At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will assist in the end to end implementation of security solutions for our clients and support our clients in their desire to protect the business.

The Opportunity

This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, advising stakeholders, providing workshops and supporting business development. If you’re flexible and ready to adapt to a constantly changing environment, there’s no better place to develop your skills. Since you’ll be working directly with clients, some travel will be required.

Your Key Responsibilities

As a Cyber Security Operations consultant, you will be part of the team to assess, design, build, implement and manage security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience.

Skills and Attributes for Success

• Familiarity with Security Information and Event Management (SIEM) solutions.
• Experience with network security monitoring and incident response activities.
• Ability to process impacts of activities and be able to collaborate with IT operations and Cybersecurity teams on mitigations and remediations.
• Ability to apply cybersecurity and privacy principles to organizational requirements.
• Ability to create standard operating procedures and other similar documentation.

To Qualify for the role, you must have

• A recognized university degree in Computer Science, Computer/Electrical Engineering, Information Technology or equivalent
• Relevant experience in business consulting will be an added advanatge.
• Strong interest in the field of information security
• Creative, independent with good problem-solving skills
• Excellent communicator with strong analytical, interpersonal and writing skills

Ideally, you’ll also have

• Industry related certification preferred (e.g. CISSP, CISA, CISM, SABSA, PRINCE2, TOGAF, ITIL).
• Solution Level Certifications, OSCP, CREST, GIAC would be advantageous, as well as penetration testing experience.

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.

What we offer

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

Apply now.

Job Description
You will be a member of the Group Information Security Team responsible for initiating, implementing and maintaining security products and solutions to support enterprise security.

Key Responsibilities

• Subject matter expert (SME) for the security systems owned by the Information Security Team.
• Ensure security systems are utilised to their maximum capabilities.
• Plan, identify, assess, design, operationalise and maintain multiple security related software and/or hardware.
• Recommend and drive cyber security solution and initiatives to improve cyber security of the organisation.
• Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
• Provide security consultancy, technical guidance, expertise, solutioning and education.
• Advise infrastructure teams on security design that is relevant and fit for purpose.
• Identify and assess cyber risks in the IT infrastructure environment.
• Review firewall requests.
• Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.
• Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables.
• This is an individual contributor role. Deliver tasks with minimal supervision.
• Strong communication skills.

Requirements

• Degree in IT or related field, with at least 5 years in information security, especially in the application security space.
• Professional security certifications (CISSP, CSSLP, CEH etc) preferred.
• Experience in security products POC and RFQ.
• Prior experience in implementing and maintaining any of tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM etc. and/or network security. Able to review firewall requests.
• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.
• Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience preferred.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc.
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions (both applications and infrastructure) are developed and designed with security inbuilt.

Key Responsibilities

•Provide security consultancy, technical guidance, expertise, solutioning and education for en-terprise.

•Advise application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

•Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

•Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

•Perform threat modelling on security critical applications. Keep up to date on emerging secu-rity threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews and audits to ensure security assurance is achieved.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables. This is an individual contributor role. Strong communication skills.

Requirements

•Degree in IT or related fields, with at least 5 years in information security, especially in the application security space.

•Professional security certifications (CISSP, CSSLP, CEH, CCSP etc) preferred.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.

•Strong in-depth working knowledge in secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), Software Compo-sition Analysis (SCA).

•Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud technolo-gies. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

•Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc. Any prior vulnerability management experience preferred.

•Strong oral, written, presentation and inter-personal skills.

•Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

Responsibilities:

• Manage and operate the IT Security Protection System which includes liaising with Maintenance Contractor to address technical & security issues and Health Checks.
• Manage and investigate Events of Interests and security vulnerabilities to identify early indicators and work with the respective team to address them.
• Ability to deploy, configure and fine-tune security policies as well as performing threat hunting to proactively response to potential cyber threats.
• Review and enhance IT security policies, procedure and documentations with respect to industry standards and best practices.
• Facilitate and support (internal and external parties) on Cyber Security Incident management and response.
• Assist in all internal & external IT audits. Follow-up with the respective Risk Owners to remediate audit findings.
• Be on standby for any critical security alerts and incident management after office hours.

Requirements:

• Degree in Information Technology or Information Security or related discipline.
• 3 years of working experience in Cyber Security. Having good Knowledge in Cyber Security Management, IT Compliance and/or Risk Management.
• Hands-on experience with Windows or Linux OS.
• Experience on Microsoft Azure Cloud Security technologies (MS Sentinel, MS Defender...etc) as well as other Enterprise Security Appliances; such as Privileged Access management & Vulnerability Management tools.
• Familiar with modernised A.I and SecOps tools.
• Familiar with ISO27001 and/or PCI Data Security Standards.
• Security Screening will be required for potential candidates.

To apply, please visit www.gmprecruit.com and search for Job Reference: 23838

To learn more about this opportunity, please contact Yingying at [email protected]

We regret that only shortlisted candidates will be notified.

GMP Technologies (S) Pte Ltd | EA Licence: 11C3793 | EA Personnel: Lai Yingying | Registration No: R1110239

· Join the premier biopharmaceutical company that has been in Asia Pacific for over 60 years

· Bring your entrepreneurial curiosity and learning spirit into a career of purpose, personal growth, and leadership.

· Be an integral part of the Global Public Policy Leadership Team and sit on the AP Leadership Team to advance company policy and business objectives.

Our Policy & Communications team collaborates with governments and policy organizations at local and national levels. We address legislative and policy issues that promote and protect the discovery of innovative medicine, vaccines, and animal health products while improving and protecting patient access to care. We take great care to monitor and manage the reputation of our company, communicating the work we do to improve lives.

The Director, Global Public Policy, Asia Pacific is responsible for developing and executing global and regional policy strategies and advocacy plans supporting business. This role involves collaboration and alignment across Corporate Affairs functions to support critical business priorities across the Asia Pacific (AP).

The Director will strengthen regional and market-level policy and advocacy capabilities, proactively identify and execute external engagement opportunities, implement comprehensive stakeholder engagement strategies, and effectively communicate the economic and societal benefits contributions to regional health goals.

