Implement security operations strategy

• Contribute to the definition of the overall security strategy

• Align security operations functions with the organisation’s overall business objectives

• Advise senior leaders on critical issues that may affect corporate security objectives

• Advise the design and implementation of security policy and controls

• Provide expertise on security technologies and innovative security concepts

• Provide technical and operational oversight for security tool deployment and implementation

Operate/Monitor security systems

• Develop plans for operating/monitoring security systems (e.g. endpoint security tools, firewalls, etc)

• Guide the identification and measurement of critical security operations metrics

• Develop detection and alerting rules

• Review/approve firewall rules

• Review/approve changes on AV systems

• Monitor levels of service of the security operations

• Present periodic status reports to management

Security planning, review & compliance

• Coordinate ongoing reviews of existing security programs/protocols and planned upgrades

• Monitor compliance to security policies, regulations, rules and norms

• Participate in reviews/gap analysis of posture and compliance and follow-up with proposed treatment plan

• Authorised/Unauthorised software installation reviews

• Drive continuous improvement of security operations

Respond to security incidents

• Set internal guidelines for effective processing and escalation of incidents

• Review reports on incidents and breaches

• Develop contingency and disaster recovery plans for specific security incidents

• Coordinate prioritisation of alarms and resources for incident responses

• Oversee the development of emergency protocols

• Recommend systems and procedures for the prevention, detection, containment and correction of security breaches

• At least 15 years' of experience in IT Security

• Strong knowledge and experience in End User Computing, Server, Network and Security spaces

• Strong experience in supporting Windows, Linux, Vulnerability scanning tools, Firewalls and WAF

• Preferable experience in cloud-native security platforms and offerings from AWS or Azure

• Knowledge of patch management for OS and security products (Firewalls, Windows, Linux)

• Strong knowledge of endpoint security tools

• Preferred Knowledge of vulnerability assessment tools and techniques

• Preferred knowledge in conducting risk assessments

• Preferred Security/ITIL/Vendor certifications including but not limited to: (Fortinet NSE4, CISSP, CCSP, CEH, ITIL, CCNA-Security)

The candidate is part of the Data Loss Prevention (DLP) project and operation team. He/she will be reporting to the DLP Team Lead and be assigned with project and operational work and responsibilities which includes but not limited to, processing requests, investigate operational issues and facilitate security investigation by providing the necessary information in accordance with approved policy and procedures as well as process improvement.

• Diploma/Degree in Computer Science, Engineering or equivalent
• At least 5-6 years of experience in IT Incident Management, DLP Operations or SOC
• Good team player as well as strong communications skills
• Strong analytical skills and ability to work independently

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions (both applications and infrastructure) are developed and designed with security inbuilt.

Key Responsibilities

•Provide security consultancy, technical guidance, expertise, solutioning and education for en-terprise.

•Advise application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

•Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

•Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

•Perform threat modelling on security critical applications. Keep up to date on emerging secu-rity threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews and audits to ensure security assurance is achieved.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables. This is an individual contributor role. Strong communication skills.

Requirements

•Degree in IT or related fields, with at least 5 years in information security, especially in the application security space.

•Professional security certifications (CISSP, CSSLP, CEH, CCSP etc) preferred.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.

•Strong in-depth working knowledge in secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), Software Compo-sition Analysis (SCA).

•Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud technolo-gies. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

•Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc. Any prior vulnerability management experience preferred.

•Strong oral, written, presentation and inter-personal skills.

•Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

Responsibilities:

1. Personal Protection: Safeguard the client from potential physical threats, such as attacks, harassment, or kidnapping. This involves being vigilant and ready to react swiftly in dangerous situations.
2. Risk Assessment: Constantly assess environments for potential dangers, including venues, travel routes, and public spaces, ensuring all security risks are minimized before the client arrives.
3. Surveillance and Monitoring: Maintain close observation of surroundings and crowds, using specialized equipment if necessary to detect any suspicious activities or individuals.
4. Planning and Coordination: Develop detailed security plans, including exit strategies and emergency protocols. Coordinate with local authorities, security staff, or other team members to ensure seamless protection.
5. Travel and Escort: Accompany clients during travel, whether it's by car, airplane, or public transport, ensuring the client’s safety from departure to arrival.
6. Confidentiality and Discretion: Maintain confidentiality about the client’s personal and professional affairs. A high level of professionalism and discretion is crucial.
7. Crisis Management: Be trained in first aid and emergency response procedures, able to manage unexpected incidents and provide immediate assistance in emergencies.
8. Physical Defense: Be skilled in hand-to-hand combat, firearms, or other self-defense techniques, prepared to neutralize threats if necessary.

If you are interested, kindly apply through mycareersfuture.

I regret to share that only shortlisted candidates will be notified.

www.dadaconsultants.com

EA Registration Number: R21100604

Data provided is for recruitment purposes only

Business Registration Number: 201735941W.

Licence Number: 18S9037

Job Description
You will be a member of the Group Information Security Team responsible for initiating, implementing and maintaining security products and solutions to support enterprise security.

Key Responsibilities

• Subject matter expert (SME) for the security systems owned by the Information Security Team.
• Ensure security systems are utilised to their maximum capabilities.
• Plan, identify, assess, design, operationalise and maintain multiple security related software and/or hardware.
• Recommend and drive cyber security solution and initiatives to improve cyber security of the organisation.
• Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
• Provide security consultancy, technical guidance, expertise, solutioning and education.
• Advise infrastructure teams on security design that is relevant and fit for purpose.
• Identify and assess cyber risks in the IT infrastructure environment.
• Review firewall requests.
• Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.
• Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables.
• This is an individual contributor role. Deliver tasks with minimal supervision.
• Strong communication skills.

