VP - ICT Security Operations Analyst

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and, in our clients’, best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do. We keep the bank safe and provide the technical tools our workers need to be successful. We design our digital architecture and ensure our platforms provide a first-class customer experience. Our operations teams manage risk, resources, and program management. We focus on enterprise resiliency and business continuity. We develop, coordinate, and execute strategic operational plans. Essentially, Enterprise Operations & Technology re-engineers client and partner processes to deliver excellence through secure, reliable, and controlled services.

Trust is part of our DNA at Citi. As such, we take safeguarding our customer data very seriously. The Chief Information Security Office (CISO) is made up of deeply dedicated and talented colleagues who work together to ensure the safety of Citi’s and our clients’ assets and information. We manage information security as an end-to-end program – one with a clear mandate and accountability. Our mission is to continually execute and enhance a global security program that is fully anchored to modern control and security frameworks, fully aligned with the technology of the firm, threat-focused and data-driven, and deeply integrated across all Citi businesses globally.

Being talent-driven, we are focused on attracting, developing, and retaining diverse and inclusive talent with a high technical skill level. As a member of our team we will provide you with career development opportunities at all stages of your career. Our employees model a passion for protecting Citi and our clients and believe in treating others with dignity and respect.

The Chief Information Security Office (CISO) is home to deeply talented colleagues that work to ensure the safety of Citi's clients' and our proprietary data. We manage information security as one end-to-end program – one with a clear mandate and accountability. Our mission is a program that is fully anchored to modern control and architectural frameworks, is fully aligned with the enterprise architecture of the firm and is deeply integrated into the sectors and functions.

CISO’s Cyber Security Engineering and Architecture is responsible for delivering integrated risk reduction capabilities and services aligned to the architectural goals and priorities associated with leading ‘Change the Bank’ (CTB) and ‘Run the Bank’ (RTB) initiatives. This role entails leading and coordinating the execution of SASE Services, across the network security domain. The successful candidate will have demonstrated success and be highly adept at: leading global programs and engineering change efforts; managing risk and execution of global programs by aligning resources and tactical/strategic decisions; and driving transformation across a complex enterprise to support cybersecurity goals. The candidate needs to have the ability to work on defining highly scalable and integrated security architectures, and influence roadmaps across a variety of product portfolios. The candidate needs to have the ability to define and drive interoperability with security components of a complex end to end network and cloud security ecosystem, focusing on client experience. Strong experience across cybersecurity, Technology Infrastructure, large enterprises will assist in delivering aspects of this service.

Our commitment to diversity includes a workforce that represents the clients we serve globally from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.

Responsibilities:

• Working with Transformation Program Directors, Senior Architects, Steering Committees, CISO and CTI partners in delivering the transformational Programs related to SASE. Onboarding of users on Zscalar and ensuring smooth transition.
• Troubleshooting issues and work on finding RCA.
• Zscaler Internet Access design and migration methods from legacy Internet Access solutions to SASE based architecture.
• Interface and support Citi’s Security Architecture Council and Working Groups building strong rapport across teams.
• Firewall rules Management (creation/ modification/ deletion) by following Change management process and via automation.
• Participate in migration activities and provide troubleshooting support from Infrastructure defense standpoint. Identify issues, provide support for isolating problems, finding RCA.
• Willing to work on weekends for migration activities off business hours.
• Completing additional tasks in connection with the role but not detailed in the current job description, charged by the direct manager, supervisor, or the functional head.

Qualifications:

• 8-12 years of extensive Security Experience with Checkpoint Firewalls, Juniper Networks Firewalls, Palo Alto Network Firewalls, Bluecoat Proxy, IPS/IDS, Illumio, Crowdstrike and EDR tools.
• Extensive knowledge on SASE Zscalar user onboarding and operational support experience.
• Strong troubleshooting skills over the Firewalls, Proxy and network infrastructure.
• Extensive Data Networking knowledge and an understanding of network security standards such as Firewall Rules, Security Zones, Multicast Data Feeds, Ultra Low Latency Network Architectures & Platforms.
• Hands-on experience in Zscaler Internet Access, Zscaler Private Access and Zscaler Digital Experience
• Proven influencing and relationship management skills.
• Exhibiting a high degree of flexibility and ability to multi-task, seeking guidance where necessary
• Strong communication skills, including verbal and written skills.
• Ability to work as part of a team with remote colleagues in other countries.
• Strong knowledge of Proxy functionality and Proxy features
• Consistently demonstrates clear and concise written and oral communication as well as strong presentation skills to both technical and non-technical audiences.
• Advanced analytical and problem-solving skills
• Demonstrated ability to take ownership and work with cross functional teams to manage multiple projects simultaneously under pressure.
• Thorough understanding of industry and corporate technology standards for Cyber Security services

Critical Competencies:

• Firewalls, Proxy and network infrastructure
• Zscaler Internet Access, Zscaler Private Access

Sole Legal Counsel (Mobile Gaming)

We are currently engaged by my client, who is a leader in mobile gaming that has captivated more than 20 million of players worldwide.

What you’ll be doing:

• Reviewing, drafting and negotiation of contracts related to the company’s business
• Providing support and legal advice in relation to corporate matters
• Liaising with external counsels and advisors
• Contract review and Management
• Participation in various projects with the Compliance, Commercial and Finance teams
• Providing legal advice on matters relating to intellectual property rights, data protection, general commercial and contract law matters and dispute resolution
• Conducting legal research and preparing memoranda or legal analysis for internal stakeholders
• Providing day-to-day legal support to the Management and other teams in the company, such as Marketing, Product and Tech teams
• This role will report directly to the CEO for all legal matters across SEA region

What you’ll bring to the role:

• At least 7 years PQE (qualified in Singapore, US, UK or other comparable common law jurisdiction)
• Legal and regulatory compliance experience in-house or in law firms
• Prior regional experience working on related matters in the technology field will be a plus
• Keen interest and good understanding of developments in the internet, technology-related space
• Excellent problem-solving, analytical and organizational skills
• Proactive approach and ability to handle matters independently

Regret to inform that only shortlisted candidates will be notified.

www.dadaconsultants.com

EA Registration Number: R1878287

Business Registration Number: 201735941W.

Licence Number: 18S9037

Responsibilities

• Bachelor’s degree in computer science, Information Security, or related field.
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• Excellent communication skills and the ability to collaborate with diverse teams.
• Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• Good knowledge in security
• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Resposibilities:

• Background in Engineering or Computer Science
• 5 or more years of working experience in IT Security
• Relevant certifications in networking or cyber security, e.g. CISSP, CISM, CISA, CRSIS preferred
• Experience with DevSecOps methodologies and processes preferred
• Experience in security architecture of cloud native applications preferred
• Experience in providing security advisory and consultancy on application and services, including the design, development, implementation and/or management of the system
• Understanding of CI/CD tools
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Job Summary:

We are currently looking for an Azure Cloud and Cyber Security Manager who will support the School by managing and maintaining the Azure Infrastructure, Microsoft 365 and Cyber Security. The appointee works with the Director of Technology & Senior Cyber Security Manager to ensure the IT requirements of the end user are met. The role reports to the Senior Cyber Security Manager.

