The incumbent is expected to govern cybersecurity and information security strategy planning, related program and project delivery, incident management etc. The coverage will span a list of subsidiary entities under the SMBC Group's Multi-Franchise strategy, and these entities are supervised by SMBC Asia Growing Markets Department (AGMD). Job Responsibilities Responsible for executing and maintaining the cybersecurity governance policies, framework, and processes with reference to applicable regulations and internal policies, for the list of entities supervised by AGMD. This responsibility covers areas such as cybersecurity program and project delivery, compliance to regulations and standards, cybersecurity assessment and incident management, security KRIs etc. Collaborate with key stakeholders in each entity to develop and update cybersecurity policies and procedures that align with regulatory requirements, internal policies, and industry standards. Ensure compliance with relevant and applicable cybersecurity regulations and standards, such as GDPR, HIPAA, ISO 27001, and NIST and track changes in the regulatory landscape. Coordinate and participate in cybersecurity alerts, assessments and audits, for the list of entities, to evaluate the effectiveness of security controls and recommend improvements. Support Group-wide Security Operations Centres, in defining incident response plans for the list of entities, including disseminating security alerts, escalating security incidents, and tracking all tasks for execution and closure. Through this participation, conduct thorough cybersecurity risk assessments to identify and evaluate potential threats, vulnerabilities, impact on organizational assets, recovery from cybersecurity incidents etc. Develop and implement risk mitigation strategies and action plans to address identified vulnerabilities and reduce the overall cybersecurity risk posture. Define and track key cybersecurity metrics to measure the effectiveness of risk management activities and prepare regular reports for senior management. Implement continuous monitoring processes to proactively identify and address emerging cybersecurity threats and vulnerabilities. Job Requirements Bachelor's degree in IT or equivalent with a minimum 12 years of working experience with good knowledge and experience of cybersecurity and information security risk management, preferably within the Financial Services sector. Solid information technology and security knowledge of relevant financial services regulations and policies of Singapore and Asia region. Experience in Cybersecurity and Information Security Governance Reviews, Controls Testing and Assurance. Good understanding of the overall cybersecurity operational processes in the financial services industry. Proven ability to understand, identify, analyze, and communicate the operational risks within processes, in a structured and logical approach. Proven experience in applying legal/regulatory guidance into solving practical problems. Strong decision-making skills, with the ability to demonstrate sound judgement. Strong problem solving and numerical skills and well-verse in interpersonal communication and presentation skills. Ability to manage and prioritize large workloads and deliver within tight deadlines. Ability to appreciate diverse cultures and facilitate smooth communications between HQ, Singapore office and entities.

