• Perform real-time analysis and trending of security systems
• Respond to user incident reports and evaluates the type and severity of security events.
• Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.
• Interpret and apply security policies and procedures.
• Establish escalation processes for security incidents and develops contingency plans and disaster recovery procedures.

As an experienced professional in Network-Security Services, he/she:

• supports his/her team during diagnosis when technical issues rise in his/her scope of expertise,
• is aware of the global IT structure so that he/she anticipates interrelationships within the organization,
• engages with technical peer, Service managers, Architect and project teams on technology roadmap and projects,
• facilitates transformation projects and suggest future directions for new areas of improvement and change,
• guarantees the production readiness and license to operate of new projects and solutions
• is available and able to drive technically, any complex or high severity incidents that occur within the scope of their role,
• actively engages to understand new technologies and technology trends and reviews them with a view to incorporating them into CACIB operations,
• actively assists in identifying the most technical skilled candidates for open roles,
• technically coach and develop partner resources to improve quality and productivity,
• Define the technical skillset required to support CA-CIB technologies.

As the escalation point of contact for Clients, he/she:

• manages the daily relationship with Clients including planning, requests clarification, risks mitigation and service quality

Legal and Regulatory Responsibilities

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• 15+ years of Experience in managing network and security infra.
• 10+ years Experience in handling major network security projects (ex: SDWAN)
• 10+ years Experience in handling Firewalls/IPS/F5/Pulse/Proxies, Routers/Switches.
• At least a Bachelor’s degree in any of these faculties:
• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Working Hours:

• Primarily match Europe business hours
• On-call support will be expected on a rotational basis

Interested applicants, please email your resume to Shaun Quek Yew Meng

Email: [email protected]

CEI Reg No: R1660732

EA Licence No: 99C4599

Interested applicants are invited to apply directly at the NUS Career Portal.

Your application will be processed only if you apply via NUS Career Portal.

We regret that only shortlisted candidates will be notified.

Job Description

We are looking for a Research Engineer who will be responsible working on a project on cyber security and privacy issues for IoT and cyber-physical systems.

Responsibilities:
• Design and develop techniques that detect attacks on IoT/CPS;
• Perform analysis and simulations to validate designs;
• Implementation and development of demos;
• Assists with the editing and preparation of manuscripts, reports and presentations;
• Participate in presentations and demos for exhibiting work at appropriate events;

Qualifications

• BEng/BSc/BTech in Electrical Engineering, Computer Science or a related field;
• Programming experience and knowledge of cyber security would be a plus;
• Possesses research background with ability to read and understand methodologies in research papers;
• A good team-player;
• Open to Fixed Term Contract

Job Highlights

• Job Stability. AWS + Variable Bonus + Flexible Staff Benefits
• Flexible Working Arrangements, Hybrid
• Positive working and learning culture

Job Description

We are seeking an experienced IT Analyst Specialist with a focus on Application Security to join our team. The ideal candidate will have a strong technical background and a passion for security.

The successful candidate will join the Team that is responsible in establishing and governing the software development and application support processes, ensuring compliant to the established policies and guidelines. The team must also consider areas of improvement in the IT Delivery Team.

JOB SCOPE

The successful candidate will have the opportunities to work on the follow function(s).

Primary Function:

(A) Responsible for Application Security, not limited to the following

· Conduct application security assessments to identify vulnerabilities and ensure that applications are secure

· Work with development teams to ensure that security requirements are incorporated into the development process

· Develop and enforce secure coding practices

· Develop and maintain security policies and procedures

· Work with infrastructure teams to ensure that security is integrated into the infrastructure design

· Develop and maintain security monitoring tools and systems

· Conduct penetration testing and vulnerability assessments with vendors

· Stay up-to-date with emerging trends and technologies in application security

Secondary Function:

The Team is also handling the following function and the successful candidate may be assign to assist these functions.

(B) Identify IT Delivery improvement opportunities and support request from other teams or departments who has identified process improvement opportunities.

(C) Support Audits

· This includes external compliance audit for area responsible by the IT Dept.; i.e. ISO22301, Finance Audit, ISO27001, etc.

(D) Internal System Support

· Support in the development, support and maintenance of the internal developed back office application solutions and governance enforcements system/tools. e.g. billing system, customer registration system, etc.

· Support back office system improvement initiatives.

TECHNICAL REQUIREMENTS:

§ Tertiary education with working experience/knowledge in the following area:

· Understanding of the SDLC and agile process

· Strong knowledge of web application security concepts such as OWASP Top 10, SAN25

· Knowledge with security assessment tools such as Burp Suite, Qualys, Nessus, etc.

· Knowledge of programming languages such as Java, C#, Python, or Ruby

· Knowledge of scripting languages such as Perl, Python, or Bash

· Excellent communication and collaboration skills

· Knowledge in Cloud technologies

· Knowledge with containerization tools and orchestration (Docker, Kubernetes, Helm)

OTHER REQUIREMENTS

§ Should have the following soft skills attributes

· Strong analytical and problem-solving skills

· Organised and able to handle multiple projects concurrently

· Collaboration with users, product owners and development teams to deliver solutions.

· Self-motivated to pick up skills required to support the project requirement.

· Must have good command of English written, verbal and presentation skills

· Proactive, out of the box thinker, detail oriented with strong organizational, analytical and problem-solving skills.

· Self-starter, both a team player yet able to work independently and adjust to changing priorities, critical and strategic thinker, negotiator and consensus builder.

· Software engineer who has interest in Application Security can also apply.