Requirements:

· Minimum Degree in Computer Science, Engineering or equivalent

· Minimum relevant experience of 5 years and above

· Azure Solution Architect certification

· Excellent knowledge of Azure, Microsoft 365 and Cyber Security

· Experience in Microsoft Intune, Microsoft Defenders and Microsoft Sentinel

· Able to work independently as well as a good team player with good initiative

· Will accept late hours and weekend work for maintenance and patching

Key Responsibilities

1. Management and Maintenance of Cloud Infrastructure and Cyber Security

• Responsible for the implementation and management of Microsoft 365 and Azure services.
• Responsible for the configuration and management of Microsoft email system, Microsoft Intune, Microsoft Defender (M365, Endpoints, Identity and Cloud) and MS Purview
• Responsible for the cybersecurity of all systems.
• Conduct regular security assessments, vulnerability scans, and penetration tests to identify and mitigate security risks.
• Monitor security logs and alerts to identify and respond to cyber security incidents.
• Perform regular privilege access and user access review.
• Providing security awareness training and security advisories.
• Responsible for installation and maintenance of the school internet filtering system.

2. Management and Maintenance of Server Infrastructure

• Monitoring and renewal of warranty status on all servers.
• Monitoring of all servers’ health.
• Migration, upgrading and updating of servers.
• Maintain up-to-date records of IT infrastructure-related documentation.

3. Procurement / Resources / Licensing

• Source and procure quotes when necessary for the purchase of server and network infrastructure equipment.
• Source quotes and oversee the disposal process for any IT-related equipment (in conjunction with the Helpdesk/AV Technician when required).
• Ensure that budgetary & inventory routines are maintained and
• Contribute to the development of IT budget formulation.

4. Policy, Procedure and Project Management

• Work closely with the Senior Cyber Security Manager in developing the Cyber Security strategy, policies and procedures.
• Provide implementation plan for current /planned IT projects.
• Liaise with vendors and 3rd party contractors.
• Support the IT team in identifying technical needs and priorities.
• Contribute to the development of the annual IT budget.
• Contribute to management meetings as requested, advising on technical issues.

5. General

• Keep abreast of current cyber security, data protection, and artificial intelligence technologies.
• Demonstrate a positive attitude towards users and their needs.
• Operate within the policies of the School.
• Occasional overtime is required as deemed necessary and reasonable by the School.
• Be responsible for reporting any concerns about a child to the Designated Safeguarding Lead.
• Embrace the School’s commitment to creating a diverse and inclusive environment.

The school is committed to safeguarding and promoting the welfare of children and young people and expects all staff and volunteers to share this commitment. We will conduct thorough background checks on all successful applicants.

5-day week – working hours are from 7.30 am to 4.30 pm (41.25 nett hours per week). Interested applicants, please submit an application letter and detailed resume, stating your current and expected salary, date of availability and contact number via the online system at https://careers.tts.edu.sg/careerportal/main.aspx. In your application, please provide the names and addresses of three people from whom confidential references may be obtained. Please indicate their professional relationship to you.

(Only shortlisted applicants will be notified)

CPE Registration No.: 196100114C | Period of Registration: 7 June 2023 to 6 June 2029

• Position :Service Technician(CCTV/Security System)
• Location : Islandswide- Office in Outram
• Working hours : 5 days work week;(8.30am, -6.00pm)
• Salary (commensurate with experience) : Up to $4200 gross ($3500Basic +Transport allowance $400-$750) AWS + Overtime + Performance Bonus + $60 Mobile reimbursement + Birthday leave + Health insurance + allowance
• Duration : Permanent
• Industry : Security system

Main Responsibilities:

• Execution of service and maintenance workflow.
• Liaise closely with client representatives on all service/maintenance related issues.
• Mentor a team of service team members.
• Assisting the supervisor in employing teams on service deliveries and distribute responsibilities.
• Manage day-to-day client interactions and expectations for optimal results.
• Provide support to supervisor in ensuring the timely delivery and completion of troubleshoot and service/maintenance of security systems at clients’ premises.
• Familiarise yourself and deliver customer satisfaction base on each client's business, organization and objectives.
• Ensure that works carried out are in compliance with the Workplace Safety and Health Act.
• Perform any other technical tasks as and when required.

Requirements:

• Min Nitec in Electrical/Electronic Engineering with at least 2 years working experience.
• Knowledge and hands-on experience in security systems such as Integrated Security Management Systems, Card Access Control Systems, Intrusion Detection Systems and CCTV systems is a must.
• Knowledge in IT/Network/Server is an added advantage.
• Independent, self-motivated individual whom is able to work under minimum supervision.

Email me at [email protected]

Do visit www.searchpersonnel.com.sg for more job listings.

***We do not charge our candidates any referral fee nor bind them with any contract.***

Joie Chang

Deputy Consulting Director

Reg no.: R2090601 | EA No: 13C6684

Job Summary

Seeking IT Security professional with a keen interest in Information Technology (IT) Governance, Risk and Compliance to enable cyber resilience and information security for mission critical systems.
The individual will be responsible to conduct cyber risk assessment in support of technology initiatives to help identify IT related risk and determines appropriate controls to mitigate risks.

Mandatory Skill-set

• Degree in Computer Science, Information Security or Information Systems;
• At least 2-3 years of experience in IT security space with a strong experience in IT GRC ( Governance, Risk and Compliance ) related functions;
• Deep knowledge and understanding of internal controls, security frameworks, risk management and IT governance, auditing techniques and methodologies;
• Good knowledge of enterprise IT systems and components (applications, operating systems, databases, networks, cloud, DevOps;
• Knowledgeable in using various cyber security monitoring and analysis tools and techniques depending on the organization's needs and requirements;
• Familiar with cyber security standards, protocols and frameworks such as NIST CSF, CIS, PDPA;
• Strong in analytical thinking with attention to detail;
• Excellent communication and inter personal skills.

Responsibilities

• Act as a Subject Matter Expert on IT Governance, Risk management and Compliance (GRC) and related policies and procedures;
• Responsible for documenting methodologies and tools to mitigate information security or cyber risk;
• Prepare reports for information security or cyber risk related reporting, threat awareness and security awareness reports;
• Conduct compliance assessments and tracking the overall compliance health in relation to IT governance standards and procedures in compliance with regulatory requirements;
• Recommend corrective actions or appropriate security controls to mitigate technical risk;
• Continuously identify GRC Key risk indicators (KRI) and maintain IT Risk Register;
• Assist in the development of policies for conducting cyber security risk assessments and compliance audits;
• Formulate governance procedures for documenting and updating security policy, standards, guidelines and procedures;
• Perform information security or cyber risk assessment activities and assess third party security controls and internal security systems;
• Establish scope of risk analysis for new technology initiatives;
• Keep abreast of the dynamic cyber threat landscape and identify opportunities for enhancement of IT risk processes;
• Provide regular updates on the overall health of compliance, criticality assessment, audit findings, remediation and action plans.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

Duties and Responsibilities:

• Handle public complaints and feedback related to project site.
• Prepare letters and notices to communicate with community and residents regarding development of project.
• Implement public relationship programme.
• Arrange and attend meetings on public relation matters with project team where necessary.
• Prepare a monthly report to update on the feedbacks and complaints.
• Maintain good relationship with clients and residents.
• Assist other general administrative support to the project teams.
• Perform other duties as assigned.

