Your Career

You will work firsthand with our valued customers to address their complex post-sales concerns where analysis of situations or data requires an in-depth evaluation of many factors. You’re a critical thinker in understanding the methods, techniques, and evaluation criteria for obtaining results. You’ll enjoy networking with key contacts outside your own area of expertise, with a strong capability of detailing difficult technical issues to both non-technical and technical professionals.

You will regularly participate in technical discussions with multi-functional teams, creating an environment of transparency that ultimately leads to better products, better working environments, and better cybersecurity. Your quick thinking and support to our clients provides the fast assistance they need to keep their environments secure – which means you’ll need to move quickly, thoughtfully, and provide technical assistance as needed (often, in high pressure situations).

Your Impact

• Provide Technical Support to customers and partners
• Provide technical services include writing scripts, troubleshooting and best practices to customers
• Manage support cases to ensure issues are recorded, tracked, resolved, and follow-ups are completed in a timely manner
• Provide fault isolation and root cause analysis for technical issues
• Publish Technical Support Bulletins and other technical documentation in the Knowledge Base
• Review of technical documentation for training materials, technical marketing collateral, manuals, troubleshooting guides, etc.
• Travel to customer sites in the event of a critical situation to expedite resolution as required
• Provide on-call support for weekend and public holiday on an as needed basis

The Security Director is a strategic leader on the Global Security Team reporting directly to the Senior Director, Global Security. They will be responsible for bridging gaps between security strategy and process implementation in the APAC region and will identify and execute on actions which will improve the performance and efficiency of the security organization and its operations. This leader will directly manage team members, programs, and initiatives at a global level to include operations in Asia Pacific and Europe.

• Advises the senior management team on all security related issues and activities.
• Supports the development of annual security-centric planning, budgeting, and implementation activities.
• Leads the collaboration effort between Regional Security Teams and other internal function groups in successfully identifying, investigating, and mitigating economic loss and other risks to the Company
• Advances and supports the Security team in providing and tracking ongoing Programs training, interventions, and other security-centric activities.
• Develops and implements solid business and security-centric value measure metrics, trending, and benchmarking
• Manage the regional departmental budget
• As a leader, they will dedicate significant time to develop and retain talent, and to enable her/his senior team members to build and implement (“in the field”) institutional global, corporate security programs
• Provide regular security briefs and emergency updates were appropriate for the regional executive leadership teams
• Facilitate and maintain security operations and emerging security technologies
• Ensure ongoing external networking with peer organizations
• Participates in budget preparation and takes necessary actions to control and reduce costs
• Promotes individual professional growth and development by meeting requirements for mandatory/continuing education and skills competency; supports department-based goals which contribute to the success of the organization; serves as preceptor, mentor, and resource to less experienced staff.

Background

Thales people architect solutions that are relied upon to deliver operational advantage at every decisive moment throughout the mission. Defence and armed forces customers rely on us to deliver the full range of defensive systems for land, sea, and air. From early warning, to threat neutralisation, our platforms cover all levels from very short-range systems, to extended protection across the entire battle-space including Airspace Mobility Solutions, Vehicles and Tactical Systems and Missile Defence, Optronics, and Radar.

Air Mobility Solutions provides leading edge airspace control and security solutions for the commercial and defence sectors.

Thales's advanced LORADS air traffic management system ensures the safety of operators and passengers at a time when soaring growth in air traffic poses a range of complex technical challenges.

Technologies supplied by the Air Mobility Solutions global centre of excellence, based in Singapore, are currently deployed in Singapore and across Asia and the Pacific region.

Thales Australia's air traffic control systems are in use in over 50 countries including Australia, Mexico, South Africa, China, Singapore and Thailand.

Purpose:

The Cyber Security Engineering position is within Airspace Mobility Solutions in Singapore to contribute, but not limited to the LORADS and Topsky-ATC HE projects managed and supported from Singapore.

The position includes the following main responsibilities:

• To undertake security engineering and architecture activities as per budget and aligned with contract and strategy set by the System Cyber Security Engineering Lead.
• To define security solution and associated estimates for specific work packages and bids activities, for example in relation to Contract Change Proposal and Engineering Change Requests/Proposals.
• To provide technical leadership on security solution for the LORADS System and the impact on suppliers’ sub-systems and security components (e.g. other business lines).
• To define security solutions cooperatively with supplier solution teams, engineers and the cyber security design authority.
• To develop security engineering artefacts such as the statement of applicability to the targeted version of the applicable security standards, and other applicable CDRLs as directed by the lead cyber security engineer.
• To lead the vulnerability management service activities to Asian customers.
• To lead security audit and cyber health check service activities to Asian customers.
• To interface with other business lines (e.g. CDS) for the delivery of other cyber security services to Asian customers.
• Contribute to the security risk management by identifying and characterising security risk to the customer context.
• To contribute to customer meetings in relation to the cyber security tasks that you are implementing.
• To contribute to other security tasks from the AMS Business Line like for instance incident response and crisis exercises.
• To support other project or service initiatives when required.

KEY ACTIVITIES AND RESPONSIBILITIES

As the Cyber Security Engineer, you are accountable for:

• Lead, tailor, and support the Security strategy as per Engineering Plans.
• Plan, execute and manage the delivery and the Customer approval of Security deliverables;
• Plan, execute and manage the delivery of the security component with appropriate artefacts.
• Manage the technical risks relevant to Security activities to contribute to program risk management.
• Lead Security Architecture Design as per project needs.
• Lead the vulnerability management service activities to Asian customers.
• Lead security audit and cyber health check service activities to Asian customers.
• Contribute to the response of cyber incident and crisis events.
• Select, specify, and deploy methodologies (including metrics), tools/platforms necessary for Security Engineering activities in line with company policies.
• Manage and prioritize defects correction and evolutions in accordance with the project sprint strategy.
• Support Bids and Engineering Change Proposal evaluation;
• Providing collaborative support to the other members of the Project team.
• Support and contribute to the definition of the Security solution and Policies for the Products (Topsky-HE, Topsky-One, LORADS ATC).

Interactions:

• Works closely with the head Cyber Engineering Manager and the Cyber System team in country and Australia, the cyber sub-system team and solution engineering teams from the various sub-systems, including the legacy LORADS ATC and the future Topsky-One.
• Works closely with Cyber Head of Discipline, Security Authority and Solution Architects.
• Works with Subcontractors and suppliers to ensure they are aligned with the Security Program and comply with the defined security baseline.
• To establish trusted relationship with the Customers and Subcontractors (including CDS).
• Strong internal and external stakeholder management skills.

