Job Description

You will be a member of the Group Information Security Team responsible for initiating, implementing, and maintaining security products and solutions to support enterprise security.

Key Responsibilities:

•Subject matter expert (SME) for the security systems owned by the Information Security Team.

•Ensure security systems are utilized to their maximum capabilities.

•Plan, identify, assess, design, operationalize, and maintain multiple security-related software and/or hardware.

•Recommend and drive cyber security solutions and initiatives to improve the cyber security of the organization.

•Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.

•Provide security consultancy, technical guidance, expertise, solutions, and education.

•Advise infrastructure teams on security design that is relevant and fit for purpose.

•Identify and assess cyber risks in the IT infrastructure environment.

•Review firewall requests.

•Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines, and deliverables.

•This is an individual contributor role. Deliver tasks with minimal supervision.

•Provide AUDIT support such as PCI-DSS, and Cyber Maturity Assessment.

•Strong communication skills.

•Coordinate and Deploy SIA Group/GIT cybersecurity initiatives in Scoot.

Requirements:

•Degree in IT or related field, with at least 5 years in information security, especially in the cybersecurity space.

•Professional security certifications (SANS, CISSP, CEH, OSCP, CISA, etc) preferred.

•Experience in security products POC and RFQ.

•Prior experience in implementing and maintaining any of the tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM, etc., and/or network security. Able to review firewall requests.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

•Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience is preferred.

•Knowledge of cyber security threats, vulnerabilities, hacking, exploit methods, etc.

•Strong oral, written, presentation, and inter-personal skills.

•Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

What you will be working on:

● Innovate and Build: Design and develop new, cutting-edge features for WebOrion®,

enhancing its ability to safeguard against web and API vulnerabilities.

● Pioneer AI Security: Research and create advanced modules for our next-gen AI firewall

that defends against AI-driven cyber threats.

● Full-Stack Impact: Manage and maintain databases, APIs, software, servers, and cloud

infrastructure.

● Agile Development: Contribute to an agile lifecycle—coding, debugging, testing, deploying,

and improving software releases.

● Customer-Centric Support: Provide top-notch technical support for our global enterprise

customers.

What we are looking for:

● Bachelor’s or Master’s Degree in Computer Science/ Engineering, Information Technology or

equivalent

● Hands on experience with Docker and programming languages such as Golang or Python.

● Interest in Security for AI. Defending against the next wave of AI attacks.

● Have a good understanding of RESTful APIs, databases, messaging queues, CI/CD tools

and software testing. Experience with Linux command-line and Git

● Able to write and document technical concepts

● Teamwork skills with a problem-solving attitude

● Preferably 1–2 years of relevant experience, though exceptional fresh graduates with

solid internship experience are welcome.

● Must be based in Singapore.

Why Join Us:

• Innovate for Impact: Be part of the team that's building a revolutionary AI firewall to
• defend against AI-driven threats, redefining the cybersecurity landscape.
• Global Exposure: Work with enterprise customers across ASEAN, Europe, and the
• US, gaining valuable international experience.
• Cutting-Edge Projects: Build cool cybersecurity products while working at the nexus of
• web, cloud, and AI security.
• Career Growth: Join a fast-growing company where your contributions make a real
• difference.

Interested applicants, please drop us a note at [email protected] with your CV and cover letter.

Job Description

You will be a member of the Group Information Security Team responsible for responding to threats and incidents to the corporate networks, systems (on-prem and cloud) and digital assets.

Key Responsibilities:

• Act as the subject matter expert (SME) for the security systems owned by the security team.

• Recommend and drive cyber security solutions and initiatives to improve the organization's cyber security posture.

• Lead and drive major incidents towards mitigation and resolution in collaboration with multiple internal counterparts.

• Ensure excellent communication to stakeholders, providing timely and accurate updates during incidents.

• Respond to, assess, and investigate security events in collaboration with vendors.

• Coordinate with internal stakeholders such as applications, network, and infrastructure teams for investigations.

• Perform in-depth analysis and assess vulnerabilities, IOCs, cyber security intelligence, and open-source information to validate security risks and impacts, recommending appropriate countermeasures.

• Develop and maintain cyber incident response and handling playbooks for various threat scenarios.

• Recommend and implement tools to enhance detection, response, and recovery functions and overall security posture.

• Develop methodologies to identify threat adversary tactics, techniques, and procedures.

• Stay abreast of new and emerging cyber threats, attack vectors, etc., and assess their impact.

• Provide strategic guidance and oversight to vendors, ensuring adherence to agreed-upon SLAs and KPIs.

• Guide and mentor junior staff within the security operations team, providing support as needed.

• Perform any relevant ad-hoc duties as required.

Requirements:

• Degree in IT or related fields, with at least 6 years of relevant information security working experience.

• Professional security certifications (CISSP, CISA, CEH, GCIH, etc.) preferred.

• Hands-on experience with SIEM, EDR, XDR, UEBA and SOAR tools preferred.

• Strong in-depth working knowledge in Networking, Cloud, Active Directory, Windows and UNIX platforms, and Mitre framework.

• Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods, etc.

• Strong oral, written, presentation, and interpersonal skills.

• Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

• Able to work independently and in a team-oriented, collaborative environment.

• Experience in guiding and mentoring junior staff within a security operations team.

• Candidates will be considered for a senior role commensurate with their experience.

Job Description:

The role is for the position of Security Solutions Engineer ASO TIS Job. The successful candidate will be part of a growing dynamic regional team that oversees IT design and development of Infrastructure security Solutions In the region.

We are seeking a talented Security Solutions Engineer to join our team. The security engineer will be responsible for implementing and maintaining the Infrastructure security infrastructure to ensure the confidentiality, integrity, and availability of our organization's data and systems.

