Total 7 compliance manager job vacancies in Legal / Public / Security category in Kaki Bukit, South East

The Job

Specific (85%)

• Oversee and manage IT security, audits, and compliance, ensuring the implementation of robust security measures, adherence to regulatory requirements, and the effective management of risks, data protection, and business continuity planning. Recommend and implement innovative tools and solutions to improve the organisation's cybersecurity posture.
• Security Implementation: Implement and review IT security systems, tools, system patches, upgrades and solutions to safeguard application, system and infrastructure.
• System and Audit Compliance: Ensure continuous improvement and compliance of on-premises and cloud-based systems with applicable security and regulatory standards (e.g., ISO 27001, PDPA). Work with CISO, internal teams, cyber insurance, vendors and external auditors to meet compliance requirements with security policies.
• Security Operations: Manage, monitor, and establish security operations procedures, including incident response workflows, tabletop exercise and drill.
• Risk Management: Conduct regular assessments to identify IT risks and vulnerabilities. Plan and implement mitigation strategies to minimise security risks.
• Cybersecurity Awareness: Plan and conduct training programs to promote cybersecurity awareness among employees. Educate staff on best practices for secure system use and data protection.
• Data Governance & Protection: With closely with DPO to implement data security controls and ensure compliance with data governance frameworks and PDPA.
• Business Continuity Planning (BCP): Plan and put in place effective BCP plan for operational continuity with key stakeholders. Organise cybersecurity assessments and tabletop exercises to test and refine plans.
• Disaster Recovery Plan (DRP): Plan and put in place disaster recovery strategies and procedures for IT systems and data. Coordinate with application and infrastructure teams to ensure recovery objectives are met through regular testing and updates.
• Incident Response: Lead and coordinate incident response efforts, ensuring swift resolution of cybersecurity breaches. Establish and maintain post-incident reporting and root cause analysis processes.
• Assist Head of IT in the planning of annual IT budgets and projects planning.

General (15%)

• Work closely with the infrastructure and network team to ensure maximum system stability and uptime.
• Any other duties, tasks and non-IT related events as assigned by Head of information Technology.

Job Highlights

• Career Development Opportunities
• Duty Meals, Birthday Leave and Flexible benefits
• Complimentary Room Nights
• Discounted Room and Dining Rates

We are looking for Assistant Security Manager to join our Fun and Vibrant team.

As a Assistant Security Manager, we rely on you to

• Assists the Security Manager in the operations of round-the-clock overall security and fire-safety services.
• Assist in control of the Security Department and supervise security officers
• Responsible for maintaining adequate and effective security measures for the hotel
• Ensuring maximum protection is given to the guests
• Ensure hotel and guest properties are safeguard against loss, damage and other untoward accidents
• Handle all incidents in a professional and timely manner
• Safeguard all information relating to the Hotel, Guests, and Company

We are looking for someone who:

• Candidate must have completed minimally Secondary School “O” Levels, and/or NITEC / Diploma in Safety and Security
• At least 3 years of working experience in the related field is required for this position
• Security License and relevant WSQ Training Certificate
• Candidates must also display alertness, good communication skills and honesty

About utu

utu is a fast-growing technology company revolutionizing the tax-free shopping experience for tourists worldwide. Our mission is to empower travelers to seamlessly maximize their VAT refunds. Partnering with leading retailers, airports, and brands, we allow travelers to turn their shopping journeys into even more valuable experiences.

About the Role

We are seeking a highly motivated and results-oriented Legal Manager to spearhead our in-house Legal Counsel needs. In this pivotal role, you will be responsible for reading and writing contracts, making sure the company is meeting its legal requirements, assisting on the legal side of fundraises, and coordinating with counterpart legal counsels. This is an incredible opportunity for ambitious individuals who want to build a career in a fast-growing startup. This job is based in Singapore.

What You’ll Do

• Advise, draft, and negotiate a wide range of contracts (including commercial contracts, service agreements, marketing agreements, joint venture agreements and NDAs).
• Ensuring compliance with all applicable legal and regulatory requirements.
• Protecting utu’s intellectual property.
• Provide legal support for fundraising activities.
• Assist on the legal side of M&A transactions.
• Advise on regulatory matters including employment laws, personal data protection laws, payment services, medical/health laws and regulations.
• Conduct comprehensive research on various legal and regulatory issues.
• Provide legal advice for the company’s operations in various jurisdictions.
• Liaise with external counsel, both domestically and internationally as needed.