Requirements

• Degree in IT or related field, with at least 5 years in information security, especially in the application security space.
• Professional security certifications (CISSP, CSSLP, CEH etc) preferred.
• Experience in security products POC and RFQ.
• Prior experience in implementing and maintaining any of tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM etc. and/or network security. Able to review firewall requests.
• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.
• Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience preferred.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc.
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Job Description

You will be a member of the Group Information Security Team responsible for ensuring corporate applications, systems, networks, and digital assets are adequately protected and mitigated against cyber threats and risks. You will help drive cybersecurity and risk management efforts and user awareness and education within the Singapore Airlines Group.

Key Responsibilities include:

• Provide cyber governance and risk management oversight.
• Manage the security policy framework and relevant standards.
• Oversee applicable security, regulatory, privacy, contractual cyber requirements.
• Manage cyber risk analysis and self-assessments program for various information services, systems, processes and recognized industry standards.
• Conduct risk assessments, document results, and propose and track remediation tasks.
• Develop compliance program top routinely assess existing infrastructure, systems, and applications for compliance and vulnerabilities and propose relevant mitigating controls.
• Conduct vulnerability assessments and track remediation status of identified vulnerabilities.
• Identify and assess cyber risks and recommend and drive cyber security solution and initiatives to improve cyber security posture.
• Define controls to meet regulatory, legislative, and industry specific compliance requirements.
• Manage third party cyber risk assessment standards.
• Prepare IT security related KPI reports and management reports for compliance monitoring and reporting.
• Drive the implementation of GRC tool.
• Maintain user cyber awareness and provide security advisory on emerging security threats and vulnerabilities.
• Develop, review and continuously improve IT security training material and conduct user training to improve user awareness and incident response readiness.
• This role may be seconded to any of SIA’s subsidiary group

Requirements

• Degree in IT or related fields, with 4-5 years relevant information security working experience, especially in the application security space.
• Professional security certifications (CISSP, CISA, CEH etc) preferred.
• Experience with Governance, Risk and Compliance (GRC) activities.
• Familiar with PCI, PDPA, GDPR requirements
• Experience in security technologies, practices, application/network/systems architecture and design, tests tools and processes.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Whether you’re at the start of your career or looking to discover your next adventure, your story begins here. At Citi, you’ll have the opportunity to expand your skills and make a difference at one of the world’s most global banks. We’re fully committed to supporting your growth and development from the start with extensive on-the-job training and exposure to senior leaders, as well as more traditional learning. You’ll also have the chance to give back and make a positive impact where we live and work through volunteerism.

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do. We keep the bank safe and provide the technical tools our workers need to be successful. We design our digital architecture and ensure our platforms provide a first-class customer experience. Our operations teams manage risk, resources, and program management. We focus on enterprise resiliency and business continuity. We develop, coordinate, and execute strategic operational plans. Essentially, Enterprise Operations & Technology re-engineers client and partner processes to deliver excellence through secure, reliable, and controlled services.

Trust is part of our DNA at Citi. As such, we take safeguarding our customer data very seriously. The Chief Information Security Office (CISO) is made up of deeply dedicated and talented colleagues who work together to ensure the safety of Citi’s and our clients’ assets and information. We manage information security as an end-to-end program – one with a clear mandate and accountability. Our mission is to continually execute and enhance a global security program that is fully anchored to modern control and security frameworks, fully aligned with the technology of the firm, threat-focused and data-driven, and deeply integrated across all Citi businesses globally.

Being talent-driven, we are focused on attracting, developing, and retaining diverse and inclusive talent with a high technical skill level. As a member of our team we will provide you with career development opportunities at all stages of your career. Our employees model a passion for protecting Citi and our clients and believe in treating others with dignity and respect.

Citi Infrastructure Defense/ Perimeter Security Services/Perimeter Reliability Engineering

Our commitment to diversity includes a workforce that represents the clients we serve globally from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.

Citi Infrastructure Defense, Perimeter Reliability Engineering is a network security subject matter expert team responsible for troubleshooting complex connectivity issues and outages often involving multiple support teams and improving network visibility and resiliency.

Responsibilities:

• Produce high quality documentation, schematics and presentation materials as needed
• Collaborate on initiatives toward reducing security risk for applications and network connectivity with third parties for countries in scope of Complex Operating Geographies (COG)
• Provide individual leadership in the realm of troubleshooting major incidents and problem management
• Troubleshoot complex networconnectivity issues and outages
• Adhere to corporate and Information Security and other functional standards and controls

Qualifications:

• Network knowledge of routing, switching and wide area networking with understanding of industry standard command line syntax, inclusive of modern network virtualization concepts to a professional level proficiency
  A hands-on practical familiarity with Network Security capabilities including:
• Firewalls, ACL’s, intrusion detection, proxies, vulnerability scanning, DNS, DDoS mitigation, SIEM platforms
• Experience with scripting preferably in Python
• Knowledge of Prometheus and Grafana

Critical Competencies:

Relevant Certifications: Fortinet, Check Point, Palo Alto firewalls. CISSP or CCNA/CCNP as a plus.

Education Level Required: Bachelor's Degree in Computer Science, Information Systems or related fields preferred.

Years of Related Experience: 6+

Working at Citi is far more than just a job. A career with us means joining a family of more than 230,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Take the next step in your career, apply for this role at Citi today

https://jobs.citi.com/dei

The PR Account Executive (AE) will be responsible for assisting in executing all aspects of account work within their dedicated practice, as well as performing ad-hoc administrative assignments as needed for the benefit of the clients and the agency. The AE plays a critical within their practice by supporting the PR team in creating content, media pitching and client relationship management. This is a role with growth opportunity and suited for PR professionals looking to take the next step up from support work to potentially managing their own accounts.

