Responsibilities:

• Manage and operate the IT Security Protection System which includes liaising with Maintenance Contractor to address technical & security issues and Health Checks.
• Manage and investigate Events of Interests and security vulnerabilities to identify early indicators and work with the respective team to address them.
• Ability to deploy, configure and fine-tune security policies as well as performing threat hunting to proactively response to potential cyber threats.
• Review and enhance IT security policies, procedure and documentations with respect to industry standards and best practices.
• Facilitate and support (internal and external parties) on Cyber Security Incident management and response.
• Assist in all internal & external IT audits. Follow-up with the respective Risk Owners to remediate audit findings.
• Be on standby for any critical security alerts and incident management after office hours.

Requirements:

• Degree in Information Technology or Information Security or related discipline.
• 3 years of working experience in Cyber Security. Having good Knowledge in Cyber Security Management, IT Compliance and/or Risk Management.
• Hands-on experience with Windows or Linux OS.
• Experience on Microsoft Azure Cloud Security technologies (MS Sentinel, MS Defender...etc) as well as other Enterprise Security Appliances; such as Privileged Access management & Vulnerability Management tools.
• Familiar with modernised A.I and SecOps tools.
• Familiar with ISO27001 and/or PCI Data Security Standards.
• Security Screening will be required for potential candidates.

To apply, please visit www.gmprecruit.com and search for Job Reference: 23838

To learn more about this opportunity, please contact Yingying at [email protected]

We regret that only shortlisted candidates will be notified.

GMP Technologies (S) Pte Ltd | EA Licence: 11C3793 | EA Personnel: Lai Yingying | Registration No: R1110239

About ByteDance

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Security Assurance Team at ByteDance

The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team, you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.

Responsibilities

- Continuously design and conduct penetration testing to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards in the staging/production environment.

- Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

- Certify infrastructure components, systems and applications that meet security standards.

- To identify risks and actively take ownership to resolve any potential project issues.

- Conduct technical security reviews for any new products and feature requirements.

- Provide security engineering support to product teams to help identify potential security flaws in the early stages of SDLC.

- Collaborate closely with other parts of the security team and product teams to design defense-in-depth controls that limit attackers' ability and improve our security postures.

- Continuously conduct security research and strive to innovate.

Qualifications

- Background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines.

- Strong knowledge in some of these various disciplines: web application security, mobile app security, cloud security and thick client security.

- Solid experience in writing and reviewing code in at least one of the following programming languages: JavaScript (Node JS), Go, Python, Java, C++, Rust.

- Good project management skills and focused teamwork.

Preferred Requirements

- CTF players, live competitions and hacking events experience.

- CVEs (excluding vulnerabilities such as XSS, CSRF in random CMS) are preferred.

- BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Internal Security Risk Management & Governance team is responsible for managing and mitigating information security risks posed within the organisation. To ensure that the company's risk management and governance strategies are up to date and aligned across the organisation, this team is responsible for regular industry benchmarking and working with stakeholders from cross-functional teams to perform regular risk assessments and align risk mitigation strategies. This team is also responsible for managing the optimization, operation, training, and data analysis of the internal threat platform and UEBA (User and Entity Behavior Analytics) platform within the company.

Responsibilities

- Develop and maintain the organization's insider risk security governance framework, including policies, procedures, and standards that align with industry best practices and regulatory requirements.

- Conduct regular security risk assessments to identify vulnerabilities and risks, and work with relevant departments to develop mitigation strategies.

- Provide guidance and support for compliance with data protection laws, regulations, and standards (e.g., GDPR, ISO 27001, SOC 2).

- Coordinate with IT and business units to ensure insider threat security measures are integrated into technology projects and business processes.

- Translate business and technology requirements into relevant insider threat rules for operational teams to implement

- Monitor and report on the effectiveness of security controls and the status of security risks to senior management.

- Develop and lead security awareness training programs to educate employees on security best practices and emerging threats.

- Stay abreast of the latest security trends, threats, and technologies to continuously improve the organization's insider threat security posture.

Minimum Qualifications

- Bachelor's or master's degree in Information Security, Computer Science, Information Technology, or a related field.

- Professional certifications such as CISSP, CISM, CRISC, or CGEIT are highly desirable.

- A minimum of 5 years of experience in information security, risk management, or IT governance, with at least 2 years in a leadership role.

- Strong knowledge of information security principles, frameworks (e.g., NIST, ISO 27001), and regulations (e.g., GDPR, CCPA).

- Experience with security risk assessment methodologies and tools.

- Familiarity with data analysis tools and software to support risk analysis and reporting efforts, ensuring data-driven decision-making in the risk management process.

- Skilled in creating and maintaining risk registers, developing risk treatment plans, and effectively communicating risk posture to stakeholders at all levels of the organization.

- Excellent communication and interpersonal skills, with the ability to engage and influence stakeholders at all levels.

- Strong analytical and problem-solving skills.

- Proven ability to manage and prioritize multiple projects and tasks.

