Total 6 quality assurance engineer job vacancies in Legal / Public / Security category in Singapore

The Cyber Security GRC Specialist is responsible for developing, implementing, and maintaining governance, risk, and compliance programs within an organization's cybersecurity framework. The role involves ensuring adherence to regulatory requirements, identifying and mitigating risks, and establishing
robust security policies and controls. This individual will collaborate across departments to ensure a secure, compliant, and risk-aware environment.

Responsibilities:
1. Governance

• Develop and maintain cybersecurity policies, procedures, and standards in alignment with industry frameworks (e.g., ISO 27001, NIST Cyber Security Framework).
• Oversee the organization's cybersecurity governance program and ensure alignment with business objectives.
• Provide guidance and training to stakeholders to ensure compliance with established policies and standards.

2. Risk Management

• Identify, assess, and document cybersecurity risks to the organization.
• Develop and maintain risk registers and implement mitigation strategies.
• Perform regular security assessments, including vulnerability assessments and third-party risk evaluations.

3. Compliance

• Ensure the organization's adherence to relevant regulations, standards, and frameworks (e.g., PDPC).
• Conduct regular compliance audits and provide recommendations for remediation.
• Monitor changes in regulatory requirements and ensure timely updates to policies and procedures.

4. Incident Response and Monitoring

• Collaborate with incident response teams to establish protocols for managing and reporting cybersecurity incidents.
• Ensure compliance with legal and regulatory reporting requirements for incidents.

5. Reporting and Metrics

• Develop and present reports on cybersecurity compliance, risk posture, and governance metrics to leadership and stakeholders.
• Track and analyze key performance indicators (KPIs) related to GRC initiatives.

6. Collaboration and Stakeholder Engagement

• Work closely with IT, Legal, HR, and other departments to ensure a cohesive approach to cybersecurity.
• Act as a liaison between technical teams and business units to align cybersecurity practices with organizational goals.

Requirements:

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
• 3+ years in a cybersecurity or GRC-related role.
• Good working knowledge of security risk management, security governance framework and compliance, vulnerability management (vulnerability assessment, penetration testing), and security incident response and security assessment.
• Strong understanding of ISO27001 standard and NIST Cyber Security Framework.
• Strong background in vulnerability management tools.
• Knowledge of SIEM and GRC tools.
• Understand Disaster Recovery, Business Continuity and IT Regulatory Compliance.
• Pro-active, independent, resourceful, able to work in a team environment and work independently with minimal supervision.
• It will be advantageous to have at least one of these certifications: CGRC (ISC2), CRISC (ISACA).
• Prior IT security consulting experience will be advantageous.

Interested candidates who wish to apply for the advertised position, please click on “Apply”. We regret that only shortlisted candidates will be notified.
EA License No.: 01C4394 (PERSOLKELLY Singapore PTE LTD)
By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Cybersecurity Engineer (Medical Equipment)

Job Overview: As part of the cybersecurity team, the role focuses on managing and mitigating cybersecurity risks associated with medical equipment and servers. This includes monitoring system health, applying patches, and enhancing safety protocols. The position will collaborate with the IT team to establish escalation procedures for cyber incidents, develop contingency plans, and implement recovery measures. The emphasis will be on policy enforcement and control mechanisms to ensure compliance and reduce cybersecurity risks.

Key Responsibilities:

Specific Responsibilities:

• Evaluate and address cybersecurity risks related to non-compliance with policy requirements during the acquisition of medical equipment, including both new devices and those on loan from vendors.
• Report any instances of non-compliance with policy to seek Ministry of Health (MOH) endorsement.
• Prepare cybersecurity risk assessment reports and conduct periodic reviews of risks whenever there are changes in the configuration or requirements for medical equipment.
• Update and maintain the Risk Registration for medical equipment and ensure all IT-related risks are mitigated with appropriate control measures.
• Ensure medical equipment software is up to date at delivery and plan for regular patches and updates throughout its lifecycle.
• Monitor and track the compliance status of medical devices with the MDOTS policy during their operational lifecycle.
• Participate in IT projects related to the deployment and management of medical equipment.
• Collaborate with the IT team and vendors to plan server installations and software configurations for medical equipment.
• Continuously monitor the health status and vulnerability of medical equipment and associated servers.
• Work with end users to manage cybersecurity incidents involving medical equipment, ensuring that mitigation controls are applied before the equipment is returned to service.

