Responsibilities

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible. Together, we inspire creativity and enrich life - a mission we aim towards achieving every day. To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always. At TikTok, we create together and grow together. That's how we drive impact-for ourselves, our company, and the users we serve. Join us.

The Business Risk Integrated Control (BRIC) team of TikTok, is missioned to:

- Protect TikTok users, including and beyond content consumers, creators, advertisers.

- Secure platform health and authenticity of community experience .

- Collaborate with cross-functional stakeholders to improve TikTok infrastructures, services, tools and algorithms, towards a higher standard of privacy and security.

The BRIC team works to measure and minimize the damage implied by inauthentic behaviors on TikTok and its extended platforms, covering multiple classical and novel interity/security areas such as fake account, fake traffic, spam, scraping, cyberbullying, live room risks, incentive fraud, monetization abuse, etc.

In this team, you will have a unique opportunity to:

- Have a first-hand experience contributing to TikTok's key security initiatives.

- Build scalable, resilient, intelligent integrity solutions that are also privacy-safe and user-friendly.

- Solve product and technical challenges that are often first-seen and highly adversarial. Both quick short term tactics and long term strategical moves are expected at various paces.

- Be part of a diverse and enthusiastic global workforce, grow with and learn from security and integrity experts across Asia, Europe, North America, etc.

Responsibilities

- Research and develop cutting edge techniques to detect and prevent unwanted automation on the web

- Develop and maintain defensive, compatible, reusable, testable and low-footprint client-side JavaScript.

- Work together with other stakeholders to research malicious tools, identify newest attacks and build anti-automation measures.

Qualifications

Minimum Qualifications

- Computer science related majors, bachelor degree or above, more than 2 years of working experience

- Proficiency in JavaScript and browser APIs

- Deep understanding of HTTP, TLS stack and distributed systems architecture

- Familiarity with web development cycles (e.g. package management, module bundling, unit, and integration testing, browser capabilities, etc.)

Preferred Qualifications:

- Thrives with cross-team, cross-functional collaboration

- Strong interest in information security

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Job Responsibilities

• Provide comprehensive security assessments for IT operations, ensuring the implementation of suitable security measures.
• Assist in the development and maintenance of security policies, addressing risks, and implementing measures to enhance system reliability and prevent unauthorized access.
• Collaborate with internal vulnerability assessment teams to analyze systems, identify vulnerabilities, assess risks, and determine protective measures through annual security assessments.
• Conduct information security and risk management awareness training programs.
• Investigate corporate infosec incidents, identify threats and their impact, and coordinate remediation efforts.
• Work with teams to achieve international accreditations such as ISO 27001, ISO 27017, ISO 27018, CREST, SOC2, and more.

Requirements

• Experience with enterprise information security and information risk management

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

Responsibilities

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible. Together, we inspire creativity and enrich life - a mission we aim towards achieving every day. To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always. At TikTok, we create together and grow together. That's how we drive impact-for ourselves, our company, and the users we serve. Join us.

The Business Risk Integrated Control (BRIC) team of TikTok, is missioned to:

- Protect TikTok users, including and beyond content consumers, creators, advertisers.

- Secure platform health and authenticity of community experience .

- Collaborate with cross-functional stakeholders to improve TikTok infrastructures, services, tools and algorithms, towards a higher standard of privacy and security.

The BRIC team works to measure and minimize the damage implied by inauthentic behaviors on TikTok and its extended platforms, covering multiple classical and novel interity/security areas such as fake account, fake traffic, spam, scraping, cyberbullying, live room risks, incentive fraud, monetization abuse, etc.

In this team, you will have a unique opportunity to:

- Have a first-hand experience contributing to TikTok's key security initiatives.

- Build scalable, resilient, intelligent integrity solutions that are also privacy-safe and user-friendly.

- Solve product and technical challenges that are often first-seen and highly adversarial. Both quick short term tactics and long term strategical moves are expected at various paces.

- Be part of a diverse and enthusiastic global workforce, grow with and learn from security and integrity experts across Asia, Europe, North America, etc.