Challenges:

• Complex stakeholder community with different requirements and cultural approaches to the Delivery Process.
• High level of Customer and Senior Thales Management scrutiny and audit.
• Re-establishing a robust and rigorous discipline of weekly/monthly reporting and tracking of Project issues (cost/risk/schedule etc).
• Working in a multicultural and multisite environment.
• This position requires the capacity to understand and handle resistance to change, to engage cross functional, diverse stakeholders.

KEY KNOWLEDGE AND EXPERIENCE

To be successful in your role, you will have demonstrated and/or acquired the following knowledge and experience:

• Experience in the life cycle of software/system development including processes and responsibilities at each stage of the cycle.
• Delivery of engineering/management services to tight timelines.
• Understanding of Security System Engineering processes and FBL/ABL/PBL management
• Working with a multi-skilled team of engineers: 2+ years
• Knowledge of Security Standards (NIST, ISO27001, Singapore security standards)
• Understanding of System accreditation and impact on project streams (sub-systems).
• Proven problem identification and analysis skills and system requirements analysis skills.
• Selecting, specifying and deploying methodologies including metrics, tools/platforms (e.g. DOORS).
• Producing appropriate artefacts leading to Customer acceptance and final accreditation.
• Contributing to Cost Models.
• Contributor to Risks & Opportunity management.
• Contribution to the management of subcontractors.
• Providing coaching/mentoring of less experienced staff.
• Challenge status-quo by being creative and innovative.
• Capability to delegate and supervise work performance.
• Excellent written and oral communications skills.
• Ability to manage Work Packages.

Job Purpose

The Professional Officers Division (POD) houses a centralized pool of academic staff under the Professional Officers scheme. Professional Officers come with specialised and deep technical skills acquired through extensive industry experience. They form the talent pool which brings a much-needed industry perspective to student learning. They facilitate applied learning and applied research in SIT, complementing the academic expertise of the faculty to bring industry practices and applications into the curriculum.

Professional Officers leverage on their industry experiences to create authentic learning environments, where discovery and innovation take place. They act as coaches and mentors to students during practical learning activities such as laboratory sessions, Capstone Projects and the Integrated Work Study Programme (IWSP). Professional Officers could also lead or work with faculty on industry innovation projects to provide solutions to the industry.

In addition to their role in applied learning and applied research, Professional Officers manage the centralised laboratory facilities and resources in SIT. With Technical Officers, laboratory safety professionals, and administrators in POD, they jointly develop central policies and processes for the safe and seamless operation of laboratories in SIT.

Job Responsibilities

• Design and teach labs & practice modules.
• Mentor students in Capstone Projects and the Integrated Work Study Programme (IWSP).
• Lead or co-lead innovation projects with industry.
• Manage labs and equipment to support academic programmes and applied research.
• Ensure safety in labs.

Job Requirements

• Have a degree in Computer Science/Engineering or related discipline. Possessing a Master’s or PhD degree will be advantageous.
• Deep technical specialist with 10 or more years of working experience as solution or software architect in setting up network and server systems, managing software development environment and configuration activities to support testing and maintenance of IT system, software applications, hosted services and websites.
• Strong technical know-how and practical competencies in the hybrid infrastructure and cloud technology to administer enterprise-level systems. Setup and management of physical / cloud resources and administration of virtualization technologies, Familiar with Cisco UCS, HPE ProLiant, Nutanix, VMWare, Hyper-V, AHV, KVM, VDI, Citrix, AWS, AliCloud, GCP, Azure, OpenStack, Docker, Kubernetes, SDN, etc
• Oversee and manage day-to-day operation which include problems / incidents management, capacity management, audit and infrastructure / network security scans, disaster recovery, security and availability management etc.
• Keen interest to support research and academic project work, with demonstrated ability in developing software solutions to technical problems.
• Have a firm grasp of cyber security domain, as well as proficient with a range of information security tools and techniques.
• Keen interests to support research and academic project work, with demonstrated competencies to manage and employ new security technologies.
• Possess strong supervisory skills and enjoy working closely with students in an educational environment.
• Self-starter with hand-on knowledge to implement security policies and establish layered defense for network and server systems as well as ability to perform penetration and vulnerability testing of the networks, operating systems, software applications and mobile devices.
• Demonstrate proficiency to stay up-to-date on the latest intelligence, including hackers’ methodologies and pursue professional certification programs. Industrial certifications in relevant areas will be an added advantage.
• Professional Officers appointed at senior levels may have managerial responsibilities.

Security Officers

Shift Work: Day / Night Relief 

Place of Work: Singapore

Requirements:

1. Valid PLRD security license.

2. Prefer with relevant working experience in Singapore.

2.Certificate of Good Conduct (for Malaysian).

3.PC literate.

4.Able to work 12-hr shift.

5.Assignments include Office buildings, Factories, International schools.

6.Prefer with customer service / front line experience.

Application Methods:

1. WhatsApp (65) 8379 4701 

2. Interview can be arranged by Video Call.

Company Description

Founded and headquartered in Switzerland, Avaloq is continuously expanding its global footprint with around 2,500 colleagues in 10 countries, and more than 160 clients in 35 countries. We are an industry-leading provider of wealth management technology and services for financial institutions around the world, including private banks and wealth managers, investment managers, as well as retail and neo banks. Our research led approach and continual innovation is powered by the passion and creativity of our colleagues.

We are always looking for talented people to join us on our mission to orchestrate the financial ecosystem and democratize access to wealth management. Avaloq offers the opportunity to work closely with some of the world’s leading financial institutions as we jointly develop and shape careers. Championing a collaborative, supportive and flexible work environment empowers our colleagues to reach their full potential.

Job Description

We are looking for an individual with a passion for cyber security to represent Avaloq’s security controls to customers, and ensure that Avaloq is meeting all legal, regulatory, and contractual requirements around protection of data.

The role requires a strong background and understanding of all cyber security domains and strong interpersonal and communication skills.

In this position, you will be part of the global cyber security operations team and represent Avaloq’s security controls to our customers in Asia, coordinate and respond to customer audits, as well as support our security teams in Singapore, Manila, and Pune.

You can expect a demanding and complex international environment, which is highly stimulating and encouraging. The growth of the company demands your structured and innovative approach, as well as flexibility to a high degree. As a committed team player, you will support developing the maturity of the cyber security organization, controls, and processes.

