Summary of the role

The primary responsibility of the Red Team Analyst is to protect Marina Bay Sands' gaming, retail, and hospitality sectors from cyber threats. This includes conducting adversarial simulations, red/purple team exercises, and security assessments. All duties are to be performed following Marina Bay Sands’ policies and procedures. All duties are to be performed in accordance with the department and Marina Bay Sands’ policies, practices and procedures.

Job Scope

This Analyst is expected to perform within the areas of at least one of the following:

Adversarial Simulation:

• Perform comprehensive analyses and simulations to mimic cyber threats and identify vulnerabilities.
• Execute threat-led penetration testing and red/purple team exercises using frameworks such as MITRE ATT&CK and TIBER-EU.
• Conduct attack simulation exercises using Tactics, Techniques, and Procedures (TTPs) that cyber threat actors use to plan and execute cyber-attacks.

Red Team Activities:

• Conduct authorized offensive security operations to test the effectiveness of cyber defenses and simulate cyber-attacks.
• Execute penetration tests on external and internal infrastructures, web applications, and mobile applications to identify security weaknesses and misconfigurations.
• § Perform social engineering assessments (email phishing, vishing, physical access attacks) to simulate password theft, system infiltration, and malware/ransomware deployment.
• Perform source code reviews to identify software vulnerabilities and detect malicious embedded code.
• Assess security configurations for cloud, server, network, and middleware infrastructures.
• Review IT architecture for both cloud and on-premises environments.

Forensics and Incident Response:

• Lead cyber incident investigations and response efforts.
• Collaborate with cybersecurity specialists to maintain and update security testing methodologies.
• Perform other related duties as assigned.

Job Requirements

• Minimum diploma with at least 3-5 years of hands-on cybersecurity experience in relevant areas.
• Preferred certifications: CISSP, OSCP, CRTP, CRTO, OSWE.
• Experience in Gaming, Banking, or Critical Infrastructure InfoComm Industry is an advantage.
• Effective verbal and written communication skills.
• Proficiency with offensive security tools such as Cobalt Strike, Empire, Havoc, Mythic.
• Experience in setting up red teaming Command and Control (C2) infrastructure, including web/proxy servers, redirectors, domain frontingSkills in developing malicious payloads and understanding obfuscation and encryption techniques.
• · Proficiency in at least one scripting language (e.g., Bash, PowerShell) and/or programming language (e.g., Python, C, C#, C++, Java).
• Understanding of basic networking concepts and Internet protocols (e.g., TCP/IP, HTTP(S), SMTP, DNS, SSL/TLS).
• Knowledge of industry-recognized security testing standards and penetration testing methodology.
• Strong understanding of enterprise technologies, operations, and security evaluations.

Marina Bay Sands is committed to building a diverse, equitable and inclusive workforce, providing equal opportunities as we grow our talent base to match our growth ambitions in Singapore. Our employees are committed to adhere to and abide by all rules, regulations, policies and procedures, including the rules of conduct and business ethics of the Company.

The Lead of the SRAP APAC legal entity analytics will support the Head of APAC Business Servicing & Analytics in delivering all SRAP APAC entity planning and analysis, including quarterly financial analysis, closing/reporting, financial planning and forecasting, expense analysis, as well as ad hoc business analysis for senior management. The role is required to focus on SRAP entity level analysis (i.e. the analysis of full P&L and B/S under local reporting framework) to allow a wholistic assessment on dividend and capital repatriations to Group.

In addition, the role has a key component to further develop and enhance the Apac entity planning and analysis tool as the business in Asia Pacific grows. Key deliverable to enhance the efficiency of the tools and database supporting the overall consolidation of entity actuals and plan financials.

There is a specific requirement of this role to be a strong communicator to all stakeholders, including but not limited to entity CEOs and CFOs, regional finance teams with Asia Pacific and Head office, and senior management.

Key duties and responsibilities

1. Entity-level quarterly financial reporting and analytics

• Perform the quarterly financial reporting process for IFRS 17 P&L B/S under local reporting framework, including detail variance analysis (actual vs plan, actual vs prior year) and the underlying business/technical drivers
• Perform the entiy-level closing process in collaboration with Business Performance, Valuation and Technical Accounting teams to identify the early developments for the quarter and timely communication of key impacts; this will need to include a holistic assessment of net results on dividend and capital to Group
• Establish a holistic bridging analysis across all reporting bases (i.e., group reporting standard, local GAAP, market view, entity view)
• Provide effective and timely communication of entity level results to management team, including local entity CEOs and CFOs.
• Streamline the quarterly financial reporting process and requirements

2. Entity-level operating planning and forecast

• Perform the production process of local entity IFRS 17 Operational Planning for the APAC to ensure timely submission, good data quality and documentation of key drives/risks to plan
• Support the production process of local GAAP income statement and balance sheet for the SRAP APAC entities in collaboration with Valuation and Finance teams
• Support Capital Management Team to provide Operating Planning to allow for capital forecast
• Provide effective communication of local entity plan progression for each iterations of operating plans and the corresponding plan assumptions / key risks to plan

Required experience & competencies

• At least 7 years of relevant working experiences in fields related to insurance/reinsurance/accounting, preferably with at least 5 years in actuarial, accounting, reporting matters and data analysis or insurance audit
• Ideally a Qualified Actuary with very strong Actuarial or Accounting and IFRS knowledge, with insurance context
• Solid data management skills
• Strong experience on communication of complex financials to multiple stakeholders
• Strong analytical and conceptual competence
• Able to handle issues from macro perspective and delve into details when needed
• A strong multi-tasker and preferably have good project management experiences
• Innovative, versatile & committed
• Excellent Excel skills, preferably VBA, macros usage
• Possess good project management skills set
• Excellent analytical skills
• Great communication and interpersonal skills
• Self-motivated and reliable individual
• Leadership experience would be helpful, but not a must

Summary of the role

The primary responsibility of the Governance Analyst is to perform duties in one or more of the following areas: vulnerability management, cyber data governance, risk and verification, cyber policy/standards/standard operating procedures development, and penetration testing and red teaming. All duties are to be performed in accordance with departmental and Las Vegas Sands Corp.’s policies, practices, and procedures.

Job Scope

This Analyst is expected to perform within the areas of at least one of the following:

• Cyber governance, risk and verification which performs risk assessments, system security and industrial control system zone security plans including listing controls, gaps in implemented controls and tracking remediation of gaps, and provides input to the risk register
• Network and Operating Systems Security Configuration assessment which performs security configuration reviews including hardening controls, firewall rules review, web/application security configurations
• Penetration testing and red teaming which includes performing security testing to identify security vulnerabilities on LVSC applications and environment, providing recommendations for remediation, and tracking and remediating found issues.
• Cyber policy/standard and standard operating procedure creation, review, distribution, and maintenance
• Vulnerability management which includes successfully scanning the LVSC computing environment for secure configurations and vulnerabilities, researching and eliminating false positives, tracking and remediating found issues, and tracking and performing the exception processes
• Performs other related duties as assigned.

