Your Career

As a SASE SE Specialist for network security transformation, you provide technical expertise and guidance in customers' network security transformation and zero trust journey.  You will be key in defining technical solutions that secure a customer’s key business imperatives. 

As the CASB/DLP expert within our SASE team you will be responsible for expanding our CASB/DLP footprint in JAPAC. You evangelize our industry leadership in on-prem, cloud, and security services that establish Palo Alto Networks as a customer’s cybersecurity partner.

Your Impact

• Collaborate with sales teams to recommend and develop customer solutions on network transformation with SSE & CASB/DLP.

• Present to customers as our expert at all levels in the customer hierarchy, from practitioner to senior leadership.

• Lead and support customer demonstrations that showcase our unique value proposition.

• Responsible for prospective customers and partners' Technical Validation projects based on best practices to ensure technical win in assigned opportunities.

• Architect CASB/DLP & SSE solutions that will help our customers strengthen to transform their network and simplify their security posture

• Document high-level design and key use cases to ensure proper implementation and value realization of Palo Alto Networks solutions

• Lead conversations about industry trends and emerging changes to the network & security landscape.

• Responsible for discussing and highlighting product alignment with customer requirements and differentiation

• As the main technical point of contact for CASB/DLP & SSE, you will assist and collaborate to respond effectively to RFIs/RFPs.

• Position Palo Alto Networks or Partner delivered services as appropriate to ensure proper implementation and value realization of Palo Alto Networks solutions

• Discuss, with credibility, competitive offers in the marketplace and position ours as the best alternative

YAP Global is an international public relations and communications consultancy that works with meaningful companies and organisations in the cryptocurrency, decentralised finance (DeFi) and web3 sector to build their brand through impactful storytelling.

Built by a global team of creative storytellers scattered across the globe, who meet up on occasion at French Chateaus and Roman Villas, YAP Global’s mission is to be the bridge between quality journalism and emerging web3 technologies which bring value to the world.

Our diverse portfolio of clients range from decentralised financial organisations, decentralised climate change innovators, digital asset management firms, NFT marketplaces to developer tooling platforms that will underpin the future of web3. We’ve also been media partners for some of the biggest blockchain conferences in the world, including CoinDesk’s Consensus, EthCC in France, ETHDenver and more.

Our collaborative and global team is expanding, and we are looking for an ambitious leader to join us as Senior Account Manager in Singapore.

Key responsibilities:

• Oversee teams of Account Managers (AMs), Senior Account Executives (SAEs) and Account Executives (AEs) for up to 7 client accounts 
• Review strategic communications and PR plans as produced by AMs and SAEs
• Provide counsel to clients based on their business objectives 
• Maintain a pulse on industry trends and help educate the wider team on topics relevant to their clients 
• Develop senior media relationships and managing contacts with key commentators, industry spokespeople and sector influencers
• Coordinate and streamline internal workflows to deliver the best quality service
• Provide support, coaching and development to AMs & SAEs
• Support with hiring by interviewing potential candidates 
• Monitor team performance and support leadership in reaching company goals and KPIs
• Pitch and look for new business opportunities for YAP Global (clients, partnerships & other) 

• Candidate must have the right to work in Singapore
• At least 5 years experience and a proven track record in PR in an agency, or in journalism
• Strong knowledge or experience in the blockchain, crypto or web3 industry
• Relationships with financial, tech and mainstream press
• Strong leadership and interpersonal skills
• Strong news sense and a knack for creative storytelling and strategic thinking
• Willing to communicate with memes
• Keen interest in building relationships with key founders and leaders in the crypto, DeFi and Web3 ecosystem

• Competitive Salary - benchmarked and reviewed biannually
• Annual Holiday Allowance - 25 days, plus public holidays
• Your birthday off, to treat yourself!
• Flexible working - WFH days and flexible hours (standard hours are 9am-6pm)
• Co-working Space - we work two days from the office
• ClassPass membership - use it for gym classes or go for a massage, it's up to you!
• Private Healthcare provided by Cigna
• Social events to connect with your colleagues
• Annual company offsite (last offsite we met at a villa in Rome!) 
• Travel Opportunities - potential to attend key conferences in major global cities
• Ongoing Training & Development 
• Global Team - The opportunity to be part of a team of ambitious, like-minded, driven people from different parts of the world

Responsibilities

• Responsible for day to day in-house security functions
• Patrol assigned areas and address security concerns promptly
• Monitor surveillance equipment and alarms
• Enforce security procedures and protocols
• Conduct traffic control duties

Requirements

• Minimum O levels
• At least 1 year security-related work experience
• Able to speak basic English
• Familiar with security protocols, procedures, and regulations
• Flexibility to work various shifts, including nights, weekends and holidays, as needed

• Experience in doing PowerPoint slides
• Good in Excel (VLOOKUP / pivot table)
• Salary: $4,000

Summary

We are seeking a proactive and efficient Legal Secretary to provide comprehensive administrative and secretarial support to our legal team. This role involves drafting and preparing various documents, managing calendars, handling correspondence, and other administrative duties.