Responsibilities:

• Develops and maintains productive relationships with clients, as well as with the editors, reporters, bloggers and influencers with whom he/she will regularly interact
• Demonstrates excellent judgment and ability to solve problems on his/her own. He/she will learn to help develop public relations strategies and coordinate team efforts to implement them
• Possesses excellent writing and editing skills. The AE will be developing all manner of content for media pitching, including pitch letters, press releases, byline articles, specification sheets and media announcements. In addition, the AE will also help to develop client-related materials such as briefing books, program reports and memos.
• Works with account supervisor to develop and implement program strategies and assist in the writing of public relations plans and conducting media/blogger “pitching.”
• Conducts research, including measuring public relations, integrated marketing, which includes, among other tasks, compiling press clips, writing media placement and digital analytics reports
• Plans conduct or supervise the media/blogger relations tasks including pitching efforts, follow-up contact, reporting, campaign fulfilment, etc.
• Assists on administrative assignments for the firm as necessary and as time permits

Requirements:

Degree in Communications/Marketing/Public Relations/Integrated Marketing

OR

Minimum 1 year of professional public relations, social media experience or other comms-related roles preferably within an agency environment

• Must be proficient in using the Microsoft Office suite of products, as well as other internet tools and technologies such as Gmail and file-sharing platforms; internet research and PowerPoint skills are a must
• Excellent media relations skills
• Excellent writer
• Proven digital media expertise
• Creative, strategic thinker
• Strong initiative, leadership skills and work ethic
• Strong attention to detail
• Excellent communicator
• Ability to work independently and multi-task in a team-oriented environment

Working Hours: Monday to Friday (9.30 am - 6 pm)

Knowledge in Technology/Fintech/Blockchain sectors will be preferred

Only shortlisted candidates will be notified

The PR Senior Account Executive (SAE) will be responsible for assisting in executing all aspects of account work within their dedicated practice, as well as performing ad-hoc administrative assignments as needed for the benefit of the clients and the agency. The SAE plays a critical within their practice by supporting the PR team in creating content, media pitching and client relationship management. This is a role with growth opportunity and suited for PR professionals looking to take the next step up from support work to potentially managing their own accounts.

Responsibilities:

• Develops and maintains productive relationships with clients, as well as with the editors, reporters, bloggers and influencers with whom he/she will regularly interact
• Demonstrates excellent judgment and ability to solve problems on his/her own. He/she will learn to help develop public relations strategies and coordinate team efforts to implement them
• Possesses excellent writing and editing skills. The AE will be developing all manner of content for media pitching, including pitch letters, press releases, byline articles, specification sheets and media announcements. In addition, the AE will also help to develop client-related materials such as briefing books, program reports and memos.
• Works with account supervisor to develop and implement program strategies and assist in the writing of public relations plans and conducting media/blogger “pitching.”
• Conducts research, including measuring public relations, integrated marketing, which includes, among other tasks, compiling press clips, writing media placement and digital analytics reports
• Plans conduct or supervise the media/blogger relations tasks including pitching efforts, follow-up contact, reporting, campaign fulfilment, etc.
• Assists on administrative assignments for the firm as necessary and as time permits

Requirements:

Degree in Communications/Marketing/Public Relations/Integrated Marketing

OR

Minimum 2 years and above of professional public relations, social media experience or other comms-related roles preferably within an agency environment

• Must be proficient in using the Microsoft Office suite of products, as well as other internet tools and technologies such as Gmail and file sharing platforms; internet research and PowerPoint skills are a must
• Excellent media relations skills
• Excellent writer
• Proven digital media expertise
• Creative, strategic thinker
• Strong initiative, leadership skills and work ethic
• Strong attention to detail
• Excellent communicator
• Team management skills
• Ability to work independently and multi-task in a team-oriented environment
• Web 3 knowledge preferred
• Gaming knowledge preferred

Bonus:

Knowledge in Technology/Fintech/Blockchain

Job Type: Full-time

Only shortlisted candidates will be notified

Job Description:

The role is for the position of VP – Network Security Architecture ASO TIS Job function in Singapore. The successful candidate will be part of a growing dynamic regional team that oversees IT design and development of Network Security Solutions In the region.

We are seeking a talented Network Security Architect to join our team. The Network Security Architect will be responsible for designing, implementing, and maintaining the network security infrastructure to ensure the confidentiality, integrity, and availability of our organization's data and systems.

Roles & Responsibilities:

• Work with stakeholders and other teams to ensure Network Security platforms are effectively integrated into the IT infrastructure, both on-premises and cloud workloads.
• Provide technical leadership on Network and Perimeter Security across complex environments and a variety of enterprise systems and applications.
• Engage multiple stakeholders and evaluate related security products or technologies to recommend solution architectures and designs that are regionally viable, scalable and robust to manage and monitor Network Security
• Develop, maintain procedures and standards.
• Ensure compliance with regulatory requirements related to perimeter controls.
• Collaborating with other IT staff to integrate Network Security framework with other security technologies.
• Work closely with the project managers, Security and Compliance personnel, application developers and other administrators in creating functional, scalable, and secure Network Security solutions from design and development through implementation for business clients.

Technical Capabilities

Design and Implement Network Security Solutions:

• Design and implement Network Security solutions to protect the organization's network from unauthorized access and attacks.
• Set up secure access controls to restrict access to sensitive data and systems.
• Review and re-design perimeter security controls

Develop and Maintain Network Security Policies, Standards, and Procedures:

• Develop network security policies that outline the organization's security objectives and requirements.
• Establish security standards and procedures for configuring and managing network security devices.
• Ensure that security policies, standards, and procedures are up to date and align with industry best practices and regulatory requirements.

Contribute into Risk Assessments and Security Audits:

• Participate in regular risk assessments to identify potential security vulnerabilities and threats.
• Contribute to security audits to assess the effectiveness of existing security controls and identify areas for improvement.
• Recommend security enhancements based on the findings of risk assessments and audits.

Collaborate with IT Teams:

• Work closely with IT teams to integrate security controls into network infrastructure and applications.
• Provide guidance on implementing security best practices and standards.
• Collaborate with application developers and system administrators to ensure that security requirements are met.

