Bayfront Law LLC is looking for (a) one secretary to join our corporate department, (b) one secretary to join our disputes department, and (c) one billing/invoicing staff to join our administrative team.

Ideal candidates should be team players with a sense of responsibility. A good command of written and spoken English, proficiency with MS Office applications and excellent organizational skills are pre-requisites for this role.

Applicants are to send their detailed resume by email to [email protected]. Please state working experience including in litigation work, corporate work or billing/invoicing work (as the case may be), and current and expected salary. Applicants should also clearly state which role they are applying for.

Graduating students are also welcome to apply.

We seek your understanding that only shortlisted candidates will be contacted.

Job description:

• Prepare sales documents for project launch. This involves liaising with solicitors and organizing various documents essential for sales transaction and agreement.
• Set-up project details accurately in the Sales Booking System.
• Co-ordinate with system provider to test-print sales documents to ensure formatting alignment.
• Liaise with solicitors post-sale on Sales Agreement-related matters such as validity of specific clauses, sending out Sales & Purchase Agreements (SPAs) timeously and proper updating of completed sales transactions, sales records and sales summary in the Sales Booking System.
• Set-up proper filing of all correspondence in purchasers’ file.
• Provide administrative assistance in conveyancing matters and serve as a primary contact for related inquiries.
• Monitor, follow-up, compile and manage all aspects of purchasers’ requests, Sales and Purchase Agreements and payment timelines.
• Ensure timely processing of approved refunds by co-ordinating with solicitors and finance department.
• Liaise with solicitors and property management teams regarding the serving of Temporary Occupation Permit (TOP) notices and legal completion.
• Provide administrative support at showflat during project launches.
• Oversee compliance with Anti-Money Laundering (AML) and Counter Financing of Terrorism (CFT) regulations, and risk assessment processes.
• eview eligibility documents for executive condominium purchases and coordinate with HDB for eligibility assessment.

Requirements:

• 1 year minimum relevant experience.
• Result-oriented team-worker.
• Self-motivated to deliver results.
• Recent graduates are welcome to apply.

You will work with a dynamic team of lawyers to represent a broad spectrum of clients in commercial and civil litigation and other types of disputes.

You will be able to hone your skills as a legal professional under the tutelage of our team which takes a keen interest in mentoring and developing younger lawyers.

Requirements :

* NQ to 2 years PQE;

* Singapore-qualified lawyer;

* Good drafting, communication, research, and advocacy skills;

* A good team player who can also work independently.

Kindly send us your detailed resume and academic transcripts, stating full details of qualifications and experience to : [email protected]

Edmond Pereira Law Corporation is a full-service law firm that provides a wide range of legal services.

The firm is looking for Trainees who are undertaking their SILE Bar course. Applicants should possess strong written and oral advocacy skills. Applicants without prior experience (internships, attachments, etc) will be considered. We are looking for team players who have a sense of responsibility and enthusiasm towards legal practice. Our Trainees have access to our lawyers for guidance but are expected to demonstrate initiative and professionalism. Our Trainees can expect to be exposed to Criminal and Civil litigation and experience the thick of the action in Court. We believe in moulding responsible future lawyers and invest time and effort in each of our Trainees.

For more information on the firm and our practice areas, please visit https://www.epplaw.com.sg

Interested applicants please email your Cover Letter and CV to [email protected]

Only shortlisted applicants will be notified.

IN.FOM (www.infom.asia) is a regional communications agency founded in Jan 2011 by two highly-experienced and respected communicators who believe in hands-on direct-to-client counsel and deliver results that matter. In the last few years, we have won numerous local and regional industry accolades for the many communications campaigns that we have conceptualised and delivered for our clients that include Samsung, Grab, Intel, Expedia, Poly, Herbalife and SGInnovate.

In addition to being named Singapore's PR Agency of the Year in 2015, 2017 and 2019 by IPRS; and the Best Global Technology Agency by Holmes Report (now known as PRovoke) in 2018, we have also won the "The Best Specialist Agency To Work For in Asia Pacific" award in 2017. In 2020, we were named by PRovoke as one of seven Agencies of the Decade in Asia Pacific.

Role

You should be an experienced, broadly capable project and communications manager or director with at least 5 years’ experience in a similar role in a PR agency or in-house, able to handle a wide range of assignments, projects and/or clients with a high degree of success and independence. You have the confidence and support of multiple client contacts.

Capabilities Expected

You are able to demonstrate high-level professional knowledge and skills, and should be able to manage a piece of a large account or a few smaller ones, with little top cover from your team leader.

You should have project management, budgeting, counseling, programming, people management (third party event organisers, and related personnel), and emerging business development skills.

You take responsibility for the projects that you manage, providing excellent client service, applying the agency’s best resources, and successfully managing people involved in projects and managing profitable growth.

Account Management

• Perform day-to-day account work which may include: developing program activities and a wide range of written materials (including strategy papers and press releases), coordinating events, maintaining client and media contacts, managing projects performed with and by others and supervising more junior staff
• Develop and manage projects/programs, including implementation plans, evaluation mechanisms, staffing plans, budgets and timelines
• Independently handle several small accounts or major projects of a large account, performing much of the day-to-day work with assistance from both more junior and more senior staff as appropriate
• Client’s primary day-to-day contact on projects, or, for smaller accounts, is the contact for the full account
• Develop presentations for clients relative to project management/program status under the supervision of the team leader
• Keep team(s) appropriately informed and involved in projects
• Identify and secure help on emerging account problems
• Able to articulate and apply agency vision, goals, practice areas and capabilities
• Fully familiar with the communications plans for accounts and understands and track clients’ businesses
• Act as a liaison between client, outside suppliers (graphic designers, photographers, A/V houses, etc.) and, as appropriate, other internal and external audiences (e.g., employees, media, interest groups)
• Communicate with client contacts and others in a professional, positive and appropriate manner
• Generally familiar with the work of other account teams

Professional Skills

• Growing depth and diversity of account experience to provide informed public relations counsel
• Strong understanding of public relations and a demonstrated ability to achieve public relations objectives
• Develop and draft programs materials based on team input
• Oversee and direct media campaigns. Has established relationships with senior print and broadcast journalists
• Capable writer and able to generate a range of materials (e.g., client memos, press releases, speeches, articles, case histories, byliners, backgrounders, op-ed pieces, brochures and collateral materials as well as program proposals, which require minimal editing
• Demonstrate competence at using internal and external research capabilities and in preparing in-depth analyses
• Able to contribute to presentations using internal or external resources
• Balance work load and tasks, communicating effectively with team members to reliably implement assignments on budget and on time
• Demonstrate solid teamwork capabilities while beginning to build supervisory skills
• Efficiently and effectively plan and manage events (e.g., press conferences, media tours, analysts meetings, advocate briefings, etc.) with minimal supervision

Responsibilities:

· Perform day-to-day account work which includes developing program activities and a wide range of written materials (including strategy papers and press releases), coordinating events, maintaining client and media contacts, managing projects.