Job Requirements

• Minimum diploma with at least 5 - 8 years cyber security hands-on experience in one or more of the areas listed in place of a degree.
• Preferrable to have a current and in good standing CISSP or similar certification, and Offensive Security (OSCP, OSWE, OSEP) or Crest (CRT, CCT) certifications
• Demonstrated experience in at least 1 area in the following list:
• Cyber Vulnerability Management
• Cyber Governance, Risk and Verification
• Cyber Policy/Standard/Standard Operating Procedures
• Cyber Penetration Testing and Red Teaming
• Working knowledge of threats and vulnerabilities and their significance to cyber risk, network operations, and end-point security
• Strong interpersonal skills with the ability to communicate effectively with guests and other Team Members of different backgrounds and levels of experience.

Marina Bay Sands is committed to building a diverse, equitable and inclusive workforce, providing equal opportunities as we grow our talent base to match our growth ambitions in Singapore. Our employees are committed to adhere to and abide by all rules, regulations, policies and procedures, including the rules of conduct and business ethics of the Company.

noco-noco is a fast-growing decarbonization solutions provider with a range of products and services across the clean energy and mobility space. Since our incorporation in 2019 and through our public listing in 2023, we have been driven by our commitment to solve tangible environmental challenges with game-changing technology and innovative service solutions for global impact. We collaborate with business/commercial and R&D partners across the value chain and spread across South and Southeast Asia.

noco-noco Inc. is seeking an experienced Legal Counsel with over 15 years of legal expertise, including experience managing the affairs of a US-listed company.

The ideal candidate will be proficient in handling documentation related to fundraising, private placement of shares and financing from US fund managers across equity, mezzanine, and debt instruments. Additionally, the candidate should possess significant experience in international mergers and acquisitions (M&A) and risks & compliance matters related to publicly listed companies. This role requires a highly skilled professional with a strong understanding of US securities laws, corporate governance, financial regulations, and international M&A.

Other supporting matters that require legal advisory include legal matters related to ESOW and ESOP implementation, employment and service agreements for senior executives, director engagements in Singapore and remote executives located in other jurisdictions in Asia, namely Thailand and Japan.

Key Responsibilities:

• Corporate Governance: Oversee and manage the legal aspects of corporate governance for the company, ensuring compliance with all relevant regulations and best practices.
• Securities Compliance: Ensure compliance with US securities laws and regulations, including the Securities Act of 1933, the Securities Exchange Act of 1934, and related rules and regulations.
• Fundraising and Financing Documentation: Prepare, review, and negotiate documentation related to fundraising and financing activities, including equity, mezzanine, and debt financing.
• Stakeholder Management: Liaise with US fund managers, investors, and other stakeholders to facilitate fundraising and financing transactions.
• Legal Advisory: Provide strategic legal advice to senior management and the board of directors on various legal and regulatory matters.
• Contract Management: Draft, review, and negotiate a wide range of commercial contracts and agreements.
• Risk Management: Identify and mitigate legal risks associated with the company’s operations and transactions.
• Litigation Management: Oversee and manage any litigation or disputes involving the company.
• International M&A: Manage and oversee all legal aspects of international mergers and acquisitions, including due diligence, structuring, negotiation, and integration.
• Listco Compliance: Ensure compliance with all regulations and requirements applicable to publicly listed companies, including disclosure requirements, corporate governance standards, and shareholder relations.
• Intellectual Property: Manage and safeguard the company’s intellectual property and develop strategies to protect and enforce these rights.
• Public Relations: Review and clear all external PR and Investor communications.
• Risk & Compliance Secretariat: Oversee and develop compliance policies and procedures. Regularly review and implement these policies, particularly those related to whistleblowing and ethical matters.

Qualifications:

• Degree from an accredited law school.
• Admission to the bar, preferably in a US jurisdiction.
• A minimum of 15 years of legal experience, with experience in a senior legal role preferably within a US-listed company.
• Experience with US securities laws, corporate governance, and financial regulations.
• Proven experience in managing documentation related to fundraising and financing from US fund managers, including equity, mezzanine, and debt.
• Strong experience in international mergers and acquisitions (M&A).
• In-depth knowledge of compliance matters related to publicly listed companies.
• Strong analytical, drafting, and negotiation skills.
• Excellent communication and interpersonal skills.
• Ability to work independently and as part of a team in a fast-paced environment.
• High ethical standards and professional integrity.
• Experience in the technology or financial services sectors.
• Understanding of international legal frameworks and cross-border transactions.
• Strong network within the legal and financial communities.

• Responsible for developing and revising the Internal Control Program for security trade control.
• Handling contract matters, including contract review and management.
• Overseeing compliance issues like data privacy, anti-bribery, and anti-trust.

Requirements:

• Diploma and above.
• At least 3 years of experience in trade compliance.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R1326740

Wherever you are in the amazing world of Disney, you are contributing to the stories of our iconic brands, recognised by audiences everywhere for entertainment, information and inspiration. Innovation, imagination and inclusion are at the core of Disney, defining the experience that we deliver as well as providing the foundation of our success. The scope of our business, combined with global growth and collaboration result in an inclusive employee experience characterised by continuous learning, development and achievement.

The Executive Director will serve as a regional leader of integrated communications, proactively enhancing and protecting the reputation of the Disney Experiences APAC business. Overseeing the corporate communications function covering external communications, public relations, public affairs, and internal and executive communications across the Disney Experiences business.

Disney Experiences APAC business covers:

Disney Consumer Products, (DCP) is the division of Disney Experiences that brings beloved brands and franchises into the daily lives of families and fans through products – from toys to t-shirts, apps, books, console games and more – and experiences that can be found around the world, including on the disneystore.com e-commerce platform and at Disney Parks, local and international retailers, as well as Disney store locations globally. The business is home to world-class teams of product, licensing and retail experts, artists and storytellers, and technologists who inspire imaginations around the world.

Since launching in 1998, Disney Cruise Line has established itself as a leader in the cruise industry, providing a setting where families can reconnect, adults can recharge and children can experience all Disney has to offer. Today, the award-winning Disney Cruise Line continues to expand its blueprint for family cruising with a fleet of five ships — the Disney Magic, Disney Wonder, Disney Dream, Disney Fantasy and Disney Wish — and three more ships planned. One of these ships will exclusively homeport in Singapore for at least five years beginning in 2025, marking the cruise line’s debut in Southeast Asia.

Responsibilities:

• Develop and execute strategic and integrated communication plans to protect and enhance the reputation of the Disney Experiences business and drive the business objectives of both the DCP and DCL businesses in the region.
• Develop and execute the Executive and Internal Communications functions across DCP and DCL.
• Proactively identify/mitigate emerging issues using an integrated approach that considers all aspects of communications.
• Develop, educate and enhance relationships with key media stakeholders across the APAC region to support business objectives.
• Develop and enhance relationships with key stakeholders and partners, both externally and internally.
• Work hand in hand with Corp Comms in APAC to integrate APAC Disney Experiences into the TWDC narrative.
• Work hand in hand with Corp Comms in APAC to drive CSR programs that enhance the Disney Experiences business and garner staff engagement.
• Develop and execute efforts to maximize social media and online tools to drive and support the effective communications of key business messages.
• Lead the APAC DCP Comms team, including SEA comms lead in implementing internal and external communications, public affairs and media relations plans for key markets.
• Lead and work hand in hand with the regional Corp Comms team in implementing CPGP communications, public affairs and media relations plans for key markets.
• Build and lead an APAC DCL Comms team across Public Affairs, Internal and Executive Comms, Public Relations, and Events to implement internal and external communications, public affairs, and media relations plans for key markets.