Enhance Network Traffic Monitoring and Investigate Security Violations:

• Enhance network traffic monitoring to effectively detect signs of security breaches or unauthorized activity.
• Investigate security violations and breaches to determine the cause and extent of the incident.
• Take appropriate actions to mitigate the impact of security incidents and prevent future occurrences.

Provide Technical Guidance and Support:

• Provide technical guidance and support to team on network security best practices.
• Assist in troubleshooting network security issues and implementing solutions to address them.

Stay Updated on Emerging Threats and Security Technologies:

• Stay abreast of emerging threats and security technologies to ensure that the organization's network security posture remains strong.
• Participate in security forums, conferences, and training sessions to stay informed about the latest trends and developments in network security.

Participate in Incident Response and Forensic Investigations:

• Participate in incident response activities to contain and mitigate security incidents.
• Conduct forensic investigations to determine the root cause of security incidents and identify corrective actions.
• Document incident response procedures and lessons learned for future reference.

Develop and Deliver Security Awareness Training : (if needed)

• Develop and deliver security awareness training to educate employees about the importance of network security.
• Train employees on how to recognize and respond to security threats.

Job Requirements:

• Min 15 of years’ experience in Network Security Management domain, with 7 years’ experience with technical security design and development, deployment, support, and maintenance of Security Solutions.
• Experience with design and deployment of Network Security / perimeter security controls/solutions for enterprise.
• Experience with firewall administration, intrusion detection/prevention systems, VPNs, DDOS, WAF, NAC,LBs, Proxies and secure access controls. Experience with product evaluation design and deployment of SASE (components) and micro-segmentation solutions.
• Strong track record of navigating complex organizational structures and managing varied requirements in achieving cohesion & relevance in network security designs.
• Demonstrate a deep understanding of risk and change management, security policies and controls, user account life-cycle management, access controls and management, AAA. Strong understanding of network security concepts, protocols, and technologies.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.

Educational Requirements:

• Bachelor’s or masters’ degree in computer science, Information Technology, or a similar field preferred.
• Knowledge of security standards and frameworks (e.g., NIST Cybersecurity Framework).
• Relevant certifications (e.g., CISSP, CCNP/CCIE Security, CEH or equivalent) a must.

We regret to inform that only shortlisted applicants will be notified.

Job ID: 10067213

Job Description

• Perform day-to-day security operations in the Club.
• Remind and enforce security policies and procedures to members and employees.
• Maintain a safe and secure environment for our members and employees in the Club.
• Oversee car park operations and render assistance where necessary.
• Perform any other related duties as assigned by the management.

Requirements:

• Possess valid Security Officer Licence.
• Physically fit and healthy.
• Friendly and service-oriented personality.
• Positive work attitude, team player, good interpersonal skills and ability to multitask.

Other Information

• 44 hours work week.
• Work location: West Coast Ferry Road (Bus 175 and 176) beside West Coast Park.
• Company transport provided (Clementi MRT Station).
• Meals provided.

Job Description:

• Responsible for day-to-day in-house security functions.

Requirements :

• Secondary education and above
• Have a valid Security Officer License issued by PLRD
• Minimum 1 year of security-related work experience
• Able to work rotating shifts

HOW TO APPLY:

Interested applicants, kindly send your resume in MS WORD format to leo.tang(at)trustrecruit.com.sg

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Tang For Farn (Leo)

EA Personnel Reg No: R24121981

Job Description

You will be a member of the Group Information Security Team responsible for responding to threats and incidents to the corporate networks, systems (on-prem and cloud), and digital assets.

Key Responsibilities:

•Perform security monitoring and incident response activities across the scoot networks, leveraging a variety of tools and techniques.

•Manage Security Operations center.

•Detect incidents through proactive “hunting” across security-relevant data sets.

•Ability to correlate multiple events from different devices to identify abnormal behaviour

•Document incident response analysis activities thoroughly

•Develop new, repeatable methods for finding malicious activities

•Provide recommendations to enhance detection and protection capabilities.

•Effectively present technical topics to both technical and non-technical audiences

•Develop and follow detailed operational processes and procedures to appropriately analyze, escalate, and assist in the remediation of information security incidents

•Prioritize multiple high-priority tasks and formulate responses/recommendations in a fast-paced environment

•Prepare documentation for security technical standards, standard operational procedures, and hardening standards.

•Analyse endpoint, network, and application logs

•Assist other IT teams in security-related issues

•Engage with vendors and parent company SIA team members for security reviews.

Requirements:

•Degree in Computer Engineering, Computer Science, Information Systems, or equivalent qualification.

•At least 5-6 years of experience in Cybersecurity Incident and Security Operations.

•Demonstrate experience in Information Security with a focus on Cyber Security Operations, Incident Response and Detection.

•Experience working in the Security Operations Centre and/or Computer Incident Response Team.

•Excellent problem-solving skills combined with hands-on experience doing root cause analysis and post-incident reviews.

•Solid knowledge of computer networks and common protocols

•Knowledge of prominent cyber threat actors and APT groups.

•Experience with Threat Intelligence Platforms.

•Experience with SIEM (especially Splunk).

•Professional security related qualifications (i.e. GCIA, CISSP etc) will be an advantage

•Preferred certifications: CISSP, CISM, CISA, ISMS, TOGAF, SABS

•Good interpersonal skills

To perform and execute all aspects of in-house legal counsel and company secretary (main or alternate), contracts and procurement management functions of our businesses. You will safeguard our reputation and minimise our exposure to legal, contractual and compliance risks by assuring that the Group and Company comply with laws and statutory requirements in the jurisdictions in which the Group and Company operate, and provide sound and practical legal advice to management and business partners on all relevant matters.