· Develop and manage projects/programs, including implementation plans, evaluation mechanisms, staffing plans, budgets and timelines.

· Develop all manner of content for media pitching, including pitch letters, press releases, specification sheets and media announcements.

· Communications plans for accounts and understands and track clients’ businesses.

· Presentations for clients relative to project management/program status under the supervision of the team leader.

· Act as a liaison between client, outside suppliers (graphic designers, photographers, A/V houses, etc.) and, as appropriate, other internal and external audiences (e.g., employees, media, interest groups).

· Assists with administrative assignments for client when required.

Requirements:

• Degree in Mass Communications/Marketing/Public Relations.

• Open to entry level candidates and those with 1-2 years of professional public relations other comms related role.

• Proficient in using the Microsoft Office suite of products.

• Strong language command; possess excellent writing and editing skills.

• Good communication and interpersonal skills.

• Organised and systematic; ability to adhere to deadline.

• Ability to work independently with minimal supervision.

IN.FOM (www.infom.asia) is a regional communications agency founded in Jan 2011 by two highly-experienced and respected communicators who believe in hands-on direct-to-client counsel and deliver results that matter. In the last few years, we have won numerous local and regional industry accolades for the many communications campaigns that we have conceptualised and delivered for our clients that include Samsung, Grab, Intel, Expedia, Poly, Herbalife and SGInnovate.

In addition to being named Singapore's PR Agency of the Year in 2015, 2017 and 2019 by IPRS; and the Best Global Technology Agency by Holmes Report (now known as PRovoke) in 2018, we have also won the "The Best Specialist Agency To Work For in Asia Pacific" award in 2017. In 2020, we were named by PRovoke as one of seven Agencies of the Decade in Asia Pacific.

Role

You should be an experienced, broadly capable project and communications manager or director with at least 5 years’ experience in a similar role in a PR agency or in-house, able to handle a wide range of assignments, projects and/or clients with a high degree of success and independence. You have the confidence and support of multiple client contacts.

Capabilities Expected

You are able to demonstrate high-level professional knowledge and skills, and should be able to manage a piece of a large account or a few smaller ones, with little top cover from your team leader.

You should have project management, budgeting, counseling, programming, people management (third party event organisers, and related personnel), and emerging business development skills.

You take responsibility for the projects that you manage, providing excellent client service, applying the agency’s best resources, and successfully managing people involved in projects and managing profitable growth.

Account Management

• Perform day-to-day account work which may include: developing program activities and a wide range of written materials (including strategy papers and press releases), coordinating events, maintaining client and media contacts, managing projects performed with and by others and supervising more junior staff
• Develop and manage projects/programs, including implementation plans, evaluation mechanisms, staffing plans, budgets and timelines
• Independently handle several small accounts or major projects of a large account, performing much of the day-to-day work with assistance from both more junior and more senior staff as appropriate
• Client’s primary day-to-day contact on projects, or, for smaller accounts, is the contact for the full account
• Develop presentations for clients relative to project management/program status under the supervision of the team leader
• Keep team(s) appropriately informed and involved in projects
• Identify and secure help on emerging account problems
• Able to articulate and apply agency vision, goals, practice areas and capabilities
• Fully familiar with the communications plans for accounts and understands and track clients’ businesses
• Act as a liaison between client, outside suppliers (graphic designers, photographers, A/V houses, etc.) and, as appropriate, other internal and external audiences (e.g., employees, media, interest groups)
• Communicate with client contacts and others in a professional, positive and appropriate manner
• Generally familiar with the work of other account teams

Professional Skills

• Growing depth and diversity of account experience to provide informed public relations counsel
• Strong understanding of public relations and a demonstrated ability to achieve public relations objectives
• Develop and draft programs materials based on team input
• Oversee and direct media campaigns. Has established relationships with senior print and broadcast journalists
• Capable writer and able to generate a range of materials (e.g., client memos, press releases, speeches, articles, case histories, byliners, backgrounders, op-ed pieces, brochures and collateral materials as well as program proposals, which require minimal editing
• Demonstrate competence at using internal and external research capabilities and in preparing in-depth analyses
• Able to contribute to presentations using internal or external resources
• Balance work load and tasks, communicating effectively with team members to reliably implement assignments on budget and on time
• Demonstrate solid teamwork capabilities while beginning to build supervisory skills
• Efficiently and effectively plan and manage events (e.g., press conferences, media tours, analysts meetings, advocate briefings, etc.) with minimal supervision

Legal Secretary/Paralegal

Litigation firm seeking experienced legal secretary/paralegal

Roles & Responsibilities

Requirements

• Provide secretarial, administrative and legal support to lawyers and handling secretarial work.
• Minimum law diploma or law degree for Paralegal
• Experience in legal secretarial work will be an advantage
• Good command of written and spoken English
• Positive attitude
• Proficient with E-litigation
• Analytical, organised and able to work independently and exercise initiative.
• Singaporeans and PRs only

Kindly state full details of qualifications, experience, current and expected salary in your resume. Please send your resume to [email protected]

(We thank all applicants for writing in. Only shortlisted candidates will be notified)

Responsibilities:

· Perform day-to-day account work which includes developing program activities and a wide range of written materials (including strategy papers and press releases), coordinating events, maintaining client and media contacts, managing projects.

· Develop and manage projects/programs, including implementation plans, evaluation mechanisms, staffing plans, budgets and timelines.

· Develop all manner of content for media pitching, including pitch letters, press releases, specification sheets and media announcements.

· Communications plans for accounts and understands and track clients’ businesses.

· Presentations for clients relative to project management/program status under the supervision of the team leader.

· Act as a liaison between client, outside suppliers (graphic designers, photographers, A/V houses, etc.) and, as appropriate, other internal and external audiences (e.g., employees, media, interest groups).

· Assists with administrative assignments for client when required.

Requirements:

• Degree in Mass Communications/Marketing/Public Relations.

• Open to entry level candidates and those with 1-2 years of professional public relations other comms related role.

• Proficient in using the Microsoft Office suite of products.

• Strong language command; possess excellent writing and editing skills.

• Good communication and interpersonal skills.

• Organised and systematic; ability to adhere to deadline.

• Ability to work independently with minimal supervision.

The Opportunity

Adobe is not your average tech company. We develop the tools and technologies that empower creative people to tell their stories and fuel digital transformations for all of your favorite brands.