Requirements:

• Bachelor’s degree or equivalent experience in Public Affairs, Communications, Journalism, Government, Broadcast Communications or other relevant areas.
• Preferred MBA degree or equivalent
• Experience with Asia Pacific markets, with strong knowledge of the media and consumer landscape.
• 15+ years of media relations experience dealing with leading brands, high-profile government work or agency experience.
• Proven regional leader with the ability to manage virtual teams across markets and regions
• Excellent oral/written communication and presentation skills.
• Issues and crisis communications experience.
• Demonstrated creative thinking and strong project management skills.
• Flexibility, resourcefulness and an ability to thrive in a fast-paced, changing environment.
• Strong leadership and interpersonal skills to influence and forge partnerships both internally (across Asia and the U.S.) and externally.
• Proactive, self-starter.
• Computer proficiency in Word, Excel, PowerPoint and Access.
• High level of corporate professionalism, maturity and political savvy.

The Walt Disney Company is an Equal Opportunity Employer. We strive to be a diverse workforce that is representative of our audiences, and where all can thrive and belong. We are committed to building a team that includes and respects a variety of voices, identities, backgrounds, experiences and perspectives.

Overview

With over 18,000 employees worldwide, the Microsoft Customer Experience & Success (CE&S) organization is responsible for the strategy, design, and implementation of Microsoft’s end-to-end customer experience. Come join CE&S and help us build a future where customers come to us not only because we provide industry-leading products and services, but also because we provide a differentiated and connected customer experience.

Join our Security Customer Success Unit at Microsoft, a dynamic team dedicated to ensuring the security and success of our customers. As a Security CSA (Cloud Solution Architect) Lead, you will play a pivotal role in shaping our field execution strategies and driving customer success in a rapidly evolving cybersecurity landscape.

The Customer Success team will drive change management and adoption activities with key business decision makers and IT decision makers, helping reduce implementation risk, driving usage of existing solutions, and identifying opportunities to accelerate the path for customers to realize business value from their investments.

Responsibilities

Customer Centricity

• Drive positive Customer Satisfaction & become a trusted advisor. Provide feedback & insights from customers/partners. Be the Voice of Customer to share insights and best practices, connect with Global Security teams at Microsoft, Engineering and Product teams to remove blockers and influence the solution roadmap.
• Experience in the implementation (end to end) of Data Security projects with Data Security Platforms, preferably experience with Microsoft Purview (Information Protection, Data Loss Prevention, Information Risk Management)
• Guides other team members to focus on customer/partner experience through efficient delivery and ensuring a seamless and connected customer experience. Supports definition of customer/partner conditions of success. Anticipates customer/partner dissatisfaction and unmet needs and executes strategies to improve experience, value realization, and acceleration of customer transformation.
• Lead and execute Field Usage and Consumption Strategy projects, providing structure and guidance to ensure successful outcomes.

Business Impact

• Position and deliver solutions that drive Security product usage and develop opportunities to drive Customer Success business results & help Customers get value from their Microsoft investments. Identify resolutions to Customer blockers by leveraging SA subject matter expertise.
• Deliver according to MS best practices & using repeatable IP. Accelerate Business Value of overall Security adoption by improving security posture and ensuring that the solution exhibits “Secure by Design” framework, such as high-performance levels, security, scalability, maintainability, appropriate reusability, and reliability upon
• Collaborate and orchestrate with other CSAs and MS stakeholders including FastTrack, partner, and Microsoft Consulting in developing complex end-to-end Enterprise solutions with the Microsoft Security platform.
• Drives consumption and usage rigor and discipline by developing and leading inclusive and regular rhythm of business (ROB) processes for a large subsidiary. Delivers on business commitments, collect performance data, report performance to Global Lead and Strategy Team, and informs future plans and decisions (e.g., forecasting, anticipated barriers). Leads a coaching rhythm in alignment to Microsoft's coaching framework and worldwide rhythym framework practices, integrated both locally and with Corporate.
• Creates culture to drive operational and pipeline excellence, with particular focus on the key performance indicators (KPIs) covering operating model metrics (e.g., growth, velocity, efficiency, resource allocation) to ensure consistent execution against strategy. Escalates to ensure removal of blockers related to the customer business and/or internal processes to deliver technical and operational excellence in Customer Success teams and accelerate customer adoption. Leads area-level/global-level rhythm of business (ROB) and instills a sense of urgency for strategic agility through other leaders. Identifies widespread or global patterns in blockers and develops strategies to resolve and prevent them in the future. Assesses and prioritizes high-impact technical blockers, and coaches team to enable resolution. Leverages systems for identifying leading and lagging indicators of success across customer success pipeline at the area/regional level (as appropriate). Drives area/regional accountability (as appropriate) to identify gaps in execution leading to optimizing customer success delivery for value realization.

Technical Leadership

• Leverages credibility and expertise to act as executive-level technical sponsor and leader for customers and partner ecosystem to continuously evolve and grow through the digital transformation journey (e.g., increase usage/consumption to drive customer expansion, upsell and renewal recapture rates). Provides area/global thought leadership for technical integration and innovation with the area leadership team. Creates culture of technical community engagement with customers and partners to influence actions and results at senior and executive levels of their organizations. Drives technical executive sponsorship with the customer and partner and influences strategy for regional scale. Leads critical engagements with customer and partner senior leadership, providing executive support for the Customer Success Unit (CSU) team to align operational plans with the organization's strategies to drive customer and partner obsession.
• Advocates to drive customer technical requirements with corporate product and engineering teams. Creates an internal feedback loop to drive broad, systemic continuous improvement for customers across Microsoft (e.g., security, product support). Leverages and creates customer and employee forums for open feedback and collaboration across teams. Invests in building and maintaining a strong network with corporate engineers to quickly meet customer and partner needs.
• Serves as an expert/spokesperson, as appropriate around key technical, operational and customer success topics (e.g., product/service lifecycle, customer perspective) to influence and drive recognition for Microsoft solutions and brands by speaking at events, having an active presence on social media platforms, and encouraging organizational participation. Leverages subject matter expertise to be and influencial voice in the area/globally, clarifying technical and operational questions and technology position. Supports Customer Success Unit (CSU) community-building internally and externally by providing community thought leadership and orchestrating with professional network to promote learning.

Qualifications

Required/Minimum Qualifications

• Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, or related field AND 4+ years experience in cloud/infrastructure technologies, information technology (IT) consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, and/or consulting
• OR equivalent experience
• 4+ years of experience and understanding of large-scale security deployments in enterprise-wide environments.

Additional or Preferred Qualification

Desired Microsoft Technology & Industry Equivalent. Certification in one or more of the following areas:

• Programming experiences, using Microsoft Information Protection SDK (e.g. PowerShell, C#, Python)
• Technical Certification in Microsoft SC-400 – Microsoft Information Protection Administrator)

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

About the client

Our client is a prominent global trading platform, established in Australia, and serving millions of users worldwide. They specialize in delivering an integrated digital service platform designed for investors. Their offerings include market data, news, analysis, and comprehensive trading services, all within a user-centric fintech ecosystem.

