Job Summary

We are currently looking for a seasoned leader as the Head of IT Security. The incumbent will be responsible for leading the transformation while establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. This role oversees the development and implementation of security policies, standards, and procedures to ensure the protection of the organization's information systems and data.

Mandatory Skill-set

• Degree in Computer Science, Information Security, Information Systems or a related field;
• At least 12-15 years of experience in IT security & risk management preferably in a large scale organisation;
• Deep knowledge and understanding of internal controls, security frameworks, risk management and IT governance, auditing techniques, threat modeling and risk management principles;
• Good knowledge of enterprise IT systems and components (applications, operating systems, databases, networks, cloud, DevOps;
• Knowledgeable in using various cyber security monitoring and analysis tools and techniques depending on the organization's needs and requirements;
• Familiarity with security technologies such as firewalls, intrusion detection systems, and endpoint protection;
• Familiar with cyber security standards, protocols and frameworks such as NIST, CIS, PCI/ DSS, MAS TRM, ISO standards;
• Experience with Security operations centers (SOC) and setting up SOC models;
• Experience in driving enterprise initiatives for E2E security posture analysis;
• Ability to work with subsidiaries and understand regional security requirements;
• Strong in analytical thinking with attention to detail;
• Excellent communication and inter personal skills.

Desired Skill-set

• CISSP, CISM, CRISC, CGEIT and/or CISA certified.

Responsibilities

• Define and implement the Enterprise InfoSec (IS) landscape and roadmap;
• Responsible for documenting methodologies and tools to mitigate information security or cyber risk for on-prem and clous platforms;
• Prepare reports for information security or cyber risk related reporting, threat awareness and security awareness reports;
• Design and implement secure cloud architecture for various cloud platforms and act as an SME for cloud platforms (AWS, GCP, or Azure) using cloud-native security services;
• Recommend corrective actions or appropriate security controls to mitigate technical risk;
• Conduct Technology Security Risk Assessments on systems throughout their lifecycle to identify and mitigate security risks;
• Assist in the development of policies for conducting cyber security risk assessments and compliance audits;
• Formulate governance procedures for documenting and updating security policy, standards, guidelines and procedures;
• Perform information security or cyber risk assessment activities and assess third party security controls and internal security systems including onsite assessments;
• Establish scope of risk analysis for new technology initiatives and identify security risks in the Tech Obsolescence Risk program;
• Communicate with regulators such as MAS and ensure solutions meet external and internal requirements and guidelines
• Keep abreast of the dynamic cyber threat landscape and identify opportunities for enhancement of IT risk processes;
• Provide regular updates on the overall health of compliance, criticality assessment, audit findings, remediation and action plans.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

Job Summary:

The Cyber Security Asset Management Services Lead will be responsible for partnering with sales teams and relevant teams to win new business by leading asset discovery engagements and help identify white space opportunity. This person will lead asset management services engagements across a portfolio of customers and will also help shape the strategic direction of the Cyber Security Asset Management (CSAM) practice, building the business and becoming a strategic advisor to our customers and focus on PANW solutions pull- through. The candidate should have prior experience of structuring and selling software Enterprise license agreements (ELAs) and Software as a Service (SaaS) deals leveraging asset base and white space information; enabling sales teams with pipeline generation and value proposition to drive incremental revenues and margins. The ideal candidate should have both a business background that enables them to engage at the CXO level, and technology background that enables them to easily interact with customer’s technology and security teams.  

Key Responsibilities: 

• Partner with Sales, Technical and Services teams to plan and conduct CSAM engagements and contribute to customer relationships

• Provide hands-on, expert level proactive CSAM assessment service to customers and deliver gap analysis and findings to CxO and key stakeholders 

• Assist customers in developing and implementing CSAM strategies, policies, and procedures aligned with best practices and regulatory compliance requirements

• Identify and execute strategies for CSAM service development, enablement and process that result in the identification of white space opportunity and pull through of PANW’s solutions

• Leveraging gap analysis and asset information, collaborate with Sales teams to investigate further use cases in order to identify incremental PANW solution requirements and assist to shape ELA and SaaS value propositions

• Amplify PANW’s ELA buying program offering with customers to help simplify and consolidate their spend across multiple point security solutions and deliver flexibility and agility around software usage

• Understand customer challenges. Pricing and financial modeling to support customer use cases

• Market analysis, requirements development, business case, collateral, strategy, and positioning

• Interact with customers, partners, and sales engineering teams in different forums to gather feedback and evangelize the offerings

• Collaborate with product marketing, technical marketing, sales engineering, and technical support teams to train the field teams, gather feedback

• Drive thought leadership and participate with leading ecosystem and alliance partners to create and offer CSAM services and increase market share. 