Roles & Responsibilities:

• Maintain & ensure availability of Security Solutions platforms.
• Production support of Security Solutions platforms lead managing a team to provide 24x7 support (on-call after office hours)
• Work with stakeholders and other teams to ensure Infrastructure security platforms are effectively integrated into the IT infrastructure, both on-premises and cloud workloads.
• Provide technical leadership on Infrastructure security across a variety of enterprise systems and applications.
• Collaborating with other IT staff to integrate Infrastructure security framework with other security technologies.
• Work closely with the project managers, Security and Compliance personnel, application developers and other administrators in evaluating functional, scalable, and secure Infrastructure security solutions from design and development through implementation for business clients.
• Enhance Permit-To-Operate of new & existing Security Solutions.

Technical Capabilities

Production Support of Security Solutions:

• Support Infrastructure security solutions to protect the organization's Infrastructure from unauthorized access and attacks.
• Support Virtual Private Infrastructure (VPNs) to ensure secure remote access for employees.
• Set up secure access controls to restrict access to sensitive data and systems.
• Good understanding of security solutions domains:Endpoint security
  Email security
  Web Security
  Network security
  Data Loss Protection
  Threat Detection
  Vulnerability Scanning
  Identity & Access Management
  

Contribute into Risk Assessments and Security Audits:

• Participate in regular risk assessments to identify potential security vulnerabilities and threats.
• Contribute to security audits to assess the effectiveness of existing security controls and identify areas for improvement.
• Recommend security enhancements based on the findings of risk assessments and audits.

Collaborate with IT Teams:

• Work closely with IT teams to integrate security controls into infrastructure and applications.
• Provide guidance on implementing security best practices and standards.
• Collaborate with application developers and system administrators to ensure that security requirements are met.

Monitor Infrastructure Traffic and Investigate Security Violations:

• Monitor Infrastructure traffic for signs of security breaches or unauthorized activity.
• Investigate security violations and breaches to determine the cause and extent of the incident.
• Take appropriate actions to mitigate the impact of security incidents and prevent future occurrences.

Stay Updated on Emerging Threats and Security Technologies:

• Stay abreast of emerging threats and security technologies to ensure that the organization's Infrastructure security posture remains strong.
• Participate in security forums, conferences, and training sessions to stay informed about the latest trends and developments in Infrastructure security.

Participate in Incident Response and Forensic Investigations:

• Participate in incident response activities to contain and mitigate security incidents.
• Conduct forensic investigations to determine the root cause of security incidents and identify corrective actions.
• Document incident response procedures and lessons learned for future reference.

Job Requirements:

• Min 8 years of experience in Infrastructure Security domain, with 6 years of experience in technical deployment, support, and maintenance of Security Solutions.
• Experience with deployment of Infrastructure security / perimeter security controls/solutions for enterprise.
• Experience in security solutions domains: Endpoint security, Email security, Web Security, Network security, Data Loss Protection, Threat Detection, Vulnerability Scanning, Identity & Access Management.
• Demonstrate a deep understanding of risk and change management, security policies and controls, user account life-cycle management, access controls and management, AAA. Strong understanding of Infrastructure security concepts, protocols, and technologies.
• Good scripting and task automation experience preferably leveraging Shell, Powershell, Python, Ansible.
• Experience with below solutionsEndpoint security - like McAfee, Symantec, MS Defender
  Email security – Trend Micro
  Web Security – Trend Micro, Menlo, ForcePoint
  Network security – Trend Micro DDI
  Data Loss Protection – MS Purview, Forcepoint
  Threat Detection – DDAN, Splunk
  Vulnerability Scanning - Qualys
  Identity & Access Management – CyberArk, Oracle IAM
• Experience with product deployment of SASE (components) and micro-segmentation solutions.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.

Educational Requirements:

• Bachelor’s degree in computer science, Information Technology, or a similar field preferred.
• Knowledge of security standards and frameworks (e.g., NIST Cybersecurity Framework).
• Relevant certifications (e.g., CISSP, CCNP Security level) a must.

We regret to inform that only shortlisted applicants will be notified.

Job ID: 10068291

Job Summary

This position reports to the Head of Legal, APAC, based in Singapore, and is an integral part of JGC Asia Pacific’s legal team. The successful candidate will play a pivotal role in advising business stakeholders on a wide range of legal issues, lead the Singapore legal team, and provide support for related FEED and EPC projects within Singapore.

Duties & Responsibilities

• Draft, review, and negotiate a comprehensive range of commercial agreements within the FEED/EPC domain.

• Advise business stakeholders on FEED/EPC project bids, associated risks, and other pertinent matters.

• Collaborate closely with the project team to facilitate effective project execution.

• Provide insights on potential legal risks to stakeholders and recommend mitigation strategies.

• Manage litigation and contentious matters across the region.

• Ensure compliance with the company's policies and regulatory requirements.

• Assist in the drafting of policies, guidelines, legal templates, and other documentation to promote best practices.

• Coordinate and liaise directly with external counsel.

• Prepare and implement corporate policies and procedures as necessary, assigned or designated by his/her superior.

Requirements

• LLB/LLM qualification with 3-7 years of post-qualification experience (PQE).

• Bar qualification from a Commonwealth jurisdiction, with a preference for Singapore.

• Relevant in-house experience in EPC, utilities, power, or infrastructure, and/or experience in a law firm specializing in construction or projects is advantageous but not mandatory.

• Experience in project execution and dispute resolution is preferred.

• Exceptional communication and interpersonal skills.

• Ability to work effectively as part of a team while also operating independently in a fast-paced environment.

• Prior experience in a multinational environment is beneficial, and familiarity with Japanese culture is an added asset.

