Job description

• Troubleshooting security and network problems.
• Perform vulnerability assessment using automated tools and recommend actionable follow up to remediate the vulnerabilities and/or threats uncovered.
• Provide maintenance support for security systems and tools, including firewalls and other security technologies, as per the maintenance contract requirements.
• Perform system upgrades, patches, and backups to ensure the security systems are up-to-date and running efficiently.
• Provide incident response support, troubleshoot security incidents, and work closely with end users to resolve issues in a timely resolution.
• Proactivity monitoring, support and troubleshoot network bandwidth capacity and network performance to ensure uninterrupted services.
• Manage and maintain Cisco ISE for network access control and policy enforcement.
• Coordinate and manage local and regional ISP on maintenance, changes, and implementation of WAN (SD_WAN).
• Report network operational status by gathering and prioritizing information and managing network projects.

Requirements

• Diploma or Degree in IT or Computer Science
• Min 4 years of relevant experience in IT Infrastructure and Operations Automation Experience
• Knowledge of regulatory requirements and security compliance standards relevant to network infrastructure.
• Professional Certification and at least 4 years’ hands on experience in routing & switching - good to have CCNP.
• Professional Certification and at least 4 years’ hands on experience in network security - good to have PCNSE (Palo Alto).
• Professional Certifications and at least 2 years hands on experience in Cyber security and optional CEH, SSCP, ISC2, Microsoft Security Fundamentals (good to have)
• Any relevant Microsoft cloud security certifications (AZ-500, MS-101, MS-500)
• Good Understanding of network and security fundamentals (Concepts, Protocols. Troubleshoots).
• Experience with Windows Defender Advanced Threat Protection and latest Microsoft E5 Security Product set
• Experience in testing and evaluating Security products in a Lab environment.
• Ability to manage multiple priorities and work independently.
• Positive and professional working attitude, ability to work as a team or individual under stress with minimum supervision and deliver on tight deadlines in fast-paced environment.
• Hands on experience in one or more of the following technologies as below:
• Routing/Switching – Cisco, Meraki
• Network Security – Cisco ISE
• Firewalls/Proxy – Palo Alto, Cisco, Zscaler
• WAN – VeloCloud
• Cloud - Azure

• Draft, review and advise on a broad range of banking - related contracts with respect to the businesses of the Bank (i.e.Corporate, Commercial, Retail and Treasury).
• Manage and advise on regulatory matters of the Bank – including but not limited to PDPA.
• Draft, review and advise on ISDA related matters.
• Assist in handling dispute related matters.
• Advise and participate in branch -related projects.  
• Working together with multiple internal stakeholders to prepare and advise on legal documentation, internal policies and procedures.
• Manage external counsels effectively when engaged.
• Keep abreast with the relevant laws and regulations relating to financial institutions.
• Carry out any other duties as assigned by the Head of Legal.

MAINTENANCE & ENGINEERING

• Plan and carry out preventive maintenance throughout the hotel to ensure standards are maintained for guest comfort.
• Prioritise and carry out maintenance as requested by Departments on a daily basis to ensure the smooth running of all hotel departments.
• Motivate and develop the Engineering team to reach to their fullest potential.
• Ensure guest-centric approach to works, schedules with priority placed on services which impact guest satisfaction.
• Liaise and work closely with the MCST and FCC to ensure smoother operations and consistency in approach.
•  Record meter readings and liaise with the Executive Assistant Manager regarding options to improve energy management and conservation.
• As a Fire Safety Manager, be responsible for the testing of fire alarms, emergency lighting etc. on a routine basis as required by local Council and Fire Service.
• Liaise with the Body Corporate with regards to maintenance issues and re-charge labour and materials at agreed rates
• Ensure compliance with all legislation, including Health and Safety and Environmental.
• Liaise with the Executive Assistant Manager regarding use of contractors within the Hotel, controlling expenditure and ensuring work is to the standard required by the Company and manufacture specifications.
• Ensure the cost effective and hygienic removal of rubbish from the hotel areas and monitor to ensure areas are clear and free of offensive odour.
• Be available to carry out emergency maintenance work outside of normal working hours, as required for: full power failure, evacuation fire system re-set and / or failure of mechanical systems.
• Maintain records of repair work and daily checks as required by local Council, Government and Manufacturer specifications.
• Liaise closely with all departments regarding ‘down’ rooms to expedite a quick turn around and return to inventory.
• Ensure the external areas of the hotel are neat and tidy and maintained in line with Company brand standards.
• Research, recommend and liaise with the Executive Assistant Manager regarding procedures to improve the overall efficiency of the department and to carry out project work/prepare reports as requested by the Executive Assistant Manager.
• Support the co-ordination of safety and security/risk management programs via third party providers
• Work with the operational Department Heads team to ensure InterREACT tracking and compliance
• Ensure health, safety and welfare of all ambassadors is provided for through implementation of integrated occupational safety and health program. 
• Give guidance to the effective operation of the WHS Committee.
• Ensure all ambassadors are competent in the safe and effective use of equipment and chemicals in accordance with the manufacturer’s instructions.
• Attend and actively participate in daily meetings respecting the confidentiality of issues which may be discussed formally or informally.
• Prepare monthly Engineering reports, commenting on key performance indicators and action taken to keep on target.
• Adherence to Emergency Communication procedures ensuring that enquiries from the media are only responded to by the nominated spokesperson.
• Strive to implement the AccorHotels Vision and demonstrate active use of AccorHotels Values.

