Job Description & Requirements

We are looking for a highly driven and self-motivated Cyber Security Consultant to join our team! As a member at our company, you will have the opportunity to work on new and exciting projects and develop your career.

JOB SUMMARY

You will participate in a variety of engagements, focusing on targets that may include network equipment, servers, applications, APIs, wireless infrastructures, mobile devices, and other information systems. Using a variety of tools and techniques that may include red teaming, you will have the opportunity to combine technical expertise with your imagination to discover innovative methods with the goal of ensuring customers remain one step ahead of its adversaries.

Hands on Responsibilities:

·Support the sales by attending security sales meeting (if necessary), effort estimation and provide security testing project timeline

·Develop the security acceptance test plan

·Provide expert technical support during the security testing activities

·Security test preparation, setting-up of testing environment, configuration and installation of the security testing tools

·Perform manual or automated security testing using commercial security testing tools

· Conduct Greybox Testing (Authenticated) and/or Blackbox Testing (Unauthenticated) Penetration Tests

· Conduct Whitebox Testing and Secure Code Review

· Conduct Network and Infrastructure Vulnerability Assessment and Penetration Testing

· Conduct Web, Mobile and Desktop Application Vulnerability Assessment and Penetration Testing

· Find and pinpoint the vulnerabilities of the assess target system / application

· Document and Report the vulnerabilities found in the system

· Provide professional recommendations / advice to mitigate and resolve the vulnerabilities

· Present the security testing results to the relevant stakeholders

·Provide weekly status reporting on the security testing activity progress

Requirements:

· Bachelor's degree, preferably in computer science or information systems, or equivalent work experience

· Minimum 3 - 5 years security experience in a security analyst, engineer, architect, consultant, or a similar role

· Minimum 3 years’ professional experience in conducting vulnerability assessment and penetration testing

· Required Certifications: Any of the followings

o CREST Registered Penetration Tester (CREST CRT)

o Offensive Security Certified Professional (OSCP)

· Knowledge in conducting security testing with the following guidelines and standards

o Open Web Application Security Project (OWASP Top 10 Frameworks)

o Common Vulnerability Scoring System (CVSS)

o Common Vulnerabilities and Exposures (CVE)

o Common Weakness Enumeration (CWE) / SANS Top 25 Software Errors

· High proficiency in manual and automated techniques for penetration testing (network equipment, servers, web applications, APIs, wireless, mobile, databases, and other information systems), as well as executing vulnerability assessments (injection, privilege escalation, fuzzing, buffer overflows, etc.)

· Tools – Proxies, Port Scanners, Vulnerability Scanners, Exploit Frameworks (ex: Burp, Nessus, Nmap, Metasploit)

· Strong oral and written communication skills, including a demonstrated ability to prepare quality documentation and presentations for technical and non-technical audiences

Job Description:

The jobholder will be providing support and project delivery for the SSO and Identity Management platforms in the following topics

Architecture

Project Delivery

Platform Support and Maintenance

Incident and Problem Management

Change Management

The candidate should be well versed with cryptographic notions such as RSA, symmetric and asymmetric encryption, certificates and digital signatures etc.

Architecture

To provide architectural expertise thereby driving change and improvement in technology and process.

To contribute to the development of the SSO and LDAP technology roadmaps.

To liaise with CIB architecture teams in undertaking architectural reviews.

Project Delivery

To take responsibility for the delivery of key projects around SSO and LDAP which are aligned to drive significant change within the platform.

To work with the Application Production Support project managers in defining, designing, documenting and implanting new functionality for existing and new applications.

To liaise with the Application Developers in low-level diagnosis of on-going issues.

Platform Support and Maintenance

Pro-actively monitor, manage and improve availability and performance of the production environments

(from presentation and application layers to Infrastructure layers)

Pro-actively manage the capacity of production applications

Incident and Problem Management

To work with partner teams to conduct analysis of major and critical incidents.

To identify tactical or strategic improvements that can be introduced to help reduce the number of on- going incidents within the SSO and LDAP area.

Change Management

To work within the change management framework adopted to ensure that all changes to

the production environment are planned and executed in a controlled manner.

To take responsibility for the quality of changes within the SSO and IDM environments, ensuring that

changes raised are of sufficient standard in terms of technical and planning detail.