Location:         CBD, Singapore

About the Role

The role will focus on delivering timely, efficient and high quality administrative, secretarial and practice group specific services to legal team. Duties will include drafting/preparation of correspondence, formatting of documentation, calendar management, filing, and general administration duties.

Responsibilities:

• Support the legal team by providing secretarial and administrative assistance, including organizing and filing documents using the company’s internal platform.
• Draft, proofread, prepare and check status of various documents such as agreements, letters, and other necessary paperwork.
• Coordinate with external vendors, insurers, and handle departmental queries related to insurance certificates.
• Perform general secretarial duties including monitoring invoice payments, managing files, scheduling appointments and meetings, and responding to correspondence via emails and faxes as required.

• Diploma holder with minimum 1-2 years of working experience as legal secretary or administrative working experience in related field or equivalent.
• Excellent command of English (written & spoken)
• Good proficiency in legal documentation and Microsoft Office applications
• Good typing speed and accuracy
• Possess a pleasant and dynamic personality, positive attitude, willing to learn, meticulous, able to multi-task and willingness to work overtime if required.
• Positive attitude, willing to learn and ability to think out of the box.
• Able to work independently and as part of a team.

Your Career

As a Pre-Sales Systems Engineer, you are an important member of our technical sales team, identifying complex security challenges in your customers’ networks and driving solutions with our market-leading security products and services.

You are the technical sales representative of the company and focus on customer satisfaction with all that you do. You and your sales partner own the customer relationship and your goal is to help them detect and prevent advanced cyberattacks and breaches while safely enabling applications by deploying the full Palo Alto Networks platform so that they can confidently pursue network, cloud, and mobile technology initiatives.

Your Impact

• Understand and effectively present our security platform and solutions
• Work closely with Public Sector customers in Singapore
• Create and deliver compelling demonstrations of Palo Alto Networks products and solutions
• Educate customers and partners on the modern network security landscape
• Identify and qualify new opportunities and support technical pre-sales activities to opportunity closure
• Expand the Palo Alto Networks install base within existing accounts
• Enable and leverage channel partners and work successfully in a channel-driven sales model
• Create evaluation test plans with customers and lead the evaluation process to a successful conclusion
• Differentiate from industry technologies and solution
• Assist customers through the support escalation process
• Continuous self-improvement and learning to maintain current technical knowledge and participate in technical communities of interest
• Identify problems in customer environments - effectively engages customers at the technical field and technical management levels
• Effective in customer-facing engagement, in writing, presentation, and creative problem-solving skills

• Familiar with general accounting principles, financial reporting standards, taxation frameworks

• Good understanding of corporate structure, tax structuring, relatedparty transactions, cross-border transactions

• Experienced in establishing/improving financial processes and management reporting

• Proficient with ERP or accounting systems; Excel, Word, PowerPoint, Visio, SharePoint •

• Proficient in English writing and speaking skills

QUALITIES

• Logical thinker with strong analytical and communication skills

• Detailed oriented with high sensitivity and meticulousness with numbers

• Good team player who is self-driven with initiatives

• Holds high accountability and integrity

• Able to process information and think critically and structurally with good problem solving skills

From Group Finance perspective, assist and support Head, Asia Group Finance in the below:

• Collaborate with Entity Finance Teams in the review and hormonization of accounting standards

• Collaborate with respective Entities in the reviewing and improvement of financial processess and SOPs

• Review and improve the quality of management reporting deliverables

• Involve in the assessments and enhancements of financial software systems; plan and manage projects to automate financial processes, data flow/migration, management reporting and dashboarding

• Collaborate with Entity Finance Teams in the budgeting and forecasting processes

• Provide guidance to Analysts in the review and analysis of financial data/reports

• Initiate and propose any other finance related project

• Assist and support Head, Asia Group Finance in ad-hoc assignments and projects

Relocation Package will be provided

We are seeking a highly skilled Security Engineer with extensive experience in managing, configuring, and upgrading a wide range of security technologies. The ideal candidate will possess strong technical expertise and excellent communication skills. This role requires a proactive individual who can effectively manage security incidents and ensure adherence to security policies and best practices.

Responsibilities:

· Manage, configure, and upgrade a diverse range of security technologies.

· Respond to fault alerts and customer escalations for managed security technologies.

· Troubleshoot product-specific technical issues within SLA, collaborating with internal teams and external vendors to resolve them.

· Escalate incidents and problems within SLA to internal technical teams or external product vendors.

· Prepare and submit incident reports for high-severity incidents.

· Respond to inbound Change Requests (CRs), Service Requests (SRs), and other queries within SLA.

· Perform regular configuration backups on managed security products.

· Plan and coordinate maintenance windows with clients for necessary software patching and version upgrades.