Job Specification:

• Diploma or Degree in any field.
• Minimum 3 years’ relevant experience working in a public-facing role.
• Willing to work at site office environment.
• Good communication skills.
• MRT working experience would be an added advantage.
• Independent, possess excellent interpersonal and communication skills and emotional maturity.
• Working Location: Tampines

Group Legal (May – 2024) consists of 39 lawyers and support staff in a distributed team located in Oslo (Head Office), Shanghai, Singapore, Dubai, Hamburg, London, Glasgow, Mexico City, and Houston. Group Legal is a provider of high-quality legal services and a business enabler for DNV and responsible for providing legal advice and support to all business areas on a global basis. The Group Legal function is headed by the Group Legal Director (GLD) at Group headquarters and reports to the Group CFO. Group Legal is organized with 3 geographical regions, Region MEAAPAC (Middle East, Africa, Africa Asia & Pacific), Region Americas and Region Europe.

The responsible regional legal counsel for the Region (Head of Region) is responsible for providing comprehensive legal support and advice to all Business Area and support functions in the Region. The Head of Region role involves overseeing all legal aspects of the business operations, ensuring compliance with local laws and regulations, managing litigation and supporting corporate governance. The Head of Region will work closely with all Business Areas, mitigate legal risks and facilitate strategic goals.

The Head of Region shall strive to continuously improve the Group Legal function, processes, governance, and its service offerings in the Region, in close dialogue with the Business Areas and other stakeholders to best meet and anticipate the internal customer’s needs, including taking advantage of “working smarter” and utilizing “AI”.

The MEAAPAC Region is part of DNV Group Legal which has a global responsibility. MEAAPAC Region is part of Group Legal which shall work as “one team”. Head of Region is responsible that cooperation with other regions and teams in Group Legal shall work effortlessly and in and efficient and good manner.

Key Responsibilities:

1. Legal Advisory:
   • Provide accurate and timely legal advice to all Business Areas and support functions on a wide range of legal issues.
   • Ensure compliance or provide legal support in relation to local, regional, and international laws and regulations.
   • Monitor changes in relevant laws and regulations and advise management on potential impacts.
2. Contract Management:
   • Draft, review, and negotiate contracts and agreements to safeguard the company’s interests.
   • Manage and/or support in relation to contract lifecycle, including renewals and terminations.
3. Litigation and Dispute Resolution:
   • Manage, oversee and handle litigation and dispute resolution processes.
   • Coordinate with external legal counsel as necessary.
4. Corporate Governance:
   • Ensure and support in relation to adherence to corporate governance standards and practices.
   • Assist with the organization of board meetings and preparation of minutes and resolutions to the extent requested.

· Create governance and overseeing the legal structure in the region of DNV to ensure compliance with local corporate governance requirements.

· Coordinate purchase of all external legal advice to DNV in the Region, including appointing external legal advisors in the Region in cooperation with the involved organizational units in line with Group Legal guidelines.

Legal Advisory:

· Provide accurate and timely legal advice to all Business Areas and support functions on a wide range of legal issues.

· Ensure compliance or provide legal support in relation to local, regional, and international laws and regulations.

· Monitor changes in relevant laws and regulations and advise management on potential impacts.

Contract Management:

· Draft, review, and negotiate contracts and agreements to safeguard the company’s interests.

· Manage and/or support in relation to contract lifecycle, including renewals and terminations.

Litigation and Dispute Resolution:

· Manage, oversee and handle litigation and dispute resolution processes.

· Coordinate with external legal counsel as necessary.

Corporate Governance:

· Ensure and support in relation to adherence to corporate governance standards and practices.

· Assist with the organization of board meetings and preparation of minutes and resolutions to the extent requested.

· Create governance and overseeing the legal structure in the region of DNV to ensure compliance with local corporate governance requirements.

· Coordinate purchase of all external legal advice to DNV in the Region, including appointing external legal advisors in the Region in cooperation with the involved organizational units in line with Group Legal guidelines.

Risk Management:

· Continuously identify and evaluate DNV’s liability exposure and risks in the Region and develop strategies to mitigate them.

· Conduct internal audits to ensure compliance with legal standards.

Training and Development:

· Conduct training sessions for employees on legal topics, compliance, and best practices.

· Develop and update internal policies and procedures.

Cross-Functional Support:

· Collaborate with all Business Areas as well as the support functions, such as HR, and Finance.

· Support mergers, acquisitions, and other strategic initiatives from a legal perspective to the extent requested.

Documentation and Record Keeping:

· Maintain accurate and up-to-date legal files and records.

· Ensure proper documentation of all legal matters.

Team Management:

· Manage the Regional team in a professional and efficient manner.

· Assign tasks and projects to team members based on their skills and workload.

· Provide guidance, mentorship, and professional development opportunities for team members.

· Conduct regular performance reviews and provide constructive feedback.

· Foster a collaborative and inclusive team environment.

Requirement

Masters Degree in Law

Minimum 15 years of experience in Legal

Experience with Line Management is a must

Relevant business experience, ideally within the maritime, energy systems sector

Willingness to travel both domestically and internationally

Excellent communication skills and fluency in English

- To answer occasional phone calls from public

- Station on Site to attend to feedbacks

- Attend monthly site meeting and prepare minutes of meeting

- Need to do site administration work:

Purchase orders, compilation of Delivery oders, Workers attendance and Work pass and safety course attendance

- Minimum 2 Years experience in public relations service or hospitalities and tourism field

- 5-Day work week

Site Office Location:

Ang Mo Kio Industrial Park 2

50 metres walking distance from Ang Mo Kio Ave 1

Bus Stop No: 54101

The ideal candidate should be able to work independently. You enjoy interacting with people and believes in being able to contribute towards a good experience with Ronald McDonald House Charities. Possess ability to build rapport with the working team.

Reports to Operations Lead at RMHC based at the National University Hospital Singapore.

The job

• Assist families with registration at the Ronald McDonald Family Room
• Help families check-in and out of the Ronald McDonald House
• Provide general assistance and support to families when necessary
• Ensure supplies are stocked across all facilities
• Maintain tidiness and cleanliness at facilities, light housekeeping when necessary
• Assist staff in administrative duties

Requirements and qualities we are looking for

• Relevant experience in guest-relation or receptionist roles is a plus
• Great interpersonal skills – friendly, tactful, dependable and yet discreet
• Neat and pleasant in appearance
• Comfortable with working with members of the public, staff and volunteers

Schedule

• Able to work on Weekends and Public Holidays
• Shifts: 9am – 1pm, 1pm – 5pm, and 5pm – 9pm

Orientation and training will be provided by Operations Staff.