Department: Graduate Program, Finance Stream Job Type: Global Recruitment Important Notice to Candidates: Early Submission for the 2024 Legal Associate Program We appreciate your interest in the 2024 Legal Associate Program, and we welcome early submissions of expressions of interest. However, we want to provide clarity regarding the application process. Please take note of the following information: Assessment and Interview Schedule: Kindly be aware that our assessment and interview process for the 2024 Legal Associate Program will commence in February/March 2024. We encourage you to refer to the annual recruitment process timeline outlined below for a more detailed overview: Acceptance of Applications: December 2023 to February 2024 Application Deadline: Mid February 2024 Selection Process: End-February to April Offer to Successful Candidates: April onwards Program Start / Onboarding: September 2024 2024 Legal Associate Program The Asian Infrastructure Investment Bank (AIIB) is a multilateral development bank whose mission is financing the Infrastructure for Tomorrow-infrastructure with sustainability at its core. We began operations in Beijing in January 2016 and have since grown to 106 approved members worldwide. We are capitalized at USD100 billion and Triple-A-rated by the major international credit rating agencies. Working with partners, AIIB meets clients' needs by unlocking new capital and investing in infrastructure that is green, technology-enabled and promotes regional connectivity. AIIB's Legal Associate Program (LAP) was established with the objective of training young lawyers to work in-house on the Bank's legal needs for both private and public sector operations. It seeks to identify, hire, grow and develop young talents of the highest caliber and with a passion for international development. The LAP will start with a two-year contract based in Beijing within the Legal Department (LEG), where the Legal Associates (LAs) engage in intensive training (on-the-job and in-classroom settings) on the fundamentals of lawyering at AIIB on development operations. It is a rotational program where the LAs will be assigned, in turn, to each of the Legal Department's three units-- Institutional and Administrative; Non-Sovereign-Backed Finance & Treasury Finance; and Sovereign-Backed Finance--thereby enabling them to gain experience in various fields of practice. LAs will contribute to the work program of LEG's different units while building networks and knowledge across AIIB. They may also join field missions where needed to assist senior lawyers on the frontlines of AIIB operations, learning key aspects of the Bank's legal operational work, including engagement with AIIB clients. LAs will receive intensive training on the policies, products and operations of AIIB to ensure they know how to implement solutions to operational challenges, mitigate legal risks in AIIB-financed operations and assist internal clients in preparing quality projects. LAs will also be given the opportunity to attend selected training programs on operational themes organized by the Human Resources Department. Selection Criteria and Eligibility The program will target highly talented and promising candidates. Selection will be conducted on as wide a geographical basis as possible. To be eligible for the LAP, the candidates must: Have an advanced law degree (Master's/LLM/JD) from a recognized educational institution. Have a minimum of two years of full-time, relevant legal professional experience. Be admitted to practice law in at least one jurisdiction. Be fluent in English. Have passion for development and commitment to AIIB's mission. Competencies In addition to the selection criteria, the LA must: Exhibit sufficient professional independence and maturity as well as discretion and sensitivity required for operating in a multicultural setting. Demonstrate strong legal knowledge to support drafting legal documents with limited supervision. Be able to identify and critically analyze legal issues and provide solutions. Be able to work well with diverse multi-cultural teams. Possess strong communication skills and the ability to present information in a clear and concise manner. AIIB is committed to diversity, transparency and inclusion. We believe our strength comes from having a team with the right diverse skills, experiences and abilities selected through a merit-based competitive process. We actively encourage applications from people from both within and outside AIIB members, regardless of nationality, religion, gender, race, disability or sexual orientation. Join AIIB's mission to finance Infrastructure for Tomorrow, promote sustainable infrastructure investments and improve social and economic outcomes in Asia and beyond.

