JOB OBJECTIVE

CDS Asia provides a range of cybersecurity services and solutions to our regional clients with a strong focus on Operational Technology. Our ambition is to scale up our existing business and increase our footprint in the region with a refreshed strategy and mandate to leverage our global capability and win new business in our core markets.

We are actively seeking a Senior Cybersecurity Engineer to take a leading role in design, development and implementation of IT/OT cybersecurity solutions within our existing install base.

The role will require someone that this is a problem solver, determined and enthusiastic. They will bring experience of implementing a wide variety of cybersecurity products and solutions within large complex system development. They will have the ability to apply cybersecurity and principles to organizational requirements and be able to identify and remediate critical infrastructure systems that were designed without system security considerations.

The successful Candidate will enjoy a rewarding role full of new challenges and be part of a company that provides highly complex solutions in the most critical operational environments where robust safety and resilience standards are applied.

ROLES & RESPONSIBILITIES

• Define overall security solution strategies based on customer requirements.
• Work with Thales engineering teams to integrate cybersecurity solutions into existing and new platforms.
• Act as the single point of contact for customer security queries.
• Contribute to the management of the risks and/or opportunities during the project implementation phase, including managing subcontractors and partners
• Analyse design constraints, analyse trade-offs and detailed system and security design, and consider life cycle support.
• Build, test, and modify product prototypes using working models or theoretical models.
• Design and develop cybersecurity or cybersecurity-enabled solutions.
• Design or integrate appropriate cybersecurity capabilities into overall system designs.
• Develop and execute system testing and validation procedures and documentation.
• Develop architectures or system components consistent with technical specifications.
• Identify and direct the remediation of technical problems encountered during testing and implementation of new systems.
• Identify, assess, and recommend cybersecurity or cybersecurity-enabled products for use within a system and ensure that recommended products are in compliance with evaluation and validation requirements.
• Perform risk analysis whenever an application or system undergoes a major change.
• Provide guidelines for implementing developed systems to customers or installation teams.
• Store, retrieve, and manipulate data for analysis of system capabilities and requirements.
• Utilize models and simulations to analyse or predict system performance under different operating conditions.
• Implement and integrate various system development life cycle methodologies into development environment.
• Conduct a market analysis to identify, assess, and recommend commercial, off-the-shelf, and open source products for use within a system and ensure recommended products are in compliance with evaluation and validation requirements.
• Design and develop system administration and management functionality for privileged access users.
• Design, implement, test, and evaluate secure interfaces between information systems, physical systems, and/or embedded technologies.
• Ensure that design and development activities are properly documented and updated as necessary.
• Design to security requirements to ensure requirements are met for all systems and/or applications.
• Develop detailed design documentation for component and interface specifications to support system design and development.
• Implement designs for new or existing system(s).
• Perform security reviews and identify security gaps in architecture.
• Provide input to implementation plans, standard operating procedures, maintenance documentation, and maintenance training materials
• Provide support to test and evaluation activities.
• Trace system requirements to design components and perform gap analysis.
• Analyse user needs and requirements to plan and conduct system development.
• Develop designs to meet specific operational needs and environmental factors (e.g., access controls, automated applications, networked operations.
• Collaborate on cybersecurity designs to meet specific operational needs and environmental factors (e.g., access controls, automated applications, networked operations, high integrity and availability requirements, multilevel security/processing of multiple classification levels, and processing Sensitive Compartmented Information).

WORK EXPERIENCE REQUIREMENTS

• Minimum of 8 years’ experience of security engineering
• Strong critical thinking and problem-solving skills and a passion for information security
• Experience of working with internal experts/external vendors to resolve technical issues independently
• Fluent communicator in both written and spoken English;
• Previous consulting or professional services experience
• Knowledge of Aviation, Government, Defence and Transportation sectors
• Knowledge of computer networking concepts and protocols, and network security methodologies.
• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
• Knowledge of regional laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
• Knowledge of cyber threats and vulnerabilities.
• Knowledge of OT security architecture.
• Knowledge of industrial evaluation and validation requirements.
• Knowledge of installation, integration, and optimization of system components.
• Knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Knowledge of information security systems engineering principles.
• Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
• Knowledge of network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML).
• Knowledge of various operating systems.
• Knowledge of secure configuration management techniques.
• Knowledge of software development and engineering models (e.g., Agile, Lean, Waterfall Model, Spiral Model).
• Knowledge of system software and organizational design standards, policies, and authorized approaches (e.g., International Organization for Standardization [ISO] guidelines) relating to system design.
• Knowledge of system life cycle management principles, including software security and usability.
• Knowledge of Supply Chain Risk Management Practices
• Knowledge of critical infrastructure systems with information communication technology that were designed without system security considerations.
• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defence-in-depth).
• Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
• Knowledge of countermeasure design for identified security risks.