Preferred Qualifications

- Experience with designing, implementation and operation of commercial or in-house UBA/UEBA solutions (e.g., Splunk, Exabeam) are highly desirable

- Experience with threat modeling methodologies (e.g., STRIDE, PASTA) to analyze and assess security threats within software applications, systems, and networks.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Bangkok Bank Singapore is a full license bank operating in Singapore since 1957. We provide a wide range of wholesale and consumer banking and financial services to meet the diverse needs of our clients. We have an immediate vacancy for a suitably qualified individual to join us as:

COMPLIANCE SPECIALIST

The selected candidate will join the Transaction Monitoring Team in the Bank's Compliance Department. He/She is expected to demonstrate understanding of the prevailing AML regulations specific to Singapore. The roles and responsibilities include the following:

• Perform quality assurance reviews for trade transactions and/or remittances including (cheques / cash).
• Perform 2nd level trade transaction reviews and remittances reviews including (cheques / cash) to determine any potential AML/CFT concerns (pre transaction monitoring).
• Review and investigate all transaction alerts generated by Transaction Monitoring system (post transaction monitoring).
• Ensure efficient identification and monitoring of suspicious activities and transactions, and timely reporting of suspicious transactions to the authorities.
• Communicate with relevant Business Units and Operations to provide advisory and expertise on all transaction monitoring matters.
• Assist with daily/monthly AML report checks, updating internal local list, high risk country list, review of watchlist reports and transaction escalation received from Business Units / Operations.
• Undertake other ad hoc duties as and when required e.g. KYC reviews / extract of documents for audit review, provide statistics.
• Maintain a current understanding of money laundering and terrorist financing issues as well as sanctions, including policies, procedures, regulations, industry best practices, criminal typologies and developing trends.
• Identify opportunities for process improvements and any other roles where the Bank is required of you.

The ideal candidate must meet the following requirements:

• Relevant tertiary qualifications and Certification from ACAMS or ICA.
• Minimum total work experience 3 – 5 years in the financial industry, which should include minimum of 3 years’ experience in AML compliance or Transaction Monitoring and investigation requirements (trade and other types of transactions due diligence).
• Sound knowledge of MAS regulations (MAS Notice 626, Guidelines to MAS Notice 626 and best practice papers), Sanctions, investigation and Anti-Money Laundering regulations.
• Strong analytical skills and meticulous with an investigative mindset.
• Good written skills for the purpose of detailing findings in investigation reports / memos.
• Team player and proactive and able to take initiative.

Network Security Engineer

ITCS Group, a Smart IMS Company, is an IT Managed Services, Outsourcing and Talent-Sourcing company. We provide customised IT Consulting Solutions, Project Management, IT resourcing and on/off-shore Application Development Services across the Asia Pacific region.

We are currently looking for a Network Security Engineer to join our team in Singapore to manage daily operations for the global Networking and Security Infrastructure.

Responsibilities:
- Troubleshoot, configure, and maintain network and security devices
- Implement and support routing and switching devices, including F5 Load Balancers, Proxy devices, CheckPoint, and Juniper firewall
- Administrate DNS and DHCP infrastructure
- Manage wireless environment, and drive major incidents call

Requirements:
- Working exposure in NOC environment
- Good understanding of network protocols, and firewall products
- Familiar with ITIL methodology and change management

Additional Information:
- Location: HarbourFront
- Working hours: Day-shift schedule, 7 am to 9 pm, Sunday to Tuesday, alternating Wednesday
- Annual salary package up to SGD 115k

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

Our client is a premier management consultancy firm in the heart of Asia. They specialize in delivering a spectrum of services designed to propel businesses into their next phase of growth. Our expertise encompasses software development, HR consultancy, data research consultancy, and accounting services. By integrating technological innovation with strategic business practices, they offer tailored solutions that address the unique challenges and opportunities.

Key Responsibilities:

• Legal Consultation: Provide accurate and timely legal advice on a wide range of topics, including contracts, compliance, corporate governance, intellectual property, and employment law.
• Risk Management: Identify potential legal issues and risks, advising on preventive measures and strategies to mitigate these risks.
• Contract Management: Draft, review, and negotiate contracts and agreements to protect the company's interests.
• Compliance Monitoring: Ensure that the company remains in compliance with all local, national, and international laws and regulations affecting its operations.
• Policy Development: Assist in developing and updating company policies to reflect changes in laws and regulations, and ensure internal compliance.
• Dispute Resolution: Represent the company in legal disputes, managing any litigation processes and negotiating settlements where appropriate.
• Training and Awareness: Conduct legal training sessions for employees to raise awareness of legal obligations and risks.

Qualifications:

• Juris Doctor (JD) degree or equivalent law degree, with admission to practice law in the relevant jurisdiction.
• Minimum of 5 years of legal experience, preferably within a corporate environment or a reputable law firm.
• Comprehensive knowledge of corporate law, contracts, and compliance regulations.
• Excellent analytical, negotiation, and communication skills.
• Ability to work independently and as part of a team, with a proactive and solution-oriented approach.
• Strong ethical judgment and the ability to handle sensitive and confidential information.

