Total 10 human resources job vacancies in Legal / Public / Security category in Singapore

Responsibilities

• Responsible for implementing systems and network security related projects and work with customer, vendors, presales and project team during the deployment

• Gather business and/or system requirements for cyber security to plan, design and implement technical solutions in accordance with the specifications & service levels.

• Demonstrate in-depth experience and technical proficiency in systems and network security solutions for enterprise environments and provide expertise to service delivery teams on systems and network security domain

• Coordinate and/or manage project deployment tasks to include design, implementation integration, formal testing, configuration changes and specification/as-built documentations.

• Work closely with the project manager to coordinate and transit all technical deliverables into production environment.

• Responding to all system and/or network security breaches.

• Ensuring that the organization's data and infrastructure are protected by enabling the appropriate security controls.

• Participating in the change management process.

• Troubleshooting, testing and identifying network and system vulnerabilities.

• Daily administrative tasks, reporting, and communication with the relevant departments in the organization

Requirements

• At least 2 years implementation experience or accreditation from major security products or 2 years of work experience with incident detection, incident response, and forensics.

• Good understanding of Risk Management, Disaster Recovery, Business Continuity and IT Regulatory Compliance

• Experience / knowledge on IDM/IAM/PAM/MDM solutions would be an added advantage

• Experience in review the scope of work and design and contribute to the development of the solution architecture.

• Possess certifications like CISSP or equivalent would be an added advantage

• Strong analytical and problem solving skills

• Driven, motivated and has initiative

• Good project coordination skills

Licence no: 12C6060

Responsibilities

• To conduct periodic cybersecurity vulnerability assessment for the respective business unit and liaising with Group IT and SOC for remediation

• To own and conduct all Security Acceptance Test (SAT) for the group and sectors IT initiatives, and liaise with the business owners for remediation

• Maintain awareness of evolving cybersecurity threats, threat detection and protection techniques to safeguard existing systems

• To provide cybersecurity awareness training, technical advisory and consultancy to the group and business unit

• To review the group and business unit security appliances’ rules i.e. Firewall, Intrusion Protection System, Proxy, Web Application Firewall (WAF), Network Access Control (NAC), Antivirus, Data Loss Prevention (DLP) and ensure relevancy

• To be the group and/or business unit’s interface for all cybersecurity queries, reviews and audits

Requirements

• Degree in Information Security, Computer Science, Information Technology, Computer Engineering or equivalent

• Minimum 3 years experience in infrastructure & application security

• Good knowledge of security principles, policies and industry best practices

• Excellent communication skills and able to work independently

• Candidate with Certification in Systems Security Certified Practitioner (SSCP) or Information System Security Professional (CISSP) or Ethical Hacker (CEH) will be an advantage

Licence no: 12C6060

Responsibilities

• Configure, manage, and maintain security devices such as firewalls, Endpoint Security etc. listed below.

• Ensure proper integration and functioning of security platforms.

• Regularly review and update security device configurations to align with best practices and evolving threats.

• Perform routine maintenance, updates, and patches on security devices and platforms.

• Monitor security alerts and events from various sources, including SIEM systems, IDS/IPS, firewalls, and Endpoint security tools etc..

• Investigate and analyse security incidents to determine the root cause and impact.

• Conduct regular vulnerability assessments and scans on the organization's systems, networks, and applications.

• Analyse scan results, prioritize vulnerabilities based on risk, and work with IT teams to remediate identified issues.

• Track and report on the status of vulnerabilities and remediation efforts.

• Work closely with IT, network, and application teams to ensure security controls are integrated into system design and implementation.

• Collaborate with external partners and vendors to address security issues and coordinate incident response efforts

Requirements

• Degree in Computer Science or Equivalent

• At least 3-5 years of relevant experiences

• Familiar with at least 5 of the listed tools below:

• Privilege Access Management

• Database Activity Monitoring

• Endpoint Detect and Response

• Endpoint Anti-malware

• Vulnerability Assessment scanner

• Next Gen Firewall

• Patch management system

• Security Information and Event management

• Security event review and investigation

• Handling of security advisory

• Security configuration management system

Licence no: 12C6060

Responsibilities

• Responsible for conducting Cloud Security Penetration Testing and ensuring the security of the platform.

