Total 22 compliance manager job vacancies in Legal / Public / Security category in D22 Jurong, Jurong Island, Tuas

The successful candidate will handle, manage, and oversee corporate secretarial matters of TracX Logis Pte. Ltd and its group companies and provide general commercial legal support operating in the APJ region.

Duties and Responsibilities

Corporate Secretarial Support & Compliance

• To support all the Board requirements including preparing directors' resolution and other corporate secretarial related documents as required to support the Company and its group companies' needs and requirements by drafting and/or facilitating execution of corporate documents/resolution.
• To liaise with local corporate secretarial service providers, external legal counsel on corporate secretarial and compliance related matters with specific focus on statutory filings.
• To maintain, update and safekeep records of constitutional documents, Statutory Registers, minutes and resolutions.
• To handle KYC and other corporate secretariat related queries from internal and external stakeholders.
• To ensure compliance with all relevant legislation / regulations by assisting in creating and implementing internal policies that promote legal compliance and best practices.

General Commercial Legal Support

• To provide precise and timely legal counsel on a wide range of legal, contractual, and procurement matters.
• To manage and oversee the administration of legal contracts.
• To work closely with senior management and other teams to offer legal insights and support strategic business decisions.

Job Requirements:

• Minimum 3 years PQE or relevant working experience, in-house experience in a multi-national company is preferred.
• Non-legal professionals with minimum 5 years’ corporate secretarial experience with relevant qualifications will be considered.
• Strong command in English and excellent writing skill.
• Organised and able to manage deadlines and work with tight deadlines.

Ready to Join the Journey?

Submit your resume and let's build something amazing together! Apply Now through the link.

The successful candidate will handle, manage, and oversee corporate secretarial matters of TracX Logis Pte. Ltd and its group companies and provide general commercial legal support operating in the APJ region.

Duties and Responsibilities

Corporate Secretarial Support & Compliance

• To support all the Board requirements including preparing directors' resolution and other corporate secretarial related documents as required to support the Company and its group companies' needs and requirements by drafting and/or facilitating execution of corporate documents/resolution.
• To liaise with local corporate secretarial service providers, external legal counsel on corporate secretarial and compliance related matters with specific focus on statutory filings.
• To maintain, update and safekeep records of constitutional documents, Statutory Registers, minutes and resolutions.
• To handle KYC and other corporate secretariat related queries from internal and external stakeholders.
• To ensure compliance with all relevant legislation / regulations by assisting in creating and implementing internal policies that promote legal compliance and best practices.

General Commercial Legal Support

• To provide precise and timely legal counsel on a wide range of legal, contractual, and procurement matters.
• To manage and oversee the administration of legal contracts.
• To work closely with senior management and other teams to offer legal insights and support strategic business decisions.

Job Requirements:

• Minimum 3 years PQE or relevant working experience, in-house experience in a multi-national company is preferred.
• Non-legal professionals with minimum 5 years’ corporate secretarial experience with relevant qualifications will be considered.
• Strong command in English and excellent writing skill.
• Organised and able to manage deadlines and work with tight deadlines.

Ready to Join the Journey?

Submit your resume and let's build something amazing together! Apply Now through the link.

ABOUT THE NATIONAL INSTITUTE OF EDUCATION (NIE)

The National Institute of Education (NIE), Singapore, is Singapore’s national teacher education institute and we are proud to be an integral part of the nation’s education service. We play a key role in the preparation of teachers and in the provision of teacher professional and school leadership development programmes. We are committed to our vision of being An Institute of Distinction: Leading the Future of Education and our mission to Inspire Learning, Transform Teaching and Advance Research.

NIE invites suitable candidates to join the Division of Academic Computing & Information Services (ACIS) as a Security Analyst for Governance, Risk, and Compliance (GRC). This is a 3-year contract position.

Key Responsibilities:

Governance

• Coordinate with internal and external audit teams and assist in audit planning.
• Help deliver security awareness programs for staff and manage security governance efforts.
• Stay updated on IT trends and recommend best practices to align with governance policies.
• Support cybersecurity projects to ensure alignment with security objectives.

Risk Management

• Assist in identifying and assessing IT risks and managing vulnerabilities and threats.
• Support risk management in cybersecurity projects by focusing on threats and vulnerabilities.
• Track and monitor audit remediation actions related to risk management.
• Measure the effectiveness of security awareness programs to minimize risks from human error.
  

Compliance

• Ensure compliance with internal standards (ISO 27001, ISO 22301) and external regulations.
• Facilitate responses to internal and external IT audits.
• Participate in audit engagements and report on audit issues and remediation.
• Provide ongoing compliance reporting to ensure timely remediation of audit findings.

Requirements:

Educational Qualification(s)

• A University Degree in Information Technology, Cybersecurity, Risk Management, or Compliance, or an equivalent qualification.
• Desirable Certifications: CISSP, CISM, CISA, CRISC, or other relevant certifications.

