About the role

The Legal division is made up of team members from Legal, Corporate Security, Compliance, Risk Management & Insurance, Privacy and Corporate Secretarial (“Legal”). The Group General Counsel (“GGC”) is the Head of Legal numbering more than 50 employees comprising legal counsels and respective teams based in Singapore and globally.

Reporting into the Group General Counsel, the duties include supporting the legal department technological tools including its Teams instances, litigation reporting tool (“Mitigate”), contractual risk management tool (“sAIgon”), corporate secretarial administrative support including management of Viewpoint.

Key responsibilities

Legal Department Operations Administrator

• Assist the Group General Counsel and Group Company Secretary and full legal team by managing team technology implementation.
• Administer and maintain databases of legal documents
• Office management support work include document management and procurement follow up with vendors.
• To maintain records and files (online and hard copy filing systems) in a systematic manner for easy access and retrieval using technology management
• To support and drive assignments / initiatives / projects related to compliance or legal matters as and when required.
• Assist GGC’s executive assistant in arranging meetings, seminars, trainings and events in support of technology initiatives.
• Assist with the preparation and formatting of presentations, reports, and communications materials.
• Support on legal and compliance reporting and documentation for the team.
• Liaise with other company departments, overseas counterparts, and external parties where necessary
• Ensure corporate messages are reiterated within the legal team
• Maintain and update Legal Department Teams instances and ensure efficient utilization and training of legal team.
• Maintain Mitigate and ensure efficient utilization by legal team including training.
• Maintain sAIgon and ensure efficient utilization by legal team including training.

Corporate Secretarial

• Prepare and coordinate with corporate secretarial team on documents for signing in original and despatch which includes ensuring that documents are in order and signers’ availability, or via electronic signing eg via DocuSign and collation of signed documents for statutory and other records
• Manage notarization and legalization requirements for corporate documentation including to communicate with the notary and courier despatch to arrange documents in good order for use in various countries
• Arrange translation and other administrative requirements upon team request
• Support accurate filing of physical corporate statutory records as applicable and accurate upload of statutory records with clear naming convention to corporate secretarial records online library
• Assist corporate secretarial team to update corporate information in software database and retrieval of corporate information or reports upon request from the corporate secretarial team or Legal team members
• Provide strong administrative support to Group Company Secretary including to communicate with the corporate secretarial team to provide organisation changes updates to circulate quarterly organisation charts and to draft customised chart extracts and related documents, entities’ list of addresses and all assigned jobs
• Support administration of Corp pass authorisation system to manage digital service access of employees for various functions to perform corporate transactions for Singapore companies. [there are more than 200 government digital services available at current time]
• Assist with basic provision of corporate information to Legal team to meet their requirements
• Assist on corporate secretarial actions for projects such as printing and binding of project bibles and upload to corporate secretarial records online library

About you

• Minimum 3 years relevant working experience with prior project management skills
• Good administrative and organizational skills
• Collaborative, proactive and resourceful
• Demonstrates the ability to multi-task and problem-solving skills
• Possess strong interpersonal and communication skills

Job Objectives:

Tasked with aiding the Security Manager in safeguarding properties and ensuring the well-being of guests, employees, and the hotel. Supervise all activities of security staff to ensure compliance and proper application of department regulations and hotel policies. Documents all action in the department, including: emergencies, loss, theft, or accident.

Primary Responsibilities

• Manages the Security Department, alongside with Security Manager.
• Oversees the security department and their day to day operations.
• Trains all security personnel in their areas of responsibilities.
• Reviews policies, procedures, and instructions on a regular basis.
• Evaluates possible hazards or threats to security.
• Promotes a safety attitude amongst all employees.
• Ensures safety of persons in the hotel and property assets.
• Reports irregularity in employee or guest behavior.
• Handles loss, damage and accidents.
• Handles, documents, and follows up with necessary persons any accidents occurring in the hotel premises.
• Investigates theft as reported by guest or employee.
• Documents all action in the department, including: emergencies, loss, theft, or accident.
• Participates in weekly department heads meeting in absence of Security Manager - Rooms Division Meeting and any others if requested.
• Secondary liaison for interacting with government officials, ministries, and law enforcement agencies.
• Reviews emergency procedures regularly.
• Delivers security training and promotes awareness within the hotel.
• Performs other duties as assigned by Security Manager.

Job Requirements

• Minimum education of High Vocational diploma in any discipline. Bachelor degree holder have an advantage.
• At least 3 years’ experience in a similar position in security & safety operations.
• Basic knowledge of local laws, investigative methods and fire safety.
• Criminal-free record
• Have good English communication skills both in written and spoken
• Possess professional disposition with good communication and interpersonal skills

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions (both applications and infrastructure) are developed and designed with security inbuilt.

Key Responsibilities

•Provide security consultancy, technical guidance, expertise, solutioning and education for en-terprise.

•Advise application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

•Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

•Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

•Perform threat modelling on security critical applications. Keep up to date on emerging secu-rity threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews and audits to ensure security assurance is achieved.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables. This is an individual contributor role. Strong communication skills.

Requirements

•Degree in IT or related fields, with at least 5 years in information security, especially in the application security space.

•Professional security certifications (CISSP, CSSLP, CEH, CCSP etc) preferred.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.

•Strong in-depth working knowledge in secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), Software Compo-sition Analysis (SCA).

•Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud technolo-gies. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

•Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc. Any prior vulnerability management experience preferred.

•Strong oral, written, presentation and inter-personal skills.

•Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

Job Description
You will be a member of the Group Information Security Team responsible for initiating, implementing and maintaining security products and solutions to support enterprise security.

Key Responsibilities

• Subject matter expert (SME) for the security systems owned by the Information Security Team.
• Ensure security systems are utilised to their maximum capabilities.
• Plan, identify, assess, design, operationalise and maintain multiple security related software and/or hardware.
• Recommend and drive cyber security solution and initiatives to improve cyber security of the organisation.
• Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
• Provide security consultancy, technical guidance, expertise, solutioning and education.
• Advise infrastructure teams on security design that is relevant and fit for purpose.
• Identify and assess cyber risks in the IT infrastructure environment.
• Review firewall requests.
• Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.
• Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables.
• This is an individual contributor role. Deliver tasks with minimal supervision.
• Strong communication skills.

Requirements

• Degree in IT or related field, with at least 5 years in information security, especially in the application security space.
• Professional security certifications (CISSP, CSSLP, CEH etc) preferred.
• Experience in security products POC and RFQ.
• Prior experience in implementing and maintaining any of tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM etc. and/or network security. Able to review firewall requests.
• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.
• Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience preferred.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc.
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Job Description

You will be a member of the Group Information Security Team responsible for ensuring corporate applications, systems, networks, and digital assets are adequately protected and mitigated against cyber threats and risks. You will help drive cybersecurity and risk management efforts and user awareness and education within the Singapore Airlines Group.