SECURITY

• Direct and manage all activities and responsibilities of the Security Department.
• Establish, implementation and ensure compliance of Security Standard Operating Procedures, rules and regulations, to ensure that standards are in accordance with the operations manual.
• Manage all Investigation, incidence reporting and any cases of infringement of the hotel’s rules and regulations.
• Lead, guide and mentor the security team ensuring that they are sufficiently trained with all the security policies and procedures.
• Plan and schedule the day-to-day activities of all security ambassadors, to ensure that all hotel areas are properly and adequately secured at all times.
• Maintain close liaison with governmental authority to ensure compliance.
• Responsible for all resolutions to complaints and emergency situations.
• Develop and recommend to the management safety and security measure to safeguard VIP’s and other guests, special functions in the hotel, hotel property and ambassadors and vehicles in hotel property.
• Ensure that all the security ambassadors are fully conversant with the operation of all fire equipment in the hotel that the Engineering Department.
• Investigate the report of any thefts and use sound judgment in dealing with these matters, seeking the concurrence of the management if a police report is to be made
• Prepare annual security budgets/goals, develops working methods and plans to carry out goals, compares actual accomplishments against goals periodically and take necessary corrective action.
• Any other reasonable request within your range of competence as required by Management.

• Providing legal advice on public procurement related activities and participating in multi-disciplinary task force for public tenders
• Negotiation, drafting, analysis, and review of various commercial agreements (distribution, agency, license, services, etc.) 
• Management of litigation in close cooperation with local lawyers
• Advising the subsidiaries on an occasional basis on a variety of legal matters relating to e.g. competition law, financing solutions, social law and HR matters in order to harmonize good legal practices
• Contribute to elaborate various internal policies and procedures
• Risk management
• Provide training and guidance to the business

Senior Manager, Or Manager - Cyber Security & IT Governance

Responsible for the assessment, development, implementation and maintenance of enterprise-wide cyber security and IT Governance programmes to preserve the confidentiality, integrity, and availability of information resources. As part of the IT leadership team, this individual will be expected to provide technical leadership and consultation across the organisation. S/he will also work with external experts to implement security solutions, detect, and contain cyber security incidents.

Responsibilities

Cyber Security:

Assess and review environment and cybersecurity measures to ensure security and operational effectiveness, for e.g. network, system, application, endpoint security, physical and logical access security, etc.

Review and develop security framework, information security policies, processes, procedures, and guidelines.

Conduct cybersecurity risk assessments, penetration tests, and IT controls tests.

Identify security gaps and propose mitigating measures and escalate security incidents and non-compliances on a timely basis.

Evaluate, deploy, and maintain cybersecurity infrastructure to improve cybersecurity posture. Design, implement and maintain security incident response and escalation procedures.

Monitor, analyze and correlate events to determine the best course of action, to mitigate and contain threats when detected.

improve cybersecurity awareness of staff, for e.g. by conducting awareness training. Automate security controls, data, and processes.

IT Governance:

Review and enhance IT policies, standards, guidelines, and best practices regularly to ensure that these are aligned to organization objectives and industry best practices.

Develop and implement effective change management plans (such as communication plans and training programs) to drive adoption and compliance.

Participate in audit planning meetings with internal/external auditors, collate/provide the required materials on a timely basis, validate audit findings, provide remediation solutions, and implement the agreed solutions on a timely basis.

Drive security access and activity log reviews on regular basis.

Promote IT risk management, governance, and compliance culture across the organization.

IT Management:

Contribute to IT strategic planning and budgeting. Ensure IT vendors meet contractual obligations.

Maintain up-to-date knowledge on cybersecurity technologies and standards.

Attend to any other reasonable duties as assigned by Director, Information Technology.

Requirements

Degree in engineering, science or information technology, or equivalent education.

8-10 years of related work experience in cybersecurity management and security governance.

Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.

Strong understanding of cybersecurity standards.

Hands-on experience with cybersecurity tools such as Next Generation Firewalls, SASE, Endpoint Protection, Data Loss Protection, Email Security, etc.

To apply:

Please email Resume in Microsoft Word format

Please state your Position/ positions applied on the “on TOP” of your resume.

Please state Available Commencement Date or notice period

Please state current and last SALARY and Expected Salary in your resume.

Please state Reasons for leaving current & previous Employment.

Cyber Security, Associate Engineer

Salary: up to $4000+

Responsible in maintaining and improving the organization’s cybersecurity posture on an ongoing basis. S/he will work with external experts to implement security solutions, and work with vendors to monitor, detect and contain cybersecurity incidents to minimize impact to the organization.

Responsibilities

• Assist in the development of information security policies, processes / procedures and guidelines on an ongoing basis.

• Work with vendor to conduct security assessments and penetration tests.

• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.

• Standardize and refine security incident response and escalation processes.

• Mitigate and contain threats when detected.

• Escalate security incidents and non-compliances on a timely basis.

• Work with IT infrastructure team to evaluate, implement and enhance the network perimeter security, endpoint security, SIEM.

• Monitor information security alerts triage, mitigate, and escalate issues as needed.

• Conduct information security awareness training.

• Provide security advisory to end users on regular basis.

• IT Security Management of various aspects, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.

• Keep abreast of industrial IT security advancements and introduce appropriate security enhancements to IT infrastructure and systems.

• To perform daily monitoring of logs and review of security notifications and alerts, and assist on the assessment and reporting weekly trends, incidents and security events. Abnormalities found in the review of security events must be reported to the Cyber Security Manager.

• To provide daily technical support in terms of Cyber Security operations for Sophos Endpoint Protection, Cisco FTD Firewall, Advanced Email Threat Protection, Web Application Firewall, Cisco Email Security, DG DLP, Tenable SCCV, Splunk, Cisco Umbrella, etc.