• To excel in this role, you will need to be collaborative, self-reliant, proactive, and capable of thriving in a dynamic, fast-paced environment.

Responsibilities

• Support the Regional Cloud Infrastructure hosting all the Critical Regional Business Solutions.
• Support Cloud Consolidation and Integration to Common Cloud for the Region.
• Plan, Design and Setup adequate Infrastructure for Operation Companies (OPCOs) to connect to Global and Regional Solutions.
• Support various Regional IT Infra projects, with primarily focus on Infrastructure, Elimination of Legacy hosted Infra.
• Support SD-WAN and other Infra Initiatives for the Region.
• Work closely with Global / Regional / Country IT teams to implement & Support Global IT Security Initiatives
• Manage other duties as assigned for Automation of Patch Management (Using Manage Engine), for GSOC, implementing Multi-Factor Authentication (MFA), Zscaler, Rapid 7 (Vulnerability Management), Trend Micro EDR and Others.
• Supporting initiatives advised by Global Security Audit (GSA) teams, resulting in overall improvement of IT Security Posture for the region.
• Assist in Documentation of IT Section Policies
• Regular PDCA and follow up with Countries, to ensure Adherence for the above Initiatives

Requirements

• Minimum Bachelor’s degree in IT or related field.
• Minimum 5 to 7 years In-Depth experience in Handling IT Infrastructure & IT Security at a Regional Level.
• Business driven with a Strong understanding of Prevalent /Current IT infrastructure and IT Security Solutions.
• Infrastructure Management and IT Security Skills.
• Cloud Solution Skills with a Must have experience to handle a regional Cloud Setup using AZURE.
• Strong Project Management Skills.
• Proven strength in strategic and conceptual thinking and design, implementation, and execution of strategies.
• Strong problem-solving and Co-ordination skills.
• Strong Vendor Management Skills.
• Good verbal and written communication skills.
• Proficient in Microsoft O365 Tools (Word, Excel, PPT and Others)
• Business travelling may be required for this position.

How to Apply:

Interested applicants, kindly click on “APPLY NOW”

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Pang Seng Leng Diana

EA Personnel Reg No: R1106651

Job Description

The successful candidate will join the Information Technology Division, System Technology department and will be responsible for managing Content Delivery Network (CDN) which includes Cyber Security, as well as administering Monitoring and Log Management Tools.

Key Responsibilities include:

• Work closely with CDN providers and application teams to ensure internet websites/mobile apps are healthy in terms of availability, response time and security posture.

• Conduct regular security reviews and finetune WAF and BOT rules to mitigate any cyber threats.

• Administer various monitoring and logging tools, which includes application onboarding and advanced configuration.

• Perform system administration activities such as troubleshooting, root cause analysis and implement corrective/preventive actions during and after an incident.

• Support audit and infrastructure/network security scans, disaster recovery and security related drills and operate within assigned fiscal budget.

• Build automation wherever possible to improve development team’s agility and reduce human errors.

• Explore, learn and deploy new technologies and provide training to the IT community within the company.

• This position requires periodic system administration outside normal business hours.

Requirements:

• Possess a degree in Information Technology or related fields.

• Minimum of 3 years of IT Infrastructure experience with at least 1 year of hands-on experience in managing the infrastructure of an eCommerce website.

• Experience with Akamai or equivalent CDN providers preferred.

• Demonstrate strong knowledge in infrastructure areas such as Content Delivery Network (CDN), Cyber Security (WAF and Bot Mitigation), internet protocols, DNS, virtual server technologies, networking (LAN, WAN, SDN), Integration and Messaging Platform, scripting and monitoring tools.

• Administrator experience with Application Performance Monitoring (APM) tools such as Dynatrace and Log Management System (LMS) such as Splunk.

• Conversant with infrastructure definition tools such as Cloud Formation and Terraform, and with YAML/JSON deployment templates.

• Strong analytical, project management, communications and interpersonal skills.

We thank all candidates for your interest in Singapore Airlines, and regret that only shortlisted candidates will be notified.

Interested applicants are invited to apply directly at the NUS Career Portal

Your application will be processed only if you apply via NUS Career Portal

We regret that only shortlisted candidates will be notified.

Job Description

The National University of Singapore invites applications for the position of Research Fellow in the Department of Computer Science, School of Computing. The School of Computing is strongly committed to research excellence in all its dimensions: Searching for fundamental results and insights, developing novel computational solutions to a wide range of applications, building large-scale experimental systems and improving the well-being of society. We seek to play an active role both internationally and locally in the core and emerging areas of Computer Science and Information Systems.

The Research Fellow will be responsible for working closely with the Principal Investigator and lab members on topics of Quantum-Safe Security. He/she should possess experience or interest in the following research areas:

• Post-Quantum Cryptography
• Quantum-Safe Security

Job Requirements

• A PhD degree in a relevant area;
• Good publication record; and
• Experience in research.

Principle Responsibilities:

• Work closely with the Security Operations Center (SOC) and Security Engineering teams to implement and improve existing SOC process automation
• Development of new tools, processes and procedures to enhance SOC monitoring and analysis capabilities
• Enhance current deployment of commercial tools used by Security Operations Center.
• Evaluate new technologies against SOC requirements in proof of concept

Requirements:

The candidate should have developer experience working in a Security Operations Center. He/she should have experience in web development with secure coding practices, and general knowledge of SOAR technologies. In addition to following experience:

• 5-8 years of relevant experience
• Bachelor's Degree or higher preferred
• Advanced proficiency with Microsoft Office tools and software
• Experience utilizing a SOAR platform with SIEM and case management solution
• Experience with various scripting languages - Python, PHP, etc.
• Experience working in a SOC environment and familiar with SOC Incident Response process
• Consistently demonstrates clear and concise written and verbal communication
• Proven influencing and relationship management skills
• Proven analytical skills
• Team player with the ability to work independently

Qualifications:

• Consistently demonstrates clear and concise written and verbal communication
• Proven influencing and relationship management skills
• Proven analytical skills

Education:

• Bachelor’s degree/University degree or equivalent experience

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

We are looking for a Cloud Infrastructure Engineer (Endpoint Security) to join us!

