Interested applicants are invited to apply directly at the NUS Career Portal.

Your application will be processed only if you apply via NUS Career Portal.

We regret that only shortlisted candidates will be notified.

Job Description

The National University of Singapore invites applications for the position of Research Assistant in the Department of Computer Science, School of Computing (SoC). SoC is strongly committed to research excellence in all its dimensions: Searching for fundamental results and insights, developing novel computational solutions to a wide range of applications, building large-scale experimental systems and improving the well-being of society. We seek to play an active role both internationally and locally in the core and emerging areas of Computer Science and Information Systems.

The Research Assistant will be responsible for working closely with the Principal Investigator and lab members on Automotive Vulnerability. The position involves the development of testbeds, research electric vehicle charging’s app, pen-testing, tampering, and other security threats. He/she should possess experience or interest in at least one of the following research areas:

• Cyber Security
• Artificial intelligence
• Machine learning

Qualifications

• A Bachelor degree in a relevant area (Master degree is a plus);
• Ability to work in a team; and
• Good oral and written communication skills in English.

More Information

Location: Kent Ridge Campus

Organization: School of Computing

Department : Computer Science

Employee Referral Eligible: No

Job requisition ID : 23106

JOB OBJECTIVE

CDS Asia provides a range of cybersecurity services and solutions to our regional clients with a strong focus on Operational Technology. Our ambition is to scale up our existing business and increase our footprint in the region with a refreshed strategy and mandate to leverage our global capability and win new business in our core markets.

We are actively seeking a Senior Cybersecurity Engineer to take a leading role in design, development and implementation of IT/OT cybersecurity solutions within our existing install base.

The role will require someone that this is a problem solver, determined and enthusiastic. They will bring experience of implementing a wide variety of cybersecurity products and solutions within large complex system development. They will have the ability to apply cybersecurity and principles to organizational requirements and be able to identify and remediate critical infrastructure systems that were designed without system security considerations.

The successful Candidate will enjoy a rewarding role full of new challenges and be part of a company that provides highly complex solutions in the most critical operational environments where robust safety and resilience standards are applied.

ROLES & RESPONSIBILITIES

• Define overall security solution strategies based on customer requirements.
• Work with Thales engineering teams to integrate cybersecurity solutions into existing and new platforms.
• Act as the single point of contact for customer security queries.
• Contribute to the management of the risks and/or opportunities during the project implementation phase, including managing subcontractors and partners
• Analyse design constraints, analyse trade-offs and detailed system and security design, and consider life cycle support.
• Build, test, and modify product prototypes using working models or theoretical models.
• Design and develop cybersecurity or cybersecurity-enabled solutions.
• Design or integrate appropriate cybersecurity capabilities into overall system designs.
• Develop and execute system testing and validation procedures and documentation.
• Develop architectures or system components consistent with technical specifications.
• Identify and direct the remediation of technical problems encountered during testing and implementation of new systems.
• Identify, assess, and recommend cybersecurity or cybersecurity-enabled products for use within a system and ensure that recommended products are in compliance with evaluation and validation requirements.
• Perform risk analysis whenever an application or system undergoes a major change.
• Provide guidelines for implementing developed systems to customers or installation teams.
• Store, retrieve, and manipulate data for analysis of system capabilities and requirements.
• Utilize models and simulations to analyse or predict system performance under different operating conditions.
• Implement and integrate various system development life cycle methodologies into development environment.
• Conduct a market analysis to identify, assess, and recommend commercial, off-the-shelf, and open source products for use within a system and ensure recommended products are in compliance with evaluation and validation requirements.
• Design and develop system administration and management functionality for privileged access users.
• Design, implement, test, and evaluate secure interfaces between information systems, physical systems, and/or embedded technologies.
• Ensure that design and development activities are properly documented and updated as necessary.
• Design to security requirements to ensure requirements are met for all systems and/or applications.
• Develop detailed design documentation for component and interface specifications to support system design and development.
• Implement designs for new or existing system(s).
• Perform security reviews and identify security gaps in architecture.
• Provide input to implementation plans, standard operating procedures, maintenance documentation, and maintenance training materials
• Provide support to test and evaluation activities.
• Trace system requirements to design components and perform gap analysis.
• Analyse user needs and requirements to plan and conduct system development.
• Develop designs to meet specific operational needs and environmental factors (e.g., access controls, automated applications, networked operations.
• Collaborate on cybersecurity designs to meet specific operational needs and environmental factors (e.g., access controls, automated applications, networked operations, high integrity and availability requirements, multilevel security/processing of multiple classification levels, and processing Sensitive Compartmented Information).