VP, Network Security Engineer, Group Infrastructure & Platform Services Posting Date: 14 Nov 2023 Location: Singapore (City Area), Singapore, 048624 Company: United Overseas Bank Ltd About UOB United Overseas Bank Limited (UOB) is a leading bank in Asia with a global network of more than 500 branches and offices in 19 countries and territories in Asia Pacific, Europe and North America. In Asia, we operate through our head office in Singapore and banking subsidiaries in China, Indonesia, Malaysia and Thailand, as well as branches and offices. Our history spans more than 80 years. Over this time, we have been guided by our values - Honorable, Enterprising, United and Committed. This means we always strive to do what is right, build for the future, work as one team and pursue long-term success. It is how we work, consistently, be it towards the company, our colleagues or our customers. About the Department Group Technology and Operations (GTO) provides software and system development, information technology support services and banking operations. We have centralized and standardized the technology components into Singapore, creating a global footprint which can be utilized for supporting our regional subsidiaries and the branches around the world. We operate and support 19 countries with this architecture to provide a secure and flexible banking infrastructure. Our Operations divisions provide transactional customer services for our businesses while also focusing on cost efficiency through process improvements, automation and straight through processing. Job Responsibilities Manage and upkeep the Enterprise and Regional LAN and WAN network infrastructure, including Firewalls, Routers, Switches, Access Points, Identity Service Engine, and other campus network enabling technology and appliances. Manage and upkeep the regional datacenter, ecommerce production, UAT/DR and SIT network, including Firewalls, Routers, Switches, Load balancers and VMware DC appliances. Activities can include device management lifecycle, inventory documentation, budgeting, capacity and performance planning and other compliance and security fulfillment. Able to translate user or business requirement into technology solution. Execute changes according to standard solution templates and established change control. Customer and service centric and able to communicate concisely and clearly with non-IT-savvy users. Participate in network service recovery to reduce system downtime and impact to internal users and external customer. Possess analytical and problem-solving abilities and able to work independently but knowing when to escalate. Participate in on-call duty and provide 24/7 support across regional footprint. Should have strong knowledge of ITIL framework and IT service management concepts. Experience in INC and CRQ queue and SLA management, continuous improvement and support shift -left. Job Requirements Degree in Computer Science, Computer Engineering, Information Technology or relevant qualifications More than 10 year's relevant working experience in managing large, networking/security platform. Banking experience preferred but not mandatory. Strong technical analytical and engineering competencies with hands-on experience in managing routers, switches and firewalls, Identity related technologies and WAN Transport. Up-to-date hands-on experience on technology products and platforms from Cisco, including Wireless, DNAC and APIC/ACI, Prime Infra, and Fortinet and Checkpoint, VMware NSX-T and F5. Familiar with WAN routing protocols, QOS, COS and experienced with Telco's business and operations, micro-segmentation, Content Delivery Network, 3-layered hierarchical and spine-leaf architecture and cloud networking. Working experience on emerging technologies such as SASE, Software defined Network, WAN and Access desired. A good team player with a strong sense of ownership, self-motivated and able to work with little supervision and collaborate with peers to fulfil network deliverables. Meticulous, energetic, resourceful and inspirational. Possess strong written, documentation and effective communication skills and ability to collaborate with diverse stakeholders. Thought leadership and influential skills to be able direct and build a higher performance team, steer and manage goals and deliverables. Working experience on scripting and network automation will be a bonus. Familiar with IT ticketing tool such as Remedy ISM and network management tools. Be a part of UOB Family UOB is an equal opportunity employer. UOB does not discriminate on the basis of a candidate's age, race, gender, color, religion, sexual orientation, physical or mental disability, or other non-merit factors. All employment decisions at UOB are based on business needs, job requirements and qualifications. If you require any assistance or accommodations to be made for the recruitment process, please inform us when you submit your online application. Apply now and make a difference.

Job Description 1. Perform gap analysis of new/updated regulatory AML/CFT requirements, Head Office (“HO”) AML/CFT policy etc. 2. Review and update Branch AML/CFT policy and procedures. 3. Review AML/CFT procedures/SOPs from business lines. 4. Provide advice to business lines relating to AML/CFT queries. 5. Review New Products, Practices and Technologies from AML/CFT perspective. 5. Conduct AML/CFT trainings. 6. Prepare regular/ad-hoc management reporting. 7. Participate in ad-hoc projects as assigned.   Requirements 1. Bachelor Degree with relevant AML/CFT working experience. Candidates who possess industry compliance certification (e.g ACAMS) would have added advantage. 2. Strong knowledge in MAS Notice 626 regulatory requirements Good working knowledge of the different business segments (Corporate/Retail/Private Bank/Card Business). 3. Good written and communication skills with ability to develop a strong working partnership with external and internal stakeholders. 4. Effective bilingual in English and Mandarin so as to communicate (written/spoken) with Mandarin speaking external and internal stakeholders. 5. Team player and demonstrated ability to manage multiple tasks and work independently. 6. Exhibit timeliness, responsibility and is dependable in all work assigned.

Duties and Responsibilities:

• Handle public complaints and feedback related to project site.
• Prepare letters and notices to communicate with community and residents regarding development of project.
• Implement public relationship programme.
• Arrange and attend meetings on public relation matters with project team where necessary.
• Prepare a monthly report to update on the feedbacks and complaints.
• Maintain good relationship with clients and residents.
• Assist other general administrative support to the project teams.
• Perform other duties as assigned.

Job Specification:

• Diploma or Degree in any field.
• Minimum 3 years’ relevant experience working in a public-facing role.
• Willing to work at site office environment.
• Good communication skills.
• MRT working experience would be an added advantage.
• Independent, possess excellent interpersonal and communication skills and emotional maturity.