Responsibilities:

· Work with Product Owner and Product Principals to operate the various endpoint security tools, including:

- EPP/EDR

- Data Loss Prevention

· Work with Central ICT Infra teams to operate the on-prem components of the SSE platform.

· Conduct system health check and proactively identify and troubleshoot issue in end-to-end manner.

· Manage the change, release, incident, problem management processes in ITSM platform.

· Document the requirement and specification to address the needs for all Public Service agencies.

• Comfortable with a 5-year direct contract
• At least 5 years of experience in the above domain areas

Join us and discover a meaningful and exciting career with Assurity Trusted Solutions!

The remuneration package will commensurate with your qualifications and experience.

We thank you for your interest and please note that only shortlisted candidates will be notified.

By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS's privacy statement which can be found at: https://www.assurity.sg/privacy.html or such other successor site.

Benefits

• A wholly-owned subsidiary of GovTech.
• We promote a learning culture and encourage you to grow and learn.
• A competency framework is in place to help you grow your career with us.

Job Description:

As a next-gen Cyber Security Consultant. The candidates will be involve in project planning, rolling out of security solution to secure customers environment. Having an open heart and open mind, to learn the sophisticated Cyber Security technology. Join us and onboard to the next-gen journey.

Product Coverage

* Next-Gen Anti-Virus

* Next-Gen Firewall

* Next-Gen Security Information and Event Management (SIEM)

* Privileged Identity Management (PIM)

* Vulnerability Risk Management Solution

Responsibilities and Requirement:

# Perform Security Infrastructure Project implementation

# Technical problem solving across multiple technologies and arising issues

# Interested in new technology and have the ability to write and understand some basic script

# Have some basic knowledge on Windows, Linux operating system

# Keen to learn and work with networking technology

About the team you are joining

Reporting to the Regional Director Operations Safety and Security (OSS) – Asia Pacific, the incumbent will be responsible for driving activities in the Asia Pacific Region to support continuous improvement in regional aviation safety.

Specifically, the Senior Manager, Safety will be responsible for utilizing centrally coordinated IATA policies and procedures to support advancements in regional safety performance; will take a proactive role to identify new, and emerging, regional issues impacting aviation safety and, collaborating with centrally located IATA experts, determine whether these issues are systemic or local in nature; lead the delivery of regional safety initiatives to support capacity building across industry.

They will support initiatives to enhance safety throughout the region by influencing a network of high-level contacts within airlines, government authorities, air navigation service providers, airports, other international agencies, and ICAO.

About the team you are joining

Reporting to the Regional Director Operations Safety and Security (OSS) – Asia Pacific, the incumbent will be responsible for driving activities in the Asia Pacific Region to support continuous improvement in regional aviation safety.

Specifically, the Senior Manager, Safety will be responsible for utilizing centrally coordinated IATA policies and procedures to support advancements in regional safety performance; will take a proactive role to identify new, and emerging, regional issues impacting aviation safety and, collaborating with centrally located IATA experts, determine whether these issues are systemic or local in nature; lead the delivery of regional safety initiatives to support capacity building across industry.

They will support initiatives to enhance safety throughout the region by influencing a network of high-level contacts within airlines, government authorities, air navigation service providers, airports, other international agencies, and ICAO.

What your day would be like

• Leverage the IATA Safety Strategy to deliver on safety priorities, identified though IATA safety management activities and/or IATA governance groups, to achieve the timely implementation of IATA global programs or locally targeted action plans across Asia Pacific.
• Promote IATA safety policies and strategies with ICAO, Government Authorities and Agencies, Air Navigation Service Providers (ANSP) and Airport Authorities responsible for the planning, implementation and operation of air navigation and airport facilities, to deliver safety improvements.
• Identify, develop activities, and deliver safety improvement programs aimed to rectify any safety deficiencies within the region collaborating with governments, airlines, ANSPs and airports utilizing regional aviation safety forums such as RASG and APRAST. This may include the development of country specific safety strategies.
• Engage stakeholders, and actively promote, the IATA Safety Strategy around the three strategic goals relating to Safety Leadership, Safety Risk and Safety Connect to drive the:evolution of safety culture and reporting;
  prioritization of identifying and addressing safety risks;
  evolution of IATA audit programs;
  growth of a safety community, connecting all IATA airlines, across the region.
  
• Support promotion, and engagement, with the IATA Operational Safety Audit (IOSA) program whilst looking at new opportunities to expand the program.
• Support IATA's regional ground safety audit activities including the IATA Safety Audit for Ground Operations (ISAGO).
• Support IATA's regional safety data activities including the Global Aviation Data Management Program (GADM).
• Contribute to the commercial strategy and targets assigned to the region by promoting IATA products and services.
• Coordinate airline input during regional ICAO/CAA rule-making and standard-setting processes.
• Respond to tactical issues arising in day-to-day operations in the region as well as provide information and support to IATA member airlines during periods of disruption/contingency operations.

What your day would be like

· Leverage the IATA Safety Strategy to deliver on safety priorities, identified though IATA safety management activities and/or IATA governance groups, to achieve the timely implementation of IATA global programs or locally targeted action plans across Asia Pacific.