If you are interested in this role and would like to discuss the opportunity further please click apply now or email Lim Sheng Feng at [email protected] for more information.

Only shortlisted candidates will be responded to, therefore if you do not receive a response within 14 days please accept this as notification that you have not been shortlisted.

|Recruitment Oasis Private Limited | EA Licence No.22C1079 | LIM SHENG FENG | Reg No. R2199891|

• Responsible for giving legal counsel on insurance, corporate governance, employment, intellectual property, data protection, and litigation matters.
• Serve as the company's Data Protection Officer, ensuring compliance with internal approvals and corporate governance.
• Support both external and internal audit activities, ensuring adherence to legal and regulatory requirements.

Requirements:

• Degree in Law
• At least 5 years of experience in corporate & commercial law.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R22111604

Bangkok Bank Singapore is a full licensed bank operating in Singapore since 1957. We provide a wide range of wholesale and consumer banking and financial services to meet the diverse needs of our clients. We have immediate vacancies for suitably qualified individuals to join us as Customer Service Officer in the Customer Service Department. The department offers consumer banking products and services such as savings accounts, fixed deposits, current accounts and remittances services to both corporate and individual customers.

The successful candidates will be trained to perform work at various desks within the department. The training will cover both front-office counter service duties and back-office operational and administrative duties. The successful candidates will learn to handle over the counter banking transactions including opening of accounts; handling customer enquiries; and attending to customers’ account requests, as well as back-office end-to-end processing of inward and outward remittance transactions; cheque clearing and inter-bank GIRO payments; preparation of reports and static data maintenance and other general administrative duties. Successful candidates will also have opportunities to be involved in projects and system enhancement work.

The preferred candidate must satisfy the following requirements:

• A recognised Degree.

• At least 1 year of banking experience, preferably in branch banking/ payments.

• Ability to learn fast and work independently and adaptable to changes.

• Cheerful disposition, service oriented with good interpersonal and communications skills.

• Strong team player and able to effectively and quickly build relationships and establish trust, respect, competence and confidence.

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R22111604

About the company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.

Responsibilities

- Lead and manage a team of passionate individuals focused on improving the security posture of the company's products and systems.

- Develop positive and trusted relationships with business partners both inside and outside of the company.

- Ensure individual support and talent development for direct reports, leading the team in terms of technical excellence and practicing ByteStyle principles.

- Design and perform tests and check cases to analyze design, architectures, existing systems services, operating systems, networks and applications from a security perspective, via black box testing, code reviews, automation, threat modeling and research. This is to meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards.

- Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

- Certify infrastructure components, systems and applications that meet security standards.

- Discover security issues that appear under new threat scenarios, support incident response, forensics, remediation in a cross-functional environment driving towards incident resolution.

Qualifications

- Bachelor's degree in Information Security, Computer Science, Computer Engineering, Electrical Engineering, or other relevant majors.

- 5+ years of security engineering experience such as design review, threat modeling, security mitigation development, security tooling development or privacy engineering.

- 2+ years of people management in an engineering organization, strong leadership skills and stress-resistance.

- Advanced knowledge and understanding in various disciplines: web application security, mobile app security, network security, operating system internals and hardening, applied cryptography, cloud computing. You're expected to be an expert in at least one of these areas.

- Solid experience in writing and reviewing code in at least one of the following programming languages: JavaScript (Node JS), Go, Python, Java, C++, Rust.

- Strong problem-solving skills and excellent debugging / troubleshooting skills.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Department

The Cloudflare Customer Support Team solves complicated problems and answers technical questions via phone, email, chat and social media. Whether it is a Wordpress blogger using our services for free or a global Enterprise business with petabytes of web traffic, we are always eager to assist. We are the eyes and ears of Cloudflare, acting as the real-time voice of the customer to help communicate their needs and real-world use cases back to the rest of the company - for better service and future product development.

Description

Security Operations Center Engineers provide premium-level support for Cloudflare’s security products and features. Our largest and most technically sophisticated customers will contact Support for assistance and intelligence in dealing with threats or attacks on their infrastructure at OSI Layers 3, 4, and 7. This will span the range of Cloudflare security products from Magic Transit Infrastructure Protection, DDoS mitigation and Network Firewall, to using the Web Application firewall (WAF), Spectrum, Bot Management and Rate Limiting to help customers.

Security Operations Center Engineers analyze threats, make detailed and informed suggestions for mitigation and may need to implement mitigation strategies directly on behalf of the customer. The team also provides attack reporting beyond Cloudflare’s self-service reports.

Responsibilities

• Monitor and investigate the alerts to identify attacks
• Work with Engineering and Operations teams to mitigate attacks, suggest steps to mitigate, and apply the appropriate mitigation, when applicable
• Work with Engineering and Product teams to improve the products and tools
• Communicate with customers via chat, email, and phone
• Review the latest alerts to determine relevancy and urgency. Create new tracking tickets for alerts that signal an incident and require review or escalation
• Configure / Manager security monitoring rules and contribute to tool improvements
• Compare traffic signatures and attributes including IP addresses, cookie variations, HTTP headers, and JavaScript footprints to determine what is good traffic and what is malicious
• DDoS mitigation for OSI layers 3,4, & 7: filter malicious traffic using Cloudflare tools like Magic Transit, Network Firewall, WAF, IP reputation lists, packet inspection, blacklisting, whitelisting, and/or rate limiting.