• Attend to any other reasonable duties as assigned by the Senior Cyber Security & IT Governance Manager and IT Director.

Requirements

• Degree/ Diploma with min 2 years related work experience in cybersecurity management in Singapore.

• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.

• Good command of written and spoken English.

• Excellent interpersonal and communication skills.

• Pro-active, independent, resourceful, able to work in a team environment and work independently with minimal supervision.

To apply:

Please email Resume in Microsoft Word format

Please state your Position/ positions applied on the “on TOP” of your resume.

Please state Available Commencement Date or notice period

Please state current and last SALARY and Expected Salary in your resume.

Please state Reasons for leaving current & previous Employment.

Job Description
You will be a member of the Group Information Security Team responsible for initiating, implementing and maintaining security products and solutions to support enterprise security.

Key Responsibilities

• Subject matter expert (SME) for the security systems owned by the Information Security Team.
• Ensure security systems are utilised to their maximum capabilities.
• Plan, identify, assess, design, operationalise and maintain multiple security related software and/or hardware.
• Recommend and drive cyber security solution and initiatives to improve cyber security of the organisation.
• Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
• Provide security consultancy, technical guidance, expertise, solutioning and education.
• Advise infrastructure teams on security design that is relevant and fit for purpose.
• Identify and assess cyber risks in the IT infrastructure environment.
• Review firewall requests.
• Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.
• Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables.
• This is an individual contributor role. Deliver tasks with minimal supervision.
• Strong communication skills.

Requirements

• Degree in IT or related field, with at least 5 years in information security, especially in the application security space.
• Professional security certifications (CISSP, CSSLP, CEH etc) preferred.
• Experience in security products POC and RFQ.
• Prior experience in implementing and maintaining any of tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM etc. and/or network security. Able to review firewall requests.
• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.
• Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience preferred.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc.
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions (both applications and infrastructure) are developed and designed with security inbuilt.

Key Responsibilities

•Provide security consultancy, technical guidance, expertise, solutioning and education for en-terprise.

•Advise application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

•Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

•Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

•Perform threat modelling on security critical applications. Keep up to date on emerging secu-rity threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews and audits to ensure security assurance is achieved.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables. This is an individual contributor role. Strong communication skills.

Requirements

•Degree in IT or related fields, with at least 5 years in information security, especially in the application security space.

•Professional security certifications (CISSP, CSSLP, CEH, CCSP etc) preferred.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.

•Strong in-depth working knowledge in secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), Software Compo-sition Analysis (SCA).

•Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud technolo-gies. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

•Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc. Any prior vulnerability management experience preferred.

•Strong oral, written, presentation and inter-personal skills.

•Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

Key responsibilities:

1. Working with the Asia Pacific General Counsel on non-trading and shipping matters including investments, merger and acquisitions, financing (including prepayments), other corporate and regulatory matters; 
2. Providing day to day support in relation to non-trading and shipping matters such as guarantees, non-disclosure agreements, etc;
3. Working with and managing external counsel in connection with all non-trading and shipping related contentious and non-contentious matters; and
4. Working closely with the Compliance team including in connection with the drafting and negotiation of sanctions, anti-corruption provisions and regulatory matters.

Responsibilities:

• Provide legal counseling and guidance on compliance matters within a multinational company (MNC).
• Develop and implement compliance programs and policies in accordance with applicable laws and regulations.
• Monitor and assess compliance risks and ensure measures are in place to mitigate those risks.
• Conduct compliance training and awareness programs for employees.
• Review, draft, and negotiate contracts and agreements with compliance considerations.
• Stay updated on changes in laws and regulations related to compliance.
• Collaborate with internal stakeholders to ensure compliance in business operations.
• Handle compliance investigations and assist in resolving compliance issues.
• Ensure adherence to internal policies and procedures.
• Prepare and submit compliance reports to senior management.

• Law degree from a recognized university.
• Minimum 5 years of experience as a legal counsel with a focus on compliance.
• Solid knowledge of relevant laws, regulations, and industry practices.
• Experience in developing and implementing compliance programs.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.
• Ability to work independently and collaborate with cross-functional teams.
• Attention to detail and strong organizational skills.
• Proficiency in legal research and analysis.

Interested candidates who wish to apply for the advertised position, please send in your resume to [email protected].

EA License No: 13C6305

Reg. No.: R24120209

For candidate who applied for the advertised position is deemed to have consented to us that we may collect, use or disclose your personal information for purpose in connection with the services provided by us.

A. Overall Purpose of The Job

The primary role of the Infrastructure Security Engineer is to support our security technologies to ensure smooth daily operation and its maintenance. This includes project delivery and subsequent refresh program for all the in-scope security devices.

B. Key Responsibilities

● Provide expert guidance and oversight in the day-to-day administration of various security tools, including Crowdstrike EDR, Netskope SWG, CyberArk PIM/PAM, and others.

● Take a sme role in building, implementing, and maintaining the CyberArk PIM/PAM solution within the Organization environment, ensuring the smooth operation of CyberArk PAM/PIM activities on a daily basis.

● Proactively identify issues and suggest potential solutions in operations.

● Manage and execute maintenance tasks, system upgrades, and the implementation of service packs, patches, hot fixes, and security configurations.

● Lead in-depth investigations into complex technical issues, collaborating closely with vendors until resolutions are achieved, and delivering comprehensive Root Cause Analyses (RCAs).

● Collaborate effectively with Server/Network/DB/App teams to efficiently onboard and configure devices and privileged identities.

● Demonstrate expertise in creating customized reports and dashboards within security tools, tailored to meet specific requirements.