Additionally, the incumbent will facilitate connections and communication between local, regional, and global teams, identifying implications for headquarters and other regions/countries as well as relevant geopolitical dynamics. The Director will also ensure close collaboration with regional multilateral bodies, advocacy organizations, and industry associations, and drive advocacy with regional U.S. government agency representatives.

Reporting to the Executive Director, Global Public Policy, Asia Pacific Hub, the Director will also ensure coordination across regional and global Communications, Therapeutic Policy, Social Business Innovation, Patient Engagement and Commercial teams.

The role is based in Singapore.

Scope of work and core responsibilities include:

• Develop and execute public policy strategies and mitigation plans in collaboration with Global Public Policy teammates, Commercial leaders and in-market teams in the AP region.
• Integrate Policy, Communications,Social Business Innovation and Patient Engagement into external affairs activities in support of business-critical priorities in assigned subsidiaries and the broader AP region.
• Conduct policy environment monitoring, analysis and briefing of regional political dynamics and policy issues, including bilateral and regional relationships with the United States and other critical countries, which could impact or support business objectives in the region and globally.
• Create and execute strategic stakeholder engagement plans to effectively position the company as a thought leader with key influencers and decision-makers throughout the region.
• Prepare clear, concise, and timely briefing documents and presentations for senior leader engagements with policymakers and key influencers.
• Represent company policy positions with government leaders and key influencers in meetings, conferences and other convenings in regional and local settings.
• Generate and socialize cohesive narratives to effectively communicate the full economic and societal benefit of contributions to regional health goals, including strategies to effectively bridge Ministries of Health with non-traditional stakeholders, such as Ministries of Finance, Economy, and Trade.
• Draw upon professional network and develop strategic plans for partnership with the U.S. government, think tanks, and outside experts who can amplify our advocacy.
• Develop and execute strategies to maximize the impact of our engagement with trade associations and multi-lateral platforms (e.g., APEC) in the region.
• Build regional and market-level policy and advocacy capabilities, including assessing gaps and developing capability-building strategies aligned with business objectives.
• Contribute to quarterly and annual strategic planning and evaluation processes for the Global Public Policy function.

Skills and qualifications/education and experience:

• Required: Bachelor's degree or equivalent in Public Policy, Public Health, Public Administration, Political Science, or related field.
• Preferred: Master's or Professional degree or equivalent in Public Policy (MPP), Public Health (MPH or MSPH), Public Administration (MPA), Political Science (MA, MS), or International Business (MBA).
• Minimum of 15 years international government affairs advocacy experience with demonstrated ability to successfully advocate before U.S. and foreign governments. Former U.S. government diplomacy experience and/or specialty in the region preferred.
• Accomplished public policy professional with at 5-8 years of demonstrated success working in international health policy and advocacy (industry, government or NGO)
• Experience and knowledge of health systems in various market archetypes (e.g., developed, developing economies). Direct experience in AP region preferred.
• Experience providing strategic thought leadership and issue management to global and regional industry associations, think thanks and other advocacy organizations to shape policy.
• Demonstrated ability to work within diverse teams and achieve results, influence without authority, and contribute toward a common agenda with defined action.
• Strong verbal and written communication skills to influence and effectively lead internal and external audiences to desired outcomes.
• Ability to communicate effectively with senior leadership and high-level external stakeholders.
• Ability to master complex policy, regulatory and legislative issues, think creatively and develop innovative strategies and solutions.
• Ability to manage competing priorities, often under time-sensitive environments, with effective project management skills.
• High degree of ethics and ability to build effective internal and external working relationships.
• Demonstrated experience working across culturally diverse and matrixed teams with a high degree of collaboration.
• Fluent in English, verbal and written.
• Additional regional language skills are beneficial.

Who we are

We are known as Merck & Co., Inc., Rahway, New Jersey, USA in the United States and Canada and MSD everywhere else. For more than a century, we have been inventing for life, bringing forward medicines and vaccines for many of the

world's most challenging diseases. Today, our company continues to be at the

forefront of research to deliver innovative health solutions and advance the

prevention and treatment of diseases that threaten people and animals around.

the world.

What we look for

Imagine getting up in the morning for a job as important as helping to save and improve lives around the world. Here, you have that opportunity. You can put your empathy, creativity, digital mastery, or scientific genius to work in collaboration with a diverse group of colleagues who pursue and bring hope to countless people who are battling some of the most challenging diseases of our time. Our team is constantly evolving, so if you are among the intellectually curious, join us—and start making your impact today.

Established in 2005, Gordian Capital is Asia’s oldest, largest, and most institutional fund platform, currently managing in excess of USD$13bn across a number of funds and expanding at a brisk pace. In Singapore, we hold a Capital Markets Services License, are licensed with US SEC as a RIA and are licensed/registered with the CSRC (China), FSA (Japan), SEBI (India) and ASIC (Australia) Our Fund Platform provides a regulated, physical and operational infrastructure for experienced investment professionals who wish to be based in Singapore or Tokyo and focus on their skill set – research, asset selection and portfolio construction, whilst Gordian Capital handles fund establishment, tax, regulatory matters, compliance, middle and back office, investor relations and risk management We create and operate a variety of structures including hedge funds, long only absolute return funds, private equity, venture capital, real estate and private credit as well as special purpose vehicles, fund of funds and segregated portfolios. In order to meet the growing demand that we are experiencing, we are looking for operations people with initiative, who have experience in the alternatives business and are interested in growing with our company.

Responsibility

The candidate will provide operational middle and back-office support including daily fund operations, trade settlement and business-related needs. The candidate will have opportunities to both learn and expand their knowledge of the operations workflow for hedge funds across different strategies, managed accounts and long only funds. This candidate reports to the Head of Operations – Public Markets.