Relevant Experience

• 3-5 years of experience in Information Security, IT Risk Management, or Compliance, preferably in a higher education or similar environment.
• Experience with IT security audits and compliance reviews in regulated industries.
• Experience with vendor security assessments and managing third-party security risks.
• Experience in security awareness training and working in cross-functional teams.

Knowledge Required

• Security Frameworks: ISO 27001, CTM, NIST, CIS controls, and their application in operational environments.
• Regulatory Standards: Understanding of the Cybersecurity Bill, PDPA, and related security laws.
• Risk Management: Knowledge of risk assessments, mitigation strategies, and identifying threats to information systems.
• Audit Processes: Understanding security audit processes, compliance, and remediation.
• IT System: Good knowledge of IT infrastructure, application management, and cybersecurity practices.
• GRC Tools: Experience with Governance, Risk, and Compliance platforms and software is advantageous.

Skills and Competencies

• Analytical Skills: Ability to analyze security risks and make data-driven decisions.
• Communication Skills: Ability to convey technical security concepts to non-technical audiences and document findings.
• Problem-Solving: Strong problem-solving capabilities, particularly during security incidents.
• Attention to Detail: High focus on detail in audits and risk assessments.
• Project Management: Ability to manage multiple projects, prioritize tasks, and meet deadlines.
• Team Collaboration: Proven ability to work with cross-functional teams (IT, legal, compliance, vendors).

Other Personal Attributes

• Integrity and Confidentiality: High ethical standards and the ability to handle sensitive information.
• Proactivity: Ability to act independently and proactively address security challenges.
• Adaptability: Capable of adjusting to evolving security threats and changes in regulations.
• Resilience under Pressure: Ability to make sound decisions under pressure, particularly during audits or security incidents.

Other Information

NIE staff can take chartered buses at their own expense from or near their home to the NIE campus. This is subject to the availability of bus routes and seats.

Req ID: R00018942

The Mercedes-Benz AG Group CISO heads Mercedes-Benz’s Global Cyber Security Department (based in Stuttgart, Germany). We are looking for a Cyber Security SIEM Use-Case Engineer to join our Cyber Intelligence and Response Centre (CIRC). This role is crucial for the engineering, development, and continuous improvement of threat detection use-cases within our SIEM . You will also be involved in the engineering and development of custom rules to detect potential threats swiftly and creating transparency to map existing detection capabilities to the MITRE ATT&CK framework.

Key Responsibilities:

• Proactively create, test, and tune new detection use-cases in the SIEM
• Review and enhance existing detection use-cases using Machine Learning or User & Entity Behaviour Analytics (UEBA).
• Map detection use-cases to the MITRE ATT&CK framework to assess SIEM monitoring coverage.
• Perform regularly updates to threat detection engineering playbooks, processes, and documentation.
• Collaborate closely with the SOC to challenge and improve detection and prevention capabilities.
• Identify and implement SIEM use-cases to address blind spots.
• Coordinate with the log onboarding team and SIEM architect to validate new log sources for compliance and improve SIEM backend performance.
• Collaboration with Service Operations team to address challenges, process fulfillment, documentations, and improvement of Service Operations Quality.
• Provide governance on topic which related to operational stability.

Join us to play a pivotal role in enhancing our cyber security measures and protecting our global operations.

QUALIFICATIONS

Specific Knowledge

• Intense knowledge in using Splunk Enterprise Security (ES)
• Intense knowledge in developing and tuning detection use-cases (Correlation Searches) in Splunk based on Data Models
• Experience in Machine Learning and Risk Based Monitoring in Splunk is an advantage
• Ability to analyse and interpret security logs and events to identify potential threats and attack patterns
• Experience in validating data source compliant using the common interface model (CIM)
• Experience of setting up and utilize data models in Splunk
• Deep understanding of cyber security concepts to create detection use-cases targeting various phases of attack lifecycle
• Understanding of MITRE ATT&CK framework and detections of various tactics and techniques
• Experience and capable of creating interactive dashboards, alerts, reports in Splunk

Experience

• Degree from a reputable university or significant course work in Computer Science, Networking, engineering or other computer-related fields of study.
• At least 3 years of experience with demonstrable skillsets in SIEM use-case engineering, with over 5 years of experience
  in cybersecurity
• Previous relevant experience working in a security operational role, ideally within a Corporate, Military, or Police environment; engaging with and responding to a diverse array of internal stakeholders, including senior management
• Have good emotional intelligence and is a proven team player
• Rational and calm under pressure
• Fluency in the English language
• Effective oral and written communication skills
• Good timekeeping ability to cope with a tight deadline and achieve operational objectives
• Self-motivated with the ability to carry out assigned tasks with minimum supervision

This position is based in location Singapore. A valid and approved work visa is required for employment in Singapore in accordance to local labour law regulations. We regret to inform you that only shortlisted candidates will be notified.