● Maintain and update Standard Operating Procedures (SOPs), security standards, and procedures, ensuring they reflect best practices and the latest security protocols.

● Operate within the established configuration and change management policies to ensure that all changes made to security devices are well-documented, approved, and ultimately successful.

● Play a crucial role in the implementation of new infrastructure security technologies and products at Organization. This includes selecting the most suitable product vendor, conducting Proof of Concepts (POCs), and overseeing the product's implementation in collaboration with a preferred Systems Integrator (SI) partner.

C. Job Profile

Required Skills and Knowledge

● 7-8 years of valid experience in Infrastructure Security operations and projects

● 5-6 years of hands on experience in CyberArk PIM/PAM

● 3-4 years of hands on experience in any Endpoint Detection & Response and Secure Web Gateway technologies preferably Crowdstrike and Netskope

● Good understanding of Network Technologies, Systems, and Database

● Good understanding of security concepts (e.g., encryption, least privilege, need to know basis access, unauthorised access)

● Strong verbal and written communication skills and ability to work with all levels of management

● Firm understanding of IT Service Management processes and project management (i.e., ITIL and Agile)

● Team player and self-motivated

Required Qualifications

● Certifications in CyberArk Certified Delivery Engineer is preferred

● Cybersecurity certification such as CompTIA Security+ or CEH is an advantage

● University degree in Computer Science or a related field is preferred

- To answer occasional phone calls from public

- Station on Site to attend to feedbacks

- Attend monthly site meeting and prepare minutes of meeting

- Need to do site administration work:

Purchase orders, compilation of Delivery oders, Workers attendance and Work pass and safety course attendance

- Minimum 2 Years experience in public relations service or hospitalities and tourism field

- 5-Day work week

Site Office Location:

Ang Mo Kio Industrial Park 2

50 metres walking distance from Ang Mo Kio Ave 1

Bus Stop No: 54101

Job Objectives:

Tasked with aiding the Security Manager in safeguarding properties and ensuring the well-being of guests, employees, and the hotel. Supervise all activities of security staff to ensure compliance and proper application of department regulations and hotel policies. Documents all action in the department, including: emergencies, loss, theft, or accident.

Primary Responsibilities

• Manages the Security Department, alongside with Security Manager.
• Oversees the security department and their day to day operations.
• Trains all security personnel in their areas of responsibilities.
• Reviews policies, procedures, and instructions on a regular basis.
• Evaluates possible hazards or threats to security.
• Promotes a safety attitude amongst all employees.
• Ensures safety of persons in the hotel and property assets.
• Reports irregularity in employee or guest behavior.
• Handles loss, damage and accidents.
• Handles, documents, and follows up with necessary persons any accidents occurring in the hotel premises.
• Investigates theft as reported by guest or employee.
• Documents all action in the department, including: emergencies, loss, theft, or accident.
• Participates in weekly department heads meeting in absence of Security Manager - Rooms Division Meeting and any others if requested.
• Secondary liaison for interacting with government officials, ministries, and law enforcement agencies.
• Reviews emergency procedures regularly.
• Delivers security training and promotes awareness within the hotel.
• Performs other duties as assigned by Security Manager.

Job Requirements

• Minimum education of High Vocational diploma in any discipline. Bachelor degree holder have an advantage.
• At least 3 years’ experience in a similar position in security & safety operations.
• Basic knowledge of local laws, investigative methods and fire safety.
• Criminal-free record
• Have good English communication skills both in written and spoken
• Possess professional disposition with good communication and interpersonal skills

Company:

Description:

Marsh McLennan (NYSE: MMC) is the world’s leading professional services firm in the areas of risk, strategy, and people. The Company’s 85,000 colleagues advise clients in 130 countries. With annual revenue of over $20 billion, Marsh McLennan helps clients navigate an increasingly dynamic and complex environment through four market-leading businesses. Marsh provides data-driven risk advisory services and insurance solutions to commercial and consumer clients. Guy Carpenter develops advanced risk, reinsurance and capital strategies that help clients grow profitably and pursue emerging opportunities. Mercer delivers advice and technology-driven solutions that help organizations redefine the world of work, reshape retirement and investment outcomes, and unlock health and wellbeing for a changing workforce. Oliver Wyman serves as a critical strategic, economic and brand advisor to private sector and governmental clients. For more information, visit marshmclennan.com, or follow us on LinkedIn and X.

Mercer Investments provides investment advice and sophisticated implementation and asset management solutions and services to institutional clients such as pension schemes, insurance companies, endowments & foundations and wealth managers. The business has experienced significant growth over recent years and with a strong pipeline of activity, this looks set to continue for the foreseeable future. This growth has involved a huge level of new client on-boarding and has seen the business further enhance its product and service offering and its position in the market.

Marsh McLennan is seeking candidates for the following position based in the Hong, Kong, Singapore or UAE office:

Mercer Investments - Legal Counsel, Asia & Middle East

The Investments division of Mercer seeks an experienced financial services lawyer, preferably with expertise across the Asian and / or Middle Eastern regions.  The role reports to the Chief Investment Solutions Counsel (International) and the successful candidate will assist in advising one of the world’s leading institutional investment advisory and investment solutions providers.  Contract review and management will form a key responsibility of the role.  The firm conducts these activities in a significant number of Asian and Middle Eastern markets, responsibility for which will come within the remit of the chosen candidate.