The candidate is expected to have both experience and expertise in most of the following key duties in relation to funds and or managed accounts:

· Involvement in the project management of fund/managed account launches

· Daily operational duties

· Trade reconciliation

· Calculation of internal daily NAV estimates

· Interaction with a wide range of service providers including but not limited to Prime Brokers, Custodians, Trustees, Executing Brokers, Fund Administrators

· Monitoring & performing monthly or intra month hedging

· Assisting auditors in the preparation of annual Financial Statements

· Performing KYC compliance checks & AML checks

· Preparation of newsletters for investors

· Ad-hoc duties including assisting in the preparation of marketing materials and short-term projects

Requirements

- Relevant studies, for example: accounting, finance, statistics, and or business

- Experience in trade execution, helpful

- Excellent analytical skills

- Ability to multi-task & work under pressure

- Detail-oriented, organized, meticulous and number savvy

- Strong work ethic and professional habits

- MS Office skills (especially Excel)

- Knowledge in VBA (preferred)

- Self-starter / Self-learner

- Works well in a small team and good team player

- Willing to work in accordance to the Japanese calendar

- Working hours are Mon – Fri 7am to 4.30pm

About the job

-Work with Regional Chief Information Security Officer to drive and deliver the Bank's security transformation agenda including implementation of security strategy, technologies and building up operations for the region

-Manage projects within regional transformation program

-Maintain all relevant technical documentation, processes, procedures and reportable metrics

-Select technologies implementing bank's cyber security program and control objectives.

- Build and operate technologies which necessary to maintain bank's cyber security program

-Work with third party vendors to design, deploy, maintain and operate Bank's security solutions.

-Build cybersecurity engineering, maintenance and operational teams.

-Configure and Troubleshoot bank's security systems

skills and experience required

-Minimum 15 years of experience in hands on cybersecurity and project management roles

-Strong understanding of various cyber security technologies addressing the protection of identities, data, applications,endpoints and infrastructure.

-Demonstrated experience in applying security and risk frameworks such as: NIST, Mitre ATT&CK, Mitre DEFEND, ISO27K

-Demonstrated experience in applying technical solutions to meet regulatory requirements stipulated by regional authorities (examples: MAS, HKMA, BOJ, RBI, BNM, CFR-RBA, CBIRC, etc)

- Demonstrated experience is building the cyber security teams in the areas of engineering and/or operations. Program and project management skills

-Broad knowledge across all facets of modern cybersecurity program, including strong understanding of current and emerging trends and threats.

To apply online please use the apply function, alternatively you may contact Chloe Chen at chloe.chen(@)randstad.com.sg. (EA: 94C3609 /R1768253)

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Responsibilities
• Plan, implement, manage, monitor, and upgrade IT security solutions.
• Support projects by delivering project deliverables and completing milestones.
• Develop and maintain technical, operational, and configuration documentation necessary for project implementation.
• Coordinate and manage vendors for product implementation and troubleshooting.
• Evaluate security products and conduct Proof of Concept (POC) to verify the effectiveness of security measures, ensuring their continued efficacy post-implementation.
• Provide technical support and incident response for IT security infrastructure components to the maintenance team.

Requirements:
• Proficient in Endpoint Security solutions, including Anti-Malware, Host Firewall, Application & Change Control, Disk Encryption, and EDR.
• Knowledgeable in Identity & Access Control solutions, such as PKI solutioning, Hardware Security Module (HSM), Privileged Access Management, 2FA, and OS Hardening Policies.
• Implement Endpoint or Identity & Access Control Security tools.
• Familiarity with various operating systems like Windows or Linux.

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Interested Applicants
Please WA Bryan Tay @ 97559161
Shortlisted Candidates will be notified

Bryan Tay Reg No. R23112463
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

​Charterhouse has teamed up with a Payment Solutions company to recruit a Head of Legal & Compliance. This presents an exceptional opportunity for dynamic individuals seeking growth in a fast-paced environment, overseeing various pillars within the Governance function.

RESPONSIBILITIES:

Reporting to the Country CEO, you'll play a pivotal role in crafting and executing strategies, policies, and protocols to uphold adherence to pertinent laws, regulations, and industry norms. This involves offering advice on legal and regulatory matters to senior leadership and business sectors. Your expertise will be instrumental in supervising the creation and upkeep of compliance initiatives, which encompasses coordinating training and awareness efforts.

A key aspect of the role entails nurturing relationships with regulatory authorities and ensuring prompt and precise reporting. Remaining abreast of emerging risks and proposing effective mitigation measures will also fall within your purview. Furthermore, you'll have the chance to guide and mentor a team of governance professionals, cultivating a culture of excellence and ongoing enhancement across the organization.

REQUIREMENTS:

You should be degree educated with at least 15 years of relevant experience, ideally in both traditional banks and fintechs. You should showcase a profound comprehension of legal and compliance frameworks. A robust understanding of pertinent laws, regulations, and best practices, particularly in domains like banking, securities, and anti-money laundering, is essential. Furthermore, exceptional analytical, problem-solving, and decision-making abilities are required, enabling them to navigate intricate legal and regulatory landscapes effectively.

The candidate should exhibit outstanding leadership and communication skills, capable of influencing and engaging stakeholders across all levels of the organization. Professional certifications such as Certified Compliance Officer (CCO) or Certified Regulatory Compliance Manager (CRCM) would be highly advantageous.

Please contact Xuan Kwok at +65 6950 0354 or [email protected] for a confidential discussion.

EA License no: 16S8066 | Reg no.: R1433611

Only successful candidates will be notified.

Your background

Skills:

· Experience in conducting vulnerability assessments, code reviews and penetration tests against web/mobile application technologies, services, platforms and languages to find flaws and exploits (e.g. SQL Injection, Cross-Site Scripting, Cross-Site Request Forgery, Remote Code Execution, Authentication/Authorization, Privilege Escalation, Business Logic Bypass, etc.)

· Experience in conducting Threat Modeling

· Knowledge of network and Web related protocols/technologies

· Experience with web application vulnerability scanning tools (e.g. IBM AppScan, NetSparker, Burp Suite Pro etc.)

· Experience with vulnerability assessment tools and penetration testing techniques (e.g. web application proxies, packet capture analysis software, browser extensions, advanced penetration testing Linux distributions, static source code analyzers, SoapUI etc.)

· Experience of penetration testing on mobile platforms such as iOS, Android, Windows and RIM.

