Total 2,635 computer security job vacancies in Legal / Public / Security category in Singapore

You will be part of a well-established international team in Information Security focused on Cloud Security Architecture, Security Tooling Engineering and Automation.  

Your role will contribute to the success of the team and the Company. 

Your key tasks

• Support Cloud & Infrastructure Organization by reviewing and analysing Network, Systems, and Application architectures to enforce and validate Security requirements.
• Leads Threat Model exercises for new services/major changes.
• Actively Collaborate with your team members to support them on daily operations, including: 
  • Review of IT infrastructure solution designs to ensure compliance with policies and standards. 
  • Operational implementation, Automation, and ownership of Security Tools 
  • Assist in deploying automation of operational processes and procedures, identify weaknesses, propose, plan, and deploy improvements to address and enhance the infrastructure design. 
• Support and maintain the APAC’s Information Security Management System (ISMS) to assure continuous compliance with regulations, laws, and contractual obligations by adopting and deploying industry and market standards and accepted best practices.
• Be on routine standby to support the team.

· Be clear of customer's security framework, such as information security policies, processes/procedures, guidelines and etc.

· Ensure compliance with customer's cybersecurity policies.

· Perform activities necessary to ensure customer's data systems and networks are secure, sure activities are not limited to log analysis and security assessment of customer ICT systems.

· To manage/conduct vulnerability assessment and coordinate penetration tests activities.

· To conduct information security awareness training

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R22111604

Job Description

• Industry/ Organization Type: Manufacturing/Industrial Machinery
• Position Title: Security Guard (Night Shift)
• Working Location: Tuas
• Working Hours: 5 days, Mon – Friday (6 pm – 9 pm)
• Salary Package: Salary $1,400
• Duration: Part-Time

Key Responsibilities

• Monitor the premises during the evening hours to ensure the security of the property and its occupants.
• Perform regular checks and patrols of the facility to deter and detect signs of intrusion and ensure security doors, windows, and gates are secure.
• Respond to alarms and investigate disturbances promptly.
• Maintain a visible presence to deter illegal and inappropriate actions, observing for signs of crime, disorder, or hazard.
• Document nightly operations in a logbook, recording observations, occurrences, and surveillance activities.
• Enforce property rules and regulations as required.
• Handle any security-related issues or emergency situations with calmness and professionalism.

APPLY NOW!!!

• Prior experience in security or surveillance, is preferred but not required.
• Strong attention to detail and able to work independently.
• Ability to respond appropriately in stressful situations.
• Possess relevant security certification preferred.
• Prefer candidates who can start immediately.

Please apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job(at)anradus.com.sg. Please indicate #66122 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

As a Security Analyst, you will play a crucial role in our mission to secure our clients' digital environments. Your responsibilities will include:

1. SIEM Expertise: Extensive experience with Security Information and Event Management (SIEM) tools, with a particular focus on Elastic Stack and Wazuh. You will be responsible for configuring, managing, and optimising these SIEM solutions to detect and respond to security incidents effectively.

2. System Administration: Serve as a system administrator to install, configure, maintain and secure various operating systems, including Windows, MacOS, and Linux. You would also be managing servers, setting up of accounts, permissions and ensuring system health and security. Experience with virtualization technologies (e.g., VMware, Hyper-V) to manage virtual machines efficiently will be necessary. Your expertise will be vital in ensuring the stability and security of our clients' infrastructure.

3. Scripting and Programming: Proficiency in scripting and programming languages such as BASH, PoweShell, Python, and C++ is essential. You will use these skills to automate tasks, create custom security tools, and analyse and develop solutions for complex security challenges.

4. Systems Architecture and Networking: Possess a strong background in systems architecture and networking to design and implement secure network infrastructures. This includes configuring firewalls, VPNs, and intrusion detection/prevention systems (IDS/IPS). You would also need to understand network protocols, IP addressing, subnetting, routing, and the ability to configure and troubleshoot network devices.

5. Security Incident Response: Be prepared to investigate and respond to security incidents, conduct forensic analysis, and develop incident response plans to mitigate future threats.

