Principle Responsibilities:

• Work closely with the Security Operations Center (SOC) and Security Engineering teams to implement and improve existing SOC process automation
• Development of new tools, processes and procedures to enhance SOC monitoring and analysis capabilities
• Enhance current deployment of commercial tools used by Security Operations Center.
• Evaluate new technologies against SOC requirements in proof of concept

Requirements:

The candidate should have developer experience working in a Security Operations Center. He/she should have experience in web development with secure coding practices, and general knowledge of SOAR technologies. In addition to following experience:

• 5-8 years of relevant experience
• Bachelor's Degree or higher preferred
• Advanced proficiency with Microsoft Office tools and software
• Experience utilizing a SOAR platform with SIEM and case management solution
• Experience with various scripting languages - Python, PHP, etc.
• Experience working in a SOC environment and familiar with SOC Incident Response process
• Consistently demonstrates clear and concise written and verbal communication
• Proven influencing and relationship management skills
• Proven analytical skills
• Team player with the ability to work independently

Qualifications:

• Consistently demonstrates clear and concise written and verbal communication
• Proven influencing and relationship management skills
• Proven analytical skills

Education:

• Bachelor’s degree/University degree or equivalent experience

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

We are looking for a Cloud Infrastructure Engineer (Endpoint Security) to join us!

Responsibilities:

· Work with Product Owner and Product Principals to operate the various endpoint security tools, including:

- EPP/EDR

- Data Loss Prevention

· Work with Central ICT Infra teams to operate the on-prem components of the SSE platform.

· Conduct system health check and proactively identify and troubleshoot issue in end-to-end manner.

· Manage the change, release, incident, problem management processes in ITSM platform.

· Document the requirement and specification to address the needs for all Public Service agencies.

• Comfortable with a 5-year direct contract
• At least 5 years of experience in the above domain areas

Join us and discover a meaningful and exciting career with Assurity Trusted Solutions!

The remuneration package will commensurate with your qualifications and experience.

We thank you for your interest and please note that only shortlisted candidates will be notified.

By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS's privacy statement which can be found at: https://www.assurity.sg/privacy.html or such other successor site.

Benefits

• A wholly-owned subsidiary of GovTech.
• We promote a learning culture and encourage you to grow and learn.
• A competency framework is in place to help you grow your career with us.

About the team you are joining

Reporting to the Regional Director Operations Safety and Security (OSS) – Asia Pacific, the incumbent will be responsible for driving activities in the Asia Pacific Region to support continuous improvement in regional aviation safety.

Specifically, the Senior Manager, Safety will be responsible for utilizing centrally coordinated IATA policies and procedures to support advancements in regional safety performance; will take a proactive role to identify new, and emerging, regional issues impacting aviation safety and, collaborating with centrally located IATA experts, determine whether these issues are systemic or local in nature; lead the delivery of regional safety initiatives to support capacity building across industry.

They will support initiatives to enhance safety throughout the region by influencing a network of high-level contacts within airlines, government authorities, air navigation service providers, airports, other international agencies, and ICAO.

About the team you are joining

Reporting to the Regional Director Operations Safety and Security (OSS) – Asia Pacific, the incumbent will be responsible for driving activities in the Asia Pacific Region to support continuous improvement in regional aviation safety.

Specifically, the Senior Manager, Safety will be responsible for utilizing centrally coordinated IATA policies and procedures to support advancements in regional safety performance; will take a proactive role to identify new, and emerging, regional issues impacting aviation safety and, collaborating with centrally located IATA experts, determine whether these issues are systemic or local in nature; lead the delivery of regional safety initiatives to support capacity building across industry.

They will support initiatives to enhance safety throughout the region by influencing a network of high-level contacts within airlines, government authorities, air navigation service providers, airports, other international agencies, and ICAO.

What your day would be like

• Leverage the IATA Safety Strategy to deliver on safety priorities, identified though IATA safety management activities and/or IATA governance groups, to achieve the timely implementation of IATA global programs or locally targeted action plans across Asia Pacific.
• Promote IATA safety policies and strategies with ICAO, Government Authorities and Agencies, Air Navigation Service Providers (ANSP) and Airport Authorities responsible for the planning, implementation and operation of air navigation and airport facilities, to deliver safety improvements.
• Identify, develop activities, and deliver safety improvement programs aimed to rectify any safety deficiencies within the region collaborating with governments, airlines, ANSPs and airports utilizing regional aviation safety forums such as RASG and APRAST. This may include the development of country specific safety strategies.
• Engage stakeholders, and actively promote, the IATA Safety Strategy around the three strategic goals relating to Safety Leadership, Safety Risk and Safety Connect to drive the:evolution of safety culture and reporting;
  prioritization of identifying and addressing safety risks;
  evolution of IATA audit programs;
  growth of a safety community, connecting all IATA airlines, across the region.
  
• Support promotion, and engagement, with the IATA Operational Safety Audit (IOSA) program whilst looking at new opportunities to expand the program.
• Support IATA's regional ground safety audit activities including the IATA Safety Audit for Ground Operations (ISAGO).
• Support IATA's regional safety data activities including the Global Aviation Data Management Program (GADM).
• Contribute to the commercial strategy and targets assigned to the region by promoting IATA products and services.
• Coordinate airline input during regional ICAO/CAA rule-making and standard-setting processes.
• Respond to tactical issues arising in day-to-day operations in the region as well as provide information and support to IATA member airlines during periods of disruption/contingency operations.