• Provide accurate and timely counsel to executives in a variety of legal, contractual and procurement topics (labour law, partnerships, local and international ventures, corporate finance, etc).
• Collaborate with Management to devise efficient defence strategies for the best positioning of the
• Group and the Company.
• Specify internal governance policies on contracts and procurement, and regularly monitor compliance.
• Research and evaluate different risk factors regarding business decisions and operations.
• Apply effective risk management techniques and offer proactive advice on possible legal, contractual and procurement issues.
• Communicate and negotiate with external parties (clients, vendors, regulators, external counsels, public authorities etc).
• Draft and solidify agreements, contracts and other legal documents to assure the full legal rights of the group and the company.
• Deal with complex matters with multiple stakeholders.
• Provide recommendations to the organisation on legal risk while balancing commerciality.
• Provide clarification on legal language or specifications to staff in the organisation.
• Conduct your work meticulously and with integrity, reliability and responsibility.
• Maintain current knowledge of alterations in legislations in the jurisdictions in which the Group and the Company operate.
• Perform corporate secretarial duties through participation in Board/Management Committee meetings, drafting Board/Management Committee papers/resolutions/minutes and ensuring follow through of action items required by the Board of Directors/Management Committees.
• Support contract and price negotiations, and prepare contract documents and/or agreements with clients, suppliers, business partners, employees and any other relevant parties.
• Assist with the administrative requirements of the legal team.
• Participate in special committees and drive projects for process improvement and innovation.
• Any other duties as assigned by the Group and Company.

Job Requirements and Qualifications

• Recognised degree in law, preferably admitted to the Singapore Bar or qualified to do so. Fresh graduates or those recently called are welcome to apply.
• Experienced legal executives with a recognised diploma in law and management may be considered.
• Proven experience as a legal counsel in business environment with a commercial perspective.
• Excellent knowledge and understanding of corporate and contract laws, practices and procedures.
• Full comprehension of the influences of the external environment of a corporation.
• Demonstrated ability to create legal defensive or proactive strategies.
• High degree of attention to detail and professional ethics and integrity.
• Sound judgement and ability to analyse situations and information.
• Strong command of English and the use of Microsoft Office.
• Proactive and self-motivated individual with a growth mindset and composure under pressure.
• Must be prepared to travel on occasion, depending on the Company’s requirements.

Responsibilities:

Corporate Secretary

• Manage all local corporate secretarial work for a portfolio of about +25 entities incorporated in various Asia countries (ie. Singapore, Indonesia, Thailand, Malaysia, Vietnam, Philippines, etc.) in compliance with all relevant local laws and regulations.
• Liaise with & give instructions to corporate secretarial agents & other relevant government authorities
• Monitor deadline for statutory filings (eg. annual returns, etc.) and generally compliance with relevant Companies Act
• Co-ordinate/Liaise with other in-house departments (ie tax, finance, treasury, etc.) to ensure smooth running of the day-to-day administrative and corporate secretarial related matters
• Maintain and timely update the secretarial database (eg. registration certificate, business license certificate, etc.)
• Prepare & Circulate resolutions, board meeting of directors and shareholders and ensure timely signing
• Update from time to time any movements and/or changes in the organization (eg. change of name, registered address, change of directors, etc.)
• Prepare & implement automatic resignations in respect of all directors in all entities in South East Asia and Taiwan
• Check the invoices for the services rendered by the corporate secretarial agents
• Develop efficient and effective system for the management of corporate secretarial procedures
• Consolidate corporate secretary information for all Asia entities (about 60 entities in total)
• Provide regular updated corporate secretary reports & legal structure chart to the French headquarters
• Handle notarization of legal documents upon request
• Support the Legal counsel in charge of the legal restructuring works

Compliance & Governance

The Jobholder will also be a key player in the implementation of the Ethics & Compliance standards of Thales Group and, as such, will contribute to the evolution of its organization as well as its way of working in order to take into consideration the evolutions of its environment, new laws & regulations, and the best ethical and governance practices.

Therefore, the Jobholder will be responsible to actively contribute to the implementation of Thales Group ethics & compliance standards in the Regions and as such, will be in charge, in particular, of the following:

• Perform, analyze, implement and update the screening and due diligence files of any Third Party with whom Thales wishes to enter into a contractual relationship, in close coordination with the competent Compliance Officer as well as all the other relevant stakeholders (i.e. business capture leaders, country directors, and all relevant local functions and concerned Thales business units) in accordance with the applicable Third Party Integrity Assessment Instruction;
• Actively contribute and participate to the deployment throughout the Regions of the anti-corruption, ethics & compliance program and training plan, i.e. code of conduct, gifts and hospitality instruction, community investment, sponsorship, corporate membership instruction, compliance tools and platforms deployment, etc.
• With the support of the Compliance Officer and of the Correspondents, assist in the deployment and implementation of the other Group compliance pillars’ programs (Trade Compliance, Anti-trust and Competition laws, Personal Data Protection) in the Regions;
• Follow-up the companies of her portfolio business evolution to ensure delegation of authorities are up to date and consistent with the current activities,
• Report to the Compliance Officer any identified situations of non-compliance which would require the definition of a corrective action plan and/or a reporting to Chief Compliance Officer and VP Legal & Contract of TNSEA
• Support the Compliance Officer in addressing the internal control requirements, the audit reviews, corporate law, governance and compliance aspects for all the entities falling with the Regions scope

Requirements:

• At least a Master’s degree in Law and, eventually, ICSA or equivalent qualifications
• More than 10 years professional experience in corporate secretarial function and compliance matters, in house legal department or law firm
• Good command of English language, verbal and written
• Experienced user of Microsoft Office Applications
• Strong oft skills: rigorous, precise, organized, pro-active, research-oriented strong team player, solutions oriented, and logic, ability to work independently
• Ability to navigate in a global complex structure
• Good and effective communication skills as well as good inter-personal and inter-cultural awareness and interest to work in diverse teams

Job Description

• Design and develop the red team's customized secure system (remote control program), and ensure that the endpoint protection can be bypassed such as Crowdstrike, Windows Defender, 360 Safeguard
• Reverse analysis of common EDR and HIDS to identify methods for bypassing detection, and embed security principles into the design of system architectures to mitigate the risks
• Research the persistence solutions under common operating systems such as Windows, MacOS, and Linux
• Perform red team engagements related to the periodic review and audit activities of infrastructure security systems (IDC network, office environment, cloud native) and maintain documentation of security standards and procedures