Qualifications:

To be successful in this role, the ideal candidate should have the following qualifications:

- Bachelor's degree / Masters in Computer Science, Information Technology, or a related field. Relevant certifications (e.g., CISSP, CEH, CompTIA Security+) are a plus.

- Proven experience (2 years) working with SIEM tools, like Splunk, Elastic Stack and Wazuh are a plus.

- Proficiency in system administration for various operating systems, including Windows, MacOS, and Linux.

- Strong coding skills in BASH, PowerShell Python, and C++, with the ability to develop and modify scripts and tools for security-related tasks.

- In-depth knowledge of systems architecture and networking, including firewalls, routers, switches, and VPNs.

- Excellent problem-solving and critical-thinking skills, with the ability to analyse complex security issues and develop effective solutions.

- Strong communication skills and the ability to work collaboratively within a team and communicate complex technical concepts to non-technical stakeholders.

- A passion for staying updated with the latest cybersecurity trends, threats, and best practices.

Responsibilities:

• Develop and maintain common standards, methodologies and best practices for security management to ensure IT systems are designed with due considerations for security
• Ensure security best practices and compliance standards are implemented on IT system
• Lead in the design and implementation of IT security platforms and their associated software which may include access control solutions, identity and access management platforms, data protection technologies, anti-malware, vulnerability management, security monitoring and compliance tools
• Liaise with internal and external stakeholders on cyber security issues to keep everyone abreast of expectations, project/issue status and completion
• Perform security review of IT system
• Provide consultancy and advice on IT security architecture and design considerations to IT project teams
• Strategic planning for IT security investments and technology adoption to maximize effectiveness of IT security controls against rapidly evolving threats
• Track and analyse IT security metrics for optimal effectiveness and benchmarking

Requirements:

• Background in Engineering or Computer Science
• Experience in providing security advisory and consultancy on application and services, including the design, development, implementation and/or management of the system
• Experience in security architecture of cloud native applications preferred
• Experience with DevSecOps methodologies and processes preferred
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc
• Relevant certifications in networking or cyber security, e.g. CISSP, CISM, CISA, CRSIS preferred
• Understanding of CI/CD tools

Interested applicants, please email your resume to John (Joax) Wong

Email: [email protected]

CEI Reg No: R23117179

EA Licence No: 99C4599

Recruit Express Pte Ltd

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R22111604

Key Responsibilities

• To carry out security duties at the Hotel, Staff Entrance and to patrol Hotel premises.
• To create security and fire safety awareness among staff and guests.

Requirements

• Possess qualified certificate in WSQ Security and SIRD License
• Customer-oriented
• Able to multi-task
• Able to work in a fast pace environment
• Possess additional Lifeguard / CPR certificate is preferred

Responsibilities

• Bachelor’s degree in computer science, Information Security, or related field.
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• Excellent communication skills and the ability to collaborate with diverse teams.
• Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• Good knowledge in security
• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

POSITION OBJECTIVES

To support the Manager with day-to-day operation matters, particularly on security matters and carpark administration.

DUTIES & RESPONSIBILITIES

Administration

• Administer carpark applications and prepare carpark report.
• Upkeep security deployment plan, SOPs, training guides, Operation Manuals etc.
• Administer and upkeep the master key management system, EM lock/access card system, Visitor Management System .

Operational Matters

• Manage and monitor the overall operations of the security and car park facility.
• Prepare and call tender for renewal of term contract services – security, carpark, VMS, EM lock/access card etc, if any.
• Handle tenants/ customers’ inquiries, provide information about parking rates, rules, and procedures, and address any issues or complaints.
• Keep accurate records of daily transactions, including parking fees collected and complimentary tickets issued.
• Generate reports on parking occupancy, revenue, and any maintenance or operational issues.
• Collaborate with the property management team and other stakeholders regarding car park operations and improvements.
• Provide assistance and customer service to visitors and tenants, addressing any security-related enquiries or concerns.
• Maintain records of all incidents, accidents, and any security-related activities that occur within the property.
• Conduct regular inspections, including spot checks on carpark procedures and security operation (under term contract vendor) to ensure proper functioning of the operational readiness at all times..
• Guide and ensure the security team respond to emergency situations, including medical emergencies or fire alarms, following established protocols/operational procedures.
• Collaborate with external law enforcement agencies, if necessary, to report incidents or provide support during investigations.
• Stay updated on security industry best practices, emerging technologies, and relevant legislation to ensure a safe and secure environment.