Join us as a member of Adobe’s Privacy Office and Cybersecurity Legal team (“POCL”), to provide legal advice on privacy and security issues as POCL’s subject matter authority for the Asia Pacific Region (APAC). You’ll work closely with colleagues across the globe on groundbreaking issues and will have the opportunity to influence how we continue to develop our privacy and security programs. Bring your passion for security and privacy law and your best ideas!

What you’ll do

• Serve as subject matter expert on APAC privacy and security law within POCL, and with other partners across the company.
• Coordinate and drive cross-stakeholder alignment and provide region specific advice regarding privacy and security in a variety of workstreams including marketing, data governance, and public policy.
• Partner with our global incident response team) and serve as APAC regional lead on the POCL incident response team, leading legal efforts in APAC, including drafting and coordinating notification obligations, as-needed.
• Monitor, analyze, and drive operationalization and compliance efforts related to privacy and security-related legislative and regulatory developments across APAC.
• Work with our Government Relations team and a variety of industry groups to proactively influence privacy and security legislation and regulations across APAC.
• Partner with Adobe’s global sales legal teams to support negotiation efforts related to privacy and security topics, including by developing trainings and resources, with a special focus on our APAC-based customers and obligations.
• Support the review, development, and maintenance of applicable policies and standards related to privacy and security, and work as part of a cross-functional team to deliver outstanding privacy and data protection training initiatives throughout Adobe.
• Coordinate responses to APAC regulatory investigations and engagements concerning privacy and security-related matters.

Minimum qualifications

• Qualified attorney with at least 8 years of practice in a law firm or in-house with a focus on APAC privacy and security Law.
• Experience running multiple, high-priority projects and advancing complex projects.
• Experience conducting legal analysis for and engaging with privacy and security incident response efforts. Preference for experience in the APAC region.
• Ability to communicate clearly and succinctly with all levels of the organization, emphasizing what’s important and simplifying complex legal issues for non-lawyer audiences.
• Problem-solving prowess with excellent legal and business judgment.
• A business-friendly and flexible teammate who thinks creatively.
• This is a hybrid role with an expectation of 3 days a week in an Adobe office in either Singapore, Nodia, India, or Sydney, Australia.

PUBLIC RELATIONS STRATEGY

1. Develop, maintain and execute compelling PR strategy leveraging on unique identity for each launches with a cohesive brand storytelling in mind for image and awareness generation amongst Media and Influencers in Singapore.
2. Lead, Improvise, Localise HQ guidelines with local branding objectives for relatability and perceptive SOVs for the targeted audiences to increase awareness and communication.
3. Always ‘in-the-know’ for new trends, new experiences, and new platform mechanisms from luxury competitors.
4. Responsible to refresh, renew, sustain ideas and personalities to amplify ‘even-better’ campaign performance for key launches to improve ranking in print/ digital/ social outputs in monthly basis.
5. Work closely with regional PR, Trade, CRM team to ensure that execution of in-store experiences and OOH events can be synced to optimize on cashflow without diluting press/ influence experience.
6. Manage overall PR budget assigned and ensure right allocation to key franchise to garner strong coverage on all channels via earned and owned media (Seeding, Media buy, Exclusive opportunities, etc).

MEDIA & INFLUENCE RELATIONS

1. Engage and Maintain media and influence relationship as long-term partnership with clear conversation lead, and objectives to capitalize periodically.
2. Conduct Conceptual media pitching with stories, exclusivity of angles/ personas to secure earned output or amplify owned output.
3. Develop cohesive plans for paid engagements/ stories every semester or FY to nurture strong front of friends of Maison Guerlain for a long run.
4. Curate, coordinate, execute launches seeding to target media and KOLs strategically for earned social/ digital coverage. Facilitate loans for media shooting in timely manner with close coordination with other marketing function ie. Retail team.

EVENT PLANNING AND MANAGEMENT

1. Craft, plan and coordinate PR events for key launches based on HQ guidelines and maintain a strong brand image and storytelling of key launches.
2. Source, manage and secure unique or conceptual venues alongside with catering, décor, AV requirements, experience set-up, compliance for PR events with external third parties.
3. Manage, secure and track RSVP lists for attendees on organic and paid attendees to amplify event deliverables and coverages from all facets (Media, Celebrity and Influence).
4. Be on-ground, troubleshoot and resolve any event-day challenges from VM Set-Up to other topics relating to making a success of the event (Best Practice level of execution is expected).

PRESS RELEASES AND COMMUNICATIONS

1. Develop and disseminate compelling communication to media and influences with engaging, accurate, timely, localised press releases and time-to-time tactical communications for pitching.
2. Pitch and leverage to highest earned value of outputs for exclusive HQ/ Ambassador assets or synchronisation from other countries’ of Maison Guerlain engagements.
3. Ensure messaging and language consistency across all communication channels or press materials.

MEDIA COVERAGE MONITORING & REPORTS

1. Monthly reports including clippings from seeding or paid engagements, post-event reports, competitor’s reports, case studies (specific brands upon request for in-depth study internally).
2. Monthly sync-up reports on key launches to regional team (upon request on key launches only).
3. Be on top of all LVMH Beauty monitoring system such as. DMR, Lefty for macro, micro, nano monitoring in print/ digital/ social.

Overview: We are seeking an experienced Legal Counsel to provide legal support for our businesses across Singapore, Malaysia, and Hong Kong. The ideal candidate will have a strong background in banking law and wealth management, with the ability to advise on various investment product offerings and banking transactions, manage complex bank projects and navigate the ever-evolving legal and regulatory landscapes.

Key Responsibilities:

• Provide legal advice on all aspects of the Wealth Management business, including financial products, credit transactions and investment activities.
• Draft and review bank documentation related to account management, credit products and investment offerings.
• Ensure adherence to applicable laws and regulations across different jurisdictions, safeguarding the bank’s reputation and managing legal risks.
• Collaborate with stakeholders and different units on bank projects.
• Advise on regulatory issues as well as account-related matters, banking secrecy, data privacy, and cross-border business operations.
• Support the implementation of new initiatives and products, ensuring legal compliance and alignment with business objectives.
• Work closely with internal clients to meet their needs while overseeing legal considerations.
• Manage tight timelines for ongoing projects while supporting day-to-day business-as-usual matters efficiently.
• Oversee litigious matters and client disputes.

Qualifications:

• Law degree from an accredited institution.
• At least 6-10 years of proven record in banking and regulatory compliance, preferably within a law firm or bank, with a focus on wealth management. Some experience in litigation is preferred.
• Strong understanding of banking laws, regulations and best practices in Singapore, Malaysia, and Hong Kong.
• Excellent analytical and problem-solving skills, with the ability to recommend effective workaround solutions.
• Exceptional communication and interpersonal skills, with the ability to influence and collaborate with various stakeholders.
• Ability to work independently.
• Based in Singapore.