Role and Responsibilities

• Provide secretarial and administrative support to the legal team.
• Draft and prepare various documents, including agreements, letters, and other legal documentation.
• Conduct case searches when necessary.
• File documents in the in-house legal platform.
• Assist with drafting, proofreading, marking-up, printing, and scanning of agreements, letters, and documents.
• Review Charterparties, Addendums, Fixing Notes, etc., against fixture recap and proforma CP.
• Update slot declaration lists and declare newly chartered vessels to insurance brokers.
• Communicate with external vendors regarding their matters and enquiries.
• Liaise with insurers for insurance certificates and assist with queries from other departments as required.
• Perform a variety of secretarial duties, including monitoring payment of invoices (insurance premiums, club invoices, legal invoices), handling calls, managing files/documents, monitoring deadlines, scheduling appointments/meetings, managing calendars, and responding to correspondence/emails/faxes.
• Maintain a positive attitude, willingness to learn, meticulous attention to detail, and the ability to multi-task.
• Work independently and as part of a team, with the flexibility to work overtime if required.
• Perform any other tasks assigned by the counsel or manager.

Requirements

• Minimum 1-2 years of experience as a legal secretary or in a related administrative role.
• Excellent command of English (both written and spoken).
• Proficiency in legal documentation and Microsoft Office applications.
• Good typing speed and accuracy.
• Possess a pleasant and dynamic personality, positive attitude, and the ability to think outside the box.
• Strong attention to detail and the ability to handle multiple tasks simultaneously.
• Ability to work independently and collaboratively as part of a team.
• Willingness to learn and adapt to new challenges.

Interested candidates please apply online or send your latest CV to [email protected]

Kindly note that only shortlisted candidates will be notified.

Triton AI Pte Ltd

Registration Number: R23118389

EA: 21C0661

Solution Sales is on a journey to innovate across ServiceNow’s go-to-market (GTM), delight our customers, and fuel our unparalleled climb to $16B. We are moving fast, and with this rapid scale and dynamic growth we are hiring a strategic sales & GTM leader to drive growth, scale and consistency.  

The BDM Go-to-Market leader will spearhead market success for the Security Business. This role will focus on driving growth strategy, enhancing solution sales capabilities, and orchestrating cross-functional ecosystem efforts to build a robust sales pipeline and capture market opportunities. As a seasoned sales executive, you will apply your expertise to drive business growth in partnership with various cross-functional teams, including sales, specialist sales, product, marketing, partners, and other key stakeholders.  

This role offers a unique opportunity to make a substantial impact on the organization's growth and success. The ideal candidate is a proven sales & GTM leader with the ability to collaborate effectively, foster relationships, and demonstrate a keen intellectual curiosity that builds trust with senior leaders and stakeholders throughout the organization. The candidate must bring a combination of GTM expertise, deep product & market domain knowledge, and sales excellence to drive results.  

Key Responsibilities:  

• Develop and implement a comprehensive business development strategy with a specific focus on transformation initiatives.  Identify potential business opportunities and partnerships to support the company's growth objectives, leveraging market insights and industry trends.  
• Conduct thorough market research and analysis to identify emerging trends and transformational opportunities within the industry.  
• Collaborate with cross-functional teams to define and refine the company's value proposition and develop innovative solutions to address market needs.  
• Build and maintain strong relationships with key stakeholders, including clients, partners, and industry influencers.  
• Evangelize ServiceNow’s Service value proposition for major deals, partnerships, and strategic alliances, ensuring alignment with the company's overall transformation objectives.  
• Provide guidance and mentorship to the sales team, fostering a culture of excellence, collaboration, and continuous improvement.  
• Monitor and analyze market trends, competitive landscape, and customer feedback to inform strategic decision-making and enhance business development efforts.  
• Collaborate with the executive team to define and execute the company's overall growth strategy, incorporating transformational initiatives.  

Broad Function

Oversees technical functionality and provides WH users’ support for security and building systems including but not limited to Integrated Security Management System (ISMS), Electronic Access Control System (EACS), Contractor Management System (CMS), CCTV, Duress Alarms, Intrusion Alarm Protection (IPA), Electronic Key Management System (KMS), and Guard Tour System (GTS). Coordinates with hospital IT-provider Synapxe on cybersecurity compliance and processes, provides oversight to specialist system vendors to ensure established maintenance regime are adhere to, critical systems are operationally ready. Collaborate with WH Users on evolving system requirements, provide technical advice and solutioning that is practical and cost effective.

