• Bachelor’s degree in Computer Science, Information Security, or related field.

• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.

• Excellent communication skills and the ability to collaborate with diverse teams.

• Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.

• Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.

• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services

• Good knowledge in security

• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.

• Proficient in security concepts related to infrastructure as code (IaC) and containerisation.

• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Job Description

You will be a member of the Group Information Security Team responsible for ensuring corporate applications, systems, networks, and digital assets are adequately protected and mitigated against cyber threats and risks. You will help drive cybersecurity and risk management efforts and user awareness and education within the Singapore Airlines Group.

Key Responsibilities include:

• Provide cyber governance and risk management oversight.
• Manage the security policy framework and relevant standards.
• Oversee applicable security, regulatory, privacy, contractual cyber requirements.
• Manage cyber risk analysis and self-assessments program for various information services, systems, processes and recognized industry standards.
• Conduct risk assessments, document results, and propose and track remediation tasks.
• Develop compliance program top routinely assess existing infrastructure, systems, and applications for compliance and vulnerabilities and propose relevant mitigating controls.
• Conduct vulnerability assessments and track remediation status of identified vulnerabilities.
• Identify and assess cyber risks and recommend and drive cyber security solution and initiatives to improve cyber security posture.
• Define controls to meet regulatory, legislative, and industry specific compliance requirements.
• Manage third party cyber risk assessment standards.
• Prepare IT security related KPI reports and management reports for compliance monitoring and reporting.
• Drive the implementation of GRC tool.
• Maintain user cyber awareness and provide security advisory on emerging security threats and vulnerabilities.
• Develop, review and continuously improve IT security training material and conduct user training to improve user awareness and incident response readiness.
• This role may be seconded to any of SIA’s subsidiary group

Requirements

• Degree in IT or related fields, with 4-5 years relevant information security working experience, especially in the application security space.
• Professional security certifications (CISSP, CISA, CEH etc) preferred.
• Experience with Governance, Risk and Compliance (GRC) activities.
• Familiar with PCI, PDPA, GDPR requirements
• Experience in security technologies, practices, application/network/systems architecture and design, tests tools and processes.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Key Responsibilities:

• Develop and implement advanced cyber security architectures and solutions.
• Analyze and evaluate system security requirements to design secure networks.
• Collaborate with cross-functional teams to integrate security practices into all facets of the business.
• Conduct risk assessments and provide recommendations for enhancing system security.
• Stay updated with the latest cyber security threats and technologies.
• Develop technical solutions and tools to help mitigate security vulnerabilities.
• Provide technical guidance and support to other team members.
• Document and maintain records of security architectures and processes.

MUST HAVE:

• Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or related field.
• Advanced degrees (Master’s, PhD) or professional certifications (CISSP, CISM, CEH, etc.) in cyber security are highly desirable. Minimum of 3-5 years of experience in a cyber security architect or engineering role.
• Proven experience in designing and implementing secure network architectures.
• Strong background in network security, system security, and cloud security.
• Experience with common cyber security tools, standards, and protocols.
• Familiarity with industrial control systems and operational technology (OT) security is a plus.

WE VALUE:

• Strong technical skills in network and system security.
• Knowledge of current cyber security trends and threats.
• Excellent problem-solving and analytical abilities.
• Proficient in security technologies such as firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, etc.
• Good communication and collaboration skills.
• Ability to work independently and as part of a team.

Job Description Summary

Has end-to-end responsibility for relationship management, account growth and profitability. Creates, maintains, and develops deep customer relationships and bring 'the best of Kyndryl' to credibly build and maintain valued CxO customer relationships. Drives proactive account growth with focus on selling new offerings and minimizing erosion in renewals.

Has end-to-end responsibility for relationship management, account growth and profitability. Creates, maintains, and develops deep customer relationships and bring 'the best of Kyndryl' to credibly build and maintain valued CxO customer relationships. Drives proactive account growth with focus on selling new offerings and minimizing erosion in renewals.

This person will serve as the Customer Partner for our key Invest Accounts in Singapore Public Sector and will lead a small team of professionals.