Emergency

• To lay down procedures and contact numbers of persons to be contacted for dealing with emergency situations.
• Ensure emergency call tree and contact lists are in place.

Reporting & Budgeting

• Prepare accurate, timely and completed reports, including monthly performance reports and variance reports for review by senior management.
• Prepare annual budgets and quarterly reforecasts relating to the operating expenditure under your charge.
• Manage all accounts payable for the property, including collection, and approval of invoices.
• Respond to problems and concerns and ensures compliance with rules and regulations.

Performance Indicators:

• Successful completion of scheduled activities.
• Achieve KPIs.
• Achieve target deliverables for business plans, monthly reports and budgets.
• Attain best value for money outcomes on service contracts and facilities cost services.
• Ensure that a high level of professionalism and customer service are always maintained.
• Ability to work under pressure and meet set timelines.
• Client and customer’s satisfaction.
• Meet standards and audit requirements.

Knowledge/Experience:

• Degree in Building & Real Estate Management or its equivalent with at least 3 years of experience; or
• Diploma in Building & Real Estate Management or its equivalent or other relevant professional certification with at least 5 years of experience.
• Relevant experience in managing high rise commercial buildings or mixed developments.
• Experience in formulating and implementing SOPs.
• Independent with integrity, innovative, proactive, and resourceful.
• Good organization, problem solving and communication (verbal and written) skills.
• Ability to work under pressure.
• Good interpersonal skills with team player qualities to manage both internal and external stakeholders.

Seize the opportunity to enhance cybersecurity, utilizing your skills in threat analysis and incident response to protect vital data and systems.

As a Security Operations Senior Associate in Cybersecurity & Tech Controls. Cybersecurity Operations, you will play an important role in safeguarding the organization's digital assets and infrastructure by proactively detecting, assessing, and responding to threats, vulnerabilities, and security incidents. Drawing on your knowledge of security principles, practices, and theories, you will collaborate with cross-functional teams to develop a coordinated approach to security and educate employees on best practices, policies, and procedures. Your work will have a direct impact on departmental outcomes, as you plan and ensure progress, identify gaps in information, and conduct analyses to solve complex cybersecurity problems. By utilizing your advanced analytical, technical, and problem-solving skills, you will contribute to the continuous improvement of our cybersecurity posture and help maintain the integrity, confidentiality, and availability of sensitive data and systems.

Job responsibilities

• Monitor and analyze security infrastructure, contributing to detection and response to threats, vulnerabilities, and incidents to ensure the integrity, confidentiality, and availability of sensitive data and systems

• Conduct in-depth security investigations, analyzing logs, network traffic, and other data sources to identify root causes, assess impact, and gather evidence for response and mitigation actions

• Develop and maintain threat detection and response playbooks, incorporating industry best practices, regulatory requirements, and lessons learned from previous incidents

• Collaborate with cross-functional teams to develop and implement coordinated security strategies, policies, and procedures, while educating employees on best practices

Required qualifications, capabilities, and skills

• Bachelor's Degree in Computer Science, Cybersecurity or related field

• 3+ years of experience in cybersecurity operations, including threat detection, incident response, vulnerability management

• Demonstrated experience in network traffic analysis, log analysis, vulnerability analysis, exploitation, and security investigation techniques to identify and respond to security incidents

• Proficient in scripting to automate tasks, implement controls, and manipulate data

• Advanced knowledge of security protocols, cryptography, authentication, authorization, and security architecture design principles

• Willing to work a scheduled shift pattern that includes one day of the weekend every two weeks or as required. The shift pattern will also require analysts to work up to ten hours a day for four days a week or eight hours a day for five days a week

Preferred qualifications, capabilities, and skills

• Good knowledge and/or experience with analyzing various logs, e.g. endpoint logs, network logs

• Good knowledge and/or experience with Cloud architecture and platforms

• Good understanding of how cyber attacks work

To apply for this position, please use the following URL:

https://ars2.equest.com/?response_id=6ef3218328aaedf9df0fa7b483989825

Resposibilities:

• Background in Engineering or Computer Science
• 5 or more years of working experience in IT Security
• Relevant certifications in networking or cyber security, e.g. CISSP, CISM, CISA, CRSIS preferred
• Experience with DevSecOps methodologies and processes preferred
• Experience in security architecture of cloud native applications preferred
• Experience in providing security advisory and consultancy on application and services, including the design, development, implementation and/or management of the system
• Understanding of CI/CD tools
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

About the Client

Our client is a reputed bank.

