Total 5 staffing consultant job vacancies in Legal / Public / Security category in Singapore

Responsibilities:

• Develop and maintain common standards, methodologies and best practices for security management to ensure IT systems are designed with due considerations for security
• Ensure security best practices and compliance standards are implemented on IT system
• Lead in the design and implementation of IT security platforms and their associated software which may include access control solutions, identity and access management platforms, data protection technologies, anti-malware, vulnerability management, security monitoring and compliance tools
• Liaise with internal and external stakeholders on cyber security issues to keep everyone abreast of expectations, project/issue status and completion
• Perform security review of IT system
• Provide consultancy and advice on IT security architecture and design considerations to IT project teams
• Strategic planning for IT security investments and technology adoption to maximize effectiveness of IT security controls against rapidly evolving threats
• Track and analyse IT security metrics for optimal effectiveness and benchmarking

Requirements:

• 8 or more years of working experience in IT Security
• Background in Engineering or Computer Science
• Experience in providing security advisory and consultancy on application and services, including the design, development, implementation and/or management of the system
• Experience in security architecture of cloud native applications preferred
• Experience with DevSecOps methodologies and processes preferred
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc
• Relevant certifications in networking or cyber security, e.g. CISSP, CISM, CISA, CRSIS preferred
• Understanding of CI/CD tools

Responsibilities:

• Develop and maintain common standards, methodologies and best practices for security management to ensure IT systems are designed with due considerations for security
• Ensure security best practices and compliance standards are implemented on IT system
• Lead in the design and implementation of IT security platforms and their associated software which may include access control solutions, identity and access management platforms, data protection technologies, anti-malware, vulnerability management, security monitoring and compliance tools
• Liaise with internal and external stakeholders on cyber security issues to keep everyone abreast of expectations, project/issue status and completion
• Perform security review of IT system
• Provide consultancy and advice on IT security architecture and design considerations to IT project teams
• Strategic planning for IT security investments and technology adoption to maximize effectiveness of IT security controls against rapidly evolving threats
• Track and analyse IT security metrics for optimal effectiveness and benchmarking

Requirements:

• 8 or more years of working experience in IT Security
• Background in Engineering or Computer Science
• Experience in providing security advisory and consultancy on application and services, including the design, development, implementation and/or management of the system
• Experience in security architecture of cloud native applications preferred
• Experience with DevSecOps methodologies and processes preferred
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc
• Relevant certifications in networking or cyber security, e.g. CISSP, CISM, CISA, CRSIS preferred
• Understanding of CI/CD tools

Responsibilities:

• Develop and maintain common standards, methodologies and best practices for security management to ensure IT systems are designed with due considerations for security
• Ensure security best practices and compliance standards are implemented on IT system
• Lead in the design and implementation of IT security platforms and their associated software which may include access control solutions, identity and access management platforms, data protection technologies, anti-malware, vulnerability management, security monitoring and compliance tools
• Liaise with internal and external stakeholders on cyber security issues to keep everyone abreast of expectations, project/issue status and completion
• Perform security review of IT system
• Provide consultancy and advice on IT security architecture and design considerations to IT project teams
• Strategic planning for IT security investments and technology adoption to maximize effectiveness of IT security controls against rapidly evolving threats
• Track and analyse IT security metrics for optimal effectiveness and benchmarking

Requirements:

• 8 or more years of working experience in IT Security
• Background in Engineering or Computer Science
• Experience in providing security advisory and consultancy on application and services, including the design, development, implementation and/or management of the system
• Experience in security architecture of cloud native applications preferred
• Experience with DevSecOps methodologies and processes preferred
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc
• Relevant certifications in networking or cyber security, e.g. CISSP, CISM, CISA, CRSIS preferred
• Understanding of CI/CD tools

Summary

The Security consultant is a pivotal technical role essential for facilitating Zero Trust deployment initiatives. This role encompasses conducting thorough gap analyses, proficient project management, and delivering technical advisories. Collaboration with cross-functional regional teams across the Asia-Pacific region is integral to this role. The ideal candidate will exhibit a robust understanding of the Zero Trust framework (CISA Zero Trust Maturity Model and Microsoft Zero Trust Model), possess broad security experience, analytical acumen, and demonstrate a proactive approach to project management. This position will report to HQ.

Responsibilities:

• Cross-Functional Collaboration: Collaborate closely with cross-functional teams across the APAC region to ensure seamless integration and alignment of Zero Trust initiatives with broader organizational objectives.
• Documentation: Maintain accurate documentation of Zero Trust deployment processes, procedures, and best practices for reference and future optimization.
• Gap Analysis: Conduct comprehensive gap analyses to identify vulnerabilities and areas for improvement within existing security frameworks in APAC region. Perform APAC’s Information Security Risk Assessment in accordance with the Risk Register Policy and support information security risk assessments for APAC to determine the gaps to reach Zero Trust.
• Overall Security Posture: Support and maintain APAC’s information security strategy and ensure it is aligned with Global security strategy based on Zero Trust
• Project Management: Effectively manage Zero Trust deployment projects, including planning, research, monitoring, and reporting.
• Technical Advisory: Provide expert technical guidance and advisory services to stakeholders, facilitating informed decision-making regarding Zero Trust implementation, although not responsible for implementation, must comprehend the technical aspects of security technology and planning.
• Zero Trust Deployment Support: Lead and support Zero Trust deployment initiatives, ensuring alignment with organizational objectives and security best practices, Possess a strong background in security with a focus on general high-level knowledge.