Note: Only shortlisted candidates will be contacted.

Job Responsibilities

Regular

Assists the DPO and Deputy DPO with the following work:

• Executing an annual work plan to ensure compliance with the Personal Data Protection Act (“PDPA”) under the guidance of the Deputy General Counsel.
• Reviewing and executing company policies and procedures for effective personal data compliance management, covering all aspects of personal data care under the 9 PDPA Obligations.
• Communicating internal personal data protection policies, processes and issues to TMs through internal newsletters, awareness trainings etc.
• Administering the Company’s Data Protection compliance system.
• Administering the orientation and annual refresher training for all employees on personal data protection.
• Working with the User Departments to respond to queries and requests from third parties (vendors, third party casinos, government agencies and other Sands Group companies), members and guests on personal data protection policies and processes.
• Working with the User Departments to manage responses to customer requests to access their personal data and correction in an appropriate and timely manner in accordance with the PDPA Access & Correction Requests Handling Procedure.
• Working with the User Departments to run personal data risk assessments and recommending mitigating controls to User Departments to moderate identified personal data risks identified in processes.
• Maintaining the Company’s personal data inventory and ensuring that it is up-to-date.

Periodic

• Conducts topical trainings on PDPA issues.
• Works with the User Departments to reach out to TMs on PDPA-related activities, such as disseminating information on TM’s responsibilities, personal data protection policies, programme initiatives, etc.

Incident Specific

• Manages PDPA-related incidents and complaints in an appropriate and timely manner in accordance with the PDPA Incident Response Framework.
• Escalates personal data risk alerts, major PDPA complaints and programme implementation issues to DPO and Deputy DPO for deliberation and decision.
• Works with other stakeholders such as the Cyber and IT departments to implement remediations and mitigation controls.

Job Requirements

Education & Certification

• LLB with minimum of 3 years PQE or equivalent.; Certified Information Privacy Professional.

Experience

• Has worked as a legal counsel advising on personal data protection compliance and legal issues at a customer facing organisation in Singapore or outside Singapore or in the alternative, has worked as an external lawyer in a law firm advising on personal data protection compliance and legal issues.
• Has experience conducting data protection compliance trainings or managing data breach situations.
• Has experience in implementing data protection or other related general compliance programmes, conducting compliance monitoring reviews.

about the company
Our client is a large global law firm with a strong presence in the US, EMEA and Asia, ranking at the top of legal tier lists across these jurisdictions in various practice groups.

about the job
You will be linked to the global disputes team primarily covering a mix of investigations and white collar disputes in an international and regional capacity. You will exercise your broad expertise in various enforcement solutions ranging from clawbacks, asset seizures, tracing and forensic investigations.

about the manager/team
You will be working with a senior partner of the firm within the Singapore department and the greater regional and global offices within the enforcement practice group. You will also have paralegal resources supporting you.

skills and experience required
You will need to be called to the Singapore Bar or its equivalent in other Commonwealth jurisdictions (UK, HK, Australia). A strong disputes profile within white collar matters and prior investigations experience is desirable. A strong proficiency in Mandarin and an additional Asian language is integral to the role due to the high volume of China based and other regional Asian clients.

To apply online please use the 'apply' function.
(EA: 94C3609/ R23115352)

Head of Legal (Asia)

About PIDG

At the Private Infrastructure Development Group (PIDG), we get infrastructure finance moving and multiplying – accelerating climate action and sustainable development where most urgently needed. We work with public and private partners to bridge financing gaps, directing capital and expertise into projects that promote climate resilience and sustainable growth. Working throughout the project lifecycle, we reduce financial risk, transform markets, and build local capacity, creating a deep and lasting impact.

We are a group of companies that work together to improve lives throughout south and south-east Asia and Africa. Active since 2002, more than 50% of our investments have been either in countries classified as Least Developed Countries or Fragile and Conflict Affected States. These are the countries where infrastructure gaps are the largest and most urgent and where the population is youngest and growing fastest. These are also the countries that contributed the least to climate change and yet are suffering the worse impacts, in some of the regions with the richest biodiversity left on the planet, which is quickly being depleted.

Building on a pioneering track record of integrating climate and inclusion considerations in infrastructure investment, we launched our 2030 strategy in 2023, which makes action on climate and nature, together with sustainable development through new and improved infrastructure, the central purpose of all we do.

About the role

The Head of Legal Asia, part of the Global Legal Team, will oversee the delivery of legal support across the Asia portfolio, supporting PIDG’s InfraCo product offering in Asia. Reporting to the Global General Counsel, the Head of Legal Asia will take responsibility for ensuring that InfraCo adheres to all legal requirements on its projects and investments and monitoring all applicable legal aspects of its projects and investments.

Roles & Resposibilities

Projects and Investment

• Manage and oversee advice and actions in relation to the development, structuring, financing and operating of investments and projects, including in relation to dropping, wind-down, expansion and/or exits.
• Manage and oversee drafting of project development, investment, financing and divestment related documents. Manage and oversee legal negotiations on the same and provide support for project teams in drafting and finalisation of commercial contracts.
• Manage, monitor and provide active oversight of legal and risk aspects, spotting issues and providing mitigations project development, investment, financing and divestment activities.
• Manage litigation risks in respect of projects and investments. Oversee day to day management of legal disputes and liaise with Global General Counsel on potential strategies.
• Review and interpret legal and regulatory requirements and provision of pertinent, clear and concise advice and opinions to support project teams.
• Provide ad hoc advice in respect of project development, investment, financing and divestment activities.
• Work closely and coordinate with the Business Integrity Team to ensure seamless delivery on projects and investments.

Corporate aspects, risk management & functional support

• Support the Global General Counsel on various matters.
• Manage and oversee external counsel and advisors in the delivery of work product, including managing counsel spend and budget.
• Build, manage and maintain strong working relationships with other key stakeholders within PIDG.
• Define and carry out goals and agenda for the Asia Legal Team and development of the function in agreement with the Global General Counsel.
• Manage and motivate the Asia Legal Team to achieve efficient and effective service levels to internal and external stakeholders, including effective team building, management and succession planning as a functional leader.
• Management of Asia Legal Team spend.
• Work closely with and support other functions across PIDG in relation to legal matters and strategies, which may include employment, data privacy and regulatory aspects.
• Play a key role as senior team member, working with other Legal leads across PIDG as required to support and develop the Global Legal function in PIDG, including providing training and sharing of ideas and best practices.
• Act in all instances as an ambassador of PIDG, displaying and demonstrating the highest ethical and moral standards.

