Total 5 job vacancies by Bgc Group Pte. Ltd.

Project details:
Central effort to check and handhold project teams to make sure that they have fully onboarded to enterprise compliance platforms and have proper, sustainable processes in place to fulfil IT compliance requirements

Job responsibilities:
This role is responsible for validating security and compliance solutions for enterprise applications and databases in data centers and cloud services in accordance to IT policies. This involves providing guidance and hands-on implementation in the design, configuration and troubleshooting support in the areas of logs, patch, vulnerability and configuration management leveraging enterprise platforms and technologies.

Requirements:

• Shall have at least five (5) years of experience in at least one security and compliance technology and product such as vulnerability assessment, logs management
• Product certification in one or more of the industry toolset and platform is advantageous
• Familiarity with IT compliance standards such as CIS or DISA in a variety of technical environments, including Windows, Linux etc is advantageous
• Experience in IT audit is advantageous
• Familiarity with IM8 or equivalent ICT policies is advantageous

Job Description

• Develop and improve policies, processes and systems to achieve efficient collection of levy and effective enforcement
• Leverage on data and trends to monitor, review and fine-tune enforcement strategies as well as drive process improvement
• Perform in-depth analysis and reconciliation to identify high risk employers as well as ensure timely and accurate collection of payments
• Conduct compliance checks on egregious and recalcitrant employers
• Conduct investigations for offences
• Follow up cases with punitive / admin measures on employers
• Prepare and present reports to provide internal and external stakeholders with timely updates and information on the team’s progress and achievements
• Manage the delivery and performance of service providers/ appointed auditors assigned to process collections and conduct compliance audits to maintain high service standards
• Prepare and present reports to provide internal and external stakeholders with timely updates and information on the team’s progress and achievements

Requirements

• Tertiary qualification
• At least 3 years of relevant work experience in enforcement / audit / accounting / mass communication;
• Able to leverage on technology, tools or ground intelligence to analyse and interpret data and propose next course of actions
• Able to build strong relationships and collaborations with relevant divisions and stakeholders
• Adaptable and able to thrive in disruptions or new challenges
• Possess strong policy acumen as well as good writing, communication, project management and presentation skills
• Good analytical skills with advanced hands-on knowledge of Microsoft Excel (such as formula functions, pivot tables)
• Keen interest to keep abreast of new trends and developments to identify opportunities to improve existing policies, processes or strategies
• Driven, meticulous and able to multi-task and work independently
• Knowledge related to financial and accounting principles and risk management and controls would be advantageous

Khaty Zainal

Registration No. R22111204

A glimpse of what you’ll do:

• Monitor security systems

1. Perform non-routine security monitoring activities
2. Perform prioritization and allocation of security incidents
3. Track security monitoring rules and alerts
4. Compile regular reports on the performance of security operations

• Maintain security operations

1. Assist with the implementation of agreed security system changes and maintenance routines
2. Assist with implementation of new security programs
3. Support vulnerability, penetration testing and assessments
4. Support the development of reports on security penetration testing results
5. Recommend security products, services and/or procedures
6. Support the alignment of security systems with established service agreement standards
7. Support the implementation of new enterprise security architecture, technologies and enhancements

• Respond to queries

1. Support live response to security issues
2. Support investigation of security breaches such as forensic threat investigation
3. Support the resolution of security related issues
4. Support the simulation of user problems to identify security system drawbacks
5. Recommend security system modifications to reduce user problems

• Facilitate compliance

1. Assist with the implementation security policies, procedures and programs
2. Educate users on the security standards and practices
3. Identify improvement areas to existing security policies and procedures
4. Deliver user training

• Optimize security system performance

1. Support piloting of new tools, technologies, and processes as well as installation of hardware and software
2. Support security system testing and ongoing optimization or changes such as scheduled upgrades and updates
3. Maintain documentation of all optimization activities
4. Suggest improvements to operational processes, procedure manuals, and documentation

What you’ll need:

• Bachelor's Degree in Computer Science, IT, or equivalent fields
• At least 5 years working experience in vulnerability management, incident response, and risk assessment experience, and able to articulate security policies
• Technical expertise in the following

1. Tenable Nessus
2. SIEM
3. Rapid7
4. Wireshark
5. IDS
6. Splunk
7. Nmap
8. Burp Suite
9. ELK Stack (Elastic search, Logstash, Kibana)
10. Graylog