What can you expect:

• You will be a member of the global Investments Legal Department in Mercer, working closely with regional business leaders, their teams and other stakeholders to provide high quality, effective legal expertise on commercial engagements, contract review and management, cross-border activities and strategic matters.
• A broad role for a mid-level lawyer focusing on complex financial services regulatory matters as well as commercial matters.
• You will manage a dedicated caseload of both transactional and contentious matters relating to the firm’s diversified and growing financial services business in the Asian and Middle Eastern markets.
• You will be joining a global team of friendly, highly skilled, collaborative professionals and have the opportunity for excellent long term career development.

What is in it for you?

• Be challenged to deliver impactful solutions for a large organization and have a direct impact on all colleagues.
• A company with a strong Brand and strong results to match.
• Be part of a truly global team that actively embraces diversity by ever transforming the way we work to be inclusive of all
• Employee Resource Groups, which provide access to leaders, relevant volunteer and mentoring opportunities and interactions with counterparts in industry groups and client organizations.

We will count on you to:

• Provide practical, business-oriented advice on Mercer’s engagements with institutional clients, as well as Mercer’s new service offerings, regulation impacting Mercer’s services, applicable governance requirements and on emerging issues.
• Helping to oversee critical governance programs, including the firm’s third-party provider and new product reviews.
• Supporting the negotiation of new client contracts which cover a range of financial services and products, such as investment research and tools, investment advisory and asset management.
• Being a lead lawyer on major financial services projects, like RFPs and licensing and registration in new markets
• Manage key internal stakeholders such as Sales, Business Development, Client Services, Strategy, Investment Consulting.
• Work closely with Compliance colleagues and with external counsel in relation to the above, where appropriate, to include negotiation and management of costs of external counsel.

What do you need to have:

• Qualification as an attorney/solicitor
• At least three to six years qualified experience as a lawyer dealing with financial services matters, whether in a law firm or in-house setting, with consideration given to regulatory experience
• Understanding of legal and regulatory risks associated with the investments business and legal options required to manage these risks.
• Experience of participating in board meetings and governance committees.
• Excellent prioritizing, multi-tasking, and time management skills
• Ability to take the initiative and work independently; identify areas for enhanced efficiency and issues that go beyond the specific project requested by the internal client.
• Strong communication skills in English with the ability to articulate complex ideas clearly and educate colleagues on key legal and regulatory issues and developments and manage expectations regarding timeframes and project completions. Other regional languages a plus.

What makes you stand out:

• Mastery of the financial services laws of at least one of Singapore, Hong Kong, or the UAE
• Knowledge of the financial services laws of other Asian and Middle Eastern markets
• Unimpeachable integrity and a positive, team-oriented attitude with the ability to work effectively within a small team.

Marsh McLennan is committed to creating a diverse, inclusive, and flexible work environment. We aim to attract and retain the best people and embrace diversity of age, background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law.

Marsh McLennan is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh McLennan colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one “anchor day” per week on which their full team will be together in person.

We are seeking passionate and driven individuals to join our team in one of the fastest-growing PR agencies in the Asia region.

Expectations of a PR Intern

• Work closely with all teams to facilitate basic account service requirements
• Assist in local insight generation and pitch development
• Liaison with 3rd party suppliers
• Research & analysis reports
• Liaison with media
• Update & maintenance of media database
• Press releases/media invites
• Brainstorming of creative ideas for events
• Assist in organizing events, press conferences & product launches

Your main missions and responsibilities will be:

• Rolling out Hotel Management Agreements and Hotel Franchise Agreements based on standard process
• Negotiating with owners and legal advisors of Hotel Management Agreements, and Hotel Franchise Agreements and all related documents
• Preparing and adapting template documents related to the management and franchising of hotels in different legal environments and jurisdictions
• Following-up on related legislation changes with the support of external advisors
• Cooperating with the compliance team in relation to KYC review process for hotel management deals and other related compliance matters
• Providing legal support to management operations teams
• Engaging with external legal counsel to address foreign jurisdiction legal matters (corporate legal requirements, due diligence, registration requirements, etc.)
• Ensuring documents are compliant with Accor Group policies & procedures and maintaining an understanding of the impact of any changes in Accor Group policies, organizational structure, and procedures
• Preparing and implementing branded residences related documentation based on standard process
• Ensuring and implementing due diligence in relation to Hotel Management Agreements and Hotel Franchise Agreements
• Liaising with Accor Group departments in relation to intellectual property matters
• Preparing and implementing technical support documentation regarding hotel development projects
• Liaising with other departments involved in the development and operation of hotels (e.g. IT, Technical, Distribution, Loyalty, Sales etc.)

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions are developed and designed with security inbuilt.

Key Responsibilities

• Provide security consultancy, technical guidance, expertise, solutions, and education for the enterprise.

• Advise IT application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

• Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

• Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

• Advise and review security by design concepts in Cloud platforms such as GCP, AWS or Azure Cloud.

• Advise and review the compliance of integrating security tools and processes into the DevOps pipelines.

• Advice and review the adherence to security requirements for low code platforms.

• Perform threat modeling on security-critical applications. Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews, and audits to ensure security assurance is achieved.

• Manage individual project priorities, deadlines, and deliverables. Any relevant ad-hoc duties.

• Review RFP proposal compliance with security requirements.

• This is an individual contributor role. Strong communication skills are required.

• Note: You could be posted to any subsidiary in the SIA Group.

Requirements

• Degree in IT or related fields, with at least 7 years in information security, especially in the application security space.

• Professional security certifications (CISSP, CSSLP, CEH, CCSP, etc.) preferred.

• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

• Strong in-depth working knowledge of secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), and Software Composition Analysis (SCA).

• Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud platforms, such as AWS and GCP. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

• Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods, etc. Any prior vulnerability management experience is preferred.