Customer Success

· Create, maintain, and develop deep customer relationships and bring 'the best
of Kyndryl' to credibly build and maintain valued CxO customer relationships; create referenceable customers.

· Senior advisor to customer; differentiate Kyndryl based on our unique value
and through making full use of our ecosystem.

· Responsible for contract execution and operational excellence for led accounts, including customer Net Promoter Score/Customer Satisfaction and relationship
& team building activities for customer / employee satisfaction.

· Day to day Account Mgmt and delivery to be managed by the Delivery Partner

Commercial Success

· Responsible to drive profitable growth leading with a consultative approach and Kyndryl Consult. Responsible for lead generation through to closure, driving new scope and value, and minimizing erosion in our ongoing business and renewals.

· Conceptualize and execute strong “win strategy” to convert new scope deals
for targeted accounts.

· Deliver on budget, owning revenue, profit/loss, and growth objectives
(opportunity identification and ownership) for existing customer accounts led

· Ensues account profitability, leading operating margin improvement of existing business while generating profitable growth. Increases utilisation and billability of resources assigned to their account.

Distinctive Expertise

· Build deep industry expertise and apply that expertise to help customers realize value.

· Be a thought leader, with expectation to be billable on projects for the customer, responsible for CxO IT transformation discussions bringing all off Kyndryl’s value to the customer.

· Lead delivery across the full customer lifecycle from contract signing / transition to end of relationship.

· Act as door opener to new relationships within the customer.

· Ensure account compliance and lead accounts with integrity.

People

· Invest in the development of the people on the account and across
Kyndryl to develop the next generation of talent through leadership
of immediate and broader team

· Mentors junior Account Partners and provides skills assessment

· Support Kyndryl in achieving its Diversity, Equity and Inclusion goals

· Act as a steward of the Kyndryl culture

Job Qualifications

· University Graduate and minimum of 15 years working experience in IT

· More than 10 years of IT services sales experience in Singapore Public Sector

· Experience in managing P&L of greater than US$30 million

· Work experience with global multinational IT service provider preferred

Position: Senior Security Officer

Location: Tampines - Condo

Working Hours: Day Shift 8am - 8pm

Salary: In accordance to PWM

Job Description:

1. Monitor Premises: Conduct regular patrols to detect and deter unauthorized access. Keep a watchful eye on surveillance cameras to identify potential security threats.
2. Control Access: Verify the identity of individuals entering the premises. Enforce access control procedures and maintain a secure environment.
3. Respond to Incidents: Act promptly to alarms and security breaches. Report incidents and cooperate with law enforcement when necessary.
4. Maintain Records: Keep accurate logs of daily activities and incidents. Complete reports detailing security-related incidents.
5. Customer Service: Provide assistance and directions to employees and visitors. Ensure a friendly and professional demeanor while enforcing security protocols.

• Position :Service Technician(CCTV/Security System)
• Location : Islandswide- Office in Outram
• Working hours : 5 days work week;(8.30am, -6.00pm)
• Salary (commensurate with experience) : Up to $4700 gross ($4000 Basic +Transport allowance $400-$750) AWS + Overtime + Performance Bonus + $60 Mobile reimbursement + Birthday leave + Health insurance + allowance
• Duration : Permanent
• Industry : Security system

Main Responsibilities:

• Execution of service and maintenance workflow.
• Liaise closely with client representatives on all service/maintenance related issues.
• Mentor a team of service team members.
• Assisting the supervisor in employing teams on service deliveries and distribute responsibilities.
• Manage day-to-day client interactions and expectations for optimal results.
• Provide support to supervisor in ensuring the timely delivery and completion of troubleshoot and service/maintenance of security systems at clients’ premises.
• Familiarise yourself and deliver customer satisfaction base on each client's business, organization and objectives.
• Ensure that works carried out are in compliance with the Workplace Safety and Health Act.
• Perform any other technical tasks as and when required.

