Job Summary

Thales is seeking suitable candidate for the position of Engineer (System Security).

You will be looking after the governance of the infrastructure and systems for mission-critical Command and Control (C2) system that Thales Solutions Asia (TSA) have developed for government agency. You will be part of a team to manage the security of system, to ensure the system adhere to the security policies, and is well protected from any threats, risks or exploits.

Job Duties

Provide security expertise and management services to support Authority in activities such as:

• Internal / external audits (IM8, Cybersecurity, etc)
• Policies compliance (IM8, Cybersecurity, etc), work with vendor on:
• Disaster Recovery (DR) and Business Continuity Planning (BCP):
• ICT/Threat Risk Assessments (TRA)
• Monthly reviews of privileged accounts and non-privileged account, disable inactive accounts
• Seek security waivers (IM8, Cybersecurity Act, Circulars etc)
• Circulate security notifications/alerts to vendors and ensure status updates too all stakeholders including cybersecurity centre
• Security monitoring/tracking:

-     Monitor alerts from SOC

-     Update stakeholders regarding SOC alerts

-     Review compliance reports with vendors to ensure that system is compliant

-     Manage, track and update any security incidents/ issues to all stakeholders

-     Review Incident Report (if any)

• Patching:

-     Ensure patches are tested and verified before seeking approval for patching downtime

-     Communicate system downtime to all stakeholders

-     Ensure system availability after patching is completed

• Obsolescence management for software licenses, hardware, operating systems and certificates
• Security enhancement/ integration
• Support the submission of security clearance for related vendors
• Perform other related duties as assigned or requested

Job Requirements

• Working hours will be 0830 hrs to 1800 hrs (for Monday to Thursday) and 0830 hrs to 1730hrs (for Friday), excluding weekends and Public Holidays
• Outside of working hours, to provide online support via emails and group chats when required based on the priority and severity of issues related to the system
• Able to cope in a highly pressured fast-paced environment
• Prior working experience in cyber security and vulnerability management is preferred
• Strong knowledge of security principles, best practices, and industry standards, such as NIST, ISO 27001, and CIS Critical Security Controls
• Able to understand security posture of systems
• Prior working experience in Project Management is a plus point
• Able to understand the system and software architecture, and user operations environment
• Willingness to pick up any new technologies

Education

Diploma or Bachelor’s Degree in Cybersecurity/ InfoSec/ Information Technology / Information Systems / Business IT or its equivalent

Relevant professional certifications, such as CISSP, CISM, CEH, or other security certifications

Experience

Minimally 3-5 years of experience in cybersecurity and supporting mission critical systems with very stringent SLA e.g. 99.9%

Well-versed in cybersecurity best practices and establishing of its policies

Well-versed in IT Service Management (ITSM) standards, processes, guidelines and best practices

The Legal Manager will be based in Singapore and responsible for providing legal support for a variety of issues in customer contract negotiations, researching and enabling the launch of new products and services as well as regulatory and trade compliance support. The incumbent will be reporting to the Legal Director, Asia Pacific. He/she is expected to take on a broad and interesting range of legal matters and thus, a strong foundation in either a local or international law firm will be looked upon favorably.

Roles & Responsibilities:

• Reviewing and providing legal support for customer contracts throughout the Asia Pacific region
• Resolving disputes arising from customer contracts
• Advising on international trade and regulatory compliance matters
• Conducting legal research to enable the launch of new products and services
• Drafting and review legal commercial contracts and document
• Supervising outside law firms used by UPS
• Supervising junior Legal Department staff

Job Requirements:

• Possess a recognized Law Degree i.e. LLM or JD
• Minimum 4 years of relevant legal experience in law firm and/or in corporate legal department
• Candidates who possess relevant experience without Asia Pacific exposure will be considered as well.
• Possess advanced drafting skills in corporate and/or litigation matters.
• Ability to manage projects independently within minimal supervision in matrix company organization.
• Possess good planning, organizational and time management skills.
• Excellent communication and interpersonal skills and able to interact with different levels of people.
• Matured personality with strong professionalism and long-term view towards career development
• Fluent in English and preferably one other Asian language i.e. Mandarin, Japanese, Korean or etc.
• Business traveling opportunities will be available.

NAVIATAIRE AIRLINE IT LEGAL SUPPORT APAC AND META
Manage legal support for Navitaire Airline IT for entire APAC and META markets in order to enable sales teams achieving their financial, strategic and operational objectives by providing solution-oriented, responsive and commercially-practical legal advice, while containing legal risks and exposure to the maximum extent possible. Where negotiation of certain positions is required, properly identifying the risks involved and internal approvals required. Drafting, negotiating and interpreting a wide variety of commercial issues and technology contracts agreements with airline customers, varying in nature, complexity and value, and work on all phases of deals, ranging from the proposal/bid review stages, right through to final negotiation, escalation to senior leadership and dealing with any post signature issues, claims and litigation. 

STRATEGIC IMPLEMENTATION AND ACCOUNT MANAGEMENT

• Work closely as a strategic and trusted business partner with and as part of the Navitaire business units' leadership team in APAC and META, and with Amadeus Airline IT leadership in China, identifying, analyzing and taking action to implement commercial strategies while managing legal and risk-related issues which may impact the performance and the reputation of the business lines.

•  Identify legal and compliance risks and advise on the implementation of risk-management strategies using strong thought leadership and support the business in managing them.