Key Responsibilities include:

• Provide cyber governance and risk management oversight.
• Manage the security policy framework and relevant standards.
• Oversee applicable security, regulatory, privacy, contractual cyber requirements.
• Manage cyber risk analysis and self-assessments program for various information services, systems, processes and recognized industry standards.
• Conduct risk assessments, document results, and propose and track remediation tasks.
• Develop compliance program top routinely assess existing infrastructure, systems, and applications for compliance and vulnerabilities and propose relevant mitigating controls.
• Conduct vulnerability assessments and track remediation status of identified vulnerabilities.
• Identify and assess cyber risks and recommend and drive cyber security solution and initiatives to improve cyber security posture.
• Define controls to meet regulatory, legislative, and industry specific compliance requirements.
• Manage third party cyber risk assessment standards.
• Prepare IT security related KPI reports and management reports for compliance monitoring and reporting.
• Drive the implementation of GRC tool.
• Maintain user cyber awareness and provide security advisory on emerging security threats and vulnerabilities.
• Develop, review and continuously improve IT security training material and conduct user training to improve user awareness and incident response readiness.
• This role may be seconded to any of SIA’s subsidiary group

Requirements

• Degree in IT or related fields, with 4-5 years relevant information security working experience, especially in the application security space.
• Professional security certifications (CISSP, CISA, CEH etc) preferred.
• Experience with Governance, Risk and Compliance (GRC) activities.
• Familiar with PCI, PDPA, GDPR requirements
• Experience in security technologies, practices, application/network/systems architecture and design, tests tools and processes.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Whether you’re at the start of your career or looking to discover your next adventure, your story begins here. At Citi, you’ll have the opportunity to expand your skills and make a difference at one of the world’s most global banks. We’re fully committed to supporting your growth and development from the start with extensive on-the-job training and exposure to senior leaders, as well as more traditional learning. You’ll also have the chance to give back and make a positive impact where we live and work through volunteerism.

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do. We keep the bank safe and provide the technical tools our workers need to be successful. We design our digital architecture and ensure our platforms provide a first-class customer experience. Our operations teams manage risk, resources, and program management. We focus on enterprise resiliency and business continuity. We develop, coordinate, and execute strategic operational plans. Essentially, Enterprise Operations & Technology re-engineers client and partner processes to deliver excellence through secure, reliable, and controlled services.

Trust is part of our DNA at Citi. As such, we take safeguarding our customer data very seriously. The Chief Information Security Office (CISO) is made up of deeply dedicated and talented colleagues who work together to ensure the safety of Citi’s and our clients’ assets and information. We manage information security as an end-to-end program – one with a clear mandate and accountability. Our mission is to continually execute and enhance a global security program that is fully anchored to modern control and security frameworks, fully aligned with the technology of the firm, threat-focused and data-driven, and deeply integrated across all Citi businesses globally.

Being talent-driven, we are focused on attracting, developing, and retaining diverse and inclusive talent with a high technical skill level. As a member of our team we will provide you with career development opportunities at all stages of your career. Our employees model a passion for protecting Citi and our clients and believe in treating others with dignity and respect.

Citi Infrastructure Defense/ Perimeter Security Services/Perimeter Reliability Engineering

Our commitment to diversity includes a workforce that represents the clients we serve globally from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.

Citi Infrastructure Defense, Perimeter Reliability Engineering is a network security subject matter expert team responsible for troubleshooting complex connectivity issues and outages often involving multiple support teams and improving network visibility and resiliency.

Responsibilities:

• Produce high quality documentation, schematics and presentation materials as needed
• Collaborate on initiatives toward reducing security risk for applications and network connectivity with third parties for countries in scope of Complex Operating Geographies (COG)
• Provide individual leadership in the realm of troubleshooting major incidents and problem management
• Troubleshoot complex networconnectivity issues and outages
• Adhere to corporate and Information Security and other functional standards and controls

Qualifications:

• Network knowledge of routing, switching and wide area networking with understanding of industry standard command line syntax, inclusive of modern network virtualization concepts to a professional level proficiency
  A hands-on practical familiarity with Network Security capabilities including:
• Firewalls, ACL’s, intrusion detection, proxies, vulnerability scanning, DNS, DDoS mitigation, SIEM platforms
• Experience with scripting preferably in Python
• Knowledge of Prometheus and Grafana

Critical Competencies:

Relevant Certifications: Fortinet, Check Point, Palo Alto firewalls. CISSP or CCNA/CCNP as a plus.

Education Level Required: Bachelor's Degree in Computer Science, Information Systems or related fields preferred.

Years of Related Experience: 6+

Working at Citi is far more than just a job. A career with us means joining a family of more than 230,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Take the next step in your career, apply for this role at Citi today

https://jobs.citi.com/dei

Job Description:

The role is for the position of VP – Network Security Architecture ASO TIS Job function in Singapore. The successful candidate will be part of a growing dynamic regional team that oversees IT design and development of Network Security Solutions In the region.

We are seeking a talented Network Security Architect to join our team. The Network Security Architect will be responsible for designing, implementing, and maintaining the network security infrastructure to ensure the confidentiality, integrity, and availability of our organization's data and systems.

Roles & Responsibilities:

• Work with stakeholders and other teams to ensure Network Security platforms are effectively integrated into the IT infrastructure, both on-premises and cloud workloads.
• Provide technical leadership on Network and Perimeter Security across complex environments and a variety of enterprise systems and applications.
• Engage multiple stakeholders and evaluate related security products or technologies to recommend solution architectures and designs that are regionally viable, scalable and robust to manage and monitor Network Security
• Develop, maintain procedures and standards.
• Ensure compliance with regulatory requirements related to perimeter controls.
• Collaborating with other IT staff to integrate Network Security framework with other security technologies.
• Work closely with the project managers, Security and Compliance personnel, application developers and other administrators in creating functional, scalable, and secure Network Security solutions from design and development through implementation for business clients.

Technical Capabilities

Design and Implement Network Security Solutions:

• Design and implement Network Security solutions to protect the organization's network from unauthorized access and attacks.
• Set up secure access controls to restrict access to sensitive data and systems.
• Review and re-design perimeter security controls

Develop and Maintain Network Security Policies, Standards, and Procedures:

• Develop network security policies that outline the organization's security objectives and requirements.
• Establish security standards and procedures for configuring and managing network security devices.
• Ensure that security policies, standards, and procedures are up to date and align with industry best practices and regulatory requirements.

Contribute into Risk Assessments and Security Audits:

• Participate in regular risk assessments to identify potential security vulnerabilities and threats.
• Contribute to security audits to assess the effectiveness of existing security controls and identify areas for improvement.
• Recommend security enhancements based on the findings of risk assessments and audits.

Collaborate with IT Teams:

• Work closely with IT teams to integrate security controls into network infrastructure and applications.
• Provide guidance on implementing security best practices and standards.
• Collaborate with application developers and system administrators to ensure that security requirements are met.

Enhance Network Traffic Monitoring and Investigate Security Violations:

• Enhance network traffic monitoring to effectively detect signs of security breaches or unauthorized activity.
• Investigate security violations and breaches to determine the cause and extent of the incident.
• Take appropriate actions to mitigate the impact of security incidents and prevent future occurrences.