Key Responsibilities and Duties

Specific

i. Ensure WH security and building systems are always ready to support routine and emergency operations. Able to anticipate, troubleshoot and resolve systems issues.

ii. Coordinate with hospital IT provider, Synapxe to ensure cybersecurity requirements and processes are adhered to. Serves as a bridge between system specialist vendors and Synapxe to minimise, resolve issues over converged network and hardware to ensure all field devices are functional and ready.

iii. Provides technical advice and support to Facilities Management/Operations Support Group (OSG) and other hospital Users on evolving requirements, propose practical options that are cost effective.

iv. Provides oversight on systems maintenance regime by vendors, ensure proper documentation and records keeping. Ensure maintenance contracts are established or renewed on time.

v. Review and provide recommendations on optimising security workflows, deployment, responsiveness to incident management by leveraging on existing and new systems and technology.

General

i. Participate in organisation projects as assigned.

ii. Perform all other tasks as directed by Director of Operations Support Services (OSS), or Director of Operations Support Group (OSG).

Job Requirements

· Recognised University degree or equivalent.

· Minimum 5 years relevant experience in IT, security systems and acute healthcare setting in an executive or managerial role.

· Familiar with setting up and managing full suite of security systems, including technical planning, budgeting, installation, testing, troubleshooting, programming applications and systems setup.

· Familiar with healthcare IT cybersecurity requirements, processes and workflows. Ability to work with multiple stakeholders to meet these requirements and ensure systems readiness and effectiveness are maintained.

· Strong interpersonal skills with eye for detail and high level of initiative.

· Strong leadership skills, excellent communication, and negotiation skills.

· Able to work under stress, make assessment and sound judgement calls with incomplete information.

· Ability to navigate through different interest groups, administrative processes, time, and resource limitations to reach win-win situation.

Others

· Required to be called back to hospital during non-working hours in event of incident or emergency activation.

• Providing legal advice on public procurement related activities and participating in multi-disciplinary task force for public tenders
• Negotiation, drafting, analysis, and review of various commercial agreements (distribution, agency, license, services, etc.) 
• Management of litigation in close cooperation with local lawyers
• Advising the subsidiaries on an occasional basis on a variety of legal matters relating to e.g. competition law, financing solutions, social law and HR matters in order to harmonize good legal practices
• Contribute to elaborate various internal policies and procedures
• Risk management
• Provide training and guidance to the business

• Conform to and enforce policies, procedures & rules, and regulations as laid down by Accor and the Hotel to achieve the highest levels of uniformity and guest service
• Directly report to the Assistant Safety and Security Manager / Safety & Security Manager
• Responsible for maintaining the highest level of security within the Hotel at all times whilst on duty
• Protect all guests’ patrons and employees of their belongings
• Ensure the Hotel’s property is well protected
• Take charge of the Hotel Security during duty hours
• Responsible for securing all hotel properties, staff, and clientele in accordance with the procedures as stipulated in the security manual
• Enforce the Hotel’s Rules and Regulations
• Strive to implement the Accor Vision and demonstrate active use of the Accor Values
• Record details of significant incidents and activities in the logbook during his shifts
• Ensure all Lost and Found properties are recorded in the Security Management System, hand them over (non-valuables) to the Housekeeping Department as soon as possible, and keep the Duty Manager informed
• Maintain a Hotel Logbook on incidents, complaints, etc., and refer them, if required to the appropriate department for follow-up action

• Conform to and enforce policies, procedures & rules, and regulations as laid down by Accor and the Hotel to achieve the highest levels of uniformity and guest service.
• Directly report to the Assistant Safety and Security Manager / Safety & Security Manager.
• Responsible for maintaining the highest level of security within the Hotel at all times while on duty.
• Protect all guests’ patrons and employees of their belongings.
• Ensure the Hotel’s property is well protected.
• Take charge of the Hotel Security during duty hours.
• Responsible for securing all hotel properties, staff, and clientele in accordance with the procedures as stipulated in the security manual.
• Enforce the Hotel’s Rules and Regulations.
• Strive to implement the Accor Vision and demonstrate active use of the Accor Values.
• Record details of significant incidents and activities in the logbook during his shifts.
• Ensure all Lost and Found properties are recorded in the Security Management System, hand them over (non-valuables) to the Housekeeping Department as soon as possible, and keep the Duty Manager informed.
• Maintain a Hotel Logbook on incidents, complaints, etc., and refer them, if required to the appropriate department for follow-up action

Join our global team to help design, implement, improve, and operate our worldwide Internet Breakouts as well as the VPN Services for Bosch Users and partners. Ensure that the security infrastructure deployment and configurations align with industry standards, compliance requirements, and organizational security policies. Provide Level-2/Level-3 Support for our service portfolio, including shared on-call duty (remote). Collaborate closely with our Architects, Engineers, internal customers, partners, and stakeholders. Initiate, manage, and implement changes to our security infrastructure.