Benefits include cash value of entitled annual leave and pro-rated paid Public Holidays.

If you are keen on this role, please email your CV to: [email protected]

Closing date of application: 23 June 2024

This opportunity is open to current citizens and residents of Singapore. We regret that only shortlisted candidates will be contacted for an interview. Thank you for your interest in Ronald McDonald House Charities Singapore.

COMPANY DESCRIPTION

About BW Group

BW Group is a leading global maritime company involved in shipping, floating infrastructure, deepwater oil & gas production, and new sustainable technologies. Founded in 1955 by Sir YK Pao, BW controls a fleet of over 450 vessels transporting oil, gas and dry commodities, with its 200 LNG and LPG ships constituting the largest gas fleet in the world. In the renewables space, the group has investments in solar, wind, batteries, biofuels and water treatment. BW is proud to be listed as one of Forbes World's Best Employers 2023.

Are you ready to make an impact?

What drives us is our mission to deliver energy for the world today, and to find solutions for tomorrow. If you want to make lives better around the world by providing access to energy, while working on sustainability and decarbonisation, we'd like to hear from you. Working at BW you will feel the pulse of the world each day. If something happens in the world, we feel it, and you can play your part by anticipating and responding to it. Our high-performing teams are drawn to BW by the global nature of our work and the satisfaction of working with collaborative people who inspire each other to deliver exceptional results.

RESPONSIBILITIES

• As a member of the BW Legal Centre of Excellence, provide legal support to all areas of the Group's business, including acquisitions, joint ventures, financing, procurement and corporate matters, with a particular focus on the provision of legal advice in connection with the BW Water business.
• Review, draft and negotiate a wide range of legal documentation and commercial agreements, including commercial contracts, term sheets, sale and purchase agreements, procurement and constructions contracts, and shareholder agreements.
• Manage dispute resolution matters (litigation, arbitration and mediation).
• Advise on regulatory and compliance issues, including anti-trust, sanctions, anti-bribery, data protection, human rights and environmental matters.
• Research and prepare opinions on matters of law.
• Conduct due diligence on investment opportunities.
• Develop and foster excellent relationships with peers and stakeholders, in particular with the leadership team of BW Water as that business expands its operations.
• Liaise and work collaboratively within the Legal, Insurance and Corporate Secretarial teams.
• Advise on and monitor corporate governance practices and legal developments.
• Participate in ad hoc projects, as required.
• Advise on the selection of, and instruct and manage, external counsel.

QUALIFICATIONS AND EXPERIENCE:

• Qualified lawyer with at least 5 years of experience in Singapore, England & Wales, USA or another common law jurisdiction.
• Experience gained at an international law firm and/or as in-house counsel for a multinational organisation.
• Experience of engineering contracts and project documents, in particular in the water and wastewater industries is advantageous but not required.

SKILLS:

• Sound working knowledge of general corporate, commercial and contract law.
• Versatile with good technical skills and a commercially focused and practical attitude towards problem-solving.
• Excellent written and verbal communication skills.
• Strong team player with a client-focused approach.
• Ability to engage in constructive debate.
• Experience working with diverse cultures.
• Ability to plan and prioritise tasks.
• Enthusiastic and proactive attitude.

At BW, we offer challenging work in an international environment with a team of dedicated and competent colleagues. We recognise that the success of BW rests with each employee's ability to provide the necessary skills and confidence within the team, and our training is tailored to suit individual needs and career aspirations.

Vision: Best on Water

Mission: We deliver energy for the world today, and find solutions for tomorrow

Values

• Collaborative
• Ambitious
• Reliable
• Enduring

If our values resonate with you and you think you can contribute, we would be delighted to hear from you!

Information for Recruitment Agencies:

BW endeavours to recruit and fill vacancies directly. However, when we do need to engage with agencies, BW operates a preferred supplier list (PSL) and will not be accepting unsolicited applications from non-PSL agencies for this role.

Position

Data Security Specialist- Data Security and Endpoint Security

Data Security Specialist is a technical Specialist role within the Data Security Services team and will be responsible for managing, administration and supporting the Data Security and Endpoint Security technologies for the bank.

Person will be the technical point of contact for the Run team and the related activities to data security and will be the last level of escalation for the Security specialists in the team. He/She is also responsible for the technical transition and validation of Security services from other regions to Singapore. He/She will be involved in projects and POC’s that may involve security services. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Specialist on the technologies within data security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France and UK) and Asia remotely from Singapore. France infrastructure represents approximately 80% of the worldwide production activities of CA-CIB in Singapore.

Team works in Europe time zones and this role will be aligned primarily to Paris working hours. Flexible rotations are followed based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect,
• Encryption Solutions: Disk Encryption, File and Folder encryption,
• Database Audit Monitoring solutions
• Email and Web Phishing Prevention solutions.
• Vulnerability Management

Detailed Job Responsibilities

The Specialist has a wide spectrum of responsibilities and actions. Person will be responsible for following (but not limited to) responsibilities in day-to-day work:

As the Specialist of the team, he/she:

• act as the last level of escalation for the team members
• own Incident, Problem and change management process for the team
• assigns technical tasks and manages delegation
• animates the team to encourage collaboration and sharing of practices
• participates to recruitment process for the team

As the Specialist of his/her scope of activity, he/she:

• is actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management
• Is the final technical approver for any changes into Data Security systems and is accountable for any technical changes in the environment from a RUN/BAU perspective
• Is involved in projects like End of Life, New Builds, migrations and technical upgrades of the solution managed by the team
• Participates in global Infra events (like Power down and DR Tests)
• ensures activity is performed in compliance with norms, standards, processes and procedures
• gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting
• ensures documentation is up to date and relevant for use
• lead the continuous improvement initiatives
• responsible to drive and deliver root cause for any high severity issues
• Focus on automation and optimum use of the team to improve efficiency
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

• Work schedule is mainly focused to support Asia and EMEA (Paris) time zone; however, may have to support during non-offce hours for critical incidents or escalation as per the assigned on-call support requirements;
• Rotational Shift schedule is followed;
• Work Hours: 2 PM – 11 PM SGT (with 1 week of General shift 9 AM – 6 PM SGT).