• Your day-to-day activities will involve identifying vulnerabilities, conducting security assessments, and implementing security measures.

• Support the independent Cloud Security Penetration Testing performed by independent Security Vendor

• Develop and implement security measures to protect the platform from potential threats.

• Conduct security assessments to identify potential risks and vulnerabilities.

• Collaborate with cross-functional teams to ensure the seamless integration of security measures.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field.

• Beginner proficiency in Cloud Security Penetration Testing and advanced proficiency in Platform Security.

• More than 1- 2 years of relevant working experiences

Licence No: 12C6060

Responsibilities

• Handles Platform Security - Cloud Infra Security Operation and Maintenance.

• Establish security architecture, tools and processes that ensure the security of the platform.

Requirements

• Degree in Computer Science or equivalent

• 3- 5 years Security Architecture Design experiences.

• Primary Skill: Azure Security, Sentinel, Defender for Cloud, Endpoint Security, Firewall, Log Analytics, Imperva, CyberArk.

• Secondary Skill: AWS Security, GuardDuty, Security Hub, Cloud Trail, Cloud Watch.

Licence No: 12C6060

Responsibilities

• Understand the current system security measures and implement security enhancements in line with organizations goals and objectives

• Conduct regular system tests and audits by validating and verifying technical controls in minimizing the risk

• Good understanding of business requirements, identify key security requirements and articulate it to business effectively and efficiently in terms of actual risk and safeguards, risk management

• Good understanding of guidelines such as MAS TRM, ISO and NIST standards or equivalent

• Good knowledge on Security Incident Response and run book preparation for emerging and new threats, applying safeguards where possible to minimize the threat.

• Sound understanding on Ransomware, XSS, Injection and other similar attacks

• Participate in various business meetings to understand the entire data flow and recommend security solutions to mitigate the concerns/risks

• Good knowledge and understanding of encryption technologies (both symmetric and asymmetric algorithms) and its applications

• Participates in various compliance programs, audits the report and recommend to reflect the accurate security posture to make business decisions

• Establish and oversee a formal vulnerability and testing program.

• Oversee the patch cycle and ensure that patches are performed at regular intervals

• Participate in Account Recertification programs and be a key player to take ownership and sign appropriate forms necessary as security exceptions

• Liaise with Internal Audit, Corporate Compliance, Office of General Counsel and Risk.

• Conduct security campaigns to organization such as Phishing, Data Leakage, etc.

• Management to remediate new and outstanding issues; track security-related issues in the GRC system.

• Participate in design activities and provide various solutions to ensure security is not compromised at various phases of the program lifecycle

• Recommend and provide templates where possible for end users to assist in minimizing the security risks

• Train other staff and external clients as necessary.

• Manage, coach, lead and develop a small/mid staff of GRC personnel.

• Directly responsible for procedures and controls to assure compliance with applicable regulatory and legal requirements as well as good business practices.

• Establish and oversee formal risk analysis and self-assessments program for various Information Services systems and processes.

Requirements

• Degree/Degree in IT / Computer Science / related discipline with 12-15+ years of relevant experience in Cyber Security.

• Should have played Security Lead Role in Transformation and Operate program.

• Experience in industry frameworks such as ABS, SSAE, SOC2 etc.

• Good understanding of the following :

• Infrastructure and Network security, Cloud Security, Identity and Access Management, Privileged Management (CyberArk), Compliance with Banking Regularity compliance (BFSI), HIPAA, PCI and the NC Identity Theft law., Firewall security, IDS/IPS placement, SIEM tools, Wireless Security, End point security, Data Loss Prevention, Web Application Security, Threat Hunting/Threat Intel

• Familiarity with industry compliance and security standards including MAS TRM, HKMA, PCI DSS, ISO 27001 and NIST

• Working experience in Cyber Security SecOps

• Customer focused with strong communication, Strong written and verbal communication skills

• Able to multi-task and prioritize incidents & requests accordingly.

• Strong analytically with a natural ability to solve complex issues.

• Industry and Technology certifications such as CRISC, CISA, CISSP, CISM, CEH

• Excellent customer interfacing skills.

Licence No: 12C6060

Responsibilities

• Reporting to Head, Public Safety and Security (PSS) Business, this person is responsible to develop PSS business mid & long-term business plans conjunction with the leadership team in PSS, Business Areas (BA) and Line of Businesses (LOB).