· Solid programming/debugging skills with proficiency in one or more of the following: Java, JavaScript, HTML, XML, PHP, ASP.NET, AJAX, JSON, Objective-C

· Strong scripting skills (e.g. Python, Perl, Shell script, JavaScript)

· Mobile programming abilities such as Xcode, Objective-C

· Knowledge of a Structured Query Language

· Expert-level experience and very detailed technical knowledge in at least 3 of the following areas: general information security; security engineering; application architecture; authentication and security protocols; application session management; applied cryptography; common communication protocols; mobile frameworks, single sign-on technologies; exploit automation platforms; RESTful web services

Competencies:

· The ability to work independently and as part of a team, in a very large scale, enterprise setting

· Previous experience as an application security professional with a large Financial Institution is a plus

· Intellectually Curious

· Consistently thinks like a threat actor

· Demonstrated ability to learn and apply critical thinking to a variety of situations

· Ability to clearly communicate (written & verbal) business risk associated with a given vulnerability

· Adaptable & Flexible approach to work

· Ability to demonstrate manual web application testing experience

Qualifications:

· BS/MS in Computer Science (or relevant work experience in a large scale IT environment)

· Additionally penetration testing specific qualifications would preferably include one or more from the following list:

o CREST Registered Penetration Testers (CRT)

o CREST Certified Web Application Tester

o Offensive Security Certified Professional (OSCP)

o Offensive Security Certified Expert (OSCE)

o Offensive Security Exploitation Expert (OSEE)

o Offensive Security Web Expert (OSWE)

o SANS GIAC Penetration Tester (GPEN)

o SANS GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)

o SANS GIAC Web Application Penetration Tester (GWAPT)

o Certified Ethical Hacker (CEH)

What you can expect

The Cyber Security Assurance (CSA) department is responsible for providing an uncompromised technology and application environment for employees, customers, clients, and shareholders through continuous comprehensive cyber security testing. CSA consists of multiple assessment teams that focuses on different technology, platform, and stakeholders.

As a Manual Ethical Hacking Specialist, you will join a dynamic team of world class security experts to conduct application security/penetration tests of our internal/external web, mobile and web service applications, leveraging both manual techniques as well as automated tools in order to uncover and report security vulnerabilities that exist.

You will be knowledgeable with business risks associated with common security vulnerabilities and be able to effectively communicate security vulnerabilities to application developers and/or senior managers who may have little to no experience with application security vulnerability specifics.

What you will do

Responsibilities include, but are not limited to:

· Understanding the requirements of the applications and how to use them

· Testing applications using a variety of tools to identify vulnerabilities that could expose the Bank to risk

· Monitoring existing and proposed security standard setting groups

· Conducting meetings to communicate the findings and implications to stakeholders

· Performing vulnerability fix verification testing in support of the remediation

· Providing technical support to clients, management and staff throughout risk assessments and the implementation of appropriate data security procedures and products

· Acting as a SME, providing guidance and knowledge to reduce the vulnerabilities and risk when apps are being created

· Sharing knowledge with technical and non-technical colleagues directly and through training sessions

· Ensuring identified risks are managed effectively

· Contributing to the development and enhancement of the control function

· Design and perform tests and check cases to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorization, and non-repudiation standards.

· Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

· Certify infrastructure components, systems and applications that meet security standards.

About Bank of America

Our purpose as a firm is to make financial lives better, through the power of every connection. Across the world, we partner with leading corporate and institutional investors through our offices in more than 35 countries. In the U.S. alone, we serve almost all of the Fortune 500 companies and approximately 67 million consumer and small-business clients. We provide a full suite of financial products and services, from banking and investments to asset and risk management. We cover a broad range of asset classes, making us a global leader in corporate and investment banking, sales and trading.

Connecting Asia Pacific to the world

Our Asia Pacific team is spread across 19 cities in 12 markets. We are focused on connecting Asia to the world and the world to Asia, using our global expertise to ensure success is shared between us, our clients and our communities. Our regional footprint covers 12 currencies, more than a dozen languages and five time zones, placing us firmly among the region’s leading financial services companies.

Role purpose

We are looking for an SDM to take responsibility for overseeing the successful delivery of services for a large regional APAC client. This role involves managing a team, coordinating resources, collaborating with various stakeholders to ensure seamless service delivery and to ensure all service level KPIs are met or exceeded.

Role tasks and responsibilities

1. Client Relationship Management:

• Build and nurture strong relationships with clients.
• Conduct regular meetings to understand client needs and expectations.
• Act as the primary point of contact for addressing client concerns and inquiries.

2. Service Delivery Oversight:

• Develop, implement, and optimize service delivery processes and procedures.
• Monitor service performance against established SLAs (Service Level Agreements) and KPIs (Key Performance Indicators).
• Identify opportunities for process improvement and efficiency.

3. Team Management:

• Lead and manage a team of service delivery professionals.
• Provide coaching, mentoring, and performance feedback to team members.
• Collaborate with HR for recruitment, onboarding, and training of new team members.

4. Resource Allocation:

• Allocate resources effectively to meet service delivery objectives.
• Work with resource managers and other departments to ensure adequate staffing levels.
• Manage workload distribution among team members.

5. Quality Assurance:

• Implement and oversee quality control measures to ensure service excellence.
• Conduct regular reviews and audits of service delivery processes.
• Develop and maintain quality standards and guidelines.

6. Problem Resolution:

• Address and resolve issues or escalations in a timely manner.
• Collaborate with technical teams and other stakeholders to identify and implement solutions.
• Develop and implement preventive measures to minimize recurring issues.

7. Reporting and Analysis:

• Generate regular reports on service performance, trends, and key metrics.
• Analyze data to identify areas for improvement and provide insights.
• Prepare and present reports to senior management and clients.

8. Continuous Improvement:

• Proactively identify opportunities for process improvement and optimization.
• Implement best practices to enhance service delivery efficiency.
• Foster a culture of continuous improvement within the service delivery team.

9. Contract Management:

• Collaborate with the sales and legal teams to ensure service delivery aligns with contractual obligations.
• Participate in contract negotiations and provide input on service-related terms.
• Monitor contract renewals and changes.

Requirements

Required:

• A Bachelor's degree in a Business-related field
• At least 4 - 6 years of relevant work experience
• Experience in customer service, leadership or business development
• Advanced computer skills and the ability to learn technology quickly
• Resource planning and budget management experience
• Experience in a Client facing role
• Strong teamwork skills
• Attention to detail

Preferred:

• PMP certification
• Experience in corporate security

Control Risks is committed to a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age or veteran status.