What your day would be like

· Leverage the IATA Safety Strategy to deliver on safety priorities, identified though IATA safety management activities and/or IATA governance groups, to achieve the timely implementation of IATA global programs or locally targeted action plans across Asia Pacific.

· Promote IATA safety policies and strategies with ICAO, Government Authorities and Agencies, Air Navigation Service Providers (ANSP) and Airport Authorities responsible for the planning, implementation and operation of air navigation and airport facilities, to deliver safety improvements.

· Identify, develop activities, and deliver safety improvement programs aimed to rectify any safety deficiencies within the region collaborating with governments, airlines, ANSPs and airports utilizing regional aviation safety forums such as RASG and APRAST. This may include the development of country specific safety strategies.

· Engage stakeholders, and actively promote, the IATA Safety Strategy around the three strategic goals relating to Safety Leadership, Safety Risk and Safety Connect to drive the:

· evolution of safety culture and reporting;

· prioritization of identifying and addressing safety risks;

· evolution of IATA audit programs;

· growth of a safety community, connecting all IATA airlines, across the region.

· Support promotion, and engagement, with the IATA Operational Safety Audit (IOSA) program whilst looking at new opportunities to expand the program.

· Support IATA's regional ground safety audit activities including the IATA Safety Audit for Ground Operations (ISAGO).

· Support IATA's regional safety data activities including the Global Aviation Data Management Program (GADM).

· Contribute to the commercial strategy and targets assigned to the region by promoting IATA products and services.

· Coordinate airline input during regional ICAO/CAA rule-making and standard-setting processes.

· Respond to tactical issues arising in day-to-day operations in the region as well as provide information and support to IATA member airlines during periods of disruption/contingency operations.

We would love to hear from you if you have

• Extensive aviation background/experience in positions involved in safety, operations, certification and/or regulation of civil air transport operations (strong preference given to candidates with experience as a pilot).
• Qualifications in aviation management or other relevant discipline (relevant professional qualifications may be considered in lieu of a university degree).
• A high degree of analytical skill and technical knowledge in the provision of air transport services with knowledge of ICAO standards and recommended practices, industry best practices and civil aviation operational procedures.
• An understanding of air safety investigation and/or risk-based airline auditing in a multidisciplinary environment would be beneficial.
• Comprehensive understanding of safety information sharing programs and data management methodology.
• Ability to work remotely from core safety team, based in Geneva and Montreal, to independently deliver on activities agreed upon by centrally located subject matter experts.
• Comfortable to perform under pressure to deliver outcomes upon clearly defined timelines.
• Confident to report regularly to core safety team on progress made, and challenges experienced, against pre-determined metrics for agreed objectives.
• Ability to deal with member airlines at a technical, safety and operational level with a positive approach to problem solving.
• Ability to effectively advocate across a wide range of aviation stakeholders, by promoting IATA activities and the benefits that desired outcomes will achieve, to gain industry buy-in.
• The ability to speak in public and deliver key messages to a diverse range of stakeholders.
• Diplomacy in relationships with contacts in government and other key organizations.
• Fluency in English.
• Able to travel when required whilst managing a large and dynamic workload.

Join our security team and help secure our organization through maintaining, engineering, and deploying security solutions. We use industry-standard security tools, in an automated fashion, to ensure our security teams can operate effectively and provide security to the company.

Responsibilities:

As an individual contributor on our Cybersecurity engineering team, youll have a broad set of responsibilities including (the mix will depend on your interests and skill level):

• Troubleshooting security problems
• Assist in the management and deployment of security products on endpoints, servers, and virtual desktops
• Design, operate, and maintain a vulnerability management program
• Assist the Security Team in responding to and remediating system and/or network security breaches
• Plan, implement, manage, monitor, and upgrade security measures for the protection of the organizations data, systems, and networks
• Ensure that the organizations data and infrastructure are protected by enabling the appropriate security controls
• Plan, create, and implement cybersecurity processes and policies
• Engage in domain-specific threat modeling and attack surface analysis/reduction
• Identify information and logs to monitor, then design and engineer the process for gathering that information
• Promotes best practices and design patterns
• Willing to do remote support for Helpdesk team escalated suppprt cases
• Willing to learn newer technology / product / solutions based on customers needs.

Required Skills:

• Proficient in exploring, evaluating, and integrating new technologies, programming languages, data models, or frameworks.
• Easily pick up new technologies and are keen to expand your knowledge
• Experience in the development of projects related to network and security automation.
• Experience in infrastructure and automation processes and tools including Ansible, and Terraform
• Fundamental knowledge of SSH, TCP/IP, UDP, SSL, HTTP, HTTPS, PKI, DNS, and other common protocols.
• Advanced experience in development in languages such as Python, bash, or Golang
• Advanced knowledge of security controls, audits, and configurations related to: Windows, Linux, ChromeOS, and macOS
• AWS

Preferred Experience (Optional but valued)

• Experience in common continuous integration tools such as GitHub Actions, Jenkins and CircleCI.
• Advanced experience with the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework
• Experienced DevOps or DevSecOps practitioner
• Advanced knowledge of security controls, audits, and configurations including SIEM (Splunk, QRadar) & EDR (Crowdstrike, Carbon Black)

Roles & Responsibilities

Join our security team and help secure our organization through maintaining, engineering, and deploying security solutions. We use industry-standard security tools, in an automated fashion, to ensure our security teams can operate effectively and provide security to the company.

