• Conform to and enforce policies, procedures & rules, and regulations as laid down by Accor and the Hotel to achieve the highest levels of uniformity and guest service
• Directly report to the Assistant Safety and Security Manager / Safety & Security Manager
• Responsible for maintaining the highest level of security within the Hotel at all times whilst on duty
• Protect all guests’ patrons and employees of their belongings
• Ensure the Hotel’s property is well protected
• Take charge of the Hotel Security during duty hours
• Responsible for securing all hotel properties, staff, and clientele in accordance with the procedures as stipulated in the security manual
• Enforce the Hotel’s Rules and Regulations
• Strive to implement the Accor Vision and demonstrate active use of the Accor Values
• Record details of significant incidents and activities in the logbook during his shifts
• Ensure all Lost and Found properties are recorded in the Security Management System, hand them over (non-valuables) to the Housekeeping Department as soon as possible, and keep the Duty Manager informed
• Maintain a Hotel Logbook on incidents, complaints, etc., and refer them, if required to the appropriate department for follow-up action

• Conform to and enforce policies, procedures & rules, and regulations as laid down by Accor and the Hotel to achieve the highest levels of uniformity and guest service.
• Directly report to the Assistant Safety and Security Manager / Safety & Security Manager.
• Responsible for maintaining the highest level of security within the Hotel at all times while on duty.
• Protect all guests’ patrons and employees of their belongings.
• Ensure the Hotel’s property is well protected.
• Take charge of the Hotel Security during duty hours.
• Responsible for securing all hotel properties, staff, and clientele in accordance with the procedures as stipulated in the security manual.
• Enforce the Hotel’s Rules and Regulations.
• Strive to implement the Accor Vision and demonstrate active use of the Accor Values.
• Record details of significant incidents and activities in the logbook during his shifts.
• Ensure all Lost and Found properties are recorded in the Security Management System, hand them over (non-valuables) to the Housekeeping Department as soon as possible, and keep the Duty Manager informed.
• Maintain a Hotel Logbook on incidents, complaints, etc., and refer them, if required to the appropriate department for follow-up action

Join our global team to help design, implement, improve, and operate our worldwide Internet Breakouts as well as the VPN Services for Bosch Users and partners. Ensure that the security infrastructure deployment and configurations align with industry standards, compliance requirements, and organizational security policies. Provide Level-2/Level-3 Support for our service portfolio, including shared on-call duty (remote). Collaborate closely with our Architects, Engineers, internal customers, partners, and stakeholders. Initiate, manage, and implement changes to our security infrastructure.

Responsibilities:

• Design, implement, and operate worldwide Internet Breakouts and VPN Services for Bosch Users and partners.
• Ensure security infrastructure deployments and configurations comply with industry standards, organizational policies, and compliance requirements.
• Provide Level-2 and Level-3 support for the service portfolio, including participation in shared on-call duty (remote).
• Work closely with Architects, Engineers, internal customers, partners, and stakeholders.
• Initiate, manage, and implement changes to the security infrastructure.

Your Career

The Principal Consultant on the Offensive Security team is focused on assessing and challenging the security posture across a comprehensive portfolio of clients. The individual will utilize a variety of tools developed and act as a key team member in client engagements. They will be the client’s advocate for cybersecurity best practices and will provide strong recommendations in this domain. 

Your Impact

• Conducts periodic scans of networks to find and detect vulnerabilities
• Performs client penetration testing to find any vulnerabilities or weaknesses that might be exploited by a malicious party, using open-source, custom, and commercial testing tools - Red Team experience essential
• Ability to assist in scoping engagements by clearly articulating various penetration approaches and methodologies to audiences ranging from highly technical to executive personnel
• Report generation that clearly communicates testing and assessment details, results, and remediation recommendations to clients
• Develop scripts, tools, and methodologies to automate and streamline internal processes and engagements
• Conducts IT application testing, cybersecurity tool and systems analysis, system and network administration, and systems engineering support for the sustainment of information technology systems (mobile application testing, penetration testing, application, security, and hardware testing)
• Conduct threat hunting and/or compromise assessment engagements to identify active or dormant indicators of compromise (IoCs) using Crypsis and Palo Alto Networks’ threat hunting tools (and/or client owned hunting instrumentation where applicable)
• Assist Leadership in the development of security standards and best practices for the organization and recommend security enhancements as needed
• Able to conduct cyber risk assessments using frameworks or standards like NIST CSF, ISO 27001/2, PCI, CIS Top 20, CMMC, or other industry measurement tools
• Conduct cloud penetration testing engagements to assess specific workloads (i.e., AWS, GCP, Azure, containers, or other PaaS and SaaS instances) for vulnerabilities and subsequently attempt to exploit identified weakness after receiving permission from client stakeholders
• Provide recommendations to clients on specific security measures to monitor and protect sensitive data and systems from infiltration and cyber-attacks including response and recovery of a data security breach
• Ability to perform travel requirements as needed to meet business demands  