Responsibilities

· Actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user-initiated problem calls/tickets) and request management.

· Final technical approver for any changes into IT Security systems and is accountable for any technical changes in the environment from a RUN/BAU perspective.

· Involved in projects like End of Life, New Builds, migrations, and technical upgrades of the solution managed by the team.

· Participates in global Infra events (like Power down and DR Tests)

· Ensures activity is performed in compliance with norms, standards, processes, and procedures.

· Gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting.

· Ensures documentation is up to date and relevant for use.

Skills/Requirement

· Min 8 years of IT Security experience in administration and management of IT Security technologies.

· Experience in Symantec Data Loss Prevention, Symantec Endpoint Protection, Data Classification, and other endpoint & data security solutions.

· Knowledge of different domains of IT Security.

· Working & hands-on experience in administering the IT Security Solutions.

· Must have experience in working in similar Production setup in Run (Operations) mode.

· Ability to apply risk-based approach while working on assigned responsibilities.

· Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions.

· Must have working experience in managing endpoint security solution for a large enterprise level environment, working experience in financial organization is preferred.

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected]

We regret to inform that only shortlisted candidates will be contacted.

PERSOLKELLY Singapore Pte Ltd EA License No. 01C4394 EA Reg No: R23118975 (ABDUL RAHMAN ANSARI RAJA)

**********************************

This is in partnership with Employment and Employability Institute Pte Ltd (“e2i”). e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance and skills upgrading services, and partnering employers to address their manpower needs through recruitment, training, and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation-wide manpower and skills upgrading initiatives. By applying for this role, you consent to e2i’s PDPA.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

**********************************

Our client is a reputed bank.

Responsibilities:

· Applying the best Network operational technologies and metrics to measure quality, speed, user experience.

· Manage service improvements for all Network and Security services supported throughout the organization.

· Provide daily operational support for network security infrastructure documents!

· Manage all high severity incidents and try to resolve them and restore the infra services within the stipulated SLA.

· Manage all low severity incidents/requests without breaching the stipulated SLA.

Skills/Requirement:

· Hands on experience in Cisco Nexus & Data Center Architectures (VPC/VDC/ACI/MPLS)

· Must be an expert in Routing protocols – high level proficiency of BGP/OSPF

· Hands on experience in switching technologies.

· High level proficiency of operations and troubleshooting mechanisms.

· Experience with Network monitoring and management tools such as (HPNNM/SolarWinds/Grafana)

We regret to inform that only shortlisted candidates will be contacted.

PERSOLKELLY Singapore Pte Ltd • EA License No. 01C4394 • EA Registration No. R1551626 (SUJA THERESA FRANCIS)

This is in partnership with Employment and Employability Institute Pte Ltd (“e2i”). e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance and skills upgrading services, and partnering employers to address their manpower needs through recruitment, training, and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation-wide manpower and skills upgrading initiatives. By applying for this role, you consent to e2i’s PDPA.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

**********************************

Primary Skills (max 5 only) Bachelor’s degree or relevant IT work experience SalesForce.com / Veeva: 3 to 5 years of support experiences in global multiple country setup
Service Management Coordination, experience with Services Management processes and demonstrated coordination experience in managing IT Support vendors Accountable for IT Global Application Experience provided services for the area under scope (group of applications/software, product team, region) experience in IT Application Operational Support or System Analyst roles Secondary Skills (max 5 only) Accountable for the global IT Support Services for the assigned system cluster - support will be provided by one of our IT Support vendors Ensure the correct quality/performance of the service according to Service Level Agreement Coordinate the workload of support team, responsible for the vendor operational management Responsible of ensuring resource efficiency, scalability of the service and implementation of simplification measures, such as automation, "shift left" actions, etc. Execution of defined meetings with different stakeholders (business key users, IT functions and external support teams) Main Roles and Responsibilities (max 5 only) Execution of defined meetings with different stakeholders (business key users, IT functions and external support teams) Responsible of ensuring resource efficiency, scalability of the service and implementation of simplification measures, such as automation, "shift left" actions, etc. Regular proactive review of support tickets to assure service quality according to SLA Overall view of the service and analysis of trending and deviations of support Ensure the correct quality/performance of the service according to Service Level Agreement