Your key tasks

• Represent Avaloq’s security organization in meetings with Customer CISOs and security teams
• Coordinate customer audits, validate and respond to findings, and ensure and issues are tracked through remediation
• Identify cyber security gaps in existing and proposed projects, services, and processes
• Participate in global security projects
• Support local security teams in Singapore, Pune, and Manila with strategic and tactical guidance
• Participate in the selection and evaluation of security solutions, or enhancements to existing cyber security solutions, to improve overall enterprise security

Qualifications

What are we looking for:

• 5-7 years working experience in a senior information or cyber security role
• Experience communicating with C-Level customers and clients
• Experienced with vendor management
• Deep knowledge and experience in all information security domains
• Solid knowledge about Cloud
• Working experience in Threat Intelligence Management
• Fluent in English (both written and verbal)

It is a plus if you have:

• Information and Cyber Security certificates like CISSP, SANS or similar
• Working experience with AWS or Oracle Cloud
• Working experience with penetration testing and vulnerability analysis tools
• Working experience in Digital Forensics and Cyber Security Incident Response

About Us

ENGIE is a global energy player, focused on renewables and low-carbon decentralized energy infrastructure. The Group is pillared by 4 key businesses - Renewables, Energy Solutions, Networks, Thermal & Supply, and together with our 170,000 employees, we are committed to accelerate the transition towards a carbon-neutral world, through reduced energy consumption and more environmentally friendly solutions. It brings together the company, employees, clients and shareholders, and reconciles economic performance with a positive impact on People and our Planet.

Energy is our future, save it.

Responsibilities

• Support all aspects of Health, Safety, Security and Environmental (HSSE) in data gathering, managing, monitoring and analysis for the projects from construction, Commissioning and operation.
• Creative content development, includes designing of proposals HSSE communications. Creation of templates to facilitate the teams in their submission of data and HSSE information.
• Support in the development of HSSE management system procedures, and communications of system updates and procedures.
• Interface with entities HSSE professionals & provide support and improve HSSE performance, data analysis developing lessons learnt communications.
• Plan and organize HSSE related activities or events to promote and educate staff on good safety culture and good work practices.
• Support Develop in house training material/video, organise and maintain records.
• Prepare or review publication materials for clear HSE matters communication with Engie staff and contractor partners workforce.
• Website and Analytics. Maintain corporate HSSE Quality website’s content for the region while ensuring that all contents are accurate and up to date.
• Develop the HSE Communications by working through HSSE teams with research and presentation activities as and when required.
• Analyse industry HSE trends to develop insights and make recommendations on areas for optimization.
• Conduct EHS inspection when necessary.

Requirements

• Degree/Diploma in Engineering/Occupational Safety/Health or equivalent
• At least 2 years relevant working experience, preferably in construction and/or manufacturing industry
• Excellent written and verbal communications skills.
• Creative thinker with good design sense, strong visualization skills and good portfolio in multimedia design.
• Proficient in Adobe Cloud and other multimedia design tools, MS Office, particularly advanced levels in Word and PowerPoint
• Workplace Safety and Health Coordinator qualified Adv Workplace Safety and Health Certificate is an advantage
• Obtained other WSH qualification like Work At height Manager, Confined Space Assessor, WSH Risk Management qualification is an advantage

When you join ENGIE, you will have access to:

• The opportunity to have a meaningful job where you can make a difference
• A career management plan with opportunities to grow in an international environment
• Attractive and competitive package
• Dynamic and inclusive work environment
• Continuously evolve as a professional, coupled with a variety of training opportunities

If you think you have the right profile for this opportunity, submit your application before 19 March 2024.

PRODUCT AREA

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats.

ADDITIONAL JOB DESCRIPTION

As a Cyber Security Consultant, you will blend risk assessment, strategic planning, and client collaboration. You'll conduct in-depth cyber maturity assessments, develop forward-thinking strategies, and lead realistic simulations that help clients prepare for and respond to cyber threats. You will identify vulnerabilities and develop actionable mitigation plans. You'll empower clients with data-driven insights, enhancing their security posture.

Qualifications

JOB RESPONSIBILITIES

• Perform in-depth assessments to identify and analyze cyber vulnerabilities and threats. Prioritize risks based on their potential impact.
• Craft cyber risk mitigation strategies, ensuring alignment with regulations (e.g., GDPR, ISO 27001, NIST/CIS Controls). Develop effective policies.
• Develop and update policies and procedures (i.e. playbooks) for risk management and incident response.
• Collaborate with clients to tailor cyber security solutions. Generate clear reports and presentations that illustrate risks and mitigation plans. Scope and propose solutions to clients.

MINIMUM QUALIFICATIONS

• Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent practical experience.
• 5 years of experience in cyber security with a risk assessment focus.

PREFERRED QUALIFICATIONS

• Master's degree in a relevant field. Professional certifications in cyber security (e.g., CISSP, CISM, CRISC).
• Consulting and/or project management experience.
• Experience leading cyber security assessments, including Table-Top Exercises (TTX).
• Knowledge of security frameworks (e.g., ISO 27000, NIST CSF).
• Ability to present complex security concepts to varied audiences (e.g. technical and executive).
• Excellent communication and problem-solving skills.

Responsibilities:

• Supervise the Service Delivery Managers and other resources within the security services team
• Prepare and deliver the service and maintenance proposal during bids
• Formalize service requirements, cost of ownership and integrated logistic support of the Solution
• Define the architecture/organization of the service and the associated service infrastructure
• Allocate service requirements to the various actors of the organization for support
• Validate the Service Deployment Readiness
• Validate the Obsolescence Management Plan
• Responsible for the resources to deliver the services
• Ensure that the teams meet all the Service Level Agreement (SLA)

Requirements:

• A bachelor's degree in IT/Computer/Engineering Discipline
• Preferably more than 10 years of work experience in maintenance of Critical System with SLA in the management capacity
• Experience in execution of ITSM processes in an organization
• Experience in operation transition planning from project phase into maintenance phase
• Experience in managing a group of more than 20 service support staffs and sub-contractors
• Experience in delivering ILS requirements in project phase
• Good understanding of Logistic Support Analysis such as Maintenance Engineering Analysis (MEA) and Level of Repair Analysis (LORA)
• Good understanding of System Reliability, Availability and Maintainability (RAM) programme
• Experience in the System Testing, Commissioning and Warranty support
• Strong interpersonal skills, ability to effectively communicate with peers and customers on all levels
• Ability to effectively prioritize and execute tasks in an occasionally high-pressure environment
• Organized and motivated individual with good written and oral communication skills
• Good technical knowledge of Windows Server, Linux, VMware, Databases, Storage, Networking, Cybersecurity, Communication Systems will be an advantage
• Any professional certifications such as PMP/IPMA, ITIL, CCNA, etc. will be also an advantage

Who we are

Crédit Agricole Corporate and Investment Banking (Crédit Agricole CIB) is the corporate and investment banking arm of Crédit Agricole Group, world’s 10th largest bank by total assets.