• Industry: Govt Sector
• Employment Type: 11-month contract
• Leave and Medical benefits provided

The Role

• Design and develop content & collaterals for internal communication (e.g. eDMs, intranet banners, TikTok-style videos, staff photos) and keep internal communications platforms updated.
• Support staff engagement activities, including planning and executing events and workshops.
• Assist in sourcing and liaising with vendors for required goods and services.
• Produce and manage pre/post-event artefacts (e.g. photos, videos, soundbites).
• Collect and report data insights to support engagement efforts.
• Support Workday administration such as course registration and follow-up for training enrolments, where required.
• Oversee and manage corporate collateral inventory, including tracking stock levels and coordinating replenishment.

What are we looking for?

• Minimally a Degree in Mass Comms/Marketing/HR/Events Management or a related field
• Proficiency in Excel (VLOOKUP etc), content creation tools (Canva, CapCut etc.) and event management

Interested candidate may apply via email to [email protected]. All job applications will be processed with strict confidence and only shortlisted candidate will be contacted.

Lim Peiling (Serene) | R1654066

ScienTec Consulting Pte Ltd | 11C5781

The Mercedes-Benz Group AG CISO heads Mercedes-Benz Global Cyber Security Department (based in Stuttgart, Germany). We are looking for an Offensive Cyber Security Specialist to join our Global Cyber Security Team. This role focuses on enhancing and implementing our global vulnerability management process to protect our customers from malicious attacks.

As part of our team, you will support and improve vulnerability management across on-premises and cloud environments for Mercedes-Benz Group AG in the APAC and Greater China regions. Your responsibilities will include working on technical topics such as the Vulnerability Disclosure Program, validating proof-of-concepts, and ensuring timely remediation of identified vulnerabilities.

You will also explore new technologies and processes to strengthen the organization’s security posture through innovative vulnerability research and detection. This role is crucial in maintaining a secure and resilient environment by proactively identifying, assessing, and mitigating security risks while collaborating with global teams to drive continuous improvement in cybersecurity practices.

Role and Responsibilities

• Analysing, triaging and processing security threats to identify potential risk gaps and corresponding organizational impact by conducting in-depth analysis of the identified threat, attack vector or intelligence information
• Collaborate on and enforce the implementation of the global Mercedes-Benz Vulnerability Management strategy
• Acting as a point of contact for APAC region for questions regarding different stages of the Vulnerability Management lifecycle, including vulnerability scanning and penetration testing
• Rate new technical vulnerabilities according to their business impact and prioritize remediation activities
• Support application and infrastructure teams on the vulnerability remediation process
• Perform vulnerability scans in the company’s internal networks
• Analyze, rate and confirm vulnerabilities reported by external researchers
• Provide duty analyst support for the Vulnerability Management operations during weekends, utilizing a pre-defined duty roaster.
• Provide project coordination support to assigned projects by the Head of Global Offensive operations towards the roll out, implementation and acting as the point of contact for local stakeholders towards the implementation and coordination of the projects assigned.
• Provide technical inputs towards the virtual teams as assigned by the Head of Global Offensive operations towards the operational directions, method determination and other related administrative support required from time to time.
• Coordinate Enhanced Proactive Analysis initiatives, as directed by the Head of Global Offensive Operations, to facilitate internal penetration testing of applications. Provide additional administrative support as needed to ensure smooth execution of related activities.
• Coordinate and support source code analysis initiatives, as directed by the Head of Global Offensive Operations, to ensure internal source code testing meets global security standards and is adequately hardened. Provide additional administrative support as needed to facilitate the seamless execution of these activities.

Qualifications

• Degree from a reputable university or significant course work in Computer Science, Information Technology or other IT-related fields of study.
• One or more of the following professional certification is beneficial: OSCP, OSCE, CREST, SANS GIAC Penetration Tester, Web Application Penetration Tester, Exploit Researcher, Advanced Penetration Tester or similar.
• 5+ years working experience in technical offensive cyber security related field in a corporate, military, or law enforcement environment.
• Honest, Professional, strong team influencer, able to proactively support team culture that fosters knowledge sharing, excellence and collaboration.
• Able to work under pressure, facilitate discussion, decision-making, and conflict resolution.
• Excellent communicator, able to engage and effectively respond to diverse stakeholders
• Fluency in the English Language
• Self-motivated with the ability to carry out assigned tasks with minimum supervision
• Proficient understanding of networking and network security technologies.
• Good understanding of Threat Intelligence utilization towards new Vulnerability Detection
• Excellent knowledge of cyber security standards, risks, threats, prevention measures and best practices
• Experiences in improving a vulnerability management process and/or a vulnerability-scanning concept.
• Hands-on experience with vulnerability scanning and management processes and tools (Qualys and ServiceNow Vulnerability Response).
• Experience with Vulnerability Management in cloud solutions.
• Experience with Vulnerability Management Lifecycle
• Good understanding of various operating systems
• Good understanding of the Cyber Kill Chain and the ability to display clear analytical skills

This position is based in Singapore and a valid and approved work visa is required for employment in Singapore in accordance to local labour law regulations. Candidate may be offered a lower job level based on candidate’s experience. We regret to inform you that only shortlisted candidates will be notified.