QUALIFICATION, CERTIFICATION & EDUCATIONAL REQUIREMENTS

• Degree in Information Security (preferred) or Information Technology or Computer Science
• Certified Information Systems Security Professional (CISSP), or
• Certified Information Security Manager (CISM)

Preferred

• Information Security Masters degree from either:U.S. National Centres of Academic Excellence in Cyber Defence; or, those certified by U.K. National Cyber Security Centre
  
• CREST Registered Technical Security Architect (CRTSA); or
• Information Systems Security Architecture Professional (CISSP-ISSAP).

Who We Are:

Omnicom Public Relations Group is a global collective of three of the top global public relations agencies worldwide and specialist agencies in areas including public affairs, marketing to women, fashion, global health strategy and corporate social responsibility. It encompasses more than 6,000 public relations professionals in more than 330 offices worldwide who provide their expertise to companies, government agencies, NGOs and non-profits across a wide range of industries. Omnicom Public Relations Group is part of the DAS Group of Companies, a division of Omnicom Group Inc. that includes more than 200 companies in a wide range of marketing disciplines including advertising, public relations, healthcare, customer relationship management, events, promotional marketing, branding and research.

As a talent-centric workplace, we recognize that we’re only as good as our people. And our people are outstanding. Every day, we strive to attract, retain and grow the very best talent in the industry, and bring their passion, creativity and smarts to bear for our clients.

The Opportunity:

Omnicom Public Relations Group Singapore is actively sourcing for an experienced Talent Development Director. With a strong focus on talent acquisition, this role will drive progressive people-first recruitment and action best of class employee relations programmes. Working closely with our senior leadership team, the ideal candidate will drive consultative, informed, and data-driven strategies across all relevant talent development focus areas.

What you’ll do:

• Manage the full-cycle 360 recruitment process across all levels of candidates and teams. From our public relations, digital, and creative teams, to support staff, to our internship talent pool, you will be the key recruitment expert for our Singapore office.
• Provide data-backed counsel to senior leadership about trends in the marketplace, competitive intelligence, and strategic recommendations for attracting the best talent and raising the profile of Omnicom Public Relations Singapore as a true employer of choice.
• Manage, streamline, and improve recruiting tools and systems (i.e., applicant tracking system, job postings, reference checking, referral process)
• Ensure a consistent talent acquisition process is followed across practices to ensure clarity for both internal stakeholders and candidate for best of class recruitment processes
• Oversight on areas such as promotion and salary review cycles, hire requests, employee benefits, and more
• Be an employee relations champion, a trusted and key point of the contact to enable constructive communication feedback channel for employees, practice leads, and leadership team
• Actively identify gaps, with solutions-based risk assessments and resolution plans
• Design succession plans for key talent and positions
• Manage, mentor, and grow your team of talent development experts

What you’ll receive:

• A progressive, growth oriented environment to propel your career in talent development and acquisition in a fast paced, dynamic, and rewarding environment:
• Ability to drive the talent development strategy in partnership with a caring, experienced, people-first leadership team
• A strong coaching and collaboration culture.
• A highly committed, intelligent, and driven team.
• Career progression as you perform at the highest levels.
• Competitive remuneration and attractive benefits.
• Work within a true multinational brand with access to stakeholders across our global network.

What you’ll need:

• 10 years or more of experience driving talent acquisition and human resources
• Experience working with senior leadership and driving senior leadership communication
• Team player with prior experience leading a team
• Strong communication skills inclusive of presentation skills
• Negotiation and influencing skills with ability to drive complex salary and career discussions with potential candidates and existing employees
• Project and change management skills
• Strong time and priority management skillset
• In-depth understanding of Singapore labour and employment law, inclusive of Ministry of Manpower processes and work pass applications
• Ability to communicate clearly and focus on results, with a positive and professional disposition in every situation.
• A point of view, and a proven ability to propose solutions and present ideas in a persuasive and compelling manner.

About us:

OPRG Singapore is a strengths-first organization that believes our staff operate at their best when they can nourish their lives with meaningful activities both in and out of the workplace. OPRG employees enjoy the medical/dental coverage including critical illness cover, and free access to a trained psychologist/counsellor through our Employee Assistance Program.

Our leadership team has designed and codified thoughtful work/life programs to ensure our staff have the opportunity to find balance while thriving with OPRG. Our formal work-life harmony guidelines outline our commitment to your personal time. Leave programs include, annual leave, birthday leave, alternate week BlueSky (early close) Fridays, Family Care leave (so staff can be with loved ones when it's most critical - and it includes pets!), and sabbatical leave for long-service. In 2021, we piloted a "meeting-free Friday" program, with the aim to offer one day where staff can focus on their priorities - to have creative quiet, the space to be strategic, or even just uninterrupted time to focus on important heads-down work. This program was overwhelmingly popular and we have continued in 2023.

Our learning and development programming includes a mentorship program, Strengths-training and various leadership trainings offered both locally and from our regional network (Emerging Manager, Leadership, Resilience workshops) as well as a host of local skills-based trainings to help you develop writing, presenting, and other areas in your specific functional expertise.