• Manage efficient and constructive legal support for customer negotiations and BAU service mode, act as escalation point and where necessary ensure informed and relevant escalation to Senior Management

• Oversee and manage any potential litigations in relation to any Airline IT accounts

POLICY IMPLEMENTATION

• Serve as primary point of contact to Navitaire BU on a global basis for data privacy matters. Engage and collaborate with LEG data privacy SME colleagues as appropriate.

• Implement and monitor compliance with global contracting policies, procedures, contract management tools and training on a variety of legal and contract matters, including to support risk management.

• Contribute to the preparation of contract templates for Airline IT unit that reflect latest policies, legal developments and best practices.

• Implement appropriate training for legal team members as well as commercial representatives (including Regional Heads).

• Contribute to the business strategy using specialist knowledge and experience, helping to define and shape how strategic, complex and business critical contracts are structured. 

DEPARTMENT MANAGEMENT

• Assess resourcing requirements in the APAC and META regions, including China, in close cooperation with the ACU BUs, ensuring level of support is appropriate and planned.

• Understand and continuously improve business performance through the integration of people, departments and processes.

• Identify and organise training to ensure that team members are empowered and engaged.

About ideal candidate:

• University Degree in Law (eg. JD, LLB, LLM) and Legal Qualification to practice as a lawyer (preferably in a common law jurisdiction).

• Senior professional with at least 8 years of post-qualification experience in private practice and/or in-house position in a multinational corporation.

• Experience in: solid experience in IT/SaaS/outsourcing agreements, as well as knowledge of data privacy issues. 

• High quality training in a common-law jurisdiction strongly preferred.

• Experience working within China or familiarity with Chinese law highly desirable.

• We require a seasoned (lead) negotiator (preferably on the IT vendor side) who knows how to balance between commercial and legal stakes. 

• Strong commercial outlook and great client care skills 

• Must have a strategic as well as legal approach to the law and like working in a fast paced, innovative environment.

#LIAPAC24

Diversity & Inclusion

We are an Equal Opportunity Employer and seek to hire the best candidate regardless of age, beliefs, disability, ethnicity, gender or sexual orientation.

InfoCepts stands as a global leader in comprehensive data and analytics solutions, boasting nearly two decades of expertise. Recognized as Gartner's Customers' Choice for Data & Analytics providers in 2020, 2021, and 2022, we've sustained impressive year-over-year growth, now employing over 1,000 professionals globally. Committed to our mission since our inception in 2004, we aim to assist our clients in staying modern, enabling informed, data-driven decisions.

As part of our expansion, we seek dedicated professionals who share our passion for leveraging data's transformative power to contribute to a better world.

We are seeking a highly skilled and experienced IT Security and Infrastructure Manager to join our team. The ideal candidate will have a minimum of three (3) years of proven work experience in the IT security field, with a focus on enterprise systems, network, and cloud infrastructure.

• Develop and implement comprehensive IT security policies, procedures, and protocols to protect the organization's information assets and infrastructure.
• Manage and oversee the organization's network infrastructure, including routers, switches, firewalls, and VPNs, ensuring optimal performance, reliability, and security.
• Lead efforts to assess and mitigate cybersecurity risks, vulnerabilities, and threats across the organization's IT infrastructure.
• Collaborate with internal teams to design, implement, and maintain secure and resilient cloud-based systems and services.
• Conduct regular security audits, vulnerability assessments, and penetration testing to identify and address security weaknesses and gaps.
• Monitor and analyze security logs and alerts to detect and respond to security incidents and breaches in a timely manner.
• Stay up-to-date with the latest trends, technologies, and best practices in IT security and infrastructure management.
• Provide guidance, training, and support to IT staff and end-users on security best practices and compliance requirements.
• Prepare and present reports, metrics, and recommendations to senior management on the organization's security posture and risk exposure.
• Liaise with external vendors, partners, and regulatory agencies on security-related matters as needed.

Requirements:

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Minimum of three (3) years of progressive experience in the IT security field, with a focus on enterprise systems, network, and cloud infrastructure.
• Professional certifications such as CISSP, CISM, or CCSP are highly desirable.
• In-depth knowledge of cybersecurity principles, practices, technologies, and frameworks.
• Hands-on experience with network security, firewalls, intrusion detection/prevention systems (IDS/IPS), and endpoint security solutions.
• Proficiency in cloud security concepts and technologies, including identity and access management (IAM), encryption, and security monitoring.
• Strong analytical and problem-solving skills, with the ability to assess complex security issues and develop effective solutions.
• Excellent communication and interpersonal skills, with the ability to effectively communicate technical information to non-technical stakeholders.
• Ability to work independently and collaboratively in a fast-paced, dynamic environment.
• Demonstrated leadership and project management skills, with the ability to prioritize tasks, meet deadlines, and deliver results.

As Cloud Security Engineer Intern, you will take part of designing, building and deploying security-focused infrastructure. If you love challenges, in a constant evolution of Cloud services, you have a high motivation, you want to innovate and you have an obsession with security, you will find your place in the Thales DIS Cloud Security Team.

Responsibilities:

• Evaluating, architecting and implementing security-focused tools and services.
• Supporting the company-defined cloud strategy.
• Ensuring that responses are appropriate (and automated) according to policies and procedures.
• Evangelizing and advocating cloud security practices.
• Driving engineering teams across all security practices.
• Making sure about continuous Thales DIS Cloud improvements.
• Identifying, raising and mitigating security weaknesses on Thales DIS Cloud infrastructure.