Responsibilities:

• Design, implement, and operate worldwide Internet Breakouts and VPN Services for Bosch Users and partners.
• Ensure security infrastructure deployments and configurations comply with industry standards, organizational policies, and compliance requirements.
• Provide Level-2 and Level-3 support for the service portfolio, including participation in shared on-call duty (remote).
• Work closely with Architects, Engineers, internal customers, partners, and stakeholders.
• Initiate, manage, and implement changes to the security infrastructure.

Your Career

The Principal Consultant on the Offensive Security team is focused on assessing and challenging the security posture across a comprehensive portfolio of clients. The individual will utilize a variety of tools developed and act as a key team member in client engagements. They will be the client’s advocate for cybersecurity best practices and will provide strong recommendations in this domain. 

Your Impact

• Conducts periodic scans of networks to find and detect vulnerabilities
• Performs client penetration testing to find any vulnerabilities or weaknesses that might be exploited by a malicious party, using open-source, custom, and commercial testing tools - Red Team experience essential
• Ability to assist in scoping engagements by clearly articulating various penetration approaches and methodologies to audiences ranging from highly technical to executive personnel
• Report generation that clearly communicates testing and assessment details, results, and remediation recommendations to clients
• Develop scripts, tools, and methodologies to automate and streamline internal processes and engagements
• Conducts IT application testing, cybersecurity tool and systems analysis, system and network administration, and systems engineering support for the sustainment of information technology systems (mobile application testing, penetration testing, application, security, and hardware testing)
• Conduct threat hunting and/or compromise assessment engagements to identify active or dormant indicators of compromise (IoCs) using Crypsis and Palo Alto Networks’ threat hunting tools (and/or client owned hunting instrumentation where applicable)
• Assist Leadership in the development of security standards and best practices for the organization and recommend security enhancements as needed
• Able to conduct cyber risk assessments using frameworks or standards like NIST CSF, ISO 27001/2, PCI, CIS Top 20, CMMC, or other industry measurement tools
• Conduct cloud penetration testing engagements to assess specific workloads (i.e., AWS, GCP, Azure, containers, or other PaaS and SaaS instances) for vulnerabilities and subsequently attempt to exploit identified weakness after receiving permission from client stakeholders
• Provide recommendations to clients on specific security measures to monitor and protect sensitive data and systems from infiltration and cyber-attacks including response and recovery of a data security breach
• Ability to perform travel requirements as needed to meet business demands  

As Wise becomes ever more integrated into financial systems around the globe, we are subject to ever increasing scrutiny from regulators, partners and regional stakeholders. If we are successful, we’ll eventually become one of the most heavily regulated companies in the world.

As Regional Information Security Officer for the APAC region, your job will be to represent Wise Security Squad, creating strong partnerships within our APAC legal entities to help reduce Information Security and Technology risk in line with the expectations of the markets in which we operate.

What you will be working on

• Working closely with regional risk, compliance and engineering teams to provide a tailored view of risk to APAC legal entities.
• Leading security responses for regional licence applications, annual certifications, and ad-hoc audits.
• Supporting Group Security Risk assessment process and preparing risk updates for APAC entity committees and boards.
• Evaluating Wise Group Security controls against regional requirements and obligations.
• Supporting our global security security certification process (e.g. ISO27001, PCI-DSS, SOC1 & 2).
• Assisting with other Information Security and Technology risk related activities as needs arise.

• Serve as the lead point of contact for all customer account management matters
• Build and maintain strong, long-lasting client relationships
• Negotiate contracts and close agreements to maximize profits
• Develop trusted advisor relationships with key accounts, customer stakeholders and executive sponsors
• Ensure the timely and successful delivery of our solutions according to customer needs and objectives
• Clearly communicate the progress of monthly/quarterly initiatives to internal and external stakeholders
• Prepare reports on account status
• Collaborate with sales team to identify and grow opportunities within territory
• Assist with challenging client requests or issue escalations as needed

Job Summary:

The Cyber Security Asset Management Services Lead will be responsible for partnering with sales teams and relevant teams to win new business by leading asset discovery engagements and help identify white space opportunity. This person will lead asset management services engagements across a portfolio of customers and will also help shape the strategic direction of the Cyber Security Asset Management (CSAM) practice, building the business and becoming a strategic advisor to our customers and focus on PANW solutions pull- through. The candidate should have prior experience of structuring and selling software Enterprise license agreements (ELAs) and Software as a Service (SaaS) deals leveraging asset base and white space information; enabling sales teams with pipeline generation and value proposition to drive incremental revenues and margins. The ideal candidate should have both a business background that enables them to engage at the CXO level, and technology background that enables them to easily interact with customer’s technology and security teams.  