• Research market and technology trends to identify new growth areas in PSS Business.

• Member of PSS team to conduct strategic analysis of existing business to identify and recommend new business areas to pursue.

• Foster strategic relationship with key customers and identify key new initiatives or programmes to support customers better and grow business.

• Identify and foster new partners to grow capabilities and generate new business opportunities.

• Organise PSS workplans and monthly meetings to track business progress and work on new key initiatives.

• Evaluate customers’ needs and processes to propose relevant solutions to digitalize processes, maximise technology adoption, implement digital transformation and solutions

• Work closely with BA & LOB to understand product offerings and architecture (hardware, software, and network)

• Horizon scanning to maintain deep understanding of technology, trends, and business processes to enable clients in their digital roadmaps

Requirements

• Highly driven person with ability to strategize, build trust and collaboration across PSS business functions

• Strong interest to excel and grow career in running business unit

• Experience in public safety and/or technology domains

• Strong strategic thinking, market research, analytical and problem-solving skills

• Knowledge of strategic planning, business development and finance will have added advantage

• Fluency in English, ability to write well. Good communicator and presenter

• Bachelor’s degree with at least 5 years of relevant experience

• Technical aptitude with computing foundations and user experience

Licence No:12C6060

Responsibilities

• Review and ensure IT security architecture design satisfies security principles

• Perform security analysis on required IT solution against threats and recommend solutions

• Work with presale consultant and customer to identify, design and develop security solutions for their environment.

• Engage solution vendors to determine appropriate products that will meet customer security requirements

• Create complementary processes to ensure sustainable security management

• Lead and guide deployment team to implement the design

Requirements

• Bachelor/Masters/ Doctorate Degree in Information Security/Cyber Security or IT-related discipline

• Have hands-on experience in security risk management, security compliance, vulnerability management, security technologies.

• Have experience in technical presentation and technical documentation

• Possess professional security certifications such as CISSP, CISM, or other equivalent.

Licence No: 12C6060

Responsibilities

• Be clear of customer's security framework, such as information security policies, processes/procedures, guidelines and etc.

• Ensure compliance with customer's cybersecurity policies.

• Perform activities necessary to ensure customer's data systems and networks are secure, sure activities are not limited to log analysis and security assessment of customer ICT systems.

• To manage/conduct vulnerability assessment and coordinate penetration tests activities.

• To conduct information security awareness training

Requirements

• Bachelor's degree in a relevant field.

• 3 to 5 years of Information Security experience

• Proficiency in security framework, vulnerability assessment, penetration tests activities

Licence No: 12C6060

Responsibilities

• Conduct detailed & comprehensive investigations and triage on a wide variety of security events.

• Recommend and implement remediation processes

• Stay up-to-date with the latest security threats, vulnerabilities, and mitigation techniques

• Collaborate with cross-functional teams to implement security measures and address security requirements

• Communicate security risks, recommendations, and status updates to stakeholders, management, and team members

• Identify opportunities to improve processes and/or tools to ensure the highest level of quality, including documentation, mentoring, and training sessions

• Own the technical components of a customer integration project including but not limited to configuration, debugging, documentation, testing, and go-live support

• Identify and mitigate potential security threats and vulnerabilities

• Provide relevant recommendations to improve the overall security posture of customers

• Deployment of security technologies while ensuring standards are adhered to as well as maintenance/ repair supervision working with vendor support teams on corrective activities for system issues

• Assist in any ad-hoc tasks when necessary

Requirements

• Diploma / Degree in Information Technology or related

• Over 5 years of experience in Information Security or engineering

• At least 2 years of direct experience in one of the Public Cloud platforms, such as AWS or Azure with strong knowledge of their security features

• Ability to identify and drive remediation of public and hybrid cloud risks

• Experience in general security technologies, processes, and concepts

• Industry-recognized security certifications (OSCP, CISSP, CISA, CEH, AWS Security, etc.).

• Working experience on SIEM / Analytics tools, eg: Securonix, Sentinel

• Working experience with common security operations systems, Intrusion Detection Systems (IDS/IPS), Security Incident Event Management systems (SIEM), anti-virus log collection systems, etc

• Strong analytical and problem-solving skills, with the ability to identify and address security risks and vulnerabilities

Licence No: 12C6060