Responsibilities:

As an individual contributor on our Cybersecurity engineering team, youll have a broad set of responsibilities including (the mix will depend on your interests and skill level):

• Troubleshooting security problems
• Assist in the management and deployment of security products on endpoints, servers, and virtual desktops
• Design, operate, and maintain a vulnerability management program
• Assist the Security Team in responding to and remediating system and/or network security breaches
• Plan, implement, manage, monitor, and upgrade security measures for the protection of the organizations data, systems, and networks
• Ensure that the organizations data and infrastructure are protected by enabling the appropriate security controls
• Plan, create, and implement cybersecurity processes and policies
• Engage in domain-specific threat modeling and attack surface analysis/reduction
• Identify information and logs to monitor, then design and engineer the process for gathering that information
• Promotes best practices and design patterns
• Willing to do remote support for Helpdesk team escalated suppprt cases
• Willing to learn newer technology / product / solutions based on customers needs.

Required Skills:

• Proficient in exploring, evaluating, and integrating new technologies, programming languages, data models, or frameworks.
• Easily pick up new technologies and are keen to expand your knowledge
• Experience in the development of projects related to network and security automation.
• Experience in infrastructure and automation processes and tools including Ansible, and Terraform
• Fundamental knowledge of SSH, TCP/IP, UDP, SSL, HTTP, HTTPS, PKI, DNS, and other common protocols.
• Advanced experience in development in languages such as Python, bash, or Golang
• Advanced knowledge of security controls, audits, and configurations related to: Windows, Linux, ChromeOS, and macOS
• AWS

Preferred Experience (Optional but valued)

• Experience in common continuous integration tools such as GitHub Actions, Jenkins and CircleCI.
• Advanced experience with the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework
• Experienced DevOps or DevSecOps practitioner
• Advanced knowledge of security controls, audits, and configurations including SIEM (Splunk, QRadar) & EDR (Crowdstrike, Carbon Black)

Product area

Google takes its responsibilities seriously, including engaging with government and other stakeholders on important public policy challenges. The Government Affairs and Public Policy (GAPP) team leads the company’s engagement with executive branch officials, legislators, regulators and third-parties in the formation of public policy. Working closely with Google leaders, GAPP seeks to identify key policy issues, listen carefully to others’ views and opinions, and distill and share the company’s perspective on those issues with external stakeholders. While we focus on challenges affecting the internet, our issue areas are increasingly broad and encompass many areas where public policy, business, and technology intersect.

Job description

As a member of Google’s Government Affairs and Public Policy team, you'll be part of a diverse global government affairs team, working across regions, product areas, and functions. You’ll combine creativity and intellectual excellence with the organizational skills to manage various campaigns, projects and initiatives. In this role, you’ll advocate for Google to bring external perspectives back into the company to inform our perception and direction. You're passionate about the opportunity to shape the future of how we use and build technology for everyone.

Qualifications

Job responsibilities

• Identify policy issues that affect Google, understand the impact on Google business and users, and participate in policy campaigns with specific goals to support a policy or set of policies.
• Monitor and research public policy issues considering how Google should work with allied organizations and industries and work with business-area leadership, Legal, Marketing, Trust and Safety, and Public Relations to develop and launch policy-friendly products.
• Build relationships with collaborators for supporting open digital ecosystems, they include developers, manufacturers, and other industry stakeholders. Understand their interests and identify areas of alignment and potential misalignment.
• Assess the need for industry associations in the APAC region, develop plans, and partner with other Government Affairs and Public Policy (GAPP) teams to ensure consistency and alignment.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 7 years of experience in policy analysis and campaigns, working on technology issues or the policy environments.
• 7 years of experience working within government, think tanks, public interest groups, technology industry groups, or corporate public policy organizations.
• Experience working in a global team that has multiple stakeholders.

Preferred qualifications

• Understanding of Android and its challenges and opportunities.
• Understanding of mobile ecosystem.
• Excellent organizational, time management and communication skills.

Job Summary:

• Provide 1st and 2nd Level IT Support to end-users
• Manage IT assets through procurement, tracking, maintenance, refresh /renewal and disposal/ termination.
• Provide assistance in the implementation of new end-user computing technologies.

Job Scope:

• Design, deploy, and manage security solutions such as firewalls, IDS/IPS, and encryption technologies.
• Conduct security audits, compliance checks such as vulnerability assessments with risk analysis
• Development and enforcement of security policies, procedures and controls
• Integrate security measures into new and existing IT systems and applications.
• Ensure that applications are securely configured, including hardening default settings, securing APIs, and restricting file permissions.
• Conduct initial investigations of security violations/incidents, and escalate as necessary
• Collaborate with other IT teams to ensure security is integrated across all systems and processes.
• Stay updated on the latest security trends & technologies
• Design, deploy, and manage security solutions such as firewalls, IDS/IPS, and encryption technologies.
• Work with other contractors where required for delivery of network services
• Any other IT duties as assigned.

Special Aptitude And Knowledge

• Advanced technical knowledge of security technologies and systems.
• Expertise in firewall administration, encryption technologies, and network protocols.
• Experience in designing and implementing security architectures.
• Proficiency in vulnerability assessment tools and penetration testing methodologies.
• Able to communicate well, handle documentation and explaining network and IT architecture
• A great team player and able to work well with other team member

Qualification

• Recognized Degree in Information Technology, Computer/ Network Engineering or equivalent.
• Possess relevant certifications such as CISSP, CCSP, CEH, or advanced security certifications
• Minimum 5 years of experience in an equivalent role.
• Experience with a company that has achieved CyberTrust Mark certification or has actively worked towards it is a bonus.
• Familiarity with implementing security measures in the healthcare industry is also advantageous.

Senior Legal Counsel (Tech, Gaming)

We are currently engaged by my client, who is a leader in mobile gaming that has captivated more than 20 million of players worldwide.