Key Responsibilities: 

• Partner with Sales, Technical and Services teams to plan and conduct CSAM engagements and contribute to customer relationships

• Provide hands-on, expert level proactive CSAM assessment service to customers and deliver gap analysis and findings to CxO and key stakeholders 

• Assist customers in developing and implementing CSAM strategies, policies, and procedures aligned with best practices and regulatory compliance requirements

• Identify and execute strategies for CSAM service development, enablement and process that result in the identification of white space opportunity and pull through of PANW’s solutions

• Leveraging gap analysis and asset information, collaborate with Sales teams to investigate further use cases in order to identify incremental PANW solution requirements and assist to shape ELA and SaaS value propositions

• Amplify PANW’s ELA buying program offering with customers to help simplify and consolidate their spend across multiple point security solutions and deliver flexibility and agility around software usage

• Understand customer challenges. Pricing and financial modeling to support customer use cases

• Market analysis, requirements development, business case, collateral, strategy, and positioning

• Interact with customers, partners, and sales engineering teams in different forums to gather feedback and evangelize the offerings

• Collaborate with product marketing, technical marketing, sales engineering, and technical support teams to train the field teams, gather feedback

• Drive thought leadership and participate with leading ecosystem and alliance partners to create and offer CSAM services and increase market share. 

Location:         CBD, Singapore

About the Role

The role will focus on delivering timely, efficient and high quality administrative, secretarial and practice group specific services to legal team. Duties will include drafting/preparation of correspondence, formatting of documentation, calendar management, filing, and general administration duties.

Responsibilities:

• Support the legal team by providing secretarial and administrative assistance, including organizing and filing documents using the company’s internal platform.
• Draft, proofread, prepare and check status of various documents such as agreements, letters, and other necessary paperwork.
• Coordinate with external vendors, insurers, and handle departmental queries related to insurance certificates.
• Perform general secretarial duties including monitoring invoice payments, managing files, scheduling appointments and meetings, and responding to correspondence via emails and faxes as required.

• Diploma holder with minimum 1-2 years of working experience as legal secretary or administrative working experience in related field or equivalent.
• Excellent command of English (written & spoken)
• Good proficiency in legal documentation and Microsoft Office applications
• Good typing speed and accuracy
• Possess a pleasant and dynamic personality, positive attitude, willing to learn, meticulous, able to multi-task and willingness to work overtime if required.
• Positive attitude, willing to learn and ability to think out of the box.
• Able to work independently and as part of a team.

Your Career

As a Pre-Sales Systems Engineer, you are an important member of our technical sales team, identifying complex security challenges in your customers’ networks and driving solutions with our market-leading security products and services.

You are the technical sales representative of the company and focus on customer satisfaction with all that you do. You and your sales partner own the customer relationship and your goal is to help them detect and prevent advanced cyberattacks and breaches while safely enabling applications by deploying the full Palo Alto Networks platform so that they can confidently pursue network, cloud, and mobile technology initiatives.

Your Impact

• Understand and effectively present our security platform and solutions
• Work closely with Public Sector customers in Singapore
• Create and deliver compelling demonstrations of Palo Alto Networks products and solutions
• Educate customers and partners on the modern network security landscape
• Identify and qualify new opportunities and support technical pre-sales activities to opportunity closure
• Expand the Palo Alto Networks install base within existing accounts
• Enable and leverage channel partners and work successfully in a channel-driven sales model
• Create evaluation test plans with customers and lead the evaluation process to a successful conclusion
• Differentiate from industry technologies and solution
• Assist customers through the support escalation process
• Continuous self-improvement and learning to maintain current technical knowledge and participate in technical communities of interest
• Identify problems in customer environments - effectively engages customers at the technical field and technical management levels
• Effective in customer-facing engagement, in writing, presentation, and creative problem-solving skills

• Familiar with general accounting principles, financial reporting standards, taxation frameworks

• Good understanding of corporate structure, tax structuring, relatedparty transactions, cross-border transactions

• Experienced in establishing/improving financial processes and management reporting

• Proficient with ERP or accounting systems; Excel, Word, PowerPoint, Visio, SharePoint •

• Proficient in English writing and speaking skills

QUALITIES

• Logical thinker with strong analytical and communication skills

• Detailed oriented with high sensitivity and meticulousness with numbers

• Good team player who is self-driven with initiatives

• Holds high accountability and integrity

• Able to process information and think critically and structurally with good problem solving skills

From Group Finance perspective, assist and support Head, Asia Group Finance in the below:

• Collaborate with Entity Finance Teams in the review and hormonization of accounting standards

• Collaborate with respective Entities in the reviewing and improvement of financial processess and SOPs

• Review and improve the quality of management reporting deliverables

• Involve in the assessments and enhancements of financial software systems; plan and manage projects to automate financial processes, data flow/migration, management reporting and dashboarding

• Collaborate with Entity Finance Teams in the budgeting and forecasting processes

• Provide guidance to Analysts in the review and analysis of financial data/reports

• Initiate and propose any other finance related project

• Assist and support Head, Asia Group Finance in ad-hoc assignments and projects

Relocation Package will be provided

We are seeking a highly skilled Security Engineer with extensive experience in managing, configuring, and upgrading a wide range of security technologies. The ideal candidate will possess strong technical expertise and excellent communication skills. This role requires a proactive individual who can effectively manage security incidents and ensure adherence to security policies and best practices.