Key skill sets

• Modern internet protocols like UDP, TCP, etc.
• Advanced understanding of iptables
• Analysis of traffic for attack anomaly detection and creation of mitigation rules
• Experience in handling attack mitigation and thorough knowledge of various attacks (L3/4 and L7)
• Knowledge of Cloudflare Security Products & Features
• Technical Support experience
• Good communication skills with high-value VIP customers under attack
• Computer Networking fundamentals
• Command line / Bash shell
• Sysadmin skills (Linux/Mac/Windows) & Programming skills (Python, Ruby, PHP, C, C#, Java, Perl, Git etc.)
• Security skills and certifications: CISSP, GCIA GCIH, GCFA, GCFE, etc.
• Calm under pressure

Xin Xiamen Capital Management is a Single-Family office founded in Singapore during 2016.

Investment was established out of the collective ambition of investors experienced in the business and finance industries. Our goal is to help entrepreneurs turn their own ideas and visions into successful companies, and have managed to back many success stories so far.

• Location: Suntec City
• Part Time with Flexible work hours and arrangement
• Only need to go office if needed, if not will be remote
• Budget: $1,000 - $3,000

Job Description

• Investment and Asset Management Support: Collaborate with the investment team to support the legal aspects of investment and asset management activities. Assist with due diligence on potential investments, review and summarize investment agreements, and coordinate the execution and filing of investment-related documents.
• Legal Documentation and Contract Management: Prepare, review, and revise legal documents, contracts, and agreements, such as confidentiality agreements, employment contracts, and vendor agreements. Assist with contract negotiations and track contract status, deadlines, and renewals. Maintain a contract management system to organize and manage legal documents.
• Legal Administration: Manage legal department administrative tasks, including maintaining legal files, calendars, and databases. Handle legal correspondence and facilitate communication between the legal team and internal stakeholders. Coordinate meetings, manage attorney schedules, and assist with travel arrangements.
• Other Adhoc duties if needed.

Job Requirements

• Degree in Law or related is preferred.
• Applicant must have minimum 3 years' prior working experience in legal role, preferably in areas in terms of litigation, legal documentation management (i.e.: drafting / preparation)
• Familiar with Equity Trading firm and Cryptocurrency is a plus.
• Able to speak and write Mandarin to liaise with clients from China.

Technical skills

• Architecture and Deployment
• Cisco/Aruba Switching /Routing & WLAN
• DDI, AAA/Cisco ISE
• Network Automation: Python & Ansible
• As Built, LLD, Testing & Acceptance Testing Documentation Skills
• ZScaler & Network Security
• Certification: CCNP/CCDA equivalent
• Meraki, Palo alto, f5 loadbalancer, UTP
• Experience in network operations/maintenance and passionate about providing troubleshooting support
• Knowledge on Internet Technologies (i.e. routing, switching and general network infrastructure), and technologies associated with the ISP market
• Strong analytical and problem-solving skills, and has a flair for dealing with technical and operational problems
• Experience in IT audit or CISA/CISM certified preferred or operational risk management and control self-assessment or prior experience in implementing security solution and information security governance
• Demonstrated knowledge of global cyber threats, threat actors and the tactics, techniques and procedures (TTPs) used by cyber adversaries, particularly as they relate to the financial sector.
• Experience with models for threat analysis, such as the Diamond Model, Cyber Kill Chain and MITRE ATT&CK framework.
• Enterprise Data Network (administration, patching, upgrade and migration activities), Design, Preparing of HLD/LLD, Implementation Team leading, Service Level management, demand, incident, change management.
• Provide network WAN/LAN design, implementation, consulting, Cisco, Aruba, Juniper
• Network audit Identify the gaps and suggest the remedial solution supporting in RFP/RFI response
• Experience in running operations with ITIL processes / Project Management - PMP

As the leading European Union bank, and one of the world’s largest financial institutions with an uninterrupted presence in the region since 1860, BNP Paribas offers a wide range of financial services for corporate, institutional and private investors spanning corporate and institutional banking, wealth management, asset management and insurance.

We passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued and encourage applicants of all backgrounds, including diversity of origin, age, gender, sexual orientation, gender identity, religion applicants who may be living with a disability. We have a number of internal employee networks in place to empower our staff to act and challenge the status quo.

• BNP Paribas PRIDE is highly active in favour of the LGBTQIA+ community
• BNP Paribas MixCity which fosters better representation of women at all levels of the organization
• Ability, the mutual aid network for employees with a disability or a disabling or chronic illness
• BNP Paribas CulturAll which celebrates diverse backgrounds

BNP is committed to financing a carbon-neutral economy by 2050. The Group is a founding member of the Net-Zero Banking Alliance and has set up its own Low Carbon Transition Group to support its clients through their energy transitions.

https://careers.apac.bnpparibas/

More information
BNP Paribas - Diversity & Inclusion Journey
BNP Paribas - The Bank Of Green Changes

Award Obtained
BNPP has won Top employer Europe award in a 10th consecutive year

Main Scope
Role of Wealth Management APAC Chief Information Systems Security Officer, being understood this role includes delegations from WM CISO for the team located in Asia Pacific territory and fully participates in overall WMIS Cybersecurity and IT Risk objectives.