· Create and update technical documentation on managed security technologies.

· Generate monthly reports according to service scope requirements.

· Adhere to organizational and project security policies, procedures, and best practices.

· Serve as the primary point of contact to assist and advise clients on ICT security-related matters.

· Lead and support customers in security incident response and resolution.

· Demonstrate strong teamwork and leadership qualities.

· Maintain a customer-focused approach with excellent interpersonal skills.

· Bachelor’s degree / Polytechnic Diploma in Cyber Security, Computer Science, Information Technology, or Information Systems.

· Minimum of 5 years’ experience in IT infrastructure operation and/or support.

· Strong fundamental knowledge of IP networking (e.g., TCP/IP, routing) and operating systems (e.g., Windows, Linux).

· Excellent critical thinking and problem-solving skills with a passion for information security.

· Fluent in both written and spoken English, with strong interpersonal skills.

VP - ICT Security Operations Analyst

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and, in our clients’, best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do. We keep the bank safe and provide the technical tools our workers need to be successful. We design our digital architecture and ensure our platforms provide a first-class customer experience. Our operations teams manage risk, resources, and program management. We focus on enterprise resiliency and business continuity. We develop, coordinate, and execute strategic operational plans. Essentially, Enterprise Operations & Technology re-engineers client and partner processes to deliver excellence through secure, reliable, and controlled services.

Trust is part of our DNA at Citi. As such, we take safeguarding our customer data very seriously. The Chief Information Security Office (CISO) is made up of deeply dedicated and talented colleagues who work together to ensure the safety of Citi’s and our clients’ assets and information. We manage information security as an end-to-end program – one with a clear mandate and accountability. Our mission is to continually execute and enhance a global security program that is fully anchored to modern control and security frameworks, fully aligned with the technology of the firm, threat-focused and data-driven, and deeply integrated across all Citi businesses globally.

Being talent-driven, we are focused on attracting, developing, and retaining diverse and inclusive talent with a high technical skill level. As a member of our team we will provide you with career development opportunities at all stages of your career. Our employees model a passion for protecting Citi and our clients and believe in treating others with dignity and respect.

The Chief Information Security Office (CISO) is home to deeply talented colleagues that work to ensure the safety of Citi's clients' and our proprietary data. We manage information security as one end-to-end program – one with a clear mandate and accountability. Our mission is a program that is fully anchored to modern control and architectural frameworks, is fully aligned with the enterprise architecture of the firm and is deeply integrated into the sectors and functions.

CISO’s Cyber Security Engineering and Architecture is responsible for delivering integrated risk reduction capabilities and services aligned to the architectural goals and priorities associated with leading ‘Change the Bank’ (CTB) and ‘Run the Bank’ (RTB) initiatives. This role entails leading and coordinating the execution of SASE Services, across the network security domain. The successful candidate will have demonstrated success and be highly adept at: leading global programs and engineering change efforts; managing risk and execution of global programs by aligning resources and tactical/strategic decisions; and driving transformation across a complex enterprise to support cybersecurity goals. The candidate needs to have the ability to work on defining highly scalable and integrated security architectures, and influence roadmaps across a variety of product portfolios. The candidate needs to have the ability to define and drive interoperability with security components of a complex end to end network and cloud security ecosystem, focusing on client experience. Strong experience across cybersecurity, Technology Infrastructure, large enterprises will assist in delivering aspects of this service.

Our commitment to diversity includes a workforce that represents the clients we serve globally from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.

Responsibilities:

• Working with Transformation Program Directors, Senior Architects, Steering Committees, CISO and CTI partners in delivering the transformational Programs related to SASE. Onboarding of users on Zscalar and ensuring smooth transition.
• Troubleshooting issues and work on finding RCA.
• Zscaler Internet Access design and migration methods from legacy Internet Access solutions to SASE based architecture.
• Interface and support Citi’s Security Architecture Council and Working Groups building strong rapport across teams.
• Firewall rules Management (creation/ modification/ deletion) by following Change management process and via automation.
• Participate in migration activities and provide troubleshooting support from Infrastructure defense standpoint. Identify issues, provide support for isolating problems, finding RCA.
• Willing to work on weekends for migration activities off business hours.
• Completing additional tasks in connection with the role but not detailed in the current job description, charged by the direct manager, supervisor, or the functional head.