Responsibilities:

· Manage, configure, and upgrade a diverse range of security technologies.

· Respond to fault alerts and customer escalations for managed security technologies.

· Troubleshoot product-specific technical issues within SLA, collaborating with internal teams and external vendors to resolve them.

· Escalate incidents and problems within SLA to internal technical teams or external product vendors.

· Prepare and submit incident reports for high-severity incidents.

· Respond to inbound Change Requests (CRs), Service Requests (SRs), and other queries within SLA.

· Perform regular configuration backups on managed security products.

· Plan and coordinate maintenance windows with clients for necessary software patching and version upgrades.

· Create and update technical documentation on managed security technologies.

· Generate monthly reports according to service scope requirements.

· Adhere to organizational and project security policies, procedures, and best practices.

· Serve as the primary point of contact to assist and advise clients on ICT security-related matters.

· Lead and support customers in security incident response and resolution.

· Demonstrate strong teamwork and leadership qualities.

· Maintain a customer-focused approach with excellent interpersonal skills.

· Bachelor’s degree / Polytechnic Diploma in Cyber Security, Computer Science, Information Technology, or Information Systems.

· Minimum of 5 years’ experience in IT infrastructure operation and/or support.

· Strong fundamental knowledge of IP networking (e.g., TCP/IP, routing) and operating systems (e.g., Windows, Linux).

· Excellent critical thinking and problem-solving skills with a passion for information security.

· Fluent in both written and spoken English, with strong interpersonal skills.

You will be part of a well-established international team in Information Security focused on Cloud Security Architecture, Security Tooling Engineering and Automation.  

Your role will contribute to the success of the team and the Company. 

Your key tasks

• Support Cloud & Infrastructure Organization by reviewing and analysing Network, Systems, and Application architectures to enforce and validate Security requirements.
• Leads Threat Model exercises for new services/major changes.
• Actively Collaborate with your team members to support them on daily operations, including: 
  • Review of IT infrastructure solution designs to ensure compliance with policies and standards. 
  • Operational implementation, Automation, and ownership of Security Tools 
  • Assist in deploying automation of operational processes and procedures, identify weaknesses, propose, plan, and deploy improvements to address and enhance the infrastructure design. 
• Support and maintain the APAC’s Information Security Management System (ISMS) to assure continuous compliance with regulations, laws, and contractual obligations by adopting and deploying industry and market standards and accepted best practices.
• Be on routine standby to support the team.

What we seek to accomplish together:

Security, privacy, and operational resilience are critical issues facing all organizations today. We are currently looking for qualified and capable security minded individuals to be the driving force managing security governance throughout the lifecycle of client projects.

You will work as the interface between NCS Application and NCS Corporate HQ-wide cybersecurity leadership and the practice, driving organization-wide cyber security strategy, implementation, and in turn, ensuring client and practice requirements are fed back into the continual improvement of relevant strategy, policies, and standards.

Responsibilities include: 

• Drive the implementation of NCS cybersecurity, data protection, and privacy policies, standards, and processes within the practice. You will work to continually improve the security posture of projects through proactive risk management and the establishment of a broad range of cybersecurity controls.
• Provide direct support to colleagues to ensure cybersecurity is addressed throughout the project delivery lifecycle, from application design, application architecture patterns, testing, vulnerability, and security review.
• Act as a single point of contact and escalation for LOB application cybersecurity incidents, ensuring timely identification, remediation and lessons learned.
• Manage the security SLA governance and provide practice-level cybersecurity reporting, metrics and forecasting to leadership.
• Responsible for information security, data protection, privacy, GRC, and audit requests for the practice, acting as single point of contact on relevant client security assessment and audits execution. For example, independent third-party attestations of industry cybersecurity standards and certifications, such as ISO 27001, CIS Controls, NIST for practice-specific solutions and products
• Contribute to the definition of the client specific security baseline. Consult and advise internal and external clients about security topics and support the opportunity management process by providing subject matter expertise and support
• Help win client business by providing cybersecurity assurance to RFIs, RFPs, proposals, contract drafting, security questionnaires, workshops, and other client due diligence processes.