As Wise becomes ever more integrated into financial systems around the globe, we are subject to ever increasing scrutiny from regulators, partners and regional stakeholders. If we are successful, we’ll eventually become one of the most heavily regulated companies in the world.

As Regional Information Security Officer for the APAC region, your job will be to represent Wise Security Squad, creating strong partnerships within our APAC legal entities to help reduce Information Security and Technology risk in line with the expectations of the markets in which we operate.

What you will be working on

• Working closely with regional risk, compliance and engineering teams to provide a tailored view of risk to APAC legal entities.
• Leading security responses for regional licence applications, annual certifications, and ad-hoc audits.
• Supporting Group Security Risk assessment process and preparing risk updates for APAC entity committees and boards.
• Evaluating Wise Group Security controls against regional requirements and obligations.
• Supporting our global security security certification process (e.g. ISO27001, PCI-DSS, SOC1 & 2).
• Assisting with other Information Security and Technology risk related activities as needs arise.

Job Summary

We are currently looking for a seasoned leader as the Head of IT Security. The incumbent will be responsible for leading the transformation while establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. This role oversees the development and implementation of security policies, standards, and procedures to ensure the protection of the organization's information systems and data.

Mandatory Skill-set

• Degree in Computer Science, Information Security, Information Systems or a related field;
• At least 12-15 years of experience in IT security & risk management preferably in a large scale organisation;
• Deep knowledge and understanding of internal controls, security frameworks, risk management and IT governance, auditing techniques, threat modeling and risk management principles;
• Good knowledge of enterprise IT systems and components (applications, operating systems, databases, networks, cloud, DevOps;
• Knowledgeable in using various cyber security monitoring and analysis tools and techniques depending on the organization's needs and requirements;
• Familiarity with security technologies such as firewalls, intrusion detection systems, and endpoint protection;
• Familiar with cyber security standards, protocols and frameworks such as NIST, CIS, PCI/ DSS, MAS TRM, ISO standards;
• Experience with Security operations centers (SOC) and setting up SOC models;
• Experience in driving enterprise initiatives for E2E security posture analysis;
• Ability to work with subsidiaries and understand regional security requirements;
• Strong in analytical thinking with attention to detail;
• Excellent communication and inter personal skills.

Desired Skill-set

• CISSP, CISM, CRISC, CGEIT and/or CISA certified.

Responsibilities

• Define and implement the Enterprise InfoSec (IS) landscape and roadmap;
• Responsible for documenting methodologies and tools to mitigate information security or cyber risk for on-prem and clous platforms;
• Prepare reports for information security or cyber risk related reporting, threat awareness and security awareness reports;
• Design and implement secure cloud architecture for various cloud platforms and act as an SME for cloud platforms (AWS, GCP, or Azure) using cloud-native security services;
• Recommend corrective actions or appropriate security controls to mitigate technical risk;
• Conduct Technology Security Risk Assessments on systems throughout their lifecycle to identify and mitigate security risks;
• Assist in the development of policies for conducting cyber security risk assessments and compliance audits;
• Formulate governance procedures for documenting and updating security policy, standards, guidelines and procedures;
• Perform information security or cyber risk assessment activities and assess third party security controls and internal security systems including onsite assessments;
• Establish scope of risk analysis for new technology initiatives and identify security risks in the Tech Obsolescence Risk program;
• Communicate with regulators such as MAS and ensure solutions meet external and internal requirements and guidelines
• Keep abreast of the dynamic cyber threat landscape and identify opportunities for enhancement of IT risk processes;
• Provide regular updates on the overall health of compliance, criticality assessment, audit findings, remediation and action plans.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

Job Summary:

The Cyber Security Asset Management Services Lead will be responsible for partnering with sales teams and relevant teams to win new business by leading asset discovery engagements and help identify white space opportunity. This person will lead asset management services engagements across a portfolio of customers and will also help shape the strategic direction of the Cyber Security Asset Management (CSAM) practice, building the business and becoming a strategic advisor to our customers and focus on PANW solutions pull- through. The candidate should have prior experience of structuring and selling software Enterprise license agreements (ELAs) and Software as a Service (SaaS) deals leveraging asset base and white space information; enabling sales teams with pipeline generation and value proposition to drive incremental revenues and margins. The ideal candidate should have both a business background that enables them to engage at the CXO level, and technology background that enables them to easily interact with customer’s technology and security teams.  