Our Singapore center (“ISAP” or “Information Systems Asia Pacific”) is the 2nd largest IT setup (after Paris Head Office)” for Crédit Agricole CIB's worldwide business. We work daily with international branches located in 30 markets by:

• Envisioning and preparing the Bank’s futures information systems
• Partnering and supporting core banking flagships and transverse areas in their large scale development projects.
• Providing premium In-house Banking applications

This unique positioning empowers us to bring our core banking business a sustainable competitive advantage on the market.

We seek innovative and agile people sharing our mindset to support ambitious and forthcoming technological challenges.

ISAP/ITS Department Overview

ISAP IT Production Centre is an offshore delivery center managing IT Operations (RUN) for Paris, London and Asia. With over 250 people, it constitutes one of two main hubs for CA-CIB IT production teams. This setup is operated in partnership with a Service Provider, who provides most resources on site.

ISAP IT Production Centre is split in 4 departments covering the following aspects:

• INFRA: core infrastructure- systems and network services
• APS: application technical support
• Middleware: Data services and Middleware services
• End-user & Transverse: End-user Services and Transversal activities, including Control Tower, Global Operations Center and Data Security Services.

Position

The Head of Section for Data Security Services manages the RUN team and the related activities to data and endpoint security. He/She is the main point of contact for the service provider and the internal clients in the bank. He/She manages the budget for the scope. He/She is also responsible for the transition of the new services from other regions to Singapore and manages the project/transition. The role is a techno-managerial role and will have to be involved in DLP policy/rule modifications as well. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Expert on the technologieswithin data and endpoint security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France, UK, and Russia) remotely from Singapore. France infrastructure represents approximately 90% of the worldwide production activities of CA-CIB.

Team works in Asia and Europe time zones and flexible rotational shift is based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect,
• Encryption Solutions: Disk Encryption, File and Folder encryption,
• Database Audit Monitoring solutions
• Email and Web Phishing Prevention solutions.
• Vulnerability Management
• Idendiity Access Management

Detailed Job Responsibilities

The Manager has a wide spectrum of responsibilities and actions.

As the manager of his/her team, he/she:

• assigns the tasks and manages delegation,
• sets and reviews the work organization according to activity’s requirements and people’s needs and validates the schedules,
• animates the team to encourage collaboration and sharing of practices,
• has a role in supporting people development,
• participates to recruitment process for the team,
• Vendor relation management

As the manager of his/her team, he/she:

• Meets stakeholders on a regular basis to discuss improvement plans, action plans, evolving threats and changing risks, and provide feedback on policies, standards, procedures, guidelines. ISS leads security for GIT and is the main entry point for internal clients outside of GIT (Business Lines, BCP, LGL, and Compliance for security topics).
• The service includes, but is not limited to, incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management, but also global projects like End of Life, New Builds, migrations and upgrades etc., participation in global Infra events (like Power down and DR Tests)
• ensures activity is performed in compliance with norms, standards, processes and procedures,
• gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting,
• Reporting and auditing
• monitors operational KPI and ensure tickets are closed within SLA,
• ensures documentation is up to date and relevant for use,
• implements cross-functions activities including continuous improvement initiatives,
• estimates the yearly budget, sets monthly forecasts and follows up BAU/Project monthly balance.

As an experienced professional in Security domain, he/she:

• supports his/her team or experts’ diagnosis when technical issues raise in his/her scope of expertise,
• is aware of the global IT structure so that he/she anticipates interrelationships within the organization,
• manage L0/L1/L2/L3 activities which involve direct relationships with end users and L3 activities (architecture, design, project management, etc.)
• provide oversight to all Data Security activities to ensure adequate performance, efficiency, and availability,
• engage with technical peer, Service managers, Architect and project teams on technology roadmap and projects, especially with GIT architecture security team.
• ensures the IT Production activities regarding his/her perimeter are performed correctly by the team, complying with defined norms, standards, processes and procedures,
• has to make sure that the defined KPI is met on a day-to-day basis for Incident, request, problem, change management etc.
• has to monitor and push for improvements in the team’s productivity,
• be available and able to drive/manage any complex or high severity incidents that occur within the scope of their role,
• engage in Projects and project deliveries,
• drive and deliver root cause for any high severity issues,
• has to be responsible for providing direction, proactive and reactive support services to maintain the availability and reliability of systems infrastructure in accordance to the SLA,
• Is involved in security incident diagnosis or investigations to help provide evidence or facts during diagnosis or investigation.
• Manage requests from stakeholders on data security tools to provide extracts, reports or information when required

As the first point of contact for the Service Provider, he/she:

• manages the daily relationship with the Service Provider and escalates when needed,
• follows up Provider KPI and related actions,
• coach and develop partner resources to meet the objectives,

As the first point of contact for internal Clients, he/she:

• manages the daily relationship with internal Clients including planning, requests clarification, risks mitigation and service quality
• prepares client feedback for the monthly review.
• serve as point of escalation on major incidents
• have to maintain a smooth relation with partners, vendors and global clients/teams

As a member of ISAP/ITS, he/she:

• facilitates collaboration and spread of information from and to the team,
• participates to the department’s activities including brainstorming, team building and other team or transversal actions,
• fosters innovation mindset,
• contributes to ISAP/ITS global branding and communication
• manage budget (once a year) and forecast (monthly)
• focus on automation and optimum use of the team to improve efficiency
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

• Work Timing is flexible and is scheduled to manage the operations within business hours of Asia and Emea timezone.
• Role may have to attend and lead any critical issues escalated outside of working hours, when operational needs.

Main Duties

As an expert of his/her team, he/she:

• assigns technical tasks and manages delegation for technical issues,
• animates the team to encourage collaboration and sharing of best practices,
• has a role in supporting technical skills development and provides training when required,
• supports new technologies and leverages them to provide consistency of service across streams,
• manages service improvements for all Network and Security services supported throughout the organization,
• documents, reviews, maintains and shares relevant technical information to the team
• provides technical direction, supports services both proactively and reactively to maintain the availability and reliability of system infrastructure in accordance to the SLA,
• implements and develops improvements based on LEAN-CA-CIB best practices,
• focuses on automation and optimum use of the team to improve efficiency,
• drives and delivers root cause for any high severity issue,
• reviews technology changes to identify potential risks,
• is responsible for problem management and resolution

As an experienced professional in Network-Security Services, he/she:

• supports his/her team during diagnosis when technical issues rise in his/her scope of expertise,
• is aware of the global IT structure so that he/she anticipates interrelationships within the organization,
• engages with technical peer, Service managers, Architect and project teams on technology roadmap and projects,
• facilitates transformation projects and suggest future directions for new areas of improvement and change,
• guarantees the production readiness and license to operate of new projects and solutions
• is available and able to drive technically, any complex or high severity incidents that occur within the scope of their role,
• actively engages to understand new technologies and technology trends and reviews them with a view to incorporating them into CACIB operations,
• actively assists in identifying the most technical skilled candidates for open roles,
• technically coach and develop partner resources to improve quality and productivity,
• Define the technical skillset required to support CA-CIB technologies.