• Strong understanding of technologies such as WAF, Anti Bot Protection

• Prior experience in application development and knowledge of the DevOps platform is desired.

• Strong oral, written, presentation and interpersonal skills.

• Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

• Able to work independently and in a team-oriented, collaborative environment.

Company Overview

Kiteworks’ mission is to empower organizations to effectively manage risk in every send, share, receive, and save of sensitive content. To this end, we created a platform that delivers content governance, compliance, and protection to customers. The platform unifies, tracks, controls, and secures sensitive content moving within, into, and out of their organization, significantly improving risk management and ensuring regulatory compliance on all sensitive content communication. Kiteworks is carrying its bold vision forward while maintaining strong profitability and growth. This is a perfect time to join the company as it moved into a high growth phase and there are many opportunities to make a meaningful contribution to its future.

The Role

We are looking for a highly driven, talented, and self-motivated Senior Applications Security Engineer to be part of our growing application security team. You will be part of a team that is up to date on emerging security vulnerabilities and threats, and works toward improving the security of our products and our CI/CD environment and process.

Key Responsibilities:

• Develop automation and security tools to enhance the security posture.
• Research, evaluate, and integrate new security technologies/tools within CI pipelines.
• Perform STRIDE threat modeling before each product release.
• Provide consultation in design and security reviews for new features.
• Conduct product code reviews with a security-focused lens.
• Execute white box security scans and implement system/application hardening measures.
• Document security fixes and support customer service with security advisories.
• Maintain comprehensive documentation and handle CVE filings.
• Analyze reported vulnerabilities, assess risks using CVSS methods, and determine impact.

Job Requirements:

• Bachelor’s or master’s degree in computer science or computer engineering, specializing in cybersecurity.
• at least 2 years of hands-on experience in cybersecurity roles.
• In-depth knowledge of common web application vulnerabilities and mitigation strategies.
• Proven ability to validate and implement security fixes; manage bug bounty reports effectively.

Key Skills and Experiences:

• Demonstrated expertise in integrating security measures into CI/CD pipelines using Jenkins, GitLab, etc.
• Proficiency in executing and interpreting results from SAST and DAST tools.
• Strong background in Linux system hardening and implementing CIS security standards.
• Proficiency in PHP and Python for security-related tasks.
• Hands-on experience with blue team responsibilities like DFIR and security hardening.
• Familiarity with AWS and Azure; additional experience considered advantageous.
• Security certifications (e.g., SANS) are highly valued.

Desired Attributes:

• Exceptional analytical skills coupled with a meticulous problem-solving approach.
• Excellent written and verbal communication skills.
• Proven ability to convey complex technical concepts to diverse audiences.
• Passionate about Kitework’s domain and mission.

Compensation/Perks

You will be rewarded with a competitive compensation package, including excellent benefits and stock options. Other benefits include: medical, dental, and 18-21 days annual leave

• Support on financing transactions, including general corporate banking finance work, syndicated and bilateral credit facilities, global financing, corporate lending (secured or unsecured), sustainability linked and green financing, syndicated financing and structured financing.
• Support (inception/negotiation/litigation) on trade finance transactions, documents and instruments, including bank guarantees, opening, discounting and negotiation of LCs, SBLC’s, BoE and other trade finance instruments, master discounting agreements, silent confirmation agreements, repo-financing agreements, factoring programs, securitization program and supply chain financing.
• Pre-export financings, prepayments, advanced payment facilities, documentary credits, limited recourse discounting agreements, CMAs, SMAs, credit insurance.
• Knowledge of UCP600, ISP98 and URDG758.
• Knowledge of financial securities regulation including trading in FX and fixed income (cash and/or derivatives, i.e., forwards, NDFs, bonds, repo’s, options).
• Knowledge of EMIR regulation and related documents.
• ISDAs and related documentation.
• Experience/ knowledge of derivatives and/or carbon trading and financing would be a plus.
• Sustainability/carbon solutions: Availability to be involved in sustainability-related matters and projects, including transactions negotiated by carbon solutions platform.
• Ad hoc project or other regional work based on work capacity to assist Global Financing, Sustainability and Carbon Team.

• Manage the use of external law firms and related costs.

[What you will be working on]

In addition to your teaching duties, you will carry out industry or consultancy projects to help you remain relevant in your profession and to evolving changes in industry, and maintain strong linkages with industry and schools. You will also have the opportunity to have industry attachments or experience on a regular basis to update your skills, knowledge and practices of your profession.

- Design, develop and deliver relevant course materials in On-Premise and Cloud based Networking, System Administration, IT Security, Digital Forensics, Cyber Security, Security Penetration Testing & Operations and Programming

- Facilitate e-learning, enrichment and other self-directed learning.

- Supervise students in project works, competitions, and internship.

- Handle other academic-related duties and administration.

- Be involved in student development and mentoring, outreach programmes and community works.

- Engage in relevant research activities for lifelong professional development purpose.

[What we are looking for]

You should have at least 3 years of relevant experience in Computer Science, Information Systems, or Information Security, and preferably relevant work experience in the security industry.

- Passion for teaching and student development.

- Knowledge in

• networking concepts such as router, switches, wireless access points etc.

• operating systems such as Windows Servers, Linux, Mac etc.

• security concepts such as firewall, VPN, IDS/IPS, Antivirus, SIEM, IAM, web/app security etc.

• working in virtualized environment such as Hyper-V, VMWare, VirtualBox, Xen, KVM etc.

• Knowledge in programming / scripting languages such as Java, Python, C# etc.

- Aptitude to learn new technologies in the security suite.

