Total 614 compliance manager job vacancies in Legal / Public / Security category in Singapore

KPMG Cybersecurity professionals assist clients to address their concerns around Confidentiality, Integrity, Availability and Privacy of their technology, business systems, and information assets. Using a holistic view of how Technology and Business integrate, the Cyber team performs technology-risk focused assessments, technology compliance, IT/operational process reviews, and design of information risk & cyber security solutions.

To join a growing team to assist clients with managing one or more of the following areas:

• Ethical Hacking – this discipline covers vulnerability assessment, application and network penetration testing, wireless security, mobile security, and system security testing.
• Cybersecurity Risk & Governance – this discipline covers designing and implementing Cybersecurity frameworks; Cyber maturity assessments; organisational design for Cyber Security; Cloud security; design and rollout of cyber security processes such as Incident Management, Intrusion Detection, and Security Monitoring.
• Technology Risk and 3rd Party Cyber Risk – this discipline covers IT-Business related consulting over how an organisation manages technology risk and governs its outsourcing. This involves review, re-design and implementation controls over the 3rd party organisation’s IT environment. Topics include system development, project management, business or IT outsourcing, business continuity management, information security, incident management, user access management.
• Cyber Business Continuity, Disaster Recovery & Crisis Management – this discipline covers building business and technology resilience against cyber-attacks. Creating and testing Cyber Incident Response Plans around typical cyber-attack scenarios. Taking regulatory requirements around BCM and Crisis management and international standards based consulting.
• Governance Risk and Compliance (GRC) - This discipline covers implementation of IT solutions for use cases such as Access control, Process control, Risk management, Compliance Management, Third party vendor risk management. This discipline also covers the area such as Pre/Post implementation review for large IT projects.

Cyber team members regularly interact with C-Suite clients, such as Chief Executive Officer (CEO), Chief Information Security Officer (CISO), Chief Information Officer (CIO), Chief Operating Officer (COO), Chief Risk Officer (CRO) and their direct reports. Hence, a client centric mind-set, understanding of IT within a Business context, and well-developed communication skills are desirable.

The role involves:

• Identify and resolve complex issues and develop innovative solutions for high profile clients on a variety of local and international engagements
• Actively identify and support business development opportunities which includes supporting the team with sales activities such as proposal writing and client presentations
• Coach and develop team members as part of the firm’s overall Performance Management process or on specific engagements
  

The ideal candidate should possess:

• Degree in technology, engineering, or business studies with information systems major/minor along with deep interest in technology risk, security and IT governance will be considered
• Minimum 3 years of consulting experience in IT risk assessment or IT security
• Good knowledge on new developments in cyber services capabilities and industry knowledge
• Good working knowledge of information security principles, techniques and standards
• Professional certifications such as CISSP, CRISC, CISA, CISM, PMP or other relevant qualifications
• Driven to learn new things and share knowledge with your clients and colleagues
• Strong analytical, problem-solving and interpersonal skills
• Excellent written and oral communication skills with the ability to present ideas and results to technical and non-technical audiences

Only shortlisted candidates will be contacted by KPMG Talent Acquisition team, personal data collected will be used for recruitment purposes only.

At KPMG in Singapore we are committed to creating a diverse and inclusive workplace. We believe that diversity of thought, background and experience strengthens relationships and delivers meaningful benefits to our people, our clients and communities. As an equal opportunity employer, all qualified applicants will receive consideration for employment regardless of age, race, gender identity or expression, colour, marital status, religion, sexual orientation, disability, or other non-merit factors. We celebrate the different talents that our people bring and support every staff member in their journey to achieve personal and professional growth. One of the ways we do this is through Take Charge: Flexi-work, our flexible working framework which enables agile and innovative teams to help deliver our business goals.

The Job

As a member of the CapitaLand Development in-house legal team, you will be working on several complex transactions involving real estate acquisitions, development and divestments. This would involve structuring based on legal requirements and to achieve tax efficiency, M&A transactions, joint ventures, and general advisory work. Our in-house counsels provide legal expertise and a seamless integrated service across our offices in Singapore and other countries (e.g. China, US, Korea, Indonesia, Malaysia, Vietnam, Japan, Australia). You will counsel and strategically collaborate with our business partners in Singapore and overseas to minimize risk, creatively solve problems, contribute to cost-saving initiatives and resolve disputes, while achieving the company’s business goals.

