• Management of Cloud infrastructure set up & implementation projects.
• Serve as the Subject Matter Expert (SME) in the development of cloud infrastructure solutions.
• Provide detailed designs on the IT projects assigned ensuring right architecture and functionality.
• Support new technology implementation.
• Highly technical and analytical, possess system thinking skill and the ability to visualize how different parts interact with the whole
• Able to support technical decisions with rationale or data points.
• Participate in Cloud Migrations for VMs using tools like Azure Site Recovery, Azure Migrate with more than 30 VMs migration or Databases would be preferred
• Apply technical knowledge, hands-on and customer insights to operate and administrate a cloud infrastructure
• Ensure all configuration conforms to high levels of performance, security, scalability, maintainability, and appropriate reusability and reliability upon deployment, aligning to design documentation specifications
• Ability to codify or implement/deploy configurations with the principles of automation by default in new projects with proper documentations
• Ability to codify or maintain cloud systems in an automated fashion using tools like Ansible, Terraform etc with proper documentation
• Collaborate with team members to engage clients in operational meetings, discussions, process betterment and contribute to optimisations for the client’s environment
• Maintain technical skills, certifications and knowledge of market trends and competitive insights; collaborate and share with the technical community specifically in the cloud space
• Ability to manage issues with proper resolution/documentation and SLAs is required for this role

• Review contract documents, perform measurements, and promptly prepare Bill of Quantities.
• Collaborate closely with the Project Team to submit progress reports, progress claims, variation orders, final accounts, and other relevant documents.

Requirements:

• Diploma in Quantity Surveying or equivalent
• At least 2 years of work experience in construction or security system industry.
• Proficient in AutoCAD and ELV systems.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R24120303

FIND YOUR 'BETTER' AT AIA

We don’t simply believe in being ‘The Best’. We believe in better - because there’s no limit to how far ‘better’ can take us.

We believe in empowering every one of our people to find their 'better' - in the work they do, the career they build, the life they live and the difference they make. So that together we can support even more people - including our own - to live Healthier, Longer, Better Lives.

If you believe in better, we’d love to hear from you.

About the Role

This position is responsible for to providing consultation, professional advice, awareness/training on information security and key technology risk matters relating to the abovementioned geographical responsibilities, thereby contributing to building a strong information security risk culture cantered on people, processes and technology. The role will also coordinate regular governance engagements and being involved in technology-related audit engagements for AIA Singapore, and exercise professional judgment and assessments on the material to be provided by the various process and control owners for the audits.

What you will do:

Information Security & Technology Risk Metrics

• Support the alignment of various information security and technology risk metrics for management reporting and escalation – this includes reporting/escalation of outstanding or overdue action required from penetration tests, vulnerability assessments, security incidents, policy/standards deviations, third party security assessments, etc.
• Drive the monthly Technology Security Governance forum focusing on highlighting metrics impacting the Company’s cybersecurity metrics.
• Collate and review collated metrics and material relating to the Operational Risk Management forums, Key Risk Indicators and Key Risk Tolerance Indicators for cybersecurity and technology processes.

Risk Assessments, Audit and Regulatory Management

• Support Technology related audit engagements with statutory auditor and regulator, following up with relevant parties to ensure all issues identified are remediated.
• Support the delivery of annual IT risk and control self-assessment exercises according to MAS regulatory notices/guidelines, internal enterprise IT policies, and standards.

Policy, Standards and Exception Management

• Communicate material changes to internal policies/standards to collaborators. Facilitate risk evaluations and exception handling to deviations from the policies, standards and regulatory requirements.

What you should have:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).
• 5 years or more of relevant work experience, including at least 2 years of experience in IT audit, risk management, compliance and/or governance roles, with particular expertise and knowledge of governance reporting of technology risk issues and cybersecurity.
• Rich working experience from financial industry, big tech firms or established auditing firms will be considered favorably.
• Experience and exposure in information security standards such as ISO27001 and PCIDSS will be an advantage.
• Preferably a holder of one or more of the following information security and audit qualifications: Security+ and CEH.
• Candidates with advanced level qualifications such as CISSP, CISA, CRISC, CCSP will have added advantage.
• Good Communication, Coordination and Interpersonal Skills. Good experience working alongside and opposite external auditors as well as regulatory bodies Meticulous and analytical traits Strong programme/Project Management skills High drive, energy and good demeanor over teamwork High levels of professional integrity.
• Eagerness to learn and develop one’s knowledge in information security and computing, especially on emerging computing fields such as cloud security, DevSecOps, etc.

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.

The Legal Counsel will act as in-house legal counsel to Abaxx Exchange and Clearing House (“Abaxx Exchange”), reporting directly to the General Counsel of Abaxx Exchange. He/she will be expected to provide a full spectrum of legal advice and support to the other business units within the organization, including operations, market regulatory, risk, commercial, products, technology and finance. The Legal Counsel will play an active role as part of a dynamic team in Singapore’s newest exchange and clearing house, and will be expected to contribute not only to the legal support function, but to provide strategic input and leadership as the company continues to grow exponentially to meet the needs of the energy transition market. The ideal candidate should be self-motivated, have experience in a relevant market such as commodities, trading, exchanges or clearing houses, able to think on their feet and find solutions in dynamic environment, and be detailed oriented and rigorous in their approach to work.