Requirements

Technical Skills essential for the role include minimum 15 plus years of experience into

CA Siteminder Web SSO

SOA security - SAML / WS-Security

Autoprovisionning tools such as BMC ControlSA, Sailpoint, or Forgerock

LDAP

Kerberos / SSL/TLS / PKI / GSS-API / SPNEGO

Auth2, OpenIDConnect

IIS/WCF/WIF, WAS security models

Infrastructure standards for network load balancers, servers, networks and storage

Automation mind-set with experience in using tools like Ansible

Scripting skills using Python/JS or shell

Application Server : Good exposure in configuring and supporting web technologies such as Tomcat,

Apache, nginx, IIS

Proven logical and methodical problem analysis and troubleshooting skills

Working with an industry recognised service desk and project management toolset

ITIL certification

Shift

On Site Services: From 8:00 to 19:00 schedule to cover in weekly shifts of 8 working hours/day

On Call Services: Out of regular schedule, we provide On Call services (out of business hours) to be covered in weekly shifts by team members.

Public Holidays: Team members must cover all public holidays except 1 st January and 25 th December (2 persons only in shifts)

Interested candidates may apply through the application system or send it to [email protected]. Shortlisted candidates will be notified.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan Mckinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.morganmckinley.com/sg/privacy-policy. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Morgan McKinley Pte Ltd
Dinu Dinesh

EA License No: 11C5502

EAP Registration No: R22110286

About the company

CGS International Securities Pte. Ltd. (CGS International) is an award-winning and market leading integrated financial services provider, ranked among the top securities houses in Asia.

CGS International taps on our wealth of global and ASEAN insights to offer equities trading, leveraged products, wealth management, investment banking, equities research, Shariah-compliant financing, fixed income, currency and commodities, structured products and prime brokerage services in over 15 countries and regions.

Along with its parent organisation China Galaxy Securities, a leading securities house in China, CGS International is trusted by more than 15 million customers globally.

Job Description

1) Threat Detection:

- Use of tools to scan/ detect/ analyze/ correlate threats

- Manually review to detect/ analyze/ correlate threats

- Participate in design of infrastructure and process of threat detection

- Perform triage of security alerts to filter false positives, classify alerts and determine response type

2) Threat Hunting:

- Collect and analyze data to identify patterns and anomalies that indicate presence of a hidden threat

- Investigate potential threats to determine if they pose a real threat

3) Threat Intelligence:

- Keep up to date of threats reported by reliable internal and external sources

- Maintain samples, logs and records, compromised information that help understanding of attacks

4) Incident Response:

- Inform relevant members and departments of threats and advise of remediation and mitigation

- Coordinate and follow up with all relevant members and departments to collect data and evidences, to ensure completion of remediation and mitgation

- Document all security incidents with records of assessment, investigation, remediation and mitigation

- Maintain playbooks and guide other departments on contributing to them

- Lead and participate actively in security incident response effort

- Lead and participate actively in post-incident reviews to evaluate response effectiveness and recommend improvements

- Conduct, coordinate and debrief simulated exercises on security incident management across departments

5) Requirements Review:

- Insurance coverage of incident response management

- Third party agreement coverage of security monitoring and incident response management

Corporate policies, standards and procedures in security monitoring and incident response management

Job Requirements

• Strong knowledge of information security principles, incident response methodologies, network protocols, logging/detection/response tools (e.g. SIEM, EDR, XDR)
• Proficient in network communications, log analysis, scripting
• Good problem-solving, analytical and communication skills
• Preferably has experience working with cross-geographical teams
• 1-3 years of experience as a Security Operations Analyst or similar role
• Diploma or Bachelor degree in Computing or related field
• Preferably has relevant certifications (e.g. GCIH, GCIA)
• Proactive and independent
• Keen to learn
• Has an eye for detail
• Willing to share and collaborate as a team player

At KPMG, your long-term future is every bit as important to us as it is to you. That’s why our aim is to give you experiences that will stay with you for a lifetime. Whether it’s great training and development, working across functional sectors, mobility opportunities or corporate responsibility volunteering activities – you’ll gain a wealth of experiences on which to build a rewarding career. We’re proud of our culture – it’s one that recognises hard work, encourages new ways of thinking and embraces diversity and inclusion. We have an innovative spirit which inspires what we do and how we do it – striving to be better lies at the heart of who we are.