Qualifications and education requirements

• J.D. or equivalent law degree.
• Relevant professional qualifications.
• Strong academics.

Skills and Experience

• 10+ years of hands-on relevant legal experience.
• Strong experience in Asia, particularly in emerging markets, including development finance, project finance and M&A.
• Expertise in infrastructure or related sectors.
• Proven track record in developing talent, leading a team and mentoring team members.
• Significant experience in managing complex transactions.
• Experience in working on disputes.· Must be a team player, willing to help out wherever needed.
• Excellent written and spoken communication skills.
• Advanced negotiation skills, particularly in structuring agreements such as shareholders agreements, joint ventures, share purchase agreements and loan agreements.
• Skilled in analysing complex legal and business issues and providing relevant advice to stakeholders.
• Strong organisational abilities and proven leadership and influencing skills.
• Proactive, able to anticipate issues and develop practical solutions.
• Applies sound, principled judgment in a dynamic legal environment.
• Proficient in Microsoft Word, Excel and PowerPoint.
• Fluent in English; proficiency in regional languages within Asia is a plus.
• Thrives in a fast-paced, demanding environment.

Interested applicants, please send your detailed, updated resume to [email protected]. All applications will be treated with strictest confidence. We regret that only shortlisted applicants will be contacted.

Position: Aviation Security Officer

• Shift pattern will be 4 working days with 2 days off / 5 days work with 1 day off
• 12 hours permanent shift
• Location: Changi
• Salary Package
  i. Gross salary: up to $2,850
  ii. Bonus of $2,500

Job Description

• Screening of passengers at designated zones
• Manual bag checks
• Usage of security screening equipment for screening purposes
• X-ray screening of checked in luggages
• Any other security related roles at Airport

Chin Wai Loon Reg No: R24121618

The Supreme Hr Advisory Pte Ltd EA No: 14C7279

Role Overview:

The role involves safeguarding systems, applications, and infrastructure through proactive vulnerability management, the application of security controls, secure development practices, incident response, and continuous threat monitoring. You will collaborate with both internal teams and external service providers to enhance the cybersecurity posture and align with best practices and industry standards.

Key Responsibilities:

Vulnerability Management & Assessment:

• Evaluate the cybersecurity aspects of design proposals across various systems, applications, and infrastructure.
• Source, manage, and oversee external vendors conducting annual vulnerability assessments and penetration tests.
• Review assessment reports and recommend remediation actions for identified weaknesses.

Implementation of Security Controls:

• Recommend and implement security controls based on industry best practices, standards, and guidelines (e.g., OWASP Top 10, NIST, CIS).
• Contribute to the development and maintenance of security policies, procedures, configurations, and standards aligned with ISO 27001.
• Participate in internal audits and reviews to ensure the effectiveness of the ISMS and security controls.

Secure Development Practices:

• Integrate secure coding practices and OWASP Top 10 recommendations throughout the software development lifecycle (SDLC).
• Collaborate with developers to identify and address security vulnerabilities during design and coding phases.

Incident Response & Recovery:

• Monitor logs for signs of malicious activity and potential data breaches.
• Coordinate with contractors, security vendors, and internal teams to manage incidents, identify root causes, and implement recovery procedures.

Continuous Learning & Threat Awareness:

• Stay informed on the latest cybersecurity threats, vulnerabilities, mitigation techniques, and emerging technologies.
• Attend training, read industry publications, and participate in conferences as needed to maintain up-to-date knowledge.

Collaboration & Security Awareness:

• Work closely with security professionals and the governance team to educate colleagues on security best practices and raise awareness about potential threats.

Qualifications:

Educational Background:

• Degree in Information Systems/Technology, Computer Engineering, Computer Science, Information and Communications Technology (ICT), or a related field.

Certifications:

• Preferred certifications: CISSP, CISA, CISM, CompTIA Security+, or equivalent.

Experience & Skills:

• Strong understanding of cybersecurity principles and best practices, with at least 5 years of relevant experience managing contractors and designing cybersecurity solutions.
• Experience in drafting tender specifications for vulnerability assessments, penetration testing, and creating SOPs for incident response.
• Proficiency with security tools, log extraction techniques, and related technologies.

Interested candidate who wish to apply for the advertised position, please click on “Apply Now”. We regret that only shortlisted candidates will be notified.

EA License NO.: 01C4394

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its overseas subsidiaries and affiliates collecting, using and disclosing your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services and such other purposes stated in our privacy policy. Our full privacy policy is available at www.persolkelly.com.sg. If you wish to withdraw your consent, please drop us an email to let us know

• Position: Aviation Security Officer
• Shift pattern will be 4 working days with 2 days off / 5 days work with 1 day off
• 12 hours permanent shift
• Salary Package

i. Gross salary: up to $2,850

ii. Bonus of $2,500

Job Description

* Screening of passengers at designated zones

* Manual bag checks

* Usage of security screening equipment for screening purposes

* X-ray screening of checked in luggages

* Any other security related roles at Airport

Requirements:

* 1 N Levels / 1 O Level / WPLN 3 x Level 4

https://wa.me/6596420989

WhatsApp: +65 9642 0989 (Han)

Email: [email protected]

Chaw Chiaw Han, Reg No：R22106723

The Supreme HR Advisory Pte Ltd, EA No：14c7279

We are seeking an experienced AWS Security Engineer to design, evaluate, and enhance the security of our cloud infrastructure. The ideal candidate will be well-versed in AWS services, with a focus on securing containerized architectures (ECS, EKS) and cloud-based services (EC2, S3, IAM).

Responsibilities:

• Develop and implement security strategies and best practices for AWS services, including ECS, EKS, and EC2.
• Configure and maintain IAM roles and policies with a principle of least privilege.
• Regularly audit and evaluate AWS account security, including S3 encryption, network access controls, and logging.
• Ensure the security of containers (Docker) and orchestration platforms (ECS, EKS).
• Implement container image scanning to identify and remediate vulnerabilities.
• Manage and optimize runtime security configurations for containerized environments.
• Configure and maintain AWS native security services such as GuardDuty, Inspector, and Security Hub.
• Design and implement real-time intrusion detection and incident response processes.
• Investigate and mitigate security incidents, providing post-incident analysis and recommendations.
• Design secure VPC architectures, including subnet isolation, security groups, and NACL configurations.
• Configure Web Application Firewalls (WAF) to protect against common attacks such as SQL injection and XSS.
• Optimize AWS Shield and other DDoS protection mechanisms.
• Conduct regular security audits and generate reports to assist with third-party assessments.
• Develop and maintain automation scripts (Python, Shell) to streamline security tasks.
• Integrate security checks into CI/CD pipelines.

