Product area

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant't cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Additional job description

As the Head of Public Sector for Google Cloud Security Product, you will be in charge of Cloud Security product sales across APAC public sectors. You will generate and create an effective pipeline of Google Cloud products. You will be responsible for hiring an expanded team of Field Sales Representatives, building account strategies and opportunity plans and managing the execution of complex engagements. You will work with cross-functional teams to accelerate opportunities.

Qualifications

Job responsibilities

• Lead Cloud Security product's go-to-market propositions in Public Sector (Government, Education, Healthcare, EdTech) across APAC, bringing marketing, demand management, solutions, product, and engineering teams together to produce a focused proposition to prospects and customers.
• Understand APAC Public Sector customer’s current security technology footprint and customer requirements on both business and technical level. Develop and provide custom presentations on Google Cloud Security products to solve their business problems.
• Work with wider Google Account teams to develop and drive pipeline, provide guidance, and collaborate with Google Cloud Partners, to develop campaigns. Build a pipeline of customers within Public Sector verticals.
• Set long-term strategic direction in public sector security sales. Build and maintain relationships with public sector customers to influence cloud security technology adoption.
• Manage and motivate the team in public sector security sales to meet business goals.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 12 years of experience in technology sales.
• Experience with security solutions or security software products.
• Experience in sales leadership, managing a sales team.
• Ability to communicate in English fluently in order to engage public sector customers.

Preferred qualifications

• Experience in Security Operations (SecOps) (i.e., Security Information Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR)).
• Experience selling solutions to public sector customers.
• Knowledge of security solutions domain.
• Understanding of how various cloud technologies work together to drive technology adoption within the existing large account base.
• Ability to build a high performing sales team and build an excellent team culture.
• Ability to grow/scale businesses, and develop long-term strategic relationships with accounts.

Duties & Responsibilities:

• Contribute to Sub-WSH Committees and provide support for key committees' activities, such as inspection, audit, promotion, training, circulation, etc.

• Contribute to Security Management, including operations, facility compliance, and system compliance.

• Assist in ensuring compliance with ISO45001 and bizSAFE requirements.

• Attend site coordination, meetings, patrols, and other related activities as required.

Added advantage

• Environmental knowledge in building energy conservation, waste management, monitoring, and promotion.

• Experience in building fire protection system, fire and emergency program.

• Experience in Business Continuity Management (BCM).

Requirements:

• Diploma/Bachelor's Degree in Engineering and SSHE related with min 3 years of relevant experience.
• Team player, good interpersonal and communication skills, able to work independently
• Good knowledge in Workplace Safety & Health Act, ISO45001, ISO14000, Security Management Systems
• Candidates with Fire Safety Manager certificate would have an added advantage.
• Candidates must be comfortable with high travel frequency to other job sites, including Jurong Island.

At Azqore, we understand that information security is more than a necessity – it’s a passion. That’s why we’re looking for an information security expert who shares our commitment to excellence and the protection of our banking partners.

Azqore is a leader in outsourced banking services. We are one of the entities under Credit Agricole Indosuez Wealth Management, providing integrated solutions to our clients : with our core banking system and the solution of outsourcing of backoffice banking operations.

Backed up by the banking and financial strength of Crédit Agricole Group with its global presence and resources made available by Capgemini under our strategic agreement and positioned as the expert partner for the digital transformation of tomorrow's Wealth Managers with a single ambition: to make S2i the technology and banking operations platform of choice for the Wealth Managers in its international markets.

Our business has a single purpose : building partnerships with tomorrow's Private Bankers and Wealth Managers.

How is the team ?

Our Security team is comprised of 25 dedicated professionals.

As a member of the Information Security (IS) team, you will collaborate closely with the IT Security, Identity and Access Management (IAM), under the guidance of the Chief Security Officer (CISO).

The team has an international presence:

· Singapore office

· Switzerland office

In this role, you will report directly to the Deputy Chief Security Officer Esther Prudhon-Delagrange | LinkedIn.

What is the role ?

· Identify and assess information security risks

· Provide security consulting for the company’s projects (new applications or infrastructure components, evolutions, implementation of cloud solutions, etc.)

· Participate in the elaboration of security standards, proposal of improvements and development of the ISMS (Information Security Management System) in accordance with ISO 27001

· Participate in the risk assessment and treatment process organized in accordance with ISO 27001

· Participate in the development of training plans and awareness campaigns (what information is confidential information, how to classify it, expected behaviors, etc.)

· Conduct risk assessments and treatments in line with ISO27001

· Maintain active security and technological monitoring

· Formalize results through Key Performance Indicators (KPIs).

What level of knowledge is required for this role ?

· Higher Education / Master level

· minimum 5 years of experience as Information Security Officer

· English fluency is mandatory

Where is based the job ?

In our Singapore offices (new offices will be in Mapletree Business City in August)

100 days/year remote work possible for swiss residents

Key competencies for the role

The most important competencies:

· Excel in communication and become a true ambassador for security.

· Master cloud-related topics and be at the forefront of innovative solutions.

· Take a broad view and work hand-in-hand with business teams to implement effective recommendations.

Knowledge of Information Security Management Systems (based on ISO 27000)

Background:

· analysis methodologies

· development

· IT systems

· solutions

· knowledge of the banking industry and its regulations.

Don’t apply if …

· level of English is too low

· do not have any banking experience

· don’t like reportings

· don’t like to work with the different IT teams and look only to communicate with the C level

Benefits

At Azqore, we champion workplace flexibility and are committed to supporting our team members every step of the way. Join us and experience a dynamic work environment where your growth is our priority.

Embrace the opportunity to tailor your career path with Azqore, where innovation meets adaptability.

We are proud to offer a comprehensive benefits package that includes:

• Annual Leave: 24 Days

• Childcare leave: 6 Days (youngest child below 7 years); 2 days (youngest child between 7-12 years)

• Family care (for employees with no kids): 2 days*

• Medical insurance for employee and non-working dependents: include (for employees only) Group Term Life, Group Personal Accident, Group Dental and (for employees and non-working dependent) Group Hospitalization & Surgical, Outpatient GP and Specialist

• Cash Flexi allowance (for reimbursement on Optical, Gym or Holiday expenses): $550/annum

• Health Screening reimbursement

Recruitment process ?

1. Our Talent Acquisition Partner (Charlotte Lebret) will call you for a first interview

2. If we decide (you & Charlotte) to go further you will have a video or face to face interview with the manager (Esther).

3. Then interview with our CISO (Julien) and our Head of IT (Guillaume Bardy).

4. Last step is an interview with our HRBP

5. You will also complete a test about your behavioural levers (PULSIONS).

Cloud Security Engineer

Responsibilities:

• Consult engineer on security requirements and utilize best practices to meet them
• Work with the Cloud Infrastructure and Platform teams to lead initiatives and develop and build security utilities and tools that will enable organisation to operate more securely
• Build threat detection for a hybrid infrastructure covering the overall technology stack that includes Application infrastructure, Containers, IoT infrastructure
• Contribute to and lead discussions and communications within the team and outside, including customers and other business units
• Translate Standards and Regulatory based controls to Engineers do they understand what needs to be done
• Build and maintain a robust infrastructure/platform security roadmap to meet customer demands and regulatory mandates
• Responding to customer-facing departments about EnOS Platform and Edge security posture
• Responding promptly and in detail to customer-sponsored penetration tests
• Develop, maintain, and promote standards through workshops, office hours, knowledge shares and brown-bags
• Promotes best practices and design patterns
• Onboard and development of Security Orchestration, Automation and Response system.

Qualifications & Experience:

• Bachelor Degree in Computer Engineering/ in STEM major in Science, Technology, Engineering or Maths)
• AZ-500 & AWS security certification will be a plus
• At least 5+ years of experience in security controls management aspects at Azure/AWS/Google cloud
• Strong knowledge of CI/CD and automation tools (Chef, Git, Jenkins) and Infrastructure as Code/Policy As code.
• Strong knowledge of Identity management and identity federation (SAML, Oauth)
• Strong knowledge of virtual infrastructure and containerization technologies
• Experience designing and implementing security controls in cloud platforms such as AWS, Azure and alike.
• Experience with the application of risk identification and evaluation techniques
• Experience with broad set of information security technologies and processes within a SaaS, IaaS, PaaS, or cloud environment
• Experience with at least one SIEM and SOAR platform – including on boarding of log sources and developing automation.

Regret to inform that only shortlisted candidates will be notified.

www.dadaconsultants.com

EA Registration Number: R1878287

Business Registration Number: 201735941W.

Licence Number: 18S9037

1. Payroll:

· Calculate workforce wages and wages related components. Eg, salary, incentives, cpf.

· Check if all the necessary documents related to wages are presented and acknowledged. Eg leave forms.

· Track and manage loans.

· Key all the data into company’s computerised system and remuneration chart.

· Weekly discussion with key management on wages and add/amend accordingly as per instruction.

2. Invoicing:

· Issuing invoices.

· Track and manage invoices.

· Monitor receivables.

3. Payments

· Issuing payments for company expenses. Eg, rental, utility, vehicles.

· Membership payment.

· GST and other required payments.

4. Bank Statement verification

· Reconciliation invoices.

· Update cheque bud and debit card statement.

· Update the debited amount in company’s database.

· Prepare statements for audits.

5. Preparation of documents for the following months.

· Attendance chart.

· Remuneration chart.

· Birthday vouchers.

6. Internal Audits

· Prepare and maintain pending receivables- monthly.

· Prepare and maintain site costings- monthly.

· Prepare and maintain cashflow forecast- monthly.

· Present the above with analysis to key appointment holders.

Any other duties as specified by key appointment holders

Hello. We’re Haleon. A new world-leading consumer health company. Shaped by all who join us. Together, we’re improving everyday health for billions of people. By growing and innovating our global portfolio of category-leading brands – including Sensodyne, Panadol, Advil, Voltaren, Theraflu, Otrivin, and Centrum – through a unique combination of deep human understanding and trusted science. What’s more, we’re achieving it in a company that we’re in control of. In an environment that we’re co-creating. And a culture that’s uniquely ours. Care to join us. It isn’t a question.

With category leading brands such as Sensodyne, Voltaren and Centrum, built on trusted science and human understanding, and combined with our passion, knowledge and expertise, we’re uniquely placed to do this and to grow a strong, successful business.

This is an exciting time to join us and help shape the future. It’s an opportunity to be part of something special.

About the role

The Principal OT Security Architect is a critical role in the Digital and Tech Information Security organization supporting our OT Manufacturing sites to maintain the highest level of service availability and keep our network security levels ahead of our business demands, while pushing for more standardization through automation. The Principal OT Security Architect will assess, improve, and maintain the network security of the global manufacturing Operations Technology (OT) environment, and build new processes & procedures and develop guidelines for the business to adhere to. The Principal OT Security Architect will assess, improve, and maintain the cybersecurity posture of Global Manufacturing Operational Technology (OT) environment including Industrial Control Systems (ICS), Factory Automation systems and others as needed. Additionally, will be a subject matter expert (SME) in delivering controls to mitigate both insider and external risks and security risks.

Role Responsibilities

• Lead all aspects of architectural activities for a technology domain, or architectural practice area, or manage the development of solution architectures for projects or programs within a business area.
• Define standards and direction of architecture in the specific business or technical domain. Define and develop the logical design and information management strategies vital to store, move and manage data in a new target state.
• Create architecture patterns to suggest the most adequate utilization of technical platforms in support of the holistic solution architecture design.
• Define, build, and evolve the Architecture Governance Framework (e.g., architecture methods, practices and standards) for IT/IOT/OT.
• Define, design, apply and support security controls to OT systems in our sites and own and define the architectural security standards for OT. The candidate will lead a team of domain specialists on this matter.
• Analyzes, designs, and develops roadmaps and implementation plans based upon a current vs future state.
• Develop and implement measures, tools, and technology to monitor compliance with company security policies and procedures, laws and regulations.
• Leads the research and analysis of new security trends relating to OT security network.
• Manages relationships with engineering teams and collaborates with teams across the organization to ensure network security levels are maintained at the highest level.
• Explores raw network traffic & performs in-depth data analysis utilizing various tools.
• Create useful and creative data queries & relevant dashboards and reports to key stakeholders.
• Initiation, Prioritization, and design of R&D work based on customer needs.
• Optimize operational excellence and ensure best practices for security are followed.
• Claroty, Palo NGFW, and Zsclaler solution design, operation, and reporting.
• Serve as a key thought leader, helping to maximize the value of Information Security and IT.
• Define and monitor metrics to assess the overall value/maturity of cybersecurity investments.
• Serve on various forums (e.g., Information Security / OT Lead Teams) to analyze projects, programs, and products to ensure they are technological sound, will do no harm, and will deliver the expected outcomes.
• Recognize the value of emerging technologies and practices with intent to accelerate cybersecurity capabilities for manufacturing and lab environments.
• Develop and implement measures, tools, and technology to monitor compliance with company security policies and procedures, laws, and regulations.
• Perform testing against ICS/OT devices, networks, and security control mechanisms.
• Provides leadership, technology guidance, collaboration and mentoring of key stakeholders and teams; develops and motivates to create a positive culture and working environment

Why you?

Basic Qualifications:

• Bachelor’s degree in computer engineering, Electrical Engineering, Computer Science, or a related technical field
• 5+ years of IT and Operational Technology Security experience with a focus on working with Industrial control system cybersecurity frameworks, such as IEC62443, NIST (CSF) Cyber Security, and SANS CIS control frameworks.
• Expertise on developing OT security programs and securing OT security network architectures.
• Solid foundation in laboratory / ICS support which was build up with IT topics like network architectures, network protocols, industrial protocols, Active Directory, Backup processes, virtualization of applications and other general IT knowledge.
• Fundamental knowledge in IT-Security threat modelling, vulnerability assessments and pen-testing.
• Experienced in the use of tools for incident investigations, simulation, and forensics - GxP regulations.
• Ability to present technical design proposals and reports to customers and/or other senior engineering, management, and government groups in clear, complete, concise, and non–ambiguous terms.
• Excellent presentation, written and verbal communication skills; ability to clearly communicate and have excellent consulting skills.
• Ability to undertake and complete tasks independently, meet schedules and delivery timelines, and to move swiftly from concepts and theory to action.
• Sound knowledge on Industrial Control Systems ICS environment including design, protocols, and integration (OT 4.0 experience)
• Firewall, Next Gen Firewalls, and security network subject matter expert (SME).

Preferred Qualifications:

• CISSP, GICSP, CISM or CFSE/CFSP certification preferred.
• CCIE or CCNP certification desired
• Claroty, Zscaler, and Azure experience desired.
• Open-minded, flexible, and thrive in a highly dynamic, fast-paced, ever-changing environment.
• Exposure of onsite travelling, site audit/security audit would be plus.

Responsibilities

Facility operational Security

• Promote awareness and ensure facilities are compliant with Physical Security Standard/Policy of security related GEA policies, procedures, and guidelines.
• Ensure that all necessary sites in the region have Business Continuity Plans in place.
• Assist in coordinating the installation or replacement of security systems at GEA facilities to ensure compatibility and continuity of systems and applications.
• Conduct comprehensive reviews and analysis of GEA facility security plans for compliance with existing GEA policies and procedures.
• When needed conduct comprehensive site security reviews of GEA construction projects underway in AOR.
• Ensure the reporting of all incidents involving crime, security violations, critical security intelligence and incident trends via GEA reporting system, review incoming reports and provide guidance to close incidents.
• Security incident/investigation leader, receive and evaluate information on security-related adverse incidents and make recommendations to preclude recurrence.
• Provide general oversight and guidance on the security operations for GEA sites, to include advising on security protocols/standards, guard services, access control, crisis management and business continuity.
• Ensure SSLs are conducting security related training exercises, tabletops, and mitigating findings.
• Provide security education and awareness activities, including leading continuing education efforts for sites and leadership teams as well as all employees through awareness programs.
• As a future build, may have people leader responsibilities to include, but not limited to, hiring, training, and managing employees.

Regional Security Point of Contact

• Keep abreast of relevant security industry standards/regulations, incoming security-related correspondence as well as monitor national and international events to assess security-related trends and implications on GEA business operations and staff within the region.
• Provide oversight and leadership on security-related activities as the primary security focal-point for the region and the business leadership.
• When necessary, travel outside of AOR to assist other GEA members of the Global Security team.
• Deploy as part of an Incident Management Team in response to an incident when on the ground assistance is required.
• Represent GEA among key industry groups and at association functions when needed.
• Maintain 24/7 availability to provide incident response coverage and intelligence reporting to GEA when needed.
• Undertake security missions and crisis management support roles and providing security support for special events as required and/or directed by the GEA Global Security and/or the business needs of the region.
• Build and maintain an effective working relationship with key law enforcement and security agencies and professional security organizations related to the area of responsibility.
• Working with GEA legal and compliance teams, ensure GEA legal entities and operations comply with local regulations.
• Coordinate, assist, and collaborate with other regional security managers as well as members of GEA Global security teams.
• Responsible for working with related GEA components such as facilities, logistics, procurement, and digital technology teams, to support the Global Security mission.

Collaborate and share critical information with the GEA Aerospace Response Center (ARC)

• Monitor national and international events to assess security-related trends and implications on GEA business operations and staff within the region.
• Ensure there are country/zone level crisis plans to provide an established and validated process to limit the intensity of a negative threat or event to GEA’s employees, products, services, financial condition, and reputation within the area.
• Keep abreast of relevant travel security risk as well as provide oversight of travel security support activities, i.e., escorts, meet and greet, etc.
• Provide travel security support by monitoring trends that may cause issues for GE travelers in the designated Area of Responsibility and work with GEA ARC for country assessments and ratings and communicate with travelers accordingly.
• Provide site readiness and security-related statistical information and yearly progress to the GEA Regional Security Director and the GEA executive team.

Audits/Assessments

• Conduct security audits & inspections of GEA facilities. Participate in other GEA audits and inspections as required by GEA Global Security.
• Analyze the potential security risk with regards to newly acquired businesses and implementing GEA security policies and processes in these businesses, supply chain partners.
• Provide GEA regional business leaders with technical knowledge and assist in coordinating vendors with field locations on proposed security-related equipment and expenses.
• Conduct comprehensive risk and site vulnerability assessments to identify deficiencies and best practices and provide recommendations for the protection of employees and to prevent financial loss, damage, or business interruptions.
• Develop exercise simulation scenarios to test the various country and site crisis plans. Identify and propose gap resolutions for local crisis plans. Audit and drive to closure.

Qualifications:

• Bachelor’s degree and/or equivalent advance degree
• Minimum 10 years of professional experience as a people leader at the senior level.
• Minimum 5 years’ regional security experience.
• Extensive operational experience in security management, Law Enforcement, or military preferred.
• Experience working domestically and internationally in multiple settings (office & field)
• Familiarity with global/international security laws, regulations, and an understanding and acceptance of varying global perspectives, ideologies, and cultures.
• Strong oral and written communication skills in the English language.
• Strong interpersonal, judgement and leadership skills and a demonstrated background in successfully leading complex programs/projects.
• Extensive crisis management/incident response experience.
• Demonstrable experience managing and executing event security functions.
• Demonstrable experience managing and executing executive protection/asset protection functions protection.
• Extensive operational experience in security management, Law Enforcement, or military service preferred.
• Working knowledge of Word, Excel, Power Point, etc.
• Able to work effectively across multiple cultures and time zones.
• Significant domestic and international travel required.
• Self motivated, self directed, flexible and able to work under pressure and in fast paced team environments.
• Strong understanding of designated region to include local laws, regulations, customs, and cultures.
• Strong understanding of security nuances (methodologies, vulnerabilities) within respective region
• High level of interpersonal, verbal and written communication skills, with an emphasis on collaboration, and the ability to engage executive-level decision-makers
• Excellent English language communication skills: experience communicating across multiple levels (including executive level), functions and regions; able to clearly and effectively communicate complex information both verbally and in writing.
• Experience establishing and implementing departmental strategic initiatives.
• Proven project management skills (multi-faceted & complex projects) with ability to handle multiple tasks and deliver results on time
• Experience conducting investigations on a variety of circumstances such as criminal activity, security violations, significant misconduct, etc.
• Has cultural awareness & sensitivity: ability to flex style to suit differing cultural norms and experience of leading a culturally diverse team.
• Can operate successfully in a highly autonomous environment.

Language: English fluency is required. Demonstrable multilingual capability (Hindi, Mandarin, Malay, Japanese) will be highly regarded.

Desired Characteristics:

• Humble: respectful, receptive, agile, eager to learn
• Transparent: shares critical information, speaks with candor, contributes constructively
• Focused: quick learner, strategically prioritizes work, committed
• Leadership ability: strong communicator, decision-maker, collaborative
• Problem solver: analytical-minded, challenges existing processes, critical thinker

JOB DESCRIPTION

The Google Cloud Platform team helps customers transform and build what's next for their business — all with technology built in the cloud. Our products are developed for security, reliability and scalability, running the full stack from infrastructure to applications to devices and hardware. Our teams are dedicated to helping our customers — developers, small and large businesses, educational institutions and government agencies — see the benefits of our technology come to life. As part of an entrepreneurial team in this rapidly growing business, you will play a key role in understanding the needs of our customers and help shape the future of businesses of all sizes use technology to connect with customers, employees and partners.

ADDITIONAL JOB DESCRIPTION

As a Security Sales Specialist on the User Protection Services (UPS) team, you will help us grow our cybersecurity business by building and expanding relationships with new and existing customers. You will work with customers to deliver true business value, demonstrate product functionality, and provide a comprehensive overview of key business use cases. You will lead day-to-day relationships with external customer stakeholders, leading with empathy, while identifying innovative ways to multiply your impact and the impact of the team as a whole. You will have shared responsibility to uphold and grow an excellent team culture. You will partner with internal Google Cloud Partner Sales teams to grow their security businesses and drive overall value for Google Cloud Partners.

Qualifications

JOB RESPONSIBILITIES

• Construct and execute an effective territory development plan for your territory, meeting or exceeding quarterly goals.
• Develop and drive pipeline, managing cycles from lead generation to customer onboarding.
• Build and maintain relationships to influence long-term strategic direction, and act as a trusted advisor to both the local Specialist and Google Cloud Platform Sales leadership. Host Security product enablement sessions for GCP and Specialist team members through team or quarterly meetings, or large scale events.
• Partner with Marketing, Customer Success, or Channels teams in your territory to educate clients, managed service providers, and local technical communities on User Protection Services products and other associated security offerings.
• Represent User Protection Services in regional forecasts and team meetings, and serve as stakeholder to regional Google Cloud leads, reporting current, accurate, and timely forecasting and business performance in tools.

MINIMUM QUALIFICATIONS

• Bachelor's degree or equivalent practical experience.
• 7 years of experience in a sales role in the enterprise software or cloud space.
• 5 years of experience in promoting to clients in the enterprise cybersecurity or IT field.

PREFERRED QUALIFICATIONS

• Experience starting a territory from scratch, and understanding the security partner ecosystem.
• Knowledge of product and solution and market trends in cybersecurity and cloud.
• Ability to build continuous relationships, promote to C-level executives across security and IT business units, and ensure customer success and adoption leading to customer expansion.
• Ability to prioritize, plan, organize, and communicate sales activity, complex concepts, technical benefits in business terms at the executive level.
• Strong problem-solving, communication, presentation and active listening skills and a proven ability to create leverage by enabling others.

• Assist with duties at the following Duty Posts:

1. ­ Security Control Room Duty;
2. ­ Lobby Duty;
3. ­ Loading Bay;
4. ­ Patrolling or Observation Duty;
5. ­ Back of House;
6. Or at any position where operations in Security field will benefit

• Ensure that all security systems function smoothly. Initiate immediate corrective action when fault is detected
• Assist Management, employees and guests in every way that is consistent with the protection and prevention objectives
• Coordinate with various departments and government agencies on routine matters and during emergency
• Monitor back of house areas with particular attention to unauthorized entry and exit points
• Maintains records in respective Log Books for future reference
• Keep Manager or Crisis Management Team informed on the latest development of situation in a crisis
• Conduct inventory on keys, passes, walkie-talkies, pagers and all other accountable stock
• Perform other reasonable duties assigned by the assigned by the Management

Only shortlisted candidates will be contacted.

This position reports to the Finance Manager and assists the management team in accounting functions.

Reponsibilities

• Prepare and send quotation, invoice, credit note and monthly statement.
• Perform data entry to update Accounts Payable and Receivable records.
• Check, verify and process invoices, expense claims & reimbursements.
• Verify timesheet against attendances submitted.
• Process bank transactions for payroll and vendors.
• Keep proper record of finance documents and bank statements.
• Perform Payroll and Bank Reconciliation.
• Assist in preparation of project costings and monthly reports.
• Other ad-hoc duties assigned by management.

Requirements

• Candidates with basic accounting knowledge or experience preferred.
• Proficient in Microsoft Outlook, Excel and Word.
• Organized and meticulous, able to multitask and work independently.

Other details

• Hybrid work arrangements: 2 to 3 days WFH per week.
• Working days: Monday to Friday
• Working hours: 9am - 6pm
• Benefits: Medical benefits and insurance coverage.

· Perform analysis, prioritization and classification of risk.

· Handle day-to-day security vulnerability assessments and operational request.

· Provide security vulnerability assessment reports and advise system operator on security vulnerability and resolution.

· Proactive monitoring of remediation plans and progress.

· Schedule security checks in accordance with reporting schedules.

· Continuous enhancement of existing security vulnerability assessment process.

· Verifies security controls are implemented accordingly.

· Review security incident reports

· Evaluate the type and severity of security events

· Assist with establishing procedures for handling detected security events

· Create final incident report detailing the events of the incident

· Prepare periodic status reports for presentation to management

· At least 5 year working experience in vulnerability management and incident response.

· Familiar with at least one vulnerability scanner.

· Strong analytical skills and ability to work independently.

· Good team player as well as strong communications skills with stakeholders at all levels

· Possess QISP, CEH, CISSP and/or related security certification.

· Experience in healthcare industry is an added advantage.

· Degree in Computer Science, Engineering or equivalent.

Key Responsibilities

• To carry out security duties at the Hotel, Staff Entrance and to patrol Hotel premises.
• To create security and fire safety awareness among staff and guests.

Requirements

• Possess qualified certificate in WSQ Security and SIRD License
• Customer-oriented
• Able to multi-task
• Able to work in a fast pace environment
• Possess additional Lifeguard / CPR certificate is preferred

Job Summary:

We are currently looking for an Azure Cloud and Cyber Security Manager who will support the School by managing and maintaining the Azure Infrastructure, Microsoft 365 and Cyber Security. The appointee works with the Director of Technology & Senior Cyber Security Manager to ensure the IT requirements of the end user are met. The role reports to the Senior Cyber Security Manager.

Requirements:

· Minimum Degree in Computer Science, Engineering or equivalent

· Minimum relevant experience of 5 years and above

· Azure Solution Architect certification

· Excellent knowledge of Azure, Microsoft 365 and Cyber Security

· Experience in Microsoft Intune, Microsoft Defenders and Microsoft Sentinel

· Able to work independently as well as a good team player with good initiative

· Will accept late hours and weekend work for maintenance and patching

Key Responsibilities

1. Management and Maintenance of Cloud Infrastructure and Cyber Security

• Responsible for the implementation and management of Microsoft 365 and Azure services.
• Responsible for the configuration and management of Microsoft email system, Microsoft Intune, Microsoft Defender (M365, Endpoints, Identity and Cloud) and MS Purview
• Responsible for the cybersecurity of all systems.
• Conduct regular security assessments, vulnerability scans, and penetration tests to identify and mitigate security risks.
• Monitor security logs and alerts to identify and respond to cyber security incidents.
• Perform regular privilege access and user access review.
• Providing security awareness training and security advisories.
• Responsible for installation and maintenance of the school internet filtering system.

2. Management and Maintenance of Server Infrastructure

• Monitoring and renewal of warranty status on all servers.
• Monitoring of all servers’ health.
• Migration, upgrading and updating of servers.
• Maintain up-to-date records of IT infrastructure-related documentation.

3. Procurement / Resources / Licensing

• Source and procure quotes when necessary for the purchase of server and network infrastructure equipment.
• Source quotes and oversee the disposal process for any IT-related equipment (in conjunction with the Helpdesk/AV Technician when required).
• Ensure that budgetary & inventory routines are maintained and
• Contribute to the development of IT budget formulation.

4. Policy, Procedure and Project Management

• Work closely with the Senior Cyber Security Manager in developing the Cyber Security strategy, policies and procedures.
• Provide implementation plan for current /planned IT projects.
• Liaise with vendors and 3rd party contractors.
• Support the IT team in identifying technical needs and priorities.
• Contribute to the development of the annual IT budget.
• Contribute to management meetings as requested, advising on technical issues.

5. General

• Keep abreast of current cyber security, data protection, and artificial intelligence technologies.
• Demonstrate a positive attitude towards users and their needs.
• Operate within the policies of the School.
• Occasional overtime is required as deemed necessary and reasonable by the School.
• Be responsible for reporting any concerns about a child to the Designated Safeguarding Lead.
• Embrace the School’s commitment to creating a diverse and inclusive environment.

The school is committed to safeguarding and promoting the welfare of children and young people and expects all staff and volunteers to share this commitment. We will conduct thorough background checks on all successful applicants.

5-day week – working hours are from 7.30 am to 4.30 pm (41.25 nett hours per week). Interested applicants, please submit an application letter and detailed resume, stating your current and expected salary, date of availability and contact number via the online system at https://careers.tts.edu.sg/careerportal/main.aspx. In your application, please provide the names and addresses of three people from whom confidential references may be obtained. Please indicate their professional relationship to you.

(Only shortlisted applicants will be notified)

CPE Registration No.: 196100114C | Period of Registration: 7 June 2023 to 6 June 2029

Responsibilities

• Responsible for the safety and security of Treetops' guests, employees and property;
• Monitor staff reporting on and off duty;
• Conduct audit checks of keys in the Guard House;
• Maintain a 24 hour surveillance of all work areas;
• Maintain a vigil on the closed circuit TV system and inform officers on patrol duties of any unusual happenings;
• Check all packages and passes of employees entering and leaving the building;
• Carry out monthly fire safety inspection;
• Prevent and detect any form of terrorist activity in the premises;
• Prevent and detect any illegal activities such as gambling in the premises;
• Coordinate closely with the local Police and other government agencies;
• To assist Finance Department in the daily cash count and banking services;
• To assist with luggage/porter services when needed

Benefits

• Allowances+AWS+Bonus
• Meals and Uniform provided
• Walking distance from Orchard MRT

Requirements

• Minimum GCE ‘N’ Level
• Candidates with PLRD License & WSQ Basic Security Officer certification are preferred
• Able to perform 3 rotating shifts (9 hours per shift including weekends and public holidays
• Communicate fluently in both spoken & written English
• Able to work independently with minimum supervision

Position

Data Security Specialist- Data Security and Endpoint Security

Data Security Specialist is a technical Specialist role within the Data Security Services team and will be responsible for managing, administration and supporting the Data Security and Endpoint Security technologies for the bank.

Person will be the technical point of contact for the Run team and the related activities to data security and will be the last level of escalation for the Security specialists in the team. He/She is also responsible for the technical transition and validation of Security services from other regions to Singapore. He/She will be involved in projects and POC’s that may involve security services. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Specialist on the technologies within data security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France and UK) and Asia remotely from Singapore. France infrastructure represents approximately 80% of the worldwide production activities of CA-CIB in Singapore.

Team works in Europe time zones and this role will be aligned primarily to Paris working hours. Flexible rotations are followed based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect,
• Encryption Solutions: Disk Encryption, File and Folder encryption,
• Database Audit Monitoring solutions
• Email and Web Phishing Prevention solutions.
• Vulnerability Management

Detailed Job Responsibilities

The Specialist has a wide spectrum of responsibilities and actions. Person will be responsible for following (but not limited to) responsibilities in day-to-day work:

As the Specialist of the team, he/she:

• act as the last level of escalation for the team members
• own Incident, Problem and change management process for the team
• assigns technical tasks and manages delegation
• animates the team to encourage collaboration and sharing of practices
• participates to recruitment process for the team

As the Specialist of his/her scope of activity, he/she:

• is actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management
• Is the final technical approver for any changes into Data Security systems and is accountable for any technical changes in the environment from a RUN/BAU perspective
• Is involved in projects like End of Life, New Builds, migrations and technical upgrades of the solution managed by the team
• Participates in global Infra events (like Power down and DR Tests)
• ensures activity is performed in compliance with norms, standards, processes and procedures
• gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting
• ensures documentation is up to date and relevant for use
• lead the continuous improvement initiatives
• responsible to drive and deliver root cause for any high severity issues
• Focus on automation and optimum use of the team to improve efficiency
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

• Work schedule is mainly focused to support Asia and EMEA (Paris) time zone; however, may have to support during non-offce hours for critical incidents or escalation as per the assigned on-call support requirements;
• Rotational Shift schedule is followed;
• Work Hours: 2 PM – 11 PM SGT (with 1 week of General shift 9 AM – 6 PM SGT).

Qualifications and Profile

Functional

• 8 - 10 years of IT Security experience in administration and management of IT Security technologies primarily Symantec Data Loss Prevention, Symantec Endpoint Protection, Email Security, Data Classification and other endpoint & data security solutions;
• Should be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;
• Knowledge of different domains of IT Security;
• Working & hands-on experience in administering the IT Security Solutions;
• Must have experience in working in similar Production setup in Run (Operations) mode;
• Ability to apply risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;
• Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;
• Excellent in analytical, communication and documentation skills;
• Ability to organize work and be able to priories work as per the needs of Production Operation’s needs;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Ability to work independently and as well as a part of team and is able to work under minimal supervision;
• Should have time management skills and able to manage work in fast moving environment;

Technical

• Hands-on experience on Symantec Data Loss Prevention (DLP);
• Highly proficient in data leakage prevention (DLP) technologies - troubleshooting and configuration management;
• Deployment, integration and administration experience of various components of Symantec DLP:

- Symantec Endpoint Protect

- Symantec Web Prevent

- Symantec Email Prevent

- Symantec Enforce

• Must have experience in defining, designing and configuring DLP Policies as per the business requirements;
• Deploy, upgrade and troubleshooting knowledge on Symantec DLP solution;
• Scripting knowledge (Phyton, Regular Expression, Powershell) is desirable;
• Ø Professional Certifications:

- CISSP certified is highly preferred

-Symantec Certified Specialist: Administration of Data Loss Prevention (any version) is highly preferred.

Interested applicants, please email your resume to Shaun Quek Yew Meng

Email: [email protected]

CEI Reg No: R1660732

EA Licence No: 99C4599

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span industries and geographical regions; and our focus is to engage in the dynamics of our customers’ vertical markets; including financial services, TMT (telecommunications, media and technology), education, healthcare, retail, government, manufacturing and professional services, and apply the skills of our 6,500 employees in modernising key digital pillars; data centre and cloud services, security and network infrastructure, workspace communications and collaboration, data and information strategies, and IT operation modernisation.

We are the advocates for our customers for some of the world’s leading technology companies including Cisco, HPE, IBM, CA Technologies, NetApp, Microsoft, Oracle, VMware and ServiceNow.

The Logicalis Group has annualised revenues of $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4.3 billion.

Job summary:

Role Description:

• Lead customer project delivery engagements by providing design and solution consultancy for large scale solutions and complex issues, related to data centre networking & security
• Consult and work with customers to plan, design, install, configure, integrate and/or optimize the solution & services to accelerate business outcomes.
• Translate business requirements into data centre networking solution design. Drives customer technology transitions, influencing solution architectures and services.
• Participate in services presales activities which include helping create statement of work, scoping of efforts, propose right services & solutions, articulate the value and expertise of the Logicalis’ professional services as part of a comprehensive outcome-based solution.
• Conceptualize (Customer Requirements Document), plan (Implementation Strategy Plan), design (High & Low Level Design) and advise cross-functional teams across multiple technical, operational and enterprise architecture domains.
• Provides leadership capabilities and insight for creation and sharing of best practices to improve service quality and efficiency.
• Provides technical expertise and escalation support in resolving technical problems within the professional services team
• Mentor and develop junior network engineers
• Create and deliver training and/or mentorship programs for technical resources within the professional services organization.
• Partner with the presales team to improve the quality and accuracy of the Scope of Work and cost estimates

Requirements:

• Degree in Computing or Engineering discipline • CCIE (Routing & Switching) and/or CCIE (Data Centre) • At least 10 years’ experience in project deployment for complex network infrastructure for data centre/cloud and campus, including at least 3 years in a solution architect role
• Advanced knowledge of Software Delivered Data Centres in general and Software Delivered Networks in particular.
• Should have acumen for emerging technologies in the networking world.
• Advanced skills about data centre networks and protocols (Unicast, Multicast, Anycast).
• Advanced skills in network protocols: IP, TCP, UDP, and other common protocols.
• Advanced skills in network routing protocols: IGP and EGP like OSPF, IS-IS, BGP and others.
• Advanced skills in Ethernet fabric technologies: Fabric Path, Cisco ACI and EVPN VXLAN
• Advanced skills in software defined networks especially for Cisco ACI and/or VMware NSX-T/V
• Advanced skills on how to implement network protocols within a Cisco Nexus network.
• Advanced skills in analyze network problems via wireshark or any other tool set.
• Advanced skills in network services like IPAM, DNS, SMTP, NTP, Load Balancing and others.
• Advanced skills in how to integration various systems inside a data centre
• Advanced skills in designing, implementing & migrating data centre firewalls/IPS/IDS
• Intermediate skills in project management (waterfall & agile) and supplier management.
• Basic skills in physical cable management systems, optics, fibres and data centre facility.
• Basic skills in data centre facility architectures and setups
• Customer satisfaction is your focus and accordingly you have a strong service mentality
• Flexibility and willingness to learn new technologies, scale quickly and adapt situationally to different requirements
• Excellent analytical skills and problem solver mentality
• Creative thinking in designing and implementing service improvements
• Deep experience in customer handling and stakeholder management.
• Ability to handle escalations, be a trusted advisor for the customer and work closely with customers in defining solutions

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span industries and geographical regions; and our focus is to engage in the dynamics of our customers’ vertical markets; including financial services, TMT (telecommunications, media and technology), education, healthcare, retail, government, manufacturing and professional services, and apply the skills of our 6,500 employees in modernising key digital pillars; data centre and cloud services, security and network infrastructure, workspace communications and collaboration, data and information strategies, and IT operation modernisation.

We are the advocates for our customers for some of the world’s leading technology companies including Cisco, HPE, IBM, CA Technologies, NetApp, Microsoft, Oracle, VMware and ServiceNow.

The Logicalis Group has annualised revenues of $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4.3 billion.

Job summary:

We are currently looking for a Cyber Security Engineer to join our Professional Services Team delivering Security Projects encompassing predominantly NAC, Firewall, PS and 2FA solutions.

Qualified candidate is expected to have hands-on experience in delivering such solutions. This role presents itself with considerable learning opportunities on the state-of-the art security technologies. And based out of our Singapore office, this role would be reporting to the Technical Manager (Cyber Security).

1.0 Job Responsibilities:

· Develop low level design document for the project delivery detailing the scope with the sensible technology write up.

· Participate in Internal/Customer meetings to develop the LLD document

· Strong understanding with hands-on experience of multiple NAC solutions using Radius Protocol and device admin with Tacacs Protocol

· Understanding of Windows Active Directory and Integration with NAC Solutions

· Proficient with hands-on experience delivering Firewall migrations and tuning Firewall/IPS policies.

· Ability to deliver 2FA Solutions for specific use case requirements

· Proactively participate in maintaining internal knowledgebase sharing technical findings within the Team

2.0 Required Qualifications:

Essential:

· Network Access Control (dot1x) experience of HPE ClearPass, Cisco ISE

· Firewall Migration expertise across multi-vendor platforms- Cisco ASA/FTD, Palo Alto, Fortigate, Checkpoint

· Hands on experience Cisco FirePower NGIPS

· Basic understanding of Networking – Routing and Switching Protocols

· Ability to manage small scale project and ensure completion within the projected timeline

· Build Customer relationship to manage the projects in a congenial way

· Team Player highly spirited, sharing project experience with peers

· Able to learn and adopt new skills when projects warrant based on the relevant training provided

Desirable:

· Hands on experience RSA SecureID, Cisco DUO 2FA

· Hands on experience deploying in Cloud platform (i.e. AWS, Azure) is preferred

· Knowledge of CyberArk, WAF and Database Firewall is preferred

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span across industries such as financial services, TMT (Telecommunications, Media and Technology), Education, Healthcare, Retail, Government, Manufacturing and Professional services. Our focus is to engage in the dynamics of our customers’ vertical markets and apply the skills of our employees in modernising key digital pillars, Data centres and Cloud services, Security and Network Infrastructure, Workspace communications and collaboration, Data and information strategies, and IT operations modernisation.

Logicalis Group has an annualised revenue of over $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4 billion.

As we continue to grow as a business, our people are our key differentiator with our competitors, and developing and retaining our talent is a key priority for all of our businesses. We will recommend that you watch this short video with input from our employees around the world.

Logicalis - A Great Place to Work

Job Summary:

We are currently looking for a Senior Security Project Engineer to join our Professional Services Team delivering Security Projects encompassing predominantly NAC, Firewall, PS and MFA solutions. Qualified candidate is expected to have hands-on experience in delivering such solutions. This role presents itself with considerable learning opportunities on the state-of-the art security technologies.

Accountabilities:

· Develop low level design document for the project delivery detailing the scope with the sensible technology write up.

· Participate in Internal/Customer meetings to develop the LLD document.

· In-depth technical knowledge and good working experience in implementing and supporting Cisco ISE and HPE Aruba ClearPass NAC solutions.

· Prepare UAT document and perform UAT as per document.

· Understanding of Windows Active Directory and Integration with NAC Solutions

· Proficient with hands-on experience delivering Firewall migrations and fine-tuning Firewall/IPS policies.

· Ability to deliver MFA Solutions for specific use case requirements.

· Assist in reviewing Technical Design Specifications (TDS) document for security projects

· Proactively participate in maintaining internal knowledgebase sharing technical findings within the Team.

The Individual and their Experience:

· Network Access Control (dot1x) experience of Cisco ISE and HPE Aruba ClearPass (Mandatory).

· Firewall Migration expertise across multi-vendor platforms- Cisco ASA/FTD, Palo Alto, Fortigate, Checkpoint.

· Hands on experience Cisco FirePower NGIPS.

· Basic understanding of Networking – Routing and Switching Protocols.

· Ability to manage medium to large size project and ensure completion within the projected timeline.

· Build customer relationship to manage the projects in a congenial way.

· Team Player highly spirited, sharing project experience with peers.

· Able to learn and adopt new skills when projects warrant based on the relevant training provided.

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Who we are

Crédit Agricole Corporate and Investment Banking (Crédit Agricole CIB) is the corporate and investment banking arm of Crédit Agricole Group, world’s 10th largest bank by total assets.

Our Singapore center (“ISAP” or “Information Systems Asia Pacific”) is the 2nd largest IT setup (after Paris Head Office) for Crédit Agricole CIB's worldwide business. We work daily with international branches located in 30 markets by:

· Envisioning and preparing the Bank’s futures information systems

· Partnering and supporting core banking flagships and transverse areas in their large scale development projects

· Providing premium In-house Banking applications

This unique positioning empowers us to bring our core banking business a sustainable competitive advantage on the market.

We seek innovative and agile people sharing our mindset to support ambitious and forthcoming technological challenges.

Position

Computer Security Incident Response Team Expert (CSIRT Expert)

CSIRT Expert is a technical expert role within the Asia Information System Security (ISS) Team, Singapore, functionally aligned to Group’s ISS CSIRT team in Head Office, France.

ASIA ISS team oversees and supervise the Information System Security related matters in the region, including cybersecurity monitoring (SOC), incident response (CSIRT) and responding to each country's regulation proactively.

The ASIA ISS CSIRT oversees detection, control and reporting of cyber incidents when it occurs and work closely with IT Operations team to recover and restore the systems that are affected by the security incident.

In this role, CSIRT Expert role will be responsible for respondingand managing end to end Security Incident Management Lifecycle: Incident Identification, Triage, Containment, Eradication, Recovery and Lesson Learnt. Person will be technical point of contact to respond and drive the security incidents response in the region.

Job Responsibilities

The Expert has a wide spectrum of responsibilities and will be responsible for following activities (but not limited to) in day-to-day work:

• Identifying and detecting Incidents and taking immediate action on security incidents including (and not limited to) DoS attacks, malware attacks, phishing attacks, web attacks;
• End to end ownership in driving and leading Security Incident Response and Resolution activities;
• Participate and support performing forensics investigations as required to respond to the Security Incidents;
• Responding to Security Threats and Intelligence alerts & notifications from Group CERT, Regional Regulators and authorized Threat Intelligence groups and ensuring appropriate preventive and detective actions are coordinated and deployed in liaison with IT Operations teams as per the defined approach and in timely manner;
• Owning end to end coordination, communications and deployment of action plans for Threat Advisories or lesson learnt from Security Incidents;
• Prepare detailed Incident Post-mortem report and Executive Summary to document the Security Incident chronology, root cause, remediation and lesson learnt;
• Creating and updating the incident response plan (IRP) and playbooks and ensuring periodical review of playbooks to ensure the relevancy of response actions in current context, including updated information of all stakeholders involved;
• Collaborate with other Geo’s CSIRT team members on security matters and act as a backup to manage security incident and other security activities in scope as needed;
• Periodic review of security measures of Networks (Switches. Routers, Firewall, IPS, etc.) and Systems (Win*,*NIX, etc.) in support of management of vulnerabilities;
• Support and integrate with incident response, threat intelligence, and overall security strategy as needed;
• Complete all mandatory trainings as required to attain and maintain competence;
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer, zone wide.
• Support and run annual “table-top incidents” exercise with management.
• Vulnerability management: Ensure vulnerability remediation process is known followed and at the expected level of performance
• In case of severe security incident (suspected or effective attack): Coordination of investigation, mitigation, and remediation operation in relation with IT operation and application teams. on exceptional basis as occurred.

Work Schedule

• Work Hours: 8.45a.m. to 6. 30p.m (Monday to Friday) with one-hour lunch break.
• CSIRT team globally follows ‘follow-the-sun’ model and work on Critical incidents from other geographies during Asia business hours;
• Additionally, candidate may need to be involved in Crisis level Critical Security Incidents observed outside of Singapore working hours on exceptional basis.

Qualification Requirements

• Bachelors graduate or equivalent technical degree in Information Technology or Computer Science;
• Must have minimum 10 years of experience in ITand 5-7 years of working experience in cyber security incident response role managing Security Incidents and performing log analysis and forensic analysis for an enterprise level environment;
• Working experience in financial organisation is preferred;
• Expertise in SIEM and SOC Processes;
• Strong functional knowledge of enterprise level Security Detection and Prevention technologies e.g. Firewalls, IPS/IDS, Network Packet Analysis and Endpoint log analysis, server log analysis, SIEMs, Vulnerability Scanning tools, Threat intel, Anti-Malware, Phishing Prevention and Endpoint Detection & Response (EDR); Scripting knowledge using Python, Perl, PowerShell;
• Must have strong understanding of different domains of IT Security cyber kill chain, IOCs, and attack frameworks
• Ability to apply risk based approach while working on assigned responsibilities;
• Excellent in analytical and problem-solving skills, communication and documentation skills;
• Ability to work independently andpriories work as well as a part of team with minimal supervision;
• Demonstrate Strong sense of responsibility and initiative with excellent communication and interpersonal skillstime management skills;
• Excellent written and oral English language skills;

Professional Certifications:

• Must have at least one of the certifications in regards to IR (Incident First Responder) e.g. GCIH, E | CIH

Job Description:

• Participate in implementing Secure Software Development Life Cycle (SDLC), produce security solutions and security test reports, provide advice in patching vulnerabilities, and follow up with risk mitigation
• Evaluate the risk points of common application frameworks and develop security solutions to provide security support for each business line
• Embed security principles into the design of system architectures to mitigate the risks posed by new technologies and business practices
• Design artifacts, spanning design, development and implementation, into enterprise systems that describe security principles and how they relate to the overall enterprise system architecture
• Perform routine activities related to the periodic review and audit activities of infrastructure security systems

Requirements:

• Bachelor’s degree or higher in Computer Science, Information Technology, Programming & Systems Analysis, Engineering, or other related fields
• Minimum 3 years of work experience in cybersecurity-related positions
• Familiar with OWASP TOP 10 vulnerabilities, and have a deep understanding of the principle, utilization, patching and reinforcement of various vulnerabilities
• Familiar with the enterprise's SDLC process implementation, building secure SDLC for IT companies, and have been in-charge of secure SDLC for a large dev team
• Familiar with black box testing methods and paths, and able to independently complete source code auditing work
• Hands-on experience in security design checklist
• Familiar with at least one programming language such as Java, Python, PHP, Go, C, etc, and proficient in reading design documents and related codes

Preferred Experience

• Having been credited to high-risk CVEs for well-known projects
• Having contributed to the development of open-source projects. Experience working in team collaborative development and familiar with development tools
• Fluent English communication skills for effective collaboration with multinational teams

Who Are We?

At HoYoverse, we are committed to creating immersive virtual world experiences for players around the world. In addition to game products such as Genshin Impact, Honkai Impact 3rd, Tears of Themis, and Honkai: Star Rail, HoYoverse also launched the dynamic desktop software N0va Desktop, the community product HoYoLAB, and created a variety of products such as animations, comics, music, novels, and merchandise around our original creative concept.

Adhering to our mission of Tech Otakus Save the World, we have always been committed to technology research and development, exploring cutting-edge technologies, and have accumulated leading technical capabilities in cartoon rendering, artificial intelligence, cloud gaming technology, and other fields.

HoYoverse is actively engaged in globalization, with offices in Singapore, Montreal, Los Angeles, Tokyo, Seoul, and other areas.

When you apply to a position with HoYoverse, we will process your personal data. To learn more about how we process your data, we encourage you to review our comprehensive Global Applicant and Candidate Privacy Policy. This policy provides detailed insights into how your information is collected, used, and protected throughout the application process.

What You Will Do:

• Responsible for the security operations of EDR, HIDS, email sandbox and other security devices in HoYoverse office, and participate in the operation of internal user portraits, internal risk identification and other operations.
• Participate in the construction of HoYoverse global security office network and the development of the office network's automated operation platform projects.

What We Are Looking For:

• Have certain experience in internal network security or penetration testing, and have a comprehensive knowledge of information security.
• Solid foundation in basic knowledge, familiar with security vulnerability principles, operating system principles, computer networks, data structures and other basic knowledge.
• Proficient in one programming language (Golang, Java, Python, C/C++), strong hands-on ability, and able to independently complete the development tasks of a module.
• Students with experience in security terminal confrontation, anti-virus bypass, driver development and system security research are preferred.

We are an equal opportunity employer that believes diverse backgrounds are key to bringing our concepts to life. If you're looking to play a key role in creating the best immersive virtual world experience for our users, we invite you to join our team.

At InnoEdge, we work with organisations to protect them from cyber threats. We help detect new unknown cyber threats through research, fortify networks, and defend critical information infrastructures. Based in Singapore, our team consists of cybersecurity experts who use the advanced techniques and technologies to deliver cutting-edge solutions and services.

InnoEdge believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Collaboration is key to our success. We prioritise open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We're looking for individuals who share our values and are excited to join us on our cyber mission.

Responsibilities

• Perform deep research into selected applications to understand how they are designed and implemented.
• Reverse engineer or apply static and/or dynamic analysis techniques on closed source binaries to understand it’s inner workings.
• Identify weakness in systems or software that makes it possible for an attacker to abuse.
• Develop proof of concept to demonstrate the severity of the discovered vulnerability and propose mitigations.
• Develop cutting edge tools to improve and scale up the analysis process.
• Keep abreast of the latest research into application security research and reverse engineering techniques.

Minimum Qualifications:

• Diploma/bachelor’s in a computing related field or relevant practical experience
• Software development experience in a general-purpose programming language for instance, Python
• Proficiency in C/C++, assembly (x86/64)

For a more senior role, we're looking for candidates who have:

• Competency in debugging, binary reverse engineering, bypassing of anti-RE and anti-debugging techniques.
• Experience in recognizing common algorithms and patterns (in line hashing function, obfuscator) in decompiled code and ability to perform type recovery on simple to intermediate data structures.
• Ability to apply public research materials to recover file format or encoded binaries.
• Participation in public disclosure of vulnerabilities, bug bounty programs or capture the flag (CTF) competitions.

If you meet these qualifications and are passionate about cyber security, we encourage you to apply for this exciting opportunity. We offer competitive compensation, a comprehensive benefits package, and a collaborative and dynamic work environment.

Job Summary:

We are currently looking for a Cyber Security Lead Engineer who will support the School by managing and maintaining the Cyber Security, Azure Infrastructure and Microsoft 365. The appointee works with the Director of Technology & Senior Cyber Security Manager to ensure the IT requirements of the end user are met.

The role reports to the Senior Cyber Security Manager.

Requirements:

· Minimum Degree in Computer Science, Engineering or equivalent

· Minimum relevant experience of 3 years and above

· Excellent knowledge of Cyber Security, Azure and Microsoft 365

· Experience in Microsoft Intune, Microsoft Defenders and Microsoft Sentinel

· Experience in managing Azure Identities and MDM

· Able to work independently as well as a good team player with good initiative

· A positive approach to working with people

· Will accept late hours and weekend work for maintenance and patching

The school is committed to safeguarding and promoting the welfare of children and young people and expects all staff and volunteers to share this commitment. We will conduct thorough background checks on all successful applicants.

Please refer to “Careers” on our website at www.tts.edu.sg for a detailed job description.

5-day week – working hours are from 7.30 am to 4.30 pm (41.25 nett hours per week). Interested applicants, please submit an application letter and detailed resume, stating your current and expected salary, date of availability and contact number via the online system at https://careers.tts.edu.sg/careerportal/main.aspx. In your application, please provide the names and addresses of three people from whom confidential references may be obtained. Please indicate their professional relationship to you.

(Only shortlisted applicants will be notified)

CPE Registration No.: 196100114C | Period of Registration: 7 June 2023 to 6 June 2029

At InnoEdge, we work with organisations to protect them from cyber threats. We help detect new unknown cyber threats through research, fortify networks, and defend critical information infrastructures. Based in Singapore, our team consists of cybersecurity experts who use the advanced techniques and technologies to deliver cutting-edge solutions and services.

InnoEdge believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Collaboration is key to our success. We prioritise open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We're looking for individuals who share our values and are excited to join us on our cyber mission.

Responsibilities

• Technical Leadership:

a. Recommend research directions, conceptualize new security tools, and mentor junior researchers.

b. Conduct internal training workshops on analysis techniques, vulnerabilities discovery, and mechanism.

• Research and Analysis:

a. Conduct in-depth research on applications, reverse engineer closed-source code, and identify exploitable weaknesses.

b. Continuously learn about the latest application security and reverse engineering techniques.

• Development:

a. Assess and verify security through design and execute tests against industry standards CIA triad: Confidentiality, Integrity, and Availability, plus Authorization and Non-repudiation).

b. Develop proof of concept (e.g. code, scripts) to demonstrate the severity of discovered vulnerabilities and propose mitigations.

c. Develop cutting-edge tools to streamline the analysis process and improve efficiency.

• Documentation and Reporting:

a. Document findings, methodologies, and recommendations for both technical staff and executive leadership.

b. Effectively communicate findings and strategy to stakeholders.

• Contribution:

a. Contribute to the Singapore cybersecurity community through publishing whitepapers, blog posts, or presenting findings at relevant conferences.

Minimum Qualifications

• Fluent in OOP such as C++, Windows or Linux APIs/syscalls and knowledge of common file formats, network protocols and encryption. - Demonstrated ability to:
• Reverse engineer C/C++ compiled binaries and recognize common algorithms and patterns in decompiled code.
• Perform type recovery on intermediate data structures and uncover logic and indirect calls within a module.
• Bypass common anti-RE and anti-debugging techniques and uncover original code obfuscated by a public obfuscator. - For a more senior role, we're looking for candidates who has the demonstrated ability to:
• Reverse engineer sophisticated software and other programs compiled in newer languages such as Golang, Rust, newer Pythons and non-C binaries.
• Recover complex code logic and indirect calls across multiple modules or files.
• Recover undocumented file format or encoded binaries through deep analysis of the program.
• Develop custom tools to recover the logic or emulate parts of the program.
• Uncover logic of heavily obfuscated or custom packed code.

Benefits

• Training & Development
• Performance Bonus
• Medical Benefits
• Hybrid Work Arrangements

If you meet these qualifications and are passionate about cyber security, we encourage you to apply for this exciting opportunity. We offer competitive compensation, a comprehensive benefits package, and a collaborative and dynamic work environment.

• Works in commercial buildings environment.
• Good customer service skills; able to communicate with people of all levels
• Working schedule follow roster plan. 5 days week, 12hrs-shift (Fixed shift)
• Those have PC Knowledge will be a bonus for our factory.
• Job duties include issue visitors/ contractor passes, patrolling, protecting clients’ premise and access control, etc. Possess valid security license