Requirements:

• To succeed at this job, you must have a good knowledge of hardening, network protocols, application security and strong skills on coding in multiple common languages (shell, PowerShell and Python).
• You must be fluent in English (written and verbal).
• We would like someone to join our team who has a strong experience of delivering home-grown and commercial security solutions.
• You must have a Degree in Information Technology or a related field.
• We are looking for someone with a proven record of effective security services implementation in Cloud, teamwork and collaboration capabilities.
• AWS Certified Developer – Associate or AWS Certified Security - Specialty would also be considered positively.

REACHFIELD Security, (Grade "A" Agency) located in Singapore, specializes in supplying security manpower to Schools, Factories, Shopping Centres, Office Buildings, libraries, etc.

Job Description

Senior Security Supervisor, Security Supervisor, Senior Security Officers, Security Officers.

If you have a valid PLRD security license and are keen, please Whatsapp (65) 8379 4701 .  For Supervisor post, please attach a copy of your resume.

BNB Chain is looking for a dynamic Public Relations and Communications Manager to join our team. This is a full-time remote APAC-based position reporting to the Global Marketing function. This individual who fills the position will be pivotal in increasing public awareness of BNB Chain, enhancing our company image, and managing communications effectively during crises. The ideal candidate will have a proven track record in public relations, media relations, and communications within the technology or blockchain sector, specifically within the APAC region and mainland China.

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s Degree in Computer Science/Information Technology or equivalent.
• 5+ years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:

- CompTIA Security+

- Certified Information Systems Security Professional (CISSP)

- Certified Information Systems Auditor (CISA)

- Certified Information Security Manager (CISM)

Role purpose

We are looking for an SDM to take responsibility for overseeing the successful delivery of services for a large regional APAC client. This role involves managing a team, coordinating resources, collaborating with various stakeholders to ensure seamless service delivery and to ensure all service level KPIs are met or exceeded.

Role tasks and responsibilities

1. Client Relationship Management:

• Build and nurture strong relationships with clients.
• Conduct regular meetings to understand client needs and expectations.
• Act as the primary point of contact for addressing client concerns and inquiries.

2. Service Delivery Oversight:

• Develop, implement, and optimize service delivery processes and procedures.
• Monitor service performance against established SLAs (Service Level Agreements) and KPIs (Key Performance Indicators).
• Identify opportunities for process improvement and efficiency.

3. Team Management:

• Lead and manage a team of service delivery professionals.
• Provide coaching, mentoring, and performance feedback to team members.
• Collaborate with HR for recruitment, onboarding, and training of new team members.

4. Resource Allocation:

• Allocate resources effectively to meet service delivery objectives.
• Work with resource managers and other departments to ensure adequate staffing levels.
• Manage workload distribution among team members.

5. Quality Assurance:

• Implement and oversee quality control measures to ensure service excellence.
• Conduct regular reviews and audits of service delivery processes.
• Develop and maintain quality standards and guidelines.

6. Problem Resolution:

• Address and resolve issues or escalations in a timely manner.
• Collaborate with technical teams and other stakeholders to identify and implement solutions.
• Develop and implement preventive measures to minimize recurring issues.

7. Reporting and Analysis:

• Generate regular reports on service performance, trends, and key metrics.
• Analyze data to identify areas for improvement and provide insights.
• Prepare and present reports to senior management and clients.

8. Continuous Improvement:

• Proactively identify opportunities for process improvement and optimization.
• Implement best practices to enhance service delivery efficiency.
• Foster a culture of continuous improvement within the service delivery team.

9. Contract Management:

• Collaborate with the sales and legal teams to ensure service delivery aligns with contractual obligations.
• Participate in contract negotiations and provide input on service-related terms.
• Monitor contract renewals and changes.

Required:

• A Bachelor's degree in a Business-related field
• At least 4 - 6 years of relevant work experience
• Experience in customer service, leadership or business development
• Advanced computer skills and the ability to learn technology quickly
• Resource planning and budget management experience
• Experience in a Client facing role
• Strong teamwork skills
• Attention to detail

Preferred:

• PMP certification
• Experience in corporate security

Control Risks is committed to a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age or veteran status.

With a high degree of autonomy, you will be supporting the legal function within the Wise group to help take the business to the next level, including: 

• Working closely and building relationships with multiple business units across the Company and across our APAC markets (Singapore, Hong Kong, Australia, New Zealand, Malaysia, Thailand, Indonesia and Japan and other regions in APAC) and Gulf markets to advise on a wide range of legal matters and ad hoc problems, including licensing, market entry and partnerships
• Structuring, drafting, and negotiating commercial agreements with banking/payments partners, outsourced service providers and suppliers
• Understanding the real risks to the business and providing practical advice to Product and Expansion teams. Supporting Product and Expansion teams on changes to our customer agreement for new services or new market entry
• Supporting initiatives relating to governance within the group with close support from Group Co Sec
• Liaising with external counsel where required
• Advising on the legal rights and duties of subsidiary companies and their directors in the APAC region
• Working with the Legal team (based in Singapore, London, New York and Estonia) to support the wider needs of the company
• Staying up to date on legal developments in APAC and advising on future-looking initiatives
• Mentoring and upskilling relevant directors, officers and teams, making life simple and easy

This role will give you the opportunity to:

• Define your path to success - you’ll have the freedom and responsibility to help shape what is needed and then make it happen
• Build something for the future - we are continuing to grow rapidly and your work will be crucial in growing and maturing one of the companies of our time
• Inspire with your ideas, knowledge and self-starting attitude

What we offer in return: 

This is a full-time position reporting to the Head of Legal based in our Singapore office. Find out more about our benefits here.   