About the role

The role involves planning, creating frameworks, roadmaps, processes, and controls, as well as coordinating across business and technical stakeholders to monitor and detect security threats and respond to security incidents.

• Develop and implement the company’s cyber/info-security efforts to ensure compliance with information security requirements stipulated by financial services regulators. Plan and construct the company's cybersecurity and protection systems, continuously enhancing cybersecurity management and environment to ensure network system security and availability.
• Manage the company’s response to and relationship with info-security-related audits/compliance matters and inquiries from regulators or appointed auditors. This includes overseeing security compliance activities such as PCI/GDPR audits and IT security compliance related to financial regulations.
• Conduct daily security checks, analyze and detect potential security threats and vulnerabilities in the company's business systems and internal office environment. Conduct security audits and provide employee security awareness training.
• Oversee safety inspections in the company's R&D process and optimize related processes.
• Manage internal and external network attacks, phishing attacks, virus infections, intrusion defense, and other security incidents. Provide monitoring, early warning, response, and emergency response.

Skills and Experience requirements

• 5 years or more of experience in information security/cybersecurity.
• Familiarity with OWASP Top 10 and DDoS attack principles and protection.
• Proficiency in information security/cybersecurity skills such as offensive and defensive tactics, penetration testing, and vulnerability assessment.
• Familiarity with commonly used security tools and products.
• Experience with one or more public cloud security products.
• Understanding of TCP/IP principles.

Interested candidates who wish to apply for the advertised position, please click on "Apply Now". We regret that only shortlisted candidates will be notified.

Job Code: ANNH

EA License: 01C4394, R1872517 (Ho Hsien Ni)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its local and overseas subsidiaries and affiliates to collect, use and disclose your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services, complying with Government’s health advisories and such other purposes stated in our privacy policy. Our full privacy policy is available at https://www.persolkelly.com.sg/policies . If you wish to withdraw your consent, please drop us an email to let us know. Please feel free to contact us if you have any queries.

Position Overview

Assist in managing Infrastructure and IT Security related, for Regional Office (South Asia Ocean Region).

Responsibilities

• Support tRhe Regional Cloud Infrastructure hosting all the Critical Regional Business Solutions.
• Support Cloud Consolidation and Integration to Common Cloud for the Region.
• Plan, Design and Setup adequate Infrastructure for Operation Companies (OPCOs) to connect to Global and Regional Solutions.
• Support various Regional IT Infra projects, with primarily focus on Infrastructure, Elimination of Legacy hosted Infra.
• Support SD-WAN and other Infra Initiatives for the Region.
• Work closely with Global / Regional / Country IT teams to implement & Support Global IT Security Initiatives
• Manage other duties as assigned for Automation of Patch Management (Using Manage Engine), for GSOC, implementing Multi-Factor Authentication (MFA), Zscaler, Rapid 7 (Vulnerability Management), Trend Micro EDR and Others.
• Supporting initiatives advised by Global Security Audit (GSA) teams, resulting in overall improvement of IT Security Posture for the region.
• Assist in Documentation of IT Section Policies.
• Regular PDCA and follow up with Countries, to ensure Adherence for the above Initiatives.

Requirements & Qualifications

• Minimum Bachelor’s degree in IT or related field.
• Minimum 5 to 7 years In-Depth experience in Handling IT Infrastructure & IT Security at a Regional Level.
• Business driven with a Strong understanding of Prevalent / Current IT infrastructure and IT Security Solutions.
• Infrastructure Management and IT Security Skills.
• Cloud Solution Skills with a Must have experience to handle a regional Cloud Setup using AZURE.
• Understanding of relevant technology requirements required to handle the Responsibilities mentioned above.
• Strong Project Management Skills.
• Proven strength in strategic and conceptual thinking and design, implementation, and execution of strategies.
• Strong problem-solving and Co-ordination skills.
• Strong Vendor Management Skills.
• Good verbal and written communication skills.
• Proficient in Microsoft O365 Tools (Word, Excel, PPT and Others)
• Business trravelling may be required for this position.

Job Location

2 Changi South Avenue 2, Singapore 486354

Management Support Officer / Executive, Bar Admission and Examinations (3-year contract, renewable basis)

The successful candidate will be a part of the Bar Admission and Examinations team, reporting to the Head of Operations (Bar Admission and Examinations). Key responsibilities include:

1. Processing applications for courses, examinations and admission to the Singapore Bar.
2. Handling administrative tasks related to the department's various functions.
3. Ensuring proper documentation of work processes.
4. Responding to inquiry emails from candidates and applicants.
5. Undertaking any ad hoc projects or duties.

The successful candidate may anticipate placement or contract renewal at the end of the 3-year term based on performance.

We seek an individual who:

• is a good team player with strong planning, organisational and administrative skills.
• Can work independently with initiative and minimal supervision.
• Is proficient in written and spoken English.
• Holds a Diploma / Degree and has 2-3 years of relevant experience.

Interested applicants are invited to submit your detailed resume, indicating your current and expected salary, contact number(s), notice period, and date of availability. We regret to inform that only shortlisted candidates will be notified.ad

Role:

You will be part of the Security team (Governance, Risk and Compliance) and will work in a highly collaborative environment with cross-functional teams, to ensure compliance to the applicable regulatory requirements.

Responsibilities:

• Maintain cyber security policies, standards and procedures
• Manage and perform cyber risks and assessments
• Develop cyber risk documents
• Mitigate cyber security risks
• Conduct research on emerging cyber security & risk management trends, issues and alerts
• Track and monitor new security regulatory guidelines, and assess the compliance of and impact to the organization
• Assess the security deviations and risk acceptance raised by other business units
• Review and update cybersecurity risk assessment methodology and conduct cybersecurity risk assessment for critical systems
• Track remediation efforts for security & audit deficiencies

Requirements:

• Degree or Diploma in Computer Science, Computer Engineering or Information Security related fields
• At least 5 years’ of experience working in technology and/or cybersecurity governance
• Working experience in a highly regulated environment is preferred
• Strong understanding and familiarity with regulatory requirements such as IM8, MAS Notice on TRM, MAS Notice on Cyber Hygiene, MAS Technology Risk Management Guidelines, MAS Outsourcing Guidelines and the CSA Cybersecurity Code of Practice
• Strong understanding of NIST Cybersecurity Framework
• Cybersecurity professional qualifications such as CISSP, CISM, CRISC, CISA, GSEC, CCSK or equivalent would be advantageous
• Familiar with emerging technologies and possess an interest to stay abreast of industry developments (e.g. DevOps, Cloud, APIs, service-oriented architectures etc).
• Proficiency with application development experience and programming/coding/Powershell scripting will be an advantageous
• Prior experience in implementing Cybersecurity products such as IAM tools is a plus

Interested candidates are requested to send their resumes to [email protected] with current, expected salaries, notice period etc

Role

Application Security Engineer – Cyber Security

Position Overview

The primary responsibility of the Application Security Engineer – Cyber Security is to support technologies that enable the companies’ cyber security goals and objectives, securing the confidentiality, integrity and availability of software and computer information systems. The role will serve as a security engineer for software development, supporting technologies that facilitate security of the software products and services. Additional key responsibilities of role include review of vulnerabilities identified by application security technologies and processes and provide the true positive results to the appropriate software development teams, and coordination with those teams to support their triage and remediation efforts for identified, valid vulnerabilities. All duties are to be performed in accordance with departmental and Client's policies, practices, and procedures.