What you’ll be doing:

• Reviewing, drafting and negotiation of contracts related to the company’s business
• Providing support and legal advice in relation to corporate matters
• Liaising with external counsels and advisors
• Contract review and Management
• Participation in various projects with the Compliance, Commercial and Finance teams
• Providing legal advice on matters relating to intellectual property rights, data protection, general commercial and contract law matters and dispute resolution
• Conducting legal research and preparing memoranda or legal analysis for internal stakeholders
• Providing day-to-day legal support to the Management and other teams in the company, such as Marketing, Product and Tech teams
• This role will report directly to the CEO for all legal matters across SEA region

What you’ll bring to the role:

• At least 7 years PQE (qualified in Singapore, US, UK or other comparable common law jurisdiction)
• Legal and regulatory compliance experience in-house or in law firms
• Prior regional experience working on related matters in the technology field will be a plus
• Keen interest and good understanding of developments in the internet, technology-related space
• Excellent problem-solving, analytical and organizational skills
• Proactive approach and ability to handle matters independently

Regret to inform that only shortlisted candidates will be notified.

www.dadaconsultants.com

EA Registration Number: R1878287

Business Registration Number: 201735941W.

Licence Number: 18S9037

Product area

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Additional job description

As an Incident Response Consultant, you will provide industry-leading incident response, assessment, transformation, managed detection and response, and training services with in-depth tactical support. You will help organizations effectively detect and respond to threats and reduce the overall impact of business risk before, during, and after an incident. You will be able to resolve security incidents quickly, effectively and at scale with complete incident response including investigation, containment, remediation, and crisis management. In this role, you will work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage.

Qualifications

Job responsibilities

• Collaborate with internal and customer teams to investigate and contain incidents.
• Recognize and codify attacker Tools, Tactics, and Procedures (TTP) and Indicators of Compromise (IOC) that can be applied to current and future investigations.
• Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations.
• Support specific workstreams for a variety of client-facing investigations including the examination of cloud, endpoint, and network-based sources of evidence.
• Develop comprehensive and accurate reports and presentations for technical and non-technical audiences.

Minimum qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
• Experience in information security domain, with 1 year of experience leading Incident Response investigations, analysis, or containment actions and any three of the following: network or log forensic analysis, malware triage analysis, disk, or memory forensics.
• Experience in cybersecurity in one of the following areas: network security, wireless security, web application assessments, social engineering, scripting, cloud security, reverse engineering, or incident response.

Preferred qualifications

• Experience with enterprise security architecture and security controls.
• Experience with cloud incidents or forensic responses.
• Experience with malware triage analysis and disk or memory forensics in one or more of the following: Windows, macOS, or Linux.
• Excellent time and project management skills.

Product area

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Additional job description

As an Incident Response Consultant, you will provide industry-leading incident response, assessment, transformation, managed detection and response, and training services with in-depth tactical support. You will help organizations effectively detect and respond to threats and reduce the overall impact of business risk before, during, and after an incident. You will be able to resolve security incidents quickly, effectively and at scale with complete incident response including investigation, containment, remediation, and crisis management. In this role, you will work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage.

Qualifications

Job responsibilities

• Collaborate with internal and customer teams to investigate and contain incidents.
• Recognize and codify attacker Tools, Tactics, and Procedures (TTP) and Indicators of Compromise (IOC) that can be applied to current and future investigations.
• Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations.
• Support specific workstreams for a variety of client-facing investigations including the examination of cloud, endpoint, and network-based sources of evidence.
• Develop comprehensive and accurate reports and presentations for technical and non-technical audiences.

Minimum qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
• Experience in information security domain, with 1 year of experience leading Incident Response investigations, analysis, or containment actions and any three of the following: network or log forensic analysis, malware triage analysis, disk, or memory forensics.
• Experience in cybersecurity in one of the following areas: network security, wireless security, web application assessments, social engineering, scripting, cloud security, reverse engineering, or incident response.

Preferred qualifications

• Experience with enterprise security architecture and security controls.
• Experience with cloud incidents or forensic responses.
• Experience with malware triage analysis and disk or memory forensics in one or more of the following: Windows, macOS, or Linux.
• Excellent time and project management skills.

Job Description

You will be a member of the Group Information Security Team responsible for responding to threats and incidents to the corporate networks, systems (on-prem and cloud), and digital assets.

Key Responsibilities:

•Perform security monitoring and incident response activities across the scoot networks, leveraging a variety of tools and techniques.

•Manage Security Operations center.

•Detect incidents through proactive “hunting” across security-relevant data sets.

•Ability to correlate multiple events from different devices to identify abnormal behaviour

•Document incident response analysis activities thoroughly

•Develop new, repeatable methods for finding malicious activities

•Provide recommendations to enhance detection and protection capabilities.

•Effectively present technical topics to both technical and non-technical audiences

•Develop and follow detailed operational processes and procedures to appropriately analyze, escalate, and assist in the remediation of information security incidents

•Prioritize multiple high-priority tasks and formulate responses/recommendations in a fast-paced environment

•Prepare documentation for security technical standards, standard operational procedures, and hardening standards.

•Analyse endpoint, network, and application logs

•Assist other IT teams in security-related issues

•Engage with vendors and parent company SIA team members for security reviews.

Requirements:

•Degree in Computer Engineering, Computer Science, Information Systems, or equivalent qualification.

•At least 5-6 years of experience in Cybersecurity Incident and Security Operations.

•Demonstrate experience in Information Security with a focus on Cyber Security Operations, Incident Response and Detection.