A little about you: 

• Degree/Diploma or higher in Computer Science, Information Systems or equivalent
• At least one industry recognized security certification is, such as Certified Information Security Management (CISM), Certified Information Systems Security Professional (CISSP), CEH, or CASP.
• 5+ years of experience in information security management specifically in application secured design and patterns (Cloud, Serverless, Containers), application and API security testing methodologies e.g. analysis and recommendation of rectifications using VAPT/WAPT/SAST/DAST/SCA, security architecture, infosec risk management, compliance and audits for Web, Mobile, API, and Cloud Native applications

What we seek to accomplish together:

• and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis.
• compliance with these policies / procedures through ongoing security reviews and audits, not limited to log analysis and security assessment of customer ICT systems
• conduct security risk management exercise
• manage vulnerability assessment
• conduct information security awareness training
• for the development and management of customer’s security response plan. To lead and support customer in the matters of security incident resolution and response.
• of contact to assist and advise customer for ICT security related matters

When you’re part of the team at Thermo Fisher Scientific, you’ll do important work. Surrounded by collaborative colleagues, you’ll have the support and opportunities that only a global leader can give you. Our respected, growing organization has an outstanding strategy for the near term and beyond. Take your place on our strong team, and help us make significant contributions to the world.

The Sr Product Security Researcher, Product Security has global responsibility for the security associated with the company’s Product Security program. They will perform research, testing and validation of a product and its associated platforms, and guide integration of solutions within the overarching CIS program. This includes policy, security awareness & education, application and vulnerability assessments, technological security controls and risk evaluation. The solutioning activities must support relevant Thermo Fisher products (such as instruments, devices, equipment, and other electronic and/or connected devices) and infrastructure.

Key Responsibilities:

• Work closely with key product development leaders to ensure security is incorporated in all product offerings.
• Support efforts to inject security into all levels of the product development process.
• Drive secure development and integration of security features into all phases of product, firmware and software design and development.
• Lead programs to ensure continuous development and improvement of security integration into the product development lifecycle.
• Partner with architecture and development teams to develop shared security frameworks to enable consistent application of secure coding standard methodologies across the enterprise.
• Build working relationships with product development partners to maintain and improve product and application security processes.
• Assist to maturing process, policy, and standards guidance.
• Educate key partners on program, risks, and importance of security in our products and environment.
• Work with business units to identify, collect, call out, and close security vulnerabilities found in Thermo Fisher products and infrastructure; Leverage tools to deliver vulnerability information back to the development organization for remediation.
• Mentor others in what constitutes secure product activities.
• Perform research activities on existing and in development products and/or infrastructure to resolve security capabilities and discover unknown risks.
• Build testing approaches and perform testing activities on products and/or infrastructure to resolve vulnerabilities, validate remediation, and reduce overall risk profiles.
• Proactively ensure that applicable regulatory mandates are addressed with appropriate controls.
• Coordinate/participate in and perform design reviews, peer reviews, and code reviews.
• Ensure excellent consistency, documentation, and process across all programs.
• Coordinate with security risk assessments for new and existing products through the risk assessment team.
• Collaborate with other groups (e.g., Risk Management, Internal Audit, HR, Legal, etc.) to direct compliance issues to appropriate existing channels for investigation and resolution.
• Creation of product whitepapers throughout the product lifecycle.
• Creation of security bulletins to address new or evolving threats to products and infrastructure.
• Travel up to 25% and on-call/after hours duties may be required.
• 
  

Minimum Requirements/Qualifications:

• Deep knowledge of IoT and digital device research methods, variables and parameters including analysis, testing and documentation.
• Deep understanding of cryptography, authentication, authorization, network security protocols, and application security.
• Solid understanding of how to connect new and changing threats to IoT portfolio to build mitigating or compensating activities.
• Strong exposure to popular application security standards including OWASP TOP 10, CSC 20 etc.
• Bachelor’s Degree in Information Assurance, Information Security, Management Information Systems, Risk Management, or Computer Science (Master’s Degree a plus) or equivalent field experience.
• Relevant technical certificates a plus (OSCP, SANS, GIAC, etc).
• 5+ years of related work experience with security consulting, product security, secure software development, risk assessment, and/or vulnerability management.
• Solid interpersonal and documentation skills are a must.
• Ability to explain and promote technical concepts.
• Solid attention to detail, organizational skills.
• Strong customer service skills required.
• Excellent verbal and written communication skills and the ability to communicate professionally with a diverse group, executives, managers, and domain experts.
• The ideal candidate will have hands on experience in one or more of the following areas: Hardware System Integration, Signal and Power Integrity, RF Systems, Wi-Fi, Bluetooth, Wireless Communications, TCP/IP, Network and Application Penetration Testing.

Benefits

We offer competitive remuneration, annual incentive plan bonus, healthcare, and a range of employee benefits. Thermo Fisher Scientific offers employment with an innovative, forward-thinking organization, and outstanding career and development prospects. We offer an exciting company culture that stands for integrity, intensity, involvement, and innovation!

• Provide general legal advice and contract drafting/review support to Bosch legal entities and business units in Vietnam, including business licence and corporate compliance requirements.
• Identify and manage legal risks, litigation and disputes, including debt recovery matters.
• Provide internal training on legal and compliance matters.
• Draft and negotiate Vietnamese/global long term supply/purchasing contracts, distribution agreements, software implementation agreements, product trial agreements, etc.
• Instruct and liaise with external counsel and corporate secretarial service providers; manage services providers and related costs.
• Manage projects and undertake other duties as assigned by the General Counsel SEA, including providing legal support to business units in other South East Asian countries from time to time.