Essential Duties & Responsibilities

• Act as a primary technical resource in development of a comprehensive security program to support various Software Development Lifecycles (SDLCs) and ensure that software developed in this SDLC is free of security vulnerabilities.

• Manage application security program across multiple SDLCs.

• Ensure cybersecurity requirements are met prior to production release.

• Triage potential vulnerabilities identified by application security program with context of application and related business knowledge.

• Maintain understanding of core functionality of supported software and first-party applications.

• Review and understand code from both business logic and technical standpoint.

• Coordinate with developers to prioritize and remediate identified true positive vulnerabilities.

• Collaborate with software development and quality assurance teams to ensure code is free from security defects.

• Communicate cybersecurity standards applicable to technology and coding workflows.

• Working with Application Security Engineers, optimize security with existing technologies and processes.

• Provide technical guidance to developers and engineers on cybersecurity best practices.

• Review performance of controls such as threat modeling, SCA, SAST, DAST, IAST, RASP, Secrets Scanning, Container Scanning, Misconfiguration Identification, Secure Code Review, CI/CD Pipeline Security, Deployment Environment Security.

• Coordinate with software development leadership, operations leadership, IT leadership, and cybersecurity leadership to integrate application security practices across departments.

• Actively seek ways to improve secure software development processes.

Additional Responsibilities:

• Develop and maintain security policies, standards, and guidelines.

• Conduct code analysis of first-party enterprise applications, through both manual and automation-enabled processes.

• Provide remediation guidance and recommendations to developers and administrators based on identified vulnerabilities and existing technology stack.

• Work with software development teams to prioritize and validate the urgency of mitigation of identified product vulnerabilities and security feature enhancement requests.

• Stay updated with the latest cybersecurity threats and trends and incorporate this knowledge into security architecture designs and practices.

• Conduct training and awareness programs to enhance the security posture of the organization. Participate in security audits and assist in regulatory compliance efforts.

• Work closely with IT operations and software development teams to ensure secure systems deployment and operations.

• Actively contribute to the organization’s cybersecurity strategy and roadmap.

Minimum Qualifications

• Outstanding collaboration and communication skills. •Any of the following combinations of education, professional experience, or both:

At least 2 years of experience in a relevant DevSecOps role and technical degree in computer / information science; or

At least 4 years of experience in a relevant DevSecOps role; or

At least 6 years of related field work experience, at least 1 year of which in a software development role, and at least 1 of which in a cyber security role and technical degree in computer / information science; or

At least 8 years of relevant field experience, at least 1 year of which in a software development role, and at least 1 year of which in a cyber security role.

•Demonstrated experience working with technical and non-technical staff.

•Knowledge of application security, software development, and cyber security concepts.

•Basic knowledge of a broad range of IT, Security, Controls and Service Delivery standards and frameworks for example, International Standards Organization (ISO) 27001, IT Infrastructure Library (ITIL), Control Objectives for IT (CoBIT), and Capability Maturity Model Integration (CMMI).

•Experience with Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure or other cloud platforms, with experience in developing and implementing software.

•Experience developing software in various coding languages such as Java, C#, PHP, etc.

• Demonstrated knowledge of web applications, cyber security, and open-source technologies.

• Safety is an essential function of this job.

• Consistent and regular attendance is an essential function of this job.

•Ability to execute multiple projects and tasks under tight deadlines.

• Provide off-hours support on an infrequent, but as needed basis. (Potential shifts may run 24/7 dueto the needs of the business).

• Strong interpersonal skills with the ability to communicate effectively with guests and other Team Members of different backgrounds and levels of experience.

• Must be able to work varied shifts, including nights, weekends, and holidays.

Additional Experience Recommended

• Professional certification in multiple programming languages (C#, .NET, Java, etc.) recommended.

• Professional certifications in cyber security (CISSP, OSCP, etc.) recommended.

• Experience with CI/CD and pipeline tools such as Jenkins, Docker, Kubernetes, and others.

• Knowledge of cloud platforms and services, with experience in cloud security.

• Experience with automated software and security testing tools and techniques.

• Ability to stay updated with the latest industry trends and advancements in cybersecurity.

• Understanding of enterprise software development practices.

• Experience working with software development teams.

• Experience identifying cybersecurity vulnerabilities and weaknesses in software.

• Experience reading, writing, and auditing software in multiple programming languages.

• Strong familiarity with common vulnerabilities and attack vectors.

• Knowledge of common encryption technologies (AES, PGP, SSH, SSL, etc.).

• Knowledge of common authentication protocols (OpenID Connect, OAUTH, SAML, RADIUS, LDAP, KERBEROS, etc.).

• Previous work experience as an Application/Product Security Engineer or Software Developer.

• Experience integrating security testing into an SDLC.

• Experience with incident response and handling methodologies.

• Experience with security technologies such as intrusion detection/prevention systems (IDS/IPS), firewalls, SIEM, etc.

• Physically access all areas of the property and drive areas with or without reasonable accommodation.

• Maintain composure under pressure and consistently meet deadlines with internal and external customers and contacts.

• Ability to interact appropriately and effectively with guests, management, other team members, and outside contacts.

• Work in a fast-paced and busy environment.

Overview

In SMC and Digital Sales, we have set out with the purpose to empower our customers through the unique value of the Microsoft cloud by building a globally led, digital-first scale organization aligned with partners. Dedicated to one of the fastest growing customer segments, the Small, Medium, Corporate (SMC) and Digital Sales organization is on pace to be Microsoft’s next $100 billion-dollar business - this is where you come in. As part of local subsidiaries or Digital Sales centers around the world, you will support a dedicated set of customers in identifying and achieving their business objectives through best-in-class digital engagement and partner co-selling. You will also have an opportunity to work cross-collaboratively while living our shared SMC and Digital Sales Culture priorities: Diversity and Inclusivity, Wellbeing, Sustainability, and Learning.

This opportunity will allow you to lead at the forefront of technology by growing the Security business across Asia with unique responsibilities for accelerated business growth.

This role is flexible, requires travel across the region and allows flexible work from home.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities

• The Security Solution Sales- Asia role is a senior role with responsibility for accelerating the growth of the Security solution area across the Asia region which includes the following Areas: Australia, New Zealand, ASEAN, Greater China, India, Japan & Korea.
• Work with the Security sales teams and partners to accelerate the growth of Security revenue and to take market share from our competitors.
• Collaborate with GPS to build a strong and capable Security partner ecosystem that can win against the competition.
• Drive joint territory planning and co-sell with key partners and work with GPS to build a consistent ROB cadence.
• Collaborate effectively with Security SE&O to enable our sellers and drive brand awareness for Microsoft Security with our customers and partners.
• Drive Solution Area performance excellence by working with Security Sales Excellence to implement T-13M sales execution rigor across the teams to drive healthy pipeline, Security revenue and partner performance and IAP metrics.
• Coach managers and sellers so they build strong Security specialization.
• Joint responsibility for Area Correction of Error plans.
• Provide sales and technical expertise and thought leadership to connect solutions with business impact.