Requirements:

• Min Nitec in Electrical/Electronic Engineering with at least 2 years working experience.
• Knowledge and hands-on experience in security systems such as Integrated Security Management Systems, Card Access Control Systems, Intrusion Detection Systems and CCTV systems is a must.
• Knowledge in IT/Network/Server is an added advantage.
• Independent, self-motivated individual whom is able to work under minimum supervision.

Email me at [email protected]

Do visit www.searchpersonnel.com.sg for more job listings.

***We do not charge our candidates any referral fee nor bind them with any contract.***

Joie Chang

Associate Consulting Director

Reg no.: R2090601 | EA No: 13C6684

• Position : Technical Officer
• Location : Islandswide- Office in Outram
• Working hours : 5 days work week;(8.30am, -6.00pm)
• Salary (commensurate with experience) : Up to $4700 gross ($4000 Basic +Transport allowance $400-$750) AWS + Overtime + Performance Bonus + $60 Mobile reimbursement + Birthday leave + Health insurance + allowance
• Duration : Permanent
• Industry : Security system

Main Responsibilities:

• Execution of service and maintenance workflow.
• Liaise closely with client representatives on all service/maintenance related issues.
• Mentor a team of service team members.
• Assisting the supervisor in employing teams on service deliveries and distribute responsibilities.
• Manage day-to-day client interactions and expectations for optimal results.
• Provide support to supervisor in ensuring the timely delivery and completion of troubleshoot and service/maintenance of security systems at clients’ premises.
• Familiarise yourself and deliver customer satisfaction base on each client's business, organization and objectives.
• Ensure that works carried out are in compliance with the Workplace Safety and Health Act.
• Perform any other technical tasks as and when required.

Requirements:

• Min Nitec in Electrical/Electronic Engineering with at least 2 years working experience.
• Knowledge and hands-on experience in security systems such as Integrated Security Management Systems, Card Access Control Systems, Intrusion Detection Systems and CCTV systems is a must.
• Knowledge in IT/Network/Server is an added advantage.
• Independent, self-motivated individual whom is able to work under minimum supervision.

Email me at [email protected]

Do visit www.searchpersonnel.com.sg for more job listings.

***We do not charge our candidates any referral fee nor bind them with any contract.***

Joie Chang

Associate Consulting Director

Reg no.: R2090601 | EA No: 13C6684

At AIA we’ve started an exciting movement to create a healthier, more sustainable future for everyone.

As pioneering innovators for over 100 years, we’re now transforming our organisation to be faster, simpler and more connected. Because we want to be even better equipped to develop digital solutions and experiences that help more people live Healthier, Longer, Better Lives.

To get there, we need people with tech/digital/analytics expertise and passion to help develop positive, sustainable change through digitally enhanced experiences that will impact the lives of millions of people and create a healthier future for everyone.

If you believe in developing a better tomorrow, read on. 

About the Role

WHAT YOU’LL BE DOING:

• Assist in delivering training programmes to maintain high levels of information security capabilities of stakeholders in the four entities in scope (i.e Board members, EXCO/Senior Management, staff, agents, Tech staff, contract personnel, agents and third party service providers).

• Establish security capabilities and awareness requirements through detailed gap analysis from various channels, such as interviews, past phishing exercise results and e-learning coverage.

• Work with global Information Security function to manage the phishing exercises for staff and apply the rewards and consequence management based on the results of each exercise.

• Drive the phishing exercises for our retail distribution force, working with Tied Distribution management to apply the rewards and consequence management based on the results of each exercise.

• Support the planning and execution of cyber security training initiatives for the Board of Directors and Senior Management.

• Work with the other ISG functions to create topical security awareness modules and training, such as for TPSA, Incident Management, Risk Registry, etc.

• Oversee the delivery of security awareness for third party service providers with critical and high risk to AIA Singapore.

• Support delivery of security campaigns to foster a high level of partnership and cyber hygiene knowledge of stakeholders such as staff and agents.

• Support delivery of regular secure coding training, with gamification approaches, to elevate the attention and skillset of our IT teams/developers in the area of application security.

• Explore in-house development or existing solutions with security competency vendors to gamify the security learning experience for all stakeholders to achieve a people-centric, people led security awareness programme.