Requirements:

• Degree in IT/Computer Science/Engineering or equivalent.
• Expertise in AWS cloud security, Proficiency in Docker and container orchestration security.
• Familiarity with vulnerability scanning, penetration testing, and compliance tools.

As a Cloud Security Engineer, you will provide excellent technical guidance to customers adopting Google Cloud services. You will provide best practices on secure foundational cloud implementations, automated provisioning of infrastructure and applications, cloud-ready application architectures, and more. You will provide prescriptive guidance in ensuring customers receive the best of what Google Cloud Platform (GCP) can offer and you will ensure that customers have the best experience in migrating, building, modernizing, and maintaining applications in Google Cloud. Additionally, you will work closely with Product Management and Product Engineering to drive excellence in Google Cloud products and features.

Responsibilities

• We are looking for passionate and experienced security professionals to work with our strategic customers to help guide their vision, address risks and implement their security and compliance strategies on customer.
• The role will provide thought leadership and operate with a high degree of autonomy and visibility as part of our worldwide PSO specialist team. 
• Provide deep domain expertise in cloud security and be a trusted technical advisor to customers and solve complex cloud security & compliance challenges. 
• Work with customers to design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Cloud environment. 
• Create and deliver best practices recommendations, tutorials, blog articles, sample code, and technical presentations adapting to different levels of key business and technical stakeholders.  Communicate effectively via video conferencing for meetings, technical reviews and onsite delivery activities. 
• Manage disparate senior stakeholders within customer environments to deliver consensus and drive positive customer outcomes on the Cloud platform. 
• Stay connected with the latest security trends throughout various industry verticals
• Travel regularly (up to 30%, although we also frequently use video conferencing) in-region for meetings, technical reviews, and onsite delivery activities

Minimum Qualifications (MQs) 

• Bachelor’s degree in Computer Science, Engineering or related technical field or equivalent practical experience. 
• Coding experience in one or more general purpose languages. 
• Experience managing customer projects to completion, working with engineering teams, sales and partners. 
• Experience architecting, developing, or maintaining secure cloud solutions. 
• Strong verbal and written communication skills (English and Mandarin Chinese), and the ability to develop high-quality technical documentation and presentation materials.

Preferred Qualifications 

• At least 10+ Year work experience of security architecture and/or security engineering experience  Hands on and deep knowledge of security principles. 
• Demonstrated experience in Cloud Security delivered within the context of customer facing roles. Experience understanding attacks and mitigation methods, in two or more of the following: Network protocols and secure network design; Operating system internals and hardening; Web application security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks. 
• Strong practical experience securing Kubernetes and containerized workloads.

About ByteDance

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

As part of the Security Engineering team, we are responsible for supporting the company's construction of security capabilities and platform services, combining other teams to create efficient and high-quality service docking capabilities, enhancing interactive experience, and lowering the user's barriers to understanding and using security services.

Responsibilities

We are looking for Security Software Engineers to join our Security Engineering team in building the next-generation of ByteDance's product security & privacy infrastructure that furthers our system security and user data privacy protection level, which will impact all ByteDance's products globally. In addition, you will also have opportunities to work closely with product teams across the world. Together we will identify opportunities, define innovative ways to build our users a safe and trustworthy environment, and help us shape the future of ByteDance.

- Research, design, develop, test, maintain and continuously improve ByteDance's product security & privacy Infrastructure and softwares.

- Analyse user needs and security & privacy objectives, develop software solutions, applying principles and techniques of computer science, engineering, and mathematical analysis.

- Update Software, enhances existing software capabilities. Develop and direct software testing and validation procedures to optimize reliability, availability and performance of globally distributed systems.

- Work with multiple cross-functional global teams to integrate hardware and software systems and develop specifications and performance requirements, to deliver high-quality work in rapid product development.

- Deploy, troubleshot and operate large distributed systems.

- Manage individual project priorities, deadlines and deliverables

Minimum Qualifications

- Bachelor's degree and or above in Computer Science, Computer Engineering or other relevant majors.

- Strong knowledge of data structures and algorithms

- Proficiency in at least one server library / framework like Express, Koa, Gin, Kite, Django, etc and at least one kind of database like MySQL, Redis, MongoDB, Hive, ClickHouse, ES, etc and at least one kind of message queue like Kafka, RocketMQ, etc

- Understanding of load-balance, container virtualization, familiarity with NGINX, Docker, K8s, Serverless, etc

- Proficiency in TypeScript, CSS and various layouts, at least one kind of general purpose programming language like Node.js etc

- Understanding of component-based development ideas, familiarity with React.js, Vue.js, or any other equivalent library / framework

- Excellent programming, debugging, and optimization skills in general purpose programming languages

- Ability to think critically and to formulate solutions to problems in a clear, concise and timely manner

Preferred Qualifications

- Experience in cloud-native security services and infrastructure such as Key Management System (KMS), or Public Key Infrastructure (PKI) to serve as a foundation for production infrastructure security. Experience in securing software supply chains to ensure source and build integrity at any stage of the software lifecycle.

- Experience with two or more general purpose programming languages including but not limited to: Go, Node.js, Java, or Python. Preferred familiarity in Rust.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Job Description Summary

We are seeking an experienced Senior Information Security Engineer SME with specialization in anti-malware/anti-virus solutions, Endpoint Detect and Response and Network Intrusion Detection Systems, with log analysis using SIEM tools such as Splunk. The ideal candidate should also have strong experience with standing up solutions selected by the business while providing operational guidance, architecture design, integrations including SSO, SIEM, monitoring and other platform integrations, cyber security expertise, incident response collaboration experience, proficiency in vulnerability detection solutions, File Integrity Monitoring (FIM) control and policy configuration experience, operational acumen, and a solid understanding of TCP/IP networking. This role involves architecting, implementing, and maintaining security solutions to protect our infrastructure and end user computing environments, leveraging platforms such as CrowdStrike Falcon, Microsoft Defender for Endpoint, Skyhigh Web Gateway, Trellix Endpoint Security for Storage, and Cisco Firepower Intrusion Detection Systems. The ideal candidate should also have extensive experience in configuring policy, integrations and providing platform support for multiple SaaS based security tools to act as the internal L3 escalation point for tool users and as a liaison between the users and vendor contacts for tools such as Cisco Umbrella, ThreatConnect and Palo Alto Cortex Xpanse.