Qualifications and Profile

Functional

• 8 - 10 years of IT Security experience in administration and management of IT Security technologies primarily Symantec Data Loss Prevention, Symantec Endpoint Protection, Email Security, Data Classification and other endpoint & data security solutions;
• Should be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;
• Knowledge of different domains of IT Security;
• Working & hands-on experience in administering the IT Security Solutions;
• Must have experience in working in similar Production setup in Run (Operations) mode;
• Ability to apply risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;
• Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;
• Excellent in analytical, communication and documentation skills;
• Ability to organize work and be able to priories work as per the needs of Production Operation’s needs;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Ability to work independently and as well as a part of team and is able to work under minimal supervision;
• Should have time management skills and able to manage work in fast moving environment;

Technical

• Hands-on experience on Symantec Data Loss Prevention (DLP);
• Highly proficient in data leakage prevention (DLP) technologies - troubleshooting and configuration management;
• Deployment, integration and administration experience of various components of Symantec DLP:

- Symantec Endpoint Protect

- Symantec Web Prevent

- Symantec Email Prevent

- Symantec Enforce

• Must have experience in defining, designing and configuring DLP Policies as per the business requirements;
• Deploy, upgrade and troubleshooting knowledge on Symantec DLP solution;
• Scripting knowledge (Phyton, Regular Expression, Powershell) is desirable;
• Ø Professional Certifications:

- CISSP certified is highly preferred

-Symantec Certified Specialist: Administration of Data Loss Prevention (any version) is highly preferred.

Interested applicants, please email your resume to Shaun Quek Yew Meng

Email: [email protected]

CEI Reg No: R1660732

EA Licence No: 99C4599

• Supporting a range of Cyber Security tools including Exabeam, CarbonBlack, Tripwire, CyberArk, TrendMicro AV, Splunk, DAM, Tenable and RSA.

• Managing designated vendors for the specified Security tools.

• Driving the scheduling of security-related projects and remediation timelines.

• Maintaining, troubleshooting, patching, and updating various security tools and scanners used in MAS.

• Recommending process re-engineering and streamlining to enhance workflows and efficiencies.

• Delivering management reporting and dashboarding to stakeholders, including data and trend analysis, and recommending next steps.

• Following up on remediation actions, security and risk assessments with respective stakeholders and applications teams.

• Conducting daily health check and validating system availability through various monitoring/checks.

• Implementing of the service requests, change requests and support of incident management.

• Fine tuning of rules, updating of contents packs to suit the different use cases in

Interested applicants are invited to apply directly at the NUS Career Portal.

Your application will be processed only if you apply via NUS Career Portal.

Job Purpose

The Institute of Policy Studies (IPS) is a policy research think-tank in the Lee Kuan Yew School of Public Policy, National University of Singapore.

IPS is looking to hire, on a two-year contract, an Executive for its Public Affairs team. The executive will be responsible for creating design artwork for the department.

This will be a great opportunity for anyone interested in public and government relations. The job offers a rare and deep immersion into the details of policy planning and governance.

Job Description

• To design artwork for promotion of IPS events.
• To conceptualise infographics and other content for promotion of IPS research and podcasts.
• To design book covers and other publication materials.
• Assist to develop content strategy and meaningful content to engage stakeholders through social media engagement and website
• Assist in reporting to stakeholders
• Produce IPS collaterals and manage vendors
• Upholding of editorial governance such that content is consistent with the Institute’s brand voice, style and tone

Qualifications

• Proven graphic designing experience
• Strong portfolio of illustration and other graphics
• Degree in Design, Fine Arts or related field is a plus
• Familiarity with design software and technologies (such as InDesign, Illustrator, Dreamweaver, Photoshop)
• Possess knowledge of motion graphic and video editing skills.
• HTML knowledge a plus.
• Working knowledge of social media platforms
• A keen eye for aesthetics and details
• Highly motivated, resourceful, meticulous and able to multi-task
• Possess strong tenacity, flexibility and resourcefulness to clear roadblocks and maturity to manage stakeholders, external agencies and partner
• Ability to work methodically and meet deadliness

To Apply

Please upload your cover letter and curriculum vitae via NUS Career Page.

Your CV should include details such as your highest qualifications, last drawn salary, expected salary and reasons for leaving your last/current position. Please also state when you expect to be able to begin work if this position is offered to you.

(We thank all applicants for their interest; however, only shortlisted candidates will be contacted for an interview.)

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions are developed and designed with security inbuilt.

Key Responsibilities

• Provide security consultancy, technical guidance, expertise, solutions, and education for the enterprise.

• Advise IT application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

• Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

• Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

• Advise and review security by design concepts in Cloud platforms such as GCP, AWS or Azure Cloud.

• Advise and review the compliance of integrating security tools and processes into the DevOps pipelines.

• Advice and review the adherence to security requirements for low code platforms.

• Perform threat modeling on security-critical applications. Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews, and audits to ensure security assurance is achieved.

• Manage individual project priorities, deadlines, and deliverables. Any relevant ad-hoc duties.

• Review RFP proposal compliance with security requirements.

• This is an individual contributor role. Strong communication skills are required.

• Note: You could be posted to any subsidiary in the SIA Group.

Requirements

• Degree in IT or related fields, with at least 7 years in information security, especially in the application security space.

• Professional security certifications (CISSP, CSSLP, CEH, CCSP, etc.) preferred.

• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

• Strong in-depth working knowledge of secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), and Software Composition Analysis (SCA).

• Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud platforms, such as AWS and GCP. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

• Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods, etc. Any prior vulnerability management experience is preferred.

• Strong understanding of technologies such as WAF, Anti Bot Protection

• Prior experience in application development and knowledge of the DevOps platform is desired.

• Strong oral, written, presentation and interpersonal skills.

• Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

• Able to work independently and in a team-oriented, collaborative environment.

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span industries and geographical regions; and our focus is to engage in the dynamics of our customers’ vertical markets; including financial services, TMT (telecommunications, media and technology), education, healthcare, retail, government, manufacturing and professional services, and apply the skills of our 6,500 employees in modernising key digital pillars; data centre and cloud services, security and network infrastructure, workspace communications and collaboration, data and information strategies, and IT operation modernisation.

We are the advocates for our customers for some of the world’s leading technology companies including Cisco, HPE, IBM, CA Technologies, NetApp, Microsoft, Oracle, VMware and ServiceNow.

The Logicalis Group has annualised revenues of $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4.3 billion.

Job summary:

Role Description:

• Lead customer project delivery engagements by providing design and solution consultancy for large scale solutions and complex issues, related to data centre networking & security
• Consult and work with customers to plan, design, install, configure, integrate and/or optimize the solution & services to accelerate business outcomes.
• Translate business requirements into data centre networking solution design. Drives customer technology transitions, influencing solution architectures and services.
• Participate in services presales activities which include helping create statement of work, scoping of efforts, propose right services & solutions, articulate the value and expertise of the Logicalis’ professional services as part of a comprehensive outcome-based solution.
• Conceptualize (Customer Requirements Document), plan (Implementation Strategy Plan), design (High & Low Level Design) and advise cross-functional teams across multiple technical, operational and enterprise architecture domains.
• Provides leadership capabilities and insight for creation and sharing of best practices to improve service quality and efficiency.
• Provides technical expertise and escalation support in resolving technical problems within the professional services team
• Mentor and develop junior network engineers
• Create and deliver training and/or mentorship programs for technical resources within the professional services organization.
• Partner with the presales team to improve the quality and accuracy of the Scope of Work and cost estimates

Requirements:

• Degree in Computing or Engineering discipline • CCIE (Routing & Switching) and/or CCIE (Data Centre) • At least 10 years’ experience in project deployment for complex network infrastructure for data centre/cloud and campus, including at least 3 years in a solution architect role
• Advanced knowledge of Software Delivered Data Centres in general and Software Delivered Networks in particular.
• Should have acumen for emerging technologies in the networking world.
• Advanced skills about data centre networks and protocols (Unicast, Multicast, Anycast).
• Advanced skills in network protocols: IP, TCP, UDP, and other common protocols.
• Advanced skills in network routing protocols: IGP and EGP like OSPF, IS-IS, BGP and others.
• Advanced skills in Ethernet fabric technologies: Fabric Path, Cisco ACI and EVPN VXLAN
• Advanced skills in software defined networks especially for Cisco ACI and/or VMware NSX-T/V
• Advanced skills on how to implement network protocols within a Cisco Nexus network.
• Advanced skills in analyze network problems via wireshark or any other tool set.
• Advanced skills in network services like IPAM, DNS, SMTP, NTP, Load Balancing and others.
• Advanced skills in how to integration various systems inside a data centre
• Advanced skills in designing, implementing & migrating data centre firewalls/IPS/IDS
• Intermediate skills in project management (waterfall & agile) and supplier management.
• Basic skills in physical cable management systems, optics, fibres and data centre facility.
• Basic skills in data centre facility architectures and setups
• Customer satisfaction is your focus and accordingly you have a strong service mentality
• Flexibility and willingness to learn new technologies, scale quickly and adapt situationally to different requirements
• Excellent analytical skills and problem solver mentality
• Creative thinking in designing and implementing service improvements
• Deep experience in customer handling and stakeholder management.
• Ability to handle escalations, be a trusted advisor for the customer and work closely with customers in defining solutions

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span industries and geographical regions; and our focus is to engage in the dynamics of our customers’ vertical markets; including financial services, TMT (telecommunications, media and technology), education, healthcare, retail, government, manufacturing and professional services, and apply the skills of our 6,500 employees in modernising key digital pillars; data centre and cloud services, security and network infrastructure, workspace communications and collaboration, data and information strategies, and IT operation modernisation.

We are the advocates for our customers for some of the world’s leading technology companies including Cisco, HPE, IBM, CA Technologies, NetApp, Microsoft, Oracle, VMware and ServiceNow.

The Logicalis Group has annualised revenues of $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4.3 billion.

Job summary:

We are currently looking for a Cyber Security Engineer to join our Professional Services Team delivering Security Projects encompassing predominantly NAC, Firewall, PS and 2FA solutions.

Qualified candidate is expected to have hands-on experience in delivering such solutions. This role presents itself with considerable learning opportunities on the state-of-the art security technologies. And based out of our Singapore office, this role would be reporting to the Technical Manager (Cyber Security).

1.0 Job Responsibilities:

· Develop low level design document for the project delivery detailing the scope with the sensible technology write up.

· Participate in Internal/Customer meetings to develop the LLD document

· Strong understanding with hands-on experience of multiple NAC solutions using Radius Protocol and device admin with Tacacs Protocol

· Understanding of Windows Active Directory and Integration with NAC Solutions

· Proficient with hands-on experience delivering Firewall migrations and tuning Firewall/IPS policies.

· Ability to deliver 2FA Solutions for specific use case requirements

· Proactively participate in maintaining internal knowledgebase sharing technical findings within the Team

2.0 Required Qualifications:

Essential:

· Network Access Control (dot1x) experience of HPE ClearPass, Cisco ISE

· Firewall Migration expertise across multi-vendor platforms- Cisco ASA/FTD, Palo Alto, Fortigate, Checkpoint

· Hands on experience Cisco FirePower NGIPS

· Basic understanding of Networking – Routing and Switching Protocols

· Ability to manage small scale project and ensure completion within the projected timeline

· Build Customer relationship to manage the projects in a congenial way

· Team Player highly spirited, sharing project experience with peers

· Able to learn and adopt new skills when projects warrant based on the relevant training provided

Desirable:

· Hands on experience RSA SecureID, Cisco DUO 2FA

· Hands on experience deploying in Cloud platform (i.e. AWS, Azure) is preferred

· Knowledge of CyberArk, WAF and Database Firewall is preferred

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span across industries such as financial services, TMT (Telecommunications, Media and Technology), Education, Healthcare, Retail, Government, Manufacturing and Professional services. Our focus is to engage in the dynamics of our customers’ vertical markets and apply the skills of our employees in modernising key digital pillars, Data centres and Cloud services, Security and Network Infrastructure, Workspace communications and collaboration, Data and information strategies, and IT operations modernisation.

Logicalis Group has an annualised revenue of over $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4 billion.

As we continue to grow as a business, our people are our key differentiator with our competitors, and developing and retaining our talent is a key priority for all of our businesses. We will recommend that you watch this short video with input from our employees around the world.

Logicalis - A Great Place to Work

Job Summary:

We are currently looking for a Senior Security Project Engineer to join our Professional Services Team delivering Security Projects encompassing predominantly NAC, Firewall, PS and MFA solutions. Qualified candidate is expected to have hands-on experience in delivering such solutions. This role presents itself with considerable learning opportunities on the state-of-the art security technologies.

Accountabilities:

· Develop low level design document for the project delivery detailing the scope with the sensible technology write up.

· Participate in Internal/Customer meetings to develop the LLD document.

· In-depth technical knowledge and good working experience in implementing and supporting Cisco ISE and HPE Aruba ClearPass NAC solutions.

· Prepare UAT document and perform UAT as per document.

· Understanding of Windows Active Directory and Integration with NAC Solutions

· Proficient with hands-on experience delivering Firewall migrations and fine-tuning Firewall/IPS policies.

· Ability to deliver MFA Solutions for specific use case requirements.

· Assist in reviewing Technical Design Specifications (TDS) document for security projects

· Proactively participate in maintaining internal knowledgebase sharing technical findings within the Team.

The Individual and their Experience:

· Network Access Control (dot1x) experience of Cisco ISE and HPE Aruba ClearPass (Mandatory).

· Firewall Migration expertise across multi-vendor platforms- Cisco ASA/FTD, Palo Alto, Fortigate, Checkpoint.

· Hands on experience Cisco FirePower NGIPS.

· Basic understanding of Networking – Routing and Switching Protocols.

· Ability to manage medium to large size project and ensure completion within the projected timeline.

· Build customer relationship to manage the projects in a congenial way.

· Team Player highly spirited, sharing project experience with peers.

· Able to learn and adopt new skills when projects warrant based on the relevant training provided.

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Who we are

Crédit Agricole Corporate and Investment Banking (Crédit Agricole CIB) is the corporate and investment banking arm of Crédit Agricole Group, world’s 10th largest bank by total assets.