Provide Technical Guidance and Support:

• Provide technical guidance and support to team on network security best practices.
• Assist in troubleshooting network security issues and implementing solutions to address them.

Stay Updated on Emerging Threats and Security Technologies:

• Stay abreast of emerging threats and security technologies to ensure that the organization's network security posture remains strong.
• Participate in security forums, conferences, and training sessions to stay informed about the latest trends and developments in network security.

Participate in Incident Response and Forensic Investigations:

• Participate in incident response activities to contain and mitigate security incidents.
• Conduct forensic investigations to determine the root cause of security incidents and identify corrective actions.
• Document incident response procedures and lessons learned for future reference.

Develop and Deliver Security Awareness Training : (if needed)

• Develop and deliver security awareness training to educate employees about the importance of network security.
• Train employees on how to recognize and respond to security threats.

Job Requirements:

• Min 15 of years’ experience in Network Security Management domain, with 7 years’ experience with technical security design and development, deployment, support, and maintenance of Security Solutions.
• Experience with design and deployment of Network Security / perimeter security controls/solutions for enterprise.
• Experience with firewall administration, intrusion detection/prevention systems, VPNs, DDOS, WAF, NAC,LBs, Proxies and secure access controls. Experience with product evaluation design and deployment of SASE (components) and micro-segmentation solutions.
• Strong track record of navigating complex organizational structures and managing varied requirements in achieving cohesion & relevance in network security designs.
• Demonstrate a deep understanding of risk and change management, security policies and controls, user account life-cycle management, access controls and management, AAA. Strong understanding of network security concepts, protocols, and technologies.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.

Educational Requirements:

• Bachelor’s or masters’ degree in computer science, Information Technology, or a similar field preferred.
• Knowledge of security standards and frameworks (e.g., NIST Cybersecurity Framework).
• Relevant certifications (e.g., CISSP, CCNP/CCIE Security, CEH or equivalent) a must.

We regret to inform that only shortlisted applicants will be notified.

Job ID: 10067213

Job Description

You will be a member of the Group Information Security Team responsible for responding to threats and incidents to the corporate networks, systems (on-prem and cloud), and digital assets.

Key Responsibilities:

•Perform security monitoring and incident response activities across the scoot networks, leveraging a variety of tools and techniques.

•Manage Security Operations center.

•Detect incidents through proactive “hunting” across security-relevant data sets.

•Ability to correlate multiple events from different devices to identify abnormal behaviour

•Document incident response analysis activities thoroughly

•Develop new, repeatable methods for finding malicious activities

•Provide recommendations to enhance detection and protection capabilities.

•Effectively present technical topics to both technical and non-technical audiences

•Develop and follow detailed operational processes and procedures to appropriately analyze, escalate, and assist in the remediation of information security incidents

•Prioritize multiple high-priority tasks and formulate responses/recommendations in a fast-paced environment

•Prepare documentation for security technical standards, standard operational procedures, and hardening standards.

•Analyse endpoint, network, and application logs

•Assist other IT teams in security-related issues

•Engage with vendors and parent company SIA team members for security reviews.

Requirements:

•Degree in Computer Engineering, Computer Science, Information Systems, or equivalent qualification.

•At least 5-6 years of experience in Cybersecurity Incident and Security Operations.

•Demonstrate experience in Information Security with a focus on Cyber Security Operations, Incident Response and Detection.

•Experience working in the Security Operations Centre and/or Computer Incident Response Team.

•Excellent problem-solving skills combined with hands-on experience doing root cause analysis and post-incident reviews.

•Solid knowledge of computer networks and common protocols

•Knowledge of prominent cyber threat actors and APT groups.

•Experience with Threat Intelligence Platforms.

•Experience with SIEM (especially Splunk).

•Professional security related qualifications (i.e. GCIA, CISSP etc) will be an advantage

•Preferred certifications: CISSP, CISM, CISA, ISMS, TOGAF, SABS

•Good interpersonal skills

To perform and execute all aspects of in-house legal counsel and company secretary (main or alternate), contracts and procurement management functions of our businesses. You will safeguard our reputation and minimise our exposure to legal, contractual and compliance risks by assuring that the Group and Company comply with laws and statutory requirements in the jurisdictions in which the Group and Company operate, and provide sound and practical legal advice to management and business partners on all relevant matters.

• Provide accurate and timely counsel to executives in a variety of legal, contractual and procurement topics (labour law, partnerships, local and international ventures, corporate finance, etc).
• Collaborate with Management to devise efficient defence strategies for the best positioning of the
• Group and the Company.
• Specify internal governance policies on contracts and procurement, and regularly monitor compliance.
• Research and evaluate different risk factors regarding business decisions and operations.
• Apply effective risk management techniques and offer proactive advice on possible legal, contractual and procurement issues.
• Communicate and negotiate with external parties (clients, vendors, regulators, external counsels, public authorities etc).
• Draft and solidify agreements, contracts and other legal documents to assure the full legal rights of the group and the company.
• Deal with complex matters with multiple stakeholders.
• Provide recommendations to the organisation on legal risk while balancing commerciality.
• Provide clarification on legal language or specifications to staff in the organisation.
• Conduct your work meticulously and with integrity, reliability and responsibility.
• Maintain current knowledge of alterations in legislations in the jurisdictions in which the Group and the Company operate.
• Perform corporate secretarial duties through participation in Board/Management Committee meetings, drafting Board/Management Committee papers/resolutions/minutes and ensuring follow through of action items required by the Board of Directors/Management Committees.
• Support contract and price negotiations, and prepare contract documents and/or agreements with clients, suppliers, business partners, employees and any other relevant parties.
• Assist with the administrative requirements of the legal team.
• Participate in special committees and drive projects for process improvement and innovation.
• Any other duties as assigned by the Group and Company.

Job Requirements and Qualifications

• Recognised degree in law, preferably admitted to the Singapore Bar or qualified to do so. Fresh graduates or those recently called are welcome to apply.
• Experienced legal executives with a recognised diploma in law and management may be considered.
• Proven experience as a legal counsel in business environment with a commercial perspective.
• Excellent knowledge and understanding of corporate and contract laws, practices and procedures.
• Full comprehension of the influences of the external environment of a corporation.
• Demonstrated ability to create legal defensive or proactive strategies.
• High degree of attention to detail and professional ethics and integrity.
• Sound judgement and ability to analyse situations and information.
• Strong command of English and the use of Microsoft Office.
• Proactive and self-motivated individual with a growth mindset and composure under pressure.
• Must be prepared to travel on occasion, depending on the Company’s requirements.

The Senior AE/ Engineer is responsible for maintaining and improving the organization’s cybersecurity posture on an ongoing basis. S/he will work with external experts to implement security solutions, and work with vendors to monitor, detect and contain cybersecurity incidents to minimize impact to the organization.