Role Overview:

The Legal Assistant will play a crucial role in supporting our legal team in a variety of corporate matters, with a specific focus on our Chinese client base. The ideal candidate will have a strong foundation in corporate law, be fluent in both English and Mandarin, and possess a keen understanding of the cultural nuances that influence business and legal practices in both Singapore and China

Key Responsibilities:

• Provide comprehensive support to lawyers, including document preparation, research, and case management.

• Assist in drafting legal documents such as contracts and agreements,

• Facilitate communication between the legal team and Chinese clients, including translating documents and correspondence.

• Maintain and organize legal files, ensuring all client information is kept confidential and secure.

Qualifications:

• Bachelor’s degree / Diploma in Law, Paralegal Studies, or a related field.

• Proven experience as a legal assistant or paralegal, preferably with exposure to corporate law and international clients.

• Fluent in Mandarin and English, both written and spoken, is essential.

• Strong understanding of the legal and business environment.

• Excellent organizational skills, attention to detail, and the ability to manage multiple tasks efficiently.

• Proficient in Microsoft Office Suite and legal research databases.

• Strong interpersonal and communication skills, with the ability to interact effectively with clients and team members from diverse backgrounds.

What We Offer:

• A competitive salary and benefits package.

• Opportunities for professional development and career advancement.

• A dynamic and supportive work environment, where your contributions are valued and recognized.

• The chance to work with a diverse client base and engage in complex and challenging legal matters.

How to Apply:

Please submit your resume, a cover letter detailing your experience and interest in the role, and any relevant certifications or references to [email protected]

We are looking for 1 dynamic and motivated Associate / Senior Associate with 1 - 5 years’ PQE to join our tight-knit litigation / arbitration team.

These roles involve handling litigation, arbitration, insurance, shipping, international trade and general commercial cases. Candidates with experience and/or knowledge in arbitration, insurance and shipping will have an advantage.

Interested candidates are invited to email your comprehensive resume with a recent photo stating the availability date and expected salary to [email protected] and [email protected]. All applications will be treated with full confidentiality. Only shortlisted candidates will be notified.

Responsibilities:

• Analyze and prioritize vulnerabilities and implement mitigation strategies.
• Offer strategic guidance on technology and cybersecurity.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures and processes
• Investigate and document security incidents.
• Manage security systems and monitor for threats.
• Develop and enforce security policies.
• Conduct regular vulnerability assessments.
• Report security incidents and collaborate on responses.
• Enhance employee security awareness through training.
• Stay updated on cybersecurity threats and incident response.

Requirements:

• Bachelor’s degree in computer science, information technology, or equivalent experience.
• Min 5 years of experience in a cyber or information security management role.
• Proficient in Mandarin as its essential for close coordination with counterparts in China.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders

Please kindly send in your updated CV in MS Words format (please include your current salary package with full breakdown and expected salary) to [email protected]. Your interest will be treated in strict confidence.

People Profilers Pte Ltd

DID: 6950 9738
http://www.peopleprofilers.com

Lim Yi Tian, Candy

EA License No. 02C4944
Registration No. R1109829

A. Overall Purpose of The Job

The primary role of the Infrastructure Security Engineer is to support our security technologies to ensure smooth daily operation and its maintenance. This includes project delivery and subsequent refresh program for all the in-scope security devices.

B. Key Responsibilities

● Provide expert guidance and oversight in the day-to-day administration of various security tools, including Crowdstrike EDR, Netskope SWG, CyberArk PIM/PAM, and others.

● Take a sme role in building, implementing, and maintaining the CyberArk PIM/PAM solution within the Organization environment, ensuring the smooth operation of CyberArk PAM/PIM activities on a daily basis.

● Proactively identify issues and suggest potential solutions in operations.

● Manage and execute maintenance tasks, system upgrades, and the implementation of service packs, patches, hot fixes, and security configurations.

● Lead in-depth investigations into complex technical issues, collaborating closely with vendors until resolutions are achieved, and delivering comprehensive Root Cause Analyses (RCAs).

● Collaborate effectively with Server/Network/DB/App teams to efficiently onboard and configure devices and privileged identities.

● Demonstrate expertise in creating customized reports and dashboards within security tools, tailored to meet specific requirements.

● Maintain and update Standard Operating Procedures (SOPs), security standards, and procedures, ensuring they reflect best practices and the latest security protocols.

● Operate within the established configuration and change management policies to ensure that all changes made to security devices are well-documented, approved, and ultimately successful.

● Play a crucial role in the implementation of new infrastructure security technologies and products at Organization. This includes selecting the most suitable product vendor, conducting Proof of Concepts (POCs), and overseeing the product's implementation in collaboration with a preferred Systems Integrator (SI) partner.

C. Job Profile

Required Skills and Knowledge

● 7-8 years of valid experience in Infrastructure Security operations and projects

● 5-6 years of hands on experience in CyberArk PIM/PAM

● 3-4 years of hands on experience in any Endpoint Detection & Response and Secure Web Gateway technologies preferably Crowdstrike and Netskope

● Good understanding of Network Technologies, Systems, and Database

● Good understanding of security concepts (e.g., encryption, least privilege, need to know basis access, unauthorised access)

● Strong verbal and written communication skills and ability to work with all levels of management

● Firm understanding of IT Service Management processes and project management (i.e., ITIL and Agile)

● Team player and self-motivated

Required Qualifications

● Certifications in CyberArk Certified Delivery Engineer is preferred

● Cybersecurity certification such as CompTIA Security+ or CEH is an advantage

● University degree in Computer Science or a related field is preferred

Executive Summary

Smart IMS Inc provides Digital technology & Cloud transformation services, Application & Infrastructure Management Services, Unified Communications, and Insurance implementation services to customers across the Americas, Europe, Middle East, and Asia-Pacific regions. As the trusted technology and business partner of leading MNCs, including Global Investment Banks, Smart IMS is also a Microsoft Gold Certified Partner, Oracle Platinum Partner and AWS MSP Partner.