Qualifications:

• 8-12 years of extensive Security Experience with Checkpoint Firewalls, Juniper Networks Firewalls, Palo Alto Network Firewalls, Bluecoat Proxy, IPS/IDS, Illumio, Crowdstrike and EDR tools.
• Extensive knowledge on SASE Zscalar user onboarding and operational support experience.
• Strong troubleshooting skills over the Firewalls, Proxy and network infrastructure.
• Extensive Data Networking knowledge and an understanding of network security standards such as Firewall Rules, Security Zones, Multicast Data Feeds, Ultra Low Latency Network Architectures & Platforms.
• Hands-on experience in Zscaler Internet Access, Zscaler Private Access and Zscaler Digital Experience
• Proven influencing and relationship management skills.
• Exhibiting a high degree of flexibility and ability to multi-task, seeking guidance where necessary
• Strong communication skills, including verbal and written skills.
• Ability to work as part of a team with remote colleagues in other countries.
• Strong knowledge of Proxy functionality and Proxy features
• Consistently demonstrates clear and concise written and oral communication as well as strong presentation skills to both technical and non-technical audiences.
• Advanced analytical and problem-solving skills
• Demonstrated ability to take ownership and work with cross functional teams to manage multiple projects simultaneously under pressure.
• Thorough understanding of industry and corporate technology standards for Cyber Security services

Critical Competencies:

• Firewalls, Proxy and network infrastructure
• Zscaler Internet Access, Zscaler Private Access

You will be part of a well-established international team in Information Security focused on Cloud Security Architecture, Security Tooling Engineering and Automation.  

Your role will contribute to the success of the team and the Company. 

Your key tasks

• Support Cloud & Infrastructure Organization by reviewing and analysing Network, Systems, and Application architectures to enforce and validate Security requirements.
• Leads Threat Model exercises for new services/major changes.
• Actively Collaborate with your team members to support them on daily operations, including: 
  • Review of IT infrastructure solution designs to ensure compliance with policies and standards. 
  • Operational implementation, Automation, and ownership of Security Tools 
  • Assist in deploying automation of operational processes and procedures, identify weaknesses, propose, plan, and deploy improvements to address and enhance the infrastructure design. 
• Support and maintain the APAC’s Information Security Management System (ISMS) to assure continuous compliance with regulations, laws, and contractual obligations by adopting and deploying industry and market standards and accepted best practices.
• Be on routine standby to support the team.

What we seek to accomplish together:

Security, privacy, and operational resilience are critical issues facing all organizations today. We are currently looking for qualified and capable security minded individuals to be the driving force managing security governance throughout the lifecycle of client projects.

You will work as the interface between NCS Application and NCS Corporate HQ-wide cybersecurity leadership and the practice, driving organization-wide cyber security strategy, implementation, and in turn, ensuring client and practice requirements are fed back into the continual improvement of relevant strategy, policies, and standards.

Responsibilities include: 

• Drive the implementation of NCS cybersecurity, data protection, and privacy policies, standards, and processes within the practice. You will work to continually improve the security posture of projects through proactive risk management and the establishment of a broad range of cybersecurity controls.
• Provide direct support to colleagues to ensure cybersecurity is addressed throughout the project delivery lifecycle, from application design, application architecture patterns, testing, vulnerability, and security review.
• Act as a single point of contact and escalation for LOB application cybersecurity incidents, ensuring timely identification, remediation and lessons learned.
• Manage the security SLA governance and provide practice-level cybersecurity reporting, metrics and forecasting to leadership.
• Responsible for information security, data protection, privacy, GRC, and audit requests for the practice, acting as single point of contact on relevant client security assessment and audits execution. For example, independent third-party attestations of industry cybersecurity standards and certifications, such as ISO 27001, CIS Controls, NIST for practice-specific solutions and products
• Contribute to the definition of the client specific security baseline. Consult and advise internal and external clients about security topics and support the opportunity management process by providing subject matter expertise and support
• Help win client business by providing cybersecurity assurance to RFIs, RFPs, proposals, contract drafting, security questionnaires, workshops, and other client due diligence processes.

A little about you: 

• Degree/Diploma or higher in Computer Science, Information Systems or equivalent
• At least one industry recognized security certification is, such as Certified Information Security Management (CISM), Certified Information Systems Security Professional (CISSP), CEH, or CASP.
• 5+ years of experience in information security management specifically in application secured design and patterns (Cloud, Serverless, Containers), application and API security testing methodologies e.g. analysis and recommendation of rectifications using VAPT/WAPT/SAST/DAST/SCA, security architecture, infosec risk management, compliance and audits for Web, Mobile, API, and Cloud Native applications

Responsibilities

• Bachelor’s degree in computer science, Information Security, or related field.
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• Excellent communication skills and the ability to collaborate with diverse teams.
• Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• Good knowledge in security
• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Resposibilities:

• Background in Engineering or Computer Science
• 5 or more years of working experience in IT Security
• Relevant certifications in networking or cyber security, e.g. CISSP, CISM, CISA, CRSIS preferred
• Experience with DevSecOps methodologies and processes preferred
• Experience in security architecture of cloud native applications preferred
• Experience in providing security advisory and consultancy on application and services, including the design, development, implementation and/or management of the system
• Understanding of CI/CD tools
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Job Summary

Seeking IT Security professional with a keen interest in Information Technology (IT) Governance, Risk and Compliance to enable cyber resilience and information security for mission critical systems.
The individual will be responsible to conduct cyber risk assessment in support of technology initiatives to help identify IT related risk and determines appropriate controls to mitigate risks.