Responsibilities :

• Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis
• Work with vendor to conduct security assessments and penetration tests.
• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.
• Standardize and refine security incident response and escalation processes.
• Mitigate and contain threats when detected.
• Escalate security incidents and non-compliances on a timely basis.
• Work with IT infrastructure team to evaluate, implement and enhance the network perimeter security, endpoint security, SIEM, secured remote access, MFA, Identity Access Management and Privileged Access Management.
• Monitor information security alerts triage, mitigate, and escalate issues as needed.
• Provide security advisory to end users on regular basis.
• IT Security Management of various aspect, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.
• Keep abreast of industrial IT security advancements and introduce appropriate security enhancements to IT infrastructure and systems.
• Attend to any other reasonable duties as assigned by the Senior Cyber Security & IT Governance Manager and IT Director.

Requirements :

• Degree in engineering, science or information technology, or equivalent education.
• At least 3-5 years of related work experience in cybersecurity management and security governance.
• Candidates with additional experience will be considered for the Senior Cyber Security Analyst position
• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.
• Strong understanding of ISO27001 standard.
• Hands-on experience at least 4 of the following IT Security Tools:

a) Next Generation Firewall (e.g., FortiGate, Palo Alto, Cisco FirePower)

b) SASE (Zscaler, Netskope, Skyhigh)

c) Tenable Security Center Continuous View

d) Endpoint Protection (e.g., Symantec, Trend Micro, Sophos Endpoint)

e) Email Security (e.g., Mimecast, ProofPoint, Cisco Email Security)

f) Data Loss Prevention (e.g., Symantec, ForcePoint, Digital Guardian)

g) SIEM (e.g., Splunk, QRadar)

h) CyberArk PAM and IAM

• Understand Risk Management, Disaster Recovery, Business Continuity and IT Regulatory Compliance.
• Good command of written and spoken English.
• Excellent interpersonal and communication skills.
• Pro-active, independent, resourceful, able to work in a team environment and work independently with minimal supervision.
• Work well with all functional levels in the organization.
• CISSP, CISM, CISA or equivalent IT security certifications will be advantageous.
• Prior IT security consulting and/or IT Network experience will be advantageous.

Interested applicants are requested to write in with detailed resume indicating current and expected salary and availability.

We regret only shortlisted candidates will be notified.

JOB DESCRIPTION

• Helps to manage the Security Department in concurrence with the Assistant Security Manager.
• Trains all security personnel in their areas of responsibilities.
• Supervises all activities of security staff to ensure compliance with and proper application of department regulations and resort policy.
• Promotes a safety attitude amongst the associates.
• Ensures safety of persons in the resort and property assets.
• Reports irregularity in associate or guest behavior.
• Handles loss, damages and accidents.
• Handles documents and follows up with necessary persons any incidents occurring in the resort premises.
• Investigates theft as reported by guest or associate.
• Documents all action in the department, including emergencies, loss, theft or accident.
• To be the key contributor in covering the role of the company emergency response team.
• Carpark management.
• Performs other duties as assigned by the Assistant Security Manager.

JOB REQUIREMENTS

• Acknowledges and screens daily work schedule in concurrence with the Assistant Security Manager.
• Conducts daily briefing and de-briefing in the absence of the regular trainer.
• Proposes an effective duty to ensure sufficiency of manpower in accordance with volume of business.
• Establishes two-way communication with related departments.
• Communicates effectively with guests, subordinates, immediate supervisors and other section heads.
• Manages time effectively by meeting deadlines on time.
• Identifies and solves problems in a professional manner.
• First Aid and CPR+AED certified.
• WSQ Respond to Fire and Hazmat Emergency certified
• 12 hour shift / Work 4 days / Rest 3 days

BENEFITS

• Company Transport Pick-up/Drop-off Provided
• Uniform Provided, Duty Meals, F&B Discount, Dental, and Medical
• Employee Room Rate Globally, Learning & Development Opportunities, Staff Recognition Award

Responsibilities:

• Experience in leading and delivering multiple security projects and solutions across one or more IT Security domains (Cyber Program Management, Cyber Threat Management, Identity & Access Management, Data Protection, Privacy, Cyber Analytics). This experience should include both advisory, implementation and operation experiences.
• Design and develop a customized security architecture, evaluate and select the best security system in one or more of the above security domains.
• Provide high-level input and security consultation in a project-based environment and ensure adequate security controls in all Business IT solutions.
• Responsible for project planning, execution and managing scope due to any new information and/or changes to initial assumptions, including implications for project time, cost, quality and risk
• Ensure the security enhancements / new security project delivery is done in line with stakeholder’s requirements, timeline and cost.
• Develop and maintain a detailed security project plan which deliver to the cost, quality and time for enhancements
• The position will be heavily involved in IT security operations, including:Security solution delivery
  Security monitoring
  Administration for security systems (e.g. firewall, anti-malware system, IDS/IPS)
  Incident Response
  Level 2 support for IT Security operations.
  

Requirements:

• Min. Bachelor's degree in Computer Science
• Min. 6-8 years’ experience working in a large-scale IT environment; Including five (5) years of information security and risk experience within the past six (6) years; including risk analysis, endpoint, server, network and web application security
• Possess Security Industry Certifications such as CISSP, CISM, SANS, GSEC and PMP, ITIL, Microsoft, CISCO
• Having good understanding of TCP/IP protocol and OSI Seven Layer Model.
• Strong technical security skills in assessment, design, implementation architecture, and program / project delivery and work across various delivery models, (Waterfall, Agile, DevOps)
• Analyzes & prepares recommendations relating to security for existing IT infrastructures / Applications.
• Expert understanding of firewall technologies.
• Ability to plan, organize and prioritize tasks to complete within established time frames.
• Highly result oriented and can work independently.
• Ability to build relationships and interact effectively with internal and external parties.
• Strong analytical, technical, and communication (both oral and written) skills.

- To answer occasional phone calls from public

- Station on Site to attend to feedbacks

- Attend monthly site meeting and prepare minutes of meeting

- Need to do site administration work:

Purchase orders, compilation of Delivery oders, Workers attendance and Work pass and safety course attendance

- Minimum 2 Years experience in public relations service or hospitalities and tourism field

- 5-Day work week

Site Office Location:

Ang Mo Kio Industrial Park 2

50 metres walking distance from Ang Mo Kio Ave 1

Bus Stop No: 54101

- To answer occasional phone calls from public

- Station on Site to attend to feedbacks

- Attend monthly site meeting and prepare minutes of meeting

- Need to do site administration work:

Purchase orders, compilation of Delivery oders, Workers attendance and Work pass and safety course attendance

- Minimum 2 Years experience in public relations service or hospitalities and tourism field

- Alternate Saturdays work week

Site Office Location:

Ang Mo Kio Industrial Park 2

50 metres walking distance from Ang Mo Kio Ave 1

Bus Stop No: 54101

Reporting to the Security & Safety Manager, the incumbent is to ensure the safety and security of associates, guests and items in the hotel, and must always maintain the highest standards of security for all concerned while adhering to standards required by the Hotel.