WORK EXPERIENCE REQUIREMENTS

• Minimum of 8 years’ experience of security engineering
• Strong critical thinking and problem-solving skills and a passion for information security
• Experience of working with internal experts/external vendors to resolve technical issues independently
• Fluent communicator in both written and spoken English;
• Previous consulting or professional services experience
• Knowledge of Aviation, Government, Defence and Transportation sectors
• Knowledge of computer networking concepts and protocols, and network security methodologies.
• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
• Knowledge of regional laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
• Knowledge of cyber threats and vulnerabilities.
• Knowledge of OT security architecture.
• Knowledge of industrial evaluation and validation requirements.
• Knowledge of installation, integration, and optimization of system components.
• Knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Knowledge of information security systems engineering principles.
• Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
• Knowledge of network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML).
• Knowledge of various operating systems.
• Knowledge of secure configuration management techniques.
• Knowledge of software development and engineering models (e.g., Agile, Lean, Waterfall Model, Spiral Model).
• Knowledge of system software and organizational design standards, policies, and authorized approaches (e.g., International Organization for Standardization [ISO] guidelines) relating to system design.
• Knowledge of system life cycle management principles, including software security and usability.
• Knowledge of Supply Chain Risk Management Practices
• Knowledge of critical infrastructure systems with information communication technology that were designed without system security considerations.
• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defence-in-depth).
• Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
• Knowledge of countermeasure design for identified security risks.

QUALIFICATION, CERTIFICATION & EDUCATIONAL REQUIREMENTS

• Degree in Information Security (preferred) or Information Technology or Computer Science
• Certified Information Systems Security Professional (CISSP), or
• Certified Information Security Manager (CISM)

Preferred

• Information Security Masters degree from either:U.S. National Centres of Academic Excellence in Cyber Defence; or, those certified by U.K. National Cyber Security Centre
  
• CREST Registered Technical Security Architect (CRTSA); or
• Information Systems Security Architecture Professional (CISSP-ISSAP).

Who We Are:

Omnicom Public Relations Group is a global collective of three of the top global public relations agencies worldwide and specialist agencies in areas including public affairs, marketing to women, fashion, global health strategy and corporate social responsibility. It encompasses more than 6,000 public relations professionals in more than 330 offices worldwide who provide their expertise to companies, government agencies, NGOs and non-profits across a wide range of industries. Omnicom Public Relations Group is part of the DAS Group of Companies, a division of Omnicom Group Inc. that includes more than 200 companies in a wide range of marketing disciplines including advertising, public relations, healthcare, customer relationship management, events, promotional marketing, branding and research.

As a talent-centric workplace, we recognize that we’re only as good as our people. And our people are outstanding. Every day, we strive to attract, retain and grow the very best talent in the industry, and bring their passion, creativity and smarts to bear for our clients.

The Opportunity:

Omnicom Public Relations Group Singapore is actively sourcing for an experienced Talent Development Director. With a strong focus on talent acquisition, this role will drive progressive people-first recruitment and action best of class employee relations programmes. Working closely with our senior leadership team, the ideal candidate will drive consultative, informed, and data-driven strategies across all relevant talent development focus areas.

What you’ll do:

• Manage the full-cycle 360 recruitment process across all levels of candidates and teams. From our public relations, digital, and creative teams, to support staff, to our internship talent pool, you will be the key recruitment expert for our Singapore office.
• Provide data-backed counsel to senior leadership about trends in the marketplace, competitive intelligence, and strategic recommendations for attracting the best talent and raising the profile of Omnicom Public Relations Singapore as a true employer of choice.
• Manage, streamline, and improve recruiting tools and systems (i.e., applicant tracking system, job postings, reference checking, referral process)
• Ensure a consistent talent acquisition process is followed across practices to ensure clarity for both internal stakeholders and candidate for best of class recruitment processes
• Oversight on areas such as promotion and salary review cycles, hire requests, employee benefits, and more
• Be an employee relations champion, a trusted and key point of the contact to enable constructive communication feedback channel for employees, practice leads, and leadership team
• Actively identify gaps, with solutions-based risk assessments and resolution plans
• Design succession plans for key talent and positions
• Manage, mentor, and grow your team of talent development experts

What you’ll receive:

• A progressive, growth oriented environment to propel your career in talent development and acquisition in a fast paced, dynamic, and rewarding environment:
• Ability to drive the talent development strategy in partnership with a caring, experienced, people-first leadership team
• A strong coaching and collaboration culture.
• A highly committed, intelligent, and driven team.
• Career progression as you perform at the highest levels.
• Competitive remuneration and attractive benefits.
• Work within a true multinational brand with access to stakeholders across our global network.