The Mercedes-Benz AG Group CISO heads Mercedes-Benz’s Global Cyber Security Department (based in Stuttgart, Germany). We are looking for a Cyber Security Defensive Analyst to join our Cyber Intelligence and Response Centre (CIRC). The Global Cyber Security Department oversees a 24/7 follow-the-sun operation with counterparts in EMEA and NAFTA. This role focuses on providing an intelligence-driven approach towards incident response affecting any Mercedes-Benz assets and providing containtment, eradication and recovery of affected asssets involved in a cybersecurity incident in a timely and efficient manner.

Furthermore, the role requires the mitigation of identified threat, addresses identified vulnerabilities and also provide incident coordination towards internal stakeholders and external customers. The role is crucial in enabling Mercedes-Benz's business by ensuring agile security operations and maintaining a secure environment.

As a Cyber Security Defensive Analyst, you will be responsible for:

• Conducting technical analysis and triaging of triggering alerts ingested from Mercedes-Benz log sources to determine impact, scope of impact and determine corresponding remedial actions to mitigate, contain and/or otherwise limit the impact of the incident.
• Analysing, triaging and processing security threats to identify potential risk gaps and corresponding organizational impact by conducting in-depth analysis of the identified threat, attack vector or intelligence information.
• Working closely with the CIRC threat intelligence team to aid in the enhancement of contextual analysis and providing threat hunting support towards Open Source Intelligence (OSINT) related Indicators of Compromise (IoCs).
• Taking the lead in managing Mercedes-Benz end users and stakeholders in providing cybersecurity incidents updates and other related activities that might arise from time to time during the incident coordination, remediation and recovery
• Providing duty analyst support for the CIRC operations during weekends, utilizing a pre-defined duty roaster, ensuring the continued operations and monitoring of threats and triggering alerts 24 by 7, follow the sun model.
• Coordinating projects assigned by the Head of Global Defensive Operations towards the rollout, implementation and acting as the point of contact for local stakeholders towards the implementation and coordination of the projects assigned.
• Providing technical inputs towards the virtual teams as assigned by the Head of Global Defensive Operations towards the operational directions, method determination and other related administrative support required from time to time.
• Provide guidance and technical support in mentoring and guiding newer members of the team in technical and incident management skills and processes.

Qualifications

• Degree from a reputable university or significant course work in Computer Science, Networking, engineering or other computer-related fields of study
• One or more of the following professional certification is beneficial: CISSP, GCIH or similar.
• Have good emotional intelligence and is a proven team player
• Rational and able to remain calm under pressure
• Fluency in the English Language
• Effective oral and written communication skills
• Good timekeeping ability to cope with a tight deadline and achieve operational objectives
• Self-motivated with the ability to carry out assigned tasks with minimum supervision
• Proficient understanding of cyber and IT security risk, threat and prevention measure
• Proficient understanding of networking and network security technologies.
• Good understanding of Forensic tools and methodolgy used in incident response
• Good knowledge of security standards and best practices
• Good understanding of various operating systems
• Good understanding of the Cyber Kill Chain and the ability to display clear analytical skills
• Previous experience in a corporate or enterprise environment, engaging with and responding to a diverse array of internal stakeholders, including senior management.
• Knowledge of Microsoft Office suite (Word, Excel, PowerPoint and Access)
• Knowledge of Splunk is beneficial

This position is based in Singapore and a valid and approved work visa is required for employment in Singapore in accordance to local labour law regulations. Candidate may be offered a lower job level based on candidate’s experience. We regret to inform you that only shortlisted candidates will be notified.

1. Prepare, review, and negotiate various legal documents, correspondences with external parties, SOPs and policies.
2. Guide the various departments and business units to implement and/or draft SOPs and policies.
3. Handle litigation/legal cases by liaising with internal stakeholders and external lawyers engaged by the company.
4. Provide legal advice and support to various departments and business units on matters related to contracts, regulatory compliance and risk management.
5. Conduct legal research to ensure the company’s compliance with applicable laws and regulations.
6. Advise management on the implications of new laws and regulations and recommend necessary actions.
7. Evaluate compliance to rules, regulations, SOPs and policies.
8. Maintain and update database of existing and new agreements, SOPs and policies.
9. Liaise with Corporate Secretary for corporate governance matters.
10. Assist in all analysis and reporting required by the company and/or the parent company.
11. Improve the company’s internal control compliance management and legal risk control system design, establishment and maintenance work.
12. General administration, reporting and filing tasks.

Requirements:

1. Preferably Law graduate with 2 years of experiences in law firm or in-house legal advisor (preferably in MNCs/logistics/commercial industry)
2. Proficient in legal research and legal document drafting and reviewing
3. Meticulous with ability to handle sensitive information and maintain confidentiality
4. Proactive, strives for continuous improvement
5. Ability to work independently, with integrity and responsibility
6. Multi-task and excellent organization skills, ability to meet deadlines
7. Excellent oral, written and presentation skills

Others Information:

• 5-day work week
• Meal subsidized, medical, dental & insurance benefits
• Company Transport: 2 ways from Jurong East

MaNaDr is the first APAC-based telehealth company to be publicly listed on US Stock Exchange.