Mandatory Skill-set

• Degree in Computer Science, Information Security or Information Systems;
• At least 2-3 years of experience in IT security space with a strong experience in IT GRC ( Governance, Risk and Compliance ) related functions;
• Deep knowledge and understanding of internal controls, security frameworks, risk management and IT governance, auditing techniques and methodologies;
• Good knowledge of enterprise IT systems and components (applications, operating systems, databases, networks, cloud, DevOps;
• Knowledgeable in using various cyber security monitoring and analysis tools and techniques depending on the organization's needs and requirements;
• Familiar with cyber security standards, protocols and frameworks such as NIST CSF, CIS, PDPA;
• Strong in analytical thinking with attention to detail;
• Excellent communication and inter personal skills.

Responsibilities

• Act as a Subject Matter Expert on IT Governance, Risk management and Compliance (GRC) and related policies and procedures;
• Responsible for documenting methodologies and tools to mitigate information security or cyber risk;
• Prepare reports for information security or cyber risk related reporting, threat awareness and security awareness reports;
• Conduct compliance assessments and tracking the overall compliance health in relation to IT governance standards and procedures in compliance with regulatory requirements;
• Recommend corrective actions or appropriate security controls to mitigate technical risk;
• Continuously identify GRC Key risk indicators (KRI) and maintain IT Risk Register;
• Assist in the development of policies for conducting cyber security risk assessments and compliance audits;
• Formulate governance procedures for documenting and updating security policy, standards, guidelines and procedures;
• Perform information security or cyber risk assessment activities and assess third party security controls and internal security systems;
• Establish scope of risk analysis for new technology initiatives;
• Keep abreast of the dynamic cyber threat landscape and identify opportunities for enhancement of IT risk processes;
• Provide regular updates on the overall health of compliance, criticality assessment, audit findings, remediation and action plans.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

What we seek to accomplish together:

• and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis.
• compliance with these policies / procedures through ongoing security reviews and audits, not limited to log analysis and security assessment of customer ICT systems
• conduct security risk management exercise
• manage vulnerability assessment
• conduct information security awareness training
• for the development and management of customer’s security response plan. To lead and support customer in the matters of security incident resolution and response.
• of contact to assist and advise customer for ICT security related matters

Duties and Responsibilities:

• Handle public complaints and feedback related to project site.
• Prepare letters and notices to communicate with community and residents regarding development of project.
• Implement public relationship programme.
• Arrange and attend meetings on public relation matters with project team where necessary.
• Prepare a monthly report to update on the feedbacks and complaints.
• Maintain good relationship with clients and residents.
• Assist other general administrative support to the project teams.
• Perform other duties as assigned.

Job Specification:

• Diploma or Degree in any field.
• Minimum 3 years’ relevant experience working in a public-facing role.
• Willing to work at site office environment.
• Good communication skills.
• MRT working experience would be an added advantage.
• Independent, possess excellent interpersonal and communication skills and emotional maturity.
• Working Location: Tampines

- To answer occasional phone calls from public

- Station on Site to attend to feedbacks

- Attend monthly site meeting and prepare minutes of meeting

- Need to do site administration work:

Purchase orders, compilation of Delivery oders, Workers attendance and Work pass and safety course attendance

- Minimum 2 Years experience in public relations service or hospitalities and tourism field

- 5-Day work week

Site Office Location:

Ang Mo Kio Industrial Park 2

50 metres walking distance from Ang Mo Kio Ave 1

Bus Stop No: 54101

• Provide general legal advice and contract drafting/review support to Bosch legal entities and business units in Vietnam, including business licence and corporate compliance requirements.
• Identify and manage legal risks, litigation and disputes, including debt recovery matters.
• Provide internal training on legal and compliance matters.
• Draft and negotiate Vietnamese/global long term supply/purchasing contracts, distribution agreements, software implementation agreements, product trial agreements, etc.
• Instruct and liaise with external counsel and corporate secretarial service providers; manage services providers and related costs.
• Manage projects and undertake other duties as assigned by the General Counsel SEA, including providing legal support to business units in other South East Asian countries from time to time.