• Coordinate ongoing reviews of existing security programs/protocols and planned upgrades
• Monitor compliance to security policies, regulations, rules and norms
• Perform Firewall rule reviews/clean-upsas part of housekeeping initiatives
• Reviewing authorized software
• Responding to security incidents
• Experience in AD/ID administration (Active Direc/Identity) as per best security practices.
• Look at ongoing requests – assessments of installing apps.
• Exposure in IM8 or equivalent

Benefits

• AL: up to 21 days
• ML: 14 days
• Flexibenefit: $660 per year
• Bonuses: total package ranging from 14-15 months

Interested applicants: kindly submit your resume to [email protected]

A glimpse of what you’ll do:

• Monitor security systems

1. Perform non-routine security monitoring activities
2. Perform prioritization and allocation of security incidents
3. Track security monitoring rules and alerts
4. Compile regular reports on the performance of security operations

• Maintain security operations

1. Assist with the implementation of agreed security system changes and maintenance routines
2. Assist with implementation of new security programs
3. Support vulnerability, penetration testing and assessments
4. Support the development of reports on security penetration testing results
5. Recommend security products, services and/or procedures
6. Support the alignment of security systems with established service agreement standards
7. Support the implementation of new enterprise security architecture, technologies and enhancements

• Respond to queries

1. Support live response to security issues
2. Support investigation of security breaches such as forensic threat investigation
3. Support the resolution of security related issues
4. Support the simulation of user problems to identify security system drawbacks
5. Recommend security system modifications to reduce user problems

• Facilitate compliance

1. Assist with the implementation security policies, procedures and programs
2. Educate users on the security standards and practices
3. Identify improvement areas to existing security policies and procedures
4. Deliver user training

• Optimize security system performance

1. Support piloting of new tools, technologies, and processes as well as installation of hardware and software
2. Support security system testing and ongoing optimization or changes such as scheduled upgrades and updates
3. Maintain documentation of all optimization activities
4. Suggest improvements to operational processes, procedure manuals, and documentation

What you’ll need:

• Bachelor's Degree in Computer Science, IT, or equivalent fields
• At least 5 years working experience in vulnerability management, incident response, and risk assessment experience, and able to articulate security policies
• Coordinate ongoing reviews of existing security programs/protocols and planned upgrades
• Monitor compliance to security policies, regulations, rules and norms
• Perform Firewall rule reviews/clean-upsas part of housekeeping initiatives
• Reviewing authorized software
• Responding to security incidents
• Experience in AD/ID administration as per best security practices.
• Look at ongoing requests – assessments of installing apps.
• Exposure in IM8 or equivalent

Benefits

• AL: up to 21 days
• ML: 14 days
• Flexibenefit: $660 per year
• Bonuses: total package ranging from 14-15 months

Interested applicants: kindly submit your resume to [email protected]

A glimpse of what you’ll do:

• Reporting to Group Information Security Office .
• Lead in information security risk advisory for projects.
• Collaborate with Business Project Sponsors and solutions architect to review the system architecture and system security to identity IT security risks.
• Assess risk mitigation measures and provide effective challenge and propose viable alternatives if required;
• Conduct thematic review on information security and cybersecurity controls to provide security assurance for information systems.
• Establish and maintain application system risk assessment processes, procedures and checklists.
• Assist Group CISO with yearly review of information system risk assessment methodologies and processes.

What you’ll need:

• Bachelor's Degree in Computer Science, IT, or equivalent fields
• At least 5 years of experience in IT security, information security and cybersecurity.
• Good working knowledge with network, application and platform security technologies and cybersecurity architecture.
• Good working knowledge on security baseline standards for standard platform operating systems, databases, and network technologies.
• Good working knowledge of common SDLC models (such as waterfall model and agile), security-by-design framework, and security management frameworks such as ISO/IEC 27001, NIST Cybersecurity Framework.
• Good knowledge in IOT security, Cloud computing security.
• Self-motivated with strong interpersonal and stakeholder management skills.
• Good written and communication skills.
• CISSP, CISA, CRISC and /or OSCP advantageous.

Benefits

• AL: up to 21 days
• ML: 14 days
• Flexibenefit: $660 per year
• Bonuses: total package ranging from 14-15 months

Interested applicants: kindly submit your resume to [email protected]