Through our MaNaDr platform, we offer personalized and reliable medical attention to users worldwide. Our platform allows our community of healthcare providers to have a broader reach to users through virtual clinics without any start-up costs and the ability to connect to a global network of peer-to-peer support groups and partners. Our range of seamless and hassle-free telehealth solutions includes teleconsultation services, prescription fulfilment and other personalized services such as weight management programs and gender-specific care.

We are looking for highly motivated people to join us. The incumbent will support M&A activites and other strategic initiatives. For more information about us, please visit https://manadr.com/.

Job Responsibilities:
• Provide legal support to the Senior Management and the business.
• Assist with entity set-up in multiple jurisdictions and support M&A activities, venture investments, joint ventures, and other strategic partnerships when required.

• Provide advice on regulatory matters and a broad range of corporate and commercial matters.
• Design, review and put into place contracts, agreements or policies to manage and mitigate legal risks.
• Provide training to staff on laws and policies.
• Ensure compliance with applicable laws and regulatory regulations in the jurisdictions where the company operates.
• Promote legal, compliance and risk management best practices throughout the company.

Job Requirements:
• Admission to the Singapore Bar with at least 2 years of experience gained in-house or with a law firm.
• Relevant experience working on coporate M&A transactions.

• Ability to work independently and collaborate effectively with internal and external stakeholders.
• Able to adapt to changing needs and ways of working.
• Proven track record of handling corporate governance matters for a Group structure.

Interested applicants, please apply with updated resume and expected salary.

We regret that only shortlisted candidates will be notified.

Cloud Telecommunications (S) Pte Ltd (Cloud Telecom), is an FBO (Facilities-Based Operations) Telco in Singapore. We build and own underground telecom pipes and dark fibres in strategic locations in Singapore such as subsea cable landing hub and data centre hub.

We provide next generation telecom connectivity services including Internet Services, Data Centre Interconnect (DCI), Backhaul, last-mile Local Loop services connecting commercial buildings, IP Transit / DIA and other telco services in Singapore in delivering 400G, 100G, 10G and 1G bandwidth connectivity to SME (Small and Medium-sized Enterprises), global telcos, CDN Operators (Content Delivery Network), Cloud Service Providers and Enterprise customers in Singapore.

We are looking for a legal/contract manager position.

Main responsibilities:

Contract manager oversees contracts that Cloud Telecom are involved with, so they must have in-depth knowledge of contract features. A contract manager needs to understand the advantages and pitfalls of contracts and be familiar with a plethora of contract details. Here are some of key duties and responsibilities:

• Create, analyse, negotiate, and execute an array of contracts for various transactions with relevant parties such as partners and clients.
• Maintain contract-related documents and correspondences.
• Monitor and troubleshoot contract-related problem such as breach of contract.
• Keep track of contracts, extend, renew or close them out.
• Assist with the employer's compliance with mandatory standards.
• Stay informed about changes to relevant rules and regulations.

Qualification:

• Minimum Polytechnic Diploma in Law
• 1 year of experience preferred
• Fresh graduates are welcome to apply

ROLES AND RESPONSIBILITIES

• Responsible for the strategic security management for all company sites, including in and outside of Singapore in the region.
• Create consistency in policies and Standard Operating Procedures (SOPs) across global security programs that deliver effective and innovative solutions to minimize risk to our rapidly growing business.

JOB TASKS AND SPECIFICATIONS

1. Manage the end-to-end security management for all facilities in Singapore and across the Asia Pacific region in minimizing risk within the supply chain services offered.
2. Formulate security strategies, preventive actions and security systems to protect company and customer assets across the Asia Pacific region.
3. Assess the risk management as well as control and governance systems while highlighting weaknesses and deficiencies for further improvement.
4. Champion the overall security directions; Develop and implement policies, security processes, standards and SOPs for the various businesses across the Asia Pacific region.
5. Plan and execute crisis management plans and systems to minimize the impact on operations or business across the Asia Pacific region.
6. Spearheaded and maintain the full spectrum of loss, damage and theft investigation, corrective and preventive action plans and reports as well as coordinating with relevant external stakeholders in resolving warehousing, transport, freight and cargo security issues across the Asia Pacific region.
7. Drive talent management and staff management programs including leading and coaching security managers in countries across the Asia Pacific region to achieve KPI set and build high-performance security team
8. Maintain a loss prevention program with a damage containment plan while optimizing insurance coverage across the Asia Pacific region.
9. Maintain a keen insight into the respective countries’ security situation and affairs and update senior management and corporate on all significant developments and changing situations.
10. Establish a common framework for security compliance, measurements and establishing incident notification and escalation methodologies in relation to the process, roll out and develop a security culture and mindset within the operation groups across the Asia Pacific region.
11. Support new facilities and customer accounts’ implementation in terms of site security, security recommendations and solutions related to warehousing and forwarding, and designing and installation of security systems for warehouses and offices in the Asia Pacific region.
12. Forge a solid working relationship with all customers while collaborating with sites around the globe in promoting security as a competitive advantage towards retaining existing and acquiring new accounts.
13. Conduct regular site audits and inspections at every facility in the Asia Pacific region. Ensure strict compliance and highlight/address any issues of irregularities or non-compliance that may be against the interest of the facility/operations/company.
14. Conduct and promote security awareness training and security-related best practices for benchmarking and networking
15. Render key insights in various security councils, professional support associations and organizations including law enforcement authorities as well as national agencies in the Asia Pacific region.
16. Be the subject matter expert and provide direction, oversight and compliance management of all regulatory security commitments for all operations specific to the respective country of operations in the Asia Pacific region.
17. Develop and manage ongoing risk assessments and evaluations of the company's facilities, transit cargoes and routes in the country of operations. Assessments will measure compliance with internal security policies, contractual requirements and government regulations across the Asia Pacific region.
18. Establish a system for tracking the maintenance and upgrading of security systems including vendors' and contractors’ management across the Asia Pacific region.
19. Champion the accreditation of security certification and compliance including TAPA, STP Plus and ISO28000.
20. Perform other job-related duties as and when requested by the superior.