- Professional certifications such as CCNA/CCNP, MCSE/MCSD, CEH/CHFI, CISSP/CISA, OSCP, Cloud Certifications (AWS/Google/Azure), will be an added advantage.

Those with good and relevant experience can look forward to Senior Lecturer or equivalent positions, with career development opportunities to leadership positions in the Colleges or Headquarters.

Applicants may check their application status at the end of 8 weeks from the closing date of this job posting.

[What you will be working on]

In addition to your teaching duties, you will carry out industry or consultancy projects to help you remain relevant in your profession and to evolving changes in industry, and maintain strong linkages with industry and schools. You will also have the opportunity to have industry attachments or experience on a regular basis to update your skills, knowledge and practices of your profession.

- Design, develop and deliver relevant course materials in On-Premise and Cloud based Networking, System Administration, IT Security, Digital Forensics, Cyber Security, Security Penetration Testing & Operations and Programming

- Facilitate e-learning, enrichment and other self-directed learning.

- Supervise students in project works, competitions, and internship.

- Handle other academic-related duties and administration.

- Be involved in student development and mentoring, outreach programmes and community works.

- Engage in relevant research activities for lifelong professional development purpose.

[What we are looking for]

- You should have at least 3 years of relevant experience in Computer Science, Information Systems, or Information Security, and preferably relevant work experience in the security industry. 

- Passion for teaching and student development. 

- Knowledge in 
• networking concepts such as router, switches, wireless access points etc. 
• operating systems such as Windows Servers, Linux, Mac etc. 
• security concepts such as firewall, VPN, IDS/IPS, Antivirus, SIEM, IAM, web/app security etc. 
• working in virtualized environment such as Hyper-V, VMWare, VirtualBox, Xen, KVM etc. 
• Knowledge in programming / scripting languages such as Java, Python, C# etc. 

- Aptitude to learn new technologies in the security suite. 

- Professional certifications such as CCNA/CCNP, MCSE/MCSD, CEH/CHFI, CISSP/CISA, OSCP, Cloud Certifications (AWS/Google/Azure), will be an added advantage.

Those with good and relevant experience can look forward to Senior Lecturer or equivalent positions, with career development opportunities to leadership positions in the Colleges or Headquarters. 

Applicants may check their application status at the end of 8 weeks from the closing date of this job posting.

[What you will be working on]

In addition to your teaching duties, you will carry out industry or consultancy projects to help you remain relevant in your profession and to evolving changes in industry, and maintain strong linkages with industry and schools. You will also have the opportunity to have industry attachments or experience on a regular basis to update your skills, knowledge and practices of your profession.

[What we are looking for]

You should have at least 3 years of relevant work experience in the electronics security industry dealing with Device-to-System or System-to-System integration.

You should have good knowledge and skills in at least two or more of the following areas:

- Design and development of security systems using Python, C/C++ on Windows, Linux or Mobile (Android / IoS) platforms.
- Design, install, configure, test and maintain Integrated Security Systems comprising video surveillance, access control and intrusion detection components.
- Experience in deploying video analytics solutions such as facial / license plate recognition, crowding, detecting abnormal traffic conditions etc using machine learning / deep learning technologies.
- Experience in designing, setting up and operating of a Security Command Centre
- Good understanding of networking, TCP/IP connectivity and general cybersecurity practices to ensure a smooth implementation of security projects.
- Provide theory and practical hands-on technical training of security system products for end users.
- Professional certifications and experience in deploying automation solutions for security system/operations will be an added advantage.

Those with good and relevant experience can look forward to Senior Lecturer or equivalent positions, with career development opportunities to leadership positions in the Colleges or Headquarters.

Applicants may check their application status at the end of 8 weeks from the closing date of this job posting.

Job Summary

Thales is seeking suitable candidate for the position of Engineer (System Security).

You will be looking after the governance of the infrastructure and systems for mission-critical Command and Control (C2) system that Thales Solutions Asia (TSA) have developed for government agency. You will be part of a team to manage the security of system, to ensure the system adhere to the security policies, and is well protected from any threats, risks or exploits.

Job Duties

Provide security expertise and management services to support Authority in activities such as:

• Internal / external audits (IM8, Cybersecurity, etc)
• Policies compliance (IM8, Cybersecurity, etc), work with vendor on:
• Disaster Recovery (DR) and Business Continuity Planning (BCP):
• ICT/Threat Risk Assessments (TRA)
• Monthly reviews of privileged accounts and non-privileged account, disable inactive accounts
• Seek security waivers (IM8, Cybersecurity Act, Circulars etc)
• Circulate security notifications/alerts to vendors and ensure status updates too all stakeholders including cybersecurity centre
• Security monitoring/tracking:

-     Monitor alerts from SOC

-     Update stakeholders regarding SOC alerts

-     Review compliance reports with vendors to ensure that system is compliant

-     Manage, track and update any security incidents/ issues to all stakeholders

-     Review Incident Report (if any)

• Patching:

-     Ensure patches are tested and verified before seeking approval for patching downtime

-     Communicate system downtime to all stakeholders

-     Ensure system availability after patching is completed

• Obsolescence management for software licenses, hardware, operating systems and certificates
• Security enhancement/ integration
• Support the submission of security clearance for related vendors
• Perform other related duties as assigned or requested