Company’s Profile
Julian Grey's client specialises in offering digital transformation solutions, assisting their clients to break through into the digital space with cutting-edge technology in Cloud, DevOps, Cyber Security & Analytics.

Role and Responsibilities: You will:

· Assist in designing, developing, and implementing SIEM features for our security platform.

· Collaborate with senior engineers and data scientists to optimize SIEM rules for better threat detection.

· Respond to security incidents promptly and aid in remediation efforts.

· Research and develop new defensive techniques against cybersecurity attacks.

· Maintain SIEM documentation and best practices.

· Analyze security logs and network traffic to identify potential threats.

· Stay updated on the latest trends to propose innovative solutions for continuous product improvement.

Experience and Personality Ideals:

· 3+ years of IT project management experience.

· Familiarity with Office productivity tools.

· Customer-focused with excellent problem-solving skills.

· Strong communication and interpersonal skills.

· Results-oriented, collaborative, and self-motivated.

· Effective at handling objections and negotiating.

· Able to multitask and work with minimal supervision.

· Qualifications and Education Requirements:

· Diploma/degree in Cyber Security, Computer Science, or related field.

· Strong interest and knowledge in cybersecurity.

· Familiarity with SIEM concepts and tools (e.g., Splunk, Elastic Stack, QRadar) is a plus.

· Basic understanding of networking protocols, systems administration, and cloud computing (e.g., AWS, Azure, GCP).

· Proficiency in one or more programming languages (e.g., Python, Java, C++).

· Excellent analytical and problem-solving skills.

· Good communication and collaboration skills.

· Eagerness to learn and adapt to new technologies and industry trends.

· Fresh graduates are welcome to apply.

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Interested Applicants

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

The TS Senior Security Engineer performs test activities and manages the internal or external customer independently. The Lead Technical Analyst is responsible for the customer satisfaction of the test deliverables and enables a smoothly running testing, validation or certification process. This includes using test automation tools, analyzing and validating test results and reporting to the customer. The Lead Technical Analyst participates in evaluating the security of IT products, such as network device, encryption software, mobile devices, payment terminals or e-Passports based on certain scheme requirement, such as Common Criteria, Cybersecurity Labelling Scheme, Common.SECC etc. This will include the development document review, IT products analysis, the development and the realization of penetration test, the support and training of evaluation engineers.

Responsibilities for Internal Candidates

• Support the Project Management team on evaluation scoping, resource requirements, certification body and customer expectations management.
• Conduct IT product security function evaluation work based on scheme requirement, such as Common Criteria, Cybersecurity Labelling Scheme, Common.SECC etc..
• Customer code review when needed : due to stringent confidentiality and security requirements, it often requires traveling to customer premises.
• Based on the code review result, conduct a vulnerability analysis to determine if the customer product has any potential security weaknesses.
• Customer site audit when needed : normally traveling to customer premises, conduct remote audit in current Covid situation.
• Investigate possible logical attack scenarios. Provide support for the penetration tester in charge of product testing – by interpreting the code review findings and compliance checking result, orienting the attack paths and analyzing the test results.
• Formal report writing in line with customer and certification scheme requirements.
• Delivery of customer projects on time.
• Maintain/improve technical knowledge by attending educational workshops, reviewing professional publications, obtaining applicable certifications and participating in professional societies and cross-departmental task forces.
• Contribute to internal work processes by improving tools to evaluate efficiency, report writing and technical training.
• Performs other duties as directed by supervisor.
• Maintains Laboratory accreditation and resolve scheme's mandated corrective action plans.