•Experience working in the Security Operations Centre and/or Computer Incident Response Team.

•Excellent problem-solving skills combined with hands-on experience doing root cause analysis and post-incident reviews.

•Solid knowledge of computer networks and common protocols

•Knowledge of prominent cyber threat actors and APT groups.

•Experience with Threat Intelligence Platforms.

•Experience with SIEM (especially Splunk).

•Professional security related qualifications (i.e. GCIA, CISSP etc) will be an advantage

•Preferred certifications: CISSP, CISM, CISA, ISMS, TOGAF, SABS

•Good interpersonal skills

Job Summary

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

Mandatory Skill-set

• 5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;
• Strong knowledge of ISO 27001:2022 standards and requirements;
• Experience in developing and maintaining comprehensive project plans, including timelines and milestones;
• Experience in managing ISO 27001-related risks and conducting internal/external audits;
• Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

Desired Skill-set

• ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;
• PMP, CISSP, CISM, or similar certifications are a plus;

Responsibilities

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

• Position :Project Manager -Bank
• Location : Office in Changi Business Park
• Working hours : 5 days work week;(8.30am, -6.00pm)
• Salary (commensurate with experience) : Up to $5000 + AWS + Performance Bonus + $60 Mobile reimbursement + Birthday leave + Health insurance
• Duration : Permanent
• Industry : Security system

Main responsibilities

• Assistant to Project Lead to manage and coordinate with CSIS vendors or business stakeholders inclusive of attending/ initiating meetings and all to ensure we meet the scheduled timeline, stakeholders’ expectations, facilitate on the testing programs for the newly installed security systems.
• Conduct site inspections and assesses the condition of the facility as well as propose the necessary requirements per security Standards.
• Coordinate and facilitate stakeholders and provide guidance on the access card submissions and approvals etc.
• Conduct inventory checks for all completed projects, reviewing of floorplan system plotting diagram and updates.
• Supporting role function on finance administration mainly on project expense tracking.
• Leading the execution works onsite, supervising the vendors and may also be the overall lead for small independent project works.

Requirement:

• Minimum of at least 1 year working experience.
• Minimum High School/ Diploma in any faculty.
• Security certifications will be desirable
• Must be able to work under a fast-paced environment, aggressive culture, and timeline.
• Basic knowledge on security systems i.e. access control, CCTV, IDS
• Fundamentals of physical security and security system installation.

Email to [email protected]

Do visit www.facebook.com/search.personnel and https://www.instagram.com/search.personnel for more job listings and career tips!

***We DO NOT charge our candidates any referral fee nor bind them with any contract.***

Joie Chang

Deputy Consulting Director (APAC)

Reg no.: R2090601 | EA No: 13C6684.

Thank you for your interest in this position. Our shortlisting period is 3 working days. Only shortlisted candidates will be contacted for further consideration.

If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend that you continue your job search to maximize your opportunities. We wish you all the best and should we have any suitable roles that match your experiences/ qualifications/ preferences, we will reach out to you.

At NUS Singapore, our people are the driving force behind our success. We pride ourselves on fostering a vibrant and inclusive community of talented individuals from diverse backgrounds.

When you join NUS, you become part of a community of passionate individuals who are dedicated to driving innovation and change in education, research, and service. Our culture of inclusivity and entrepreneurship means that you’ll have the freedom to explore your ideas and make a meaningful impact. Your career at NUS is more than just a job - it’s a transformative experience that will shape your personal and professional growth.

Explore the link provided to learn additional details about the available job opportunity:

https://career44.sapsf.com/sfcareer/jobreqcareer?jobId=27261&company=nationalunP2

Overall Summary:

Mainly supporting security aspect like firewall checkpoint, security appliances - configuration, troubleshooting, capacity planning. Supporting current operation and deployment of resiliency project. This is a 2-year direct contract position.

Roles and Responsibilities:

• Directly reporting to Security Senior Manager
• Assist Architect team on new infrastructure design, implementation, and management of network solutions that form the core infrastructure, ensuring seamless integration across different platforms. This includes procurement of necessary equipment.
• To provide comprehensive product knowledge on the data technology required to deliver, support the networks infrastructure.
• Collaborate with the team to identify network and system needs, monitor performance metrics, troubleshoot, and resolve network-related issues, and implement improvements.
• Deliver project management for network activities encompassing upgrades, deployments, and migrations. Provide technical guidance and user support as required.
• Develop, maintain, and update documentation covering the network environment and operational procedures.
• Generate reports and detailed documentation outlining findings, implemented solutions, and recommendations for further enhancements.
• Oversee network environment to maximize performance, scalability, and minimize downtime.
• Closely coordinate and conform to Change Management policies, process, and procedures on any network changes.
• To implement approved changes, troubleshoot to identify root causes and implement effective solutions.
• Experience on Automating daily network tasks using scripting.
• Be available to provide on-call support as needed.

Qualifications/ Requirements:

• Minimum Bachelor in Computer Engineering or equivalent
• Must equipped with CCNP or CCIE
• Network Infrastructure & Hardware: 5+ years experience managing large enterprise network with a strong focus on F5, Palo Alto, Cisco, and CheckPoint Technology.
• Network Devices: In-depth knowledge and proficiency with switches, firewalls, load balancers, routers, and ISE.
• Network Design & Troubleshooting: Expertise in designing, monitoring, and network & incident management (LAN, WAN, VPN).
• Strong experience with automation tools: Ansible, Python - Automate in operation / project work before
• Experience with Deployment and automation, advantage to have experience building data center
• Proven track record of success in a fast-paced IT environment.
• Excellent communication and interpersonal skills, allowing you to effectively collaborate with both technical and non-technical stakeholders.
• Ability to work under pressure and delivery the project on time with minimum supervision.
• Certified and experienced with the mentioned technologies.