Responsibilities

Your key responsibilities will include the following:

• Provide legal support and advice to the various departments and business units of the company, including country operations, finance, sales, human resources, and the project design, development and construction teams, on all real estate, development and construction-related legal matters
• Negotiate, draft and review a wide range of real estate agreements, purchase and sale agreements, leases, employment contracts, financing and mortgage/security agreements, vendor agreements, service agreements, NDAs, and more
• Negotiate and minimize risk in joint venture agreements with partners
• Assist in the creation of processes for managing legal issues from all business areas and help provide training, create templates, and manage workflows to allow business units to move quickly while addressing key risks
• Work with external counsel as necessary on litigation, disputes, and other matters
• Manage external counsel on transactions to ensure high quality, commercially focused, and cost-effective legal advice
• Report directly to the Head of Legal, and work with senior executives to design efficient and effective general controls
• Assist in the drafting of policies, guidelines, legal templates and other documents to ensure best practices
• Assist in corporate secretarial matters

Qualifications

• Minimally, you should hold a Bachelor’s degree in Law and have at least 5 years PQE in a law firm or as an in-house counsel with a corporate real estate focus
• Good academic history and proven legal skills, combined with a strong reputation for providing commercial solutions, excellent transactional and management skills
• Strong background in general corporate work, probably gained from practice in a law firm or as an in-house counsel
• Able to work confidently with our stakeholders, as well as create workable bespoke solutions to facilitate our stakeholders’ objectives
• Experienced in advising on complex international transactions and in organising and managing transactions, including cross border transactions
• Excellent document drafting skills, strong communication and analytical skills along with a high level of commercial awareness
• You must be able to thrive in a team with high professional standards and have a flexible client-friendly commercial approach
• Exceptional judgment and ability to act decisively in situations requiring quick but thorough analysis and decision-making while understanding when and how to escalate issues appropriately

WHAT’S THE JOB?

Perform hotel security duties and procedures to ensure the safety and security of guests, employees and the property as well as the property’s assets and also part of the Company Emergency Response Team (CERT) assisting Fire Emergencies.

Setting and monitoring goals for performance and deadlines in ways that comply with company's plans and vision for the Team. Organizing workflow and ensuring Team’s productivity is being achieved while providing coaching and Development.

Your day-to-day

• Oversee the security department including their performance, key job responsibilities and regular training;
• Manage the develop and implementation of departmental standards, including disciplinary, or other staffing-human resources related actions in accordance with Company rules and policies;
• Establish good communication and good will with informal leaders and relevant members of local community;
• Ensure the all security personnel as well as hotel’s staff are adhering to P&P and security procedures;
• Prepare security plan for specific events/ functions as required for VIPs, High Profile guests, Government, Owners, Royals, etc;
• Working with Finance on controlling labour costs and expenses within the Security department;
• Assist with managing the daily activities of the security department. Plan and organize work and schedule employees to ensure proper coverage. Communicate and enforce policies and procedures;
• Schedule preventative maintenance and repairs to Security equipment as needed and ensure that equipment is prepared and operational for the following day’s work;
• Support Director of Engineering, Risk & Security on risk management and WSH related matters.
• Initiate action to correct a hazardous situation and notify supervisors of potential dangers;
• Coordinate with the local investigator in crimes & accident handling and investigating;
• Liaise with external organisations including emergency services regarding security and safety issues;
• Assist with establishing documentation and confidential reporting systems to ensure that appropriate investigation and results are available for current litigation /settlement and future reference;
• Ensure that the Fire Command Centre is never left unattended and attend to all alarms, medical & fire emergencies, and other similar matters;
• Be thoroughly familiar of the property layout, design, entry and exit points in order to lead and direct guest whenever possible;
• Supervise and assist Emergency drills, evacuate premises and contact appropriate emergency services if required;
• In the event of fire, be thoroughly familiar with and guided by the hotel’s emergency plan and be familiar with location of fire alarms and firefighting equipment;
• Ensure checks are conducted on fire panel, fire Hosereel, fire barriers, fire exit doors and all safety equipment to be in good working order.