Qualifications for Internal Candidates

• Master or Bachelor level degree (or equivalent) in Information Technology, Computer Science or equivalent proving your analytical skills and technical approach.
• Minimum 5 to 8 years’ information security working experience, Common Criteria evaluation experience is the best and ISO 27001 auditing will be an advantage.
• Possess CISM / CISA Certification or related is an added advantage.
• COMMON CRITERIA SINGAPORE EVALUATOR (under SCCS) Certified is an added advantage.
• Comfortable in trying yourself in new areas without necessarily knowing everything and can figure out things as you go.
• Like working towards a larger goal and willing to take the initiative in your own hands.
• Good at communicating and can convey message to both technical and business audiences.
• Able to make decision independently under certain scenario, such as during site audit in customer site.
• Nice to have IT product development experience or penetration testing experience.

Primary Skills (max 5 only) Degree or Diploma in Computer Science, Computer Engineering or Information Security related fields Deep understanding of various Operating Systems, e.g., Linux, Unix and Windows.Experience with programming/scripting (Python, PowerShell, etc Security certifications such as GSEC, GCIH, GCIA, GCFA, GCFE or GNFA are highly desirable Exp in MAS Cyber Hygiene (PSN06) and Technology Risk Management (PSN05) Notices, MAS Technology Risk Management Guidelines, and Cybersecurity Act and Cybersecurity Code of Practice (CCoP). Security certifications such as GSEC, GCIH, GCIA, GCFA, GCFE or GNFA are highly desirable. Secondary Skills (max 5 only) Implement, operationalise, and optimise new cybersecurity solutions as required. Monitors and stay aware of cybersecurity industry trends, tools, and techniques. Manage, operate, and optimise the organisation’s portfolio of cybersecurity solutions, e.g., IDS/IPS, email defences, EPP, vulnerability management, PAM, IAM/IGA, DAM, proxy, NGFW. Strong understanding and familiarity with regulatory requirements such as MAS Notice on TRM, MAS Notice on Cyber Hygiene, MAS Technology Risk Management Strong understanding of NIST Cybersecurity Framework Main Roles and Responsibilities (max 5 only) Provide Cybersecurity latest market trends and solutions and directions Manage Security Operation team on daily monitoring alarms to respond on the incidents Guide SOC analysts to search evidence and threat analysis for incident investigation. Draft Information security SOC risk management policies and procedures Cybersecurity solution such as SIEM, monitoring and Akamai’s Web Application

Primary Skills (max 5 only) Degree or Diploma in Computer Science, Computer Engineering or Information Security related fields Deep understanding of various Operating Systems, e.g., Linux, Unix and Windows.Experience with programming/scripting (Python, PowerShell, etc Security certifications such as GSEC, GCIH, GCIA, GCFA, GCFE or GNFA are highly desirable Exp in MAS Cyber Hygiene (PSN06) and Technology Risk Management (PSN05) Notices, MAS Technology Risk Management Guidelines, and Cybersecurity Act and Cybersecurity Code of Practice (CCoP). Security certifications such as GSEC, GCIH, GCIA, GCFA, GCFE or GNFA are highly desirable. Secondary Skills (max 5 only) Implement, operationalise, and optimise new cybersecurity solutions as required. Monitors and stay aware of cybersecurity industry trends, tools, and techniques. Manage, operate, and optimise the organisation’s portfolio of cybersecurity solutions, e.g., IDS/IPS, email defences, EPP, vulnerability management, PAM, IAM/IGA, DAM, proxy, NGFW. Strong understanding and familiarity with regulatory requirements such as MAS Notice on TRM, MAS Notice on Cyber Hygiene, MAS Technology Risk Management Strong understanding of NIST Cybersecurity Framework Main Roles and Responsibilities (max 5 only) Provide Cybersecurity latest market trends and solutions and directions Manage Security Operation team on daily monitoring alarms to respond on the incidents Guide SOC analysts to search evidence and threat analysis for incident investigation. Draft Information security SOC risk management policies and procedures Cybersecurity solution such as SIEM, monitoring and Akamai’s Web Application

• Professional Development + Travel Opportunities
• Excellent Compensation Package

About Our Client

Our client is an established firm, looking to hire an Information Security GRC Specialist to their team. This is an exciting role that offers career progression.