• Perm
• At least 8 years of experience in managing security for On-Prem Infrastructure and 5 years+ in DevSecOps/SecOps with Cloud environments (IaaS/PaaS/SaaS)
• Experienced in building an internal SOC team and/or managing MSSP.
• Strong communicator and experienced working with C-suite / senior management stakeholders.

Job Description

Cybersecurity Leadership and Risk Management

• Lead overall cybersecurity strategy, risk management, and incident response.
• Provide leadership to the enterprise’s information security organization.
• Collaborate with business stakeholders to raise awareness of risk management concerns.
• Assist in business technology planning, offering current knowledge and future vision of technology and systems.
• Regularly communicate at the executive/company level on global cybersecurity matters.

Governance / Audit / Risk / Compliance Management

• Lead, conduct, and liaise with internal and external auditors for periodic IT/security audits.
• Formalize risk management for business and IT through risk assessments.
• Propose investments in solutions to mitigate risks.
• Facilitate risk assessment and management processes with business units.
• Ensure compliance with local and global IT/cybersecurity regulations for shore offices, cloud environments, and vessels.

Project Initiatives

• Continuously survey and identify security gaps in infrastructure, cloud, and vessels.
• Propose and manage timelines, budgets, and scopes for IT security projects.
• Collaborate with stakeholders (internal/external) to enhance the company’s overall IT security posture using solutions like Bitsight, Watchtower, CSA, etc.
• Analyze risks and impacts during the implementation of new technologies.

Operations

• Own, develop, implement, and monitor a comprehensive enterprise information security and IT risk management program. This program should cover on-premises, cloud, and vessels globally across the group of subsidiaries.
• Drive ongoing cybersecurity awareness programs and campaigns (e.g., phishing, USB attacks) to enhance users’ awareness.
• Develop and enhance an information security management framework for the organization.
• Incident Response: Assume overall responsibility for incident response related to cyberattacks.
• BCP Initiatives: Collaborate with external vendors and internal IT management to design, develop, and implement cyber-related IT business continuity planning (BCP) initiatives (e.g., incident response, alternative workplace solutions, and strategies).

• Degree or Master’s Degree in a technology and/or cybersecurity related field required.
• Professional security management certification (CRISC, CISSP, CISM, & CISA, Qualified Information Security Professional, Certified Ethical Hacker, etc).
• Excellent written and verbal communication skills and high level of personal integrity.
• Excellent experience working and presenting to C-suite executives on cyber initiatives.
• Innovative thinking with strong people engagement skills with an ability to lead and motivate crossfunctional, interdisciplinary teams.
• Experience with contract and vendor negotiations and management including managed services.
• Experienced with working in organization that does in-house cloud native software development.
• Experience with security standards / processes in a Cloud computing/Elastic computing environment, especially in Azure.
• Strong business acumen required to comprehend and evaluate business scenarios, make informed decisions, and take the necessary steps to achieve the organization's goals. However, having experience in the shipping industry is not a requirement.
• Min. 8 years or more experience managing security for On-Prem Infrastructure and at least 5 years (DevSecOps/SecOps) with Cloud environments/instances (IaaS, PaaS & SaaS).
• Minimum of 8 to 10 years of experience in a combination of risk management, information security.
• Min. 5 years or more hands-on experience in evaluating, selecting, designing, and implementing various security processes, policies, and solutions.
• Experienced in building an internal SOC team and/or managing MSSP.
• Familiar with various data privacy and cybersecurity framework (e.g. NIST, ISO 27001/27002, SOC2, GDPR, OWASP, Mitre, etc). Experienced with BIMCO is a plus.
• Proficient with implementing and managing advanced and/or automated security solutions (e.g. IDS/IPS ,EDR/XDR, DLP, PIM/PAM, SIEM, SOAR, SASE, SWG, BAS, ..)
• Experienced with implementing various cybersecurity architecture, e.g. OSI, Zero Trust Architecture, etc across Cloud and on Prem environments, including Azure / AWS.

Triton AI Pte Ltd
Registration Number: R1980724
EA: 21C0661

• Perm
• Bonus
• Medical & Insurance Coverage
• Hybird Work Arrangements

Main responsibilities of the Intern:

- Participate in regular know-how and training sessions and meetings with internal clients and/or external business partners;

- Acquire familiarization with the legal organization policies and central directives of Bosch in SEA;

- Provide support on the review and drafting of simple contracts (such as Non-Disclosure and/or Tenancy Agreements) and internal guidelines and standards;

- Assist with an assortment of organizational matters (such as legal department reporting, filing, organization of precedent database);

- Conduct research on laws in SEA;

- Preparation and presentation of researched topics in MS PPT.