Qualifications

• Bachelor’s degree in business, engineering AND 12+ years relevant work experience (e.g., Strategic Account Management, consulting, Technology Sales, corporate strategy, sales, business development, product management, project management, or related field) OR equivalent experience.
• Experience in Security Solutions is required.

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

China Everbright Water Limited is a company dual listed on the Singapore Stock Exchange and Hong Kong Stock Exchange. We are currently looking for an assistant legal counsel to join our legal and corporate secretarial department.

You will be reporting directly to the legal counsel and company secretary.

Roles & Responsibilities:

1. Provide legal support, such as: drafting, reviewing legal documents, providing legal advice to other stakeholders, negotiating legal documents;
2. Involve in various corporate secretarial matters, such as drafting board resolutions, minutes, meeting materials, advising on corporate governance issues.
3. Conduct research on the latest legal and regulatory changes;
4. Work closely with other departments and external teams (such as external lawyers, external company secretaries) where necessary; and
5. Oversee the company's compliance programs and ensure adherence to all legal requirements.
6. Other ad-hoc administrative matters

Requirements

1. The ability to communicate, read, and write fluently in both Chinese and English, as well as expertise in reviewing agreements and legal documents.
2. Strong willingness to learn and able to work individually with minimum supervision.
3. Ability to work under pressure in a fast-paced and dynamic environment.
4. Minimum 4-5 years of working experience , either in-house or in a law firm.
5. Bachelor of Law (LL.B) from a recognised university and called to the bar in a commonwealth jurisdiction.

Benefits:

Conducive work environment

Annual Leave

Medical and insurance benefits

The TS Senior Security Engineer performs test activities and manages the internal or external customer independently. The Lead Technical Analyst is responsible for the customer satisfaction of the test deliverables and enables a smoothly running testing, validation or certification process. This includes using test automation tools, analyzing and validating test results and reporting to the customer. The Lead Technical Analyst participates in evaluating the security of IT products, such as network device, encryption software, mobile devices, payment terminals or e-Passports based on certain scheme requirement, such as Common Criteria, Cybersecurity Labelling Scheme, Common.SECC etc. This will include the development document review, IT products analysis, the development and the realization of penetration test, the support and training of evaluation engineers.

Responsibilities for Internal Candidates

• Support the Project Management team on evaluation scoping, resource requirements, certification body and customer expectations management.
• Conduct IT product security function evaluation work based on scheme requirement, such as Common Criteria, Cybersecurity Labelling Scheme, Common.SECC etc..
• Customer code review when needed : due to stringent confidentiality and security requirements, it often requires traveling to customer premises.
• Based on the code review result, conduct a vulnerability analysis to determine if the customer product has any potential security weaknesses.
• Customer site audit when needed : normally traveling to customer premises, conduct remote audit in current Covid situation.
• Investigate possible logical attack scenarios. Provide support for the penetration tester in charge of product testing – by interpreting the code review findings and compliance checking result, orienting the attack paths and analyzing the test results.
• Formal report writing in line with customer and certification scheme requirements.
• Delivery of customer projects on time.
• Maintain/improve technical knowledge by attending educational workshops, reviewing professional publications, obtaining applicable certifications and participating in professional societies and cross-departmental task forces.
• Contribute to internal work processes by improving tools to evaluate efficiency, report writing and technical training.
• Performs other duties as directed by supervisor.
• Maintains Laboratory accreditation and resolve scheme's mandated corrective action plans.

Qualifications for Internal Candidates

• Master or Bachelor level degree (or equivalent) in Information Technology, Computer Science or equivalent proving your analytical skills and technical approach.
• Minimum 5 to 8 years’ information security working experience, Common Criteria evaluation experience is the best and ISO 27001 auditing will be an advantage.
• Possess CISM / CISA Certification or related is an added advantage.
• COMMON CRITERIA SINGAPORE EVALUATOR (under SCCS) Certified is an added advantage.
• Comfortable in trying yourself in new areas without necessarily knowing everything and can figure out things as you go.
• Like working towards a larger goal and willing to take the initiative in your own hands.
• Good at communicating and can convey message to both technical and business audiences.
• Able to make decision independently under certain scenario, such as during site audit in customer site.
• Nice to have IT product development experience or penetration testing experience.

A World of Opportunities Awaits

Company Name: Dusit Thani Laguna Singapore

Job Title: Security Officer

JOB DESCRIPTION

• Conduct investigations and gather evidence related to theft/fraud or lost items, noise complaints, assault complaints, food poisoning complaints, and other guest complaints and incidents.
• Conduct interviews with relevant parties in order to obtain statements and information related to incidents.
• Assist with and notify manager/supervisor, local police, or other appropriate individuals in the event of accidents, attacks, or other incidents.
• Complete incident reports to document all Security/Loss Prevention related incidents such as theft, accidents, physical hazards, and fire alarms.
• Handle business interruptions and complaints, such as suspicious individuals, civil disturbances or demonstrations, noise complaints, intoxicated individuals, etc.
• Escort any unwelcome persons from the property without interrupting the orderly flow of property operation.
• Defuse guest or employee disturbances/altercations, including summoning appropriate authorities if necessary, and documenting incident.
• Follow all company and safety and security policies and procedures; report accidents, injuries, and unsafe work conditions to manage.
• Maintain confidentiality of proprietary information; protect company assets.
• Welcome and acknowledge all guests according to company standards; anticipate and address guests’ service needs.
• Speak with others using clear and professional language; prepare and review written documents accurately and completely.
• Develop and maintain positive working relationships with others; support team to reach common goals; listen and respond appropriately to the concerns of other employees.
• Ensure adherence to quality expectations and standards.
• In addition, some states may have additional licensing/registration requirements to be considered for this position.
• Move, lift, carry, push, pull, and place objects weighing less than or equal to 10 pounds without assistance. Perform other reasonable job duties as requested by Supervisors, manager.

JOB REQUIREMENTS

• Minimum education of GCE "O" or "N" Level certificate
• At least 1 year working experience in a similar position in security & safety operations
• Possesses a valid security licence
• Applicants who have taken RTT will be prioritised
• First Aid and CPR+AED certified
• WSQ Respond to Fire and Hazmat Emergency certified
• 12 hour shift / Work 4 days

BENEFITS

• Company Transport Pick-up/Drop-off Provided
• Uniform Provided, Duty Meals, F&B Discount, Dental, and Medical
• Employee Room Rate, Learning & Development Opportunities, Staff Recognition Award

*Only shortlisted candidates will be notified.

We are looking for a Cyber Security - Technology Risk Management (TRM) Program Manager on a 12-month contract term (with the possibility of extension / conversion).