Main Responsibilities

WM APAC CISO

• Manage the WM IT Risk and Security local team in APAC by managing the recruitment, performances review as well as training and career-path development
• Coordinate with APAC WM security actors, including India-based resources
• Coordinate with APAC WM IT teams on risk and security topics, while promoting a secure development and deployment culture
• Assist for a Risk Treatment for any APAC WM issue, based on the WM GAIM generic process
• Contribute to the IT Risk and Cybersecurity Governance including procedural framework, Cybersecurity awareness and communication for the APAC scope.
• Periodic reporting of security status to WM Global CISO as well as APAC Management

IT security compliance

• Ensure the alignment with the Group and WM GAIM security policies, for IT production assets including the security hardening, vulnerability and patch management.
• Ensure the protection of WM business data with an adequate security level of WM assets, based on project assessment and production review processes
• Ensure the compliance with regulatory bodies requirements, including for APAC (HKMA, MAS), EU (GDPR), Switzerland (FINMA)
• Leveraging on a deep knowledge of Security standards such as NIST, CIS,ISO2700x , ensure the compliance with the IT security requirements
• Identify the process gaps and provide solutions

Production Security oversight (delegation on WM APAC scope)

• Identify the production security requirements and ensure a smooth integration of WM assets within APAC IT Production, including network security such as flow opening and Application Zoning compliance
• Identify the compliance level of the production environment and contribute to remediation actions definition while keeping the oversight on actions progress
• Keep an overview and ensure the adequate Vulnerability Management at the server and middleware level leveraging on production scans and liaising with relevant production stakeholders
• Contribute to the management of Cybersecurity incidents

Application Security Testing Factory

• Ensure the effective implementation of Secure SDL including the DevSecOps platform and Threat modelling practices.
• Identify and implement the latest security standards for internet facing and internal assets
• Improve the Vulnerability Management at the application level by managing the platforms or services with providers (including Static Acceptance Security Testing – SAST, Dynamic Acceptance Security Testing – DAST and Software Composition Analysis – SCA).
• Perform Security risk assessments and reviews to be presented to respective committees
• Ensure the adequate security level for all WM GAIM applications, whatever the IT project manager’s location and hosting provider

CyberSecurity Program (delegation on WM APAC scope)

• Contribute to the security initiatives expected by the WM Cybersecurity Program

Coordination with IT Security actors

• Reporting line to the WM GAIM Global CISO: alignment on the objectives and means, contribution to the different global reporting (WM Cybersecurity Committee, Wholesale Application Security Dashboard…)
• Coordination and control of security activities performed by APAC CIB Business Information Security and Production Security teams, including project assessment from production point of view, production security review, user security awareness for the WM scope.
• Coordination with the Swiss Security team concerning integration of WM assets within Swiss IT production
• Keeping abreast of initiatives by the IT Security community within the Group and other IT Security stakeholders within the Group

Qualifications

Essential Banking Knowledge

Banking Knowledge and understanding of Wealth Management specificities

General Knowledge

International and APAC banking regulations

Deep Knowledge

Essential Technical Knowledge

Program/Project Management

Deep Knowledge

Knowhow of ASIA regulatory requirements

Deep Knowledge

Knowledge of standard IT Security concepts and methodologies

Deep Knowledge

Deep understanding of cybersecurity threats and remediation options

Deep Knowledge

IT Security Risk Assessment and Risk Management

Deep Knowledge

Knowledge of understanding digital transformation and mobile technologies and Cloud (Containers Docker, Kubernetes).

Good Knowledge

Knowledge of emerging technologies (NFT, encryption)

Good Knowledge

Essential Personal Skills

Communication skills – Ability to interact throughout oral and written communication skills

Deep Knowledge

Knowledge of emerging technologies (NFT, encryption)

Deep Knowledge

Knowhow of ASIA regulatory requirements

Deep Knowledge

Must be motivated, and able to work independently as well as part of a team

Deep Knowledge

Must demonstrate ethical responsibility, maturity, and discretion

Deep Knowledge

Qualifications and Experience

• 10 years' experience in information security evaluation and design of technical architectures
• Functional as well as technical knowledge of the applications used within BNP Paribas
• Knowledge of the Norms and Standards of the BNP Paribas Group, in particular with respect to ITRM & IT Security Norms and Policies
• Team management experience is a must
• Preferred Master level in Computer science and Information Security

Cybersecurity / Technical Value-added Competencies

ü Cybersecurity Governance: framework (NIST / CIS framework), Security incident management, Logging & Detection (SIEM – ELK products)