• Collaborate harmoniously and effectively with various internal business functions and Risk teams to evolve a highly positive risk and security awareness culture across the four entities.

• Downward trend in cyber security incidents and data privacy related incidents arising from improved security capabilities amongst stakeholders

• High take up rate and good response from stakeholders for post-transformed security awareness programme, in terms of security awareness solutions delivered

• Increased proportion of staff and agents recorded as reporting the simulated phishing emails during the regular phishing/social engineering exercises

• Improved productivity from ISG BAU services through completion of process automation initiatives

WE ARE LOOKING FOR SOMEONE WITH | YOU WILL HAVE:

• Bachelor’s degree of Computer Science, Computer Engineering, or other related degrees.

• Minimum 8 years of experience with at least 3 years’ of experience driving security awareness programme in major tech firms or  regulated organization (e.g. Government, FIs).

• Good conceptual knowledge of cybersecurity threats and processes.

• Highly driven professional passionate in the world of cyber security and keenness to share knowledge to the wider audience in this area.

• Hands-on experience in security awareness tools and solutions is a requirement.

• Candidates who had undergone successful attempts at transforming processes through automation techniques, such as RPA, scripting are welcome.

• Good to have but not mandatory - Information Systems Security professional certifications, such as CISSP, CISA, CRISC, CISM or CC.

• Excellent Communication, Coordination and Interpersonal Skills. The communication network of the incumbent is expected to be internally within Technology Department (15%) and Enterprise Risk Management, Compliance, Internal Audit (10%), Business Departments (45%), Senior Management and Sub-Committees (5%),Group Technology and Group Information Security (10%) and external with Vendors and Service Providers (15%).

• A team-player taking ownership and helping colleagues.

• Analytical skills

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.

Responsibilities:

· Responsible on developing and executing end-to-end public relations activities/engagement

· Strategize, develop and implement a sound Public Affairs strategy in order to project a transparent, localized and trust image to internal and external stakeholders

· Responsible on Govt and relevant communications and stakeholder engagement activities including customers PR dept, Industry and trade analysts, telecom regulators, academics, etc.

· Responsible on brand-related materials and contents targeted for internal and external stakeholders

· Crisis management

· Act as external spokesperson, when appropriate

Requirements:

· Relevant Degree with at least 8 years relevant experience in a Govt/ trade association role/Agency

· Highly hands-on individual and a creative and innovative thinker

· Good Strategic and structured thinking with interpersonal skills

· Hands on experience in Program and event management

· Excellent communication & written skills in both English & Chinese (in order to liaise with Chinese speaking customer)

· Is a self-starter; possess confidence and excellent communication skills in order to interact with people of all levels across different markets within the region

· Skilled in market research, and self-driven spirit

Job Purpose:

The SSM is the main interface between the Company's Customers and Suppliers including the end customer of the Partner. SSM is responsible for business expansion & execution of the suppliers' strategy. The SSM is responsible for the complete sales cycle with an aim to maximizing revenue, Net Gross Profits and Customer satisfaction by developing deep relationships with key people in the supplier organization, partners and end customers. Will be responsible for handling suppliers independently clearly focusing on delivery top-class value-added services.

Responsibilities:

• Create, Develop and implement supplier and vendor specific initiatives.

• Channel Partner and Vendor engagement

• Identify, recruit and enable channel and solutions partners; conduct regular solutions and sales updates, etc.
• Be the sales champion for assigned product solutions among selected high-touch accounts; establish sales development plan targeting business and technical decision markers; plan and execute quarterly target account activities. Execution - Credit management, Order processing, AR Collections

• Operational excellence - pipeline management, forecasting and inventory management

• Plan and execute solutions and services led strategy to grow services revenue.
• Lead quarterly business planning process and business review with respective vendor, ensure close interaction and collaboration among vendors in term of joint GTM strategy and solutions.

  
  Knowledge, Skills and Experience:

  • >5 to 10 Years proven experience in Sales & Marketing is preferred.​ Prior knowledge in end to end network, application and clouds security will be added advantage

  • Relevant experience with resellers would be an added advantage.