We are looking to hire a Cyber Security Engineer in Singapore to support our client, a statutory board, with the following responsibilities:

• Able to perform Security & Vulnerabilities Assessment and Remediations, and apply security Patches & Fixes
• Manage security incidents and conduct forensic analysis when necessary to determine the source and scope of any security breaches.
• Collaborate with cross-functional teams to implement security best practices and ensure compliance with regulatory requirements.
• Engage on Security incident management and response efforts.
• Respond to security alarms and analyze and escalate incidents by process or management.
• Perform Security & Vulnerabilities Assessment and Remediations
• Perform impact assessment and testing of security patches before applying them.
• Provide timely reports and status updates on the progress of fixes to stakeholders.
• Taking Owner ship of Security incident life cycle management
• Automate the security monitoring and incident response.
• Collaborate with system administrators and developers to address and remediate identified vulnerabilities.
• Conduct regular security audits and vulnerability assessments to identify weaknesses and potential threats to the organization's information systems.

Job Responsibilities:

· Drive the fortification and optimization of the wallet security system, including but not limited to security policies, patching vulnerabilities, and monitoring unusual activities.

· Responsible for the daily operational maintenance of the wallet system, including but not limited to node deployment, on-chain data synchronization, and system backup, etc.

· Provide reasonable and effective suggestions for the existing wallet system framework, assist in upgrading the security organizational framework, participate in the design and implementation of security policies, to ensure the security of the exchange wallet system.

· Design and collaborate on the development of a security framework with rational security logic.

· Enrich and optimize existing rules, participate in the emergency response to daily security incidents, as well as the maintenance of security systems.

· Continuously track the latest technologies and threats in the field of blockchain and digital asset security, providing professional advice and guidance to the team.

· Proactively identify and resolve potential system risks, improving the overall security awareness and capabilities of the team.

Qualification Requirements:

· Have a sense of infrastructure security, familiar with common security vulnerabilities and attack methods.

· Capable of independently developing, writing, and maintaining a security framework.

· Familiar with common Linux commands and tools, penetration testing processes and tools.

· Familiar with security risk management, security node upgrades.

· Familiar with WEB3 development technology, with priority given to those who have experience in Solidity smart contract development.

· Have a deep understanding of blockchain technology and digital assets, familiar with the application skills of common scenarios on the chain.

· Good communication and written expression abilities, able to effectively communicate and cooperate with colleagues in different positions.

Bonus Points:

· Experience in security framework design.

· Experience in handling security incidents & offensive and defensive real-world experiences.

· Priority given to those with practical project or tool development experience.
Senior Security Operations Engineer

· Capability to analyze the behavior of malware samples in Windows/macOS/Linux environments.

Responsibilities:

1. Establish and Enhance Cloud Security Compliance:

• Build and improve the cloud security and compliance framework.
• Research industry security products and compliance practices and apply them to the company's cloud services.

2. Respond to Online Security Issues:

• Provide professional solutions and security recommendations to address online security incidents.
• Ensure timely resolution of security events.

3. Track Industry Security Cases:

• Study the technical principles behind industry security incidents.
• Internally share knowledge related to security cases.

4. Conduct Regular Security Audits:

• Engage in red team-blue team exercises with the testing team.
• Ensure the overall security of the system.

Requirements:

• Education: Bachelor's degree or higher.
• Relevant Majors: Background in Electronics, Telecommunications, Computer Science, Network Engineering, or Software Engineering.
• Programming Language Skills: Proficiency in at least one of Java, Python, or Go, ability to solve problems through programming.
• Security Experience: Prior experience in web application security, network security, container security, or data security is advantageous.
• Soft Skills: Strong logical thinking and rigorous problem-solving abilities, excellent learning capacity, communication skills, and teamwork spirit, passion for technology and a desire to contribute to technical advancements.
• Ability to speak and write in Chinese as the incumbent requires to liaise with the China HQ counterparts/personnel for work or project related matters

• Review contract documents, perform measurements, and promptly prepare Bill of Quantities.
• Collaborate closely with the Project Team to submit progress reports, progress claims, variation orders, final accounts, and other relevant documents.

Requirements:

• Diploma in Quantity Surveying or equivalent
• At least 2 years of work experience in construction or security system industry.
• Proficient in AutoCAD and ELV systems.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R24120303

The energy of a newsroom, the pace of a trading floor, the buzz of a recent tech breakthrough; we work hard, and we work fast - while keeping up the quality and accuracy we're known for. It's what keeps us inventing and reinventing, all the time. Our culture is wide open like our spaces. We bring out the best in each other through collaboration. Through our countless volunteer projects, we also help network with the communities around us, too. You can do amazing work here. Work you couldn't do anywhere else. It's up to you to make it happen.

What’s The Role:

Bloomberg’s Legal & Compliance Department plays a critical role in supporting our businesses and operations around the world. We move quickly and thoughtfully to help address a variety of complex legal issues that arise across the Company’s various businesses. Our team is made up of talented and hardworking professionals who think creatively and work collaboratively in an open environment to deliver results, drive innovation, and solve difficult problems. We also recognize the value of diversity and inclusion in cultivating a supportive workplace and the importance of giving back to our communities as evidenced by our award-winning pro bono program.

The Legal Negotiations team has frontline responsibility for negotiating the legal terms and conditions of our customer contracts worldwide. Our colleagues depend on us to gain deep product and commercial contract knowledge in order to support them in closing the deal, while protecting our businesses from undue legal risk.

Based in Singapore, you will be an integral part of the Legal Department, working closely and supported by your Negotiations colleagues and In-house Counsel. You will be responsible for negotiating licensing agreements with Bloomberg's customers which range from major financial institutions to government entities across a wide range of fin-tech products and services that are dynamic and often cutting-edge. We'll rely on you to build internal partnerships and balance both the needs and drive of Bloomberg Sales and our customers in a time-sensitive environment.