Responsibilities

- Research and develop cutting edge techniques to detect and prevent unwanted automation on the web

- Develop and maintain defensive, compatible, reusable, testable and low-footprint client-side JavaScript.

- Work together with other stakeholders to research malicious tools, identify newest attacks and build anti-automation measures.

Qualifications

Minimum Qualifications

- Computer science related majors, bachelor degree or above, more than 2 years of working experience

- Proficiency in JavaScript and browser APIs

- Deep understanding of HTTP, TLS stack and distributed systems architecture

- Familiarity with web development cycles (e.g. package management, module bundling, unit, and integration testing, browser capabilities, etc.)

Preferred Qualifications:

- Thrives with cross-team, cross-functional collaboration

- Strong interest in information security

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Company’s Profile

Julian Grey’s client is a solution provider for security and enterprise applications.

Responsibilities

• Plan, implement, manage, monitor, and upgrade IT security solutions.
• Support projects by delivering project deliverables and completing milestones.
• Develop and maintain technical, operational, and configuration documentation necessary for project implementation.
• Coordinate and manage vendors for product implementation and troubleshooting.
• Evaluate security products and conduct Proof of Concept (POC) to verify the effectiveness of security measures, ensuring their continued efficacy post-implementation.
• Provide technical support and incident response for IT security infrastructure components to the maintenance team.

Requirements

• Proficient in Endpoint Security solutions, including Anti-Malware, Host Firewall, Application & Change Control, Disk Encryption, and EDR.
• Knowledgeable in Identity & Access Control solutions, such as PKI solutioning, Hardware Security Module (HSM), Privileged Access Management, 2FA, and OS Hardening Policies.
• Implement Endpoint or Identity & Access Control Security tools.
• Familiarity with various operating systems like Windows or Linux.

Follow us for more updates, interview tips!

https://www.instagram.com/juliangreygroup/

https://www.linkedin.com/company/juliangreygroup/

https://www.facebook.com/juliangreygroup/

Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei

Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.

EA License No: 19C9568

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities, and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Your background

• Familiarity with Cyber Security and Information Technology.
• Strong problem-solving and critical thinking skills.
• Effective communication and interpersonal skills.
• Basic knowledge in Cloud Security/Monitoring is a bonus.

What you can expect

As a Senior Cyber Security Analyst, you will play a crucial role in the team’s daily operations involving threat monitoring and detection. Collaborating with a dynamic team, you will intake cybersecurity related requests from internal and external entities that require triage, remediation, or escalation.

What you will do

• Perform deep dives into suspicious security events by collating data from various sources, working across multiple GIS Control Teams, to determine if a critical system or data has been impacted.
• Must be able to identify, analyze and address problems to resolve issues whenever possible in way that minimizes negative impact and risk to the organization.
• Ability to work independently with initiatives and minimum supervision.
• Strong analytical skills/problem solving/conceptual thinking.
• Ability to work with Technical and Non-Technical business owners.
• Assist with internal projects and development efficiently.
• Must be comfortable in delivering messages across a wide spectrum of individuals having varying degrees of technical understanding.
• Must have strong leadership skills and qualities enabling collaboration with peers and various levels of management.
• Assist in supervision of teams and provide mentorship to junior analysts to equip them with basic skills needed during operation support.
• Actively participate and be involved in the evolution of process/procedure and tools used within the team.
• Learn and perform monitoring activities with the use of Cloud Technologies.
• Perform ad-hoc reporting and investigation as required.
• Perform Quality Assurance (QA) check against various queues.
• Willing to work weekend on a rotational shift basis.
• Perform real-time analysis and trending of security log data from various security devices and systems.
• Maintain data sources feeding the log monitoring system, develop and maintain detection and alerting rules.
• Respond to user incident reports and evaluates the type and severity of security events.
• Execute initial triage of incidents to rule out false positives.
• Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.
• Interpret and apply security policies and procedures.
• Establish escalation processes for security incidents and develops contingency plans and disaster recovery procedures.