Responsibilities:

• Manage public relations matter and reach out, engage, educate and liaise with property owners, occupiers and residents on all matters relating to the project
• Manage the team of PRO engaged by the contractors
• Develop, coordinate and supervise the public relation programme for the project

Requirement

• Diploma in Mass Communication or Public Relation
• At least 3 years of relevant experience as a Public Relation Officer in the construction industry
• Able to work independently and in a fast moving environment
• Contract role

Responsibilities:

- Respond promptly to and handle customer requests and queries.

- Resolve incidents by troubleshooting system and network problems, diagnosing and resolving hardware/software issues, and analyzing system logs for potential issues.

- Fulfill change requests, service requests, and close problem tickets, including applying OS updates, patches, and configuration changes.

- Conduct preventive maintenance tasks and vulnerability assessments to ensure security compliance and system hardening.

Requirements:

- Bachelor’s degree in Computer Science, Information Technology, or related field.

- Preferred certifications: CCNA, CCNP, CCIE.

- 1-3 years of experience in network and security management.

- Have experience in supporting firewall and network equipment such as Cisco switches, Check Point, and Palo Alto Networks.

- Strong problem-solving skills and a proactive approach to information security.

- Ability to work independently and collaboratively in a team environment.

Cyber Security Engineer Job description

- To implement and deploy solutions like SIEM, EDR, and NMS:

o Splunk

o QRadar

o Carbon Black EDR

o SolarWinds NMS

o Other new onboarded products or solutions

- To manage and work/liaise with product vendors, partners, and customers in terms of schedule, expectation, and requirements

- To be able to research and stage test environment for project preparation

- To provide consistent and clear communication to external and internal stakeholders

- To provide informal training to partners and customers

Requirements:

- Diploma/Degree in Computer Engineering, Computer Science, Information Systems or equivalent

- Minimum 2 years of relevant work experience in IT security implementation and deployment

- Minimum 1 year of relevant work experience with relevant product deployment

- Good understanding of operating system technology, such as Unix, Linux, and Windows Server

- Good networking & scripting knowledge

- Technically inclined and hands-on

- Good interpersonal skills, independent, proactive and a team player

- Good communication, presentation, and writing skills

- Able to work independently

- Preferably from a System-Integrator or Distributor background

The successful candidate will focus on developing and articulating solutions for our clients, working with multi-functional teams, and driving conversations at the most senior levels of our client’s organizations in the public sector.

Key Responsibilities: -

•  Generate sales opportunity to achieve short and long term revenue and profit growth
•  Execute direct sales programs and initiatives to drive sales
•  Develop and execute sales strategy for the accounts assigned
•  Develop and maintain a high level understanding of end-to-end IT offerings including IT infrastructure, security technologies, IT application, managed services & digital transformation in local competitive environment
•  Manage overall sales process from pre to post-sales
•  Take active lead to engage partners in customer engagement and solutioning
•  Responsible for proposal creation and delivery
•  Engage customers at all level to develop long term business relationship
•  Engage internal stakeholders in sales approval process

Job Requirements: -

•  Minimum 5 years of working experience in IT solutions sales, with the ability to demonstrate a high level of understanding of the latest technologies, preferably from SI environment
•  Diploma/Degree in Computer Science/Information Technology or equivalent
•  Demonstrate experience in managing sales pipeline
•  Experience in selling with partners and enterprise customers
•  Experience in public sector (Government / Education / Healthcare) sales will be added advantage

Reporting to the Asst. Operations Admin Manager, you are responsible for supporting the project team in planning, executing, implementing, and installing projects to completion. Organizing project activities and supporting the project team in project implementation and successful delivery of projects.

The Job:

• Support and assist the Project team in organizing/coordinating various project components for the successful delivery of projects.
• Assist with Drafting of project proposals, technical documentation, and preliminary schedules
• Prepare project organization and communication charts
• Provide checks and coordinate amendments of Uscan activities reports
• Co-ordination of project activities, track progress, and follow-up on issues or action items
• Perform activities related to the project, such as preparing status reports, managing the project plans, issues/risks log, change control/request log, and other day-to-day tasks
• Scheduling and coordinating meetings
• Attend project meetings, document meeting minutes and action items for distribution to project team members
• Effectively and accurately communicate relevant project information to the client and project team
• Monthly submission of consolidated Staff Leave to HR
• Act as a contact point for customers and internal departments.

Job Requirements:

• Diploma in Engineering or Project Management or Administration or its equivalent
• With 3 years’ relevant experience in facilities management or the construction related industry
• Excellent organization skills and ability to multi-task
• Meticulous and pay great attention to detail
• Good communication and interpersonal skills
• A team player and yet work independently with minimum supervision
• Ability to interact and work with people of all levels
• Ability to work under pressure and meet tight deadlines.
• Proficient in MS Project and MS Office software

Position Title: In-House Legal Counsel

Job Description:

Transfong Ventures is seeking an experienced and proactive In-House Legal Counsel to join our team. This role is crucial to supporting our cross-border operations between Singapore and China, particularly within the framework of our Singapore-China industry park partnership and technology accelerator. The ideal candidate will have strong legal expertise, particularly in cross-border partnerships, compliance, and risk management.