Key Responsibilities: 

• Partner with Sales, Technical and Services teams to plan and conduct CSAM engagements and contribute to customer relationships

• Provide hands-on, expert level proactive CSAM assessment service to customers and deliver gap analysis and findings to CxO and key stakeholders 

• Assist customers in developing and implementing CSAM strategies, policies, and procedures aligned with best practices and regulatory compliance requirements

• Identify and execute strategies for CSAM service development, enablement and process that result in the identification of white space opportunity and pull through of PANW’s solutions

• Leveraging gap analysis and asset information, collaborate with Sales teams to investigate further use cases in order to identify incremental PANW solution requirements and assist to shape ELA and SaaS value propositions

• Amplify PANW’s ELA buying program offering with customers to help simplify and consolidate their spend across multiple point security solutions and deliver flexibility and agility around software usage

• Understand customer challenges. Pricing and financial modeling to support customer use cases

• Market analysis, requirements development, business case, collateral, strategy, and positioning

• Interact with customers, partners, and sales engineering teams in different forums to gather feedback and evangelize the offerings

• Collaborate with product marketing, technical marketing, sales engineering, and technical support teams to train the field teams, gather feedback

• Drive thought leadership and participate with leading ecosystem and alliance partners to create and offer CSAM services and increase market share. 

Location:         CBD, Singapore

About the Role

The role will focus on delivering timely, efficient and high quality administrative, secretarial and practice group specific services to legal team. Duties will include drafting/preparation of correspondence, formatting of documentation, calendar management, filing, and general administration duties.

Responsibilities:

• Support the legal team by providing secretarial and administrative assistance, including organizing and filing documents using the company’s internal platform.
• Draft, proofread, prepare and check status of various documents such as agreements, letters, and other necessary paperwork.
• Coordinate with external vendors, insurers, and handle departmental queries related to insurance certificates.
• Perform general secretarial duties including monitoring invoice payments, managing files, scheduling appointments and meetings, and responding to correspondence via emails and faxes as required.

• Diploma holder with minimum 1-2 years of working experience as legal secretary or administrative working experience in related field or equivalent.
• Excellent command of English (written & spoken)
• Good proficiency in legal documentation and Microsoft Office applications
• Good typing speed and accuracy
• Possess a pleasant and dynamic personality, positive attitude, willing to learn, meticulous, able to multi-task and willingness to work overtime if required.
• Positive attitude, willing to learn and ability to think out of the box.
• Able to work independently and as part of a team.

Your Career

As a Pre-Sales Systems Engineer, you are an important member of our technical sales team, identifying complex security challenges in your customers’ networks and driving solutions with our market-leading security products and services.

You are the technical sales representative of the company and focus on customer satisfaction with all that you do. You and your sales partner own the customer relationship and your goal is to help them detect and prevent advanced cyberattacks and breaches while safely enabling applications by deploying the full Palo Alto Networks platform so that they can confidently pursue network, cloud, and mobile technology initiatives.

Your Impact

• Understand and effectively present our security platform and solutions
• Work closely with Public Sector customers in Singapore
• Create and deliver compelling demonstrations of Palo Alto Networks products and solutions
• Educate customers and partners on the modern network security landscape
• Identify and qualify new opportunities and support technical pre-sales activities to opportunity closure
• Expand the Palo Alto Networks install base within existing accounts
• Enable and leverage channel partners and work successfully in a channel-driven sales model
• Create evaluation test plans with customers and lead the evaluation process to a successful conclusion
• Differentiate from industry technologies and solution
• Assist customers through the support escalation process
• Continuous self-improvement and learning to maintain current technical knowledge and participate in technical communities of interest
• Identify problems in customer environments - effectively engages customers at the technical field and technical management levels
• Effective in customer-facing engagement, in writing, presentation, and creative problem-solving skills

• Familiar with general accounting principles, financial reporting standards, taxation frameworks

• Good understanding of corporate structure, tax structuring, relatedparty transactions, cross-border transactions

• Experienced in establishing/improving financial processes and management reporting