• Perm
• At least 8 years of experience in managing security for On-Prem Infrastructure and 5 years+ in DevSecOps/SecOps with Cloud environments (IaaS/PaaS/SaaS)
• Experienced in building an internal SOC team and/or managing MSSP.
• Strong communicator and experienced working with C-suite / senior management stakeholders.

Job Description

Cybersecurity Leadership and Risk Management

• Lead overall cybersecurity strategy, risk management, and incident response.
• Provide leadership to the enterprise’s information security organization.
• Collaborate with business stakeholders to raise awareness of risk management concerns.
• Assist in business technology planning, offering current knowledge and future vision of technology and systems.
• Regularly communicate at the executive/company level on global cybersecurity matters.

Governance / Audit / Risk / Compliance Management

• Lead, conduct, and liaise with internal and external auditors for periodic IT/security audits.
• Formalize risk management for business and IT through risk assessments.
• Propose investments in solutions to mitigate risks.
• Facilitate risk assessment and management processes with business units.
• Ensure compliance with local and global IT/cybersecurity regulations for shore offices, cloud environments, and vessels.

Project Initiatives

• Continuously survey and identify security gaps in infrastructure, cloud, and vessels.
• Propose and manage timelines, budgets, and scopes for IT security projects.
• Collaborate with stakeholders (internal/external) to enhance the company’s overall IT security posture using solutions like Bitsight, Watchtower, CSA, etc.
• Analyze risks and impacts during the implementation of new technologies.

Operations

• Own, develop, implement, and monitor a comprehensive enterprise information security and IT risk management program. This program should cover on-premises, cloud, and vessels globally across the group of subsidiaries.
• Drive ongoing cybersecurity awareness programs and campaigns (e.g., phishing, USB attacks) to enhance users’ awareness.
• Develop and enhance an information security management framework for the organization.
• Incident Response: Assume overall responsibility for incident response related to cyberattacks.
• BCP Initiatives: Collaborate with external vendors and internal IT management to design, develop, and implement cyber-related IT business continuity planning (BCP) initiatives (e.g., incident response, alternative workplace solutions, and strategies).

• Degree or Master’s Degree in a technology and/or cybersecurity related field required.
• Professional security management certification (CRISC, CISSP, CISM, & CISA, Qualified Information Security Professional, Certified Ethical Hacker, etc).
• Excellent written and verbal communication skills and high level of personal integrity.
• Excellent experience working and presenting to C-suite executives on cyber initiatives.
• Innovative thinking with strong people engagement skills with an ability to lead and motivate crossfunctional, interdisciplinary teams.
• Experience with contract and vendor negotiations and management including managed services.
• Experienced with working in organization that does in-house cloud native software development.
• Experience with security standards / processes in a Cloud computing/Elastic computing environment, especially in Azure.
• Strong business acumen required to comprehend and evaluate business scenarios, make informed decisions, and take the necessary steps to achieve the organization's goals. However, having experience in the shipping industry is not a requirement.
• Min. 8 years or more experience managing security for On-Prem Infrastructure and at least 5 years (DevSecOps/SecOps) with Cloud environments/instances (IaaS, PaaS & SaaS).
• Minimum of 8 to 10 years of experience in a combination of risk management, information security.
• Min. 5 years or more hands-on experience in evaluating, selecting, designing, and implementing various security processes, policies, and solutions.
• Experienced in building an internal SOC team and/or managing MSSP.
• Familiar with various data privacy and cybersecurity framework (e.g. NIST, ISO 27001/27002, SOC2, GDPR, OWASP, Mitre, etc). Experienced with BIMCO is a plus.
• Proficient with implementing and managing advanced and/or automated security solutions (e.g. IDS/IPS ,EDR/XDR, DLP, PIM/PAM, SIEM, SOAR, SASE, SWG, BAS, ..)
• Experienced with implementing various cybersecurity architecture, e.g. OSI, Zero Trust Architecture, etc across Cloud and on Prem environments, including Azure / AWS.

Triton AI Pte Ltd
Registration Number: R1980724
EA: 21C0661

• Perm
• Bonus
• Medical & Insurance Coverage
• Hybird Work Arrangements

Main responsibilities of the Intern:

- Participate in regular know-how and training sessions and meetings with internal clients and/or external business partners;

- Acquire familiarization with the legal organization policies and central directives of Bosch in SEA;

- Provide support on the review and drafting of simple contracts (such as Non-Disclosure and/or Tenancy Agreements) and internal guidelines and standards;

- Assist with an assortment of organizational matters (such as legal department reporting, filing, organization of precedent database);

- Conduct research on laws in SEA;

- Preparation and presentation of researched topics in MS PPT.