RESPONSIBILITIES

• Ensure only associates on duty are allowed to enter the hotel premises
• Ensure that no ex-associate enter the hotel premises without the approval of the Human Resource Manager or Security Manager
• Report and detain any hotel associate other than those authorized to be on the floor.
• Ensure no hotel property is taken out without proper authorization from the relevant Head of Department
• Randomly conduct parcel search for associates on an alternate day basis
• Act as a witness for Finance Department conducting checks on cashier
• To assist and witness Duty Managers in conducting DND room checks and unlocking of safes in unoccupied guest rooms
• Issue "Contractor" ID Tag to contract workers, and ensure they are escorted by the relevant department to the designated working areas
• To ensure that all outsiders who have been issued ‘Visitors, Contractors and Vendors” passes surrender the same, upon leaving the staff entrance/exit point
• Ensure all visitors (especially contractors and suppliers) wear proper shoes upon entering the hotel premises
• Ensure any vehicle coming into the loading/unloading bay area are properly parked so as not to cause any traffic congestion/obstruction
• Perform prowler duty on guest floors
• Stop unauthorized person(s) from entering guest rooms or loiter along the corridors of the guest floors
• Ensure all guestroom doors are properly locked and secured
• Ensure all floor pantries, risers are locked/closed and secured
• Ensure all fire extinguishers and fire hoses are in good working order
• Ensure all fire warning system (break-glass, sprinkler valves, smoke detectors) are in proper working condition
• Ensure that the fire emergency doors and staircase are not obstructed
• Prevent any form of soliciting by prostitutes or pimps
• Keep a close watch on people loitering in the vicinity of the guest lift lobby, and approach all suspicious characters. Politely enquire as to their purpose of being in the area. If they are non-guest or merely visitors, refer them to the Front Desk
• Stay alert and monitor the CCTV monitors constantly for any unexpected incident
• Ensure that the keys used on daily basis (eg. store, pantry keys, etc.) are accounted for and movement of these keys are properly recorded in the relevant logbook
• Record all relevant information (feedback) received from the Duty Manager in the Log Book.
• Monitor the lift system and report any malfunctioning to Engineering Department immediately
• Well versed with procedures relating to fire emergency and evacuation
• Ensure smooth traffic flow with no vehicle causing obstruction along the driveway
• Prevent any suspicious characters from loitering at the driveway.
• Perform any other duties assigned from time to time by the Security & Safety Manager

SKILLS & QUALIFICATION REQUIREMENTS

• GCE ‘O’ Level
• Possess a valid Security licence and preferably with experience in Hotel safety and security
• Possess good interpersonal and communication skills, with attention to details
• Able to work on rotating shifts, public holidays and weekends

Candidates with relevant skills or expeirence may be offered for the Senior Security Officer position.

We regret that only shortlisted candidates shall be notified.

Job Description

The successful candidate will join the Information Technology Division, System Technology department and will be responsible for managing Content Delivery Network (CDN) which includes Cyber Security, as well as administering Monitoring and Log Management Tools.

Key Responsibilities include:

• Work closely with CDN providers and application teams to ensure internet websites/mobile apps are healthy in terms of availability, response time and security posture.

• Conduct regular security reviews and finetune WAF and BOT rules to mitigate any cyber threats.

• Administer various monitoring and logging tools, which includes application onboarding and advanced configuration.

• Perform system administration activities such as troubleshooting, root cause analysis and implement corrective/preventive actions during and after an incident.

• Support audit and infrastructure/network security scans, disaster recovery and security related drills and operate within assigned fiscal budget.

• Build automation wherever possible to improve development team’s agility and reduce human errors.

• Explore, learn and deploy new technologies and provide training to the IT community within the company.

• This position requires periodic system administration outside normal business hours.

Requirements

• Possess a degree in Information Technology or related fields.

• Minimum of 3 years of IT Infrastructure experience with at least 1 year of hands-on experience in managing the infrastructure of an eCommerce website.

• Experience with Akamai or equivalent CDN providers preferred.

• Demonstrate strong knowledge in infrastructure areas such as Content Delivery Network (CDN), Cyber Security (WAF and Bot Mitigation), internet protocols, DNS, virtual server technologies, networking (LAN, WAN, SDN), Integration and Messaging Platform, scripting and monitoring tools.

• Administrator experience with Application Performance Monitoring (APM) tools such as Dynatrace and Log Management System (LMS) such as Splunk.

• Conversant with infrastructure definition tools such as Cloud Formation and Terraform, and with YAML/JSON deployment templates.

• Strong analytical, project management, communications and interpersonal skills.

We thank all candidates for your interest in Singapore Airlines, and regret that only shortlisted candidates will be notified.

Whether you’re at the start of your career or looking to discover your next adventure, your story begins here. At Citi, you’ll have the opportunity to expand your skills and make a difference at one of the world’s most global banks. We’re fully committed to supporting your growth and development from the start with extensive on-the-job training and exposure to senior leaders, as well as more traditional learning. You’ll also have the chance to give back and make a positive impact where we live and work through volunteerism.

Shape your Career with Citi

Citi’s Global Legal Affairs and Compliance (GLAC) empowers and protects Citi by providing legal, compliance, investigative, and security services to our firm. We manage compliance risk, provide legal analysis and advice, protect Citi’s people and businesses, advocate for legal and regulatory outcomes that benefit our firm and our clients, and ultimately promote behavior that is consistent with Citi’s mission and culture.

We’re currently looking for a high caliber professional to join our team as Assistant Vice President, Legal Support Officer - Singapore - Hybrid (Internal Job Title: Legal Support Officer - C12) based in, Singapore. Being part of our team means that we’ll provide you with the resources to meet your unique needs, empower you to make healthy decision and manage your financial well-being to help plan for your future. For instance:

• Citi provides programs and services for your physical and mental well-being including access to telehealth options, health advocates, confidential counseling and more. Coverage varies by country.
• We believe all parents deserve time to adjust to parenthood and bond with the newest members of their families. That’s why in early 2020 we began rolling out our expanded Paid Parental Leave Policy to include Citi employees around the world.
• We empower our employees to manage their financial well-being and help them plan for the future.
• Citi provides access to an array of learning and development resources to help broaden and deepen your skills and knowledge as your career progresses.
• We have a variety of programs that help employees balance their work and life, including generous paid time off packages.
• We offer our employees resources and tools to volunteer in the communities in which they live and work. In 2019, Citi employee volunteers contributed more than 1 million volunteer hours around the world.