• Proficient with ERP or accounting systems; Excel, Word, PowerPoint, Visio, SharePoint •

• Proficient in English writing and speaking skills

QUALITIES

• Logical thinker with strong analytical and communication skills

• Detailed oriented with high sensitivity and meticulousness with numbers

• Good team player who is self-driven with initiatives

• Holds high accountability and integrity

• Able to process information and think critically and structurally with good problem solving skills

From Group Finance perspective, assist and support Head, Asia Group Finance in the below:

• Collaborate with Entity Finance Teams in the review and hormonization of accounting standards

• Collaborate with respective Entities in the reviewing and improvement of financial processess and SOPs

• Review and improve the quality of management reporting deliverables

• Involve in the assessments and enhancements of financial software systems; plan and manage projects to automate financial processes, data flow/migration, management reporting and dashboarding

• Collaborate with Entity Finance Teams in the budgeting and forecasting processes

• Provide guidance to Analysts in the review and analysis of financial data/reports

• Initiate and propose any other finance related project

• Assist and support Head, Asia Group Finance in ad-hoc assignments and projects

Relocation Package will be provided

We are seeking a highly skilled Security Engineer with extensive experience in managing, configuring, and upgrading a wide range of security technologies. The ideal candidate will possess strong technical expertise and excellent communication skills. This role requires a proactive individual who can effectively manage security incidents and ensure adherence to security policies and best practices.

Responsibilities:

· Manage, configure, and upgrade a diverse range of security technologies.

· Respond to fault alerts and customer escalations for managed security technologies.

· Troubleshoot product-specific technical issues within SLA, collaborating with internal teams and external vendors to resolve them.

· Escalate incidents and problems within SLA to internal technical teams or external product vendors.

· Prepare and submit incident reports for high-severity incidents.

· Respond to inbound Change Requests (CRs), Service Requests (SRs), and other queries within SLA.

· Perform regular configuration backups on managed security products.

· Plan and coordinate maintenance windows with clients for necessary software patching and version upgrades.

· Create and update technical documentation on managed security technologies.

· Generate monthly reports according to service scope requirements.

· Adhere to organizational and project security policies, procedures, and best practices.

· Serve as the primary point of contact to assist and advise clients on ICT security-related matters.

· Lead and support customers in security incident response and resolution.

· Demonstrate strong teamwork and leadership qualities.

· Maintain a customer-focused approach with excellent interpersonal skills.

· Bachelor’s degree / Polytechnic Diploma in Cyber Security, Computer Science, Information Technology, or Information Systems.

· Minimum of 5 years’ experience in IT infrastructure operation and/or support.

· Strong fundamental knowledge of IP networking (e.g., TCP/IP, routing) and operating systems (e.g., Windows, Linux).

· Excellent critical thinking and problem-solving skills with a passion for information security.

· Fluent in both written and spoken English, with strong interpersonal skills.

VP - ICT Security Operations Analyst

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and, in our clients’, best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do. We keep the bank safe and provide the technical tools our workers need to be successful. We design our digital architecture and ensure our platforms provide a first-class customer experience. Our operations teams manage risk, resources, and program management. We focus on enterprise resiliency and business continuity. We develop, coordinate, and execute strategic operational plans. Essentially, Enterprise Operations & Technology re-engineers client and partner processes to deliver excellence through secure, reliable, and controlled services.

Trust is part of our DNA at Citi. As such, we take safeguarding our customer data very seriously. The Chief Information Security Office (CISO) is made up of deeply dedicated and talented colleagues who work together to ensure the safety of Citi’s and our clients’ assets and information. We manage information security as an end-to-end program – one with a clear mandate and accountability. Our mission is to continually execute and enhance a global security program that is fully anchored to modern control and security frameworks, fully aligned with the technology of the firm, threat-focused and data-driven, and deeply integrated across all Citi businesses globally.

Being talent-driven, we are focused on attracting, developing, and retaining diverse and inclusive talent with a high technical skill level. As a member of our team we will provide you with career development opportunities at all stages of your career. Our employees model a passion for protecting Citi and our clients and believe in treating others with dignity and respect.

The Chief Information Security Office (CISO) is home to deeply talented colleagues that work to ensure the safety of Citi's clients' and our proprietary data. We manage information security as one end-to-end program – one with a clear mandate and accountability. Our mission is a program that is fully anchored to modern control and architectural frameworks, is fully aligned with the enterprise architecture of the firm and is deeply integrated into the sectors and functions.