Cybersecurity Engineer (Medical Equipment)

Job Overview: As part of the cybersecurity team, the role focuses on managing and mitigating cybersecurity risks associated with medical equipment and servers. This includes monitoring system health, applying patches, and enhancing safety protocols. The position will collaborate with the IT team to establish escalation procedures for cyber incidents, develop contingency plans, and implement recovery measures. The emphasis will be on policy enforcement and control mechanisms to ensure compliance and reduce cybersecurity risks.

Key Responsibilities:

Specific Responsibilities:

• Evaluate and address cybersecurity risks related to non-compliance with policy requirements during the acquisition of medical equipment, including both new devices and those on loan from vendors.
• Report any instances of non-compliance with policy to seek Ministry of Health (MOH) endorsement.
• Prepare cybersecurity risk assessment reports and conduct periodic reviews of risks whenever there are changes in the configuration or requirements for medical equipment.
• Update and maintain the Risk Registration for medical equipment and ensure all IT-related risks are mitigated with appropriate control measures.
• Ensure medical equipment software is up to date at delivery and plan for regular patches and updates throughout its lifecycle.
• Monitor and track the compliance status of medical devices with the MDOTS policy during their operational lifecycle.
• Participate in IT projects related to the deployment and management of medical equipment.
• Collaborate with the IT team and vendors to plan server installations and software configurations for medical equipment.
• Continuously monitor the health status and vulnerability of medical equipment and associated servers.
• Work with end users to manage cybersecurity incidents involving medical equipment, ensuring that mitigation controls are applied before the equipment is returned to service.

General Responsibilities:

• Collaborate with the IT team to support new equipment onboarding activities and related projects.
• Provide ongoing BME/IT support to ensure medical equipment complies with MDOTS policy guidelines and control measures at all stages of its lifecycle.
• Perform additional tasks and duties as directed by the Head of BME.

Job Requirements:

Education/Training/Experience:

• A degree in Computer Science, Information Technology, or a related cybersecurity field with at least 3 years of experience in healthcare or cybersecurity assessments for the Engineer position.
• A degree in Computer Science, Information Technology, or a related cybersecurity field with at least 5 years of experience in healthcare or cybersecurity assessments for the Senior Engineer position.
• Experience with various security tools and products (e.g., Fortify, AppScan, Nessus).

Professional Certifications:

• Preferably, candidates should hold certifications such as OSCP, CREST, CEH, CISSP, AWS, CISA, CISM, or any cloud security specialty.

Interested candidates who wish to apply for the advertised position, please click on “Apply”. We regret that only shortlisted candidates will be notified.

EA License No.: 01C4394 (PERSOLKELLY Singapore PTE LTD)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

• Min. 12 years of IT Infrastructure & System Security management experience, preferably prior experience in Site Reliability Engineering, API gateways for Cross-border payments production support & & monitoring.
• In depth knowledge of SRE Tools and/or cloud services, in particular AWS and Azure Clouds
• In depth knowledge of cloud services, in particular AWS and Azure Clouds.

Job Summary:

We are seeking a highly skilled and experienced VP/SVP of Digital Asset Technology Operations to lead our IT infrastructure and Security team. The ideal candidate will be responsible for overseeing the IT infrastructure & Security, which include site reliability engineering, API gateways for Cross-border payments production support & & monitoring, production releases and optimization of our technology infrastructure, ensuring the highest levels of availability, performance, and security.

You will be working closely with our Chief Operating Officer in accordance to the requirements of business needs, technology platforms, information security, regulatory, and compliance.

Together with the team, you will be working with internal and external stakeholders on Infrastructure Platforms, Identity & Access Management team, including assignments that may consist of parts of a single technical area, application, software, or technical methodology within the infrastructure engineering discipline.