Our Singapore center (“ISAP” or “Information Systems Asia Pacific”) is the 2nd largest IT setup (after Paris Head Office) for Crédit Agricole CIB's worldwide business. We work daily with international branches located in 30 markets by:

· Envisioning and preparing the Bank’s futures information systems

· Partnering and supporting core banking flagships and transverse areas in their large scale development projects

· Providing premium In-house Banking applications

This unique positioning empowers us to bring our core banking business a sustainable competitive advantage on the market.

We seek innovative and agile people sharing our mindset to support ambitious and forthcoming technological challenges.

Position

Computer Security Incident Response Team Expert (CSIRT Expert)

CSIRT Expert is a technical expert role within the Asia Information System Security (ISS) Team, Singapore, functionally aligned to Group’s ISS CSIRT team in Head Office, France.

ASIA ISS team oversees and supervise the Information System Security related matters in the region, including cybersecurity monitoring (SOC), incident response (CSIRT) and responding to each country's regulation proactively.

The ASIA ISS CSIRT oversees detection, control and reporting of cyber incidents when it occurs and work closely with IT Operations team to recover and restore the systems that are affected by the security incident.

In this role, CSIRT Expert role will be responsible for respondingand managing end to end Security Incident Management Lifecycle: Incident Identification, Triage, Containment, Eradication, Recovery and Lesson Learnt. Person will be technical point of contact to respond and drive the security incidents response in the region.

Job Responsibilities

The Expert has a wide spectrum of responsibilities and will be responsible for following activities (but not limited to) in day-to-day work:

• Identifying and detecting Incidents and taking immediate action on security incidents including (and not limited to) DoS attacks, malware attacks, phishing attacks, web attacks;
• End to end ownership in driving and leading Security Incident Response and Resolution activities;
• Participate and support performing forensics investigations as required to respond to the Security Incidents;
• Responding to Security Threats and Intelligence alerts & notifications from Group CERT, Regional Regulators and authorized Threat Intelligence groups and ensuring appropriate preventive and detective actions are coordinated and deployed in liaison with IT Operations teams as per the defined approach and in timely manner;
• Owning end to end coordination, communications and deployment of action plans for Threat Advisories or lesson learnt from Security Incidents;
• Prepare detailed Incident Post-mortem report and Executive Summary to document the Security Incident chronology, root cause, remediation and lesson learnt;
• Creating and updating the incident response plan (IRP) and playbooks and ensuring periodical review of playbooks to ensure the relevancy of response actions in current context, including updated information of all stakeholders involved;
• Collaborate with other Geo’s CSIRT team members on security matters and act as a backup to manage security incident and other security activities in scope as needed;
• Periodic review of security measures of Networks (Switches. Routers, Firewall, IPS, etc.) and Systems (Win*,*NIX, etc.) in support of management of vulnerabilities;
• Support and integrate with incident response, threat intelligence, and overall security strategy as needed;
• Complete all mandatory trainings as required to attain and maintain competence;
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer, zone wide.
• Support and run annual “table-top incidents” exercise with management.
• Vulnerability management: Ensure vulnerability remediation process is known followed and at the expected level of performance
• In case of severe security incident (suspected or effective attack): Coordination of investigation, mitigation, and remediation operation in relation with IT operation and application teams. on exceptional basis as occurred.

Work Schedule

• Work Hours: 8.45a.m. to 6. 30p.m (Monday to Friday) with one-hour lunch break.
• CSIRT team globally follows ‘follow-the-sun’ model and work on Critical incidents from other geographies during Asia business hours;
• Additionally, candidate may need to be involved in Crisis level Critical Security Incidents observed outside of Singapore working hours on exceptional basis.

Qualification Requirements

• Bachelors graduate or equivalent technical degree in Information Technology or Computer Science;
• Must have minimum 10 years of experience in ITand 5-7 years of working experience in cyber security incident response role managing Security Incidents and performing log analysis and forensic analysis for an enterprise level environment;
• Working experience in financial organisation is preferred;
• Expertise in SIEM and SOC Processes;
• Strong functional knowledge of enterprise level Security Detection and Prevention technologies e.g. Firewalls, IPS/IDS, Network Packet Analysis and Endpoint log analysis, server log analysis, SIEMs, Vulnerability Scanning tools, Threat intel, Anti-Malware, Phishing Prevention and Endpoint Detection & Response (EDR); Scripting knowledge using Python, Perl, PowerShell;
• Must have strong understanding of different domains of IT Security cyber kill chain, IOCs, and attack frameworks
• Ability to apply risk based approach while working on assigned responsibilities;
• Excellent in analytical and problem-solving skills, communication and documentation skills;
• Ability to work independently andpriories work as well as a part of team with minimal supervision;
• Demonstrate Strong sense of responsibility and initiative with excellent communication and interpersonal skillstime management skills;
• Excellent written and oral English language skills;

Professional Certifications:

• Must have at least one of the certifications in regards to IR (Incident First Responder) e.g. GCIH, E | CIH

• Position :Service Technician(CCTV/Security System)
• Location : Islandswide- Office in Outram
• Working hours : 5 days work week;(8.30am, -6.00pm)
• Salary (commensurate with experience) : Up to $4200 gross ($3500Basic +Transport allowance $400-$750) AWS + Overtime + Performance Bonus + $60 Mobile reimbursement + Birthday leave + Health insurance + allowance
• Duration : Permanent
• Industry : Security system

Main Responsibilities:

• Execution of service and maintenance workflow.
• Liaise closely with client representatives on all service/maintenance related issues.
• Mentor a team of service team members.
• Assisting the supervisor in employing teams on service deliveries and distribute responsibilities.
• Manage day-to-day client interactions and expectations for optimal results.
• Provide support to supervisor in ensuring the timely delivery and completion of troubleshoot and service/maintenance of security systems at clients’ premises.
• Familiarise yourself and deliver customer satisfaction base on each client's business, organization and objectives.
• Ensure that works carried out are in compliance with the Workplace Safety and Health Act.
• Perform any other technical tasks as and when required.

Requirements:

• Min Nitec in Electrical/Electronic Engineering with at least 2 years working experience.
• Knowledge and hands-on experience in security systems such as Integrated Security Management Systems, Card Access Control Systems, Intrusion Detection Systems and CCTV systems is a must.
• Knowledge in IT/Network/Server is an added advantage.
• Independent, self-motivated individual whom is able to work under minimum supervision.

Email me at [email protected]

Do visit www.searchpersonnel.com.sg for more job listings.