Preferred Experiences & Skills

• Law degree required (LLB/JD or equivalent).
• Called to the Singapore Bar or any Commonwealth country’s Bar.
• At least 4 years of experience as a lawyer or in-house counsel.
• Demonstrated problem-solving abilities and keen attention to detail.
• Excellent communication and presentation abilities.
• Strong interpersonal skills and the ability to articulate complex legal concepts clearly.
• Ability to collaborate effectively with cross-functional teams and senior stakeholders.
• Adaptability and ability to thrive in a fast-paced and dynamic environment.
• Proactive with strong organisational skills.
• Previous experience in commercial law or the technology sector will be viewed favourably.

About you

• Singaporean/PR.
• Full-time applicants only.
• Happy to work in a fast-paced startup environment.
• You are motivated to go beyond the required minimum.
• Able to adapt to meet the changing needs of the business.
• Excellent interpersonal skills.

Application instructions

Please apply for this position by filling up the form and attaching your CV. Please limit CVs to 2 pages. Interviews will be conducted on a rolling basis.

Job Summary

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

Mandatory Skill-set

• 5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;
• Strong knowledge of ISO 27001:2022 standards and requirements;
• Experience in developing and maintaining comprehensive project plans, including timelines and milestones;
• Experience in managing ISO 27001-related risks and conducting internal/external audits;
• Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

Desired Skill-set

• ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;
• PMP, CISSP, CISM, or similar certifications are a plus;

Responsibilities

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

About utu

utu is a fast-growing technology company revolutionizing the tax-free shopping experience for tourists worldwide. Our mission is to empower travelers to seamlessly maximize their VAT refunds. Partnering with leading retailers, airports, and brands, we allow travelers to turn their shopping journeys into even more valuable experiences.

About the Role

We are seeking a highly motivated and results-oriented Legal Manager to spearhead our in-house Legal Counsel needs. In this pivotal role, you will be responsible for reading and writing contracts, making sure the company is meeting its legal requirements, assisting on the legal side of fundraises, and coordinating with counterpart legal counsels. This is an incredible opportunity for ambitious individuals who want to build a career in a fast-growing startup. This job is based in Singapore.

Salary range: $6000-7000 (depending on experience)

What You’ll Do

• Advise, draft, and negotiate a wide range of contracts (including commercial contracts, service agreements, marketing agreements, joint venture agreements and NDAs).
• Ensuring compliance with all applicable legal and regulatory requirements.
• Protecting utu’s intellectual property.
• Provide legal support for fundraising activities.
• Assist on the legal side of M&A transactions.
• Advise on regulatory matters including employment laws, personal data protection laws, payment services, medical/health laws and regulations.
• Conduct comprehensive research on various legal and regulatory issues.
• Provide legal advice for the company’s operations in various jurisdictions.
• Liaise with external counsel, both domestically and internationally as needed.

Preferred Experiences & Skills

• Law degree required (LLB/JD or equivalent).
• Called to the Singapore Bar or any Commonwealth country’s Bar.
• At least 4 years of experience as a lawyer or in-house counsel.
• Demonstrated problem-solving abilities and keen attention to detail.
• Excellent communication and presentation abilities.
• Strong interpersonal skills and the ability to articulate complex legal concepts clearly.
• Ability to collaborate effectively with cross-functional teams and senior stakeholders.
• Adaptability and ability to thrive in a fast-paced and dynamic environment.
• Proactive with strong organisational skills.
• Previous experience in commercial law or the technology sector will be viewed favourably.

About you

• Singaporean/PR.
• Full-time applicants only.
• Happy to work in a fast-paced startup environment.
• You are motivated to go beyond the required minimum.
• Able to adapt to meet the changing needs of the business.
• Excellent interpersonal skills.

Application instructions

Please apply for this position by filling up the form and attaching your CV. Please limit CVs to 2 pages. Interviews will be conducted on a rolling basis.

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;

Strong knowledge of ISO 27001:2022 standards and requirements;

Experience in developing and maintaining comprehensive project plans, including timelines and milestones;

Experience in managing ISO 27001-related risks and conducting internal/external audits;

Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;

PMP, CISSP, CISM, or similar certifications are a plus;

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE's website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s Degree in Computer Science/Information Technology or equivalent.
• At least 5 years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:

- CompTIA Security+

- Certified Information Systems Security Professional (CISSP)

- Certified Information Systems Auditor (CISA)

- Certified Information Security Manager (CISM)