General Responsibilities:

• Collaborate with the IT team to support new equipment onboarding activities and related projects.
• Provide ongoing BME/IT support to ensure medical equipment complies with MDOTS policy guidelines and control measures at all stages of its lifecycle.
• Perform additional tasks and duties as directed by the Head of BME.

Job Requirements:

Education/Training/Experience:

• A degree in Computer Science, Information Technology, or a related cybersecurity field with at least 3 years of experience in healthcare or cybersecurity assessments for the Engineer position.
• A degree in Computer Science, Information Technology, or a related cybersecurity field with at least 5 years of experience in healthcare or cybersecurity assessments for the Senior Engineer position.
• Experience with various security tools and products (e.g., Fortify, AppScan, Nessus).

Professional Certifications:

• Preferably, candidates should hold certifications such as OSCP, CREST, CEH, CISSP, AWS, CISA, CISM, or any cloud security specialty.

Interested candidates who wish to apply for the advertised position, please click on “Apply”. We regret that only shortlisted candidates will be notified.

EA License No.: 01C4394 (PERSOLKELLY Singapore PTE LTD)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Department: Regional Information Systems Division
Reports to: Regional IT General Manager
Functional Relationships with: Global Security Team, ASEAN Business Units, ASEAN local IT divisions

Successful candidate will: Be engaged and responsible for SecOps (security operations), security incident handling, SOC response, etc as a Senior Specialist, Information Security Incident Response Lead, responsible for CSIRT operations in cyber security

Key Duties & Responsibilities
• Be responsible for handling overall SecOps in cooperation with partner IT vendors and related internal departments as a member of the incident handling team within CSIRT
• Work with partner IT vendors that maintain information security infrastructure tools implemented in our company
• Monitor and continuously assess the IT security aspects and impact.
• Knowledge and strong understanding on CIS CSC to continuously improve IT security
• Reporting to Regional IT General Manager and the head of Global Security Team

Responsibilities:

• While increasing cyber security risks, we must strengthen its security measures to secure our business expansion.
• He/She will be able to keep updating our skill sets by touching on the latest technology trends as we continue introducing new services and technologies to achieve "Zero Trust” and “IT/OT cyber security”.
• In addition, he/she can obtain a global business perspective since there are many opportunities to discuss security countermeasures with overseas members by crossing the border

1. Cyber incident response

• He/She must enhance the process of incident handling and our ability to respond to incidents through the implementation of security solutions, training, and incident-handling experiences

2. Vulnerability Assessment on platform and application/implementation of countermeasures

• Based on the results of various diagnostics and tools, countermeasures against vulnerabilities will be promoted together with each application engineer. We will also work with the CCoE team and PSIRT to implement measures for cloud environments, promote pre-release diagnostics, and add tools to meet operational requirements in the production environment.

3. Implementation and Maintenance of security solutions

• Client is developing advanced solutions for emerging threats.
• He/she must be responsible for the selection of suitable security products to fit our maintenance and operation requirements and lead PoC and implementation with well-designed operations

Ability / Competency Required

• Bachelor or Master’s Degree in Computer Science, Information Systems, or equivalent experience.
• Minimum three years of experience in the Cyber Security and Infrastructure fields
• Security tool implementation and operational experience/application security technology experience
• CISSP - Certified Information Systems Security Professional Certifications

Interested candidates, please click "APPLY" to begin your job search journey and submit your CV directly through the official PERSOLKELLY job application platform - https://go.persolkelly.com/job/apply/7657

We regret to inform you that only shortlisted candidates will be notified.