• Ensuring compliance and conformity to regulations, international standards, and customer requirements for automotive User Experience products and services
• Evaluation of the product cybersecurity risk management process and adding risk-based thinking and management to the process
• Establishing the state-of-the-art for product cybersecurity and privacy and providing guidelines
• Continuous improvement of our Cybersecurity Management System for Continental’s automotive User Experience products and services
• Leading of cross-organizational initiatives for the exchange of knowledge and solution building for a more mature Cybersecurity Management System
• Driving performance evaluation of our Cybersecurity Management System in terms of metrics, KPIs and assessments
• Living a Cybersecurity Culture as a role model and provision of guidelines, trainings and awareness of product cybersecurity and privacy 
• Supporting technical compliance management by providing Product Cybersecurity and Privacy expertise
• Supporting colleagues world-wide by consulting during the roll-out of processes within the Business Area User Experience

• Supporting a range of Cyber Security tools including Exabeam, CarbonBlack, Tripwire, CyberArk, TrendMicro AV, Splunk, DAM, Tenable and RSA.

• Managing designated vendors for the specified Security tools.

• Driving the scheduling of security-related projects and remediation timelines.

• Maintaining, troubleshooting, patching, and updating various security tools and scanners used in MAS.

• Recommending process re-engineering and streamlining to enhance workflows and efficiencies.

• Delivering management reporting and dashboarding to stakeholders, including data and trend analysis, and recommending next steps.

• Following up on remediation actions, security and risk assessments with respective stakeholders and applications teams.

• Conducting daily health check and validating system availability through various monitoring/checks.

• Implementing of the service requests, change requests and support of incident management.

• Fine tuning of rules, updating of contents packs to suit the different use cases in

About Us

LiquidX Studio is a high-conviction, high-touch venture studio focused on building application layer companies within web3.

Pixelmon is One of the largest market-cap NFT collections in the gaming category. We are building out the first truly decentralised IP, first with games but moving to animation and other distribution channels. Innovative tokenomics, including fractionalised IP ownership and royalty sharing model.

We are based in Singapore and Malaysia with many of our team collaborating remotely from countries like New Zealand, Spain, Indonesia, and Brazil. With large backing from our recently raised funding round, we aim to create a unique experience with immersive gameplay and extensive lore that will wow all gamers.

These include, but are not limited to:

1. Building our IP through Non-Fungible Tokens (NFTs) and Fungible Tokens (FTs)
2. Creating engaging and innovative technology products to engage and support our Pixelmon community
3. Developing the web3 integration layer between our upcoming games and NFTs

About the Role

We are looking for a Senior Data & Security Engineer to join our dynamic team. The ideal candidate will assist in implementing and maintaining data security measures across our systems. This role involves working closely with senior engineers to ensure data protection, integrity, and availability.

What You Will Do

• Assist in implementing data security policies and procedures.
• Monitor and analyse security incidents and threats.
• Conduct vulnerability assessments and penetration testing.
• Participate in the development of security solutions and protocols.
• Provide support for data backup and recovery processes.
• Collaborate with other teams to ensure data privacy and compliance.

What You Will Bring

• Bachelor’s or Master’s degree in Information Security, Computer Science, or related field.
• 5+ years of experience in data security roles.
• Expertise in security tools and technologies (SIEM, DLP, IAM).
• Knowledge of regulatory requirements (GDPR, HIPAA, etc.).
• Experience with cloud security (AWS, Azure, GCP).
• Certifications such as CISSP, CISM, or GIAC are a plus.
• Solid understanding of networking concepts (TCP/IP, routing, switching, VPNs)
• Excellent analytical, problem-solving, and communication skills.

Who You Are

1. You thrive in a highly collaborative environment and can own complex projects, taking them from inception to completion.
2. You believe in supporting and guiding fellow and junior engineers through mentorship and coaching positively and encouragingly.
3. You love to learn and pick up new technologies and build production-grade products quickly.
4. You are familiar and comfortable with the fast-paced world of startups.
5. You are logical and able to communicate tradeoffs between technical options.
6. You are open-minded and willing to listen and distil different perspectives.
7. Plus Point: You have a demonstrable interest in crypto and DeFi 
8. Plus Point: You love and are actively gaming

Benefits and Why You’ll Love Working With Us

• We Listen. Your voice, ideas, and suggestions matters to us, as we continuously evolve 
• Our People. You’ll be working with a diverse, multicultural, international, talented, fun, supportive, and innovative people and teams. We are people you can be proud to work with
• On The Edge of Innovation. Working on the latest technological, social and financial trends that is web3 and blockchain
• Flat Organisation. our team is a community, we work together as a team from all levels in true decentralised spirit

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions are developed and designed with security inbuilt.

Key Responsibilities

• Provide security consultancy, technical guidance, expertise, solutions, and education for the enterprise.

• Advise IT application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

• Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

• Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

• Advise and review security by design concepts in Cloud platforms such as GCP, AWS or Azure Cloud.