Requirements

• Minimum 3 years of relevant work experience
• Extensive experience in RAT (Remote Access Tool) development, with the ability to customize attack frameworks like Cobalt Strike
• Extensive experience in anti-endpoint protection, providing solutions to bypass the detection of EDR such as CrowdStrike, Windows Defender, 360 Safeguard
• Experience in persistence solutions under common operating systems (Windows, MacOS, Linux)
• In-depth understanding of security mechanisms of Windows/Linux systems, and familiar with offensive techniques in ring0/ring3
• Proficient in scripting/programming languages like C/C++, Go, PowerShell, Javascript, ASM, etc
• Strong reverse engineering skills with proficiency in tools such as IDA Pro, OllyDBG, WinDBG, GDB, etc
• Strong communication skills and effective teamwork spirit
• Self-starter and fast learning ability

ORGANISATION / DIVISION INFORMATION

As the holding company of Singapore’s public healthcare institutions, we are always looking for qualified, passionate individuals who are keen to make a valuable contribution to public healthcare. At MOH Holdings, we believe our employees are our greatest asset and we are dedicated in helping them achieve their full potential through professional development and by providing an environment to develop their leadership skills and competencies.

The Legal Division supports MOHH divisions and clusters to identify legal issues, provide timely advice as well as provide services such as contract drafting and review. It also attends to approval and compliance matters.

SUMMARY OF THE ROLE

The Senior Legal Counsel is responsible for supporting the Legal Division and managing all legal matters. This role requires someone who can consistently exercise sound judgment and provide advice with a strong legal focus.

JOB RESPONSIBILITIES

• Oversee compliance on corporate governance, legal, statutory and regulatory requirements.
• Draft, review, negotiate and advise on a broad range of commercial contracts within a corporate environment.
• Monitor the contract process to ensure that contracts are in compliance with legal, regulatory and organization’s contractual guidelines and policies, participate in pre-contract discussions, contract negotiations and contract changes.
• Experience in dealing with broad range of contractual issues within and across various business units and subsidiaries.
• Advise and assist the members of the Board as regards their duties and responsibilities as directors, compliance with their obligations under the Companies Act and issues on corporate governance
• Meetings taking for board and committee

JOB REQUIREMENTS

• A good degree in Law, preferably with Honours.
• Min. 8 years PQE in a law firm and / or in-house legal department.
• Proficient in drafting various type of contracts and negotiating complex deals directly with vendors.
• Ability to work independently in a fast-paced environment to meet deadlines.
• Good interpersonal and communication skills and able to work effectively as part of a legal team.
• Possess strong work ethics, good organisation skills and ability to multi-task.
• Minimum 8 years of relevant experience

• Position :Service Technician(CCTV/Security System)
• Location : Islandswide- Office in Outram
• Working hours : 5 days work week;(8.30am, -6.00pm)
• Salary (commensurate with experience) : Up to $4200 gross ($3500Basic +Transport allowance $400-$750) AWS + Overtime + Performance Bonus + $60 Mobile reimbursement + Birthday leave + Health insurance + allowance
• Duration : Permanent
• Industry : Security system

Main Responsibilities:

• Execution of service and maintenance workflow.
• Liaise closely with client representatives on all service/maintenance related issues.
• Mentor a team of service team members.
• Assisting the supervisor in employing teams on service deliveries and distribute responsibilities.
• Manage day-to-day client interactions and expectations for optimal results.
• Provide support to supervisor in ensuring the timely delivery and completion of troubleshoot and service/maintenance of security systems at clients’ premises.
• Familiarise yourself and deliver customer satisfaction base on each client's business, organization and objectives.
• Ensure that works carried out are in compliance with the Workplace Safety and Health Act.
• Perform any other technical tasks as and when required.

Requirements:

• Min Nitec in Electrical/Electronic Engineering with at least 2 years working experience.
• Knowledge and hands-on experience in security systems such as Integrated Security Management Systems, Card Access Control Systems, Intrusion Detection Systems and CCTV systems is a must.
• Knowledge in IT/Network/Server is an added advantage.
• Independent, self-motivated individual whom is able to work under minimum supervision.

Email me at [email protected]

Do visit www.searchpersonnel.com.sg for more job listings.

***We do not charge our candidates any referral fee nor bind them with any contract.***

Joie Chang

Deputy Consulting Director

Reg no.: R2090601 | EA No: 13C6684

• Position: Sales Executive (Security Systems) - Up to $4200 + AWS | CENTRAL
• Location: Office in Outram
• Working hours: 5 days, Monday to Friday 8.30 am – 6.00 pm
• Salary (commensurate with experience): Up to $4200 + AWS + Performance Bonus + Transport Reimbursement/Allowance
• Duration: Permanent
• Industry: Security system

Main Responsibilities:

• Generating leads and cultivating opportunities
• Contact and pitch to customers to achieve sales targets
• Build strong and long term customer relationship
• Management of key accounts
• Expanding sales from both new and existing customers
• Coordinating with internal teams to provide solutions
• Ensure prompt pre and post sales experience of customers
• Conducting bi-monthly educational sessions for customer groups
• Achieving performance KPIs

Requirements:

• Minimum 2 years of experience in sales of services/software to property/real estate facility/commercial/security systems
• Good experience in current account management and negotiation
• Candidates from the same industry will be highly preferred
• Bilingual in English and Mandarin to liaise with Chinese speaking clients who converse in Mandarin only

Email to [email protected]

Do visit www.facebook.com/search.personnel for more job listings.

***We DO NOT charge our candidates any referral fee nor bind them with any contract.***

Joie Chang

Deputy Consulting Director (APAC)

Reg no.: R2090601 | EA No: 13C6684.