We'll Trust You To:

• Respond to contract inquiries and negotiate legal terms and conditions with our customers
• Multitask 30+ contract negotiations and projects at a time
• Develop strong partnerships with Legal Counsel, Sales, Product, Contracts and Accounting teams
• Operate in an open and communicative way with our colleagues during all phases of the negotiation
• Be a quick learner who thrives in an increasingly regulated and fast paced environment
• Stay abreast of business sales and product strategies
• Be an active participant in identifying and supporting projects that continuously improve our own operations as well as those that streamline processes between us and our business partners.
• Speak, read, and write fluently in English and Mandarin since you will be responsible for covering Greater China among other countries throughout APAC. Additional Japanese language skills a plus

You’ll Need To Have:

• A bachelor's or Law degree or equivalent
• A minimum of 5 years of demonstrated contract experience negotiating legal and commercial terms & conditions with customers or suppliers
• Experience partnering closely with legal counsel
• Strong attention to detail and risk
• Superb work ethic and judgment
• Excellent organization and time management skills
• Superb written and oral communication skills
• Ability to quickly learn and navigate Bloomberg’s proprietary technology, which is an integral part of the contract process workflow
• Adaptable to the changing needs of our business partners and external customers
• A self-starter who is proactive, independent and solution driven
• An enthusiastic teammate, who is reliable, has a positive can-do attitude and is receptive to and actions feedback
• Someone who enjoys an innovative, challenging and ever-changing environment
• Flexibility to work some evening hours to hold conference calls with colleagues in New York

We'd Love To See:

• Strong interpersonal skills and confidence along with excellent customer service
• Experience negotiating software licensing/financial data/technology contracts
• Experience working with demanding Sales partners and customers
• An independent and strategic thinker who is service oriented, forward-thinking, and eager to learn
• Demonstrated continuous career growth within an organisation

If this sounds like you:

Apply if you think we're a good match. We'll get in touch to let you know what the next steps are, but in the meantime feel free to have a look at: https://www.bloomberg.com/company/what-we-do/

Why Bloomberg?

We’re individuals with diverse backgrounds, talents, and experiences who take on big challenges and create even bigger impact through our work. We’re interested in what makes you you, and how we can create opportunities for you to channel your unique, personal energy and grow to your fullest potential.

Learn more about our office and benefits:

Singapore | www.bloomberg.com/singapore

Bloomberg is an equal opportunity employer and we value diversity at our company. We do not discriminate on the basis of age, ancestry, color, gender identity or expression, genetic predisposition or carrier status, marital status, national or ethnic origin, race, religion or belief, sex, sexual orientation, sexual and other reproductive health decisions, parental or caring status, physical or mental disability, pregnancy or maternity/parental leave, protected veteran status, status as a victim of domestic violence, or any other classification protected by applicable law.

Bloomberg provides reasonable adjustment/accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable adjustment/accommodation to apply for a job or to perform your job. Examples of reasonable adjustment/accommodation include but are not limited to making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you would prefer to discuss this confidentially, please email [email protected] (Americas), [email protected] (Europe, the Middle East and Africa), or [email protected] (Asia-Pacific), based on the region you are submitting an application for.

We are seeking a highly skilled and experienced Chief Legal Officer (CLO) with expertise in international government filings and US financial regulations to join our dynamic team. you will be responsible for overseeing and managing all legal matters related to regulatory compliance and government interactions across our global operations, playing a pivotal role in shaping the company's legal strategy and ensuring compliance with international laws and regulations

Responsibilities:

• Develop and implement strategies for managing and optimizing international government filings, including regulatory submissions, permits, licenses, and other required documentation.
• Collaborate with internal stakeholders, including executives, department heads, and legal teams, to ensure alignment with business objectives and regulatory requirements.
• Collaborate with external legal counsel and advisors as needed to address complex legal issues and ensure the company's interests are protected.
• Advising on the legal aspects of fundraising strategies, including private placements, public offerings, crowdfunding, and other fundraising methods.
• Drafting and reviewing offering documents, such as private placement memorandum (PPMs), prospectuses, subscription agreements, and other disclosure materials.
• Ensuring compliance with securities registration requirements or exemptions under Regulation CF, Regulation D, Regulation S, Regulation A+, or other exemptions available under US securities laws.
• Conducting due diligence on investors and potential counterparties to ensure compliance with AML/KYC requirements and mitigate legal risks.
• Negotiating and structuring investment transactions, including equity investments, debt financing, convertible securities, and other financial instruments.
• Manage relationships with government agencies, regulatory bodies, and other external stakeholders to facilitate efficient and effective communication and compliance.
• Provide leadership and guidance to the legal team, fostering a culture of excellence, collaboration, and continuous improvement.
• Conduct internal audits and assessments to identify areas of non-compliance or potential risk and develop strategies to address them.
• Represent the company in legal proceedings, negotiations, and other interactions with governmental entities as necessary.
• Stay abreast of changes in international laws and regulations that may impact the company's operations and provide proactive guidance to mitigate risks.

Requirements

• Juris Doctor (J.D.) Degree from an accredited law school.
• Admission to the bar in at least one jurisdiction; additional admissions preferred.
• Minimum of 7 - 10 years of experience practicing law, with a focus on international regulatory compliance and government filings.
• Excellent communication and interpersonal skills, with the ability to effectively collaborate and negotiate with internal and external stakeholders.
• Demonstrated leadership abilities, with experience managing and developing high-performing legal teams.
• Strategic thinker with the ability to anticipate and mitigate legal risks while supporting business objectives.

Desirable Experience (Added Advantage):

• Proven track record of success in managing complex legal matters, regulatory challenges and experience in the fintech industry with familiarity on the unique legal challenges and regulatory frameworks governing financial technology companies. This includes compliance with financial regulations (e.g., KYC, AML, GDPR, PSD2)
• Deep understanding of US financial regulations such as the Securities and Exchange Commission (SEC), the Commodity Futures Trading Commission (CFTC), the Financial Industry Regulatory Authority (FINRA), and other federal and state regulatory bodies

• Instrumentation of measurement and detection equipment for military and homeland security.
• Oversee post-sales delivery of equipment, conduct scheduled maintenance, and conduct diagnostic analyses for troubleshooting and repair tasks.