· Promote IATA safety policies and strategies with ICAO, Government Authorities and Agencies, Air Navigation Service Providers (ANSP) and Airport Authorities responsible for the planning, implementation and operation of air navigation and airport facilities, to deliver safety improvements.

· Identify, develop activities, and deliver safety improvement programs aimed to rectify any safety deficiencies within the region collaborating with governments, airlines, ANSPs and airports utilizing regional aviation safety forums such as RASG and APRAST. This may include the development of country specific safety strategies.

· Engage stakeholders, and actively promote, the IATA Safety Strategy around the three strategic goals relating to Safety Leadership, Safety Risk and Safety Connect to drive the:

· evolution of safety culture and reporting;

· prioritization of identifying and addressing safety risks;

· evolution of IATA audit programs;

· growth of a safety community, connecting all IATA airlines, across the region.

· Support promotion, and engagement, with the IATA Operational Safety Audit (IOSA) program whilst looking at new opportunities to expand the program.

· Support IATA's regional ground safety audit activities including the IATA Safety Audit for Ground Operations (ISAGO).

· Support IATA's regional safety data activities including the Global Aviation Data Management Program (GADM).

· Contribute to the commercial strategy and targets assigned to the region by promoting IATA products and services.

· Coordinate airline input during regional ICAO/CAA rule-making and standard-setting processes.

· Respond to tactical issues arising in day-to-day operations in the region as well as provide information and support to IATA member airlines during periods of disruption/contingency operations.

We would love to hear from you if you have

• Extensive aviation background/experience in positions involved in safety, operations, certification and/or regulation of civil air transport operations (strong preference given to candidates with experience as a pilot).
• Qualifications in aviation management or other relevant discipline (relevant professional qualifications may be considered in lieu of a university degree).
• A high degree of analytical skill and technical knowledge in the provision of air transport services with knowledge of ICAO standards and recommended practices, industry best practices and civil aviation operational procedures.
• An understanding of air safety investigation and/or risk-based airline auditing in a multidisciplinary environment would be beneficial.
• Comprehensive understanding of safety information sharing programs and data management methodology.
• Ability to work remotely from core safety team, based in Geneva and Montreal, to independently deliver on activities agreed upon by centrally located subject matter experts.
• Comfortable to perform under pressure to deliver outcomes upon clearly defined timelines.
• Confident to report regularly to core safety team on progress made, and challenges experienced, against pre-determined metrics for agreed objectives.
• Ability to deal with member airlines at a technical, safety and operational level with a positive approach to problem solving.
• Ability to effectively advocate across a wide range of aviation stakeholders, by promoting IATA activities and the benefits that desired outcomes will achieve, to gain industry buy-in.
• The ability to speak in public and deliver key messages to a diverse range of stakeholders.
• Diplomacy in relationships with contacts in government and other key organizations.
• Fluency in English.
• Able to travel when required whilst managing a large and dynamic workload.

Job Description

You will be a member of the Group Information Security Team responsible for responding to threats and incidents to the corporate networks, systems (on-prem and cloud), and digital assets.

Key Responsibilities:

•Perform security monitoring and incident response activities across the scoot networks, leveraging a variety of tools and techniques.

•Manage Security Operations center.

•Detect incidents through proactive “hunting” across security-relevant data sets.

•Ability to correlate multiple events from different devices to identify abnormal behaviour

•Document incident response analysis activities thoroughly

•Develop new, repeatable methods for finding malicious activities

•Provide recommendations to enhance detection and protection capabilities.

•Effectively present technical topics to both technical and non-technical audiences

•Develop and follow detailed operational processes and procedures to appropriately analyze, escalate, and assist in the remediation of information security incidents

•Prioritize multiple high-priority tasks and formulate responses/recommendations in a fast-paced environment

•Prepare documentation for security technical standards, standard operational procedures, and hardening standards.

•Analyse endpoint, network, and application logs

•Assist other IT teams in security-related issues

•Engage with vendors and parent company SIA team members for security reviews.

Requirements:

•Degree in Computer Engineering, Computer Science, Information Systems, or equivalent qualification.

•At least 5-6 years of experience in Cybersecurity Incident and Security Operations.

•Demonstrate experience in Information Security with a focus on Cyber Security Operations, Incident Response and Detection.

•Experience working in the Security Operations Centre and/or Computer Incident Response Team.

•Excellent problem-solving skills combined with hands-on experience doing root cause analysis and post-incident reviews.

•Solid knowledge of computer networks and common protocols

•Knowledge of prominent cyber threat actors and APT groups.

•Experience with Threat Intelligence Platforms.

•Experience with SIEM (especially Splunk).

•Professional security related qualifications (i.e. GCIA, CISSP etc) will be an advantage

•Preferred certifications: CISSP, CISM, CISA, ISMS, TOGAF, SABS

•Good interpersonal skills

Job Summary:

• Provide 1st and 2nd Level IT Support to end-users
• Manage IT assets through procurement, tracking, maintenance, refresh /renewal and disposal/ termination.
• Provide assistance in the implementation of new end-user computing technologies.

Job Scope:

• Design, deploy, and manage security solutions such as firewalls, IDS/IPS, and encryption technologies.
• Conduct security audits, compliance checks such as vulnerability assessments with risk analysis
• Development and enforcement of security policies, procedures and controls
• Integrate security measures into new and existing IT systems and applications.
• Ensure that applications are securely configured, including hardening default settings, securing APIs, and restricting file permissions.
• Conduct initial investigations of security violations/incidents, and escalate as necessary
• Collaborate with other IT teams to ensure security is integrated across all systems and processes.
• Stay updated on the latest security trends & technologies
• Design, deploy, and manage security solutions such as firewalls, IDS/IPS, and encryption technologies.
• Work with other contractors where required for delivery of network services
• Any other IT duties as assigned.