If you think you’ve got what it takes, come help us build a beautiful future of money without borders!

Job Objectives:

Oversees the daily operations of the Security Department. Train all security personnel in their areas of responsibilities. Supervise all activities of security staff to ensure compliance and proper application of department regulations and hotel policy. Handles, documents, and follows up with necessary persons regarding any accidents occurring in the hotel premises. Documents all action in the department, including but not limited to: emergencies, loss, theft, or accident.

Primary Responsibilites

• Manages the Security Department.
• Advises on management of security matters.
• Trains all security personnel in their areas of responsibilities.
• Supervises all activities of security staff to ensure compliance with and proper application of department regulations and hotel policy.
• Reviews policies, procedures, and instructions on a regular basis.
• Evaluates possible hazards or threats to security.
• Promotes a safety attitude amongst all employees.
• Ensures safety of persons in the hotel and property assets.
• Reports irregularity in employee or guest behavior.
• Handles loss, damage and accidents.
• Handles, documents, and follows up with necessary persons any accidents occurring in the hotel premises.
• Investigates theft as reported by guest or employee.
• Documents all action in the department, including: emergencies, loss, theft, or accident.
• Participates in weekly department heads meeting. Rooms Division Meeting and any other if requested.
• Coordinates emergencies with local authorities. Maintains good relations.
• Reviews emergency procedures regularly.
• Performs other duties as assigned by management.

Job Requirements

• Minimum education of Bachelor degree in Social Science or relevant discipline.
• At least 5 years’ experience in similar position in security & safety management. Loss prevention experience will be advantageous.
• Strong knowledge of local laws, investigative methods and fire safety.
• Criminal-free record.
• Have good English communication skills both written and spoken.
• Possess professional disposition with excellent communication and interpersonal skills.

This position will be a member of Visa AP Legal team responsible for providing advice and counsel to Visa’s People Team and company managers in all areas of AP employment law, policy, development and training. The attorney functions as a key strategic advisor to the AP People Team and the business functions. This position may also assist with providing legal support to the Inclusive Impact & Sustainability function, including partnering with stakeholders to develop and implement strategies, policies, and procedures to align with emerging legal and regulatory requirements. It also involves working closely within the wider Global Legal function and other Legal colleagues responsible for supporting the global People and Impact & Sustainability functions.

This position requires a curious, practical, highly collaborative attorney with strong people skills who can work with minimal supervision in a dynamic environment. Occasional travel will be required.

Key responsibilities

• Be lead counsel on AP employment law issues including hiring, performance management, discipline, terminations, leave and accommodations, local law compliance, restrictive covenants, pay and benefits.
• Review and provide guidance on drafting and development of People Team policies and procedures domestically and internationally.
• Provide dedicated legal support and act as key strategic advisor to the People Team, management and supervisors on handling employee relations matters, including employee counseling, discipline and benefits issues. 
• Lead and provide advice and support on internal investigations. Recommend and help implement appropriate actions.
• Manage all employment-related claims and disputes, including leading outside counsel in litigation, responding to administrative claims and settlement demands, and negotiating resolution of claims.
• Take charge of developing, implementing, improving and reviewing legal compliance projects and training.
• Prepare, direct and conduct training programs on employee relations matters, for example, employment law updates, managing within the law, and conducting investigations.
• Review and provide input on policies, procedures and specific matters impacted by legislation such as worker’s compensation and employment discrimination laws.
• Assist with matters related to Inclusive Impact and Sustainability.
• Support People-related aspects of proposed investments and other Mergers and Acquisitions transactions, including diligence, input on transaction related-documents, and integration issues.

This is a hybrid position. Hybrid employees can alternate time between both remote and office. Employees in hybrid roles are expected to work from the office 2-3 set days a week (determined by leadership/site), with a general guidepost of being in the office 50% or more of the time based on business needs.

Whether you’re at the start of your career or looking to discover your next adventure, your story begins here. At Citi, you’ll have the opportunity to expand your skills and make a difference at one of the world’s most global banks. We’re fully committed to supporting your growth and development from the start with extensive on-the-job training and exposure to senior leaders, as well as more traditional learning. You’ll also have the chance to give back and make a positive impact where we live and work through volunteerism.

Shape your Career with Citi

Citi’s Global Legal Affairs and Compliance (GLAC) empowers and protects Citi by providing legal, compliance, investigative, and security services to our firm. We manage compliance risk, provide legal analysis and advice, protect Citi’s people and businesses, advocate for legal and regulatory outcomes that benefit our firm and our clients, and ultimately promote behavior that is consistent with Citi’s mission and culture.

We’re currently looking for a high caliber professional to join our team as Senior Vice President, Citi Wealth Legal (Capital Markets) - Hybrid (Internal Job Title: Assistant General Counsel - C14) based in Singapore. Being part of our team means that we’ll provide you with the resources to meet your unique needs, empower you to make healthy decision and manage your financial well-being to help plan for your future. For instance:

• We believe all parents deserve time to adjust to parenthood and bond with the newest members of their families. That’s why in early 2020 we began rolling out our expanded Paid Parental Leave Policy to include Citi employees around the world.
• We empower our employees to manage their financial well-being and help them plan for the future.
• We have a variety of programs that help employees balance their work and life, including generous paid time off packages.

In this role

The Assistant General Counsel role is a senior management-level position within the Wealth Asia North and Asia South Legal team, based in Singapore.