  • A proven track record of consistently achieving and often exceeding sales targets.

  • Demonstrate strong capability in planning, strategizing, execution skill and entrepreneurial spirit.

  • Experience in ensuring sales forecast accuracy and operational excellence.

  • Excellent networking abilities with strong communication and interpersonal skills.

  • Highly motivated, results-oriented, resourceful, with a lot of initiative.

  • A team player who enjoys working and leading in cross functional team environment.

  • Strong communication skills and fluent in English.

What’s In It For You?

• Elective Benefits: Our programs are tailored to your country to best accommodate your lifestyle.
• Grow Your Career: Accelerate your path to success (and keep up with the future) with formal programs on leadership and professional development, and many more on-demand courses.
• Elevate Your Personal Well-Being: Boost your financial, physical, and mental well-being through seminars, events, and our global Life Empowerment Assistance Program.
• Diversity, Equity & Inclusion: It’s not just a phrase to us; valuing every voice is how we succeed. Join us in celebrating our global diversity through inclusive education, meaningful peer-to-peer conversations, and equitable growth and development opportunities.
• Make the Most of our Global Organization: Network with other new co-workers within your first 30 days through our onboarding program.
• Connect with Your Community: Participate in internal, peer-led inclusive communities and activities, including business resource groups, local volunteering events, and more environmental and social initiatives.

Don’t meet every single requirement? Apply anyway.

At Tech Data, a TD SYNNEX Company, we’re proud to be recognized as a great place to work and a leader in the promotion and practice of diversity, equity and inclusion. If you’re excited about working for our company and believe you’re a good fit for this role, we encourage you to apply. You may be exactly the person we’re looking for!

Duties and Responsibilities:

• Handle public complaints and feedback related to project site.
• Prepare letters and notices to communicate with community and residents regarding development of project.
• Implement public relationship programme.
• Arrange and attend meetings on public relation matters with project team where necessary.
• Prepare a monthly report to update on the feedbacks and complaints.
• Maintain good relationship with clients and residents.
• Assist other general administrative support to the project teams.
• Perform other duties as assigned.

Job Specification:

• Diploma or Degree in any field.
• Minimum 3 years’ relevant experience working in a public-facing role.
• Willing to work at site office environment.
• Good communication skills.
• MRT working experience would be an added advantage.
• Independent, possess excellent interpersonal and communication skills and emotional maturity.

Working closely but not limited to with our Gateway (Airport) team, SATS, Airport Police Department (APD), HSSE Committee & Facilities Department, the Security Manager will assist with supply chain policy (express distribution), project management, audit, and APD compliance, as well as ensuring proper support is provided to internal partners working on security related projects.

Work location: 80/20 reporting to Gateway (airport) and in HQ in Changi. However can be deployed in any of our SF warehouses and offices island wide as needed.

Responsibilities

• Assess and develop overall mitigation strategies across the company to minimize the impact of relevant incidents.
• Research industry best practices, emerging security technologies and relevant regulations, and perform industry benchmarking and gap analyses.
• Develop and implement internal security risk management programs (e.g. comprehensive audit loggings, insider threat detections, privileged access management & governance), procedures, and controls to prevent, detect, and respond to relevant incidents.
• Develop an effective Knowledge Management System so that security policies and standard operating procedures (SOP) are in place, review regularly to update compliance requirements.
• Develop and implement security strategies, security plans, security policies, security procedures, security measures, and security systems to protect the company assets, personnel and information.
• Oversee the day-to-day security operations, including physical security measures, the high availability state of security devices (ie, access control system, surveillance systems, APD-approved X-ray machine, APD-approved Explosive Trace Detector, APD-approved Walk-Through Meral Detector and APD-approved Handheld Metal Detector) and readiness of our own staff & ground security officers (in-house and contractual).
• Operate insider threat detection programs and manage business stakeholders to design programs based on business understanding and risk scenarios.
• Work with stakeholders & relevant departments to ensure that all aspects of internal security risk are addressed.
• Plan and lead in the investigation of critical equipment failure, security breaches, loss of cargo or company assets where criminal activities are suspected including reporting to management and rectification of lapses. Assist in incident investigation as needed, follow up and case closure.
• Plan, lead and perform security risk assessment; Identify and assess potential information security risks posed within the organization and the existing policies/procedures/controls mitigating such risks.
• Develop and maintain relationships with internal and external partners to stay current on industry best practices related to information security risk management, making recommendations for action for senior management.
• Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions.
• Plan and lead in security audits, security test and security inspection and preparation of audit/test/inspection findings for management reporting, and to propose action plans.
• Oversee, plan and executes emergency response, crisis management/operations readiness plan relating to ensure the Security Posture of the organisation.
• Act as Liaison Officer between the company with the Airport Police, law enforcement and government agencies.
• Work with the Executive, Facilities & Procurement in ensuring all security equipment and devices are in good working condition and serviced punctually in accordance to the maintenance schedule.
• Work with Facilities & Procurement in the procurement of outsourced security personnel.
• Attend and participate in the monthly HSSE meeting and inspection
• Conduct Security training and toolbox meeting
• Consolidating the Security statistics together with HSSE committee
• Develop Security training material (PowerPoint slides or video)