JOB REQUIREMENTS

• Bachelor's degree (advanced degree preferred) in security, business or related field.
• Minimum of 10 years of working experience in similar roles in the 3PL/Logistics/Supply Chain industries with at least 3-5 years exposure in the Asia Pacific region
• Strong knowledge in security management and security statutory regulations.
• Strategic Management of developing business strategies and improving security management propositions.
• Independent and well-composed individual, possessing strong interpersonal, leadership, networking and communications skills preferred.
• Technological knowledge in uplifting the security workforce through IT infrastructures.
• Experience in leading security teams in various countries across the Asia Pacific region.
• Detailed orientated with the ability to write investigation and audit reports.
• Strong experience in identifying and analyzing the present and future security needs of an organization.
• Ability to report to work during silent hours and weekends, and ability to work long hours.

Job Responsibilities

• Develop and maintain all documentation on security policies, standards and controls and enforce compliance with policies and procedures in entire organisation
• Develop, implement and monitor reporting mechanisms for governance, security and risk practices to support compliance and highlight areas of exposure
• Keep abreast of current advances in all areas of information technology concerning vulnerabilities, security breaches or malicious attacks, and maintain up-to-date knowledge of IT security industry
• Work with internal units to conduct regular reviews and audit of IT systems and applications to ensure statutory compliance
• Develops, tracks, and reports on Key Risk Indicators (KRIs) for information technology security risk assessment progress
• Support data protection under Personal Data Protection requirements
• Develop and maintain business continuity plan and IT disaster recovery plan. Conduct annual business continuity and IT Disaster recovery testing
• Conduct IT risk assessment, review and reporting of key IT risk exposures and metrics, develop IT risk management framework and remediation plans to improve security posture with IT security best practices
• Assist in the execution for enterprise information and security governance and architecture roadmap
• Identify potential threats or attempted breaches to minimise vulnerabilities and risks in operating environment
• Design, develop and conduct cybersecurity and personal data protection act awareness workshops.
• Execute, manage, enhance and implement security operational processes to comply with IT regulatory and corporate requirements
• Responsible to ensure information security agreement is established for any required IT system/service contracts
• Perform incident and security management through Identify, Protect, Detect, Respond and Recover functions
• Any other related tasks assigned by supervisor

Job Requirements

• Bachelor’s Degree in Computer Science / Cyber Security / Information Technology or equivalent
• Minimum 3 years’ experience in IT audit, IT security or Data protection
• Possess relevant IT Governance, security and project management certifications (eg COBIT, CISSP, CISA, CISM, CITPM, PMP) will be advantageous
• Strong understanding of key IT security concepts such as access control, confidential data, encryption, business continuity, info-sec scans, and vendor apps
• Strong knowledge of IT organisation business processes and systems including (IT Security, data management, architectural and planning, technology life cycle management)
• Good understanding of risk management functions, including IT audit, cyber security, and/or IT compliance.
• Experience in or knowledge of 3rd party / vendor management lifecycle
• Good understanding of Singapore Personal Data Protection Act (PDPA)
• Strong oral and written communication skills to work effectively with staff at all levels of the organisation

Note: All new hires will be offered a two-year contract in the first instance. Contract renewal and emplacement on permanent appointment will be subject to continuous good performance.

Responsibilities :

● Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.

● Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.

● Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.

● Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.

● Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.

● Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.

● Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.

● Developing and implementing security policies and procedures that ensure the organization’s data

and systems are protected against cyber threats.

● Conduct regular vulnerability assessments and penetration testing to identify potential security

weaknesses and risks to make improvements in the organization’s security.

● Report all security incidents to the home office and work with corporate IT on response and resolution strategy.

● Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.

● Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

● Bachelor’s degree in computer science, information technology, or equivalent experience.

● 5+ Years of experience in a cyber or information security management role.

● Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).

● Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.

● Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.

● Demonstrated understanding of business processes, IT risk management, and related standards.

● Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.

● Excellent problem-solving skills and the ability to think critically under pressure.

● Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.