CISO’s Cyber Security Engineering and Architecture is responsible for delivering integrated risk reduction capabilities and services aligned to the architectural goals and priorities associated with leading ‘Change the Bank’ (CTB) and ‘Run the Bank’ (RTB) initiatives. This role entails leading and coordinating the execution of SASE Services, across the network security domain. The successful candidate will have demonstrated success and be highly adept at: leading global programs and engineering change efforts; managing risk and execution of global programs by aligning resources and tactical/strategic decisions; and driving transformation across a complex enterprise to support cybersecurity goals. The candidate needs to have the ability to work on defining highly scalable and integrated security architectures, and influence roadmaps across a variety of product portfolios. The candidate needs to have the ability to define and drive interoperability with security components of a complex end to end network and cloud security ecosystem, focusing on client experience. Strong experience across cybersecurity, Technology Infrastructure, large enterprises will assist in delivering aspects of this service.

Our commitment to diversity includes a workforce that represents the clients we serve globally from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.

Responsibilities:

• Working with Transformation Program Directors, Senior Architects, Steering Committees, CISO and CTI partners in delivering the transformational Programs related to SASE. Onboarding of users on Zscalar and ensuring smooth transition.
• Troubleshooting issues and work on finding RCA.
• Zscaler Internet Access design and migration methods from legacy Internet Access solutions to SASE based architecture.
• Interface and support Citi’s Security Architecture Council and Working Groups building strong rapport across teams.
• Firewall rules Management (creation/ modification/ deletion) by following Change management process and via automation.
• Participate in migration activities and provide troubleshooting support from Infrastructure defense standpoint. Identify issues, provide support for isolating problems, finding RCA.
• Willing to work on weekends for migration activities off business hours.
• Completing additional tasks in connection with the role but not detailed in the current job description, charged by the direct manager, supervisor, or the functional head.

Qualifications:

• 8-12 years of extensive Security Experience with Checkpoint Firewalls, Juniper Networks Firewalls, Palo Alto Network Firewalls, Bluecoat Proxy, IPS/IDS, Illumio, Crowdstrike and EDR tools.
• Extensive knowledge on SASE Zscalar user onboarding and operational support experience.
• Strong troubleshooting skills over the Firewalls, Proxy and network infrastructure.
• Extensive Data Networking knowledge and an understanding of network security standards such as Firewall Rules, Security Zones, Multicast Data Feeds, Ultra Low Latency Network Architectures & Platforms.
• Hands-on experience in Zscaler Internet Access, Zscaler Private Access and Zscaler Digital Experience
• Proven influencing and relationship management skills.
• Exhibiting a high degree of flexibility and ability to multi-task, seeking guidance where necessary
• Strong communication skills, including verbal and written skills.
• Ability to work as part of a team with remote colleagues in other countries.
• Strong knowledge of Proxy functionality and Proxy features
• Consistently demonstrates clear and concise written and oral communication as well as strong presentation skills to both technical and non-technical audiences.
• Advanced analytical and problem-solving skills
• Demonstrated ability to take ownership and work with cross functional teams to manage multiple projects simultaneously under pressure.
• Thorough understanding of industry and corporate technology standards for Cyber Security services

Critical Competencies:

• Firewalls, Proxy and network infrastructure
• Zscaler Internet Access, Zscaler Private Access

You will be part of a well-established international team in Information Security focused on Cloud Security Architecture, Security Tooling Engineering and Automation.  

Your role will contribute to the success of the team and the Company. 

Your key tasks

• Support Cloud & Infrastructure Organization by reviewing and analysing Network, Systems, and Application architectures to enforce and validate Security requirements.
• Leads Threat Model exercises for new services/major changes.
• Actively Collaborate with your team members to support them on daily operations, including: 
  • Review of IT infrastructure solution designs to ensure compliance with policies and standards. 
  • Operational implementation, Automation, and ownership of Security Tools 
  • Assist in deploying automation of operational processes and procedures, identify weaknesses, propose, plan, and deploy improvements to address and enhance the infrastructure design. 
• Support and maintain the APAC’s Information Security Management System (ISMS) to assure continuous compliance with regulations, laws, and contractual obligations by adopting and deploying industry and market standards and accepted best practices.
• Be on routine standby to support the team.

What we seek to accomplish together:

Security, privacy, and operational resilience are critical issues facing all organizations today. We are currently looking for qualified and capable security minded individuals to be the driving force managing security governance throughout the lifecycle of client projects.