Job Description

You will be a member of the Group Information Security Team responsible for ensuring corporate applications, systems, networks, and digital assets are adequately protected and mitigated against cyber threats and risks. You will help drive cybersecurity and risk management efforts and user awareness and education within the Singapore Airlines Group.

Key Responsibilities include:

• Provide cyber governance and risk management oversight.
• Manage the security policy framework and relevant standards.
• Oversee applicable security, regulatory, privacy, contractual cyber requirements.
• Manage cyber risk analysis and self-assessments program for various information services, systems, processes and recognized industry standards.
• Conduct risk assessments, document results, and propose and track remediation tasks.
• Develop compliance program top routinely assess existing infrastructure, systems, and applications for compliance and vulnerabilities and propose relevant mitigating controls.
• Conduct vulnerability assessments and track remediation status of identified vulnerabilities.
• Identify and assess cyber risks and recommend and drive cyber security solution and initiatives to improve cyber security posture.
• Define controls to meet regulatory, legislative, and industry specific compliance requirements.
• Manage third party cyber risk assessment standards.
• Prepare IT security related KPI reports and management reports for compliance monitoring and reporting.
• Drive the implementation of GRC tool.
• Maintain user cyber awareness and provide security advisory on emerging security threats and vulnerabilities.
• Develop, review and continuously improve IT security training material and conduct user training to improve user awareness and incident response readiness.
• This role may be seconded to any of SIA’s subsidiary group

Requirements

• Degree in IT or related fields, with 4-5 years relevant information security working experience, especially in the application security space.
• Professional security certifications (CISSP, CISA, CEH etc) preferred.
• Experience with Governance, Risk and Compliance (GRC) activities.
• Familiar with PCI, PDPA, GDPR requirements
• Experience in security technologies, practices, application/network/systems architecture and design, tests tools and processes.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Rapsodo Inc. is a sports analytics company that uses computer vision and machine learning to help all athletes maximize their performance. Our proprietary technology applications range from helping PGA Tour golfers optimize their launch conditions to allowing MLB pitchers to increase the efficiency of their breaking balls. Current partners include all 30 MLB teams, MLB, USA Baseball, Golf Digest, PGA of America, and over 1000 NCAA athletic departments.

Our IT team assist clients to address their concerns around Confidentiality, Integrity, Availability and Privacy of their technology.

As an IT Security Intern at Rapsodo, you will have a holistic view of how Technology and Business Integrate, and responsible for a wide range of technologies not limited to systems administration, helpdesk, telephony administration, laptop/desktop computer build-up/replacement etc.

Roles & Responsibilities

·       Be the 1st level support for inbound email and phone based technical support for on-site and remote employees

·       Assist with setting up and configuration of laptop and desktop computers (OS Installations, Software Installs, etc.)

·       Assist the team with keeping the hardware inventory up to date

·       Develop and update Support Documentation as well as research information for incomplete documents

·       Assist the team with developing an IT Security Handbook that includes log reviews, firewall attestation, etc.

·       Assist the team with mapping and consolidation of existing IT Security tasks to the requirements of a quality IT Security Programme

·       Assist with reviewing and analysing security vulnerabilities to identify false positives

·       Assist with conducting server/network/middleware security configuration assessments

·       Assist with preparing reports on identified security vulnerabilities and possible recommendations to remediate vulnerabilities

·       Work cross-regionally between the Rapsodo Singapore, US, Turkey & Japan offices

 

Experience

·       Absolute professionalism and discretion required due to exposure to confidential information

·       Pro-active, organized, and meticulous

·       Able to work independently in a fast-paced environment

·       Strong aptitude to learn and contribute

·       Possess strong analytical, problem solving, and interpersonal skills

·       Excellent written and oral communication skills to present ideas and results to technical and non-technical audiences

·      Being handy with gadgets and having experience building your own PC is a plus

Qualification

·       Diploma in Information Technology, Cyber Security, or any related discipline