● Proven track record of staying current with evolving cybersecurity threats and best practices.

● Exceptional planning and organizational skills, and excellent written and oral communication.

● Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.

● Professional information security certification preferred, such as:

○ CompTIA Security+

○ Certified Information Systems Security Professional (CISSP)

○ Certified Information Systems Auditor (CISA)

○ Certified Information Security Manager (CISM)

Location: East area

HOW TO APPLY :

Interested candidates, please submit your resume by clicking on “Apply Now” or aliceyap(a)hkmsvs.com

All applications will be treated in the strictest confidence and only shortlisted candidates will be notified

Yap Lay Choo

EA Licence No. 03C5391 | Registration No. R1987101

Exciting role in the Public Sector related to Events on Emerging Technologies!

Job Responsibilities:

• Engage and work with internal and external stakeholders to identify, arrange invitations and manage speakers
• Facilitate planning of pre-event activities/touchpoints/meetings with senior stakeholders to cultivate relationships and interest throughout the year
• Keep good records of speaker invitation statuses and requirements by working across teams, and keep team updated
• Keep tabs on key tech trends and developments to provide input for curation/formulation of topics and talking points that will drive the Agenda
• Liaise with and manage partners in line with programme/event development.
• Liaise with and manage Knowledge and Event Partners on programming and content deliverables.
• Liaise with and manage Preferred Industry Partners and other types of sponsors.
• Other adhoc duties assigned

Looking for:

• Singaporeans only
• Min. Degree in Marketing/Mass Communications/Arts & Social Sciences/Business Management or any relevant field of study
• Min. 5-7 years of experience in supporting conference management, research, programming and information administration functions with good record keeping skills
• Self-motivated individual who is hungry for a challenge, organised, intellectually curious, proactive and looking to make an impact
• Good communication, presentation and people management skills.
• Resourceful, proactive and able to navigate well in fast-paced and dynamic environment

Interested candidate may apply via email to [email protected]. All job applications will be processed with strict confidence and only shortlisted candidate will be contacted.

Chloe Chew (R1768631)

ScienTec Consulting (ScienTec Personnel) - 11C5781

Cloud Telecommunications (S) Pte Ltd (Cloud Telecom), is an FBO (Facilities-Based Operations) Telco in Singapore. We build and own underground telecom pipes and dark fibres in strategic locations in Singapore such as subsea cable landing hub and data centre hub.

We provide next generation telecom connectivity services including Internet Services, Data Centre Interconnect (DCI), Backhaul, last-mile Local Loop services connecting commercial buildings, IP Transit / DIA and other telco services in Singapore in delivering 400G, 100G, 10G and 1G bandwidth connectivity to SME (Small and Medium-sized Enterprises), global telcos, CDN Operators (Content Delivery Network), Cloud Service Providers and Enterprise customers in Singapore.

We are looking for a legal/contract manager position.

Main responsibilities:

Contract manager oversees contracts that Cloud Telecom are involved with, so they must have in-depth knowledge of contract features. A contract manager needs to understand the advantages and pitfalls of contracts and be familiar with a plethora of contract details. Here are some of key duties and responsibilities:

• Create, analyse, negotiate, and execute an array of contracts for various transactions with relevant parties such as partners and clients.
• Maintain contract-related documents and correspondences.
• Monitor and troubleshoot contract-related problem such as breach of contract.
• Keep track of contracts, extend, renew or close them out.
• Assist with the employer's compliance with mandatory standards.
• Stay informed about changes to relevant rules and regulations.

• Advising and providing support on legal matters across range of internal and external transactions including corporate, commercial, banking and general advisory work
• Drafting, negotiating and reviewing of deal documentation and commercial contracts
• Liasing with and instructing internal and external advisory teams to manage disputes and other complete transactions.
• Working closely with the various departments within the Vallianz Group on joint ventures, ECM, tenders and commercial contracts, banking facilities and shipping-related work.
• Good autonomy on various task including non-disclosure agreements, memoranda of understanding, banking facility agreements and commercial contracts.
• Developing a good understanding of the group's business and progressively improving autonomy.

Job Description

Main duties and responsibilities:

· Establishment and management of company-wide (Group) information security management system (ISO27001)

· Manage the organization’s information security department.

· Analyze existing information security posture and establish detailed improvement plans.

· Develop or maintain and publish up-to-date information security policies, processes and standards.

· Ensure all software, technology, information security policies, processes and guidelines adhere to local legislation and legal frameworks.

· Manage all audit work and enquiries involving Information and Cyber Security across the Group.

Job Requirements:

· Bachelor’s degree in computer / information technology / information security related field or equivalent experience.

· At least 5 years of corporate information security related experience.

· Industry security certification (ISMS/ISO27001 auditor, CISA, CISSP, etc)

· Experience in privacy law (eg GDPR, PDPA), network, cloud technology (eg AWS) and IT audits

· Good communication skills in English

· Good communication skills in Korean will be an added advantage

Core responsibilities

· Review and designs for DC traction power supply systems for accuracy and compliance with customer and regulatory requirements.