WHAT WE NEED FROM YOU

• Must possess PLRD license with relevant employment grading;
• Physically fit and active, able to work shifts, weekends, and/or holidays;
• Minimum Diploma qualification with at least 5 years of working experience in a similar capacity, in the hotel industry;
• Certified First Aid Trained with CPR & AED;
• Good leadership skills and able to lead a team;
• Great communication skills with Guests and colleagues;
• Analytical, problem solving, reasoning and organizational skills are required;
• Computer skills including the use of program such as Microsoft Outlook, Word, Excel, PowerPoint.

Job Responsibilities

• Collaborate with other departments to review and draft trading contracts, bank facility, guarantee and other related agreements, letters, contract templates and other legal and compliance related documents;

• Provide support to other departments in terms of legal advice and opinions on legal rights and obligations of the Company and on any other operations and corporate related legal issues arising from business activities;

• Provide legal support in handling commercial claims, disputes and cases; co-ordinate and manage external counsels for transactions, disputes, arbitration, litigation and other legal proceedings;

• Handle and provide support for M&A and other investment projects;

• Responsible for legal updates, dissemination and analysis of new and/or revised laws and regulations. Research on legal issues, provide related training whenever applicable and ensure overall legal and compliance policies and procedures are in line with the legal and statutory requirements;

• Oversee counterparty on-boarding process and advise on compliance related matters, such as anti-corruption, anti-money laundry and trade sanctions;

• Provide clearance and advice on the documents to be provided by the Company to counterparties for KYC purpose;

• Collaborate with other departments to draft legal and compliance related Policies and coordinate the setting up of internal policy and process of the Company; and

• Prepare annual work plan in relation to legal and compliance functions.

Job Requirements

• Possess Bachelor Degree in Law from a recognized University.

• Minimum 10 years and above of experience in general corporate and commercial work, preferably with experience in both private practice and in-house environment in oil and gas or related industry.

• With related experience/involvement in Merger & Acquisition and / or Project Management.

• Prior experience in corporate secretarial work with knowledge of Singapore and English Law.

• Meticulous, attention to details, conscientious and possess good communications and interpersonal skills.

• Excellent Time Management, Coordination and Communication skills.

• Able to read, write and speak in both English and Mandarin (due to requirements to draft and review contracts and documents in Chinese, to liaise with Chinese stakeholders, counterparties and customers)

• Business travel is required for this position.

• Proficient in Microsoft Office suite.

About the company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.

Responsibilities

- Lead and manage a team of passionate individuals focused on improving the security posture of the company's products and systems.

- Develop positive and trusted relationships with business partners both inside and outside of the company.

- Ensure individual support and talent development for direct reports, leading the team in terms of technical excellence and practicing ByteStyle principles.

- Design and perform tests and check cases to analyze design, architectures, existing systems services, operating systems, networks and applications from a security perspective, via black box testing, code reviews, automation, threat modeling and research. This is to meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards.

- Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

- Certify infrastructure components, systems and applications that meet security standards.

- Discover security issues that appear under new threat scenarios, support incident response, forensics, remediation in a cross-functional environment driving towards incident resolution.

Qualifications

- Bachelor's degree in Information Security, Computer Science, Computer Engineering, Electrical Engineering, or other relevant majors.

- 5+ years of security engineering experience such as design review, threat modeling, security mitigation development, security tooling development or privacy engineering.

- 2+ years of people management in an engineering organization, strong leadership skills and stress-resistance.

- Advanced knowledge and understanding in various disciplines: web application security, mobile app security, network security, operating system internals and hardening, applied cryptography, cloud computing. You're expected to be an expert in at least one of these areas.

- Solid experience in writing and reviewing code in at least one of the following programming languages: JavaScript (Node JS), Go, Python, Java, C++, Rust.