As the escalation point of contact for Clients, he/she:

• manages the daily relationship with Clients including planning, requests clarification, risks mitigation and service quality

Legal and Regulatory Responsibilities

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• 15+ years of experience in managing network and security infra.
• 10+ years experience in handling major network security projects (ex: SDWAN )
• 10+ years experience in handling Firewalls/IPS/F5/Pulse/Proxies, Routers/Switches.

Working Hours:

• Primarily match Europe business hours
• On-call support will be expected on a rotational basis

Interested applicants, please email your resume to Shaun Quek Yew Meng

Email: [email protected]

CEI Reg No: R1660732

EA Licence No: 99C4599

Job Description

• Design and develop the red team's customized secure system (remote control program), and ensure that the endpoint protection can be bypassed such as Crowdstrike, Windows Defender, 360 Safeguard
• Reverse analysis of common EDR and HIDS to identify methods for bypassing detection, and embed security principles into the design of system architectures to mitigate the risks
• Research the persistence solutions under common operating systems such as Windows, MacOS, and Linux
• Perform red team engagements related to the periodic review and audit activities of infrastructure security systems (IDC network, office environment, cloud native) and maintain documentation of security standards and procedures

Requirements

• Bachelor’s degree or higher in Computer Science, Information Technology, Programming & Systems Analysis, Engineering, Statistics, or other related fields
• Minimum 3 years of relevant work experience
• Extensive experience in RAT (Remote Access Tool) development, with the ability to customize attack frameworks like Cobalt Strike
• Extensive experience in anti-endpoint protection, providing solutions to bypass the detection of EDR such as CrowdStrike, Windows Defender, 360 Safeguard
• Experience in persistence solutions under common operating systems (Windows, MacOS, Linux)
• In-depth understanding of security mechanisms of Windows/Linux systems, and familiar with offensive techniques in ring0/ring3
• Proficient in scripting/programming languages like C/C++, Go, PowerShell, Javascript, ASM, etc
• Strong reverse engineering skills with proficiency in tools such as IDA Pro, OllyDBG, WinDBG, GDB, etc
• Strong communication skills and effective teamwork spirit
• Self-starter and fast learning ability

Job Description

• Conduct cyber risk assessment (red team engagement) in support of technology initiatives to emulate the APT adversary scenarios, and help identify IT related risk and determine appropriate controls to mitigate risks
• Monitor, track, and manage unknown risk mitigations and exceptions, and ensure adequate monitoring capability is incorporated into solutions
• Research the undiscovered vulnerabilities (0-day) against different IT infrastructures, including operating systems (Windows/Linux), cloud native (Kubernetes/Docker), network devices (routers/switches/firewalls/VPNs), and endpoint management (VMware Workspace ONE/IPMI)
• Deliver the exploit code and plugins for identified vulnerabilities

Requirements

• Bachelor’s degree or higher in Computer Science, Information Technology, Programming & Systems Analysis, Engineering, Statistics, or other related fields
• Minimum 3 years of relevant work experience
• Hands-on experience in writing standalone PoCs of infrastructure vulnerabilities, including writing exploit codes based on known PoCs of vulnerability descriptions
• Familiar with common vulnerability classes such as buffer overflows, command injection, insecure deserialization
• In-depth understanding of modern security mitigations and methods to bypass them (e.g. stack cookies, SafeSEH, DEP, ASLR, CFG, etc)
• In-depth understanding of security mechanisms of Windows/Linux systems, and familiar with offensive techniques in ring0/ring3
• Experience in vulnerability analysis, fuzzing, reverse engineering, or advanced exploitation techniques, with proficiency in tools such as IDA Pro, OllyDBG, WinDBG, GDB, Burp Suite, etc
• Proficient in programming languages like Python, Go, or Java
• Strong communication skills and effective teamwork spirit
• Self-starter and fast learning ability

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Job Details

About Salesforce

We’re Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too — driving your performance and career growth, charting new paths, and improving the state of the world. If you believe in business as the greatest platform for change and in companies doing well and doing good – you’ve come to the right place.

Background

As the adoption of Salesforce for critical applications in the enterprise accelerates, so does the requirement for our prospects and customers to learn more about how we keep their data secure.  The Trust & Security Advisor will be the interface between Salesforce Security and our customers and prospects to ensure they are successful with their own internal compliance and vendor-management efforts related to Salesforce.

ONLY Candidates based in Singapore with working eligibility will be considered. We are not providing any relocation for this role.

Responsibilities:

• Understand our business and the problems we are trying to tackle, deeply, when it comes to our core security services

• Support the sales and pre-sales teams in responding to customer risk and security questionnaires and queries

• Build customer trust through managing and hosting in-person customer/prospect security meetings

• Be the Salesforce field expert for the Salesforce trust story covering security, architecture, reliability, performance, privacy and compliance.

• Interface with Product Management and Security teams to ensure all the latest security features and capabilities are accurately represented in customer responses

• Collaborate with the Salesforce Legal, Privacy and other teams on customer-specific contract requirements

• Interface to Salesforce security engineering and product management teams

• Ensure teams are aware of gaps in our security/compliance capabilities that are impacting customers and prospects.

• Ensure field sales, services and partner teams are consistently enabled with the latest and best positioning around Salesforce security and compliance  

• Gather customer security/compliance requests, and liaison with Salesforce product managers to maintain a security product roadmap

• Provide input and assist in developing compliance-related documentation: white papers, standard questionnaires, security best practices, etc.

• Develop SME capabilities for selected Salesforce Services and work with the product teams and global SMEs within the team to stay updated on the latest developments. 

Desired Qualifications

• Experience will be evaluated based on alignment to the core competencies for the role (e.g. extracurricular leadership roles, military experience, volunteer work, etc.)

• 12+ years of experience in information security, governance, and compliance.

• Experience with cloud platforms like AWS, GCP, Azure. 

• Understanding the architectural and security nuances.