Roles & Responsibilities:

Governance, Risk & Compliance:

• Enhance organizational efficiency by realigning Risk and Control resources within T&I.
• Serve as the main contact for managing Risk and Control requests, both internal and external.
• Oversee key Risk and Control projects, establish a project management office, and handle the Risk and Control budget.
• Implement efficiency programs for Risk and Control and develop measurable performance metrics.

Strategy:

• Understand business and ITSR strategies.
• Facilitate management meetings to create and manage the Risk and Control strategy in line with regulations.
• Document and track progress on Risk and Control initiatives and gather feedback for necessary changes.

Steering & Governance Committees:

• Schedule and track Governance Committee papers related to ITSR.

Business:

• Understand Technology Risk and the three lines of defense in Technology and Innovation.

Processes:

• Ensure adherence to team and Governance & Change processes for Risk and Control.

Risk Management:

• Interpret risk data, identify issues, and ensure effective risk management.
• Create and manage the Risk and Control scorecard and implement a communication model for Risk and Control.

Regulatory & Business Conduct:

• Identify, escalate, and resolve risk and compliance issues collaboratively.

Communication and Engagement:

• Manage communications and engage with stakeholders.

Key Stakeholders:

• Build and maintain networks, manage external vendors, and align with senior stakeholders including the COO, Chief Risk Officer, Head of IT, Head of Information Security, CEO Office, and Legal & Compliance Department.

Requirements and Skills:

• Minimum of 7 years of relevant experience, including at least 4 years in the financial services sector.
• Preferred backgrounds include management consulting, technology, banking, or financial services.
• Hands-on experience with MAS regulatory guidelines (e.g., MAS TRM Notice & Guidelines, Outsourcing guidelines, Business Continuity) is required.
• Strong project management skills.
• Excellent communication, presentation, and organizational abilities; strong presentation skills are essential.
• Experience in a risk assessment and running monthly audits.
• Ability to clearly define problems, conceptualize solutions, and gain buy-in.
• Proven experience in leading and executing transformation initiatives.
• Skilled in developing and implementing change management and communication strategies to support transformation.
• Proficient in data gathering, modeling, and analysis to test hypotheses and identify opportunities.
• Independent, adaptable, proactive, and empathetic with exceptional analytical, communication, organizational, and problem-solving skills.
• Bachelor’s degree in Computer Science or Information Technology; specialization in Cybersecurity is preferred. Relevant certifications such as CISSP, SSCP, CISM, or CISA are advantageous.

Argyll Scott Consulting Pte Ltd

Responsibilities:

• Support / provide practical legal solutions and guidance to the corporate banking business such as Corporate Banking, Trade Finance, Credit, Financial Institution, Clearing Bank, Asset Management & Securities Services, Treasury, Debt Capital Market and Investment Bank
• Review, revise and enhance Bank's standard documentation as well as non-Bank standard documentation to suit the business stakeholders’ needs
• Review corporate facility documentation (i.e. syndication, club deals, other bilateral arrangements, inter bank borrowing), contribute actively and effectively during documentation negotiation stage in collaboration with business stakeholders
• Coordinate and attend to reporting requests or information requisition from head office where such request for information/ survey is in relation to the business stakeholders
• Provide legal updates and changes in law and regulations. Conduct gap analysis to advice on the impact of such changes and how best to comply with such changes to business stakeholders
• Provide legal training, issue guidelines, legal bulletin to raise legal awareness as and when required to the business stakeholders

Requirements:

• Minimally Bachelor in Law from qualified universities or legal diploma from a reputable institution
• Team player and big picture thinker, willing to contribute for the betterment of the legal team

We apologize that only shortlisted candidates will be contacted. Thank you.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates collecting, using and disclosing my personal data for the purposes set out in the Privacy Policy which is available at www.persolkelly.com.sg I also acknowledge that I have read, understood, and agree to the said Privacy Policy.

PERSOLKELLY Singapore Pte Ltd • RCB No. 200007268E

EA License No. 01C4394 • EA Registration No. R1653100 (Goh Jia Zhen Crystal)

As an Information Security Engineer, you will play a crucial role in our Security Operations Center. Your responsibilities will include monitoring, detecting, investigating, analyzing, and responding to security events within our IT infrastructure, including Operational Technology (OT) systems. Your expertise in cybersecurity frameworks, risk management, and incident response protocols will help fortify our defenses. A thorough understanding of Operational Technology security principles is essential, as you will oversee the integration of security practices in both IT and OT environments to protect our critical infrastructure. You will also apply Scaled Agile Scrum methodologies to coordinate technical meetings and manage security projects efficiently.

Roles and Responsibilities

• Design and implement advanced security architectures for IT and OT environments to ensure robust protection against emerging threats.
• Lead the development and integration of custom security solutions tailored to the specific needs of our digital and physical infrastructures.
• Conduct high-level vulnerability assessments and penetration testing to evaluate the security of IT and OT systems.
• Develop and refine incident response strategies to enhance our ability to respond to and recover from security breaches swiftly and effectively.
• Collaborate with IT and OT teams to ensure seamless integration of security technologies across all platforms.
• Serve as the technical lead on projects involving cybersecurity technologies, ensuring compliance with industry standards and regulatory requirements.
• Mentor junior engineers and analysts, providing guidance on complex technical issues and fostering a culture of technical excellence and innovation.
• Stay current with the latest cybersecurity technologies and trends, applying this knowledge to continuously improve our security posture.
• Prepare and present detailed technical reports and security briefings to senior management, offering strategic recommendations based on your assessments and findings.

Requirements

• A master’s degree in Cybersecurity, Computer Science, Engineering, or a related field, along with significant professional experience in cybersecurity.
• Expertise in designing and managing security solutions for both IT and Operational Technology systems.
• Advanced certifications in cybersecurity such as CISSP, CISM, or GIAC, with specific training in areas like SCADA or ICS security.
• Strong leadership skills with experience in managing complex security projects and leading cross-functional teams.
• Deep understanding of regulatory compliance and security frameworks such as ISO 27001, NIST, SOC 2, and others relevant to IT and OT cybersecurity.

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected].

We regret to inform that only shortlisted candidates will be contacted.

PERSOLKELLY Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1875348 (Tewari Priyanka)

**********************************

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available

Overview:

We are seeking a highly skilled and experienced Senior Security Engineer to join our team. This role focuses on significantly enhancing the security posture of our platform, ensuring a robust and resilient environment for our customers' financial data. The Senior Security Engineer will be responsible for implementing advanced security measures, conducting comprehensive security reviews, and performing thorough threat modeling and risk assessments.

Key Responsibilities:

• Security Tooling Enhancement:
  • Implement and configure industry-leading security tools to enhance the overall security infrastructure.
  • Continuously evaluate and integrate new security technologies to ensure state-of-the-art protection.
• Security Design Reviews:
  • Conduct detailed security design reviews of the platform's architecture and development processes.
  • Collaborate with development teams to incorporate security best practices and improve existing design methodologies.
• Threat Modeling and Risk Assessment:
  • Develop and maintain comprehensive threat models to identify potential security threats and vulnerabilities.
  • Perform risk assessments to evaluate the potential impact of identified threats and implement appropriate mitigation strategies.
• Third-Party Security Assessments:
  • Streamline and manage the process for conducting security assessments of third-party vendors and partners.
  • Ensure third-party integrations comply with the company’s security standards and policies.