Requirements

• Bachelor's degree in a relevant field, such as security, risk management; work-related experience is also welcomed, highly advantageous if from Logistics / Supply Chain / Express Distribution / Warehouse experience.
• At least 3 years of experience in a similar role, with a proven track record of managing internal security risk and consultancy experience is preferred.
• Experience developing and implementing internal security risk management policies, procedures, and controls. Knowledge of risk assessment methodologies and tools.
• Calm and composed personality, a strong inclination towards learning, and a team-oriented mindset.
• Team builder, strong written/verbal communication, and excellent teamwork skills with the ability to interact effectively with stakeholders at all levels of the organization, strong analytical and problem-solving skills.
• Self-driven and results-oriented, enjoys challenging tasks, demonstrates enthusiasm for work, and can handle job pressures.
• Detail-oriented, Organized with strong compliance sense.
• Able to multi-task, able to work with minimal supervision (proactive, self-starter)
• Good interpersonal and communication skills.
• Good command in written and spoken English and Chinese as to communicate effectively with our China counterpart and Chinese-speaking customer.
• Good presentation skills and can lead & manage meetings.
• Proficiency in MS office: Word, PowerPoint; Especially in Excel and Visio including Chinese word processing.

Technical Knowledge and Credentials: ·

Hands-on experience in Microsoft Defender for Cloud Apps (MDCA) · Design, Build, and Test MDCA docker infrastructure in production setup · Develop and document use cases · Operationalization of MDCA processes for BAU · MDCA Policies · Creation of Shadow-IT, Threat, DLP, and Cloud protection policies · Develop advanced use cases for deep visibility into SaaS apps · Tune alerts and document response actions. · Experience with Microsoft integrations: · Azure Active Directory · MS Defender (for Office365, for Endpoint, For Identity, MDCA) · Strong understanding of Microsoft Information Protection, and data loss prevention infrastructures and techniques · Broad understanding of Data Governance and Data Protection concepts. · Knowledge of Microsoft Purview, AIP · Understanding of the business, privacy, security, and compliance challenges surrounding Data Protection.

Preferred Certifications · MS-500: Microsoft 365 Certified Security Administrator Associate · SC-300: Microsoft Identity and Access Administrator · SC-900: Microsoft Security, Compliance, and Identity Fundamentals

At AIA we’ve started an exciting movement to create a healthier, more sustainable future for everyone.

As pioneering innovators for over 100 years, we’re now transforming our organisation to be faster, simpler and more connected. Because we want to be even better equipped to develop digital solutions and experiences that help more people live Healthier, Longer, Better Lives.

To get there, we need people with tech/digital/analytics expertise and passion to help develop positive, sustainable change through digitally enhanced experiences that will impact the lives of millions of people and create a healthier future for everyone.

If you believe in developing a better tomorrow, read on. 