Responsibilities

• Advising on structuring, legal issues and documentation in relation to a wide range of Capital Markets products [Structured Notes, Bonds, Equities, Commodities, Foreign Exchange (FX), Fixed Income and International Swaps and Derivatives Association (ISDA) Master/Collateral Agreements] in the Asia Pacific region for the Citi Wealth Investments business including Citi Private Bank, International Personal Bank and regional investments desk.
• Advising the Wealth businesses on the implementation of global and local regulations affecting investment products (excluding funds), such as: Dodd Frank and other United States, Hong Kong and Singapore regulations, sales practice regulations (best execution, suitability, offshore conduct rules, fair dealing).
• Advising on new products, product programs, close-out/collateral netting
• Advising the trust business from time to time
• any other matters related to the Wealth Investment business

The role requires the candidate to :-

• Apply comprehensive understanding of multiple function areas, acting as a subject matter expert in area of expertise to achieve goals of the function
• Resolve moderately complex legal issues with moderate impact on business/function segment and provide legal advisory services
• Partner with business/functional line management in recommending, developing and executing business plans within permissible statutory and regulatory frameworks
• Coordinate resources to meet business needs and ensure efficient delivery of legal services in business or country/region
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards.

As a successful candidate, you’d ideally have the following skills and exposure:

• 10+ years of post-qualification legal experience with a major law firm or financial institution
• Bachelor's degree/University degree
• Licensed to practice law
• Practical and solution-oriented, experienced in handling transactions independently
• Strong legal analytical skills, judgment and relationship building skills
• Willingness to learn, team player
• Familiarity with legal and bank regulatory/securities law framework in the Asia Pacific region and United States
• Preferred, In-house experience supporting capital markets/investments business

Working at Citi is far more than just a job. A career with us means joining a family of more than 230,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Take the next step in your career, apply for this role at Citi today

https://jobs.citi.com/dei

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

Technical Specifications:

• Good in providing solution by investigating and post-mortem analysis to resolve security violations.
• Experience in Information Security
• CISSP or Global Information Assurance Certification (GIAC) or equivalent.
• Performed asset and network discovery activities to ensure full coverage of vulnerability discovery.
• Good Experience in system and application vulnerability testing for Web servers, DB servers, Network devices Etc. using Nessus or Nexpose or other vulnerability Manager Tools.
• Good in monitoring security vulnerability information from vendors and third parties applications.
• Good in implementing policy audit for servers and workstations
• Prioritizing remediation activities with operational teams through risk ratings of vulnerabilities and assets.
• Research threats and vulnerabilities and, where appropriate, take action to mitigate threats and remediate vulnerabilities.
• In-depth knowledge of security systems and applications and a strong foundation in core area of security (e.g. OS hardening, Active Directory, DLP, network and perimeter).
• Good experience in configuring hardening guidelines and helped in maintaining baseline standards.
• Good experience in configuring CIS benchmarks on (Servers, Desktop & Network Devices)
• Configuring and monitoring of operational security infrastructure
• Good exposure to industry standards such as ISO 27001, PCI-DSS, with Audit experience in large enterprise/Service provider environment.
• Have good knowledge in web application security testing.
• Have a very good understanding about life cycle of Information Security Audit / VA
• Recommend, scheduled the security patches and other measures required in the event of a security breach.
• Monitor system logs, SIEM tools and network traffic for unusual or suspicious activity. Interpret such activity and make recommendations for resolution.
• Experienced in investigate and resolve security violations by providing post-mortem analysis to illuminate the issues and possible solutions.
• Good knowledge of Application exploitations and configuring alerts on SIEM
• Worked on installation, configuration management of security systems and applications, includes policy assessment, compliance tools, network security appliances and host-based security systems.
• ·Worked on monthly management reports, dashboards, documentation for security systems and procedures.
• Good in reporting unresolved network security exposures, misuse of resources or noncompliance situations using defined escalation processes.
• Good in training, mentoring and guiding for team members to use of security tools and resolve issues.
• Good in evaluating, implementing information security solutions to protect against potential threats for security violations
• Worked on incident response and architecture review processes.
• Managed and supported Endpoint Security/ ePolicy Orchestrator, Virus scan Enterprise, Data Loss Prevention, Host Intrusion Prevention and Endpoint Encryption.
• Have good knowledge on Data loss prevention and Endpoint Encryption tools.

Proficio is an award-winning managed detection and response (MDR) services provider. We provide 24/7 security monitoring, investigation, alerting and response services to organizations in healthcare, financial services, manufacturing, retail and other industries. Take a video tour of our global network of 24/7 Security Operations Centers (SOCs).

Proficio has been highlighted in Gartner’s Market Guide for Managed Detection and Response Services for the last five consecutive years. MSSP Alert ranks Proficio among the top 250 global Managed Security Services Providers (MSSPs).

We have a track record of innovation. Proficio invented the concept of SOC-as-a-Service. We were the first MSSP to provide automated response services and are the only company in our space with a patent for cyber risk scoring and security posture gap analysis.

Our typical client is a medium to large-sized organization that lacks the in-house resources to address the challenges of a rapidly changing threat landscape. The difficulty of hiring and retaining cybersecurity professionals are widely understood. Our prospective clients are also challenged to effectively harness technology and build hardened processes that reduce the risk of security breaches.

While Proficio has developed a unified service delivery platform designed to meet the needs of the most demanding clients, what sets us apart is the quality and passion of our people. We believe the SOC of the Future will meld the creativity of human intelligence with the power of advanced technologies like AI.