What you’ll need:

• 10 years or more of experience driving talent acquisition and human resources
• Experience working with senior leadership and driving senior leadership communication
• Team player with prior experience leading a team
• Strong communication skills inclusive of presentation skills
• Negotiation and influencing skills with ability to drive complex salary and career discussions with potential candidates and existing employees
• Project and change management skills
• Strong time and priority management skillset
• In-depth understanding of Singapore labour and employment law, inclusive of Ministry of Manpower processes and work pass applications
• Ability to communicate clearly and focus on results, with a positive and professional disposition in every situation.
• A point of view, and a proven ability to propose solutions and present ideas in a persuasive and compelling manner.

About us:

OPRG Singapore is a strengths-first organization that believes our staff operate at their best when they can nourish their lives with meaningful activities both in and out of the workplace. OPRG employees enjoy the medical/dental coverage including critical illness cover, and free access to a trained psychologist/counsellor through our Employee Assistance Program.

Our leadership team has designed and codified thoughtful work/life programs to ensure our staff have the opportunity to find balance while thriving with OPRG. Our formal work-life harmony guidelines outline our commitment to your personal time. Leave programs include, annual leave, birthday leave, alternate week BlueSky (early close) Fridays, Family Care leave (so staff can be with loved ones when it's most critical - and it includes pets!), and sabbatical leave for long-service. In 2021, we piloted a "meeting-free Friday" program, with the aim to offer one day where staff can focus on their priorities - to have creative quiet, the space to be strategic, or even just uninterrupted time to focus on important heads-down work. This program was overwhelmingly popular and we have continued in 2023.

Our learning and development programming includes a mentorship program, Strengths-training and various leadership trainings offered both locally and from our regional network (Emerging Manager, Leadership, Resilience workshops) as well as a host of local skills-based trainings to help you develop writing, presenting, and other areas in your specific functional expertise.

The Company:

Our client is a multi-national information technology company with its headquarters in Singapore. It is also the largest Systems Integrator domestically.

The Project:

This project consists of multiple teams deployed within Cybersecurity Operations Command Centre delivering mission critical 24x7 threat monitoring, prevention, analysis, intelligence to high-valued clients.

The Role :

1. Provide support for internet security surveillance activities.

2. Responsibility for managing and escalating security incidents, ensuring a prompt and effective response.

3. Assist in the thorough preparation of incident reports, contributing to comprehensive documentation of security events.

4. Assist in detecting and resolving issues arising from security incidents, and demonstrate a proactive approach to maintaining system integrity.

5. Provide first-level troubleshooting for serviced devices, and address and resolve security-related issues.

6. Work closely with engineers team to troubleshoot and resolve problems. Your expertise and insights will play a crucial role in finding effective solutions.

7. Stay informed about the latest security advancements by consistently reviewing security updates and ensuring that systems are up to date with the most current protective measures..

8. Provide support for the Level 1 (L1) team by assisting with resource management, helping to ensure operational continuity and efficiency.

9. Assist in the onboarding program for new security analysts, facilitate a smooth integration into the team and ensure familiarity with established protocols.

1. Minimum requirement is a Diploma with a module in IT or Cyber Security.

2. Having a security Analyst certification like Certified Ethical Hacker (CEH), Certified Security Analyst (ECSA), or Computer Hacking Forensic Investigator (CHFI) is advantageous but not mandatory.

3. Preferably, candidates should have experience in one or more of the following areas:

• Management of IDS/IPS and firewall systems.
• Experience in Vulnerability Assessment, penetration testing, and risk assessment using various scanning and penetration testing tools.
• Knowledge of Unix, WIN2K, NT, and web server security practices such as OS tightening, SSO, and virus scanning.

4. General understanding of Information Security concepts.

5. Adequate understanding of Layer 1-7 Networking concepts is required.

6. Ability to follow predefined procedures, policies, and processes, and work under pressure.

7. Good communication skills (verbal, reading, and writing).

8. Working hours are from 9.00 AM to 6.30 PM, Monday to Friday.

• End of contract bonus

Duties and Responsibilities:

• Handle public complaints and feedback related to project site.
• Prepare letters and notices to communicate with community and residents regarding development of project.
• Implement public relationship programme.
• Arrange and attend meetings on public relation matters with project team where necessary.
• Prepare a monthly report to update on the feedbacks and complaints.
• Maintain good relationship with clients and residents.
• Assist other general administrative support to the project teams.
• Perform other duties as assigned.