The Legal Support Officer is an intermediate level, non-attorney role, responsible for providing legal support to the Citi Legal team. This role requires a pragmatic, proactive professional with thorough understanding of the Citi Legal Team. The overall objective of this role is to provide support to the Legal Team

In this role, you’re expected to:

• Responsible for legal support activities related to legal operations, litigation/discovery/settlements or negotiation and contract administration.
• Manages the execution, review, processing and tracking of legal documentation, executes transactions and completes varied work requests from multiple sources that may be complex in character and have tight deadlines.
• Executes legal programs and projects to achieve coordinated and efficient process improvements and legal support solutions; liaises with other control/functional businesses in support of initiatives.
• Conducts independent research and analysis of matters, applying institutional knowledge and knowledge of laws, rules and regulations, to support in the identification of legal solutions situations or to formulate recommendations on approach or strategy.
• Applies in-depth understanding of how associated risks differ depending on product and documentation envisaged in relevant jurisdiction(s) and provides advice to the Risk function and business partners accordingly.
• Maintains detailed records and documentation while staying abreast of new and changing regulatory and legal issues and industry initiatives
• Interacts with senior leaders, internal and external peers to gather information and works closely with the team’s management to determine legal solutions
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

As a successful candidate, you’d ideally have the following skills and exposure:

• 5-8 years of relevant industry experience, preferably with some experience working in an in-house legal role within financial services
• Excellent communication skills (written and oral)
• Proven analytical and organizational skills.
• Teamwork and adaptability.
• Ability to manage complex documentation with organization and detail.
• Must possess excellent interpersonal and project management skills, as well as the ability to interact and communicate effectively with Senior management.
• A skilled negotiator who has the right attitude and can actively work with a wide range of colleagues of varying seniority in both business and support roles to respond to a broad range of needs and develop business friendly solutions to requirements while balancing compliance with multiple legal, regulatory, and internal policy requirements.
• Proficient in Microsoft Office: Word, PowerPoint, Excel, Outlook
• Comprehensive knowledge of legal customs and practices as well as understanding of financial services industry.
• Bachelors/University degree, Master’s degree preferred / LLB

Additional Job responsibilities / Job Purpose:

The candidate will assist with negotiation of markets trading documentation for Citi’s markets sales and trading desks, fund services throughout the Asia Pacific (AP) region.

Job Background/context:

Markets Legal Contract Management (MLCM) provides legal advisory and documentation services for markets sales and trading desks, fund services across the different regions. This candidate will be part of the global MLCM team that carries out this work for the Asia Pacific (AP) region specifically.

• Timely negotiation and preparation of ISDA Master Agreement, Global Master Repurchase Agreement, Global Master Securities Lending Agreement, CDEA and other markets trading documentation; negotiation of ancillary trading documentation, including review of corporate documentation, security and collateral documentation.
• Conduct due diligence to determine whether agreements are enforceable and meet the well-founded basis standard under applicable capital rules.
• Coordination and tracking of deviation approvals including compliance of documentation with legal, regulatory requirements and Citi policies.
• Legal support, advice, and guidance across a broad range of practice areas whilst appropriately assessing risk of business decisions made by driving compliance with applicable laws, rules and regulations and adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.
• Management of data inputting for trading documentation and interaction with other regional support teams regarding trading documentation data systems and related queries, amendments.
• Participation in global documentation regulatory and remediation projects
• Assist in the coordination and support of AP Markets Legal Contract Management processes and initiatives.
• Liaise with other control and functional business in support of the initiatives that the AP MLCM is involved in.
• Provides analysis of matters in support of resolution of complex and variable situations or to formulate an approach.
• Assist in monitoring industry developments in relation to documentation initiatives.
• Performs varied work requests from multiple sources that may be complex in character and have tight deadlines.

Development Value:

This position provides the opportunity to work with and support a wide range of Citi markets businesses across Asia Pacific. The candidate will work closely with Legal colleagues across the region, as well as with stakeholders in Risk, Operations, Business and other areas. The role will involve regular contact with clients across the Asia Pacific region.

Working at Citi is far more than just a job. A career with us means joining a family of more than 230,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Take the next step in your career, apply for this role at Citi today!

https://jobs.citi.com/dei

Whether you’re at the start of your career or looking to discover your next adventure, your story begins here. At Citi, you’ll have the opportunity to expand your skills and make a difference at one of the world’s most global banks. We’re fully committed to supporting your growth and development from the start with extensive on-the-job training and exposure to senior leaders, as well as more traditional learning. You’ll also have the chance to give back and make a positive impact where we live and work through volunteerism.

Shape your Career with Citi

Citi’s Global Legal Affairs and Compliance (GLAC) empowers and protects Citi by providing legal, compliance, investigative, and security services to our firm. We manage compliance risk, provide legal analysis and advice, protect Citi’s people and businesses, advocate for legal and regulatory outcomes that benefit our firm and our clients, and ultimately promote behavior that is consistent with Citi’s mission and culture.

We’re currently looking for a high caliber professional to join our team as Vice President, Lead Counsel, Markets Fixed Income Asia Legal - Hybrid (Internal Job Title: Lead Counsel 2 - Product - C13) based in Singapore

Description:

Markets Legal support all of Citi's global Markets businesses as a single, unified department. Singapore, Hong Kong and Mumbai serve as hubs for various Markets legal teams for the Asia clusters. The team provides legal advisory and documentation support for fixed income, derivatives, rates, foreign exchange, commodities, futures & clearing, prime finance, equities sales and trading businesses, credit and loan trading, structured products, and solutions businesses.

As a member of the Markets Fixed Income Asia Legal team based in Singapore, the individual is to assist with legal coverage of fixed income, derivatives, rates, foreign exchange, note issuances, credit and loans trading, commercial real estate and asset financing, securitization transactions and structured loans and products, amongst others.

The person will report directly to a senior member of the Markets Fixed Income Asia Legal team and be expected to cover all the requirements of the team, including providing advice on legal and regulatory matters, litigation management and regulatory/policy interpretation. Day-to-day functions will involve transactional and advisory work, documentation, business development and participation in industry-based initiatives.

In this role, you’re expected to be:

• Assisting the businesses around product structuring for large episodic trades and advising on flow trades.
• Advising on and managing multi-jurisdictional regulatory requirements and client document negotiations.
• Managing and prioritizing key jurisdictions for the business.
• Managing and prioritizing key clients with multiple Citi touch points; crypto-currency and digital-related matters.
• Bank programs and structures incorporating environmental sustainability elements.
• Product development and structures addressing capital adequacy and risk-weighted asset requirements.
• Actively fulfilling the One-Citi ethos by identifying and overcoming boundaries and working collaboratively with other Citi members.

As a successful candidate, you’d ideally have the following skills and exposure:

• 4 to 8 years of relevant work experience
• Relevant experience in a law firm or financial institution
• Rates, Markets Treasury, Foreign Exchange and Credit Derivatives and financial regulatory experience (in particular, familiarity with Singapore, Hong Kong, China and/or India regulatory requirements) would be an advantage.
• Strong communication, interpersonal and organizational skills
• Ability to engage with and manage senior business management representatives.
• A strong team player who is confident, possesses initiative and the ability to prioritize, multi-task and work under pressure.
• An eye for broader franchise issues and the ability to assess issues and their risks against the wider regulatory and compliance framework that Citi operates within
• Ability to work independently and interact with people of all levels and across regions
• Education Level: LLB or JD

Working at Citi is far more than just a job. A career with us means joining a family of more than 230,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Take the next step in your career, apply for this role at Citi today

https://jobs.citi.com/dei

Position Overview

Assist in managing Infrastructure and IT Security related, for Regional Office (South Asia Ocean Region).