Proficio’s commitment to developing and promoting our team members is unparalleled in our industry. Most of our senior managers were promoted from within.

Summary:

The Offsite Security Analysts are a key component of our SOC-as-a-Service operations.  They are on the front line receiving and triaging alerts from our clients who require dedicated support.  Our Security Analysts have strong network and security knowledge, are strong problem solvers, and work under time pressure to quickly analyze and report security threats in our client’s networks.

The Offsite Security Analyst will be reporting to the Offsite Lead, he/she will be working closely with the client’s cybersecurity threat operation management team.

•  Perform the security tasks for PCIDSS Compliance and other Aspire Lifestyles-related compliance required for internal and external audits (ISO27001, SOC2 Type II, etc.) and ensure successful completion.
• Provide technical consultation and support on the resolution of the findings on the security tests done.
• Assist compliance officers/managers in preparing and timely submission of security evidence for audits (remote and onsite) and ensure timely and successful closure of assessments.
• Provide security support for client assurance (evidence, questionnaire and audits).
• Perform or coordinate PCI DSS scans and penetration tests including tracking of findings remediation, required for PCI DSS Compliance on Aspire in scope components and coordinate with systems, network, local IT, applications and relevant departments on timely resolution of findings.

• Application vulnerability scans – Perform or coordinate dynamic security scan of internal and external web applications. The tests to be of the following types:
    a. Dynamic Web Application Scans
    b. Patch Management - Coordinate and maintain patch tracking for servers/devices in scope for PCI DSS and ISO27001
    c. Vulnerability tracking - Track and follow-up with Stakeholders to fix the reported vulnerabilities and share Dashboard with Compliance team on monthly basis
    e. Highlight and report deviations on the activities or high-risk audit areas.
• Perform or coordinate internal vulnerability assessments required to manage PCIDSS compliance on networks, systems and security related systems. The tests to be of the following types:
    a. Configuration Scan,
    b. Patch Scan, and
    c. Vulnerability Scan
• Operate an effective Log Management, Host Based Intrusion Detection System across geographies and support the incident management and change management work and maintain PCIDSS compliance, SOC 2 Type II Compliance and ISO 27001 Compliance.
• Maintain compliance tracks and ensure HIPS system, compliance system, etc. are maintained up to date for certifications (PCIDSS, SOC 2 Type II, ISO/IEC 27001 Certification audits).
• Perform troubleshooting on SIEM, FIM and HIPS products and seek support from AV support team by creating and following up on tickets.
• Ensure the SIEM, HIPS, FIM, MSS and other technologies implemented for PCIDSS compliance runs optimally with no negative impact on systems.
• Prepare reports from the technical (SIEM, MSS, HIPS, FIM) and non-technical systems (excel reports) the support the client audit requests, PCIDSS audits, ISO27001 audits, SOC 2 Type II etc. and maintain the dashboards.
• Firewall Review - Perform Firewall review using automated tools and maintain PCI DSS requirement.
• Access review - Perform periodic access reviews of security solutions.
• Configuration review of Security devices - Periodic review of security devices as per MSS guidelines
• Segmentation testing - Perform or coordinate segmentation test for the PCI in scope systems.
• Any other delegated tasks reasonably considered to be within the scope of the post and as agreed with managers.

• At least 2+ years of working experience in a cybersecurity function such as Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence or Vulnerability Management.  Work with SIEM technologies receiving and triaging alerts from various log sources preferred.
• Network security or IT certifications are advantageous.
• Knowledge of network concepts, network protocols, and network security methodologies.
• Knowledge of network technologies in one or more areas such as perimeter firewalls, demilitarized network zones (DMZ), encryption, encoding, network virtualization or wireless networks.
• Knowledge of enterprise IT networks, cybersecurity threats and vulnerabilities at the network layer.
• Knowledge of network traffic analysis methods such as packet analysis and analyzing network flow data.
• Continuous learner who has a passion for defensive cybersecurity; ability to utilize resources at your disposal in an efficient manner; advanced problem-solving skills when encountering emerging security attack scenarios
• Demonstrated communication skills including written documentation of troubleshooting and required responses
• Proven ability to work in a fast-paced environment with strict SLAs for response time

• Opportunity to work in a progressive organization with structured training and roadmap for success

• Lunches and fun employee activities!
• Experience in one of the hottest IT industries today

Proficio is an EOE employer.

We are seeking a detail-oriented, flexible, and proactive person, with a gift for prioritizing multiple tasks in a high-demand environment! If you fit this description, you should join our Legal Policy team in our X Singapore office!

What You’ll Do:

Legal Policy seeks a goal-oriented, focused person to join our team in Singapore and help keep our legal process operations organized and on track. You will focus on legal content removal and user information requests from all around the world. If you're detail-oriented, dedicated, analytical, and have a knack for managing multiple tasks efficiently, apply today!

• You will handle global content removal and user information requests, including document intake and processing.
• You will work closely with Legal Policy team members in Ireland, San Francisco and Singapore on prioritizing requests and ensuring consistency in the team’s operations.
• You will continually improve processes for efficiency and consistency.
• You will join on an on-call rotation, working closely with other members of Trust & Safety to provide timely responses to emergency requests from all over the world.
• You may represent X in witness testimony or other external engagements.
• Experience in reviewing, documenting, and tracking legal requests is preferred. You will be responsible for supporting your team in making sure requests are processed and tracked in an accurate, efficient, and timely manner.