***We do not charge our candidates any referral fee nor bind them with any contract.***

Joie Chang

Deputy Consulting Director

Reg no.: R2090601 | EA No: 13C6684

Job Description:

• Participate in implementing Secure Software Development Life Cycle (SDLC), produce security solutions and security test reports, provide advice in patching vulnerabilities, and follow up with risk mitigation
• Evaluate the risk points of common application frameworks and develop security solutions to provide security support for each business line
• Embed security principles into the design of system architectures to mitigate the risks posed by new technologies and business practices
• Design artifacts, spanning design, development and implementation, into enterprise systems that describe security principles and how they relate to the overall enterprise system architecture
• Perform routine activities related to the periodic review and audit activities of infrastructure security systems

Requirements:

• Bachelor’s degree or higher in Computer Science, Information Technology, Programming & Systems Analysis, Engineering, or other related fields
• Minimum 3 years of work experience in cybersecurity-related positions
• Familiar with OWASP TOP 10 vulnerabilities, and have a deep understanding of the principle, utilization, patching and reinforcement of various vulnerabilities
• Familiar with the enterprise's SDLC process implementation, building secure SDLC for IT companies, and have been in-charge of secure SDLC for a large dev team
• Familiar with black box testing methods and paths, and able to independently complete source code auditing work
• Hands-on experience in security design checklist
• Familiar with at least one programming language such as Java, Python, PHP, Go, C, etc, and proficient in reading design documents and related codes

Preferred Experience

• Having been credited to high-risk CVEs for well-known projects
• Having contributed to the development of open-source projects. Experience working in team collaborative development and familiar with development tools
• Fluent English communication skills for effective collaboration with multinational teams

Job description

• Troubleshooting security and network problems.
• Perform vulnerability assessment using automated tools and recommend actionable follow up to remediate the vulnerabilities and/or threats uncovered.
• Provide maintenance support for security systems and tools, including firewalls and other security technologies, as per the maintenance contract requirements.
• Perform system upgrades, patches, and backups to ensure the security systems are up-to-date and running efficiently.
• Provide incident response support, troubleshoot security incidents, and work closely with end users to resolve issues in a timely resolution.
• Proactivity monitoring, support and troubleshoot network bandwidth capacity and network performance to ensure uninterrupted services.
• Manage and maintain Cisco ISE for network access control and policy enforcement.
• Coordinate and manage local and regional ISP on maintenance, changes, and implementation of WAN (SD_WAN).
• Report network operational status by gathering and prioritizing information and managing network projects.

Requirements

• Diploma or Degree in IT or Computer Science
• Min 4 years of relevant experience in IT Infrastructure and Operations Automation Experience
• Knowledge of regulatory requirements and security compliance standards relevant to network infrastructure.
• Professional Certification and at least 4 years’ hands on experience in routing & switching - good to have CCNP.
• Professional Certification and at least 4 years’ hands on experience in network security - good to have PCNSE (Palo Alto).
• Professional Certifications and at least 2 years hands on experience in Cyber security and optional CEH, SSCP, ISC2, Microsoft Security Fundamentals (good to have)
• Any relevant Microsoft cloud security certifications (AZ-500, MS-101, MS-500)
• Good Understanding of network and security fundamentals (Concepts, Protocols. Troubleshoots).
• Experience with Windows Defender Advanced Threat Protection and latest Microsoft E5 Security Product set
• Experience in testing and evaluating Security products in a Lab environment.
• Ability to manage multiple priorities and work independently.
• Positive and professional working attitude, ability to work as a team or individual under stress with minimum supervision and deliver on tight deadlines in fast-paced environment.
• Hands on experience in one or more of the following technologies as below:
• Routing/Switching – Cisco, Meraki
• Network Security – Cisco ISE
• Firewalls/Proxy – Palo Alto, Cisco, Zscaler
• WAN – VeloCloud
• Cloud - Azure

Interested applicants are invited to apply directly at the NUS Career Portal.

Your application will be processed only if you apply via NUS Career Portal.

We regret that only shortlisted candidates will be notified.

Job Description

Research Assistant

We are recruiting a full-time Research Assistant to support the Principal Investigator, Associate Professor Natasha Howard, in the implementation and administration of research projects in the areas of health equity, infectious disease control, and global health.

Responsibilities:
The research assistant will focus on research and administration in infectious disease control policy and health system strengthening in the Asia region. This will include:
• Supporting qualitative and quantitative research, including contributing to design, implementation, analysis, and write-up of journal manuscripts and reports/policy outputs.
• Project management and administration for multiple research projects, including ethics review applications to NUS IRB and study country review boards, donor reporting, and liaison with relevant teams in NUS SPH and internationally.
• Assisting the PI in other day-to-day tasks as required.

Requirements:
• At least a Bachelor’s Degree in a relevant subject area.
• Excellent academic writing and communication skills in English.
• Experience of successfully managing multiple tasks concurrently.
• Strong qualitative and/or quantitative research skills and experience, including at least some experience with conducting or analysing semi-structured interviews, and capacity/interest to learn social science methodology.
• Highly organized and able to work effectively under pressure, use independent judgement, produce high-quality quality work, and problem solve within time constraints.
• Able to work independently as well as with a team.

Desirable:
• Degree or relevant experience using social science methodology.
• Experience with Atlas.ai/NVivo and R or similar, and capacity/interest to learn.
• Experience of research in global health and/or health policy and systems.

Only Singaporeans/SPRs/residents with existing right to work in the country may apply for this position.

Recruitment is open immediately and will continue until the position is filled.

Applicants should send the following documents during the job application:
1. Cover letter highlighting career goals and relevant experience
2. Curriculum Vitae, containing details of three named referees

Who Are We?

At HoYoverse, we are committed to creating immersive virtual world experiences for players around the world. In addition to game products such as Genshin Impact, Honkai Impact 3rd, Tears of Themis, and Honkai: Star Rail, HoYoverse also launched the dynamic desktop software N0va Desktop, the community product HoYoLAB, and created a variety of products such as animations, comics, music, novels, and merchandise around our original creative concept.

Adhering to our mission of Tech Otakus Save the World, we have always been committed to technology research and development, exploring cutting-edge technologies, and have accumulated leading technical capabilities in cartoon rendering, artificial intelligence, cloud gaming technology, and other fields.

HoYoverse is actively engaged in globalization, with offices in Singapore, Montreal, Los Angeles, Tokyo, Seoul, and other areas.

When you apply to a position with HoYoverse, we will process your personal data. To learn more about how we process your data, we encourage you to review our comprehensive Global Applicant and Candidate Privacy Policy. This policy provides detailed insights into how your information is collected, used, and protected throughout the application process.

What You Will Do:

• Responsible for the security operations of EDR, HIDS, email sandbox and other security devices in HoYoverse office, and participate in the operation of internal user portraits, internal risk identification and other operations.
• Participate in the construction of HoYoverse global security office network and the development of the office network's automated operation platform projects.

What We Are Looking For:

• Have certain experience in internal network security or penetration testing, and have a comprehensive knowledge of information security.
• Solid foundation in basic knowledge, familiar with security vulnerability principles, operating system principles, computer networks, data structures and other basic knowledge.
• Proficient in one programming language (Golang, Java, Python, C/C++), strong hands-on ability, and able to independently complete the development tasks of a module.
• Students with experience in security terminal confrontation, anti-virus bypass, driver development and system security research are preferred.

We are an equal opportunity employer that believes diverse backgrounds are key to bringing our concepts to life. If you're looking to play a key role in creating the best immersive virtual world experience for our users, we invite you to join our team.