Responsibilities

• Support tRhe Regional Cloud Infrastructure hosting all the Critical Regional Business Solutions.
• Support Cloud Consolidation and Integration to Common Cloud for the Region.
• Plan, Design and Setup adequate Infrastructure for Operation Companies (OPCOs) to connect to Global and Regional Solutions.
• Support various Regional IT Infra projects, with primarily focus on Infrastructure, Elimination of Legacy hosted Infra.
• Support SD-WAN and other Infra Initiatives for the Region.
• Work closely with Global / Regional / Country IT teams to implement & Support Global IT Security Initiatives
• Manage other duties as assigned for Automation of Patch Management (Using Manage Engine), for GSOC, implementing Multi-Factor Authentication (MFA), Zscaler, Rapid 7 (Vulnerability Management), Trend Micro EDR and Others.
• Supporting initiatives advised by Global Security Audit (GSA) teams, resulting in overall improvement of IT Security Posture for the region.
• Assist in Documentation of IT Section Policies.
• Regular PDCA and follow up with Countries, to ensure Adherence for the above Initiatives.

Requirements & Qualifications

• Minimum Bachelor’s degree in IT or related field.
• Minimum 5 to 7 years In-Depth experience in Handling IT Infrastructure & IT Security at a Regional Level.
• Business driven with a Strong understanding of Prevalent / Current IT infrastructure and IT Security Solutions.
• Infrastructure Management and IT Security Skills.
• Cloud Solution Skills with a Must have experience to handle a regional Cloud Setup using AZURE.
• Understanding of relevant technology requirements required to handle the Responsibilities mentioned above.
• Strong Project Management Skills.
• Proven strength in strategic and conceptual thinking and design, implementation, and execution of strategies.
• Strong problem-solving and Co-ordination skills.
• Strong Vendor Management Skills.
• Good verbal and written communication skills.
• Proficient in Microsoft O365 Tools (Word, Excel, PPT and Others)
• Business trravelling may be required for this position.

Job Location

2 Changi South Avenue 2, Singapore 486354

A World of Opportunities Awaits

Company Name: Dusit Thani Laguna Singapore

Job Title: Security Officer

JOB DESCRIPTION

• Conduct investigations and gather evidence related to theft/fraud or lost items, noise complaints, assault complaints, food poisoning complaints, and other guest complaints and incidents.
• Conduct interviews with relevant parties in order to obtain statements and information related to incidents.
• Assist with and notify manager/supervisor, local police, or other appropriate individuals in the event of accidents, attacks, or other incidents.
• Complete incident reports to document all Security/Loss Prevention related incidents such as theft, accidents, physical hazards, and fire alarms.
• Handle business interruptions and complaints, such as suspicious individuals, civil disturbances or demonstrations, noise complaints, intoxicated individuals, etc.
• Escort any unwelcome persons from the property without interrupting the orderly flow of property operation.
• Defuse guest or employee disturbances/altercations, including summoning appropriate authorities if necessary, and documenting incident.
• Follow all company and safety and security policies and procedures; report accidents, injuries, and unsafe work conditions to manage.
• Maintain confidentiality of proprietary information; protect company assets.
• Welcome and acknowledge all guests according to company standards; anticipate and address guests’ service needs.
• Speak with others using clear and professional language; prepare and review written documents accurately and completely.
• Develop and maintain positive working relationships with others; support team to reach common goals; listen and respond appropriately to the concerns of other employees.
• Ensure adherence to quality expectations and standards.
• In addition, some states may have additional licensing/registration requirements to be considered for this position.
• Move, lift, carry, push, pull, and place objects weighing less than or equal to 10 pounds without assistance. Perform other reasonable job duties as requested by Supervisors, manager.

JOB REQUIREMENTS

• Minimum education of GCE "O" or "N" Level certificate
• At least 1 year working experience in a similar position in security & safety operations
• Possesses a valid security licence
• Applicants who have taken RTT will be prioritised
• First Aid and CPR+AED certified
• WSQ Respond to Fire and Hazmat Emergency certified
• 12 hour shift / Work 4 days

BENEFITS

• Company Transport Pick-up/Drop-off Provided
• Uniform Provided, Duty Meals, F&B Discount, Dental, and Medical
• Employee Room Rate, Learning & Development Opportunities, Staff Recognition Award

*Only shortlisted candidates will be notified.

Job Summary

We are currently looking for a seasoned leader as the Head of IT Security. The incumbent will be responsible for leading the transformation while establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. This role oversees the development and implementation of security policies, standards, and procedures to ensure the protection of the organization's information systems and data.

Mandatory Skill-set

• Degree in Computer Science, Information Security, Information Systems or a related field;
• At least 12-15 years of experience in IT security & risk management preferably in a large scale organisation;
• Deep knowledge and understanding of internal controls, security frameworks, risk management and IT governance, auditing techniques, threat modeling and risk management principles;
• Good knowledge of enterprise IT systems and components (applications, operating systems, databases, networks, cloud, DevOps;
• Knowledgeable in using various cyber security monitoring and analysis tools and techniques depending on the organization's needs and requirements;
• Familiarity with security technologies such as firewalls, intrusion detection systems, and endpoint protection;
• Familiar with cyber security standards, protocols and frameworks such as NIST, CIS, PCI/ DSS, MAS TRM, ISO standards;
• Experience with Security operations centers (SOC) and setting up SOC models;
• Experience in driving enterprise initiatives for E2E security posture analysis;
• Ability to work with subsidiaries and understand regional security requirements;
• Strong in analytical thinking with attention to detail;
• Excellent communication and inter personal skills.

Desired Skill-set

• CISSP, CISM, CRISC, CGEIT and/or CISA certified.

Responsibilities

• Define and implement the Enterprise InfoSec (IS) landscape and roadmap;
• Responsible for documenting methodologies and tools to mitigate information security or cyber risk for on-prem and clous platforms;
• Prepare reports for information security or cyber risk related reporting, threat awareness and security awareness reports;
• Design and implement secure cloud architecture for various cloud platforms and act as an SME for cloud platforms (AWS, GCP, or Azure) using cloud-native security services;
• Recommend corrective actions or appropriate security controls to mitigate technical risk;
• Conduct Technology Security Risk Assessments on systems throughout their lifecycle to identify and mitigate security risks;
• Assist in the development of policies for conducting cyber security risk assessments and compliance audits;
• Formulate governance procedures for documenting and updating security policy, standards, guidelines and procedures;
• Perform information security or cyber risk assessment activities and assess third party security controls and internal security systems including onsite assessments;
• Establish scope of risk analysis for new technology initiatives and identify security risks in the Tech Obsolescence Risk program;
• Communicate with regulators such as MAS and ensure solutions meet external and internal requirements and guidelines
• Keep abreast of the dynamic cyber threat landscape and identify opportunities for enhancement of IT risk processes;
• Provide regular updates on the overall health of compliance, criticality assessment, audit findings, remediation and action plans.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

VP - ICT Security Operations Analyst

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and, in our clients’, best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do. We keep the bank safe and provide the technical tools our workers need to be successful. We design our digital architecture and ensure our platforms provide a first-class customer experience. Our operations teams manage risk, resources, and program management. We focus on enterprise resiliency and business continuity. We develop, coordinate, and execute strategic operational plans. Essentially, Enterprise Operations & Technology re-engineers client and partner processes to deliver excellence through secure, reliable, and controlled services.