You will work as the interface between NCS Application and NCS Corporate HQ-wide cybersecurity leadership and the practice, driving organization-wide cyber security strategy, implementation, and in turn, ensuring client and practice requirements are fed back into the continual improvement of relevant strategy, policies, and standards.

Responsibilities include: 

• Drive the implementation of NCS cybersecurity, data protection, and privacy policies, standards, and processes within the practice. You will work to continually improve the security posture of projects through proactive risk management and the establishment of a broad range of cybersecurity controls.
• Provide direct support to colleagues to ensure cybersecurity is addressed throughout the project delivery lifecycle, from application design, application architecture patterns, testing, vulnerability, and security review.
• Act as a single point of contact and escalation for LOB application cybersecurity incidents, ensuring timely identification, remediation and lessons learned.
• Manage the security SLA governance and provide practice-level cybersecurity reporting, metrics and forecasting to leadership.
• Responsible for information security, data protection, privacy, GRC, and audit requests for the practice, acting as single point of contact on relevant client security assessment and audits execution. For example, independent third-party attestations of industry cybersecurity standards and certifications, such as ISO 27001, CIS Controls, NIST for practice-specific solutions and products
• Contribute to the definition of the client specific security baseline. Consult and advise internal and external clients about security topics and support the opportunity management process by providing subject matter expertise and support
• Help win client business by providing cybersecurity assurance to RFIs, RFPs, proposals, contract drafting, security questionnaires, workshops, and other client due diligence processes.

A little about you: 

• Degree/Diploma or higher in Computer Science, Information Systems or equivalent
• At least one industry recognized security certification is, such as Certified Information Security Management (CISM), Certified Information Systems Security Professional (CISSP), CEH, or CASP.
• 5+ years of experience in information security management specifically in application secured design and patterns (Cloud, Serverless, Containers), application and API security testing methodologies e.g. analysis and recommendation of rectifications using VAPT/WAPT/SAST/DAST/SCA, security architecture, infosec risk management, compliance and audits for Web, Mobile, API, and Cloud Native applications

Responsibilities

• Bachelor’s degree in computer science, Information Security, or related field.
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• Excellent communication skills and the ability to collaborate with diverse teams.
• Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• Good knowledge in security
• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Resposibilities:

• Background in Engineering or Computer Science
• 5 or more years of working experience in IT Security
• Relevant certifications in networking or cyber security, e.g. CISSP, CISM, CISA, CRSIS preferred
• Experience with DevSecOps methodologies and processes preferred
• Experience in security architecture of cloud native applications preferred
• Experience in providing security advisory and consultancy on application and services, including the design, development, implementation and/or management of the system
• Understanding of CI/CD tools
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Job Summary

Seeking IT Security professional with a keen interest in Information Technology (IT) Governance, Risk and Compliance to enable cyber resilience and information security for mission critical systems.
The individual will be responsible to conduct cyber risk assessment in support of technology initiatives to help identify IT related risk and determines appropriate controls to mitigate risks.

Mandatory Skill-set

• Degree in Computer Science, Information Security or Information Systems;
• At least 2-3 years of experience in IT security space with a strong experience in IT GRC ( Governance, Risk and Compliance ) related functions;
• Deep knowledge and understanding of internal controls, security frameworks, risk management and IT governance, auditing techniques and methodologies;
• Good knowledge of enterprise IT systems and components (applications, operating systems, databases, networks, cloud, DevOps;
• Knowledgeable in using various cyber security monitoring and analysis tools and techniques depending on the organization's needs and requirements;
• Familiar with cyber security standards, protocols and frameworks such as NIST CSF, CIS, PDPA;
• Strong in analytical thinking with attention to detail;
• Excellent communication and inter personal skills.

Responsibilities

• Act as a Subject Matter Expert on IT Governance, Risk management and Compliance (GRC) and related policies and procedures;
• Responsible for documenting methodologies and tools to mitigate information security or cyber risk;
• Prepare reports for information security or cyber risk related reporting, threat awareness and security awareness reports;
• Conduct compliance assessments and tracking the overall compliance health in relation to IT governance standards and procedures in compliance with regulatory requirements;
• Recommend corrective actions or appropriate security controls to mitigate technical risk;
• Continuously identify GRC Key risk indicators (KRI) and maintain IT Risk Register;
• Assist in the development of policies for conducting cyber security risk assessments and compliance audits;
• Formulate governance procedures for documenting and updating security policy, standards, guidelines and procedures;
• Perform information security or cyber risk assessment activities and assess third party security controls and internal security systems;
• Establish scope of risk analysis for new technology initiatives;
• Keep abreast of the dynamic cyber threat landscape and identify opportunities for enhancement of IT risk processes;
• Provide regular updates on the overall health of compliance, criticality assessment, audit findings, remediation and action plans.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