ü DevSecOps: CI/CD toolchain knowledge of various tools

o Source code management: sonarQuabe, bibucket, github/gitlab

o Security application scanning (e.g. Sonatype/NexusIQ, Fortify, AppSpider, Qualys, DTR scan…)

o Automation/orchestration: Ansible tower, Jenkins

Application Security: Threat modeling, Security architecture key concepts, exposure to various development framework and applicative landscape (Java/Web, Mobile applications, containerization/docker, kubernetes, API management, Cloud security)

Vulnerability management

• Nexpose, Nessus

Other Value-added Competencies

• Advanced IT security certifications may be advantageous (such as CISM, CCSP, CSK, CEH, CISSP…).
• Operational Risk and Permanent Control
• Data Analytics solutions (Tableau, PowerBI)and strong expertise in Dashboard/reporting

Qualifications and Experience

• 5-8 years' experience in information security and IT risk management.
• Experience in evaluation and design of technical architectures and processes
• Functional as well as technical knowledge of the common architecture and Cybersecurity frameworks and solutions
• Strong knowledge in secure development and SSDLC processes
• Knowledge of the Norms and Standards of the banking and cybersecurity industry

Other Value-added Competencies

• Advanced IT security certifications: CISSP / CISM / SANS Certification
• Operational Risk and Permanent Control

What the role is

The research function advances thinking in service, operations and enforcement management for the Singapore public sector. As a researcher, you will design, plan and conduct research. You will also communicate the research insights to support the learning and development of public sector service practitioners and leaders, and help them develop and implement strategies to deliver excellent service, operations and enforcement.

Job Responsibilities

• Proposing research topics, designs and plans in Service, Operations and Enforcement Management, especially to develop citizens’ insights.
• Conducting research on key emerging trends in Service, Operations and Enforcement Management, and drawing insights that are contextualised for the Singapore public sector.
• Uncovering citizens’ insights for Service, Operations and Enforcement Management using appropriate research methods, including but not limited to surveys, ethnographic interviews, intercept interviews, focus group discussions, contextual inquiries, observations, etc.
• Managing WOG quantitative research, which includes designing the study, procuring of research partners, managing vendors and stakeholders, and sharing of results with agencies, PSD, and ServiceSG.
• Translating research insights into learning products such as articles, videos, infographics, toolkits, scenarios, games, simulations, case studies and papers on the topic of Service, Operations and Enforcement Management to meet learning needs both within and beyond the classroom.
• Convening and facilitating communities (both online and face-to-face) to share best practices, and pertinent issues and challenges for the public sector Service, Operations and Enforcement Management communities.
• Designing and facilitating discussions on Service, Operations and Enforcement Management.
• Designing and implementing learning interventions for practitioners and leaders, such as:.Organising roundtables, seminars and lectures helmed by practice leaders and academics to raise awareness of current and emerging Service, Operations and Enforcement Management issues.
  Providing advisory and consultancy services to public sector agencies, and managing multi-disciplinary projects.
  

Job Requirements

• We are looking for someone who can value-add by bringing in inquisitive and analytical perspectives, and has a flair for communicating research in ways that facilitate the learning of the diverse Service, Operations and Enforcement Management community.
• Possesses strong analytical skills
• Possesses strong written and oral communication skills to put across research in a way that engages our stakeholders
• Is able to engage and manage stakeholders at various levels.
• Is able to work both independently and in a team.
• Is self-motivated, innovative, enterprising and adaptable
• Has an interest in Service, Operations and Enforcement Management
• 2 to 3 years of experience in customer insights /market research/ consulting will be a plus

Only shortlisted candidate will be notified.

To apply, please visit to www.gmprecruit.com and search for Job Reference: 23921

GMP Recruitment Services (S) Pte Ltd | EA Licence: 09C3051 | EA Personnel: Jaremy Ong | Registration No: R1876766

Key Responsibilities:

• Develop and implement advanced cyber security architectures and solutions.
• Analyze and evaluate system security requirements to design secure networks.
• Collaborate with cross-functional teams to integrate security practices into all facets of the business.
• Conduct risk assessments and provide recommendations for enhancing system security.
• Stay updated with the latest cyber security threats and technologies.
• Develop technical solutions and tools to help mitigate security vulnerabilities.
• Provide technical guidance and support to other team members.
• Document and maintain records of security architectures and processes.

MUST HAVE:

• Bachelor’s degree in Computer Science or Information Technology or Cyber Security, or related field.
• Minimum of 3-5 years of experience in a cyber security architect or engineering role.
• Proven experience in designing and implementing secure network architectures.
• Strong background in network security, system security, and cloud security.
• Experience with common cyber security tools, standards, and protocols.
• Familiarity with industrial control systems and operational technology (OT) security is a plus.

WE VALUE:

• Strong technical skills in network and system security.
• Knowledge of current cyber security trends and threats.
• Excellent problem-solving and analytical abilities.
• Proficient in security technologies such as firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, etc.
• Good communication and collaboration skills.
• Ability to work independently and as part of a team.

The Paralegal / Sectary should generally have the following qualities.