• Advise and review the compliance of integrating security tools and processes into the DevOps pipelines.

• Advice and review the adherence to security requirements for low code platforms.

• Perform threat modeling on security-critical applications. Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews, and audits to ensure security assurance is achieved.

• Manage individual project priorities, deadlines, and deliverables. Any relevant ad-hoc duties.

• Review RFP proposal compliance with security requirements.

• This is an individual contributor role. Strong communication skills are required.

• Note: You could be posted to any subsidiary in the SIA Group.

Requirements

• Degree in IT or related fields, with at least 7 years in information security, especially in the application security space.

• Professional security certifications (CISSP, CSSLP, CEH, CCSP, etc.) preferred.

• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

• Strong in-depth working knowledge of secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), and Software Composition Analysis (SCA).

• Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud platforms, such as AWS and GCP. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

• Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods, etc. Any prior vulnerability management experience is preferred.

• Strong understanding of technologies such as WAF, Anti Bot Protection

• Prior experience in application development and knowledge of the DevOps platform is desired.

• Strong oral, written, presentation and interpersonal skills.

• Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

• Able to work independently and in a team-oriented, collaborative environment.

• Conform to and enforce policies, procedures & rules, and regulations as laid down by Accor and the Hotel to achieve the highest levels of uniformity and guest service.
• Directly report to the Assistant Safety and Security Manager / Safety & Security Manager.
• Responsible for maintaining the highest level of security within the Hotel at all times whilst on duty.
• Protect all guests’ patrons and employees of their belongings.
• Ensure the Hotel’s property is well protected.
• Take charge of the Hotel Security during duty hours.
• Responsible for securing all hotel properties, staff, and clientele in accordance with the procedures as stipulated in the security manual.
• Enforce the Hotel’s Rules and Regulations.
• Strive to implement the Accor Vision and demonstrate active use of the Accor Values.
• Record details of significant incidents and activities in the logbook during his shifts.
• Ensure all Lost and Found properties are recorded in the Security Management System, hand them over (non-valuables) to the Housekeeping Department as soon as possible, and keep the Duty Manager informed.
• Maintain a Hotel Logbook on incidents, complaints, etc., and refer them, if required to the appropriate department for follow-up action.

• Development of country-specific PR plans for TeamViewer’s focus countries in the APAC region (Singapore/ ASEAN, Korea, Japan, India, Australia / New Zealand) – together with the local country heads, local sales and marketing colleagues, the respective PR agencies as well as with HQ communications team
• Ensuring execution of approved PR plans and steering of the PR agencies; recruiting and onboarding of new agencies if needed
• Constantly improving TeamViewer’s share of voice within APAC B2B publications (tech, trade, and business media), and position TeamViewer representatives as thought leaders
• Support APAC leadership, especially APAC president, with all things regarding internal and external communications
• Writing and editing of press releases, byline articles, customer success stories and other content
• Organization and execution of press events like press conferences, round tables, press tours
• Handling of media inquiries and interviews with company spokespeople, comprehensive preparation, and enablement of spokespeople
• Accompanying relevant tradeshows, conferences and other events across APAC, ensuring speaking opportunities as well as leveraging these events for media relations
• Support APAC content, website, social media and community activities as well as local CSR and charity projects

• Provide advice to Senior Management and BoD on risk, legal and compliance related matters.
• Provide advice on the rights and obligations of the Company and other issues arising from business activities.
• Ensures the company’s risk and compliance practices and limits are in compliance with applicable regulatory requirements.
• Liaise with other external stakeholders and regulators, including the Monetary Authority of Singapore and auditors, on issues related to risk, legal and compliance related matters.
• Escalate significant observations and possible regulatory breaches to Senior Management and the Board of Directors.
• Implement internal policies and processes related to risk, legal and compliance.
• Prepare annual work plan in relation to risk, legal and compliance functions.
• Provides training and technical support to management and employees regarding risk, legal and compliance. 

Legal & Compliance

• Draft contracts and other legal documents.
• Ensure business activities are in line with legal requirements through robust periodic reviews.
• Liaise with external counsel on legal documents, legal implications and disputes.  Review advice given by and documents prepared by external legal counsel.
• Provide compliance and legal updates including dissemination and analysis of new and/or revised laws and regulations.

Risk

• Assists in establishing and monitoring key risk indicators, as well as implement corrective action plans to mitigate risks.
• Assists in developing and enhancing policies, procedures and control assessments in response to identified risks.
• Ensure effective incident management process and timely reporting escalation of risk events
• Participates in corporate wide contingency planning/business continuity efforts. Assist to implements RHB Group business continuity framework. Coordinates training, communication, and testing of plans.