- Strong problem-solving skills and excellent debugging / troubleshooting skills.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

We are looking for Legal secretary to join our Litigation Department - Personal Injury/Property Damage

Requirements:

- Experience in handling Personal Injury claims and Property Damage matters

- Responsible, Dedicated and Diligent worker

- Able to work in a fast paced environment

- Able to converse in English, Mandarin and dialect preferred

- Team Player with Positive Attitude

- Proactive, well-organised, mature-minded with outstanding problem-solving and communication skills

- Salary will commensurate with experience

Candidates who fit the above requirements and are keen, kindly write in with your full resume; recent photograph; and, expected remuneration to: [email protected].

Please note that only shortlisted candidates will be notified

Manager/Senior Manager - Cyber Security (Threat Hunting)

A first-tier company is currently looking for a Manager/Senior Manager - Cyber Security (Threat Hunting) to champion and pioneer the IT Security Team in APAC. You will be responsible with the introduction and adoption of latest IT Security policies to accelerate delivery of business value

Key Responsibilities:

• Provide leadership and expertise for information security to safeguard the digital assets and enhance the security
• Liaise with IT or business users to manage and implement IT Security systems projects.
• Conduct threat simulation to identify early indicator of compromise
• Manage vulnerabilities on a continuous basis and work with patch management team to ensure vulnerabilities are managed within acceptable threshold.
• Perform information security assurance function and work with Solutions team to mitigate the gaps identified at the solutions.
• Conduct both internal and external review of IT systems security for compliance with policies and standards.
• Review security architecture design and implement solutions to ensure systems are built to meet company’s cybersecurity framework and policies.

Job Requirement:

• Degree in IT, Computer Science or equivalent
• Professional related certification in IT Security e.g. CISSP
• 8 years’ experience in IT/Cyber Security domain
• Strong background in Web Security, Endpoint Security and Threat Hunting & Monitoring.
• Experience with Vulnerability Management and Cloud Security
• Strong communication and social/team dynamic skills
• Ability to work well in a team environment and develop working relationships with IT functional areas through
• Strong analytical and problem solving skill.

Office Location: Central

Kindly indicate your current/last salary details and also your notice period

Interested candidates kindly forward your CV to [email protected] (Dorothy Ma Li, Reg No: R1769176).Feel free to forward this great opportunity to someone who would be a great fit for this role.

All information will be kept strictly confidential. We regret to inform that only successful applicants will be contacted.

PeopleSearch Pte Ltd

EA License No: 16S8057

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Internal Security Risk Management & Governance team is responsible for managing and mitigating information security risks posed within the organisation. To ensure that the company's risk management and governance strategies are up to date and aligned across the organisation, this team is responsible for regular industry benchmarking and working with stakeholders from cross-functional teams to perform regular risk assessments and align risk mitigation strategies. This team is also responsible for managing the optimization, operation, training, and data analysis of the internal threat platform and UEBA (User and Entity Behavior Analytics) platform within the company.

Responsibilities

The Internal Security Risk Management & Governance Manager will research industry best practices and technologies, then work with stakeholders from various cross-functional teams to develop strategies to mitigate the potential impact of risk materialisation. Based on formulated strategies, the manager will develop and implement policies, procedures, and controls to prevent, detect, and respond to various risks that could impact the confidentiality, integrity, and availability of the organization's systems, data, and other critical assets.

- Perform risk assessment based on Internal Security risks; Identify and assess potential information security risks posed within the organization and the existing policies/procedures/controls mitigating such risks.

- Assess and develop overall mitigation strategies across the company to minimize the impact of relevant incidents.

- Research industry best practices and technologies, perform industry benchmarking and gap analyses.

- Develop and implement internal security risk management programs (e.g. comprehensive audit loggings, insider threat detections, privileged access management & governance), procedures, and controls to prevent, detect, and respond to relevant incidents.

- Operate insider threat detection programs and manage business stakeholders to design programs based on business understanding and risk scenarios.

- Work with stakeholders from engineering, SecOps, IT, legal, HR, Ethics to ensure that all aspects of internal information security risk are addressed.

- Develop and maintain relationships with internal and external partners to stay current on industry best practices related to information security risk management, making recommendations for action for senior management.

- Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions.

Qualifications

- Bachelor's degree in a relevant field, such as information security, risk management, or business administration.