• Excellent cross-functional teamwork and interpersonal skills across product, security, Marketing, Field Sales, and more.

• Familiarity with one or more security and regulatory frameworks:  NIST 800-53, NIST Cybersecurity Framework, PCI-DSS, ISO 27001, ISO 27017, ISO 27018, CSA, Monetary Authority of Singapore (MAS) Outsourcing Guidelines and TRM, Personal Data Protection laws in Singapore, Malaysia, Thailand, Indonesia, Vietnam etc, BNM Outsourcing guidelines and Risk Management in IT (RMiT) etc. 

• Managed one or more compliance certifications/audits, either as an auditor or responder (FedRAMP, PCI-DSS, ISO27001, SOC-1/2, IRAP/ISMS, MTCS, etc.)

• Experience with completing customer security/compliance questionnaires

• Experience interpreting the intent of specific customer questions, and mapping them to industry standard controls

• Familiarity with public cloud architectures, security practices and compliance documentation

• Experience working in the Financial Services, Insurance, Banking, Superannuation, Telecommunication services industry

#LI-Y

Accommodations

If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form.

Posting Statement

At Salesforce we believe that the business of business is to improve the state of our world. Each of us has a responsibility to drive Equality in our communities and workplaces. We are committed to creating a workforce that reflects society through inclusive programs and initiatives such as equal pay, employee resource groups, inclusive benefits, and more. Learn more about Equality at www.equality.com and explore our company benefits at www.salesforcebenefits.com.

Salesforce is an Equal Employment Opportunity and Affirmative Action Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Salesforce does not accept unsolicited headhunter and agency resumes. Salesforce will not pay any third-party agency or company that does not have a signed agreement with Salesforce.

Salesforce welcomes all.

At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation. 
 

Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive.

Role Overview:

Our technologies are at the heart of modern applications that are enabling digital transformation across the globe! We give the world’s largest businesses, service providers, governments, and consumer brands the ability to securely deliver every app, anywhere—with confidence. We do this by working collaboratively in an innovative environment, helping each other succeed. We take extraordinary pride in being trusted advisers to our customers, offering the best solutions for their interests. If our mission and culture excite you, we would love to talk with you!

We are seeking a Distributed Cloud Support Engineer who is hardworking and committed to customer success. You are comfortable in both the Support and Engineering environments, translating internal Engineering communications into clear, concise directions for customers and partners. You are passionate about helping our customers tackle problems. You will provide support via phone, email, Slack and web portal. Support requests range in complexity from "how to" questions through involved debugging and forensic efforts when prioritizing operational issues. Visualizing problems remotely is key to being successful in this role along with excellent analytic and troubleshooting skills. You will have a significant career growth opportunity within a fast-paced SaaS company.

Sounds interesting? Read on!
 

What You’ll Do:

• Fix reported issues and advocate for the customer.

• Collaborate with sales and engineering teams to provide support to resellers, service provider and enterprise customers, as well as end users via telephone, e-mail, Slack and the web portal.

• Issue reproduction and concise documentation of solutions provided through technical notes, case studies and knowledge base articles.

• Critical issue management and customer assurance when handling reported issues.

• Coordinate fixes by engineering or Site Reliability Engineers (SREs) when required and relay appropriate information to our partners and customers.

• Provide recommendations on how to improve supportability, reliability, availability, and serviceability based on lessons learned through issue resolution.

• Training and enabling our service partners to ensure that they can sufficiently support customer issues.

What You’ll Bring:

• Bachelor’s degree in engineering or equivalent practical experience such as having 2 or more years of experience working in an operations environment or background in customer service/support and IT, network, or IT security incident management.

• Strong understanding of Networking and Layer 7 Protocols as well as experience in security product/solutions experience is preferred.

• Familiarity with Container technologies (Docker and Kubernetes) as well as public cloud experience with Amazon Web Services (AWS), Google Cloud Platform (GCP) and/or Microsoft Azure is preferred.

• Ability to read different scripting and automation (Python, Shell and Ansible).

• Knowledge of Data Representation types (XML, JSON and YAML) and Virtualization technologies.

• Phenomenal communicator with English, independent, collaborative and possess strong troubleshooting skills with the ability to prioritize and multitask when leading sophisticated technical issues.

• This role requires availability outside normal business hours with some travel may be required (less than 10%) to align with the distributed team or to respond to critical security events.

What You’ll Get:

• Hybrid working mode

• Career growth and development opportunities  

• Recognitions and Rewards

• Employee Assistance Program

• Competitive pay, comprehensive benefits, and cool perks

• Culture of Giving Back

• Dynamic Diversity & Inclusion Interest Groups

Apply if you believe your own unique capabilities can contribute to the success of this role and our organization!

#LI-BH1

The Job Description is intended to be a general representation of the responsibilities and requirements of the job. However, the description may not be all-inclusive, and responsibilities and requirements are subject to change.

Please note that F5 only contacts candidates through F5 email address (ending with @f5.com) or auto email notification from Yello/Workday (ending with f5.com or @myworkday.com).

Equal Employment Opportunity

It is the policy of F5 to provide equal employment opportunities to all employees and employment applicants without regard to unlawful considerations of race, religion, color, national origin, sex, sexual orientation, gender identity or expression, age, sensory, physical, or mental disability, marital status, veteran or military status, genetic information, or any other classification protected by applicable local, state, or federal laws. This policy applies to all aspects of employment, including, but not limited to, hiring, job assignment, compensation, promotion, benefits, training, discipline, and termination.  F5 offers a variety of reasonable accommodations for candidates. Requesting an accommodation is completely voluntary. F5 will assess the need for accommodations in the application process separately from those that may be needed to perform the job. Request by contacting accommodations@f5.com.

• Bachelor’s degree in Computer Science, Information Security, or related field.
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• Excellent communication skills and the ability to collaborate with diverse teams.
• Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• Good knowledge in security
• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

About Us

Green Link Digital Bank is Singapore's inaugural wholesale digital bank focusing on supply chain finance, mainly serving MSMEs and aiming to help MSMEs grow and improve digitization.

We are seeking a highly motivated and detail-oriented IT Security Intern to join our team. The successful candidate will work closely with our IT Security team to ensure the confidentiality, integrity, and availability of our information systems. The IT Security Intern will be responsible for assisting in the development, implementation, and maintenance of security policies, procedures, and standards. The intern will also assist in the identification, analysis, and resolution of security incidents.

Duration: 6 months

Responsibilities

• Assist in the development, implementation, and maintenance of security policies, procedures, and standards.
• Assist in the identification, analysis, and resolution of security incidents.
• Assist in the development and delivery of security awareness training programs.
• Assist in the evaluation and testing of security technologies.
• Assist in the development and maintenance of security documentation.
• Assist in the monitoring and reporting of security metrics.