Thank you for your interest in this position. Our shortlisting period is 3 working days. Only shortlisted candidates will be contacted for further consideration.

If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend that you continue your job search to maximize your opportunities. We wish you all the best and should we have any suitable roles that match your experiences/ qualifications/ preferences, we will reach out to you.

Interested applicants are invited to apply directly at the NUS Career Portal

Your application will be processed only if you apply via NUS Career Portal

We regret that only shortlisted candidates will be notified.

Job Description

Applications are invited for a Research Fellow position in the Centre for International Law (CIL), National University of Singapore. This is a one-year contractual position offered in connection with CIL’s expansion of its programme on Public International Law. The objective of the positions is to develop the research capabilities and knowledge of junior scholars by immersing them in a dynamic and supportive research environment where they can enhance their understanding of different areas of Public International Law.

The duties of the incumbent will involve:

1. Engaging in research and writing on different areas of Public International Law;

2. Assisting in preparation of the curriculum, reading materials and administration of the CIL Academy of International Law;

3. Assisting in preparation of the annual international law year in review conference, as well as other seminars and workshops;

4. Publishing at least a journal paper on a topic approved by the Head of the programme by the end of the appointment term;

5. Assisting the CIL Director in developing projects as well as seminars and conferences.

All research staff in CIL have access to professional development opportunities (e.g., events, seminars, and training programmes) within NUS. They will also have opportunities to attend regional and international conferences, workshops, and symposiums as well as other scholarly opportunities.

Qualifications

• PhD in Public International Law.
• Strong research skills with the ability to prepare research papers on specific research topics assigned;
• Proven records of conducting independent research on topics related to Public International Law
• Experience with publication of journal articles or book chapters on international law is desirable;
• Fluent language skills in English is required. Additional languages a plus.

Please note only shortlisted candidates will be notified.

For queries, please contact [email protected]

Application Procedures

Interested applicants are invited to apply directly via the NUS Career Portal with the following supporting documents:

• A covering letter indicating experience, motivation for applying to work at CIL, and research interests
• A detailed curriculum vitae (no more than three pages) setting out educational and work history
• University transcripts
• One sample of written work
• The names and details of two referees

More Information

CIL was established in 2009 as a university-level research institute at the National University of Singapore (NUS). It is located on the Bukit Timah Campus of NUS, together with the Faculty of Law and the Lee Kwan Yew School of Public Policy. As a university-level research institute, CIL engages in both legal and multi-disciplinary research on wide variety of international law issues. Its mission is to enable Singapore and the Asia-Pacific region to play a more significant role in the promotion and development of international law. More about CIL can be found here: https://cil.nus.edu.sg/

• Position : Security Officers - Up to $3,500 - No Experience Required!
• Location : Islandwide
• Working hours : 12 hours shiftwork, Shift pattern will be 4 days work 1 day off, 3 days work 1 day off
• Salary (commensurate with experience): Up to $3,500 + Bonus
• Duration : Permanent
• Industry : Security

Responsibilities:

• Screening of passengers at designated zones
• Manual bag checks
• Usage of security screening equipment for screening purposes
• X ray screening of checked in luggages
• Any other security related roles at Airport

Requirements:

• Minimum Secondary education
• No prior experience and training will be provided

Email to: [email protected]

Do visit www.facebook.com/search.personnel and https://www.instagram.com/search.personnel for more job listings and career tips!

***We do not charge our candidates any referral fee nor bind them with any contract.***

Jeslyn Tan

Associate Consulting Director (APAC)

Reg no.: R21101247 | EA No: 13C6684

Thank you for your interest in this position. Our shortlisting period is 3 working days. Only shortlisted candidates will be contacted for further consideration.

If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend that you continue your job search to maximize your opportunities. We wish you all the best and should we have any suitable roles that match your experiences/ qualifications/ preferences, we will reach out to you.

• Position : Aviation Security Officers - Up to $2,850 - No Experience Required!
• Location : Airport
• Working hours : 12 hours shiftwork, Shift pattern will be 4 working days with 2 days off or 5 days work with 1 day off
• Salary (commensurate with experience): Up to $2,850 + Bonus
• Duration : Permanent
• Industry : Security

Responsibilities:

• Screening of passengers at designated zones
• Manual bag checks
• Usage of security screening equipment for screening purposes
• X ray screening of checked in luggages
• Any other security related roles at Airport

Requirements:

• Minimum 1 N Levels / 1 O Level / WPLN 3 x Level 4
• Physically fit to squad up and down
• No prior experience and training will be provided

Email to: [email protected]

Do visit www.facebook.com/search.personnel and https://www.instagram.com/search.personnel for more job listings and career tips!

***We do not charge our candidates any referral fee nor bind them with any contract.***

Jeslyn Tan

Associate Consulting Director (APAC)

Reg no.: R21101247 | EA No: 13C6684

Thank you for your interest in this position. Our shortlisting period is 3 working days. Only shortlisted candidates will be contacted for further consideration.

If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend that you continue your job search to maximize your opportunities. We wish you all the best and should we have any suitable roles that match your experiences/ qualifications/ preferences, we will reach out to you.

Intern, Cyber Security

• Cybersecurity and Compliance: Assist in monitoring cybersecurity metrics, reporting, and ensuring compliance with IT standards and guidelines.
• Incident Response and Vulnerability Management: Act as first responders to security events and work towards resolving vulnerabilities with stakeholders.
• Process Documentation and Cybersecurity Awareness: Document technology processes, draft workflow diagrams, and educate IT users on security practices, such as identifying phishing emails.
• Audit and Stakeholder Support: Support the audit process and interact with various stakeholders to address security-related queries and assist in operational implementation.
• Project Execution: Participate in projects, contributing to the implementation of security measures and guidelines across different operations.