Key Responsibilities:

1. Legal Support for Cross-Border Operations:

• Provide comprehensive legal support for the company’s business operations in both China and Singapore.
• Advise on legal, regulatory, and compliance issues specific to both jurisdictions, including corporate governance, taxation, intellectual property, labor laws, and environmental regulations.

2. Business Development & Market Entry:

• Serve as the primary legal advisor for business development projects, including market entry strategies and operational support in both Singapore and China.
• Provide legal support to Singapore technology companies entering the China market as part of the company’s acceleration program.

3. Regulatory Compliance:

• Advise on the regulatory landscape for businesses operating in industrial zones, including foreign direct investment regulations and special economic zones in China.
• Ensure compliance with local laws, international standards, and any evolving regulatory frameworks affecting cross-border operations.

4. Risk Management & Mitigation:

• Conduct risk assessments related to legal, regulatory, and operational risks in the Singapore-China industry park partnership and the cross-border technology accelerator.
• Advise on risk mitigation strategies to safeguard the company’s interests and operations.

5. Contract Management:

• Ensure contracts comply with both Chinese and Singaporean legal requirements while protecting the company’s commercial interests.
• Negotiate contracts with local authorities, partners, and service providers to ensure alignment with business objectives and legal obligations.

6. Dispute Resolution & Litigation:

• Coordinate with external legal counsel on litigation, arbitration, and settlement negotiations.
• Manage dispute resolution processes to mitigate potential legal risks for the company.

Requirements:

1. Experience and Qualifications:

• Proven working experience and education in both Singapore and China.
• Strong knowledge of both Chinese and Singaporean legal systems and regulatory environments, particularly in the areas of corporate governance, technology, and international partnerships.

2. Legal Support for Market Entry:

• Experience providing legal support for Singapore technology companies entering the China market, particularly within the context of an acceleration program.

3. Language Proficiency:

• Fluent in both English and Chinese (spoken and written) to effectively support operations and communicate with clients and stakeholders in both countries.

4. Skills & Competencies:

• Strong analytical and problem-solving skills with the ability to navigate complex legal and regulatory issues.
• Excellent negotiation, communication, and interpersonal skills.
• Proactive and solution-oriented approach to legal challenges in cross-border operations.

Location: Singapore or China (with travel as required)

Job Description
• Involve in the project or maintenance services related with General Security Systems, Alarms
Systems, CCTV Systems , Access control systems and Server & Network infrastructure and whenever required.
• Perform Installation, Implementation, Configuration and testing of system/storage equipment & setup
• Troubleshoot problems encountered on site
• Perform OS hardening, patching and updating on servers/VM
• Develop implementation plan, migration plan and acceptance test plan for the project.
• Conduct acceptance test with users and address the testing findings/issues
• Work closely with Project/Maintenance Managers in planning the implementation tasks
• Maintain accurate and consistent set of work instructions service delivery processes.
• Develop As-built documentation for handover

Job Requirements
• Candidate must possess at least a Professional Certificate/Nitec, Diploma,
Advanced/Higher/Graduate Diploma, Engineering (Electrical/Electronic/Information
Technology ) or equivalent
• Minimum 2 years’ experience in Operational Technology/Information Technology industry
• Knowledge of networking and IP/TCP protocol
• In-depth knowledge in CCTV, Access Control and System Server etc.
• Hands-on experience in security-related tasks such as OS tightening, patching and updating,
virus scanning will be an added advantage.
• IT Certification in windows system & storage, network, database, virtualization, cloud
technologies will be an added advantage
• Good communication skills and positive working attitude.
• Candidate must possess a Class 3 driving license
• Fresh graduates welcome to apply

Job Summary:

• Provide 1st and 2nd Level IT Support to end-users
• Manage IT assets through procurement, tracking, maintenance, refresh /renewal and disposal/ termination.
• Provide assistance in the implementation of new end-user computing technologies.

Job Scope:

• Design, deploy, and manage security solutions such as firewalls, IDS/IPS, and encryption technologies.
• Conduct security audits, compliance checks such as vulnerability assessments with risk analysis
• Development and enforcement of security policies, procedures and controls
• Integrate security measures into new and existing IT systems and applications.
• Ensure that applications are securely configured, including hardening default settings, securing APIs, and restricting file permissions.
• Conduct initial investigations of security violations/incidents, and escalate as necessary
• Collaborate with other IT teams to ensure security is integrated across all systems and processes.
• Stay updated on the latest security trends & technologies
• Design, deploy, and manage security solutions such as firewalls, IDS/IPS, and encryption technologies.
• Work with other contractors where required for delivery of network services
• Any other IT duties as assigned.

Special Aptitude And Knowledge

• Advanced technical knowledge of security technologies and systems.
• Expertise in firewall administration, encryption technologies, and network protocols.
• Experience in designing and implementing security architectures.
• Proficiency in vulnerability assessment tools and penetration testing methodologies.
• Able to communicate well, handle documentation and explaining network and IT architecture
• A great team player and able to work well with other team member

Qualification

• Recognized Degree in Information Technology, Computer/ Network Engineering or equivalent.
• Possess relevant certifications such as CISSP, CCSP, CEH, or advanced security certifications
• Minimum 5 years of experience in an equivalent role.
• Experience with a company that has achieved CyberTrust Mark certification or has actively worked towards it is a bonus.
• Familiarity with implementing security measures in the healthcare industry is also advantageous.

Roles & Responsibilities

As part of cloud infrastructure team , Cloud Specialist engineer is responsibile to incorporate continuous improvement process in operations through constant monitoring, improve the operation metrics by continuous evaluation and reporting, and also optimize the capability, scalability, availability and security of the Cloud platforms to meet set requirements.