Special Aptitude And Knowledge

• Advanced technical knowledge of security technologies and systems.
• Expertise in firewall administration, encryption technologies, and network protocols.
• Experience in designing and implementing security architectures.
• Proficiency in vulnerability assessment tools and penetration testing methodologies.
• Able to communicate well, handle documentation and explaining network and IT architecture
• A great team player and able to work well with other team member

Qualification

• Recognized Degree in Information Technology, Computer/ Network Engineering or equivalent.
• Possess relevant certifications such as CISSP, CCSP, CEH, or advanced security certifications
• Minimum 5 years of experience in an equivalent role.
• Experience with a company that has achieved CyberTrust Mark certification or has actively worked towards it is a bonus.
• Familiarity with implementing security measures in the healthcare industry is also advantageous.

Product area

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Additional job description

As an Incident Response Consultant, you will provide industry-leading incident response, assessment, transformation, managed detection and response, and training services with in-depth tactical support. You will help organizations effectively detect and respond to threats and reduce the overall impact of business risk before, during, and after an incident. You will be able to resolve security incidents quickly, effectively and at scale with complete incident response including investigation, containment, remediation, and crisis management. In this role, you will work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage.

Qualifications

Job responsibilities

• Collaborate with internal and customer teams to investigate and contain incidents.
• Recognize and codify attacker Tools, Tactics, and Procedures (TTP) and Indicators of Compromise (IOC) that can be applied to current and future investigations.
• Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations.
• Support specific workstreams for a variety of client-facing investigations including the examination of cloud, endpoint, and network-based sources of evidence.
• Develop comprehensive and accurate reports and presentations for technical and non-technical audiences.

Minimum qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
• Experience in information security domain, with 1 year of experience leading Incident Response investigations, analysis, or containment actions and any three of the following: network or log forensic analysis, malware triage analysis, disk, or memory forensics.
• Experience in cybersecurity in one of the following areas: network security, wireless security, web application assessments, social engineering, scripting, cloud security, reverse engineering, or incident response.

Preferred qualifications

• Experience with enterprise security architecture and security controls.
• Experience with cloud incidents or forensic responses.
• Experience with malware triage analysis and disk or memory forensics in one or more of the following: Windows, macOS, or Linux.
• Excellent time and project management skills.

Product area

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Additional job description

As an Incident Response Consultant, you will provide industry-leading incident response, assessment, transformation, managed detection and response, and training services with in-depth tactical support. You will help organizations effectively detect and respond to threats and reduce the overall impact of business risk before, during, and after an incident. You will be able to resolve security incidents quickly, effectively and at scale with complete incident response including investigation, containment, remediation, and crisis management. In this role, you will work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage.

Qualifications

Job responsibilities

• Collaborate with internal and customer teams to investigate and contain incidents.
• Recognize and codify attacker Tools, Tactics, and Procedures (TTP) and Indicators of Compromise (IOC) that can be applied to current and future investigations.
• Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations.
• Support specific workstreams for a variety of client-facing investigations including the examination of cloud, endpoint, and network-based sources of evidence.
• Develop comprehensive and accurate reports and presentations for technical and non-technical audiences.

Minimum qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
• Experience in information security domain, with 1 year of experience leading Incident Response investigations, analysis, or containment actions and any three of the following: network or log forensic analysis, malware triage analysis, disk, or memory forensics.
• Experience in cybersecurity in one of the following areas: network security, wireless security, web application assessments, social engineering, scripting, cloud security, reverse engineering, or incident response.

Preferred qualifications

• Experience with enterprise security architecture and security controls.
• Experience with cloud incidents or forensic responses.
• Experience with malware triage analysis and disk or memory forensics in one or more of the following: Windows, macOS, or Linux.
• Excellent time and project management skills.

Join our security team and help secure our organization through maintaining, engineering, and deploying security solutions. We use industry-standard security tools, in an automated fashion, to ensure our security teams can operate effectively and provide security to the company.

Responsibilities:

As an individual contributor on our Cybersecurity engineering team, youll have a broad set of responsibilities including (the mix will depend on your interests and skill level):

• Troubleshooting security problems
• Assist in the management and deployment of security products on endpoints, servers, and virtual desktops
• Design, operate, and maintain a vulnerability management program
• Assist the Security Team in responding to and remediating system and/or network security breaches
• Plan, implement, manage, monitor, and upgrade security measures for the protection of the organizations data, systems, and networks
• Ensure that the organizations data and infrastructure are protected by enabling the appropriate security controls
• Plan, create, and implement cybersecurity processes and policies
• Engage in domain-specific threat modeling and attack surface analysis/reduction
• Identify information and logs to monitor, then design and engineer the process for gathering that information
• Promotes best practices and design patterns
• Willing to do remote support for Helpdesk team escalated suppprt cases
• Willing to learn newer technology / product / solutions based on customers needs.

Required Skills:

• Proficient in exploring, evaluating, and integrating new technologies, programming languages, data models, or frameworks.
• Easily pick up new technologies and are keen to expand your knowledge
• Experience in the development of projects related to network and security automation.
• Experience in infrastructure and automation processes and tools including Ansible, and Terraform
• Fundamental knowledge of SSH, TCP/IP, UDP, SSL, HTTP, HTTPS, PKI, DNS, and other common protocols.
• Advanced experience in development in languages such as Python, bash, or Golang
• Advanced knowledge of security controls, audits, and configurations related to: Windows, Linux, ChromeOS, and macOS
• AWS

Preferred Experience (Optional but valued)

• Experience in common continuous integration tools such as GitHub Actions, Jenkins and CircleCI.
• Advanced experience with the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework
• Experienced DevOps or DevSecOps practitioner
• Advanced knowledge of security controls, audits, and configurations including SIEM (Splunk, QRadar) & EDR (Crowdstrike, Carbon Black)

Roles & Responsibilities

Join our security team and help secure our organization through maintaining, engineering, and deploying security solutions. We use industry-standard security tools, in an automated fashion, to ensure our security teams can operate effectively and provide security to the company.