Siow Ee Sheng | REG No : R23118145

PERSOLKELLY SINGAPORE PTE LTD | EA License No : 01C4394

This is in partnership with Employment and Employability Institute Pte Ltd (“e2i”). e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance and skills upgrading services, and partnering employers to address their manpower needs through recruitment, training and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation-wide manpower and skills upgrading initiatives. By applying for this role, you consent to e2i’s PDPA.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Responsibilities

• Provide on-going application support and be involved in various stages of the SDLC.
• Identify and assess Cyber risk(s). Propose treatment plan(s) to mitigate Cyber risk(s) identified.
• Provide guidance to Business Services Group (BSG) in ensuring that projects/systems comply with security policies and the relevant legal and regulatory frameworks (such as PDPA or Cybersecurity Act) throughout the product lifecycle
• Perform adequate risk management, including identification, assessment and provide treatment of security risks associated with systems handled by Business Services Group.
• Risk assessment must be performed in accordance with the organization’s cybersecurity risk management framework

Skills/Requirement

1. Degree in Computer Science, Information Systems, Engineering or equivalent
2. At least 6 years of IT security experience in areas of security governance, risk management, application security design, security project management, security operation, cloud security technologies
3. Strong risk management principles, risk articulation skills, cloud technologies, network security, data protection
4. Knowledge of cloud platforms such as AWS, Azure or Google cloud is desirable
5. Professional security certification is preferable, such as CISSP, CISM, CISA, CCSP or other similar security certifications

Interested candidates, who wish to apply for the above position, please send in your resume to: [email protected]

PERSOLKELLY Singapore Pte Ltd EA License No. 01C4394 EA Reg No: R23118975 (ABDUL RAHMAN ANSARI RAJA)

We regret to inform you that only shortlisted candidates will be contacted.

**********************************

This is in partnership with Employment and Employability Institute Pte Ltd (“e2i”). e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance and skills upgrading services, and partnering employers to address their manpower needs through recruitment, training, and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation-wide manpower and skills upgrading initiatives. By applying for this role, you consent to e2i’s PDPA.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

**********************************

As an Information Security Engineer, you will play a crucial role in our Security Operations Center. Your responsibilities will include monitoring, detecting, investigating, analyzing, and responding to security events within our IT infrastructure, including Operational Technology (OT) systems. Your expertise in cybersecurity frameworks, risk management, and incident response protocols will help fortify our defenses. A thorough understanding of Operational Technology security principles is essential, as you will oversee the integration of security practices in both IT and OT environments to protect our critical infrastructure. You will also apply Scaled Agile Scrum methodologies to coordinate technical meetings and manage security projects efficiently.

Roles and Responsibilities

• Design and implement advanced security architectures for IT and OT environments to ensure robust protection against emerging threats.
• Lead the development and integration of custom security solutions tailored to the specific needs of our digital and physical infrastructures.
• Conduct high-level vulnerability assessments and penetration testing to evaluate the security of IT and OT systems.
• Develop and refine incident response strategies to enhance our ability to respond to and recover from security breaches swiftly and effectively.
• Collaborate with IT and OT teams to ensure seamless integration of security technologies across all platforms.
• Serve as the technical lead on projects involving cybersecurity technologies, ensuring compliance with industry standards and regulatory requirements.
• Mentor junior engineers and analysts, providing guidance on complex technical issues and fostering a culture of technical excellence and innovation.
• Stay current with the latest cybersecurity technologies and trends, applying this knowledge to continuously improve our security posture.
• Prepare and present detailed technical reports and security briefings to senior management, offering strategic recommendations based on your assessments and findings.