Trust is part of our DNA at Citi. As such, we take safeguarding our customer data very seriously. The Chief Information Security Office (CISO) is made up of deeply dedicated and talented colleagues who work together to ensure the safety of Citi’s and our clients’ assets and information. We manage information security as an end-to-end program – one with a clear mandate and accountability. Our mission is to continually execute and enhance a global security program that is fully anchored to modern control and security frameworks, fully aligned with the technology of the firm, threat-focused and data-driven, and deeply integrated across all Citi businesses globally.

Being talent-driven, we are focused on attracting, developing, and retaining diverse and inclusive talent with a high technical skill level. As a member of our team we will provide you with career development opportunities at all stages of your career. Our employees model a passion for protecting Citi and our clients and believe in treating others with dignity and respect.

The Chief Information Security Office (CISO) is home to deeply talented colleagues that work to ensure the safety of Citi's clients' and our proprietary data. We manage information security as one end-to-end program – one with a clear mandate and accountability. Our mission is a program that is fully anchored to modern control and architectural frameworks, is fully aligned with the enterprise architecture of the firm and is deeply integrated into the sectors and functions.

CISO’s Cyber Security Engineering and Architecture is responsible for delivering integrated risk reduction capabilities and services aligned to the architectural goals and priorities associated with leading ‘Change the Bank’ (CTB) and ‘Run the Bank’ (RTB) initiatives. This role entails leading and coordinating the execution of SASE Services, across the network security domain. The successful candidate will have demonstrated success and be highly adept at: leading global programs and engineering change efforts; managing risk and execution of global programs by aligning resources and tactical/strategic decisions; and driving transformation across a complex enterprise to support cybersecurity goals. The candidate needs to have the ability to work on defining highly scalable and integrated security architectures, and influence roadmaps across a variety of product portfolios. The candidate needs to have the ability to define and drive interoperability with security components of a complex end to end network and cloud security ecosystem, focusing on client experience. Strong experience across cybersecurity, Technology Infrastructure, large enterprises will assist in delivering aspects of this service.

Our commitment to diversity includes a workforce that represents the clients we serve globally from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.

Responsibilities:

• Working with Transformation Program Directors, Senior Architects, Steering Committees, CISO and CTI partners in delivering the transformational Programs related to SASE. Onboarding of users on Zscalar and ensuring smooth transition.
• Troubleshooting issues and work on finding RCA.
• Zscaler Internet Access design and migration methods from legacy Internet Access solutions to SASE based architecture.
• Interface and support Citi’s Security Architecture Council and Working Groups building strong rapport across teams.
• Firewall rules Management (creation/ modification/ deletion) by following Change management process and via automation.
• Participate in migration activities and provide troubleshooting support from Infrastructure defense standpoint. Identify issues, provide support for isolating problems, finding RCA.
• Willing to work on weekends for migration activities off business hours.
• Completing additional tasks in connection with the role but not detailed in the current job description, charged by the direct manager, supervisor, or the functional head.

Qualifications:

• 8-12 years of extensive Security Experience with Checkpoint Firewalls, Juniper Networks Firewalls, Palo Alto Network Firewalls, Bluecoat Proxy, IPS/IDS, Illumio, Crowdstrike and EDR tools.
• Extensive knowledge on SASE Zscalar user onboarding and operational support experience.
• Strong troubleshooting skills over the Firewalls, Proxy and network infrastructure.
• Extensive Data Networking knowledge and an understanding of network security standards such as Firewall Rules, Security Zones, Multicast Data Feeds, Ultra Low Latency Network Architectures & Platforms.
• Hands-on experience in Zscaler Internet Access, Zscaler Private Access and Zscaler Digital Experience
• Proven influencing and relationship management skills.
• Exhibiting a high degree of flexibility and ability to multi-task, seeking guidance where necessary
• Strong communication skills, including verbal and written skills.
• Ability to work as part of a team with remote colleagues in other countries.
• Strong knowledge of Proxy functionality and Proxy features
• Consistently demonstrates clear and concise written and oral communication as well as strong presentation skills to both technical and non-technical audiences.
• Advanced analytical and problem-solving skills
• Demonstrated ability to take ownership and work with cross functional teams to manage multiple projects simultaneously under pressure.
• Thorough understanding of industry and corporate technology standards for Cyber Security services

Critical Competencies:

• Firewalls, Proxy and network infrastructure
• Zscaler Internet Access, Zscaler Private Access

Responsibilities

• Bachelor’s degree in computer science, Information Security, or related field.
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• Excellent communication skills and the ability to collaborate with diverse teams.
• Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• Good knowledge in security
• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Resposibilities:

• Background in Engineering or Computer Science
• 5 or more years of working experience in IT Security
• Relevant certifications in networking or cyber security, e.g. CISSP, CISM, CISA, CRSIS preferred
• Experience with DevSecOps methodologies and processes preferred
• Experience in security architecture of cloud native applications preferred
• Experience in providing security advisory and consultancy on application and services, including the design, development, implementation and/or management of the system
• Understanding of CI/CD tools
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Job Summary

Seeking IT Security professional with a keen interest in Information Technology (IT) Governance, Risk and Compliance to enable cyber resilience and information security for mission critical systems.
The individual will be responsible to conduct cyber risk assessment in support of technology initiatives to help identify IT related risk and determines appropriate controls to mitigate risks.

Mandatory Skill-set

• Degree in Computer Science, Information Security or Information Systems;
• At least 2-3 years of experience in IT security space with a strong experience in IT GRC ( Governance, Risk and Compliance ) related functions;
• Deep knowledge and understanding of internal controls, security frameworks, risk management and IT governance, auditing techniques and methodologies;
• Good knowledge of enterprise IT systems and components (applications, operating systems, databases, networks, cloud, DevOps;
• Knowledgeable in using various cyber security monitoring and analysis tools and techniques depending on the organization's needs and requirements;
• Familiar with cyber security standards, protocols and frameworks such as NIST CSF, CIS, PDPA;
• Strong in analytical thinking with attention to detail;
• Excellent communication and inter personal skills.

Responsibilities

• Act as a Subject Matter Expert on IT Governance, Risk management and Compliance (GRC) and related policies and procedures;
• Responsible for documenting methodologies and tools to mitigate information security or cyber risk;
• Prepare reports for information security or cyber risk related reporting, threat awareness and security awareness reports;
• Conduct compliance assessments and tracking the overall compliance health in relation to IT governance standards and procedures in compliance with regulatory requirements;
• Recommend corrective actions or appropriate security controls to mitigate technical risk;
• Continuously identify GRC Key risk indicators (KRI) and maintain IT Risk Register;
• Assist in the development of policies for conducting cyber security risk assessments and compliance audits;
• Formulate governance procedures for documenting and updating security policy, standards, guidelines and procedures;
• Perform information security or cyber risk assessment activities and assess third party security controls and internal security systems;
• Establish scope of risk analysis for new technology initiatives;
• Keep abreast of the dynamic cyber threat landscape and identify opportunities for enhancement of IT risk processes;
• Provide regular updates on the overall health of compliance, criticality assessment, audit findings, remediation and action plans.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639