- At least 5 years of experience in a similar role, with a proven track record of managing internal security risk and consultancy experience is a bonus.

- Experience developing and implementing internal security risk management policies, procedures, and controls. Knowledge of risk assessment methodologies and tools.

- Calm and composed personality, a strong inclination towards learning, and a team-oriented mindset.

- Team builder, strong written/verbal communication and excellent teamwork skills with the ability to interact effectively with stakeholders at all levels of the organization; strong analytical and problem-solving skills.

- Self-driven and results-oriented, enjoys challenging tasks, demonstrates enthusiasm for work, and can handle job pressures.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Roles and responsibilities:

• Develop and implement a long-term Information Security & Cyber Security strategies and roadmap to protect corporate information and IT assets.
• Set up Cyber Security policy to standardize practice and govern all the security landscape within the group of companies.
• Provide Information security & Cyber Security strategic advice to senior management.
• Implement Information & Cyber Security testing strategy not limited to penetration testing, code review, black-box, white-box, network security scan and vulnerabilities assessment.
• Carry out independent oversight and enforce business units’ compliance with the Information & Cyber Security policies and standards.
• Drive effective implementation and communication of IT risk management and Information & Cyber Security policies, standards and guidelines.
• Perform regular reviews of the Information & Cyber Security policies and related risk assessment.
• Modernize and optimize the conduct of governance and oversight roles to maintain risk register, third-party vendor assessment, leveraging and advanced analytics for trending and compliance monitoring.
• Manage Information & Cyber Security and Personal Data Protection matters, liaise with different stakeholders and oversee the implementation of it to improve the overall Information Security, Cyber Security and Personal Data Protection.
• Work closely with IT infrastructure and application teams to ensure that overall Information & Cyber Security Architecture governance is embedded into IT operations processes.
• Conduct regular review of Security Operations Center (SOC) activities and proactively identifying and preventing threats.
• Drive the review and enhancement of third-party vendor risk management and establish a holistic framework and structure to manage the risk.
• Ensure the Information & Cyber Security practices are in compliance with applicable laws, regulations and policies.
• Conduct regular communication and refresher briefing to senior management to maintain a good level of Information & Cyber Security and information risk awareness

Requirements:

• Degree in IT/Computer Studies or Diplomas with extensive relevant cybersecurity experience
• At least 5-7 years of relevant working experience in the field of Information Security and Cybersecurity
• Possess at least one of professional cyber security certifications such as CISA, CISSP and CISM. Those with CEH, CRISC will have added advantage.
• Good communication, interpersonal skills, with proven abilities to manage multiple priorities, drive project teams and collaborate across business units and partners to achieve desired goals.
• Possess Information & Cyber Security domain knowledge across areas such as IT architecture and solutions, security operation center, application security, infrastructure & network security, data & information protection, supply chain security, cloud security, Information & Cyber Security regulations and compliance will have added advantage.
• Strong experience and knowledge in technology and Information & Cyber Security standards and policy review, oversight and governance, risk management and audit.
• In-depth knowledge of industry information and cyber security practices, frameworks and standards such as the NIST Cybersecurity Framework and ISO 27001.
• Hands-on working knowledge in managing and delivering security penetration testing, vulnerability management services and application security.

Job Description:

• Oversee the hosting of critical business solutions in the Regional Cloud Infrastructure.
• Contribute to the consolidation and integration of cloud services within the region.
• Design and implement infrastructure for Operation Companies (OPCOs) to connect to global and regional solutions.
• Participate in various regional IT infrastructure projects, focusing on upgrades and legacy system elimination.
• Provide support for SD-WAN and other infrastructure initiatives in the region.
• Collaborate with global, regional, and country IT teams to implement and uphold global IT security initiatives.
• Manage tasks like patch management automation and the implementation of multi-factor authentication (MFA) using tools such as Manage Engine, Zscaler, Rapid 7, and Trend Micro EDR.
• Execute initiatives recommended by Global Security Audit (GSA) teams to enhance IT security posture.
• Assist in documenting IT section policies.
• Conduct regular PDCA (Plan-Do-Check-Act) cycles and follow-ups with countries to ensure adherence to the outlined initiatives.