Job Description

As the Information Security GRC Specialist, your responsibilities include:

• Implementing and upholding the IT Technology Governance framework, policies, and procedures, taking into account relevant regulations and internal guidelines
• Developing the organization's cyber risk strategy and posture, encompassing data risk, cyber risk management, frameworks and policies, as well as measures, methods, and reporting
• Devising and enacting strategies for information security along with corresponding IT security policies throughout the organization
• Continuous assessment of IT security protocols and measures to boost the company's security position.

The Successful Applicant

As a successful candidate, you will have the following:

• Bachelor's Degree in Computer Science or a relevant field
• At least 5 years of experience in IT Risk, Compliance, Audit and/or InfoSec (preferably from regulated industry)
• Excellent communication skills, with the ability to effectively present, liaise with stakeholders
• Comprehensive understanding of MAS TRM

What's on Offer

• Reputable and Stable Firm
• Excellent culture and work environment

Contact

Isha Hussain (Lic No: R2197976/ EA no:18S9099)

Quote job ref

JN-042024-6405514

Phone number

+65 6416 9850

Michael Page International Pte Ltd | Registration No. 199804751N

The trainer’s role is to teach the respective modules in the course and guide the trainees in solving problems.

The trainers shall have work experience in the relevant industry,

and are academic researchers or security experts/programmers.

The trainers must have deep domain knowledge in the topic under his/her charge.

Specifically, they shall have at least two years of working experience in areas associated with cyber operations, e.g. Security Operational Centre, Cyber Incident Response, Malware Analysis, Penetration Tester or equivalent.

Experience can be any of the following:

• Cyber Investigation
• Digital Forensics
• Vulnerability Assessment and Management
• Cyber Defence Analysis
• Incident Management

Academic: At least Diploma in IT/Computer Studies

Trainer shall be well updated in their domains and can share from their relevant industry experience and design the modules to fit the current demands in their profession.

Principal Security Operations Engineer

Job Description:

1. Developing and implementing security policies, procedures, and guidelines to ensure compliance with industry standards and regulations.
2. Leading the design and implementation of security controls, including firewalls, intrusion detection systems, endpoint protection, and security information and event management (SIEM) systems.
3. Conducting regular security assessments and vulnerability scans to identify potential risks and vulnerabilities.
4. Responding to and investigating security incidents and breaches, and implementing measures to prevent future occurrences.
5. Managing and monitoring security systems and tools to detect and respond to security events and threats.
6. Collaborating with other IT teams to ensure security best practices are followed during system and software development.
7. Providing guidance and support to junior security operations engineers and other team members.
8. Staying up-to-date with the latest security trends, threats, and technologies, and making recommendations for improvement.
9. Participating in incident response and disaster recovery planning and testing.
10. Collaborating with external vendors and partners to ensure the security of third-party systems and services.

Requirements:

• Bachelor's degree in Computer Science, Information Systems, or related field.
• Strong technical knowledge and experience in security operations, network and systems administration, and incident response
• Experience with programming languages (Rust is a plus), Embedded Systems, Hardware peripherals.
• Familiarity with Operating System Security (e.g. Linux, Windows).
• Excellent problem-solving and analytical skills.
• 6+ years of professional experience in hardware and firmware security.
• Chinese speaking to liaise with Chinese counterparts

Interested applicants, Kindly email your updated resume to [email protected] and we regret that only shortlisted candidates will be notified

Yvonne Chai Cheng Man

(EA License: 23115356 | UEN: 201715683K)

Disclaimer: The company is committed to ensuring the privacy and security of your information. By submitting this form, you consent to the collection, processing, and retention of the information you provide. The data collected (which may include your contact details, educational background, work experience and skills) will be used solely for the purpose of evaluating your qualifications for the position you're applying for. Your data will be stored securely and retained for the duration necessary to fulfill our hiring process. If you are not selected for the position, your data will be kept on file for a limited period in case future opportunities arise. You have the right to access, correct, or delete your data at any time by contacting us at Quess Singapore | A Leading Staffing Services Provider in Singapore (quesscorp.sg)

Job Summary

Seeking IT Security professional with a keen interest in Information Technology (IT) Governance, Risk and Compliance to enable cyber resilience and information security for mission critical systems.
The individual will be responsible to conduct cyber risk assessment in support of technology initiatives to help identify IT related risk and determines appropriate controls to mitigate risks.