Key Responsibilities:

- Infrastructure Management:

• Oversee the design, implementation, and maintenance of the company’s technology infrastructure, including servers, networks, storage systems, HSM and cloud services.
• Ensure the infrastructure is scalable, reliable, and secure to meet current and future business needs by conducting capacity planning in cooperation with the business lines and development teams.
• Manage external vendors, including monitoring of the SLA.
• Maintain a tight control on costs.
• Oversee day-to-day IT operations, ensuring efficient and effective service delivery.
• Monitor production and provide support to ensure timely resolution of incidents and problems, liaising with the relevant IT software support and development teams to resolve incidents. Handle the crisis management process if needed.
• Develop and enforce policies and procedures for incident management, problem management, and change management.
• Monitor system performance and implement proactive measures to prevent issues.
• Be the main person in charge for IT audits and regulatory inspections.

- Risk & Control Management:

• Assess the effectiveness of controls, determine the impact of control issues, identify corrective action, and track issues to closure.
• Perform risk assessments, regulatory and compliance assessments for services and processes.
• Partnering with internal and external parties to manage technology and infra related risks and compliance to regulatory requirements.

- Compliance & Security:

• Ensure compliance with industry standards, regulatory requirements, and internal policies.
• Implement and maintain robust security measures to protect the company’s data and systems.

- Foster a culture of continuous improvement and operational excellence.

- Manage of team of IT professionals in Singapore.

Qualifications:

• Degree in Computer Science, Information Technology, or a related field.
• Minimum of 12 years of experience in IT infrastructure management, preferably within Financial Services or Fintech environment.
• Prior experience in Site Reliability Engineering, API gateways for Cross-border payments production support & & monitoring, incident management, troubleshooting issues, etc.
• In depth knowledge of SRE Tools and cloud services, in particular AWS and Azure Clouds.
• Familiar with information security, audit and risk management functions.
• Strong problem-solving and analytical abilities.
• Excellent communication and interpersonal skills.
• Fluency in English and Chinese in both languages as one needs to manage our English and Chinese-speaking clients and stakeholders.
• Experience in the financial industry and knowledge of Singapore’s regulatory requirements.
• Knowledge of crypto and related infrastructure are a plus.

Aviation Security Officer

Shift pattern will be 4 working days with 2 days off / 5 days work with 1 day off

12 hours permanent shift

Location: Changi

Salary Package: Gross Salary: up to $2850 | Bonus of $2500

Job Description

• Screening of passengers at designated zones.
• Manual bag checks.
• Usage of security screening equipment for screening purposes.
• X-ray screening of checked in luggages.
• Any other security related roles at airport.

Requirements:

• OK with shift work

Tan Jia Jun | REG No: R23112681
The Supreme HR Advisory Pte Ltd | EA No: 14C7279

• According to the company’s long-term vision, formulate and integrate cybersecurity strategies into a companywide strategic plan by collaborating with cross-functional teams to design and implement secure infrastructure and application solutions
• Understand expectations of the company regarding continuous growth, establish concrete goals, and create mid-term strategies to achieve goals
• Drive the Global Cyber Defense Strategy, maintain ready forces and capabilities to conduct cybersecurity operations
• Anticipate future internal and external trends and implications and create appropriate cybersecuritymeasures
• Build understanding of cyber threats in each level. Develop detection & protection measures continuously, lead the technical solution implementations to be prepared to defend Santen from disruptive or destructive cyberattacks
• Ensure the security incident management process are executed properly by all parties by tracking the resolution process and making sure the known issues are addressed according to risk management methodology
• Lead the monthly operational meetings between SOC team and Santen, improve the overall process and ensure the KPIs are achieved
• Verify and continuously improve the Recovery Process performed during or after a security incident to ensure that it meets business requirements and is effective and practical
• Manage the Major Security Incident Management process, under Global Head of Information Security,and guide/train different stakeholders, including SOC team, DIT leaders and technical managers
• Support the Disaster Recovery and Business Continuity framework, initiatives, and execution
• Improve Santen’s cybersecurity maturity level by increasing overall awareness and providing security advice/insights on technical requirements to DIT and non-DIT leaders (both Information Systems and Industrial Control Systems global leaders)
• Lead global programs & project implementations, planning the delivery of risk mitigation solutions and answering technical questions, reviewing current security measures, recommending enhancements, and identifying areas of security weakness
• Perform technical risk assessments (IT & OT) of all new global solutions and third parties, identify potential gaps and make sound recommendations for mitigating the risks on a global scale
• Implement the Internal Cybersecurity Framework to support the state-of-art technologies and Santen regulatory and organizational requirements (ISO 27001, NIST, Data Privacy Laws)
• Implement and improve the Global Vulnerability Management Program focused on reducing the risk presented by vulnerabilities in Santen environment by continuously performing three core steps: Discovery, Reporting and Remediation
• Guide the technical teams (Global IT Infra, Regional IT Infra and Application teams, critical third parties) to make sure vulnerabilities are mitigated on a timely manner, perform the escalations on time
• Manage the global vulnerability scan and penetration test exercises
• Manage the relationship and contracts with the external suppliers to obtain the best value for Santen
• Determine the need for covering the risks on company’s threat landscape and continuously search for the most strategic product & services to deliver the needed capabilities
• Keep track of changes in Santen’s business, threat landscape, product innovations and rebalance according to the risk appetite
• Build and maintain robust partnerships with market leaders (e.g. Gartner, ISF) to deter shared threats in our industry
• Build close partnerships and implement efficient internal processes with business and technical teams to detect and mitigate threats before they can be exploited
• Lead projects to implement new cybersecurity solutions or frameworks by developing business cases or conducting opportunity studies when needed
• Understand projects and services specificities in a multi locations environment with many remote management situations
• Ensure there are continuous PDCA (Plan, Do, Check and Action) cycles to improve services and solution in place in relations with KPIs/SLAs in place or to be developed
• Maintain good working relationships with internal stakeholders globally, especially with Digital & IT management
• Support his/her Digital & IT peers in charge of infrastructure, service operations and business applications to provide the right information security advice or solutions allowing them to provide the contributions to business domains
• Manage the suppliers by defining clear guidelines and objectives, relying on KPIs in coordination with the governance in place. Challenge organization and governance in place to verify the company is obtaining best value and that vendors are meeting our information security needs and requirements
• Develop and own the budget proposal for the cybersecurity domain in accordance with the company guidance on budget directions
• Ensure financial governance and efficient use of resources to meet business objectives.
• Execute the budget in respect of its objectives in terms of services to operate, solutions to deliver
• Perform ongoing security maturity level assessment to evaluate the effectiveness of security controls and explain the effectiveness to project teams, business stakeholders and senior management

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will assist in the end to end implementation of security solutions for our clients and support our clients in their desire to protect the business.

The Opportunity

This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, advising stakeholders, providing workshops and supporting business development. If you’re flexible and ready to adapt to a constantly changing environment, there’s no better place to develop your skills. Since you’ll be working directly with clients, some travel will be required.

Your Key Responsibilities

As a Cyber Security Operations consultant, you will be part of the team to assess, design, build, implement and manage security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience.

Skills and Attributes for Success

• Familiarity with Security Information and Event Management (SIEM) solutions.
• Experience with network security monitoring and incident response activities.
• Ability to process impacts of activities and be able to collaborate with IT operations and Cybersecurity teams on mitigations and remediations.
• Ability to apply cybersecurity and privacy principles to organizational requirements.
• Ability to create standard operating procedures and other similar documentation.

To Qualify for the role, you must have

• A recognized university degree in Computer Science, Computer/Electrical Engineering, Information Technology or equivalent
• At least 3 years of relevant experience. Preferably with a year experience in business consulting role in a leading consultancy firm
• Strong interest in the field of information security
• Creative, independent with good problem-solving skills
• Excellent communicator with strong analytical, interpersonal and writing skills

Ideally, you’ll also have

• Industry related certification preferred (e.g. CISSP, CISA, CISM, SABSA, PRINCE2, TOGAF, ITIL).
• Solution Level Certifications, OSCP, CREST, GIAC would be advantageous, as well as penetration testing experience.

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.

What we offer

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

Apply now.