Key Responsibilities:

Security Solutions Implementation and Management:

• Anti-malware/Anti-virus/Endpoint Detect and Response: Deploy, configure, and manage endpoint protection solutions to defend users and endpoints from malicious content.
• AV/EDR Policy Configuration: Implement and maintain platforms such as CrowdStrike Falcon, Microsoft Defender for Endpoint to protect against common threats. Configure policies to provide a balance between security and user/endpoint operational impact.

Log Analysis and Monitoring:

• SIEM Utilization: Analyze logs using Security Information and Event Management (SIEM) tools such as Splunk and Datadog to identify and respond to security incidents. Implement and manage log aggregation and monitoring solutions.
• Incident Response: Lead incident response efforts, providing root cause analysis, forensics, and remediation.

Deployment and Onboarding:

• Software Package Deployment: Manage the creation of endpoint security software packages for deployment via software distribution tools such as SCCM, JAMF, Puppet to ensure coverage to all endpoints in the environment.

Vulnerability Detection:

• Endpoint Vulnerability Detection: Manage and operationalize the vulnerability detection capabilities of endpoint security software tools for distribution and ingestion via aggregation platforms for consumption by the vulnerability management teams via platform integrations.

Cyber Security:

• Threat Analysis: Conduct thorough cyber security threat analysis and implement mitigation strategies to protect the organization’s assets.
• Policy Development: Develop and enforce cyber security policies, standards, and best practices to ensure a secure operating environment.
• Risk Management: Perform regular cyber security risk assessments and develop comprehensive risk management strategies.

Cloud Security:

• Cloud Platforms: Leverage cloud security best practices to protect services hosted on AWS, Azure, and GCP. Ensure secure configurations, access controls, and monitoring are in place.
• IAM: Manage identity and access management (IAM) policies to enforce least privilege and secure access to cloud resources.

Networking Expertise:

• TCP/IP Networking: Apply a solid understanding of TCP/IP networking principles to design, implement, and troubleshoot secure network configurations and protocols.

Collaboration and Compliance:

• Team Collaboration: Work closely with development, operations, network, and security teams to ensure cohesive and comprehensive security measures.
• Communication Channels: Utilize various communication channels effectively, including meetings, emails, Slack, and MS Teams, to collaborate efficiently with team members and other stakeholders.
• Compliance: Ensure alignment with industry standards and regulatory requirements such as GDPR, SOX, and PCI-DSS. Participate in compliance audits and risk assessments.

Training and Mentorship:

• Education: Provide guidance and training to junior team members and other stakeholders on best practices for edge and cloud security, including the use and management of WAF, DDoS protection, and bot management products.

Preferred Qualifications:

• Experience: 8+ years of experience in a Information Security Engineer role with a strong focus on endpoint AV/EDR, infrastructure based anti-malware solutions and network IDS products (Crowdstrike Falcon, Microsoft Defender for Endpoint, SkyHigh Web Gateway, Trellix Endpoint Security for Storage, and Cisco Firepower Intrusion Detection Systems.)
• Technical Skills:Strong experience with performing solution stand-up including architectural design and implementation.
  Strong experience with modern antimalware and endpoint detect and response solutions (CrowdStrike Falcon and Microsoft Defender for Endpoint)
  Experience with infrastructure focused antimalware solutions providing secure ICAP server services (Skyhigh Web Gateway)
  Experience with infrastructure focused antimalware solutions providing enterprise storage (NetApp) Antivirus services. (Trellix Endpoint Security for Storage)
  Experience in providing integrations with platforms such as SSO and SIEM tools.
  Expertise in log analysis and monitoring using SIEM tools like Splunk.
  Solid understanding of TCP/IP networking, network security principles, firewalls, IDS/IPS, and secure communication protocols
  Familiarity with cloud security best practices and secure configurations on AWS, Azure, and GCP.
  Knowledge of software deployment solutions and providing packages for deployment tools (SCCM, JAMF, Puppet)
  

Soft Skills:

• Problem-Solving: Excellent analytical and problem-solving skills.
• Communication: Strong communication and collaboration abilities.
• Leadership: Proven leadership and mentorship capabilities.
• Team Player: Strong ability to work effectively within a team environment and collaborate across various teams.
• Adaptability: Ability to work independently and handle multiple, complex priorities in a fast-paced environment.

Joining Arup

Arup’s purpose, shared values and collaborative approach has set us apart for over 75 years, guiding how we shape a better world.

The Security Technology lead will provide direction and leadership to the specialist electronic security engineering and consultancy services (including integrated electronic security system such as video surveillance, electronic access control, intrusion detection etc.) in Singapore and South-East Asia. Arup’s Singapore Resilience Security & Risk (RSR) team is providing high end advisory services in Singapore and South-East Asia. The team currently has personnel with professional qualifications and skills in Security Risk & Strategy, Security Technology, Protective Design and Cyber Security.

The Opportunity

• Drive the overall performance and growth of the Security Technology team as part of the RSR leadership cohort.
• You will project manage a range of security projects, either direct security commissions or as part of larger multi-disciplinary projects. Here you will be responsible for the client interaction, project financial matters, quality assurance, delivery and resourcing.
• Undertake, manage and deliver the security engineering (electronic and protective) design for a range of facilities and/or for a variety of projects through all stages of design from concept, detailed and tender design to construction, and within established quality, budget and project expectations.
• Proactively approach clients, identify and develop business opportunities for RSR and other Arup disciplines. This includes planning and implementation of new market offers.
• You will develop and implement long term strategic plans to grow the RSR business in Singapore and across the region.

At Arup, you belong to an extraordinary collective – in which we encourage individuality to thrive. Our strength comes from how we respect, share and connect our diverse experiences, perspectives and ideas.
You will have the opportunity do socially useful work that has meaning – to Arup, to your career, to our members and to the clients and communities we serve.

Is this role right for you?

• Recognised relevant tertiary qualifications in electrical or electronic engineering or IT or similar area.
• At least 10 years of relevant industry experience in electronic security system design as consultant, manufacturer/distributor, end-user and/or security systems integrator.
• In depth understanding of latest security technologies (electronic and physical security).
• Membership of relevant professional institutions/professional peer bodies or significant credit towards eligibility for membership.
• Proven working knowledge of relevant legislation, regulations, codes of practice, and guidelines.

What we offer you

At Arup, we care about each member’s success, so we can grow together.
Guided by our values, we provide an attractive total reward package that recognises the contribution of each of our members to our shared success. As well as competitive, fair, and equitable pay, we offer a career in which all of our members can belong, grow and thrive – through benefits that support health and wellbeing, a wide range of learning opportunities and many possibilities to have an impact through the work they do.
We are owned in trust on behalf of our members, giving us the freedom, with personal responsibility, to set our own direction and choose work that aligns with our purpose and adds to Arup’s legacy. Our members collaborate on ambitious projects to deliver remarkable outcomes for our clients and communities. Profit Share is a key part of our reward, enabling eligible members to share in the results of our collective efforts.