Responsibilities:

As an individual contributor on our Cybersecurity engineering team, youll have a broad set of responsibilities including (the mix will depend on your interests and skill level):

• Troubleshooting security problems
• Assist in the management and deployment of security products on endpoints, servers, and virtual desktops
• Design, operate, and maintain a vulnerability management program
• Assist the Security Team in responding to and remediating system and/or network security breaches
• Plan, implement, manage, monitor, and upgrade security measures for the protection of the organizations data, systems, and networks
• Ensure that the organizations data and infrastructure are protected by enabling the appropriate security controls
• Plan, create, and implement cybersecurity processes and policies
• Engage in domain-specific threat modeling and attack surface analysis/reduction
• Identify information and logs to monitor, then design and engineer the process for gathering that information
• Promotes best practices and design patterns
• Willing to do remote support for Helpdesk team escalated suppprt cases
• Willing to learn newer technology / product / solutions based on customers needs.

Required Skills:

• Proficient in exploring, evaluating, and integrating new technologies, programming languages, data models, or frameworks.
• Easily pick up new technologies and are keen to expand your knowledge
• Experience in the development of projects related to network and security automation.
• Experience in infrastructure and automation processes and tools including Ansible, and Terraform
• Fundamental knowledge of SSH, TCP/IP, UDP, SSL, HTTP, HTTPS, PKI, DNS, and other common protocols.
• Advanced experience in development in languages such as Python, bash, or Golang
• Advanced knowledge of security controls, audits, and configurations related to: Windows, Linux, ChromeOS, and macOS
• AWS

Preferred Experience (Optional but valued)

• Experience in common continuous integration tools such as GitHub Actions, Jenkins and CircleCI.
• Advanced experience with the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework
• Experienced DevOps or DevSecOps practitioner
• Advanced knowledge of security controls, audits, and configurations including SIEM (Splunk, QRadar) & EDR (Crowdstrike, Carbon Black)

Product area

Google takes its responsibilities seriously, including engaging with government and other stakeholders on important public policy challenges. The Government Affairs and Public Policy (GAPP) team leads the company’s engagement with executive branch officials, legislators, regulators and third-parties in the formation of public policy. Working closely with Google leaders, GAPP seeks to identify key policy issues, listen carefully to others’ views and opinions, and distill and share the company’s perspective on those issues with external stakeholders. While we focus on challenges affecting the internet, our issue areas are increasingly broad and encompass many areas where public policy, business, and technology intersect.

Job description

As a member of Google’s Government Affairs and Public Policy team, you'll be part of a diverse global government affairs team, working across regions, product areas, and functions. You’ll combine creativity and intellectual excellence with the organizational skills to manage various campaigns, projects and initiatives. In this role, you’ll advocate for Google to bring external perspectives back into the company to inform our perception and direction. You're passionate about the opportunity to shape the future of how we use and build technology for everyone.

Qualifications

Job responsibilities

• Identify policy issues that affect Google, understand the impact on Google business and users, and participate in policy campaigns with specific goals to support a policy or set of policies.
• Monitor and research public policy issues considering how Google should work with allied organizations and industries and work with business-area leadership, Legal, Marketing, Trust and Safety, and Public Relations to develop and launch policy-friendly products.
• Build relationships with collaborators for supporting open digital ecosystems, they include developers, manufacturers, and other industry stakeholders. Understand their interests and identify areas of alignment and potential misalignment.
• Assess the need for industry associations in the APAC region, develop plans, and partner with other Government Affairs and Public Policy (GAPP) teams to ensure consistency and alignment.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 7 years of experience in policy analysis and campaigns, working on technology issues or the policy environments.
• 7 years of experience working within government, think tanks, public interest groups, technology industry groups, or corporate public policy organizations.
• Experience working in a global team that has multiple stakeholders.

Preferred qualifications

• Understanding of Android and its challenges and opportunities.
• Understanding of mobile ecosystem.
• Excellent organizational, time management and communication skills.

Senior Legal Counsel (Tech, Gaming)

We are currently engaged by my client, who is a leader in mobile gaming that has captivated more than 20 million of players worldwide.

What you’ll be doing:

• Reviewing, drafting and negotiation of contracts related to the company’s business
• Providing support and legal advice in relation to corporate matters
• Liaising with external counsels and advisors
• Contract review and Management
• Participation in various projects with the Compliance, Commercial and Finance teams
• Providing legal advice on matters relating to intellectual property rights, data protection, general commercial and contract law matters and dispute resolution
• Conducting legal research and preparing memoranda or legal analysis for internal stakeholders
• Providing day-to-day legal support to the Management and other teams in the company, such as Marketing, Product and Tech teams
• This role will report directly to the CEO for all legal matters across SEA region

What you’ll bring to the role:

• At least 7 years PQE (qualified in Singapore, US, UK or other comparable common law jurisdiction)
• Legal and regulatory compliance experience in-house or in law firms
• Prior regional experience working on related matters in the technology field will be a plus
• Keen interest and good understanding of developments in the internet, technology-related space
• Excellent problem-solving, analytical and organizational skills
• Proactive approach and ability to handle matters independently

Regret to inform that only shortlisted candidates will be notified.

www.dadaconsultants.com

EA Registration Number: R1878287

Business Registration Number: 201735941W.