Mandatory Skill-set

• Degree in Computer Science, Information Security or Information Systems;
• At least 2-3 years of experience in IT security space with a strong experience in IT GRC ( Governance, Risk and Compliance ) related functions;
• Deep knowledge and understanding of internal controls, security frameworks, risk management and IT governance, auditing techniques and methodologies;
• Good knowledge of enterprise IT systems and components (applications, operating systems, databases, networks, cloud, DevOps;
• Knowledgeable in using various cyber security monitoring and analysis tools and techniques depending on the organization's needs and requirements;
• Familiar with cyber security standards, protocols and frameworks such as NIST CSF, CIS, PDPA;
• Strong in analytical thinking with attention to detail;
• Excellent communication and inter personal skills.

Responsibilities

• Act as a Subject Matter Expert on IT Governance, Risk management and Compliance (GRC) and related policies and procedures;
• Responsible for documenting methodologies and tools to mitigate information security or cyber risk;
• Prepare reports for information security or cyber risk related reporting, threat awareness and security awareness reports;
• Conduct compliance assessments and tracking the overall compliance health in relation to IT governance standards and procedures in compliance with regulatory requirements;
• Recommend corrective actions or appropriate security controls to mitigate technical risk;
• Continuously identify GRC Key risk indicators (KRI) and maintain IT Risk Register;
• Assist in the development of policies for conducting cyber security risk assessments and compliance audits;
• Formulate governance procedures for documenting and updating security policy, standards, guidelines and procedures;
• Perform information security or cyber risk assessment activities and assess third party security controls and internal security systems;
• Establish scope of risk analysis for new technology initiatives;
• Keep abreast of the dynamic cyber threat landscape and identify opportunities for enhancement of IT risk processes;
• Provide regular updates on the overall health of compliance, criticality assessment, audit findings, remediation and action plans.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

The Job:

• To assist in developing, implementing and monitor policies, procedures and security practices to safeguard employees, customers’ shipments, assets and information against loss, damage or incident.
• To assist to co-ordinate country security activities and ensure compliance of staff and sub-contractors with security procedures

The Requirements:

• Min GCE O Level
• Preferable Ex-Police or Arm Forces personnel, 5 years’ experience as Senior Staff Sergeant and above.
• Preferable with minimum 3 years of Investigation Background (i.e. Investigating Officer, etc)

Interested applicants can send their detailed resumes to [email protected] or call JANE @ 6735 1955.

CEI: R1104482

JANE LUI JIE'EN

Company Reg. No. 199601303W || EA Licence No. 99C4599

Position: Chief Information Security Officer

Job Description

• Developing and implementing secure processes and systems used to prevent, detect, mitigate, and recover from cyberattacks
• Educating and managing technology risk in collaboration with business leaders
• Building and driving a cybersecurity strategy and framework, with initiatives to secure the organization's cyber and technology assets
• Continuously evaluating and managing the cyber and technology risk posture of the organization
• Implementing and managing the cyber governance, risk, and compliance (GRC) process
• Reporting to the most senior levels of the organization (the CEO and board of directors, or equivalent)
• Developing, justifying, and evaluating cybersecurity investments
• Developing and implementing ongoing security awareness training and education for users
• Leading cybersecurity operations and implementing disaster recovery protocols and business continuity plans with business resilience in mind

Requirements and qualifications

• Possess IT certifications such as the Certified Information Systems Security Professional (CISSP) from (ISC)2 or Certified Information Security Manager (CISM) designations from ISACA
• Relevent Cybersecurity licences or qualifications

Technical Skills

• In-depth knowledge of information security
• management frameworks (e.g., ISO/IEC 27001, NIST).
• Experience with security technologies and tools (e.g., firewalls, IDS/IPS, SIEM).
• Understanding of network security, application security, and data protection principles

Soft Skills

• Strong leadership and management abilities.
• Excellent communication and interpersonal skills.
• Ability to work under pressure and handle stressful situations.
• Strategic thinking and problem-solving skills.