About the Role

WHAT YOU’LL BE DOING:

• This role includes responsibilities of managing 3 team members and overseeing operations, subsidiaries, assigned POA over specific matters and/or other appointments such as Data Protection Officer

• Maintain an oversight of all the alerts from FINTECH, MASNET, Group Cyber SOC for AIASG and provide support to incident response personnel to ensure all deliverables are met within SLAs.

• Maintain an oversight of related security posture and baseline and ensure related vulnerabilities are remediated timely as per established standard to minimize risk exposures.

• Drive local security projects and group security project facilitation.

• Develop and maintain local incident response playbooks and other detection/response related standard operating procedures to ensure compliant to the MAS regulations.

• Act for the incident response action approval chain and support any incident response obligation for third parties.

• Respond to computer security incidents according to established response processes, leverages subject matter expertise where established processes do not exist.

• Acts as a subject matter expert regarding CSIRT incident response processes from local perspective.

• Provides guidance to other stakeholders during the incident response process and follow & track all the remediation actions till incident closure.

• Chair local IMT (Incident Management Team) calls and keep senior management and stakeholder updates on the progress of cyber incident management.

• Identify and manage potential and actual operational issues within the incident detection/response domain and take corrective action whenever required

• Work as a liaison between the SOC Team, other departments, and upper management for AIASG and potentially local regulators

• Manage relationships with our customers’ and third parties’ tech incident teams and frequently interact with client management for any security incident related queries.

• Work closely with the Group SOC team to manage ongoing service delivery and onboarding of local process within the SOC alignment and compliant to the local regulations.

• Level and type of budgetary or financial control of the position, responsible for budget of Information Security and Governance unit.

• Other quantitative / qualitative measures, e.g. time, quality, feedback, etc., that are tied to the objective of the area of responsibilities.

• Downward trend in cyber security incidents and less DP incidents.

• Uplift Cyber Security process, controls and maturity level for Cyber Security Incident.

• Support for the Cyber Security score in the annual MAS CRAFT report.

WE ARE LOOKING FOR SOMEONE WITH | YOU WILL HAVE:

• Bachelor’s degree of computer science, computer engineering or other relevant degrees

• Minimum 8 years of IT experience with at least 4 years’ of experience in cyber security incident handling in a regulated environment (e.g. FSI, government etc.)

• Strong knowledge of cybersecurity incident management covering identification, containment, response, recovery and reporting

• Sound knowledge of Cloud, Cyber Monitoring, Threat Hunting, and Cyber Threat Intelligence

• Natural ability to take the lead and drive the investigation of complex security issues, with strong analytical and problem-solving skills

• Self-driven professional interested in the world of cyber security

• Standby for the serious security incident during weekend or off-working hours if necessary

• Hands-on experience for the cyber security incident scenario preparation and tabletop exercise

• Technical understanding of enterprise network, various components and designs and strong understanding of Operating Systems, Applications, Databases in both on-prem and Cloud environment, how they are exploited and how to defend

• Good knowledge of conducting RCA for the incident

• Information Systems Security professional certifications, such as CISSP, CISA, CISM, CSSP or Cloud related.

• A team-player taking ownership and helping colleagues.

• Excellent Analytical, Coordination and Interpersonal Skills.

• Good communication skills and the communication network of the incumbent is expected to be internally within Technology Department (30%) and Enterprise Risk Management, Compliance, Internal Audit (15%), Business Departments (10%), Senior Management and Sub-Committees (10%),Group Technology and Group Information Security (20%) and external with Vendors and Service Providers (15%).

#LI-SC1

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.

The Company:

Our client is a multi-national information technology company with its headquarters in Singapore. It is also the largest Systems Integrator domestically.

The Project:

This project consists of multiple teams deployed within Cybersecurity Operations Command Centre delivering mission critical 24x7 threat monitoring, prevention, analysis, intelligence to high-valued clients.

The Role :

1. Provide support for internet security surveillance activities.

2. Responsibility for managing and escalating security incidents, ensuring a prompt and effective response.

3. Assist in the thorough preparation of incident reports, contributing to comprehensive documentation of security events.

4. Assist in detecting and resolving issues arising from security incidents, and demonstrate a proactive approach to maintaining system integrity.