Requirements

• A master’s degree in Cybersecurity, Computer Science, Engineering, or a related field, along with significant professional experience in cybersecurity.
• Expertise in designing and managing security solutions for both IT and Operational Technology systems.
• Advanced certifications in cybersecurity such as CISSP, CISM, or GIAC, with specific training in areas like SCADA or ICS security.
• Strong leadership skills with experience in managing complex security projects and leading cross-functional teams.
• Deep understanding of regulatory compliance and security frameworks such as ISO 27001, NIST, SOC 2, and others relevant to IT and OT cybersecurity.

Interested candidates, who wish to apply for the advertised position, please email us an updated copy of your resume.

We regret that only shortlisted candidates will be notified.

EA License No.: 01C4394

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy

Position Overview

Reporting to the Team Lead of the Security Operations Center, the candidate will be responsible for monitoring and responding to potential security-related risks targeting the Group. The candidate should possess the background and knowledge necessary to discuss incident response activities internally and support security incident investigations. This position requires 24/7 shift work, including graveyard shifts.

Principal Job Functions

1. Cybersecurity Event Monitoring: Monitor global cybersecurity events and escalate to the L2 team if relevant events are observed.
2. Security Tool Analysis: Perform monitoring, risk assessment, and analysis on security tools such as anomaly detection systems, firewalls, antivirus systems, and proxy devices.
3. Incident Response: Follow predefined actions to handle security alerts, including escalation to the L2 team and other support groups.
4. Ad-Hoc Task Execution: Complete daily ad-hoc tasks or lead small projects as necessary.
5. Documentation: Participate in daily and ad-hoc documentation-related tasks.
6. Operational Reporting: Create and maintain reports for Key Performance Indicators (KPIs), as well as weekly and monthly metrics.
7. Vulnerability & Threat Assessment: Perform the assessment phase of the Vulnerability & Threat Management process.
8. Threat Intelligence: Receive threat intelligence from subscribed feeds and update the Threat Intel knowledge base.
9. Incident Investigation: Support any security incident response investigation within the Group, regardless of location or environment.
10. Methodology Improvement: Work closely with the Team Lead to review, provide feedback, and implement improvements in Security Operations methodology.
11. Ticket Management: Ensure all logged tickets are closed correctly and in a timely manner.
12. Routine Reporting: Submit routine reports on threats, vulnerabilities, and incidents handled by the Security Operations Center.
13. Runbook Maintenance: Keep the Security Operations Center’s runbooks and procedures up-to-date.

Recommended Prerequisites

1. Experience: 3+ years in security operations, preferably with incident management experience.
2. Industry Knowledge: Experience in the banking industry is advantageous.
3. Technical Skills:Familiarity with security products and network devices.
   Extensive experience with network security practices, including intranet, extranet, and internet access.
   Technical experience with operating systems like UNIX, AIX, Linux, and Windows.
   Knowledge of TCP/IP, DNS, web, and wireless security architectures and enterprise-grade security solutions.
   Knowledge of encryption and authentication methods (e.g., 2FA, DES/AES/RSA, Digital Certificates, SSL/TLS, IPSec) and DMZ development.
   Understanding of intrusion detection (deep TCP/IP knowledge and cybersecurity), various operating systems, and web technologies.
   Ability to read and analyze packet-level data, manage Network/Host Security products (NIDS/NIPS, firewalls, HIPS, AV, scanners), and understand security events.
   Proficiency in vulnerability assessment and management, as well as application penetration testing or forensic analysis.
   
4. Certifications: Preferred certifications include those from EC-Council, GIAC, (ISC)² [e.g., CISSP, CEH, GCIA, CCNA].
5. People Skills:Performance-oriented, always aiming to exceed past achievements.
   Ability to work under pressure in critical situations.
   Collaborative attitude, capable of working effectively with peers.
   
6. Communication Skills:Able to communicate effectively with peers during discussions and meetings.
   

Interested candidates may apply through the application system. We regret to inform only Shortlisted candidates will be notified.

EA License No. 01C4394 • RCB No. 200007268E •Derrick Tiew Yong Han EA Registration No. R1877971

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.