· Prepares proposals and estimates in accordance with customer specifications.

· Prepares technical customer presentations for management review.

· Perform computer simulation study for AC network or DC load analysis.

· Perform protection coordination study for both AC and DC power supply system

· Develop and propose corrective actions for test procedures and test plans.

Lead the technical support effort to the customer during commissioning of the design of complex systems.

Job requirements

· Master’s degree in electrical engineering, or related discipline

· At least 25 years of electrical engineering experience, with working experience in railway projects

· Ability to develop and maintain interface systems

· Hands-on experience in applying quality procedures and safety standards in a professional product development environment

Strong communication, interpersonal and analytical skills

Roles and responsibilities:

• Develop and implement a long-term Information Security & Cyber Security strategies and roadmap to protect corporate information and IT assets.
• Set up Cyber Security policy to standardize practice and govern all the security landscape within the group of companies.
• Provide Information security & Cyber Security strategic advice to senior management.
• Implement Information & Cyber Security testing strategy not limited to penetration testing, code review, black-box, white-box, network security scan and vulnerabilities assessment.
• Carry out independent oversight and enforce business units’ compliance with the Information & Cyber Security policies and standards.
• Drive effective implementation and communication of IT risk management and Information & Cyber Security policies, standards and guidelines.
• Perform regular reviews of the Information & Cyber Security policies and related risk assessment.
• Modernize and optimize the conduct of governance and oversight roles to maintain risk register, third-party vendor assessment, leveraging and advanced analytics for trending and compliance monitoring.
• Manage Information & Cyber Security and Personal Data Protection matters, liaise with different stakeholders and oversee the implementation of it to improve the overall Information Security, Cyber Security and Personal Data Protection.
• Work closely with IT infrastructure and application teams to ensure that overall Information & Cyber Security Architecture governance is embedded into IT operations processes.
• Conduct regular review of Security Operations Center (SOC) activities and proactively identifying and preventing threats.
• Drive the review and enhancement of third-party vendor risk management and establish a holistic framework and structure to manage the risk.
• Ensure the Information & Cyber Security practices are in compliance with applicable laws, regulations and policies.
• Conduct regular communication and refresher briefing to senior management to maintain a good level of Information & Cyber Security and information risk awareness

Requirements:

• Degree in IT/Computer Studies or Diplomas with extensive relevant cybersecurity experience
• At least 5-7 years of relevant working experience in the field of Information Security and Cybersecurity
• Possess at least one of professional cyber security certifications such as CISA, CISSP and CISM. Those with CEH, CRISC will have added advantage.
• Good communication, interpersonal skills, with proven abilities to manage multiple priorities, drive project teams and collaborate across business units and partners to achieve desired goals.
• Possess Information & Cyber Security domain knowledge across areas such as IT architecture and solutions, security operation center, application security, infrastructure & network security, data & information protection, supply chain security, cloud security, Information & Cyber Security regulations and compliance will have added advantage.
• Strong experience and knowledge in technology and Information & Cyber Security standards and policy review, oversight and governance, risk management and audit.
• In-depth knowledge of industry information and cyber security practices, frameworks and standards such as the NIST Cybersecurity Framework and ISO 27001.
• Hands-on working knowledge in managing and delivering security penetration testing, vulnerability management services and application security.

The Job

• Execute enterprise-wide cybersecurity programs for both IT and OT.
• Enhancing, reviewing and formulating of Information Security related procedures.
• Work with Security Operations Center to verify and close SOC alerts, including blocking of blacklisted IP and investigate anomalous activities.
• Lead and perform POC/testings of Cybersecurity IT/OT products and services.
• Lead and organize vulnerability assessment and penetration testing with both internal and external teams and follow up with remediations and closures.
• Lead the team to administer various security systems such as EDR, WAF, vulnerability scanner, IPS, Privileged Access Management, secure internet access platform, including onboarding of new systems and accounts.
• Participate in cybersecurity drills and exercises.
• Attend to threat intel notifications and regulators' requests and lead the team to fulfil the recommendations.
• Lead cybersecurity team in Incident Response.
• Provide cybersecurity guidance such as Security by Design to project teams.
• Any other Cybersecurity & Compliance related functions that may be assigned.

The Requirements

• Minimum 6 years of related working experience in Information Security & compliance.
• Possess Security related certifications such as CISA, OSCP, CEH, CISM, CISSP would be an advantage.
• Good understanding on Security Architectures.
• Good understanding in OT Security.
• Experienced in Secure-by-Design Principal and secure coding.
• Hands-on experience in networking, system administration, application project development.
• Willingness to hands-on as part of mentoring the team to meet its objective in a collective manner.
• Highly resourceful individual who possess strong analytical skills.
• Well verse in security related products such as firewall, Intrusion Protection System, etc.
• Well verse in Security Standards such ISO27001, IEC62443, NIST & CyberSecurity Act. etc.
• Well verse in MITRE ATT&CK framework.
• Good understanding of various regulation/laws related to cybersecurity.
• Able to explain technical ideas to non-technical audience such as Senior Management and other Internal Stakeholders.