5. Provide first-level troubleshooting for serviced devices, and address and resolve security-related issues.

6. Work closely with engineers team to troubleshoot and resolve problems. Your expertise and insights will play a crucial role in finding effective solutions.

7. Stay informed about the latest security advancements by consistently reviewing security updates and ensuring that systems are up to date with the most current protective measures..

8. Provide support for the Level 1 (L1) team by assisting with resource management, helping to ensure operational continuity and efficiency.

9. Assist in the onboarding program for new security analysts, facilitate a smooth integration into the team and ensure familiarity with established protocols.

1. Minimum requirement is a Diploma with a module in IT or Cyber Security.

2. Having a security Analyst certification like Certified Ethical Hacker (CEH), Certified Security Analyst (ECSA), or Computer Hacking Forensic Investigator (CHFI) is advantageous but not mandatory.

3. Preferably, candidates should have experience in one or more of the following areas:

• Management of IDS/IPS and firewall systems.
• Experience in Vulnerability Assessment, penetration testing, and risk assessment using various scanning and penetration testing tools.
• Knowledge of Unix, WIN2K, NT, and web server security practices such as OS tightening, SSO, and virus scanning.

4. General understanding of Information Security concepts.

5. Adequate understanding of Layer 1-7 Networking concepts is required.

6. Ability to follow predefined procedures, policies, and processes, and work under pressure.

7. Good communication skills (verbal, reading, and writing).

8. Working hours are from 9.00 AM to 6.30 PM, Monday to Friday.

• End of contract bonus

Duties and Responsibilities:

• Handle public complaints and feedback related to project site.
• Prepare letters and notices to communicate with community and residents regarding development of project.
• Implement public relationship programme.
• Arrange and attend meetings on public relation matters with project team where necessary.
• Prepare a monthly report to update on the feedbacks and complaints.
• Maintain good relationship with clients and residents.
• Assist other general administrative support to the project teams.
• Perform other duties as assigned.

Job Specification:

• Diploma or Degree in any field.
• Minimum 3 years’ relevant experience working in a public-facing role.
• Willing to work at site office environment.
• Good communication skills.
• MRT working experience would be an added advantage.
• Independent, possess excellent interpersonal and communication skills and emotional maturity.

Job Description

You will be a member of the Group Information Security Team responsible for ensuring corporate applications, systems, networks, and digital assets are adequately protected and mitigated against cyber threats and risks. You will help drive cybersecurity and risk management efforts and user awareness and education within the Singapore Airlines Group.

Key Responsibilities include:

• Provide cyber governance and risk management oversight.
• Manage the security policy framework and relevant standards.
• Oversee applicable security, regulatory, privacy, contractual cyber requirements.
• Manage cyber risk analysis and self-assessments program for various information services, systems, processes and recognized industry standards.
• Conduct risk assessments, document results, and propose and track remediation tasks.
• Develop compliance program top routinely assess existing infrastructure, systems, and applications for compliance and vulnerabilities and propose relevant mitigating controls.
• Conduct vulnerability assessments and track remediation status of identified vulnerabilities.
• Identify and assess cyber risks and recommend and drive cyber security solution and initiatives to improve cyber security posture.
• Define controls to meet regulatory, legislative, and industry specific compliance requirements.
• Manage third party cyber risk assessment standards.
• Prepare IT security related KPI reports and management reports for compliance monitoring and reporting.
• Drive the implementation of GRC tool.
• Maintain user cyber awareness and provide security advisory on emerging security threats and vulnerabilities.
• Develop, review and continuously improve IT security training material and conduct user training to improve user awareness and incident response readiness.
• This role may be seconded to any of SIA’s subsidiary group

Requirements

• Degree in IT or related fields, with 4-5 years relevant information security working experience, especially in the application security space.
• Professional security certifications (CISSP, CISA, CEH etc) preferred.
• Experience with Governance, Risk and Compliance (GRC) activities.
• Familiar with PCI, PDPA, GDPR requirements
• Experience in security technologies, practices, application/network/systems architecture and design, tests tools and processes.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.