Requirement:

• Foundational Cybersecurity Knowledge: A basic understanding of information security principles, cyber security, and data privacy is essential.
• Technical Awareness: Familiarity with the architecture, processes, and technology in IT and Industrial Cyber Security, as well as an awareness of Cloud, Web application, and Network Security.
• Learning and Documentation: Good written communication skills with a willingness to learn and document technical processes.
• Proactive Engagement: An energetic and proactive approach to work, with the ability to take initiative and tackle new challenges under minimal supervision.

Test Engineering Services (TES) at Synapxe is embarking on a journey to constantly transform its services by exploiting state-of-the-art technologies and tools to enhance TES’ ability to offer specialized testing services to its stakeholders. TES is passionate about making an impact with lasting change and we aim to provide our stakeholders with automated and optimized testing solutions to not only help them speed-up testing but produce accurate, reliable, and repeatable results.

TES is planning to implement and roll out a Dynamic/Interactive Application Security Testing (D/IAST) solution. This will act as a control measure proposed for implementation in response to Secured-by-Design Framework v1.0 as recommended by CSA’s Cybersecurity Code of Practice (CCoP).

As an Application Security Testing Specialist, you will be responsible for:
• Leading the request for proposal from a technical perspective to procure a D/IAST solution.
• Defining and documenting technical product requirements and specifications for a D/IAST solutions, evaluating the solution proposals to perform fit/gap analysis, determining the detailed evaluation criteria and producing recommendations to prevent, detect and analyse security threats and weaknesses in the running application.
• Leading the implementation and roll out of the identified D/IAST solution; work with the senior manager and product vendor to plan, set-up, on-board, test and deploy the D/IAST solution.
• Automated application security using the D/IAST tool to perform application security testing, gather and understand reports, assess potential security vulnerabilities, work closely with the application developers/vendors to resolve any vulnerabilities, and present the risks to the business for acceptance or mitigation.
• Removing false positives from the reports and working closely with the development/test teams to automate test and embed security testing in the CI/CD pipe line.
• Developing comprehensive and accurate reports and presentations for both technical and management audiences and effectively communicating the findings and remediation strategies.
• Recognising and safely utilising attacker tools, tactics, and procedures
• Maintaining and performing routine maintenance on D/IAST monitoring servers, reports repository, agents, etc.

• 8 years of experience with SAST/DAST/IAST/RASP methodologies and technologies to catch security flaws in the software?
• Hands-on experience with a wide-range of security tools such as MF Fortify, WebInspect, Contrast Security Assess and Protect, IBM AppScan, Checkmarx, MS Threat Modeling, BurpSuite, etc.
• Eager to collectively learn, share and solve problems within the area of application security testing in the area of healthcare domain?
• Consistent attention to details and work under pressure to achieve agreed targets/goals
• Work with intra-teams, and building rapport with the stakeholders and be able to manage difficult people
• Think out of the box and carries the courage to try and implement unconventional approach to deliver solutions

Overall Summary:

Plan, design, develop and review infrastructure architectural solutions for on-prem/hybrid Cloud, throughout infrastructure lifecycles.

Roles & Responsibilities:

• Architect and design scalable and secure IT infrastructure, primarily on-premise as well as leveraging on cloud technologies, that is resilient, highly available and secured.

• Develop infrastructure solutions to meet project requirements and establish roadmaps, patterns, principles, standards and guidelines for on-prem infrastructure, and document them in various formats, diagrams and templates

• Validate, review and verify infrastructure aspects of project solutions and technical specifications, based on alignment with mandated enterprise policies and standards

• Own and drive architectural deliverables, working in close collaboration with stakeholders including Project Managers, Subject Matter Experts (SMEs) and vendors to achieve project outcomes and timelines from design to implementation.

• Assess new infrastructure technologies and participate in proof of concept, to assist in defining technology direction, roadmap, framework and policies to meet strategic business initiatives.

• Present, articulate and communicate deliverables including architecture related design, solutions, concepts, ideas and proposals to various stakeholders.

• Keep abreast of emerging trends and identify opportunities for improvement

• Review technical documentation including Technical Design Specs and VM Provisioning Requests

• The infrastructure scope covers, but not limited to, all aspects of cloud, servers, hypervisors, containers, operating systems, databases, middleware, devops, security, support tools, network, SDN as well as related governance framework.

Requirements / Qualifications

• Degree in Computer Engineering / Electrical and Electronic Engineering or equivalent discipline

• At least 7 years’ proven experience in a similar role

• Strong and in-depth technical knowledge and experience in administering and maintaining infrastructure domain areas such as Operating Systems (e.g., VMware, Nutanix, Red Hat, Windows Server), Networking (e.g., SDN, Cisco), Security (e.g. Cisco, Palo Alto,CheckPoint, F5), Automation (e.g., Ansible, Chef, Terraform), Cloud, etc.

• Certifications in the above areas would be advantageous (e.g. CCIE, CISSP, VMware VCAP, Windows Certified Engineer, RedHat Certified Engineer, AWS Solution Architect, Azure Solution Architect, TOGAF)

• Possess good knowledge of networks and networking concepts

• Possess good knowledge of ITIL processes

• Possess good knowledge on private, hybrid and public cloud environment and technologies which includes VMware vRealize Cloud automation, AWS, Azure and OpenShift

• Possess good security, audit and compliance knowledge

• Able to analyse and understand complex technical systems built from many separate software and hardware components, specifically web application architectures

• Strong passion for innovation and desire to learn new technologies

• Possess initiative, with a proactive, result-oriented mindset and able to work independently

• Track record of on-time, on-budget and to-specification delivery with the ability to support end-to-end delivery of solutions.

• Experience in driving complex IT infrastructure design and projects while optimizing costs

• Able to prioritise assignments whilst working on multiple concurrent projects

• Is meticulous and attentive to details

• A team player with Excellent communication, interpersonal and collaboration skills, capable of effectively communicating complex technical concepts and influencing various internal and external stakeholders, both technical and non-technical alike.

• 2 years contract