Deliverables:

• Security Tooling Implementation:
  • Successful implementation and configuration of industry-leading security tools to enhance platform security.
• Improved Security Design Practices:
  • Establish and promote improved security design practices within the development process to ensure secure coding and architecture.
• Comprehensive Threat Models and Risk Assessments:
  • Develop and maintain detailed threat models and conduct risk assessments to identify and mitigate potential security risks.
• Streamlined Third-Party Security Assessments:
  • Create and manage a streamlined process for third-party security assessments, ensuring compliance and security of external partnerships.

Qualifications:

• Proven experience as a Security Engineer or similar role, with a focus on enhancing security postures for financial data platforms.
• Strong expertise in security tooling, design reviews, threat modeling, and risk assessment.
• Experience in conducting third-party security assessments and managing vendor security compliance.
• Excellent knowledge of security technologies, protocols, and best practices.
• Strong analytical and problem-solving skills, with the ability to identify and mitigate security threats effectively.
• Excellent communication and collaboration skills, with the ability to work closely with cross-functional teams.
• Bachelor’s degree in Computer Science, Information Security, or a related field; advanced degree preferred.
• Relevant security certifications (e.g., CISSP, CISM, CEH) are a plus.

Title: Security Architect

Responsibilities:

• Spearhead the development of security reference architectures and design patterns to be adopted as enterprise standards and foundational elements. Advocate for the consistent use of standard security controls and design patterns organization-wide.
• Conduct thorough security architecture reviews for projects to ensure the integration of effective security controls aligned with reference designs.
• Identify design gaps in existing or new systems. Lead the evaluation, review, and recommendation of security controls to address identified risks.
• Provide security advisory to stakeholders at all levels, including both IT and Non-IT teams. Communicate security requirements for IT systems across various domains such as Data, Network, Workload, Cloud, and Application security.
• Drive innovation in cybersecurity systems architecture and design. Stay current with technology trends and engage with regulatory bodies, industry experts, and professional organizations.

Job requirements

• Degree in Information Security, Computer Science/Engineering, or a related discipline.
• Minimum 10 years of relevant security experience across various security domains.
• Security certifications such as CISSP, TOGAF, CCIE

Interested applicants, please do forward a copy of your updated CV to [email protected]

We apologise that only shortlisted candidates will be notified. Thank you

Eames Consulting Group (Singapore) Pte Ltd

EA Licence: 16S8091 | EA Registration Number: R1442954

about the company
We are working with a technological and digital infrastructure provider with locations an expanding presence across Southeast and East Asia.

about the job
You will be an experienced legal manager, with experiences in general corporate transactions and commercial agreements within the technology space ranging from shareholder agreements to software as a service agreements. You will also be working closely with teams based in East Asia, providing legal translation and advisory from and to Mandarin.

about the manager/team
You will work in tandem with a regional team of legal counsels and report to a general counsel based in the Singapore office.

skills and experience required
At least 4 years of legal experiences within general corporate or commercial practice groups. Experiences in the data centre business is a strong advantage. Mandarin language is essential to communicate with relevant stakeholders and clients.

To apply online please use the 'apply' function.
(EA: 94C3609/ R23115352)

Your new role

- Identify, assess, and mitigate legal risks for our client in the region, ensuring effective risk management and control

- Develop, review, and maintain all in-house legal documents, including:

>Standard terms and conditions

>Contracts

>Standard forms for internal and external use

>Internal and external publications

>Marketing and publicity materials

- Negotiate and review customer contracts and terms and conditions to achieve optimal business terms with third-party intermediaries or clients.

- Provide legal counsel and support for new and proposed projects, as well as the development of new financial products for our client

- Manage and resolve all litigation related to our client, ensuring effective dispute resolution and minimizing legal risks.

What you'll need to succeed

- LLB degree from a top institution and admission to practice in a Commonwealth jurisdiction (including Singapore).

- 10+ years of experience in a financial institution or law firm, with expertise in capital markets, securities, and derivatives.

- Strong knowledge of relevant laws (e.g., Securities Futures Act, Financial Advisers Act).

- Self-motivated and collaborative with excellent analytical, communication, and organizational skills.

- Ability to work independently, interact with stakeholders, and provide accurate recommendations.

- Prior experience in capital markets, prime brokerage, and derivatives is a plus.

- Proven ability to distill complex legal issues, develop effective solutions, and minimize risk exposure.

What you need to do now
If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV to [email protected]. If this job isn't quite right for you but you are looking for a new position, please contact us for a confidential discussion on your career.

Registration No: R1986473
EA License No: 07C3924
Company Registration No: 200609504D

The Restaurant Brands International (RBI) Legal Department is recruiting for the role Legal Director, International. This is a role in the Singapore office for a corporate lawyer with at least six years of transactional legal experience. In this role, the lawyer will work closely with internal stakeholders and leading law firms in jurisdictions across the world.

Responsibilities

• Prepare, review, negotiate and finalize legal agreements, including franchise agreements, development agreements, investment agreements, letter agreements and other relevant documents, with a strong attention to detail and a view to managing risk while maximizing protections and benefits to the business.
• Support and provide guidance on franchise disclosure and registration requirements, in compliance with applicable laws.
• Support and coordinate legal opinions and advice from local counsel in various jurisdictions.
• Provide regular training on transactions, corporate, franchising and other legal matters.
• Support the business teams on day-to-day matters, including drafting of various letters and communications, interpretation of legal documents, updating of contract templates and ensuring compliance with internal policies and procedures.
• Perform other general legal and/or business duties and functions as may be assigned or required by business needs.

Requirements

• Fully qualified lawyer admitted to practice in Singapore, US, England & Wales, or any commonwealth country.
• At least 6 years of transactional experience in a leading law firm.
• Outstanding judgment and ability to identify, distill and manage complex issues quickly and effectively.
• Excellent drafting skills and fluency in written and spoken English.
• Strong collaborative skills, including the ability to coordinate with RBI attorneys across the world, external counsel, business leaders and executives, business development colleagues, communications, finance, accounting and tax partners and other advisors.
• A positive attitude and ability to work well within teams and the skills to work across business functions and cultures with teams located in multiple time zones, as well as the ability to act independently in a fast-paced environment.
• Highly organized and demonstrated ability to work under pressure with a high-volume workload and tight timelines. Results-oriented.
• Ability to anticipate legal issues and risks, develop legal strategy and set objectives.

Senior Legal Counsel - Healthcare, 5+PQE

An exciting opportunity has emerged in the healthcare industry in the healthcare industry for a lawyer with a strong background in corporate or technology law. This role involves close collaboration with internal and external stakeholders on various corporate and commercial legal matters. Strong drafting skills and the ability to engage in intricate negotiations are essential for prospective applicants.

Requirement

• A recognised degree in Law and be admitted to the Singapore Bar.
• Prior experience in the Civil or Public service sector would be advantageous.
• Strong ability to work autonomously and within multi-functional teams.

For further information on this opportunity, please send your CV in MS Word format to Sandra at [email protected].

Reg: R1544044 | Lic: 116S8060