Responsibilities

• Develop, implement, and maintain Group-wide security policies and standards to ensure consistency across all operations.
• Oversee data management and governance, ensuring the integrity and security of all data, including Level 2 (L2) assurance.
• Act as the domain knowledge expert, providing guidance and support to all sites to ensure operational excellence in security practices. Including and not limited to: Security Strategy, Security Technology, Incident Response and Investigation, Security Training and Awareness Program, Group Reporting.
• Lead initiatives to enhance security capabilities and build competencies across various locations.
• Conduct regular assessments and audits to identify areas for improvement and ensure compliance with security standards.

Requirements

• Degree in Security Management, Information Technology, or a related field.
• 10 years of experience in a senior security role, data management and assurance
• Knowledge of security policies, standards, and governance.

Account Manager

Kerwin Tan Kai Bin (R1331624)

[email protected]

EA16S8107

· 8 - 10 years of IT Security experience in administration and management of IT Security technologies primarily Symantec Data Loss Prevention, Symantec Endpoint Protection, Email Security, Data Classification and other endpoint & data security solutions;

· Should be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;

· Knowledge of different domains of IT Security;

· Working & hands-on experience in administering the IT Security Solutions;

· Must have experience in working in similar Production setup in Run (Operations) mode;

· Ability to apply risk based approach while working on assigned responsibilities;

· Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;

· Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;

· Excellent in analytical, communication and documentation skills;

· Must have strong understanding of ITIL processes and comfortable working in process oriented environment

Job Responsibilities:

• Screen and verify the identification of all personnel entering the site, including workers, contractors, and visitors.
• Maintain a log of visitors, delivery personnel, and contractors.
• Ensure proper authorization is given before granting access to restricted areas.
• Respond promptly to any emergency incidents (e.g., fire, theft, accidents).
• Enforce construction site safety protocols and procedures.
• Ensure that all personnel are wearing appropriate safety gear and complying with site regulations.
• Communicate with the site manager and construction team to discuss security needs and any concerns.
• Provide feedback on security risks and recommend improvements.

Job Requirements:

• Candidate must possess PLRD
• Able to write and read simple English.
• At least 1 year of working experience in the related field is required for this position.
• Previous experience in security or construction site security preferred.
• Flexible work schedule (5/6 days week) - Day Shift
• Working location: Pasir Ris Industrial Drive 1

Job Description: • Able to implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with). Define the process, provisioning, interfaces and provide recommendations.
• Access management and control.
• Engage and execute Security Vulnerability Scanning activities (HCR/NVA/Pen Test/ SAST/DAST activities etc) and resolve findings.
• Manage Access management and SIEM tools in the environment.
• Facilitate auditing processes conducted by external parties.
• Familiar with operational security processes
o OS level patching
o Application-level patching
o Operational housekeeping and archival.
o Server and application hardening procedure & steps
o IM8 policy
o Vulnerability Assessment
o Security Incident detection and reporting
o SSL certificate renewal

Technologies & Skills Required
• OS Administration (Linux / Windows)
• IBM Security Verify Access
• IBM Qradar
• Thales HSM
• OpenSSL
• Tenable Nessus, Burp Suite Enterprise

Top 3 MUST have skills:
• Minimum 2+ years of experience with IT Security.
• CISSP/CCSP/CCSK certification or its equivalent is preferred
• 1-2 areas of Cyber Security domains such as Identity Access Management, Security and Risk Management, Application and Network security, Vulnerability Management with a broad understanding of other areas.

Cyber Security Specialist (Offensive)

Our client is looking for an experienced cyber security specialist to support and improve vulnerability management across on-prem and cloud environments.

Responsibilities:

• Analyse, triage and process security threats to identify potential risk gaps and corresponding organizational impact
• Collaborate on and enforce the implementation of the global Vulnerability Management strategy
• Act as a point of contact in APAC for questions regarding different stages of the Vulnerability Management lifecycle including vulnerability scanning and penetration testing
• Rate new technical vulnerabilities according to their business impact and prioritize remediation activities
• Support application and infrastructure teams on vulnerability remediation processes

Requirements:

• Degree in Computer Science, Information Technology or related fields with 5 years of technical working experience in cyber security (offensive)
• Hands-on experience in vulnerability scanning and management processes and tools (Qualys and ServiceNow Vulnerability Response)
• Excellent knowledge of cyber security standards, risks, threats, prevention measures and best practices
• Proficient in networking and network security technologies with strong understanding of Threat Intelligence for Vulnerability Detection
• Experience in improving vulnerability management processes and/or a vulnerability scanning concepts

Location : West Singapore

Kindly indicate your current/last salary details and your notice period

If the above speaks to you, we’d love to hear from you. Please send in your updated CV to [email protected] (Ezmir, Reg No: R22105085) if you feel there is a fit with your experience and interest. You may forward this great opportunity to someone who would be a great fit for this role.

All information will be kept strictly confidential. We regret to inform that only successful applicants will be contacted.

PeopleSearch Pte Ltd

EA License No: 16S8057

Zenith Infotech (S) is Tech Recruitment firm with 27 years of presence in Singapore, supporting our clients in terms of ICT Consultant placements since 1997

Currently, we are lookng out for 2 to 3 years of experience a a Security Engineer, with approprate certifications in Cyber Security domain. This requirement is for Singapore Citizens only.

Responsibilities

• Able to implement a security architecture blueprint(from devsecops, application, infrastructure, operational security, for applications to interact with).

• Define the process, provisioning, interfaces and provide recommendations.

• Access management and control.

• Engage and execute Security Vulnerability Scanning activities (HCR/NVA/Pen Test/ SAST/DAST activities etc) and resolve findings.

• Manage Access management and SIEM tools in the environment.

• Facilitate auditing processes conducted by external parties.

• Familiar with operational security processes
o OS level patching
o Application-level patching
o Operational housekeeping and archival.
o Server and application hardening procedure & steps
o IM8 policy
o Vulnerability Assessment
o Security Incident detection and reporting
o SSL certificate renewal

Technologies & Skills Required

• OS Administration (Linux / Windows)

• IBM Security Verify Access

• IBM Qradar

• Thales HSM

• OpenSSL

• Tenable Nessus, Burp Suite Enterprise

Top 3 MUST have skills:
• Minimum 2+ years of experience with IT Security.
• CISSP/CCSP/CCSK certification or its equivalent is preferred
• 1-2 areas of Cyber Security domains such as Identity Access Management, Security and Risk Management, Application and Network security, Vulnerability Management with a broad understanding of other areas.


Good to have skills (Optional)
• Familiar with Singapore Government standards of security posture including planning and running SSAT, Security Compliance Check, Security Vulnerability Scanning, DAST & SAST.
• Work with security tools & environment.

Location: Jurong (Warehouse Environment)

Working Regime: Alternate 5/6/5/6 days a week, rotating off days

Working Hours: 2000 to 0800 hrs

Your primary function is to provide surveillance over life and property by patrolling the premises and checking the movement of people/goods.

JOB RESPONSIBILITIES:

You are to perform rotating shift duty to provide security involving the following activities:

1. General Screening

• Screening of people, property, or vehicle

2. Guarding & Patrolling

• Guard properties, preventing thefts
• Clock routes
• Check for leaks & signs of fire/smoke
• Check and prevent the entry of unauthorized people/staff
• Check that security system/equipment are working and not tampered with
• Check that exits are clear and secured and doors/windows are secured
• Turn off unnecessary lights/taps
• Report irregularities
• Check perimeter fences/walls for wear & tear or forced entry
• Manage vehicle parking allocation
• Check that the lighting is in working order
• Ensure loading bay doors & good lifts are secured when not in use

3. Access & Egress Control

• Control entry & exit
• Conduct identity checks and pass exchange
• Authorize access to staff and visitors
• Operate gates, doors, or barriers
• Supervise car parks and loading/unloading areas
• Traffic control within the client's premise
• Maintain access control records
• Escort visitors

4. Basic Incident Response

• Respond to & report alarms
• Respond to & report to fire-related incidents
• Respond to & report crimes or public order incidents
• Respond to & report suspicious persons, belongings, vehicles
• Respond to & report medical emergencies
• Respond to & report bomb or terrorist threats
• Respond to & report lift breakdown
• Respond to & report power failure
• Respond to & report lift breakdown, power failure
• Respond to & report burst water pipes/leaking or ruptured sprinklers

JOB REQUIREMENTS:

• Must hold a valid PLRD security license of SO rank
• Must wear safety boots while on duty

​Our client is a global leader in gateway services, who is seeking to recruit a Security Officer (Airport). This position is based in Singapore.

Security Officer (Airport)

Responsibilities

You will be responsible for providing security services at the airport and key installation areas, such as safeguarding and protection of assets. Your role includes:

· Perform CCTV and Control Room monitoring duties.

· Undertake screening of baggage and personnel.

· Perform X-ray screening and access controls.

· Perform guarding and patrolling of installations.

· Any other duties as assigned.

Job Requirement:

· Valid PLRD Security license (Must be licensed as a Security Officer (SO) and are already in possession of a valid SO ID cards)

· Proficient to communicate in English

· Normal colour vision

· Able to work on rotating shifts

· Able to take on assignments at various locations based on Company's discretion

JJ Consulting Services

EA Licence No.: 12C6207

Applicants are invited to send in a MS Word resume to [email protected] stating position applying for/present/expected salaries and earliest available date.

We thank all applicants in advance and regret that only short listed candidates will be notified.

Job Description

As a Cyber Security Specialist, you are responsible to architect, design, review and implement cyber security resilient in our product and projects. You are familiar to cloud security architectures and solutions, making sure the companies can operate in a safe, secure environment. You monitor, research, and analyze security risks to mitigate threats and security attacks that may occur to or within the cloud. You will implement customized application security assessments for client-based asset risk, corporate policy compliance as well as conduct vulnerability assessment. You should have an advanced understanding of cloud, networking, data traffic flow, system administration, cloud architecture, OSI model, anti-malware, anti-virus, defense-in-depth and common security elements.

The specialist’s focus is not only limited to assessing whether vulnerabilities exist but also how those risks could be mitigated which can help provide projects/organizations with more confidence about system stability and security going forward.

Responsibilities

• Develop and build cloud security architectures and solutions
• Monitor, research, and analyze security risks to mitigate threats and security attacks
• Solution design for product to help reduce attacks on cloud service data storage, create preventative features, and implement corrective controls when breaches do occur
• Regular security and risk assessment for system solutions
• Support on audit trial for security related implementation
• Consultancy on software and hardware for security vulnerabilities and risks
• Plan VAPT, execution, result analysis and provide fix recommendation.
• Provide guideline such as coding, key management, hardening, patch management, backup management, incident management, etc.
• Familiar to IM8 requirements and CIS, NIST security benchmark.
• Familiar to cyber security tools to perform preliminary scan.
• Familiar to public cloud infrastructure such as Azure, AWS, GCP and Huawei.

Skills Required

• Strong IT skills and knowledge including cloud, network, hardware, and software
• At least 5 years of relevant experiences
• A forensic approach to challenges
• Good coordinator and team worker
• A degree in cyber security will be added advantage.
• A deep understanding of how hackers work and ability to keep up with the fast pace of change in the criminal cyber-underworld
• Ability to seek out vulnerabilities in IT infrastructures
• Meticulous attention to detail

Position

Data Security Specialist - Data Security and Endpoint Security

Data Security Specialist is a technical Specialist role within the Data Security Services team and will be responsible for managing, administration and supporting the Data Security and Endpoint Security technologies for the bank.

Person will be the technical point of contact for the Run team and the related activities to data security and will be the last level of escalation for the Security specialists in the team. He/She is also responsible for the technical transition and validation of Security services from other regions to Singapore. He/She will be involved in projects and POC’s that may involve security services. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Specialist on the technologies within data security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France and UK) and Asia remotely from Singapore. France infrastructure represents approximately 80% of the worldwide production activities of the company in Singapore.

Team works in Europe time zones and this role will be aligned primarily to Paris working hours. Flexible rotations are followed based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect,
• Encryption Solutions: Disk Encryption, File and Folder encryption,
• Database Audit Monitoring solutions
• Email and Web Phishing Prevention solutions.
• Vulnerability Management

Detailed Job Responsibilities

The Specialist has a wide spectrum of responsibilities and actions. Person will be responsible for following (but not limited to) responsibilities in day-to-day work:

As the Specialist of the team, he/she:

• act as the last level of escalation for the team members
• own Incident, Problem and change management process for the team
• assigns technical tasks and manages delegation
• animates the team to encourage collaboration and sharing of practices
• participates to recruitment process for the team

As the Specialist of his/her scope of activity, he/she:

• is actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management
• Is the final technical approver for any changes into Data Security systems and is accountable for any technical changes in the environment from a RUN/BAU perspective
• Is involved in projects like End of Life, New Builds, migrations and technical upgrades of the solution managed by the team
• Participates in global Infra events (like Power down and DR Tests)
• ensures activity is performed in compliance with norms, standards, processes and procedures
• gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting
• ensures documentation is up to date and relevant for use
• lead the continuous improvement initiatives
• responsible to drive and deliver root cause for any high severity issues
• Focus on automation and optimum use of the team to improve efficiency
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

• Work schedule is mainly focused to support Asia and EMEA (Paris) time zone; however, may have to support during non-offce hours for critical incidents or escalation as per the assigned on-call support requirements;
• Rotational Shift schedule is followed;
• Work Hours: 2 PM – 11 PM SGT (with 1 week of General shift 9 AM – 6 PM SGT).

Qualifications and Profile

Functional

• 8 - 10 years of IT Security experience in administration and management of IT Security technologies primarily Symantec Data Loss Prevention, Symantec Endpoint Protection, Email Security, Data Classification and other endpoint & data security solutions;
• Should be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;
• Knowledge of different domains of IT Security;
• Working & hands-on experience in administering the IT Security Solutions;
• Must have experience in working in similar Production setup in Run (Operations) mode;
• Ability to apply risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;
• Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;
• Excellent in analytical, communication and documentation skills;
• Ability to organize work and be able to priories work as per the needs of Production Operation’s needs;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Ability to work independently and as well as a part of team and is able to work under minimal supervision;
• Should have time management skills and able to manage work in fast moving environment;
• Excellent written and oral English language skills;
• Knowledge of French language is preferred.

Technical

• Hands-on experience on Symantec Data Loss Prevention (DLP);
• Highly proficient in data leakage prevention (DLP) technologies - troubleshooting and configuration management;
• Deployment, integration and administration experience of various components of Symantec DLP:

- Symantec Endpoint Protect

- Symantec Web Prevent

- Symantec Email Prevent

- Symantec Enforce

• Must have experience in defining, designing and configuring DLP Policies as per the business requirements;
• Deploy, upgrade and troubleshooting knowledge on Symantec DLP solution;
• Scripting knowledge (Phyton, Regular Expression, Powershell) is desirable;
• Professional Certifications:

- CISSP certified is highly preferred

- Symantec Certified Specialist: Administration of Data Loss Prevention (any version) is highly preferred.

• Must be experienced to cover the scope as mentioned in the SKILLS MATRIX section of this document.

SKILLS MATRIX

Technical skills

• Symantec Data Loss Prevention Administration
• (DLP Policy/Rules creation Specialistise): Must to have
• Trend Micro Deep Discovery Email Inspector (Phishing Prevention): Good to have
• Symantec Endpoint Protection (Anti-Virus): Good to have
• Phyton, Regular Expression, Powershell: Good to have

General skills

• Ability to prioritize effectively: Must to have
• Ability to work autonomously: Must to have
• Ability to work successfully in a team: Must to have
• Adaptability to changing environments: Must to have
• Inter-personal skills: Must to have

Management skills

• Ability to deal with issues, time management: Critical
• Manage escalated incidents: Critical
• Capacity to cooperate / work across discipline: Critical
• Capacity to develop others: Desired

Language skills

• English: Must to have
• French: Good to have

Next Step

Prepare your updated resume and expected package.

Simply click on 'Apply here' or email to [email protected] to drop your resume

All shortlisted candidates will be contacted.

Prasant Sirohi

EA License Number: 91C2918

Registration Number: R22106307

Job Description

• Safeguarding the clients' local and remote sites, staff, assets and sensitive information.
• To lead the security operations, monitoring, detecting and responding to incidents promptly and effectively.
• proactive security and dedication to service to protect the clients' interests.

Roles and Responsibilities

• Operate all SOC technologies including network video, access control, etc.
• Coordinate direct action and responses to incidents and alarm activation.
• Compile reports for the SOC Shift Supervisor in order to share with management on a daily/weekly/monthly basis.
• Exceptional communication skills at all times and an ability to adopt the appropriate approach when dealing with others who may be anxious or distressed.
• Provide high quality written and verbal reports as and when required.
• Taking telephone enquiries.
• Maintain accurate logs of events.
• Liaise with emergency services and other monitoring agents as and when directed.
• Assist in the collation and preservation of digital media evidence.
• Assist in the collation and viewing of network video images in response to incident investigation in line with associated code of practice.
• Identify and promptly respond to any system anomalies.
• Support the SOC Shift Manager in monitoring regional travel requests and travel movements.
• Under minimal supervision determine the appropriate response to each reported incident.
• Maintain active awareness of the monitored environment to promote safe and effective working.
• Maintain a conscientious and proactive approach to work to achieve excellent standards.
• Be aware of policy and procedures owned and changed from time to time by SRS.
• Be aware of policy and procedures owned and changed from time to time by the client.
• Any additional duties and responsibilities as assigned by Management.