Requirements:

• Higher Nitec in Electrical & Electronics Engineering or equivalent.
• At least 2 years of working experience

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

• Keeping up to date with international developments and best practices relating to AML and compliance and identifying areas for enhancement across APAC offices
• Plan and manage projects (with or without consultants) from end to end, for improvements in AML or compliance processes in APAC offices
• Understand the regional AML framework, policies and processes and be able to provide viable recommendations for initiatives that would elevate the efficacy and efficiency of controls in the framework.
• Co-ordinate and manage external consultants and other stakeholders to ensure issues and tasks are addressed on a timely basis
• Check the deliverables of consultants to ensure accuracy, completeness and meeting of objectives
• Manage system selection, UAT, implementation, post-implementation reviews and enhancements, co-ordinating with users and IT
• Co-ordinate with HO and APAC offices on AML and compliance matters and policies
• Other matters assigned by Dept Head or team head

Requirements :

• Degree or equivalent
• At least 3 years' experience in planning activities in Compliance or AML in FI is essential
• Prior experience managing projects, planning to post implementation preferred
• Experience in manging cross country projects is highly desirable
• Good communication and stakeholder management skills
• Able to work under tight timelines
• Strong project management skills

Job Responsibilities:

1. Promote the construction and optimization of the security and security operation center system, including but not limited to log collection, analysis, alarms, SOAR, and BAS;

2. Responsible for tracking and analyzing security issues and promoting the completion of closed-loop processing of security incidents;

3. Enrich and optimize existing alarm scenarios and rules to improve alarm quality;

4. Participate in daily emergency response to security incidents and security system maintenance;

5. Participate in building security testing capabilities for office networks, production networks, and cloud environments;

6. Participate in the company’s office security offensive and defensive confrontation to improve office security capabilities;

job requirements:

1. More than 10 years of security-related work experience, and those who have engaged in Web3-related work are preferred;

2. Be familiar with vulnerability management, writing and maintaining security baseline detection rules, understand the principles of common vulnerabilities, and have the ability to write POC and EXP codes for vulnerabilities;

3. Familiar with at least one language such as Python and Java, and have API system integration development capabilities;

4. Familiar with big data development tools such as SQL, ELK, Kafka, etc., have log analysis and processing capabilities, and can be combined with security risk data;

5. Be familiar with the threat detection operation ideas in office networks, production networks and other environments, and can set up systematic detection solutions according to scenarios;

6. Familiar with the configuration management and rule writing of common security products such as Sysmon, Osquery, and Wazuh; familiar with the main tactics and techniques of the ATT&CK attack matrix and able to convert them into detection rules;

7. Have experience in intrusion detection and emergency response, and be able to quickly locate, block, and defend security incidents;

8. Have the ability to discover vulnerabilities and be able to complete the entire penetration testing process independently.

Bonus Point:

1. Responsible for the complete R&D cycle of security defense products

2. Have in-depth understanding of offense and defense, and experience in actual combat with APT

3. Ability to analyze the behavior of malware samples in Windows/macOS/Linux environments

4.Able to communicate in different Language with teams based in Europe or China

JOB PURPOSE:

The Regional Security Head (RSH) will be responsible for managing the FAB’s Information Security Program at the regional level.

The Regional Security Head will report to Head of International Security and shall be responsible to plan, implement, monitor, and review the information security program in the consultation with Group Security Office – Head office team. The RSH shall ensure the information security program is in alignment with the regulatory, legal, and statutory requirement of the region and the business strategy. The Regional Security Head role will be operating out of FAB Regional office and will require travel within the region while fulfilling the responsibilities.

The Information Security Officer (ISO) will be responsible for managing the FAB’s Information Security and Data Privacy Program for Singapore. He/She serves as the process owner of the appropriate second-line functional activities related to confidentiality, integrity, availability, privacy and recovery of information owned or processed by the business unit in compliance with regulatory requirements.

KEY ACCOUNTABILITIES:

• Review and Maintain Security Policies, Standards, and Procedures pertaining to the regional locations.
• Participate in discussion and coordinate activities between local business units, support functions, Compliance Team, IT and GSO – HO for information security, planning, implementations, and review
• Ensure information security compliance as per regulatory requirements (MAS-SNG, BNM, HKMA Standards, GDPR, PCI DSS and any other)
• Update International Location Executive management regarding information security initiatives, major risk, threats, attacks, and incidents.
• Review new regulatory legislations; promptly communicate all regulatory notices/circulars to all concerned areas, provide interpretations if necessary; develop/monitor action plans towards its implementation.
• Assist Head office during Regulatory Examinations; ensure implementation/regularization of observations linked to compliance while meeting the deadline(s).
• Review Technology Risk Assessments, RCSA and Third-party Risk assessments.
• Assist and support for Internal and External Audits. Monitor and track all open issues with IT/IS and concerned international SPOCS for regional locations.
• Oversee the tracking and closure of related findings.
• Govern the security awareness program for respective regional staff.
• Provide support to FAB CSIRT for information security incident and data breach handling.
• Coordination with International Business units/Fraud Risk / GSO for digital forensic investigation
• Review and assess the regulatory compliance circulars/notices, discuss with GSO- HO and enforce security controls as applicable.
• Assist Group Security – Head Office team in vulnerability assessment and penetration testing.
• Review Management Dashboards/Security MIS related to Patching, VA, PT, Baselines, and end point security controls
• Assess and Review Change Requests and Security Exceptions pertaining to regional IT services.
• Review BRDs, Solution Design, Concept Design and any other requirements from regional business units and local IT teams.
• Review and track compliance for Data Privacy and Protection controls.
• Review KPIs and KRIs for regional information security processes.
• Perform the role of 2nd line of defence oversight over Technology, Data Privacy, Business Continuity Management and Vendor Management functions.
• Perform the role of GSO SPOC for the Singapore Branch.

QUALIFICATIONS & EXPERIENCE:

• Information Security or IT Security or IS Audit background
• Must be having a minimum 10 years of Information Security Experience.
• Expert knowledge of Information Security Domains and should be certified (CISA, CISSP or CISM or any other relevant security certification)
• Experience in a similar type of role in a multinational business and dealing with regulatory authorities, governments, and industry bodies
• Experience in managing international security or regional security teams
• Ability to make good judgments regarding security risk and to prioritize resources and activity around managing those risks
• Able to conduct the role independently and with integrity
• Ability to plan, organize and prioritize tasks and projects
• Good personal communication skills capable of dealing with wide range of stakeholders, including senior management
• Fluent in English