Licence Number: 18S9037

Job Summary

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

Mandatory Skill-set

• 5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;
• Strong knowledge of ISO 27001:2022 standards and requirements;
• Experience in developing and maintaining comprehensive project plans, including timelines and milestones;
• Experience in managing ISO 27001-related risks and conducting internal/external audits;
• Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

Desired Skill-set

• ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;
• PMP, CISSP, CISM, or similar certifications are a plus;

Responsibilities

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

We are seeking a skilled Pen tester to join our dynamic cybersecurity team(cyber offensive team). In this role, you will be responsible for conducting vulnerability assessments using testing tools, identifying security weaknesses across systems and networks, and ensuring that company's and clients infrastructure adheres to industry best practices for security and compliance.

• Conducting comprehensive penetration tests on a variety of applications and systems to identify security vulnerabilities.
• Basic understanding of networking and protocols (TCP/IP, DNS, HTTP, etc.).
• Use tools such as Nessus, Burp Suite, Wireshark,Rapid7 and Nmap.
• Prepare reports detailing vulnerabilities, risks, and remediation recommendations.
• Perform audits for compliance with industry standards and regulatory requirements such as PCI-DSS, HIPAA, and CIS benchmarks.
• Knowledge of operating systems (Linux, Windows).
• Awareness of OWASP Top 10 and common attack vectors.
• Work closely with IT teams and security professionals to remediate identified vulnerabilities, ensuring a robust defense against potential threats.
• Certifications like CompTIA Security+, CEH (Certified Ethical Hacker), or others (optional but advantageous).
• Ability to communicate complex technical findings clearly and effectively to both technical and non-technical stakeholders.

• Position :Project Manager -Bank
• Location : Office in Changi Business Park
• Working hours : 5 days work week;(8.30am, -6.00pm)
• Salary (commensurate with experience) : Up to $5000 + AWS + Performance Bonus + $60 Mobile reimbursement + Birthday leave + Health insurance
• Duration : Permanent
• Industry : Security system

Main responsibilities

• Assistant to Project Lead to manage and coordinate with CSIS vendors or business stakeholders inclusive of attending/ initiating meetings and all to ensure we meet the scheduled timeline, stakeholders’ expectations, facilitate on the testing programs for the newly installed security systems.
• Conduct site inspections and assesses the condition of the facility as well as propose the necessary requirements per security Standards.
• Coordinate and facilitate stakeholders and provide guidance on the access card submissions and approvals etc.
• Conduct inventory checks for all completed projects, reviewing of floorplan system plotting diagram and updates.
• Supporting role function on finance administration mainly on project expense tracking.
• Leading the execution works onsite, supervising the vendors and may also be the overall lead for small independent project works.

Requirement:

• Minimum of at least 1 year working experience.
• Minimum High School/ Diploma in any faculty.
• Security certifications will be desirable
• Must be able to work under a fast-paced environment, aggressive culture, and timeline.
• Basic knowledge on security systems i.e. access control, CCTV, IDS
• Fundamentals of physical security and security system installation.

Email to [email protected]

Do visit www.facebook.com/search.personnel and https://www.instagram.com/search.personnel for more job listings and career tips!

***We DO NOT charge our candidates any referral fee nor bind them with any contract.***

Joie Chang

Deputy Consulting Director (APAC)

Reg no.: R2090601 | EA No: 13C6684.

Thank you for your interest in this position. Our shortlisting period is 3 working days. Only shortlisted candidates will be contacted for further consideration.

If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend that you continue your job search to maximize your opportunities. We wish you all the best and should we have any suitable roles that match your experiences/ qualifications/ preferences, we will reach out to you.

At NUS Singapore, our people are the driving force behind our success. We pride ourselves on fostering a vibrant and inclusive community of talented individuals from diverse backgrounds.

When you join NUS, you become part of a community of passionate individuals who are dedicated to driving innovation and change in education, research, and service. Our culture of inclusivity and entrepreneurship means that you’ll have the freedom to explore your ideas and make a meaningful impact. Your career at NUS is more than just a job - it’s a transformative experience that will shape your personal and professional growth.

Explore the link provided to learn additional details about the available job opportunity:

https://career44.sapsf.com/sfcareer/jobreqcareer?jobId=27261&company=nationalunP2

Reporting to the Asst. Operations Admin Manager, you are responsible for supporting the project team in planning, executing, implementing, and installing projects to completion. Organizing project activities and supporting the project team in project implementation and successful delivery of projects.

The Job:

• Support and assist the Project team in organizing/coordinating various project components for the successful delivery of projects.
• Assist with Drafting of project proposals, technical documentation, and preliminary schedules
• Prepare project organization and communication charts
• Provide checks and coordinate amendments of Uscan activities reports
• Co-ordination of project activities, track progress, and follow-up on issues or action items
• Perform activities related to the project, such as preparing status reports, managing the project plans, issues/risks log, change control/request log, and other day-to-day tasks
• Scheduling and coordinating meetings
• Attend project meetings, document meeting minutes and action items for distribution to project team members
• Effectively and accurately communicate relevant project information to the client and project team
• Monthly submission of consolidated Staff Leave to HR
• Act as a contact point for customers and internal departments.

Job Requirements:

• Diploma in Engineering or Project Management or Administration or its equivalent
• With 3 years’ relevant experience in facilities management or the construction related industry
• Excellent organization skills and ability to multi-task
• Meticulous and pay great attention to detail
• Good communication and interpersonal skills
• A team player and yet work independently with minimum supervision
• Ability to interact and work with people of all levels
• Ability to work under pressure and meet tight deadlines.
• Proficient in MS Project and MS Office software