Requirements

• Currently pursuing a bachelor’s degree in Computer Science, Information Security, or a related field.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work independently and as part of a team.
• Knowledge of security technologies and concepts is a plus.
• Able to commit for a minimum of 6-months.
• Full-time interns preferred, but open to part-time interns of minimally 3 working days.

Job Description:

Summary:

This candidate plays a crucial role in ensuring the security of project systems, applications, and data. They are responsible for planning, coordinating, and executing security testing processes to identify vulnerabilities and weaknesses in the project’s IT application and infrastructure. This role requires a deep understanding of cybersecurity principles, testing methodologies, and strong leadership skills.

Key Responsibilities:

• Security Test Strategy: Develop and implement a comprehensive security testing strategy to identify and mitigate vulnerabilities across various technology stacks and platforms.
• Test Planning: Create test plans, schedules, and resource allocation for security testing activities, considering the criticality of systems and applications.
• Team Leadership: Manage and lead a team of security testers, ensuring they are well-equipped, motivated, and focused on delivering high-quality results.
• Threat Assessment: Collaborate with security experts to identify potential threats and vulnerabilities, and prioritize testing efforts accordingly.
• Test Execution: Performing and coordinating security testing activities, such as penetration testing, vulnerability scanning, code review, and more.
• Reporting and Analysis: Analyze test results, prepare detailed reports on identified vulnerabilities, and recommend remediation measures.
• Compliance: Ensure that security testing aligns with industry standards, regulatory requirements, and best practices.
• Reporting: Maintain comprehensive documentation of security test procedures, results, and improvement recommendations.
• Communication: Effectively communicate security findings and recommendations to stakeholders, including IT teams, management, and external auditors.
• Risk Management: Identify and assess security risks, and work with stakeholders to develop risk mitigation strategies.

Qualifications:

• Mandatory relevant certifications such as CISSP/OSCP/CREST
• Bachelor's degree in computer science, cybersecurity, or related field
• Proven experience in security testing and vulnerability assessment.
• Proficiency in using various penetration testing tools such as Metasploit, Nmap, Burp Suite, and others.
• Strong knowledge of security testing tools and methodologies. Leadership and team management skills.
• Excellent problem-solving and analytical abilities.
• Knowledge of relevant security standards and compliance requirements.

Nice to have skills :

• Candidates for this role should have 6+ years of experience in cybersecurity, with at least 2 years in a leadership or managerial position.

• 2 years contract, convertible
• With 3 years of lease management experience in processing backend leasing documentation/managing high volume document experience added advantage
• Strong admin working in legal/law firm processing contracts/processing legal documents are welcome to apply.

Job Description

• Manage and administer leases in a portfolio of Office/ Logistic properties
• Responsible for management of leases which includes preparing and checking lease documents, checking and activation of contracts, preparing and maintaining tenancy schedule
• Responsible for lease documentation, audit checks on leases and tenants, arrears management, tenant and other related lease management functions
• Enter information and data into the system and maintain the database, as well as monitor the status of lease documents
• Execute the arrears management process in collecting payments from tenants of a portfolio of properties, prepare arrears report on a regular interval
• In charge of tracking security deposit, monitor submission of gross sales turnover reports and audited sales reports by tenants and adjustment of audited sales
• Covering of administrative duties

• Possess a Diploma in relevant courses
• Minimum 3 years of relevant experience
• Strong admin that does contracts and work in legal/law firm will have added advantage
• Possess retail backend leasing processing background will have added advantage
• Proficiency in Microsoft Word and Excel are essential
• Experience in SAP will be an added advantage
• You should be meticulous, diligent, a team player, independent and process initiative. Other key attributes include excellent communication and interpersonal skills

Kindly note that only shortlisted candidates will be notified.

Triton AI Pte Ltd
Registration Number: R23118389
EA: 21C0661

• Hybrid

Security Officers (Immediate)

From $110 to $160 (Chinese New Year Package)

Shift Work: Day (fixed shift, no need to rotate)

Place of Work: Singapore

Requirements:

1. Possessed valid PLRD license.

2. Prefer with relevant working experience in Singapore.

3. PC literate.

4. Able to work 12-hr shift.

Application Methods:

1. WhatsApp (65) 8379 4701 

2. Interview can be arranged by Video Call.

ROLE SUMMARY

Lead government relations activities to establish positive relationships with elected officials and civil servants in the ministries and respective subsidiaries for the purpose of the development of co-operatives and mutual with Pfizer.

ROLE RESPONSIBILITIES

• Develop and implement strategies to profile Pfizer and the co-operative/mutual model to secure funding and enable policy development and federal legislation (pro-policy) to support co-operative development and growth for innovative medicines (pro-innovation)
• Develop and execute public policy advocacy plan that targets key issues and government challenges for the business in alignment
• Initiate and lead strategic stakeholder engagement plan in positioning Pfizer’s efforts through alignment and complementing with internal taskforce and external stakeholders to shape public policy positions and strategies
• Identify optimal strategies to engage external stakeholders on public policy input, national healthcare campaigns and government legislations
• Strengthen the company's relationships with key government policy makers and policy advocates at the state and federal government levels and with the coalitions/trade associations/societies
• Work with appropriate trade and industry associations, consultants, think tanks, vendors and patient advocacy group to drive pro-policy and pro-innovation in influencing decisions impacting access to medicines  
• Manage milestones on government approvals through effective relationship management with government and regulatory bodies by collaborating with cross-functional teams on projects, legal, issue management and business development; work with external partners and other key project management efforts
• Represent Pfizer at coalitions/trade associations/societies, where Pfizer is a member at coalition meetings, partner meetings and briefings
• Track and monitor federal legislation and regulation and independently analyze the impact on business including the identification of opportunities and risks; and effectively communicate to support business strategies and tactical plans.
• Demonstrate leadership through influence by building strong collaborative relationships with other co-operative organizations and senior government officials in relevant federal government departments
• Able to interact and communicate with a variety of stakeholders (associations, academics, government, media) and the ability to respond to stakeholder needs (strategically and tactfully) as well as exercise leadership and diplomacy amongst diverse perspectives and priorities
• Exceptional interpersonal skills, superior verbal and written capabilities with commendable presentation skill
• Demonstrate ability to work within deadline pressures and manage multiple simultaneous projects
• Ensure compliance with all Pfizer policies and procedures

QUALIFICATIONS

• Possess at least 12 years’ experience in healthcare industry, including 5 years commercial experiences
• Commercial experience in at least 2 functions where it can be mixture of either sales, marketing, key account management and market access
• Have at least 4-year experience in policy or corporate affairs or government relations with proven track record
• A minimum bachelor’s degree in any science related background
• Additional qualification in public health or political science or public policy is an added advantage
• Sound understanding of government inter-ministerial policies and regulations

Pfizer is an equal opportunity employer and complies with all applicable equal employment opportunity legislation in each jurisdiction in which it operates.