• Candidates for this role should have subject matter expertise implementing security controls and threat protection, managing identity and access, and protecting data, applications, and networks in cloud and hybrid environments as part of an end-to-end infrastructure.
• Design, build, maintain, and enhance authentication and security services in Azure and AWS.
• Plan, coordinate, and execute infrastructure and security projects, from inception to delivery.
• Review, approve, and consult on Terraform Azure deployments submitted by other teams.
• Provide detailed solution consulting with regard to our Azure and Microsoft authentication infrastructure and related services.
• Take primary ownership of the complete lifecycle of several existing security products.
• Participate in off-hour emergency support rotation.
• Maintain the security posture, identify, and remediate vulnerabilities by using a variety of security tools, implement threat protection, and respond to security incident escalations.
• Deliver subject matter expertise of Microsoft 365 with emphasis in security, architectural design, migration, management, and support of implementations.
• Provide overall Microsoft 365 security expertise including strong knowledge of Azure Active Directory, Microsoft cloud app security, Azure Information Protection, Data loss prevention, Information Rights Management, Intune (Conditional access/ MDM), single sign-on and multi-factor authentication and related technologies (including Microsoft Enterprise Mobility + Security)
• Monitoring and remediation of risks events from Azure and Microsoft 365 security and compliance dashboards.
• Lead and participate in ongoing Microsoft 365 security projects and strategy discussions.
• Document Security procedures, guidelines, training material and best practices
• Deliver M365 Security related training sessions at main offices and key project sites
• Willing to learn and implement other cloud solutions like AWS, G-Cloud etc.
• Support global cyber security projects, e.g., Identity and Access Management, Data Loss Prevention (DLP), SIEM, Incident Management etc.
• Proactive Customer Engagement – Understand and support their key solutions, workloads, and priorities on Azure including regular engagement on trend analysis, proactive monitoring, and event planning.
• Strategic Project Execution – Own project-level Azure issues and actively drive them towards resolution whilst ensuring support and engineering readiness for key milestones.
• Critical Problem Resolution – Lead Azure Support to drive fast mitigation of issues impacting critical workloads and provide timely communication in a 24x7x365 global support environment.
• Case Ownership – Directly own a subset of customer support cases from end to end. Deliver a great customer support experience. Continuously grow Azure technical skills.
• RCA Ownership – Own and drive the timely delivery of quality root cause analysis (RCA) to understand and prevent future occurrence of reported issues.
• Engineering Engagement – Relentlessly champion and advocate driving product feedback, feature requests to address customer pain points and improve Azure resiliency.
• On call Responsibility – This position will require some on-call commitment to provide 24/7 support to our strategic S500 customers
• Excellent Communication: Must have the ability to empathize with customers and convey confidence. Able to explain highly technical issues to varied audiences. Able to prioritize and advocate customer’s needs to the proper channels. Take ownership and work towards a resolution.
• Customer Obsession: Passion for customers and focus on delivering the right customer experience.
• Growth Mindset: Openness and ability to learn new skills and technologies in a fast-paced environment.
• Preferred to have certification such as AZ-500, CISSP, SSCP, GIAC Certified.
• Core IaaS: Compute, Storage, Networking, High Availability
• Data Platform and Bigdata: SQL Server, Azure SQL DB, HDInsight/Hadoop, Machine Learning, Azure Stream Analytics, Azure Data Factory / Data Bricks
• Azure PaaS Services: Redis Cache, Service Bus, Event Hub, Cloud Service, IoT suite, Mobile Apps, etc.
• Identity and Authentication: SSO/Federation, AD/Azure AD, ADFS, etc.
• Preferred but not required: Cosmos DB, Azure Kubernetes Service
• Experience in one or more automation languages (PowerShell, Python, C#, Open Source)

A highly skilled and motivated Penetration Testing Engineer who thrives in dynamic and fast-paced environments. You have a keen eye for vulnerabilities and a deep understanding of security protocols and systems. You are adept at thinking like an attacker to identify and mitigate potential security risks before they can be exploited. Your passion for cybersecurity drives you to stay updated with the latest trends and techniques, ensuring that our systems are always one step ahead of potential threats. You are a critical thinker, excellent communicator, and a collaborative team player who can work independently when needed. Your technical acumen is matched by your problem-solving skills, making you a valuable asset in safeguarding our technology and data.

• Conducting comprehensive penetration tests on a variety of applications and systems to identify security vulnerabilities.
• Developing and executing test plans, scenarios, and scripts to uncover potential weaknesses.
• Collaborating with development and engineering teams to remediate identified vulnerabilities.
• Preparing detailed reports on findings and recommending corrective actions.
• Staying current with emerging security threats and attack vectors.
• Providing input on security policies, procedures, and standards to enhance our security posture.
• Contributing to the development of secure software and hardware solutions.
• Building customer trust by ensuring our technology is robust and secure.
• Reducing the risk of security incidents and minimizing potential damages.
• Advancing the overall security awareness and practices within the organization.
• Helping to shape the future of cybersecurity practices within the industry.

Skills Required:

• Extensive experience with penetration testing tools and methodologies.
• Strong knowledge of network and application security principles.
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Experience with security assessment tools like Metasploit, Burp Suite, and Nessus.
• Relevant certifications such as OSCP, CEH, or CISSP are a plus.
• Detail-oriented with strong analytical skills.
• Excellent communication skills, both written and verbal.
• Proactive and self-motivated.
• Strong problem-solving abilities.
• Team player with a collaborative mindset.