Job Requirements:

• Possess a minimum Bachelor's degree in IT or a related field.
• Demonstrate 5 to 7 years of in-depth experience in managing IT infrastructure and security at a regional level.
• Exhibit business-driven thinking with a robust understanding of prevailing IT infrastructure and security solutions.
• Possess strong project management, problem-solving, and coordination skills.
• Have experience with cloud solutions, particularly in managing a regional cloud setup using Azure.
• Be proficient in Microsoft O365 tools.
• Be open to business travel as required.

HOW TO APPLY:

Interested applicants, please click on “Apply Now” and provide the below details in your resume.

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd
EA License No: 19C9950
EA Personnel: Jordan Fung Si Jong
EA Personnel Reg No: R23112945

Job Duties:

• Design and perform tests and check cases to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and non-repudiation standards.
• Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.
• Certify infrastructure components, systems and applications that meet security standards.

Job Requirements:

1. Responsible for all SIT planning and execution – successful functional, interfaces connectivity and technical test completion
2. Should have extensive cards domain experience(VisionPLUS), managing large SIT/UAT works
3. Experience in migration of platforms testing, legacy to new technology (Eg. Mainframe to new age systems)
4. In depth knowledge, specifically cards “issuing” functionality and ability to map gaps in test coverage
5. Excellent communication skills with spoken and written materials preparation, within short span of time
6. Pro-active approach to identify upcoming risks and manage the same in efficient manner
7. Clarity in prioritising top items to focus during test planning, test execution and escalations, if any
8. Highly responsive by nature to work with all key stakeholders and establish best in class quality process
9. Excellent hands on knowledge with Jira dashboarding, test management tools and reporting of quality metrics
10. Experienced in Test automation approach and understanding of automation framework
11. Build and contribute to the overall testing plan that adheres to project schedule
12. Effectively plan, coordinate and control all test activities
13. Work with other stream leads ensure SIT region builds are fit for purpose and delivered on time
14. Work with stakeholders ensure testing schedule is strictly adhered to, escalate when required
15. Adoption of testing tools including testing automation, integration with upstream / downstream
16. Effectively manage defects, ensuring timely resolution that adheres with the agreed SLA
17. Document test activities and prepare testing results reported aligning with program governance
18. Be a problem solver rather than coordinator and demonstrate servant leadership where needed

The Job

• Execute enterprise-wide cybersecurity programs for both IT and OT.
• Enhancing, reviewing and formulating of Information Security related procedures.
• Work with Security Operations Center to verify and close SOC alerts, including blocking of blacklisted IP and investigate anomalous activities.
• Lead and perform POC/testings of Cybersecurity IT/OT products and services.
• Lead and organize vulnerability assessment and penetration testing with both internal and external teams and follow up with remediations and closures.
• Lead the team to administer various security systems such as EDR, WAF, vulnerability scanner, IPS, Privileged Access Management, secure internet access platform, including onboarding of new systems and accounts.
• Participate in cybersecurity drills and exercises.
• Attend to threat intel notifications and regulators' requests and lead the team to fulfil the recommendations.
• Lead cybersecurity team in Incident Response.
• Provide cybersecurity guidance such as Security by Design to project teams.
• Any other Cybersecurity & Compliance related functions that may be assigned.

The Requirements

• Minimum 6 years of related working experience in Information Security & compliance.
• Possess Security related certifications such as CISA, OSCP, CEH, CISM, CISSP would be an advantage.
• Good understanding on Security Architectures.
• Good understanding in OT Security.
• Experienced in Secure-by-Design Principal and secure coding.
• Hands-on experience in networking, system administration, application project development.
• Willingness to hands-on as part of mentoring the team to meet its objective in a collective manner.
• Highly resourceful individual who possess strong analytical skills.
• Well verse in security related products such as firewall, Intrusion Protection System, etc.
• Well verse in Security Standards such ISO27001, IEC62443, NIST & CyberSecurity Act. etc.
• Well verse in MITRE ATT&CK framework.
• Good understanding of various regulation/laws related to cybersecurity.
• Able to explain technical ideas to non-technical audience such as Senior Management and other Internal Stakeholders.