A job with Merlin isn’t like a job anywhere else. With attractions around the world, from rollercoasters to wax figures, we don’t trade in suits, handshakes or briefcases. We trade in fun. In smiles, shrieks and spine-tingles. In Memories. In magic. But there are no tricks behind our magic. Instead, there are people like you. Passionate, dedicated people who are committed to making sure our worldwide attractions and guests’ experiences are the best they can be.

Due to continuing growth and development of Merlin’s attractions and brands on a global scale, we are looking for a Group Health, Safety & Security (HSS) Auditor to join our HSS team on a permanent basis. The role can be based at our Madame Tussauds Singapore or LEGOLAND Malaysia offices, and will entail extensive international travel.

About The Role...

Join us as the Group Health, Safety & Security Auditor, reporting into the Health, Safety and Security Director (Standards and Assurance). Together, we'll champion the implementation of Merlin's robust HSS assurance program. This innovative program employs a triple-lock strategy, integrating site-based self-audits, internal Group HSS audits, and external audits conducted independently.

Your role as the HSS Auditor will be pivotal in supporting the execution of annual independent internal HSS audits. Here are the key objectives that will drive your impact:

Compliance Assurance: Conduct audits across Merlin’s attractions, production sites, and associated business activities. Your mission is to ensure unwavering compliance with legal requirements and internal standards, safeguarding the health, safety, and security of our valued guests, employees, contractors, and all stakeholders.

Policy Vigilance: Take an active role in monitoring HSS policies, procedures, and working practices within Merlin's operations. Your expertise will be instrumental in ensuring sustained compliance with legal, internal, and other pertinent requirements, fostering consistency across all facets of our diverse business operations.

By joining our dynamic team, you'll play a pivotal role in upholding Merlin's commitment to safety and security, making a real impact on the well-being of everyone connected to our fun world. If you're ready to contribute to a safer, more secure Merlin experience, we invite you to be a key player in our journey towards excellence.

About You...

Experience;

• Experience and knowledge of best-in-class HSS practices and systems
• Experience of HSS auditing, in an objective and thorough manner. Process and detail-oriented
• Able to scrutinise complex work practices, assess compliance against set HSS standards, determine risk levels and provide reasoned judgments
• Strong practical knowledge and expertise in the implementation and on-going development of management systems, based on recognised standards such as ISO 45001, ISO 9001 or ISO 14001 (desirable but not essential).
• Considerable experience in a similar position(s), or where skills / experience are readily transferable into this role
• Strong communications skills and cultural sensitivities
• Experience in the implementation, maintenance and certification of ISO 45001 management systems or equivalent is desirable
• First-class teamwork skills, able to build solid relationships across multiple Operating Groups
• Experience of working internationally in high-risk industries is desirable
• Business and commercial awareness to enable pragmatic resolution of compliance issues
• Creative and keen to trial new concepts to help keep Merlin at the forefront of HSS
• Determination to help deliver a first-class HSS audit function
• Ability to use own initiative and work / travel alone
• Flexible approach to working hours due to global audit / travel commitments
• Ability to prioritise own workload and meet strict deadlines

Qualifications;

• A NEBOSH Diploma, or similar, and/or proven experience in health and safety compliance auditing Successful completion of either a registered Lead Auditor course and/or Internal Auditor Course to ISO 45001 (desirable but not essential).

Other;

• The successful candidate should live in reasonable distance to an international airport, and be willing and able to complete extensive travel throughout the year

The Benefits…

We’re growing fast and alongside a fun and friendly environment, we offer a fabulous package and amazing prospects – ideal if you’re already fantastic and want to become even better (our magic can help here).

Everyone Matters at Merlin.

At Merlin we welcome the world to our magical attractions and resorts every day and we want to reflect that same multicultural mix inside our business too. We strive to create an inclusive and diverse workplace where people can be themselves, have the same opportunities and thrive together. Because at Merlin, everyone matters!

Together, we work to create a workplace where everyone feels valued, no matter their age, race, gender, disability or sexual orientation. Although we understand that we'll always be learning and growing, we aim to be the most inclusive and flexible employer in our industry.

If you have any questions or if you require any adjustments due to disability or a medical condition, we'd love to hear from you at [email protected] and one of the team will get back to you as soon as possible.

Your Career

We are looking for an extraordinary Safety & Security Operations Lead to lead safety and security operations across our JAPAC region. We need someone with a passion for protecting corporate assets, including people, property, and information worldwide. You will coordinate on all aspects of security operations, including managing of programs, ensuring adherence to security policies and procedures, and planning and executing events in JAPAC. You will also play a crucial role in responding to security incidents and ensuring compliance with all applicable security regulations. 

Reporting to Senior Manager, Safety & Security JAPAC, you will work closely with teams such as IT, HR, Risk, Engineering, Sales, and Places. We are seeking a team player who enjoys working independently and collaboratively within a fast-paced and dynamic company. This role will be based at our Singapore office. 

Your Impact

• Creativity counts! Work with security management – and ultimately every employee – to translate company culture, values, and strategies into practical applications for safety and security - We don’t want static “standards”, but we do want to clearly articulate certain principles and guidelines, as well as a continuously-evolving collection of best practices
• Support JAPAC Senior Safety & Security Management in delivering quality security services to all Palo Alto Network sites across the regions. This includes, but is not limited to:
  • Creating, implementing, enforcing and maintaining safety-related written programs, policies, procedures, documents, and training
  • Preparing and maintaining security reports for management
  • Conducting comprehensive incident reports and following through to completion with sites on corrective and preventative actions
  • Supporting our front-of-house teams in relation to access control programs and practices
  • Serving as a point of contact for JAPAC in safety and physical security matters related to Palo Alto Networks and its employees
  • Assisting the Global Security Events team in planning and executing security events in JAPAC
• Maintain security-related vendor relationships with guidance from Senior Manager,  Safety & Security JAPAC, Places team and the landlords
• Oversee the daily operations of security guards and receptionists across the region, including keeping track and ensuring all personnel are up to date with mandatory training 
• Stay up-to-date on the latest security threats and trends.
• Lead on additional projects upon request