KPMG Cybersecurity professionals assist clients to address their concerns around Confidentiality, Integrity, and Availability of their technology, business systems, and information assets. Using a holistic view of how Technology and Business integrate, the Cyber team performs technology-risk focused assessments, technology compliance, IT/operational process reviews, and design of information risk & cyber security solutions.

Cyber team members regularly interact with C-Suite clients, such as Chief Executive Officer (CEO), Chief Information Security Officer (CISO), Chief Information Officer (CIO), Chief Operating Officer (COO), Chief Risk Officer (CRO) and their direct reports. Hence, a client centric mind-set, understanding of IT within a Business context, and well-developed communication skills are essential.

The role involves:

• Identify and resolve complex issues and develop innovative solutions for high profile clients on a variety of local and international engagements
• Actively identify and support business development opportunities which includes supporting the team with sales activities such as proposal writing and client presentations
• Coach and develop team members as part of the firm’s overall Performance Management process or on specific engagements

The ideal candidate should possess:

• Minimum 4 years of consulting experience in Red Teaming/Pentesting and possesses industry recognised certifications (e.g. CISSP, OSCP, CRT, CREST, CRTP)
• Passionate and able to demonstrate strong interest in the field of cyber security, in particular technical assessments/reviews
• Experienced and well versed in security testing domains. For example, red teaming and threat intelligence, web/network/mobile/cloud/thick client vulnerability assessments and penetration testing
• Experienced and demonstrates strong understanding and capability to lead/execute red teaming engagements encompassing intel-led approach, from planning to execution of red team exercises, create/develop/implement TTPs based on profiles of specific threat actors against industry frameworks and best practices, and to exercise closure.
• Ability to lead, manage, oversee cyber multiple engagements across multi security testing disciplines independently and cohesively with the engagement team
• Able to demonstrate strong project management skills in areas such as meeting requirements, timelines, documentations, overseeing risk management aspects in a project lifecycle
• Possesses strong understanding of IT risks and its business context/impact
• Possesses excellent written and communication skills to translate and communicate with C-Suite clients, direct reports and team members
• Self-driven, possesses strong desire to learn and identify new technologies and services, and willingness to share knowledge with the team

Only shortlisted candidates will be contacted by KPMG Talent Acquisition team, personal data collected will be used for recruitment purposes only.

At KPMG in Singapore we are committed to creating a diverse and inclusive workplace. We believe that diversity of thought, background and experience strengthens relationships and delivers meaningful benefits to our people, our clients and communities. As an equal opportunity employer, all qualified applicants will receive consideration for employment regardless of age, race, gender identity or expression, colour, marital status, religion, sexual orientation, disability, or other non-merit factors. We celebrate the different talents that our people bring and support every staff member in their journey to achieve personal and professional growth. One of the ways we do this is through Take Charge: Flexi-work, our flexible working framework which enables agile and innovative teams to help deliver our business goals.

We have an opening for the following position:

Legal Billing Secretary

Responsibilities (but not limited to) :

· Generate invoices

· Liaise with internal stakeholders to ensure the complete, accurate and timely issuance of invoices

· Raise payment vouchers,waivers or credit/debit notes when necessary

· Follow up on outstanding payments

· Prepare monthly billing reports

· Perform any other duties in relation to billings

Requirements

· Proficient in Office 365, especially Excel

· Meticulous and conscientious

· Good verbal and written communication skills

· Good interpersonal skills

· Personal accountability

A competitive and attractive remuneration package awaits the successful candidate.

Please submit your resume stating qualifications, work experience, current and expected salary.

We regret to inform that only short-listed applicants will be notified.

This will be a 6 months internship from Jan to Jun 2025. Please only apply if you are able to commit to the internship full-time.

MAIN PURPOSE

If you are keen on exposure as an in-house legal counsel in a global beauty company, the most beautiful journey begins here.

You will be a part of the Shiseido APAC legal team and play a pivotal role driving the success of legal initiatives that helps Shiseido to create a better world through beauty innovations. You will have the first-hand experience collaborating with the global legal teams and build relations with other stakeholders of all levels and across all APAC markets. You will gain deep insights of a legal function and business processes, including new product or service launches. If you are keen to leave a mark at the end of your internship, then Shiseido may be the right choice for your very first career milestone.