What we seek to accomplish together:

• and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis.
• compliance with these policies / procedures through ongoing security reviews and audits, not limited to log analysis and security assessment of customer ICT systems
• conduct security risk management exercise
• manage vulnerability assessment
• conduct information security awareness training
• for the development and management of customer’s security response plan. To lead and support customer in the matters of security incident resolution and response.
• of contact to assist and advise customer for ICT security related matters

Duties and Responsibilities:

• Handle public complaints and feedback related to project site.
• Prepare letters and notices to communicate with community and residents regarding development of project.
• Implement public relationship programme.
• Arrange and attend meetings on public relation matters with project team where necessary.
• Prepare a monthly report to update on the feedbacks and complaints.
• Maintain good relationship with clients and residents.
• Assist other general administrative support to the project teams.
• Perform other duties as assigned.

Job Specification:

• Diploma or Degree in any field.
• Minimum 3 years’ relevant experience working in a public-facing role.
• Willing to work at site office environment.
• Good communication skills.
• MRT working experience would be an added advantage.
• Independent, possess excellent interpersonal and communication skills and emotional maturity.
• Working Location: Tampines

- To answer occasional phone calls from public

- Station on Site to attend to feedbacks

- Attend monthly site meeting and prepare minutes of meeting

- Need to do site administration work:

Purchase orders, compilation of Delivery oders, Workers attendance and Work pass and safety course attendance

- Minimum 2 Years experience in public relations service or hospitalities and tourism field

- 5-Day work week

Site Office Location:

Ang Mo Kio Industrial Park 2

50 metres walking distance from Ang Mo Kio Ave 1

Bus Stop No: 54101

• Provide general legal advice and contract drafting/review support to Bosch legal entities and business units in Vietnam, including business licence and corporate compliance requirements.
• Identify and manage legal risks, litigation and disputes, including debt recovery matters.
• Provide internal training on legal and compliance matters.
• Draft and negotiate Vietnamese/global long term supply/purchasing contracts, distribution agreements, software implementation agreements, product trial agreements, etc.
• Instruct and liaise with external counsel and corporate secretarial service providers; manage services providers and related costs.
• Manage projects and undertake other duties as assigned by the General Counsel SEA, including providing legal support to business units in other South East Asian countries from time to time.

• Perm
• At least 8 years of experience in managing security for On-Prem Infrastructure and 5 years+ in DevSecOps/SecOps with Cloud environments (IaaS/PaaS/SaaS)
• Experienced in building an internal SOC team and/or managing MSSP.
• Strong communicator and experienced working with C-suite / senior management stakeholders.

Job Description

Cybersecurity Leadership and Risk Management

• Lead overall cybersecurity strategy, risk management, and incident response.
• Provide leadership to the enterprise’s information security organization.
• Collaborate with business stakeholders to raise awareness of risk management concerns.
• Assist in business technology planning, offering current knowledge and future vision of technology and systems.
• Regularly communicate at the executive/company level on global cybersecurity matters.

Governance / Audit / Risk / Compliance Management

• Lead, conduct, and liaise with internal and external auditors for periodic IT/security audits.
• Formalize risk management for business and IT through risk assessments.
• Propose investments in solutions to mitigate risks.
• Facilitate risk assessment and management processes with business units.
• Ensure compliance with local and global IT/cybersecurity regulations for shore offices, cloud environments, and vessels.

Project Initiatives

• Continuously survey and identify security gaps in infrastructure, cloud, and vessels.
• Propose and manage timelines, budgets, and scopes for IT security projects.
• Collaborate with stakeholders (internal/external) to enhance the company’s overall IT security posture using solutions like Bitsight, Watchtower, CSA, etc.
• Analyze risks and impacts during the implementation of new technologies.

Operations

• Own, develop, implement, and monitor a comprehensive enterprise information security and IT risk management program. This program should cover on-premises, cloud, and vessels globally across the group of subsidiaries.
• Drive ongoing cybersecurity awareness programs and campaigns (e.g., phishing, USB attacks) to enhance users’ awareness.
• Develop and enhance an information security management framework for the organization.
• Incident Response: Assume overall responsibility for incident response related to cyberattacks.
• BCP Initiatives: Collaborate with external vendors and internal IT management to design, develop, and implement cyber-related IT business continuity planning (BCP) initiatives (e.g., incident response, alternative workplace solutions, and strategies).