Job Specification:

• Diploma or Degree in any field.
• Minimum 3 years’ relevant experience working in a public-facing role.
• Willing to work at site office environment.
• Good communication skills.
• MRT working experience would be an added advantage.
• Independent, possess excellent interpersonal and communication skills and emotional maturity.

Job Description

You will be a member of the Group Information Security Team responsible for ensuring corporate applications, systems, networks, and digital assets are adequately protected and mitigated against cyber threats and risks. You will help drive cybersecurity and risk management efforts and user awareness and education within the Singapore Airlines Group.

Key Responsibilities include:

• Provide cyber governance and risk management oversight.
• Manage the security policy framework and relevant standards.
• Oversee applicable security, regulatory, privacy, contractual cyber requirements.
• Manage cyber risk analysis and self-assessments program for various information services, systems, processes and recognized industry standards.
• Conduct risk assessments, document results, and propose and track remediation tasks.
• Develop compliance program top routinely assess existing infrastructure, systems, and applications for compliance and vulnerabilities and propose relevant mitigating controls.
• Conduct vulnerability assessments and track remediation status of identified vulnerabilities.
• Identify and assess cyber risks and recommend and drive cyber security solution and initiatives to improve cyber security posture.
• Define controls to meet regulatory, legislative, and industry specific compliance requirements.
• Manage third party cyber risk assessment standards.
• Prepare IT security related KPI reports and management reports for compliance monitoring and reporting.
• Drive the implementation of GRC tool.
• Maintain user cyber awareness and provide security advisory on emerging security threats and vulnerabilities.
• Develop, review and continuously improve IT security training material and conduct user training to improve user awareness and incident response readiness.
• This role may be seconded to any of SIA’s subsidiary group

Requirements

• Degree in IT or related fields, with 4-5 years relevant information security working experience, especially in the application security space.
• Professional security certifications (CISSP, CISA, CEH etc) preferred.
• Experience with Governance, Risk and Compliance (GRC) activities.
• Familiar with PCI, PDPA, GDPR requirements
• Experience in security technologies, practices, application/network/systems architecture and design, tests tools and processes.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

PRODUCT AREA

Google Cloud accelerates organizations’ ability to digitally transform their business with the best infrastructure, platform, industry solutions and expertise. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology – all on the cleanest cloud in the industry. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

JOB DESCRIPTION

The Google Cloud Platform team helps customers transform and build what's next for their business — all with technology built in the cloud. Our products are engineered for security, reliability and scalability, running the full stack from infrastructure to applications to devices and hardware. Our teams are dedicated to helping our customers — developers, small and large businesses, educational institutions and government agencies — see the benefits of our technology come to life. As part of an entrepreneurial team in this rapidly growing business, you will play a key role in understanding the needs of our customers and help shape the future of businesses of all sizes use technology to connect with customers, employees and partners.

ADDITIONAL JOB DESCRIPTION

In this role, you will lead our team of Renewals Security Specialists in JAPAC. You'll provide a deep understanding of Google Cloud's Security product SaaS offerings, and build and lead a high-performing team that is dedicated to managing and growing a portfolio of global accounts.

Qualifications

JOB RESPONSIBILITIES

• Lead a team of Renewals Security Specialists in the management and growth of a portfolio of global accounts through coaching, mentoring, and overseeing the performance of the team.
• Develop and implement strategies for renewing, upselling, and cross-selling Google Cloud's Security products and services across the JAPAC region.
• Build and maintain strong relationships with customers, partners, and key stakeholders.
• Oversee the forecasting, tracking, and reporting of renewals performance.
• Represent Google Cloud at industry events and conferences.

MINIMUM QUALIFICATIONS

• Bachelor's degree in Business Administration, Sales, or a related field, or equivalent practical experience.
• 7 years of experience in a sales or account management role.
• 3 years of experience in a leadership role in technology.

PREFERRED QUALIFICATIONS

• Experience meeting or exceeding sales goals.
• Knowledge of the security market and Google Cloud's Security product SaaS offerings.
• Ability to build and motivate a high-performing team.
• Excellent leadership, communication, and people skills.