Responsibilities:

• Provide in-house legal support to Abaxx Exchange in connection with Abaxx Exchange’s external stakeholder relationships, including with customers, service providers, clearing members, investors, governmental and regulatory agencies, advisors, consultants and all other stakeholder groups.
• Negotiating, drafting, reviewing, updating and advising internal business units on all contracts entered into by Abaxx Exchange.
• Assist in the drafting and review of the rules and procedures of Abaxx Exchange, and the development of products / drafting of commodities contracts of Abaxx Exchange.
• Ensure that Abaxx Exchange is up to date and in compliance with applicable legal and regulatory requirements, including under the Securities and Futures Act (“SFA”) and all other subsidiary legislation.
• Assist in the review and formulation of all processes, policies and procedures of Abaxx Exchange.
• Continuing identification and monitoring of potential legal risks that will have material impact on Abaxx Exchange and to formulate mitigation processes for such risks, as part of Abaxx Exchange’s strategic risk management processes.
• Provide legal support for exchange and clearing house operations on a “business as usual” (BAU) basis, in particular to deal with issues which may arise from time to time with the trading of contracts, delivery of margin, settlement of trades and delivery of commodities, including the resolution of any disputes that may arise between market participants.
• Support the corporate secretariat function by ensuring proper records of all contracts, board and shareholder meetings, corporate records and filings as required by MAS, ACRA and local laws.
• Assist the General Counsel as primary point of contact with the Board of Directors, in the preparation and minuting of Board of Directors and shareholder meetings, and managing internal stakeholder relationships between management and the Board and shareholders.
• Assist the General Counsel in legal strategic planning and implementation of business plans as a key member of the Legal team.
• Undertake such other tasks/projects as may be assigned by the General Counsel from time to time.

Qualifications & Requirements:

• At least 4-5 years of prior work experience in a leading law firm, company or financial institution, preferably in the commodities trading industry, and/or exchanges and clearing house space.
• Experience in capital markets, general corporate, or financial markets are also welcomed.
• Ability to work well in cross-functional teams, possesses strong communication skills and is able develop good working relationships with internal and external stakeholders.
• Highly motivated and keen to be part of the pioneer team in developing an exchange and clearing house led by a team of industry leaders.
• Detailed, hard working and solutions-orientated.
• Law degree from a reputable university.

Security Concierge

Chin Swee Rd (near Chinatown MRT)

6 days (8 hrs/day including 45 mins break)

Shift hours: 7am – 3pm; 3pm – 11pm; 11pm – 7am

$1800 - $2300

Responsibilities:

• Manning of fire command center
• Patrolling duties of all areas in and surrounding Hotel
• Perform escort duties, traffic and crowd control management.
• Assisting guest with luggage during arrival and departure
• Performs other related tasks

Requirements:

• Must possess valid Private Security Identification Card and WSQ certification.
• Able to perform 3 rotating shifts, including weekend and public holidays.

Lee Wan Ling | Reg No: R23116154

THE SUPREME HR ADVISORY PTE LTD | EA No: 14C7279

Location : Orchard , Singapore

Industry : Retail

Working hours : 3 Different rotating shifts inclusive of weekends and PH : 8am-5pm ; 1pm-10pm & 930pm-930am

Benefits: Basic + AWS + Variable bonuses

· Assist in the supervision of in-house security personnel and Agency guard services

· Performs rotating & night shift-duty to provide security and patrol company premises according to specified procedures

· Inspection & monitoring of security passes & goods at selected locations

· Render assistance in emergencies & investigations

· Possess a WSQ Certificate in Security Operations

• Minimum 2 years of security experience

• Instrumentation of measurement and detection equipment for military and homeland security.
• Oversee post-sales delivery of equipment, conduct scheduled maintenance, and conduct diagnostic analyses for troubleshooting and repair tasks.

Requirements:

• Higher Nitec in Electrical & Electronics Engineering or equivalent.
• At least 2 years of working experience

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

Job Responsibilities:

• Ability to deploy, configure and fine-tune security policies as well as performing threat hunting to proactively response to potential cyber threats.
• Manage and operate the IT Security Protection System which includes liaising with Maintenance Contractor to address technical & security issues and Health Checks.
• Manage and investigate Events of Interests and security vulnerabilities to identify early indicators and work with the respective team to address them.
• Facilitate and support (internal and external parties) on Cyber Security Incident management and response.
• Enforce IT Security Policy compliance which includes assessment of security posture of the organisation’s IT assets as well as recommending appropriate measures and controls to mitigate security threats within the organisation.
• Assist in all internal & external IT audits. Follow-up with the respective Risk Owners to remediate audit findings.
• Review and enhance IT security policies, procedure and documentations with respect to industry standards and best practices.
• Facilitate, plan and conduct Cyber Security Awareness Training, including Cyber Security Exercises.
• Be on standby for any critical security alerts and incident management after office hours.

Job Requirements:

• Degree in Information Technology or Information Security or related discipline
• Minimum 3 years of working experience in Cyber Security field.
• Good Knowledge in Cyber Security Management, IT Compliance and/or Risk Management.
• Hands-on experience with Windows or Linux OS.
• Familiar with ISO27001 and/or PCI Data Security Standards.
• Hands-on experience on Microsoft Azure Cloud Security technologies (MS Sentinel, MS Defender...etc) as well as other Enterprise Security Appliances; such as Privileged Access management & Vulnerability Management tools.
• Familiar with modernised A.I and SecOps tools.
• Possess good project management and report writing skills.
• Security Screening will be required for potential candidates.

To apply, please visit www.gmprecruit.com and search for Job Reference: 24131

To learn more about this opportunity, please contact Yi Fang at [email protected]

We regret that only shortlisted candidates will be notified.

GMP Technologies (S) Pte Ltd | EA License: 11C3793 | EA Personnel: Law Yi Fang | Registration No: R1113115

About Us

At Cloudflare, we have our eyes set on an ambitious goal: to help build a better Internet. Today the company runs one of the world’s largest networks that powers approximately 25 million Internet properties, for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.

We realize people do not fit into neat boxes. We are looking for curious and empathetic individuals who are committed to developing themselves and learning new skills, and we are ready to help you do that. We cannot complete our mission without building a diverse and inclusive team. We hire the best people based on an evaluation of their potential and support them throughout their time at Cloudflare. Come join us!

What You’ll Do

Cloudflare’s business requires a world class legal team to help the company deal with complex matters by anticipating complications and distractions and guiding the company around those obstacles. We’re looking for a new team member who can help foster our unique corporate philosophy and approach, in which the security and privacy of our customers are paramount. This role is ideal for someone who is a proactive self-starter and strategic thinker, who has a thirst for knowledge and continued growth, all while working as part of a great team.

We are looking for an exceptionally talented, energetic, and friendly program manager to join our legal team as a Regional Program Manager, Legal Compliance (APJC) based in Singapore. You will play a key role executing the day-to-day nuts and bolts of our legal compliance within the APJC region, including company compliance with new laws and regulations, establishing corporate presence in new countries, internal investigations, conflicts of interest disclosures, gifts and entertainment requests, training and communications, as well as project management of other cross-functional compliance initiatives. The perfect candidate is passionate about compliance and can channel that passion into solving complex problems and novel legal issues in a fast-paced environment. As part of the job, you will:

Responsibilities:

• Manage Cloudflare’s company compliance with new laws and regulations in the APJC region, working closely with our public policy, legal compliance and regional legal teams;
• Manage compliance initiatives associated with setting up corporate presence in new countries within the APJC region;
• Support Cloudflare’s internal investigations program, including management of investigation case files, conducting witness interviews, collecting supporting documentation, and drafting final reports;
• Assist with the administration of Cloudflare’s compliance training and education program, including the design of regional compliance training content, target audience identification, and effectiveness measurement;
• Assist with Cloudflare’s conflict of interest disclosure process, including review and approval of potential employee conflicts and gift and entertainment requests, as well as policy training;
• Assist with execution of a regular integrity and compliance communications strategy within the region; and
• Project manage a variety of other cross-functional compliance initiatives.

The above list is representative and additional responsibilities may be assigned, as required by the need for the compliance program to support Cloudflare’s Legal team with agility in a dynamic environment.

Requirements:

• Minimum 6 years of program or project management experience
• Experience with an in-house legal department preferred; experience at a tech company, especially as part of a compliance team, is a huge plus
• Experience conducting and participating in complex investigations and witness interviews highly desirable
• Detail-oriented, well-organized, and technically-adept
• Excellent written and oral communication skills
• Strong interpersonal skills and experience in working cross-functionally with a variety of teams, with lawyers and non-lawyers, including engineering teams, sales teams, and product teams, to establish effective solutions efficiently and in an amenable manner.
• Experience with the following software tools helpful not not required: Google Suite, Navex (EthicsPoint, Disclosure Management), Certa, Moodys RDC, Workday LMS, Marketo
• The ability to manage multiple matters / projects for multiple teams.
• Self-starter with the ability to learn in a fast-paced environment with minimal supervision
• An ambitious mindset that enables you to successfully work independently with little guidance, but also to use good judgment and call out issues when needed.
• Experience delivering in-person and/or virtual trainings and workshops

Meta is seeking a talented Content Integrity and Compliance Lawyer to join its global Content and Compliance team, focusing on the APAC region. This role involves handling cutting-edge and complex legal issues and projects across content, safety and integrity. The work is varied and stimulating, and focuses on counselling on regulatory requirements, and risk and compliance strategy. Advice and support is needed on integrity measures and products, compliance structures and governance requirements, risk assessments, effective compliance system design, monitoring and testing and advising on mitigations and remediations, across a wide variety of risk and product areas, with a focus on content, safety and integrity.

The ideal candidate would be an experienced, motivated regulatory compliance lawyer, with deep knowledge of the evolving global content regulatory landscape, impacting advertising as well as user-generated content. Alternatively, experience gained in another heavily regulated area will be considered.

You will work closely with other legal teams and cross-functionally, as well as liaise externally and should be able to use initiative in identifying solutions and connecting the dots in our large and complex organisation. The role requires good judgment, a strong work ethic, and a keen interest in learning about new technologies and areas of the law. This is a great opportunity to join a growing legal team and to work on novel issues in a fast-paced, energetic environment.

This is a full time role and based in office at our Singapore location.

RESPONSIBILITIES

• Advise and support Meta’s content, integrity and safety product, regulatory, and compliance teams in preparing for and responding to new content, safety and integrity regulation and legal action.
• Advise teams on compliance strategy and design, review, maintenance and remediation with respect to content-related obligations across Meta’s family of products.
• Advise the compliance function on the enhancement of Meta’s integrity compliance programs with respect to content-related laws and obligations.
• Advise on adequacy of control testing for the mitigation of integrity risks.
• Collaborate with the compliance function, policy and other legal colleagues on regulatory engagement strategy.
• Build strong relationships with key stakeholders to guarantee the observance of Meta’s content-related obligations.
• Build relationships and interface closely with a diverse set of Legal, Risk, and Compliance partners, subject matter experts, internal control partners and/or risk management professionals.

MINIMUM QUALIFICATIONS

• 8+ years PQE qualified lawyer.
• In-house or law firm experience advising a heavily regulated industry on development of compliance strategies, governance, and frameworks, ideally across multiple jurisdictions.
• Deep understanding and experience of platform regulation, practice and principles.
• Demonstrated ability to work in a collaborative, fast-paced environment and make sound judgments under tight deadlines.

PREFERRED QUALIFICATIONS

• Experience assessing and advising upon a diverse set of legal standards governing content issues, across a range of topics.

Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today—beyond the constraints of screens, the limits of distance, and even the rules of physics.

about the company
We are working with a large US law firm with a strong presence in the Americas, Europe, EMEA and APAC regions. They are rapidly expanding and opening additional offices across the globe.

about the job
You will be a conflicts analyst processing conflicts searches utilising various databases to analyse company information, and highlight critical issues with regards to new and existing clients. You will be performing data analysis and evaluating conflicts reports whilst advising and following up with partners and relevant stakeholders.

about the manager/team
You will be working with the intake/conflicts manager and office manager together with other global conflicts analysts and/or conflicts clerks.

skills and experience required
You must have at least 1-2 years experience as a conflict analyst in a large legal firm with a degree in legal studies.

To apply online please use the 'apply' function.
(EA: 94C3609/ R23115352 )

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions are developed and designed with security inbuilt.

Key Responsibilities

• Provide security consultancy, technical guidance, expertise, solutions, and education for the enterprise.

• Advise IT application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

• Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

• Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

• Advise and review security by design concepts in Cloud platforms such as GCP, AWS or Azure Cloud.

• Advise and review the compliance of integrating security tools and processes into the DevOps pipelines.

• Advice and review the adherence to security requirements for low code platforms.

• Perform threat modeling on security-critical applications. Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews, and audits to ensure security assurance is achieved.

• Manage individual project priorities, deadlines, and deliverables. Any relevant ad-hoc duties.

• Review RFP proposal compliance with security requirements.

• This is an individual contributor role. Strong communication skills are required.

• Note: You could be posted to any subsidiary in the SIA Group.

Requirements

• Degree in IT or related fields, with at least 7 years in information security, especially in the application security space.

• Professional security certifications (CISSP, CSSLP, CEH, CCSP, etc.) preferred.

• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

• Strong in-depth working knowledge of secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), and Software Composition Analysis (SCA).

• Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud platforms, such as AWS and GCP. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

• Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods, etc. Any prior vulnerability management experience is preferred.

• Strong understanding of technologies such as WAF, Anti Bot Protection

• Prior experience in application development and knowledge of the DevOps platform is desired.

• Strong oral, written, presentation and interpersonal skills.

• Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

• Able to work independently and in a team-oriented, collaborative environment.

• Review contract documents, perform measurements, and promptly prepare Bill of Quantities.
• Collaborate closely with the Project Team to submit progress reports, progress claims, variation orders, final accounts, and other relevant documents.

Requirements:

• Diploma in Quantity Surveying or equivalent
• At least 2 years of work experience in construction or security system industry.
• Proficient in AutoCAD and ELV systems.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R24120303

Funding Societies | Modalku is the largest SME digital financing platform in Southeast Asia. We are licensed in Singapore, Indonesia, Thailand, and registered in Malaysia. We are backed by Sequoia India and Softbank Ventures Asia Corp amongst many others and provides business financing to small and medium-sized enterprises (SMEs), which is crowdfunded by individual and institutional investors. And here at Funding Societies | Modalku we live by our core values:

• Serve with Obsession: Build win-win relationships for the long-term by having a customer obsession.
• Grow Relentlessly: Strive to become our best, most authentic selves.
• Enable Teamwork, Disable Politics: Only by forging togetherness, we help each other succeed.
• Test Measure Act: Stay curious and reinvent ourselves, through innovation and experimentation.
• Focus on Impact: Create impact through bias for action and tangible results.

As a (Senior) Security Operations Engineer you will lead efforts to identify, analyse, evaluate, and act upon security risks and threats. The Engineer will carry out security threat identification, analysis, and remediation to ensure efficient and timely mitigation of the threats, as well as understand the threats' risks and potential business impacts. The engineer will act as an incident handler and manage the end-to-end workflow of security incidents based on the defined process. The engineer will also be involved in Splunk Cloud Administration (integrations, use case creation, health check) and the development of the team’s processes and continuous service improvement.

What will you do:

Incident Response

• Monitor and analyse security alerts and incidents to identify potential threats.
• Investigate security incidents promptly, utilising various tools and technologies.
• Coordinate and execute incident response activities in collaboration with cross-functional teams.
• Contain and mitigate security incidents to minimise impact and prevent further compromise.
• Develop and implement incident response plans to enhance organisational resilience.
• Create incident report in a timely manner for applicable incidents.

Log management and Integrations

• Configure and integrate log sources into splunk cloud and create dashboards for various use cases.
• Develop and maintain log management strategies to ensure the collection and indexing of relevant data.
• Troubleshoot and optimise log sources to enhance data accuracy and completeness.
• Integrate Splunk into the needed log sources, if needed.
• Collaborate with Managed Security Service Provider (MSSP) and other internal security teams to develop and finetune correlation rules and alerts.
• Implement best practices to enhance search and reporting capabilities.

Threat Intelligence

• Stay current with the latest cybersecurity threats and vulnerabilities.
• Review threat intelligence reports and perform the necessary follow-up actions.

Collaboration

• Collaborate with internal teams and external partners to share notable incidents and improvements.
• Participate in cross-functional training exercises and simulations.
• Mentor other team members about Security Operations work.

What we are looking for:

• Strong understanding of behavioural aspects of cybersecurity incidents.
• Excellent interpersonal, communication, and presentation skills.
• Professional working habits and quality-oriented.
• Willing to work with and report under the Security Operations Manager.
• Relevant certifications related to Splunk and Incident Response are a plus.

Within KPMG Singapore, the Information Technology Services (ITS) team is responsible for providing quality IT services and solutions internally to support the business and improve efficiency.

We invite highly motivated and customer-oriented individuals to join our ITS team. As an IT Security Manager, you will be required to work closely with our ITS team and Business stakeholders to maintain and ensure a secure IT operating environment and compliance to Global IT security standards.

Responsibilities:

• Support IT security operation for the firm
• Manage, implement, and operate security solutions
• Respond to and investigate cyber security incidents
• Assist in internal IT audits and compliance
• Design and maintain security dashboard
• Perform security assessment on new IT systems and change requests

The ideal candidate should possess:

• A Degree in IT, Computer Science, Cybersecurity, Information Communication Technology or other IT related qualifications.
• 8 to 10 years of relevant working experience in IT Security, with at least 2 years in a team lead position
• Experience in security governance, risk and compliance.
• Understanding of Cloud Security fundamentals, including cryptography and the shared responsibility model.
• Strong communication skills and an excellent team player

Only shortlisted candidates will be contacted by KPMG Talent Acquisition team, personal data collected will be used for recruitment purposes only.

At KPMG in Singapore we are committed to creating a diverse and inclusive workplace. We believe that diversity of thought, background and experience strengthens relationships and delivers meaningful benefits to our people, our clients and communities. As an equal opportunity employer, all qualified applicants will receive consideration for employment regardless of age, race, gender identity or expression, colour, marital status, religion, sexual orientation, disability, or other non-merit factors. We celebrate the different talents that our people bring and support every staff member in their journey to achieve personal and professional growth. One of the ways we do this is through Take Charge: Flexi-work, our flexible working framework which enables agile and innovative teams to help deliver our business goals.

WithSecure Consulting delivers research-led cyber security to defend organizations, society and people from real-world attacks and build resilience into their approach. Our people are a mix of technical and creative experts – diverse, talented, and passionate people – working tirelessly to help us advance the industry with new ways of thinking. They lead their own development, in and out of the office. They call the shots when it comes to building a place to call home in our organization.

We currently have an opening for a Senior Security Consultant within our Singapore office! Your role will involve carrying out attack simulations (Red Teaming), penetration testing and security assessments of typical and unique pieces of technology to sophisticated and progressive cloud-native systems.

We’d also love you to do some research to ensure your skills remain relevant in a fast paced world of security.

How you spend the rest of the time that’s not working with clients is your call. WithSecure has a commitment to research. Based on their skillset and inclination, our consultants get a percentage of their time dedicated to security research. Whether it is used to investigate new software, hardware or protocols, we encourage our team to push the boundaries of what is possible!

What we need:

We solve complex cyber-security problems on a daily basis and to do that requires an interesting mix of skills. To be successful at WithSecure and help our clients with their challenges we know you’ll need the following:

1. A passion for security! You love computers, you love security and you love hacking things and solving problems. If this wasn’t your job it would be your hobby. Technical excellence. You know your subject area, but you’ll also know what that subject area is without us needing to say.

2. Self-motivation You’re not going to be told what to do all the time. You are capable of figuring out what spending time working is of benefit to WithSecure and our clients and then run with it. With great freedom comes great responsibility and you also seek out guidance from those around you when you need it.

3. Communication skills - How can we add value to our clients organisations unless we can tell them what we did, how we did it, and how they can fix it? But communication also extends to sharing your knowledge with your colleagues and the wider industry. Our consultants work as a team and all members are expected to suggest and implement improvements to procedures and products based on their experience and interaction with clients. They are also encouraged to share their knowledge with the WithSecure team as part of the company’s information sharing culture.

What are we looking for?

• An ideal candidate will have; 4+ years of experience delivering hands-on cyber security consultancy projects with clients;
• Red Teaming. You were part of attack simulations in an operator role or even leading the engagement.
• WebApp Testing. You know your way around Burp, and can perform SQLi without using SQLmap.
• Infrastructure Testing. You understand that this doesn’t just mean running Nessus.
• Mobile App Testing. You are familiar with Frida and know how to tweak existing or write new Frida scripts.
• Experience in supporting the end-to-end delivery of large consultancy projects, with a team.
• Support pre-sales/scoping – a strong ability to understand and quantify client requirements, and propose consultative approaches that will deliver the best possible outcomes for the client.
• Familiarity with regional regulatory requirements for cyber security – including MAS’s TRM expectations – and how they apply to our roles.
• Mentor and grow the capabilities of fellow team members.
• Experience interfacing with non-technical, and technical stakeholders to deliver technical and non-technical information.
• Excellent verbal and written communication skills.
• Relevant practical certifications – valid and active OSCP and CREST (CRT, CCT-Inf or CCT-App)
• Additional advanced certifications pertaining to Cybersecurity would be a bonus (E.g: CCT-Inf/CCT-App/CCSAS, OSWE, OSEP, CRTO, AWS Security Speciality, Microsoft AZ-500, CKA, CKS)

What will you get from us

• Freedom – you will have the opportunity to define new ways of working how we engage with our customers, and how product value gets represented
• You will work together with experienced and enthusiastic colleagues, and within WithSecure you'll find some of the best minds in the cyber security industry
• A collaborative and supportive work environment with opportunities for career growth and advancement.
• Opportunities for continuous learning and development, including training, certification and research time.

Technical skills

• Architecture and Deployment
• Cisco/Aruba Switching /Routing & WLAN
• DDI, AAA/Cisco ISE
• Network Automation: Python & Ansible
• As Built, LLD, Testing & Acceptance Testing Documentation Skills
• ZScaler & Network Security
• Certification: CCNP/CCDA equivalent
• Meraki, Palo alto, f5 loadbalancer, UTP
• Experience in network operations/maintenance and passionate about providing troubleshooting support
• Knowledge on Internet Technologies (i.e. routing, switching and general network infrastructure), and technologies associated with the ISP market
• Strong analytical and problem-solving skills, and has a flair for dealing with technical and operational problems
• Experience in IT audit or CISA/CISM certified preferred or operational risk management and control self-assessment or prior experience in implementing security solution and information security governance
• Demonstrated knowledge of global cyber threats, threat actors and the tactics, techniques and procedures (TTPs) used by cyber adversaries, particularly as they relate to the financial sector.
• Experience with models for threat analysis, such as the Diamond Model, Cyber Kill Chain and MITRE ATT&CK framework.
• Enterprise Data Network (administration, patching, upgrade and migration activities), Design, Preparing of HLD/LLD, Implementation Team leading, Service Level management, demand, incident, change management.
• Provide network WAN/LAN design, implementation, consulting, Cisco, Aruba, Juniper
• Network audit Identify the gaps and suggest the remedial solution supporting in RFP/RFI response
• Experience in running operations with ITIL processes / Project Management - PMP

• Responsible for growing and maintaining sales revenue for assigned portfolio
• Learn products at a professional and technical level
• Create strategic relationship with partners and vendors

Requirements:

• Diploma in Information Security or equivalent
• At least 3 years of experience in managing Network Security / Electronic / IT products

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Reg No. R21100996

Job Overview:

We are seeking a dedicated Legal Assistant to join our dynamic team at TSGS, a leading fintech company. In this role, you will focus on supporting the legal operations of our innovative chat app, ensuring compliance with financial regulations and digital communication laws.

Responsibilities and Duties:

• Provide administrative support to the legal team in managing the legal aspects of the chat app.
• Assist in reviewing and drafting legal documents, contracts, and agreements related to the chat app's operations.
• Conduct legal research on regulations and laws pertinent to fintech and digital communication platforms.
• Coordinate with various departments to ensure the chat app complies with financial and privacy laws.
• Manage legal documentation and maintain organized files for easy retrieval and reference.
• Assist in the preparation of compliance reports and presentations for internal and external stakeholders.
• Liaise with external legal counsel as required.
• Keep abreast of changes in laws and regulations affecting the chat app and the fintech industry.
• Support the legal team in litigation matters, if any, involving the chat app.

Qualifications:

• Bachelor’s degree in Law, Paralegal Studies, or a related field.
• Proven experience as a Legal Assistant, Paralegal, or a similar role, preferably in the technology or fintech sector.
• Strong understanding of legal terminology and principles relevant to fintech and digital communication.
• Excellent organizational skills and attention to detail.
• Strong research, analytical, and problem-solving skills.
• Proficiency in legal research tools and Microsoft Office suite.
• Ability to work independently and collaboratively in a fast-paced environment.
• Excellent written and verbal communication skills.

Preferred Skills:

• Experience in legal operations related to chat apps or digital communication platforms.
• Familiarity with financial regulations and data privacy laws.
• Knowledge of intellectual property rights as they pertain to software and digital platforms.

WithSecure Consulting delivers research-led cyber security to defend organizations, society and people from real-world attacks and build resilience into their approach. Our people are a mix of technical and creative experts – diverse, talented, and passionate people – working tirelessly to help us advance the industry with new ways of thinking. They lead their own development, in and out of the office. They call the shots when it comes to building a place to call home in our organization.

We currently have an opening for a Security Consultant within our Singapore office! Your role will involve carrying out penetration testing and security assessments of typical and unique pieces of technology to sophisticated and progressive cloud-native systems.

We’d also love you to do some research to ensure your skills remain relevant in a fast paced world of security.

How you spend the rest of the time that’s not working with clients is your call. WithSecure has a commitment to research. Based on their skillset and inclination, our consultants get a percentage of their time dedicated to security research. Whether it is used to investigate new software, hardware or protocols, we encourage our team to push the boundaries of what is possible!

What we need:

We solve complex cyber-security problems on a daily basis and to do that requires an interesting mix of skills. To be successful at WithSecure and help our clients with their challenges we know you’ll need the following:

1. A passion for security! You love computers, you love security and you love hacking things and solving problems. If this wasn’t your job it would be your hobby. Technical excellence. You know your subject area, but you’ll also know what that subject area is without us needing to say.

2. Self-motivation You’re not going to be told what to do all the time. You are capable of figuring out what spending time working is of benefit to WithSecure and our clients and then run with it. With great freedom comes great responsibility and you also seek out guidance from those around you when you need it.

3. Communication skills - How can we add value to our clients organisations unless we can tell them what we did, how we did it, and how they can fix it? But communication also extends to sharing your knowledge with your colleagues and the wider industry. Our consultants work as a team and all members are expected to suggest and implement improvements to procedures and products based on their experience and interaction with clients. They are also encouraged to share their knowledge with the WithSecure team as part of the company’s information sharing culture.

What are we looking for?

• An ideal candidate will have; 2-3+ years of experience delivering hands-on cyber security consultancy projects with clients;
• WebApp Testing. You know your way around Burp, and can perform SQLi without using SQLmap.
• Infrastructure Testing. You understand that this doesn’t just mean running Nessus.
• Mobile App Testing. You are familiar with Frida and know how to tweak existing or write new Frida scripts.
• Experience in supporting the end-to-end delivery of large consultancy projects, with a team.
• Support pre-sales/scoping – a strong ability to understand and quantify client requirements, and propose consultative approaches that will deliver the best possible outcomes for the client.
• Familiarity with regional regulatory requirements for cyber security – including MAS’s TRM expectations – and how they apply to our roles.
• Experience interfacing with non-technical, and technical stakeholders to deliver technical and non-technical information.
• Excellent verbal and written communication skills.
• Relevant practical certifications – valid and active OSCP and CREST (CRT)
• Additional advanced certifications pertaining to Cybersecurity would be a bonus (E.g: OSWE, OSEP, CRTO, AWS Security Speciality, Microsoft AZ-500)

What will you get from us

• Freedom – you will have the opportunity to define new ways of working how we engage with our customers, and how product value gets represented
• You will work together with experienced and enthusiastic colleagues, and within WithSecure you'll find some of the best minds in the cyber security industry
• A collaborative and supportive work environment with opportunities for career growth and advancement.
• Opportunities for continuous learning and development, including training, certification and research time.

Funding Societies | Modalku is the largest SME digital financing platform in Southeast Asia. We are licensed in Singapore, Indonesia, Thailand, and registered in Malaysia. We are backed by Sequoia India and Softbank Ventures Asia Corp amongst many others and provides business financing to small and medium-sized enterprises (SMEs), which is crowdfunded by individual and institutional investors. And here at Funding Societies | Modalku we live by our core values:

• Serve with Obsession: Build win-win relationships for the long-term by having a customer obsession.
• Grow Relentlessly: Strive to become our best, most authentic selves.
• Enable Teamwork, Disable Politics: Only by forging togetherness, we help each other succeed.
• Test Measure Act: Stay curious and reinvent ourselves, through innovation and experimentation.
• Focus on Impact: Create impact through bias for action and tangible results.

As a (Senior) Security Operations Engineer you will lead efforts to identify, analyse, evaluate, and act upon security risks and threats. The Engineer will carry out security threat identification, analysis, and remediation to ensure efficient and timely mitigation of the threats, as well as understand the threats' risks and potential business impacts. The engineer will act as an incident handler and manage the end-to-end workflow of security incidents based on the defined process. The engineer will also be involved in Splunk Cloud Administration (integrations, use case creation, health check) and the development of the team’s processes and continuous service improvement.

What will you do:

Incident Response

• Monitor and analyse security alerts and incidents to identify potential threats.
• Investigate security incidents promptly, utilising various tools and technologies.
• Coordinate and execute incident response activities in collaboration with cross-functional teams.
• Contain and mitigate security incidents to minimise impact and prevent further compromise.
• Develop and implement incident response plans to enhance organisational resilience.
• Create incident report in a timely manner for applicable incidents.

Log management and Integrations

• Configure and integrate log sources into splunk cloud and create dashboards for various use cases.
• Develop and maintain log management strategies to ensure the collection and indexing of relevant data.
• Troubleshoot and optimise log sources to enhance data accuracy and completeness.
• Integrate Splunk into the needed log sources, if needed.
• Collaborate with Managed Security Service Provider (MSSP) and other internal security teams to develop and finetune correlation rules and alerts.
• Implement best practices to enhance search and reporting capabilities.

Threat Intelligence

• Stay current with the latest cybersecurity threats and vulnerabilities.
• Review threat intelligence reports and perform the necessary follow-up actions.

Collaboration

• Collaborate with internal teams and external partners to share notable incidents and improvements.
• Participate in cross-functional training exercises and simulations.
• Mentor other team members about Security Operations work.

What we are looking for:

• Strong understanding of behavioural aspects of cybersecurity incidents.
• Excellent interpersonal, communication, and presentation skills.
• Professional working habits and quality-oriented.
• Willing to work with and report under the Security Operations Manager.
• Relevant certifications related to Splunk and Incident Response are a plus.

Representing a tech giant who is currently looking for a Security Application Engineer. You will manage and implement security measures in cloud environments. This role will be reporting directly to the Director of Security and Director of Engineering.

Responsibilities:

• Proficiency in C# and Ruby on Rails to comprehend and fortify the company's codebase.
• Creation and implementation of secure infrastructure on cloud platforms, emphasizing network configurations and access controls.
• Configuration and management of Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) tools.
• Analysis of penetration test findings and collaboration with developers to enact corrective actions.
• Promotion of security-driven changes across the engineering team utilizing JIRA and scrum methodologies.
• Integration of security principles into design through the development of design patterns and shared libraries for engineers.
• Establishment of a comprehensive Security Software Development LifeCycle (SSDLC).
• Cooperation with development teams to integrate security seamlessly into the development process.
• Adoption of a DevSecOps approach to encourage collaboration among development, operations, and security teams. Additionally, providing guidance and training to engineers on security standards and internal security protocols.

Job Requirements:

• Min 5 to 8 years of relevant experience in rolling out secure coding practices and security engineering on cloud platforms.
• Possession of certifications such as CISSP, CEH, AWS Security Specialist, or OSCP.
• Proficiency in security frameworks like CIS v8 and security coding methodologies such as OWASP.
• Demonstrated experience in the implementation or maintenance of CIS v8 controls.
• Established track record in a security engineering capacity, specializing in cloud security and secure coding practices.
• Familiarity with C# and Ruby on Rails.
• Proficiency in both Windows and Linux operating systems.

If you're interested in this role, click 'apply now' ,or email [email protected] for a confidential discussion.

We are seeking a highly skilled and experienced Chief Legal Officer (CLO) with expertise in international government filings to join our dynamic team.

Job Description:

As the Chief Legal Officer (CLO) specializing in international government filings, you will be responsible for overseeing and managing all legal matters related to regulatory compliance and government interactions across our global operations. You will play a pivotal role in shaping the company's legal strategy and ensuring compliance with international laws and regulations.

Responsibilities:

• Develop and implement strategies for managing and optimizing international government filings, including regulatory submissions, permits, licenses, and other required documentation.
• Collaborate with internal stakeholders, including executives, department heads, and legal teams, to ensure alignment with business objectives and regulatory requirements.
• Stay abreast of changes in international laws and regulations that may impact the company's operations and provide proactive guidance to mitigate risks.
• Oversee the preparation and review of legal documents, including contracts, agreements, and regulatory filings, to ensure accuracy and compliance with applicable laws.
• Manage relationships with government agencies, regulatory bodies, and other external stakeholders to facilitate efficient and effective communication and compliance.
• Provide leadership and guidance to the legal team, fostering a culture of excellence, collaboration, and continuous improvement.
• Conduct internal audits and assessments to identify areas of non-compliance or potential risk and develop strategies to address them.
• Represent the company in legal proceedings, negotiations, and other interactions with governmental entities as necessary.
• Advise senior management on legal matters related to international government filings, offering strategic insights and recommendations to support informed decision-making.
• Collaborate with external legal counsel and advisors as needed to address complex legal issues and ensure the company's interests are protected.

Qualifications:

• Juris Doctor (JD) degree from an accredited law school.
• Admission to the bar in at least one jurisdiction; additional admissions preferred.
• Minimum of 7 - 10 years of experience practicing law, with a focus on international regulatory compliance and government filings.
• Proven track record of success in managing complex legal matters and regulatory challenges within a global context.
• Strong understanding of international laws and regulations, with expertise in areas such as [specific regulations relevant to the industry].
• Excellent communication and interpersonal skills, with the ability to effectively collaborate and negotiate with internal and external stakeholders.
• Demonstrated leadership abilities, with experience managing and developing high-performing legal teams.
• Strategic thinker with the ability to anticipate and mitigate legal risks while supporting business objectives.
• Detail-oriented and organized, with the ability to manage multiple priorities and deadlines effectively.

The APAC Senior Legal Counsel is responsible for delivering effective and efficient technical support on legal and compliance matters in respect of the (re)insurance operations of the P&C and Life business units in APAC, and more broadly on a global basis. They also will be expected to support on corporate and transactional projects in APAC, as needed.

The APAC Senior Legal Counsel will work closely with the APAC General Counsel and respective P&C and Life Chief Legal Counsels to understand and respond to the commercial and business-related constraints and pressures on the business functions.

Key duties and responsibilities

1. Legal Matters

• Provide legal guidance and support on any assigned transactional, underwriting, (re)insurance contract wording and (as required) claims related matters including policy wording queries, sanctions and embargoes queries, licencing queries and applications, drafting and negotiating agreements (including services agreements, framework agreements and other commercial agreements).
• Support the operations of the P&C and Life business units, including identifying and addressing/mitigating legal risks in the business and support the business by appropriately addressing any legal and compliance risk and developing processes to respond to them for the commercial and legal progression of the relevant business.
• Provide support on an APAC (and as needed on a global) basis in relation to the drafting and negotiation of a wide spectrum of legal, commercial and technical (re)insurance contracts, including keeping apprised of wording developments in other jurisdictions.
• Providing day to day legal advice, guidance, and support to the business in relation to any other legal, commercial, claims and financial matters.
• Participating in Group, APAC, and P&C and Life business unit projects including developing strategy, drafting applicable documents, liaising with both the internal clients and external advisors and project managing process.
• Independently research and investigate legal issues, draft, prepare, file organise and distribute legal documents.

2. Compliance

• Advise on legal and (re)insurance business conduct compliance-related matters and support the Group Compliance Officer, the APAC General Counsel and APAC Compliance Officer with the implementation of Group, business unit and local approved governance and legal compliance policies, guidelines and procedures and provide training on such matters, as required.
• Provide advice, assessment, guidance, and support on legal and business conduct compliance-related matters of the (re)insurance business activities, including (re)insurance regulatory issues (as may be requested), sanctions and embargoes, anti-money laundering & terrorism financing, anti-bribery, anti-fraud, conflicts of interest, data protection and privacy, anti-trust and competition, reputational risks and ethics.
• Provide business compliance training, referrals and tools with respect to the (re)insurance business activities of the business units.

3. Corporate and general legal matters

• Support with ad hoc corporate legal advice as may be requested from time to time
• Provide support and advice on general legal matters (including real estate, general service agreements and other non-(re)insurance activities) to the APAC operations.

4. Reporting

• The APAC Senior Legal Counsel reports directly to the APAC General Counsel.
• The APAC Senior Legal Counsel will work closely in support of the respective P&C and Life Chief Legal Counsels.

Experience & Competencies

• At least 5 years PQE either in a legal practice and/or commercial environment, with a material exposure to the (re)insurance business.
• Degree (ideally law), with a strong academic record and a formal legal qualification.
• A track record of having the ability to accurately assess the degree of legal risk and opportunity in a given situation and the ability to develop solutions to mitigate legal risk.
• Experience in influencing and motivating others.
• Independence - A proven self-starter who takes the initiative and can act independently when needed and make their own decisions, while keeping relevant stakeholders advised and involved and operating within internal governance requirements and guidelines
• Problem Solving - Ability to identify and analyze issues, proposals and rolling out relevant solutions after appropriate approvals
• Communication – Superior written and verbal communication and interpersonal skills.
• Commercial - An ability to apply technical legal issues in a commercial environment and to appropriately calibrate technical business risks in the context of business/commercial requirements and goals.
• Decision Making – an ability to promptly make decisions and/or to roll out decisions, reflecting all available information and appropriate risk assessments
• Accountability - Alerts, raises the critical points when needed, shoulders and corrects their decisions and shows responsibility regarding cost management
• Commitment - Makes the effort to bring their skills and uses their expertise to contribute to the success of the Business Unit
• Curiosity - An appetite for learning and developing themself in their field

Legal Executive

• Provide assistance to the Firm’s practices
• Provide legal administrative support to the lawyers in the team
• Support the Firm’s business and activities

Requirements:

• Degree from a recognised university
• Strong command of written and spoken English
• Competent in MSWord, MSExcel, MSPowerpoint and MSOutlook Software applications
• Good organisational and administration skills
• Ability to work independently and under pressure in fast-paced environment

We look forward to receiving your applications. Please note that only shortlisted applicants will be notified.

In submitting your application to our firm, you agree and consent to the collection, usage and disclosure of your personal data in accordance with our Personal Data Policy, which is available at www.wongpartnership.com/personal-data-policy. In addition, you consent to be considered for all suitable positions, including the position you're applying for, within WongPartnership LLP.

Please do not send us your personal information if you do not wish your personal information to be used in this way.