Additional General Responsibilities:

• Build and develop cross functional relationships within APAC to engender support of security projects.
• Collaborate with APAC’s legal and compliance to ensure APAC is compliant with local information security laws and regulations.
• Collaboratively work with APAC to develop and implement processes that meet Global information policy and standards.
• Coordinate technical input and recommendations from GISS to APAC
• Encourage the development of innovative ideas that solve root causes of identified problems.
• Promote an information security-conscious culture.
• Promote the use of ‘right-sized’ solutions for APAC, including Global Shared Information Security Services, to drive increased standardization and effective use of security resources.
• Support information security activities across APAC (align activities where possible, foster joint plans, etc.).
• Support the efforts of APAC’s Security delivery resources to execute to expectations.
• Work on global initiatives as part of working groups (e.g.: standards refresh, new technology discussion, etc.)

Skills/Qualifications:

• At least 5+ years of experience in the cybersecurity industry.
• Consultation capability in related technology and or related service to customer.
• Consulting experience in Cyber domain.
• Great communication and interpersonal skills
• Proactive approach to problem-solving and project management, with a strong commitment to achieving objectives and deadlines.
• Project management experience.
• Proven experience in security engineering, with a focus on Zero Trust deployment.

Technology Proficiency:

• Azure Active Directory (AAD), identity management and MFA
• Core expertise in Microsoft technologies.
• Data Protection, Microsoft Information Protection (MIP) classifying, labelling, and protecting sensitive data.
• Microsoft Endpoint Manager
• Network Security, Azure Virtual Network and Azure Firewall

Summary

The Security consultant is a pivotal technical role essential for facilitating Zero Trust deployment initiatives. This role encompasses conducting thorough gap analyses, proficient project management, and delivering technical advisories. Collaboration with cross-functional regional teams across the Asia-Pacific region is integral to this role. The ideal candidate will exhibit a robust understanding of the Zero Trust framework (CISA Zero Trust Maturity Model and Microsoft Zero Trust Model), possess broad security experience, analytical acumen, and demonstrate a proactive approach to project management. This position will report to HQ.

Responsibilities:

• Cross-Functional Collaboration: Collaborate closely with cross-functional teams across the APAC region to ensure seamless integration and alignment of Zero Trust initiatives with broader organizational objectives.
• Documentation: Maintain accurate documentation of Zero Trust deployment processes, procedures, and best practices for reference and future optimization.
• Gap Analysis: Conduct comprehensive gap analyses to identify vulnerabilities and areas for improvement within existing security frameworks in APAC region. Perform APAC’s Information Security Risk Assessment in accordance with the Risk Register Policy and support information security risk assessments for APAC to determine the gaps to reach Zero Trust.
• Overall Security Posture: Support and maintain APAC’s information security strategy and ensure it is aligned with Global security strategy based on Zero Trust
• Project Management: Effectively manage Zero Trust deployment projects, including planning, research, monitoring, and reporting.
• Technical Advisory: Provide expert technical guidance and advisory services to stakeholders, facilitating informed decision-making regarding Zero Trust implementation, although not responsible for implementation, must comprehend the technical aspects of security technology and planning.
• Zero Trust Deployment Support: Lead and support Zero Trust deployment initiatives, ensuring alignment with organizational objectives and security best practices, Possess a strong background in security with a focus on general high-level knowledge.

Additional General Responsibilities:

• Build and develop cross functional relationships within APAC to engender support of security projects.
• Collaborate with APAC’s legal and compliance to ensure APAC is compliant with local information security laws and regulations.
• Collaboratively work with APAC to develop and implement processes that meet Global information policy and standards.
• Coordinate technical input and recommendations from GISS to APAC
• Encourage the development of innovative ideas that solve root causes of identified problems.
• Promote an information security-conscious culture.
• Promote the use of ‘right-sized’ solutions for APAC, including Global Shared Information Security Services, to drive increased standardization and effective use of security resources.
• Support information security activities across APAC (align activities where possible, foster joint plans, etc.).
• Support the efforts of APAC’s Security delivery resources to execute to expectations.
• Work on global initiatives as part of working groups (e.g.: standards refresh, new technology discussion, etc.)

Skills/Qualifications:

• At least 5+ years of experience in the cybersecurity industry.
• Consultation capability in related technology and or related service to customer.
• Consulting experience in Cyber domain.
• Great communication and interpersonal skills
• Proactive approach to problem-solving and project management, with a strong commitment to achieving objectives and deadlines.
• Project management experience.
• Proven experience in security engineering, with a focus on Zero Trust deployment.

Technology Proficiency:

• Azure Active Directory (AAD), identity management and MFA
• Core expertise in Microsoft technologies.
• Data Protection, Microsoft Information Protection (MIP) classifying, labelling, and protecting sensitive data.
• Microsoft Endpoint Manager
• Network Security, Azure Virtual Network and Azure Firewall