Please see a list of Arup’s Singapore benefits below:

• Hybrid working policy & flexible working hours
• 13th month bonus
• Birthday leave
• Purchase Additional leave of up to 20 days (permanent employees)
• Paid parental leave for birth mothers 16 weeks & new parents (excluding birth mothers) 4 weeks
• Marriage leave (3 days)
• Examination leave (2 days)
• Family care leave
• Paid Annual subscription to relevant Professional association
• Reimbursement of Professional Engineers application and examination Fees
• International mobility opportunities
• QP allowance
• Site Allowance
• Work related travel insurance
• Dental expense cover
• Bike Loans of up to SGD2000

Different people, shared values

Arup is an equal opportunity employer that actively promotes and nurtures a diverse and inclusive workforce. We are an open environment that embraces diverse experiences, perspectives, and ideas – this drives our excellence.
Guided by our values and alignment with the UN Sustainable Development Goals, we create and contribute to equitable spaces and systems, while cultivating a sense of belonging for all. Arup provide an environment where you will make a positive difference. Discover more about life at Arup at www.arup.com/careers/your-life-at-arup.
We are committed to making our recruitment process and workplaces accessible to all candidates. Please let us know if you need any assistance or reasonable adjustments throughout your application or interview process, and/or to perform the essential functions of the role. We will do everything we can to support you.

Our Application Process

Please apply directly through our applicant tracking system. Shortlisted candidates will be contacted by Talent Acquisition to discuss next steps. Stay safe online – Arup will never ask for your bank details as part of our recruitment process.

Arup does not accept unsolicited resumes from recruiters or employment agencies.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Cloud Security team owns security for all services offered by Volcano Engine & BytePlus which is a cloud service provider owned by ByteDance, including IaaS, PaaS and SaaS. Join our forward-thinking security team dedicated to securing our cloud infrastructure with cutting-edge technologies and best practices. You will have the opportunity to design and implement robust security solutions for our cloud environments, ensuring the protection of sensitive data and the resilience of our systems.

Job Responsibility

1. Design, implement, and oversee cloud security architecture, encompassing physical hardware, operating system, cloud-native application, data security and privacy protection, insider threats and generative AI.

2. Develop and enforce cloud security policies, standards, and procedures in alignment with industry regulations and best practices.

3. Conduct security risk assessments, security training, and vulnerability assessments to identify and address security gaps proactively.

4. Collaborate with cross-functional teams to integrate security controls into cloud products and underlying infrastructure.

5. Stay abreast of emerging cloud security trends, technologies, and threats, providing guidance on security strategies and solutions.

Minimum Qualifications

1. Familiar with the principles of common risks, attack and defense strategies; Understand how to systematically lead security architecture and risk governance.

2. Familiar with cloud-native and infrastructure technologies such as network access, LLM, big data, storage, cloud computing, microservices, zero trust, etc.

3. Familiarity with container security technologies (e.g., Docker, Kubernetes) and serverless security best practices.

4. Proficient in at least one language in Golang, Python, Java, or NodeJS, capable of doing code auditing/reviews and development.

5. Knowledge of security frameworks and standards (e.g., CIS Benchmarks, GDPR, HIPAA).

6. Strong communication and excellent teamwork skills. With professional working ethics, and have a keen risk awareness. Results orientated, aiming for long-term growth in this field.

Preferred Qualifications

1. Experience of discovering major impactful vulnerabilities domestically or internationally / winning large-scale security competitions is a plus.

2. Priority given to those who have led or participated in large-scale governance, architecture, and design projects.

3. Strong understanding of cloud computing platforms (e.g., AWS, Azure, Google Cloud) and cloud security best practices.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Responsible to ensure accurate and rapid response to security events. • Analyze security logs, SIEM alerts, and incident reports to identify and mitigate risks. • Respond to and investigate security incidents, including breaches, malware outbreaks, and phishing attacks. Monitor networks and systems for security breaches, alerts, and anomalous activity. • Conduct root-cause analysis to prevent future incidents and develop incident response procedures. • Provide analysis and trending of security log data from various security devices • Configure and maintain SIEM tools to align with the organization’s security objectives and threat landscape. • Create custom SIEM dashboards and reports for different stakeholders to visualize critical security metrics and incident data. • Develop and optimize SIEM content, including rules, alerts, and correlation logic, to improve threat detection and response. • Regularly review and tune SIEM rules to reduce false positives, enhance event correlation, and maintain relevance to evolving threats. • Document and update SIEM processes and configurations, ensuring a high level of data accuracy and availability. • Perform regular vulnerability scans and assist in patch management processes. Work with IT teams to prioritize and remediate them. • Recommend solutions to mitigate risks in any activity that may potentially impact security of existing IT and information management • Ensure compliance with industry regulations (e.g. GDPR, ISO 27001) and company policies. • Assist in the development, implementation, and maintenance of security policies, standards, and guidelines. • Assist in training staff on security best practices, including phishing awareness and data protection. • Help develop educational materials and conduct periodic security awareness training.

Requirements:

Bachelor Degree or Advanced Diploma in Computer Science, Information Technology,
• Cybersecurity from a recognized university or related field (or equivalent experience)
• At least 1-3 years in a cybersecurity role, with hands-on experience in SIEM content
management, network security, threat monitoring, or incident response.
• Strong knowledge of cybersecurity principles, practices, and technologies.
• Expertise in SIEM tools and content management, including rule creation, alert tuning, and report
customization.
• Proficiency with security tools like firewalls, IDPS, antivirus, and vulnerability scanners.
• Knowledge of scripting (Python, PowerShell) for automation within the SIEM environment is a
plus.
• Ability to analyze and interpret security data to identify vulnerabilities and potential threats.
• Excellent communication skills, with the ability to explain complex security concepts to nontechnical stakeholders.
• Strong analytical skills and attention to detail.
• Ability to work on-call or off-hours as needed to respond to security incidents.
• May require occasional travel for training or workshop.
• Experience in the application of threat modelling or other risk identification techniques.
• Detailed knowledge of system security vulnerabilities and remediation techniques, including
penetration testing and the development of exploits
• Breadth of knowledge in information security space with emphasis on TCP/IP network security,
operating system security, common attack patterns and exploitation techniques
• Relevant certifications (e.g., CompTIA Security+, Certified Information Systems Security
Professional (CISSP), Certified Ethical Hacker (CEH), GIAC Security Essentials (GSEC)) are a plus
• Effective leadership skills and a team player.
• Strong sense of ownership and driv