• Degree or Master’s Degree in a technology and/or cybersecurity related field required.
• Professional security management certification (CRISC, CISSP, CISM, & CISA, Qualified Information Security Professional, Certified Ethical Hacker, etc).
• Excellent written and verbal communication skills and high level of personal integrity.
• Excellent experience working and presenting to C-suite executives on cyber initiatives.
• Innovative thinking with strong people engagement skills with an ability to lead and motivate crossfunctional, interdisciplinary teams.
• Experience with contract and vendor negotiations and management including managed services.
• Experienced with working in organization that does in-house cloud native software development.
• Experience with security standards / processes in a Cloud computing/Elastic computing environment, especially in Azure.
• Strong business acumen required to comprehend and evaluate business scenarios, make informed decisions, and take the necessary steps to achieve the organization's goals. However, having experience in the shipping industry is not a requirement.
• Min. 8 years or more experience managing security for On-Prem Infrastructure and at least 5 years (DevSecOps/SecOps) with Cloud environments/instances (IaaS, PaaS & SaaS).
• Minimum of 8 to 10 years of experience in a combination of risk management, information security.
• Min. 5 years or more hands-on experience in evaluating, selecting, designing, and implementing various security processes, policies, and solutions.
• Experienced in building an internal SOC team and/or managing MSSP.
• Familiar with various data privacy and cybersecurity framework (e.g. NIST, ISO 27001/27002, SOC2, GDPR, OWASP, Mitre, etc). Experienced with BIMCO is a plus.
• Proficient with implementing and managing advanced and/or automated security solutions (e.g. IDS/IPS ,EDR/XDR, DLP, PIM/PAM, SIEM, SOAR, SASE, SWG, BAS, ..)
• Experienced with implementing various cybersecurity architecture, e.g. OSI, Zero Trust Architecture, etc across Cloud and on Prem environments, including Azure / AWS.

Triton AI Pte Ltd
Registration Number: R1980724
EA: 21C0661

• Perm
• Bonus
• Medical & Insurance Coverage
• Hybird Work Arrangements

Main responsibilities of the Intern:

- Participate in regular know-how and training sessions and meetings with internal clients and/or external business partners;

- Acquire familiarization with the legal organization policies and central directives of Bosch in SEA;

- Provide support on the review and drafting of simple contracts (such as Non-Disclosure and/or Tenancy Agreements) and internal guidelines and standards;

- Assist with an assortment of organizational matters (such as legal department reporting, filing, organization of precedent database);

- Conduct research on laws in SEA;

- Preparation and presentation of researched topics in MS PPT.

• Ensuring compliance and conformity to regulations, international standards, and customer requirements for automotive User Experience products and services
• Evaluation of the product cybersecurity risk management process and adding risk-based thinking and management to the process
• Establishing the state-of-the-art for product cybersecurity and privacy and providing guidelines
• Continuous improvement of our Cybersecurity Management System for Continental’s automotive User Experience products and services
• Leading of cross-organizational initiatives for the exchange of knowledge and solution building for a more mature Cybersecurity Management System
• Driving performance evaluation of our Cybersecurity Management System in terms of metrics, KPIs and assessments
• Living a Cybersecurity Culture as a role model and provision of guidelines, trainings and awareness of product cybersecurity and privacy 
• Supporting technical compliance management by providing Product Cybersecurity and Privacy expertise
• Supporting colleagues world-wide by consulting during the roll-out of processes within the Business Area User Experience

• Supporting a range of Cyber Security tools including Exabeam, CarbonBlack, Tripwire, CyberArk, TrendMicro AV, Splunk, DAM, Tenable and RSA.

• Managing designated vendors for the specified Security tools.

• Driving the scheduling of security-related projects and remediation timelines.

• Maintaining, troubleshooting, patching, and updating various security tools and scanners used in MAS.

• Recommending process re-engineering and streamlining to enhance workflows and efficiencies.

• Delivering management reporting and dashboarding to stakeholders, including data and trend analysis, and recommending next steps.

• Following up on remediation actions, security and risk assessments with respective stakeholders and applications teams.

• Conducting daily health check and validating system availability through various monitoring/checks.

• Implementing of the service requests, change requests and support of incident management.

• Fine tuning of rules, updating of contents packs to suit the different use cases in