KEY RESPONSIBILITIES

• RESPONSIBILITIES 1

You will drive Shiseido Group’s annual risk assessment exercise. This entails: a) understanding instructions from Japan HQ, b) processing and disseminating the instructions and questions to all affiliates in the APAC region, c) following up to ensure deadlines are met, d) consolidating answers from affiliates, e) preparing an executive summary with recommendations for Shiseido APAC management.

• RESPONSIBILITIES 2

You will assist Shiseido APAC legal department in its daily work – e.g. contract review drafting and negotiations, research and advise on legal, compliance, risk management, data protection and counterfeit matters.

• RESPONSIBILITIES 3

You will be part of the rolling out guidelines, policies and initiatives (including those relating to data protection and compliance) from Shiseido APAC legal department. You will assist to conduct relevant training.

• RESPONSIBILITIES 4

You will provide administrative support to Shiseido APAC legal department including contract and document management.

REQUIREMENTS

• Currently you are enrolled in a law-related programme in an institute of higher learning or a fresh graduate with diploma or degree in law or equivalent.
• You are an excellent communicator, can communicate well in written and verbal forms with colleagues across all levels of the organisation.
• You are self-motivated, but enjoy teamwork.
• You are organised, detailed, curious and analytical.
• You are comfortable working with IT systems and software, e.g. SharePoint, Office.

PLEASE NOTE

Interested applicants, please apply directly via Shiseido's career page using the link right below for faster processing of your application. Thank you.

URL: https://careers.shiseido.com/job/Singapore-Asia-Pacific-Regional-Legal-Intern-01/1137561301/

• Opportunity to lead impactful compliance and legal initiatives across SEA
• Gain hands-on experience in the construction machinery industry

About Our Client

Our client specializes in manufacturing and servicing a wide range of construction machinery, including excavators, loaders, and mining equipment. Known for its advanced technology, it focuses on sustainable and efficient solutions for heavy industries. With a global presence, it supports diverse projects in construction, mining, and infrastructure development.

They are looking for a Legal Manager.

Job Description

This role reports to the General Manager.

• Lead and support regional compliance initiatives across Southeast Asia.
• Facilitate the reporting system by assisting local contacts, ombudsman, and investigators, conducting or aiding investigations as needed, and ensuring timely resolutions and appropriate follow-up actions.
• Coordinate and conduct annual compliance training for employees, including data analytics, monitoring, and tracking training metrics.
• Develop and execute programs to increase employees' awareness of integrity obligations.
• Offer legal counsel to business teams to ensure adherence to company policies, legal standards, and regulatory requirements.
• Draft, review, and negotiate a variety of legal documents, including agreements for dealership, joint ventures, supply, and purchase.
• Act as PDPA Data Protection Officer (DPO), implementing and enhancing internal rules for PDPA compliance.

The Successful Applicant

• Bachelor's degree in Law, with minimum 1 year of relevant experience.
• Experience with international legal issues and knowledge of the construction machinery industry is advantageous.
• Proactive, analytical thinker with a self-starter attitude and a process-oriented approach.
• Skilled in handling multiple tasks and able to work effectively in a complex, multicultural environment.
• Strong project coordination abilities and willingness to travel internationally up to twice per month.

What's on Offer

Career Growth: A unique chance to shape compliance and legal practices in a high-impact role, with opportunities for career advancement within a global company.

International Exposure: Work across Southeast Asia, gaining valuable experience in diverse legal frameworks and industries.

Contact

Celeste Goh (Lic No: R1104095 / EA no:18S9099)

Quote job ref

JN-112024-6584555

Phone number

+65 6416 9872

Michael Page International Pte Ltd | Registration No. 199804751N

• Able to commit 4 days work 1 day off, 3 days work 1 day off schedule.
• 12 hours permanent shift
• Location: Islandwide
• Salary Package: $2,650 to $3,500 (Depends on experience)

Responsibilities:

• Incident Response, Manage Security & Safety Systems
• Prevent unauthorised entry into the premises
• Monitor CCTV
• Patrolling and clocking
• Access control duties

Requirements:

• Secondary education

If you are interested to apply, kindly WhatsApp me your updated resume in DOC file and allow our Consultant to match you with our Clients.

Whatsapp: +65 8525 2419

Email: [email protected]

Tan Man Ee Reg No: R22108289

The Supreme Hr Advisory Pte Ltd EA No: 14C7279