Who You Are:

You have:

• Experience processing requests for content removal or user information.
• A collaborative and optimistic mindset

You are:

• At ease with providing clear and concise responses to time-sensitive requests
• An excellent communicator, and will maintain open, thorough, and regular communication with teammates and cross-functional teams.
• Flexible and can adjust accordingly to ensure team efficiency and deliverables are met
• Capable of spotting anomalies or unusual patterns in requests you handle
• Attentive to detail, organized, and able to prioritize tasks in a dynamic work environment even when they are sometimes monotonous.
• A keen decision maker, self-motivated, and a team player
• Comfortable with navigating ambiguous policy escalations

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions (both applications and infrastructure) are developed and designed with security inbuilt.

Key Responsibilities

•Provide security consultancy, technical guidance, expertise, solutioning and education for en-terprise.

•Advise application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

•Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

•Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

•Perform threat modelling on security critical applications. Keep up to date on emerging secu-rity threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews and audits to ensure security assurance is achieved.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables. This is an individual contributor role. Strong communication skills.

Requirements

•Degree in IT or related fields, with at least 5 years in information security, especially in the application security space.

•Professional security certifications (CISSP, CSSLP, CEH, CCSP etc) preferred.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.

•Strong in-depth working knowledge in secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), Software Compo-sition Analysis (SCA).

•Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud technolo-gies. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

•Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc. Any prior vulnerability management experience preferred.

•Strong oral, written, presentation and inter-personal skills.

•Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

As a Team Leader of the Google Cloud Security Team at Teleperformance, you will be the link to our client’s success, you will lead a team of specialized executives in charge of the commercial growth within your business unit. You will work with your fellow team leaders to further expand our services without losing sight of our existing KPIs. You will oversee the preparation of the forecast, and develop new opportunities with our existing clients and to translate data into concrete actions, analyze reports and ensure planning and targets are achieved both at individual and team level.

You will coach and guide the highly motivated sales team.

Responsibilities

• Managing a team of sales reps and working towards team KPIs and sales targets.
• Term planning / forecast preparation and thinking in terms of new developments and opportunities
• Delegate tasks and working towards set deadlines
• Oversee day-to-day operation of sales team
• Monitor team performance and report on metrics to perform outstanding results
• Discover training needs and provide coaching
• Listen to team members’ feedback and resolve any issues or conflicts
• Recognize high performance and reward accomplishments
• Develops strategies to promote team member adherence to company regulations and performance goals
• Mentor team members towards personal and professional goals where applicable in line with career path

• BA/BS degree or equivalent practical experience
• Japanese high or native level + C1 Level of English.
• +2 years of experience in sales is a plus.
• Consultative sales knowledge (BANT) is a plus
• Proven managerial experience in a sales environment.
• Advanced knowledge in MS Office (MS Excel, MS PowerPoint, MS Word, etc.)
• Excellent people & communication skills.
• Strong presentation, analytical and problem-solving skills.
• An ongoing desire to learn and develop.
• Capable of managing communication flow and direction.
• Passionate about sales, technology and the internet, with a desire to learn and develop
• Google Cloud Security certification is a plus

• Full time position - Permanent Contract.
• Competitive Salary.
• This is a Hybrid working model in Singapore.
• A permanent presence of coaches who will facilitate your personal and professional development
• Established career path to grow within the project
• Continuous training and certifications
• Dynamic business casual environment with colleagues of all ages gathered in a highly-motivated team

Job Description
You will be a member of the Group Information Security Team responsible for initiating, implementing and maintaining security products and solutions to support enterprise security.

Key Responsibilities

• Subject matter expert (SME) for the security systems owned by the Information Security Team.
• Ensure security systems are utilised to their maximum capabilities.
• Plan, identify, assess, design, operationalise and maintain multiple security related software and/or hardware.
• Recommend and drive cyber security solution and initiatives to improve cyber security of the organisation.
• Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
• Provide security consultancy, technical guidance, expertise, solutioning and education.
• Advise infrastructure teams on security design that is relevant and fit for purpose.
• Identify and assess cyber risks in the IT infrastructure environment.
• Review firewall requests.
• Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.
• Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables.
• This is an individual contributor role. Deliver tasks with minimal supervision.
• Strong communication skills.

Requirements

• Degree in IT or related field, with at least 5 years in information security, especially in the application security space.
• Professional security certifications (CISSP, CSSLP, CEH etc) preferred.
• Experience in security products POC and RFQ.
• Prior experience in implementing and maintaining any of tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM etc. and/or network security. Able to review firewall requests.
• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.
• Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience preferred.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc.
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Your Career

You will work firsthand with our valued customers to address their complex post-sales concerns where analysis of situations or data requires an in-depth evaluation of many factors. You’re a critical thinker in understanding the methods, techniques, and evaluation criteria for obtaining results. You’ll enjoy networking with key contacts outside your own area of expertise, with a strong capability of detailing difficult technical issues to both non-technical and technical professionals.

You will regularly participate in technical discussions with multi-functional teams, creating an environment of transparency that ultimately leads to better products, better working environments, and better cybersecurity. Your quick thinking and support to our clients provides the fast assistance they need to keep their environments secure – which means you’ll need to move quickly, thoughtfully, and provide technical assistance as needed (often, in high pressure situations).