(don’t worry if you do not possess some of them)

• Able to change direction and priorities on a moment’s notice
• Accomplished in the use of technology applications
• Ability to anticipate an attorney’s needs
• Build and maintain firm/client support
• Conduct legal research online and records searches
• Extremely organized and detail oriented
• Good logical problem solving skills
• Good listeners who have the ability to follow directions
• Maintain confidentiality
• Organize and simplify large amounts of information
• Patience with clients who have continual questions about their case
• Proof read and perform cite checks
• “Thick skin” mentality when it comes to abrupt lawyers with deadlines looming
• Time Management
• Work well independently and manage well under pressure
• Write clear and effective correspondence

Interested candidates kindly email to [email protected]

Job Responsibilities

• Design and implement policy and process improvements; and surface opportunities for product development and enhancement to deliver operational outcomes effectively
• Conduct thorough analysis and evaluation of existing policies, processes, systems and data relating to business operations to identify areas for improvement and optimisation
• Develop a deep understanding of operational workflows and procedures and maintain up-to-date documentation of policies and processes
• Partner business units, corporate departments and key stakeholders to elicit and define business needs through user-centric methodologies and develop the appropriate business cases
• Gather, document and translate business needs into functional and technical requirements to inform product design and development; and work closely with product team(s) to deliver product(s)
• Identify interdependencies across projects/initiatives and strategise how these can be managed and coordinated, in collaboration with the relevant teams
• Support business transition and help drive change through actively engaging key stakeholders and end users
• Own and maintain overview of ‘business operations health’ and support operational decision-making through business analytics by:
• Establishing standards and metrics to measure impact, progress and performance of operational initiatives
• Tracking, analysing and interpreting complex datasets to surface insights that inform business units (e.g. programme planning and delivery, budget and cost estimations, potential issues, risks and benefits)
• Provide regular updates and reporting to management, highlighting key findings, recommendations and progress towards operational goals
• Keep abreast with industry trends, best practices and emerging technologies related to business operations and process improvement

Job Requirements

• Proven experience as a Business Analyst or in a similar role, preferably in a business operations or process improvement capacity
• Strong analytical skills with the ability to collect, organise, analyse and interpret large datasets
• Good understanding of user-centric principles and/or service design
• Excellent problem-solving skills and the ability to think critically to propose innovative solutions
• Adept communicator (both written and verbal) with the ability to effectively convey complex information to stakeholders across all levels
• Enjoys both working independently and collaboratively in a fast-paced, dynamic environment
• Proficient in using data analysis tools and techniques such as Python, SQL, or data visualisation software is a bonus

Only shortlisted candidate will be notified.

To apply, please visit to www.gmprecruit.com and search for Job Reference: 23539

GMP Recruitment Services (S) Pte Ltd | EA Licence: 09C3051 | EA Personnel: Jaremy Ong | Registration No: R1876766

We work at the intersection of finance and law, providing counsel and advice that support activities across the firm. Professionals within the Legal Division provide high quality legal advice, transactional and regulatory advice, litigation oversight, and advise on compliance and reputational issues. Our goal is to help our businesses understand, navigate and weigh the risks associated with business related activities. Whether you’re an experienced attorney or a quick learner with a strong interest in financial law coupled with critical thinking skills, our dynamic group might be right for you.

Technology, Sourcing & Intellectual Property
The Legal Division is looking for a legal counsel to be part of the Technology, Sourcing & Intellectual Property (TSIP) team tasked with advising, counseling, structuring and negotiating technology, outsourcing and intellectual property-related transactions and will provide legal support for the firm’s core technology / engineering and strategic sourcing divisions and for the firm’s contracting initiatives in Asia Pacific, working closely with Senior Counsel (based in Singapore) responsible for the firm’s regional contracts.

This position offers an opportunity to work closely with stakeholders across different business teams, including from the technology / engineering division, as well as internal business lines, in connection with the development of new financial technology products, services and capabilities, and to interact closely with colleagues throughout the firm’s Legal and Compliance functions.

RESPONSIBILITIES

• Drafting and negotiating a wide range of contracts with various external service providers and consultants, including technology agreements, SaaS, software, data and content licensing, professional services agreements. intellectual property arrangements, corporate services, operations, security, tax and audit engagement letters.
• Review and advise on laws and developments in law related to technology and cybersecurity.
• Review and advise on data privacy and intellectual property related matters, in collaboration with divisional and other specialist lawyers.
• Coordinate and review outsourcing processes.
• Provide general legal and contract related advice.
• Draft, review and coordinate internal services agreements.
• Review and maintain library of contract templates and manage shared document library, including updating templates and related source documents.
• Instructing/working with/manage external counsel and consultants.
• Working closely with internal business clients and Legal and Compliance colleagues in identifying, assessing, and advising on various regulatory issues.
• Working with internal business clients and Legal and Compliance colleagues regarding the structuring, negotiation, and execution of complex transactions.
• Working with other relevant groups throughout the firm, including Legal, Compliance, Risk, Controllers, Tax, etc.and ensure that the firm’s standard provisions are incorporated into all transactions and activities.
• Uphold the firm’s principles, business controls, ethics, policies and procedures, and professional standards.