Job Requirements

• Working hours will be 0830 hrs to 1800 hrs (for Monday to Thursday) and 0830 hrs to 1730hrs (for Friday), excluding weekends and Public Holidays
• Outside of working hours, to provide online support via emails and group chats when required based on the priority and severity of issues related to the system
• Able to cope in a highly pressured fast-paced environment
• Prior working experience in cyber security and vulnerability management is preferred
• Strong knowledge of security principles, best practices, and industry standards, such as NIST, ISO 27001, and CIS Critical Security Controls
• Able to understand security posture of systems
• Prior working experience in Project Management is a plus point
• Able to understand the system and software architecture, and user operations environment
• Willingness to pick up any new technologies

Education

Diploma or Bachelor’s Degree in Cybersecurity/ InfoSec/ Information Technology / Information Systems / Business IT or its equivalent

Relevant professional certifications, such as CISSP, CISM, CEH, or other security certifications

Experience

Minimally 3-5 years of experience in cybersecurity and supporting mission critical systems with very stringent SLA e.g. 99.9%

Well-versed in cybersecurity best practices and establishing of its policies

Well-versed in IT Service Management (ITSM) standards, processes, guidelines and best practices

The Legal Manager will be based in Singapore and responsible for providing legal support for a variety of issues in customer contract negotiations, researching and enabling the launch of new products and services as well as regulatory and trade compliance support. The incumbent will be reporting to the Legal Director, Asia Pacific. He/she is expected to take on a broad and interesting range of legal matters and thus, a strong foundation in either a local or international law firm will be looked upon favorably.

Roles & Responsibilities:

• Reviewing and providing legal support for customer contracts throughout the Asia Pacific region
• Resolving disputes arising from customer contracts
• Advising on international trade and regulatory compliance matters
• Conducting legal research to enable the launch of new products and services
• Drafting and review legal commercial contracts and document
• Supervising outside law firms used by UPS
• Supervising junior Legal Department staff

Job Requirements:

• Possess a recognized Law Degree i.e. LLM or JD
• Minimum 4 years of relevant legal experience in law firm and/or in corporate legal department
• Candidates who possess relevant experience without Asia Pacific exposure will be considered as well.
• Possess advanced drafting skills in corporate and/or litigation matters.
• Ability to manage projects independently within minimal supervision in matrix company organization.
• Possess good planning, organizational and time management skills.
• Excellent communication and interpersonal skills and able to interact with different levels of people.
• Matured personality with strong professionalism and long-term view towards career development
• Fluent in English and preferably one other Asian language i.e. Mandarin, Japanese, Korean or etc.
• Business traveling opportunities will be available.

NAVIATAIRE AIRLINE IT LEGAL SUPPORT APAC AND META
Manage legal support for Navitaire Airline IT for entire APAC and META markets in order to enable sales teams achieving their financial, strategic and operational objectives by providing solution-oriented, responsive and commercially-practical legal advice, while containing legal risks and exposure to the maximum extent possible. Where negotiation of certain positions is required, properly identifying the risks involved and internal approvals required. Drafting, negotiating and interpreting a wide variety of commercial issues and technology contracts agreements with airline customers, varying in nature, complexity and value, and work on all phases of deals, ranging from the proposal/bid review stages, right through to final negotiation, escalation to senior leadership and dealing with any post signature issues, claims and litigation. 

STRATEGIC IMPLEMENTATION AND ACCOUNT MANAGEMENT

• Work closely as a strategic and trusted business partner with and as part of the Navitaire business units' leadership team in APAC and META, and with Amadeus Airline IT leadership in China, identifying, analyzing and taking action to implement commercial strategies while managing legal and risk-related issues which may impact the performance and the reputation of the business lines.

•  Identify legal and compliance risks and advise on the implementation of risk-management strategies using strong thought leadership and support the business in managing them.

• Manage efficient and constructive legal support for customer negotiations and BAU service mode, act as escalation point and where necessary ensure informed and relevant escalation to Senior Management

• Oversee and manage any potential litigations in relation to any Airline IT accounts

POLICY IMPLEMENTATION

• Serve as primary point of contact to Navitaire BU on a global basis for data privacy matters. Engage and collaborate with LEG data privacy SME colleagues as appropriate.

• Implement and monitor compliance with global contracting policies, procedures, contract management tools and training on a variety of legal and contract matters, including to support risk management.

• Contribute to the preparation of contract templates for Airline IT unit that reflect latest policies, legal developments and best practices.

• Implement appropriate training for legal team members as well as commercial representatives (including Regional Heads).

• Contribute to the business strategy using specialist knowledge and experience, helping to define and shape how strategic, complex and business critical contracts are structured. 

DEPARTMENT MANAGEMENT

• Assess resourcing requirements in the APAC and META regions, including China, in close cooperation with the ACU BUs, ensuring level of support is appropriate and planned.

• Understand and continuously improve business performance through the integration of people, departments and processes.

• Identify and organise training to ensure that team members are empowered and engaged.

About ideal candidate:

• University Degree in Law (eg. JD, LLB, LLM) and Legal Qualification to practice as a lawyer (preferably in a common law jurisdiction).

• Senior professional with at least 8 years of post-qualification experience in private practice and/or in-house position in a multinational corporation.

• Experience in: solid experience in IT/SaaS/outsourcing agreements, as well as knowledge of data privacy issues. 

• High quality training in a common-law jurisdiction strongly preferred.

• Experience working within China or familiarity with Chinese law highly desirable.

• We require a seasoned (lead) negotiator (preferably on the IT vendor side) who knows how to balance between commercial and legal stakes. 

• Strong commercial outlook and great client care skills 

• Must have a strategic as well as legal approach to the law and like working in a fast paced, innovative environment.

#LIAPAC24

Diversity & Inclusion

We are an Equal Opportunity Employer and seek to hire the best candidate regardless of age, beliefs, disability, ethnicity, gender or sexual orientation.