If you are a skilled Physical Security Manager seeking an exciting opportunity, Control Risks has a perfect position for you! We are currently in need of a Physical Security Manager to join our client, a prestigious financial sector company based in Singapore. This is a contract role that will last for 5-6 months.

In this position, you will directly report to the CFO and be responsible for leading a small security team and a 10-person guard force. You will oversee all aspects of physical security for the company, including the security management of their main office locations in Singapore and their international subsidiaries. Your responsibilities will include incident and crisis management, coordination of Business Continuity Planning (BCP), leading an ongoing Security by Design (SBD) project, and actively participating in the company's internal audit cycle.

If you are ready for this exciting challenge, ideally we would like you to start in early February, before the commencement of the Chinese New Year celebrations. The contract will last until July, providing you with a rewarding opportunity to showcase your skills and make a significant impact on the organization.

• A Bachelor’s degree in a security-relevant field or comparable experience.
• A solid military or law enforcement background with at least 7 years of practical experience in a dynamic corporate security environment.
• Experience within the financial services or critical infrastructure industry would be highly valued.
• Reside in Singapore with authorisation to work.
• An extensive understanding of physical security systems and their components.
• Familiarity with crisis communications and operations, utilising risk management methodologies.
• Demonstrated experience working with access control and other security systems.

• Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarised in the full job offer.
• We operate a discretionary global bonus scheme that incentivises, and rewards individuals based on company and individual performance.
• Control Risks supports hybrid working arrangements, wherever possible, that emphasise the value of in-person time together - in the office and with our clients - while continuing to support flexible and remote working.
• As an equal opportunities employer, we encourage suitably qualified applicants from a wide range of backgrounds to apply and join us and are fully committed to equal treatment, free from discrimination, of all candidates throughout our recruitment process.

Job description

Primary Objectives of Position

Manage information security operation to ensure the safe use of information systems and assets as well as protect information assets against cybersecurity threats.

Manage various stages of projects in conception and initiation, planning, execution, performance/ monitoring, and project closure.

Job Responsibilities

• Establish, implement, and maintain a sustainable information security framework that effectively addresses evolving and diverse cybersecurity threats.

• Perform risk assessments on IT systems, network and applications for vulnerabilities and implement security controls to reduce identified risks to an acceptable level.

• Perform information security audits to determine security violations and inefficiencies and recommend effective security controls.

• Hold management review and lessons learned meetings to help improve information security measures and incident handling process.

• Monitor security alerts/ logs from IT systems, network and applications against baselines and gather publicly available information to identify precursors or indicators of cybersecurity attacks.

• Contain and eradicate cybersecurity incident effectively to prevent recurrence and restore systems and recover normal operations as quickly as possible.

• Publish security advisories, conduct security workshops, and share lessons learned to improve users’ awareness regarding information security matters.

• Oversee information security investigations with internal team, funders, and local authorities and/ or 3rd party providers.

• Participate in various meetings and share compliance/ performance reports and audit findings to Management teams.

• Liaise with internal and external stakeholders in implementing information security related measures or projects.

The above activities are no means exhaustive and are subjected to amendment whenever is needed.

Job Requirements

Minimum Education / Qualifications

• Degree in Information systems or equivalent.

Minimum Years of Relevant Experience

• 2 years’ experiences in setting up and managing information security operations.

Knowledge/Skills

• Experiences in ISO27001 ISMS, CIS, and/ or NIST frameworks.

• Experiences in managing threat, vulnerability and incident, and understanding in digital forensic investigation, tools, and processes.

• Knowledge in security protections, practices, or solutions like Firewall, IDS/ IPS, network segmentation, DLP, WAF, NAC, WiFi security, cryptography, endpoint protection, OWASP, etc.

• Certifications in CISA, CISM, CISSP and/ or PMP will be an advantage.

• Knowledgeable in Microsoft Office and other Windows and web applications.

Attributes (functional or leadership competencies)

• Meticulous and hands on.

• Excellent communication and written skills.

• Strong analytical and problem-solving skills.

• Team player with excellent interpersonal skills and multi-tasker.

• Customer-centric and proactive.