BASIC QUALIFICATIONS

• Approximately of 3-7 years post qualification experience required, preferably in a mix of top tier law firm and in-house experience within financial services or FinTech companies.
• Knowledge of technology, information security, data protection and privacy, outsourcing, intellectual property, and contract laws and regulations.
• Significant experience in reviewing, advising, and negotiating on technology licensing and services contracts, including for data, software, digital platforms, or other technology services.
• Experience partnering with fast-paced internal clients and supporting business objectives, demonstrated commitment to excellence, highly motivated with a strong work ethic.
• Strong organizational skills to prioritize and manage multiple time-sensitive projects simultaneously.
• Excellent interpersonal skills, team player with sound commercial and legal judgment, keen business acumen, strong analytical skills and ability to take firm positions to protect the firm’s interest.
• Comfortable engaging with a diverse range of stakeholders and senior executives and to build strong working relationships, ability to work collaboratively and willingness to be part of a Legal team that is dispersed geographically.
• Strong oral and written communications skills.
• High level of initiative, integrity and organization.
• Excellent academic credentials.
• Proficient in English and Chinese languages (written and verbal) because this role will liaise with both English and Chinese speaking clients and regulatory counterparts, in relation to intellectual property and new financial technology products.

ABOUT GOLDMAN SACHS

At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.

We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.

We’re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more: https://www.goldmansachs.com/careers/footer/disability-statement.html

© The Goldman Sachs Group, Inc., 2024. All rights reserved.

Goldman Sachs is an equal employment/affirmative action employer Female/Minority/Disability/Veteran/Sexual Orientation/Gender Identity

Job Description:

You will be a part of our insurance department. Your duties include handling and collation of court documents as well as conducting witness interviews. You will be expected to multi-task and to cover a range of administrative, secretarial and paralegal duties to support our lawyers.

Job Requirements:

You should have at least one year relevant experience working in the insurance department of a law firm in Singapore. Knowledge of e-Litigation filing is a must. You should possess good communication skills in both spoken and written English.

Interested applicants are invited to email their resume stating current and expected salaries to [email protected].

Only shortlisted candidates will be notified.

Qualifications and Experience Required

• 5-8 years' experience in information security and IT risk management.
• Experience in evaluation and design of technical architectures and processes
• Functional as well as technical knowledge of the common architecture and Cybersecurity frameworks and solutions
• Strong knowledge in secure development and SSDLC processes
• Knowledge of the Norms and Standards of the banking and cybersecurity industry

Other Value-added Competencies

• Advanced IT security certifications: CISSP / CISM / SANS Certification
• Operational Risk and Permanent Control

Responsibilities

• Draft, review, negotiate and arrange for signing of Non-Disclosure Agreement for all new partners and Letter of Confirmation or equivalent where required.
• Work closely with Claims & Risk team on Master Service Agreements and Third-Party Administration Service Agreements for Claims Management services
• Prepare Terms of Business Agreements with Reinsurers, Brokers, etc.
• Draft and review Addendum to agreements in accordance with the commercial terms agreed by the parties.
• Prepare forms required by Reinsurer for every new deal
• Coordinate with Reinsurer for legal due diligence confirmation
• Review signed agreements for circulation to the relevant stakeholders
• Administer and maintain records of legal documents.
• Conduct ad-hoc simple legal research where required

Requirements

• Diploma in Law, Legal Studies or related field
• Knowledge of contract administration
• Excellent written communication skills with attention to details
• Ability to work in a dynamic environment
• Team player with good Interpersonal and communication skills

Interested candidates who wish to apply for the advertised position, please click on "Apply Now". We regret that only shortlisted candidates will be notified.

PERSOLKELLY Singapore Pte Ltd • RCB No. 200007268E

EA License No. 01C4394 • EA Registration No. R23114347 (Pang Xue Ni)

Legal Executive (Banking)

Due to the continued growth of our business, across the region, we at Linklaters are looking for a curious minded and passionate Legal Executive to be a part of our Banking team. Reporting to the Partners and working with the team, in this role, your prime scope of work would include providing dedicated matter support to ensure matters are completed accurately, on time and to the ultimate clients’ satisfaction.

Key Responsibilities:

• Providing dedicated matter support and assistance under the supervision of lawyers within the firm
• Assisting on specific deals requiring legal training and knowledge including drafting, due diligence, verification, bible preparation and deal closing
• Organizing and preparing materials for meetings
• Assisting in ad-hoc legal drafting and research work
• To succeed in this role, you should be competent and eager to see the job through to completion and have gravitas to work effectively with the team at all levels.

Key Requirements:

• Degree in Law
• At least 5 years of relevant experience
• Fluency in English, both verbal and written
• Fluency in one of the Asian languages (Malay, Bahasa) will be an added advantage
• Perform duties in accordance with agreed instructions and procedures
• Dynamic, team player and positive attitude
• Highly robust with an eye for attention to details
• Excellent interpersonal and communication skills

#LI-DNI