Your Impact

• Provide Technical Support to customers and partners
• Provide technical services include writing scripts, troubleshooting and best practices to customers
• Manage support cases to ensure issues are recorded, tracked, resolved, and follow-ups are completed in a timely manner
• Provide fault isolation and root cause analysis for technical issues
• Publish Technical Support Bulletins and other technical documentation in the Knowledge Base
• Review of technical documentation for training materials, technical marketing collateral, manuals, troubleshooting guides, etc.
• Travel to customer sites in the event of a critical situation to expedite resolution as required
• Provide on-call support for weekend and public holiday on an as needed basis

The Security Director is a strategic leader on the Global Security Team reporting directly to the Senior Director, Global Security. They will be responsible for bridging gaps between security strategy and process implementation in the APAC region and will identify and execute on actions which will improve the performance and efficiency of the security organization and its operations. This leader will directly manage team members, programs, and initiatives at a global level to include operations in Asia Pacific and Europe.

• Advises the senior management team on all security related issues and activities.
• Supports the development of annual security-centric planning, budgeting, and implementation activities.
• Leads the collaboration effort between Regional Security Teams and other internal function groups in successfully identifying, investigating, and mitigating economic loss and other risks to the Company
• Advances and supports the Security team in providing and tracking ongoing Programs training, interventions, and other security-centric activities.
• Develops and implements solid business and security-centric value measure metrics, trending, and benchmarking
• Manage the regional departmental budget
• As a leader, they will dedicate significant time to develop and retain talent, and to enable her/his senior team members to build and implement (“in the field”) institutional global, corporate security programs
• Provide regular security briefs and emergency updates were appropriate for the regional executive leadership teams
• Facilitate and maintain security operations and emerging security technologies
• Ensure ongoing external networking with peer organizations
• Participates in budget preparation and takes necessary actions to control and reduce costs
• Promotes individual professional growth and development by meeting requirements for mandatory/continuing education and skills competency; supports department-based goals which contribute to the success of the organization; serves as preceptor, mentor, and resource to less experienced staff.

Security Officers

Shift Work: Day / Night Relief 

Place of Work: Singapore

Requirements:

1. Valid PLRD security license.

2. Prefer with relevant working experience in Singapore.

2.Certificate of Good Conduct (for Malaysian).

3.PC literate.

4.Able to work 12-hr shift.

5.Assignments include Office buildings, Factories, International schools.

6.Prefer with customer service / front line experience.

Application Methods:

1. WhatsApp (65) 8379 4701 

2. Interview can be arranged by Video Call.

Key Responsibilities:

• Develop and implement advanced cyber security architectures and solutions.
• Analyze and evaluate system security requirements to design secure networks.
• Collaborate with cross-functional teams to integrate security practices into all facets of the business.
• Conduct risk assessments and provide recommendations for enhancing system security.
• Stay updated with the latest cyber security threats and technologies.
• Develop technical solutions and tools to help mitigate security vulnerabilities.
• Provide technical guidance and support to other team members.
• Document and maintain records of security architectures and processes.

MUST HAVE:

• Bachelor’s degree in Computer Science or Information Technology or Cyber Security, or related field.
• Minimum of 3-5 years of experience in a cyber security architect or engineering role.
• Proven experience in designing and implementing secure network architectures.
• Strong background in network security, system security, and cloud security.
• Experience with common cyber security tools, standards, and protocols.
• Familiarity with industrial control systems and operational technology (OT) security is a plus.

WE VALUE:

• Strong technical skills in network and system security.
• Knowledge of current cyber security trends and threats.
• Excellent problem-solving and analytical abilities.
• Proficient in security technologies such as firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, etc.
• Good communication and collaboration skills.
• Ability to work independently and as part of a team.

Responsibilities:

• Supervise the Service Delivery Managers and other resources within the security services team
• Prepare and deliver the service and maintenance proposal during bids
• Formalize service requirements, cost of ownership and integrated logistic support of the Solution
• Define the architecture/organization of the service and the associated service infrastructure
• Allocate service requirements to the various actors of the organization for support
• Validate the Service Deployment Readiness
• Validate the Obsolescence Management Plan
• Responsible for the resources to deliver the services
• Ensure that the teams meet all the Service Level Agreement (SLA)

Requirements:

• A bachelor's degree in IT/Computer/Engineering Discipline
• Preferably more than 10 years of work experience in maintenance of Critical System with SLA in the management capacity
• Experience in execution of ITSM processes in an organization
• Experience in operation transition planning from project phase into maintenance phase
• Experience in managing a group of more than 20 service support staffs and sub-contractors
• Experience in delivering ILS requirements in project phase
• Good understanding of Logistic Support Analysis such as Maintenance Engineering Analysis (MEA) and Level of Repair Analysis (LORA)
• Good understanding of System Reliability, Availability and Maintainability (RAM) programme
• Experience in the System Testing, Commissioning and Warranty support
• Strong interpersonal skills, ability to effectively communicate with peers and customers on all levels
• Ability to effectively prioritize and execute tasks in an occasionally high-pressure environment
• Organized and motivated individual with good written and oral communication skills
• Good technical knowledge of Windows Server, Linux, VMware, Databases, Storage, Networking, Cybersecurity, Communication Systems will be an advantage
• Any professional certifications such as PMP/IPMA, ITIL, CCNA, etc. will be also an advantage

• Bachelor’s degree in Computer Science, Information Security, or related field.

• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.

• Excellent communication skills and the ability to collaborate with diverse teams.

• Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.

• Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.

• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services

• Good knowledge in security

• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.

• Proficient in security concepts related to infrastructure as code (IaC) and containerisation.

• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc