Total 7 information security analyst job vacancies in F&B / Tourism / Hospitality category in Tuas, Singapore

The primary objective of this role is to provide Health, Safety & Security (HSS) specialist services to our local offices and activities in APAC and to provide support to the global Head of Workplace Risk and Compliance.

The HSS Specialist will implement programs to manage HSS risk as well as meeting or exceeding local relevant regulatory requirements. They will provide technical expertise in multiple HSS disciplines and serve as an effective member of cross-functional project teams and office expansions by providing guidance on all HSS matters in design, risk assessment and incident investigation. 

Your Mission:

• Ensuring HSS compliance in the Wise APAC locations and being a core member of the Wise HSS internal audit team.

• Serving as the technical resource for HSS by providing regulatory guidance, training, and operational consultation to internal partners and external stakeholders.

• Supporting the Wise Head of Workplace Risk and Compliance to implement policies, procedures and projects at a global level.

• Implementing proactive programs to reduce injuries and illnesses and being accountable for HSS risk assessments in the APAC region.

• Providing HSS support and guidance to regional managers.

• Supporting and assisting the wider Workplace Team in the accomplishment of plans, objectives and agreed targets.

• Monitoring HSS performance in the APAC region and providing reports at site and country level.

• Acting as a core member of the Workplace Incident management team and responding to crisis and emergency situations relating to colleagues’ physical safety or security.

• Assisting Workplace Business Continuity Management (BCM) teams to respond to emergencies by providing specialist advice and assistance on all aspects of HSS.

• Supporting the development of Wise sustainability reports and participating in the ESG committee where appropriate.

ST Engineering is a global technology, defence and engineering group with offices across Asia, Europe, the Middle East and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives. Our dedication to excellence and our strong track record have earned us a distinctive reputation for quality and trust spanning across the aerospace, smart city, defence and public security segments. Headquartered in Singapore, ST Engineering ranks among the largest companies listed on the Singapore Exchange.

Join our Cyber Team

We are an industry leader in cybersecurity with over two decades of experience, we deliver a holistic suite of trusted cybersecurity solutions to empower cyber resilience for government and ministries, critical infrastructures, and commercial enterprises. Backed by our indigenous capabilities and deep domain expertise, we offer robust cyber-secure products and services in cryptography, cybersecurity engineering, digital authentication, SCADA protection, audit and compliance. We specialise in the design and build of security operations centres for cybersecurity professionals and provide managed security services to strengthen the cybersecurity posture of our government and enterprise customers.

We are seeking a highly skilled and experienced Digital Forensics & Incident Response Specialist to join our cybersecurity team. This role requires hands-on technical expertise in analyzing security incidents, conducting proactive threat hunts, and investigating breaches.

About the Role:

Digital Forensics & Incident Response (DFIR)

• Conduct comprehensive digital forensic investigations of security incidents, including malware infections, data breaches, insider threats, and advanced persistent threats (APTs).
• Analyze and interpret security incidents and vulnerabilities using forensic tools and methodologies.
• Collect, preserve, and analyze digital evidence from various systems and environments.
• Develop and execute incident response plans, provide guidance on containment, eradication, and recovery processes.
• Document findings and produce detailed investigation reports for internal stakeholders and external authorities, if necessary.
• Collaborate with the legal and compliance teams to ensure evidence handling follows industry standards and regulations. Threat Hunting
• Participate and assist in the buildup of the threat hunting capability.
• Participate/Support the development of threat hunting systems and tools to automate or facilitate threat hunting.
• Lead/participate in the threat hunting projects to hunt for unknown threats focusing on discovering new or unknown Tactics, Techniques and Procedures (TTPs).
• Develop and use threat hunting methodologies and tools to identify vulnerabilities, anomalies, and suspicious activities.
• Identify and research emerging threats, vulnerabilities, and attack techniques to stay ahead of attackers.
• Utilize threat intelligence feeds, behavior analytics, and machine learning to improve detection and hunting capabilities.

Requirements:

• Minimum of 4 years of experience in cybersecurity, with a focus on Digital Forensics, Incident Response, and Threat Hunting.
• Relevant industry certifications such as GIAC Certified Forensic Analyst (GCFA), Certified Forensic Examiner (GCFE), Offensive Security Certified Professional (OSCP), Certified Information Systems Security Professional (CISSP), or equivalent certifications is a plus.
• Strong knowledge of forensic tools (e.g., EnCase, FTK, X-Ways, Axiom) and threat hunting methodology.
• Hands-on experience with SIEM (Security Information and Event Management), EDR (Endpoint Detection and Response), and other security tools.
• Good understanding of network protocols, operating systems (Windows, Linux, macOS), and cloud platforms (AWS, Azure, GCP).
• Proficiency in scripting languages (e.g., Python, PowerShell) to automate incident response and threat hunting tasks.
• Strong analytical, problem-solving, and communication skills.
• Ability to work under pressure and manage multiple high-priority tasks in a dynamic environment.
• Knowledge of cybersecurity frameworks and standards such as NIST, ISO 27001, and MITRE ATT&CK.
• Work Location: Jurong East

Find out more: https://www.stengg.com/cybersecurity

ST Engineering believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Control Risks is seeking an Associate Director to play a key role in growing the crisis and security consulting practice across Southeast Asia (SEA). This position will focus on developing deep and profitable client relationships, driving the growth of the crisis and security consulting practice in SEA, and ensuring quality service delivery across our range of consulting engagements, including crisis management, crisis response, business continuity, and security risk management issues.

Building and maintaining successful relationships with existing Control Risks clients will be important for this role and identifying and pursuing new clients and business development opportunities to expand the crisis management, business continuity and security risk management opportunities in the region is crucial.

Role tasks and responsibilities:

• Cultivate, grow and deepen Control Risks’ relationships with security and risk buyers in our Client organisations, being seen as their “go to” person within Control Risks.
• Identify, nurture and help win new business development opportunities.
• Actively lead on business continuity and crisis management projects from first client enquiry to proposal development, task servicing, quality assurance and project closure
• Project manage and, utilising a regional team of consultants and experts, deliver the full range of security consulting and services engagements in Southeast Asia and across Asia broadly, when required.
• Deliver consultancy services to clients by developing innovative solutions to complex risks. You will be responsible for scoping and delivering across a broad range of business risk activities, including crisis management and business continuity workshops, audits, gap analyses and risk assessments
• Provide mentorship to junior staff, maximising use of resources. Ensure continuous skills transfer, coaching and planning is provided.
• Work collaboratively with country management, marketing teams and other practises to develop a consistent, credible and highly visible brand.
• Represent Control Risks as a thought leader through market engagement via channels such as social media, professional organizations and industry events.
• Seek innovative ways to improve services we offer to clients.
• Ensure that practices, polices, strategy and services represent the client best interest.

Essential:

• Experience in a corporate/consulting environment working with multinational companies in Singapore specifically, and across SEA generally
• Strong commercial expertise, analytical (financial management, legal and contractual skills), leadership
• Ability to build relationships with senior-level clients and other consultants globally
• Experience in a multi-cultural environment and demonstrated cross-cultural awareness
• In depth knowledge of commercial/operational conditions across South Asia

Preferred:

• Experience in one or more of the following: business continuity, crisis management, risk assessment following recognized international standards, security planning and framework development
• Experience working in multi-disciplinary teams
• Experience managing crises and/or complex problems
• Demonstrable experience in applying risk management methodology such as (ISO 22301, ISO31000, SOC 2, ISO 27001, etc.)

Qualifications and specialist skills:

• Educated Bachelor’s degree or equivalent
• Strong commercial expertise, analytical (financial management, legal and contractual skills), leadership
• Good client (internal and external) management and consulting skills
• Effective decision making and judgement
• Excellent planning and organizational skills
• Assertiveness and drive with strong influencing skills
• Strong interpersonal skills-building trust and rapport
• Excellent communication skills – written and oral (informal and presentation)
• IT literacy – MS office packages, advanced Excel
• Strong management and communication skills (including concise and accurate written skills)
• Project management skills

• Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarised in the full job offer.
• We operate a discretionary global bonus scheme that incentivises, and rewards individuals based on company and individual performance.
• Control Risks supports hybrid working arrangements, wherever possible, that emphasise the value of in-person time together - in the office and with our clients - while continuing to support flexible and remote working.
• As an equal opportunities employer, we encourage suitably qualified applicants from a wide range of backgrounds to apply and join us and are fully committed to equal treatment, free from discrimination, of all candidates throughout our recruitment process.

ST Engineering is a global technology, defence and engineering group with offices across Asia, Europe, the Middle East and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives. Our dedication to excellence and our strong track record have earned us a distinctive reputation for quality and trust spanning across the aerospace, smart city, defence and public security segments. Headquartered in Singapore, ST Engineering ranks among the largest companies listed on the Singapore Exchange.

Join our Cyber Team

We are an industry leader in cybersecurity with over two decades of experience, we deliver a holistic suite of trusted cybersecurity solutions to empower cyber resilience for government and ministries, critical infrastructures, and commercial enterprises. Backed by our indigenous capabilities and deep domain expertise, we offer robust cyber-secure products and services in cryptography, cybersecurity engineering, digital authentication, SCADA protection, audit and compliance. We specialise in the design and build of security operations centres for cybersecurity professionals and provide managed security services to strengthen the cybersecurity posture of our government and enterprise customers.

We are seeking a highly skilled and experienced Digital Forensics & Incident Response Specialist to join our cybersecurity team. This role requires hands-on technical expertise in analyzing security incidents, conducting proactive threat hunts, and investigating breaches.

About the Role:

Digital Forensics & Incident Response (DFIR)

• Conduct comprehensive digital forensic investigations of security incidents, including malware infections, data breaches, insider threats, and advanced persistent threats (APTs).
• Analyze and interpret security incidents and vulnerabilities using forensic tools and methodologies.
• Collect, preserve, and analyze digital evidence from various systems and environments.
• Develop and execute incident response plans, provide guidance on containment, eradication, and recovery processes.
• Document findings and produce detailed investigation reports for internal stakeholders and external authorities, if necessary.
• Collaborate with the legal and compliance teams to ensure evidence handling follows industry standards and regulations. Threat Hunting
• Participate and assist in the buildup of the threat hunting capability.
• Participate/Support the development of threat hunting systems and tools to automate or facilitate threat hunting.
• Lead/participate in the threat hunting projects to hunt for unknown threats focusing on discovering new or unknown Tactics, Techniques and Procedures (TTPs).
• Develop and use threat hunting methodologies and tools to identify vulnerabilities, anomalies, and suspicious activities.
• Identify and research emerging threats, vulnerabilities, and attack techniques to stay ahead of attackers.
• Utilize threat intelligence feeds, behavior analytics, and machine learning to improve detection and hunting capabilities.

Requirements:

• Minimum of 4 years of experience in cybersecurity, with a focus on Digital Forensics, Incident Response, and Threat Hunting.
• Relevant industry certifications such as GIAC Certified Forensic Analyst (GCFA), Certified Forensic Examiner (GCFE), Offensive Security Certified Professional (OSCP), Certified Information Systems Security Professional (CISSP), or equivalent certifications is a plus.
• Strong knowledge of forensic tools (e.g., EnCase, FTK, X-Ways, Axiom) and threat hunting methodology.
• Hands-on experience with SIEM (Security Information and Event Management), EDR (Endpoint Detection and Response), and other security tools.
• Good understanding of network protocols, operating systems (Windows, Linux, macOS), and cloud platforms (AWS, Azure, GCP).
• Proficiency in scripting languages (e.g., Python, PowerShell) to automate incident response and threat hunting tasks.
• Strong analytical, problem-solving, and communication skills.
• Ability to work under pressure and manage multiple high-priority tasks in a dynamic environment.
• Knowledge of cybersecurity frameworks and standards such as NIST, ISO 27001, and MITRE ATT&CK.
• Work Location: Jurong East

Find out more: https://www.stengg.com/cybersecurity

ST Engineering believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Job scope and responsibility:

Lead to establish, implement and maintain a sound energy management system and processe as part of energy & resource conservations, optimization and reporting.

Lead to establish, implement and maintain a sound security management system to secure the workplace gazette as a Critical Infrastructure

Determine, assess and implement compliance obligations under the legal and other requirements framework to avoid non-conformances that could result and /or lead to accountability

Specific Tasks and Duties:

A. Establish, implement and maintain an energy management system that is in compliance with processes and achieve effectiveness through audits and actions to mitigate and rectify lapses to avoidance legal and contracture non-conformances

1. Establish implement and maintain ISO50001 energy management system, practices and achieve third party certifications for compliance to the Energy Conservation Act
2. Supervise and conduct works in compliance with the legal and contracture framework
3. Appointed as the Energy Manager for the plant. Obtain energy and efficiency management data for Management review and monitoring before submission to authority
4. Lead, establish, implement energy management initiatives as identified through risk to establish opportunities for improvements, create awareness and promote good practices
5. Ensure all statutory licenses are kept up to date and remain valid through reporting and workplan to carry out arrangements for the necessary submission, renewal, test, reports and audits
6. Submit monthly reports to Management and PUB maintaining necessary documentation and records
7. Establish, implement, maintain task schedule and work plan as part of Key Performance Indicator (KPI)
8. Collect, compile and analyze plant operating data to identify potential savings and make appropriate recommendations and proposals
9. Monitor plant performance and efficiency to identify areas and make recommendations for improvement to plant efficiency and performance

B. Establish implementation and maintain the Security management system in compliance to the process as a Critical Infrastructure and to achieve effectiveness through audits and actions to mitigate and rectify lapses to avoid contracture and legal non-conformances

1. Establish, implement and maintain the Security Plan and Management System for the plant
2. Report to Responsible Person to keep up-to-date, authority approval and matters pertaining to security approved plans and implementations
3. Lead, establish, implement and maintain security system such as CCTV, access control, security requirements, securing of workplaces complying to infrastructure protection requirements through risk assessment and opportunities for infrastructure improvements
4. Management of security service providers (arm guards) and service contracts conforming to PUB and MHA requirements
5. Plan budget and cost approval for security contracts and security infrastructure maintenance regime
6. Appointed as Qualify Persons (QP) under the Radiation Protection Act and NEA radiation licences for X-ray bag screening machine through implementation of Radiation Protection Plan (RPP)
7. Lead, establish, implement, plan and conduct the security drills and exercises to ensure the security service providers competency in the Security Standard Operating Procedures (SOP)
8. Liaison with the Jurong Island Security (JTC) of the Jurong Island Passes and security measures by MHA, PUB, Police, SGsecure and as a point of contact in all security issues

Requirements

Qualifications:

Bachelor's degree in Environmental Science, Engineering, Energy Management, or a related field.

Minimum 3-5 years of experience in energy management or a related field.

Strong knowledge of energy efficiency technologies, renewable energy systems, and sustainability practices.

Familiarity with local regulations and incentives related to energy management in Singapore.

Excellent analytical, problem-solving, and project management skills.

Strong communication and interpersonal skills to engage stakeholders effectively.

Preferred Qualifications:

Professional certifications in energy management (e.g., Certified Energy Manager - CEM).

Radiation Worker Registration to carry out radiation work (R1).

Experience in data analytics and energy management software.

Knowledge of Building Management Systems (BMS) and energy monitoring tools.

Work location: Jurong Island

ABOUT THE NATIONAL INSTITUTE OF EDUCATION (NIE)

The National Institute of Education (NIE), Singapore, is Singapore’s national teacher education institute and we are proud to be an integral part of the nation’s education service. We play a key role in the preparation of teachers and in the provision of teacher professional and school leadership development programmes. We are committed to our vision of being An Institute of Distinction: Leading the Future of Education and our mission to Inspire Learning, Transform Teaching and Advance Research.

NIE invite suitable candidates to join the Academic Computing and Information Services division (ACIS) as the Manager/Assistant Manager, Administration.

The Manager/Assistant Manager, Administration will provide administrative and secretariat support to the division, assist in implementing ICT initiatives in the institute and promote initiatives through various programmes and media in pursuit of its Vision and Mission. He/she will support the core administrative functions and manage the day-to-day operations in the Divisional Director’s Office.

Responsibilities:

Administrative Support:

• Strategic Planning: Assist in collecting, analysing, and evaluating data to support the division's strategic planning and decision-making processes.
• Policy and Procedure Development: Collaborate with the Divisional Director to review, develop, and establish internal procedures, guidelines, and policies. Assist in drafting reports and papers as needed.
• Email Management: Oversee the Division’s role-based email accounts, responding to queries promptly and ensuring communications are managed efficiently.
• Event Planning: Support the planning, coordination, and execution of events and welfare programs for the division, ensuring all activities are well-organized.
• General Administration: Perform administrative and logistical tasks as assigned by the People Manager to ensure smooth day-to-day operations of the office.

Budget & Financial Process Support:

• Budget Management: Manage the office's budget, including procurement, inventory, and purchasing of office supplies. Ensure that all expenditures align with approved budgets.
• Expenditure Tracking: Regularly track and report on expenditures, ensuring they adhere to financial guidelines. Provide budgetary information to support decision-making and planning.
• Billing Coordination: Coordinate, verify, and process billing instructions for ICT services provided by the division, ensuring accuracy and timeliness.

Personal Assistance to Divisional Director:

• Schedule Management: Manage the Divisional Director’s calendar, schedule meetings, and make travel arrangements. Ensure all appointments and deadlines are efficiently handled.
• Administrative Support: Handle the Divisional Director’s claims and training requests. Maintain confidential records and documents with utmost discretion.
• Leadership Team Coordination: Work closely with other PAs and administrative staff to provide seamless support across the NIE senior leadership team.

Secretariat Support:

• Committee Assistance: Provide secretariat support for committees chaired by the Divisional Director. Assist in preparing status reports, presentations, and other documentation related to committee activities.
• Meeting Coordination: Ensure meetings are conducted smoothly by handling logistics, preparing agendas, and documenting key decisions. Monitor and follow up on action items arising from meetings.

Data Protection Officer (DPO) Support:

• PDPA Compliance: Assist the NIE Data Protection Officer (DPO) in implementing and monitoring compliance with PDPA (Personal Data Protection Act) regulations. Coordinate with the NTU DPO office on policy updates and assessments.
• Documentation and Reporting: Prepare status reports, papers, and presentations on PDPA-related matters. Maintain documentation of all data protection activities and communications.
• Inquiry Management: Manage the DPO mailbox, ensuring timely responses to data protection inquiries. Document all relevant correspondence to maintain an accurate record.
• Incident Support: Support departments in managing data breach incidents, ensuring all steps are properly documented. Collaborate with the NIE DPO to guide NIE faculty and staff and escalate issues to the NTU DPO office when necessary.
• Awareness Initiatives: Assist in creating educational infographics and other materials to raise awareness about PDPA compliance within the NIE community.

Requirements:

• A university degree in Business, Social Sciences, or equivalent.
• A minimum of three years of relevant work experience in administration. Experience in Higher Education would be an advantage.
• Excellent written and verbal communication skills.
• Strong planning, organisational and problem-solving skills.
• Proficient in Microsoft Office Applications and Adobe.
• Proficient in graphic design tools such as Adobe Photoshop or Adobe Illustrator is an advantage.
• Meticulous and ability to multi-task.
• Ability to work independently and in a team.
• Good people management skills.

Other Information

NIE staff can take chartered buses at their own expense from or near their home to the NIE campus. This is subject to the availability of bus routes and seats.

ST Engineering is a global technology, defence and engineering group with offices across Asia, Europe, the Middle East and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives. Our dedication to excellence and our strong track record have earned us a distinctive reputation for quality and trust spanning across the aerospace, smart city, defence and public security segments. Headquartered in Singapore, ST Engineering ranks among the largest companies listed on the Singapore Exchange.

Join our Cyber Team

We are an industry leader in cybersecurity with over two decades of experience, we deliver a holistic suite of trusted cybersecurity solutions to empower cyber resilience for government and ministries, critical infrastructures, and commercial enterprises. Backed by our indigenous capabilities and deep domain expertise, we offer robust cyber-secure products and services in cryptography, cybersecurity engineering, digital authentication, SCADA protection, audit and compliance. We specialise in the design and build of security operations centres for cybersecurity professionals and provide managed security services to strengthen the cybersecurity posture of our government and enterprise customers.

We are seeking a highly skilled and experienced Digital Forensics & Incident Response Specialist to join our cybersecurity team. This role requires hands-on technical expertise in analyzing security incidents, conducting proactive threat hunts, and investigating breaches.

About the Role:

Digital Forensics & Incident Response (DFIR)

• Conduct comprehensive digital forensic investigations of security incidents, including malware infections, data breaches, insider threats, and advanced persistent threats (APTs).
• Analyze and interpret security incidents and vulnerabilities using forensic tools and methodologies.
• Collect, preserve, and analyze digital evidence from various systems and environments.
• Develop and execute incident response plans, provide guidance on containment, eradication, and recovery processes.
• Document findings and produce detailed investigation reports for internal stakeholders and external authorities, if necessary.
• Collaborate with the legal and compliance teams to ensure evidence handling follows industry standards and regulations. Threat Hunting
• Participate and assist in the buildup of the threat hunting capability.
• Participate/Support the development of threat hunting systems and tools to automate or facilitate threat hunting.
• Lead/participate in the threat hunting projects to hunt for unknown threats focusing on discovering new or unknown Tactics, Techniques and Procedures (TTPs).
• Develop and use threat hunting methodologies and tools to identify vulnerabilities, anomalies, and suspicious activities.
• Identify and research emerging threats, vulnerabilities, and attack techniques to stay ahead of attackers.
• Utilize threat intelligence feeds, behavior analytics, and machine learning to improve detection and hunting capabilities.

Requirements:

• Minimum of 4 years of experience in cybersecurity, with a focus on Digital Forensics, Incident Response, and Threat Hunting.
• Relevant industry certifications such as GIAC Certified Forensic Analyst (GCFA), Certified Forensic Examiner (GCFE), Offensive Security Certified Professional (OSCP), Certified Information Systems Security Professional (CISSP), or equivalent certifications is a plus.
• Strong knowledge of forensic tools (e.g., EnCase, FTK, X-Ways, Axiom) and threat hunting methodology.
• Hands-on experience with SIEM (Security Information and Event Management), EDR (Endpoint Detection and Response), and other security tools.
• Good understanding of network protocols, operating systems (Windows, Linux, macOS), and cloud platforms (AWS, Azure, GCP).
• Proficiency in scripting languages (e.g., Python, PowerShell) to automate incident response and threat hunting tasks.
• Strong analytical, problem-solving, and communication skills.
• Ability to work under pressure and manage multiple high-priority tasks in a dynamic environment.
• Knowledge of cybersecurity frameworks and standards such as NIST, ISO 27001, and MITRE ATT&CK.
• Work Location: Jurong East

Find out more: https://www.stengg.com/cybersecurity

ST Engineering believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.