To perform and execute all aspects of in-house legal counsel and company secretary (main or alternate), contracts and procurement management functions of our businesses. You will safeguard our reputation and minimise our exposure to legal, contractual and compliance risks by assuring that the Group and Company comply with laws and statutory requirements in the jurisdictions in which the Group and Company operate, and provide sound and practical legal advice to management and business partners on all relevant matters.

• Provide accurate and timely counsel to executives in a variety of legal, contractual and procurement topics (labour law, partnerships, local and international ventures, corporate finance, etc).
• Collaborate with Management to devise efficient defence strategies for the best positioning of the
• Group and the Company.
• Specify internal governance policies on contracts and procurement, and regularly monitor compliance.
• Research and evaluate different risk factors regarding business decisions and operations.
• Apply effective risk management techniques and offer proactive advice on possible legal, contractual and procurement issues.
• Communicate and negotiate with external parties (clients, vendors, regulators, external counsels, public authorities etc).
• Draft and solidify agreements, contracts and other legal documents to assure the full legal rights of the group and the company.
• Deal with complex matters with multiple stakeholders.
• Provide recommendations to the organisation on legal risk while balancing commerciality.
• Provide clarification on legal language or specifications to staff in the organisation.
• Conduct your work meticulously and with integrity, reliability and responsibility.
• Maintain current knowledge of alterations in legislations in the jurisdictions in which the Group and the Company operate.
• Perform corporate secretarial duties through participation in Board/Management Committee meetings, drafting Board/Management Committee papers/resolutions/minutes and ensuring follow through of action items required by the Board of Directors/Management Committees.
• Support contract and price negotiations, and prepare contract documents and/or agreements with clients, suppliers, business partners, employees and any other relevant parties.
• Assist with the administrative requirements of the legal team.
• Participate in special committees and drive projects for process improvement and innovation.
• Any other duties as assigned by the Group and Company.

Job Requirements and Qualifications

• Recognised degree in law, preferably admitted to the Singapore Bar or qualified to do so. Fresh graduates or those recently called are welcome to apply.
• Experienced legal executives with a recognised diploma in law and management may be considered.
• Proven experience as a legal counsel in business environment with a commercial perspective.
• Excellent knowledge and understanding of corporate and contract laws, practices and procedures.
• Full comprehension of the influences of the external environment of a corporation.
• Demonstrated ability to create legal defensive or proactive strategies.
• High degree of attention to detail and professional ethics and integrity.
• Sound judgement and ability to analyse situations and information.
• Strong command of English and the use of Microsoft Office.
• Proactive and self-motivated individual with a growth mindset and composure under pressure.
• Must be prepared to travel on occasion, depending on the Company’s requirements.

Cyber Security Specialist (VAPT)

Job Description

Architect, design, review and implement cyber security resilient in our product and projects. You are familiar with cloud security architectures and solutions, making sure the companies can operate in a safe, secure environment.

Responsibilities

• Responsible in managing CyberSecurity VAPT, Vulnerability Assessment, Risk Management and Testing.
• Manage Network and Cloud Security Risk Assessment and Audit.
• Involved in handling Government Projects related to risk, security attacks and system solutions.
• Consultancy on software and hardware for security vulnerabilities and risks
• Plan VAPT, execution, result analysis and provide fix recommendation.
• Provide guideline such as coding, key management, hardening, patch management, backup management, incident management, etc.
• Familiar with IM8 requirements and CIS, NIST security benchmark, cyber security tools to perform preliminary scan.

Skills Required

• Strong in knowledge in CyberSecurity, Risk Assessment, VAPT, Vulnerability and Cloud Security.
• Strong in VAPT management.
• Technically incline in CyberSecurity, Cloud, Risk and Vulnerabilities.
• Possess knowledge of IM8 and Government projects experience is preferred.
• Degree/Certifications in CyberSecurity.
• Possess CyberSecurity certifications.
• Possess Government domain is preferred.

We respect your privacy and all communication will be treated with confidentiality.

Please contact us or apply in-confidence to us with you updated MS Word Resume to : [email protected]

Yong Jeline (Reg. No. R1101621)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

Cyber Security Specialist (VAPT)

Job Description

Architect, design, review and implement cyber security resilient in our product and projects. You are familiar with cloud security architectures and solutions, making sure the companies can operate in a safe, secure environment.

Responsibilities

• Responsible in managing CyberSecurity VAPT, Vulnerability Assessment, Risk Management and Testing.
• Manage Network and Cloud Security Risk Assessment and Audit.
• Involved in handling Government Projects related to risk, security attacks and system solutions.
• Consultancy on software and hardware for security vulnerabilities and risks
• Plan VAPT, execution, result analysis and provide fix recommendation.
• Provide guideline such as coding, key management, hardening, patch management, backup management, incident management, etc.
• Familiar with IM8 requirements and CIS, NIST security benchmark, cyber security tools to perform preliminary scan.

Skills Required

• Strong in knowledge in CyberSecurity, Risk Assessment, VAPT, Vulnerability and Cloud Security.
• Strong in VAPT management.
• Technically incline in CyberSecurity, Cloud, Risk and Vulnerabilities.
• Possess knowledge of IM8 and Government projects experience is preferred.
• Degree/Certifications in CyberSecurity.
• Possess CyberSecurity certifications.
• Possess Government domain is preferred.

We respect your privacy and all communication will be treated with confidentiality.

Please contact us or apply in-confidence to us with you updated MS Word Resume to : [email protected]

Yong Jeline (Reg. No. R1101621)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

This position will support senior Security Governance team members and work closely with various business, risk and technology stakeholders to:

• Proactively assess the compliance exposure to current and emerging security-related regulatory requirements and plan & track remediation efforts.

• Manage reverse third-party due diligence engagements related to GIS.

• Manage audit, assurance and regulatory engagements related to GIS including ongoing knowledge management on queries and request for information.

• Track and report against the technology KORI(Key Operational Risk Indicators)/KRIs and required security metrics.

• Execution of the GIS KRCSA (Key Risk and Control Self Assessments).

• Management policy, procedures and standards updates and control.

• Manage various GIS initiatives and duties as assigned.

Key Requirements

• Communicate effectively with a variety of internal and external teams and stakeholders.

• Capable of managing a variety of priorities and deliverables with minimal guidance or supervision.

• Ability to respond to any requests and issues on a timely basis.

Education

• Diploma/Degree in engineering/Computer Science / IT/Cyber Security from a recognized education institution.

• Professional Technology Risk Management/Cybersecurity related qualification will be favorable although not mandatory.

• Knowledge of industry best practices.

Technical Skills

• Overall experience 5+ years of experience.

• 2+ years of relevant experience in Security/IT governance disciplines.

Cyber Security Specialist

Job Description

Architect, design, review and implement cyber security resilient in our product and projects. You are familiar with cloud security architectures and solutions, making sure the companies can operate in a safe, secure environment.

Responsibilities

• Responsible in managing CyberSecurity VAPT, Vulnerability Assessment, Risk Management and Testing.
• Manage Network and Cloud Security Risk Assessment and Audit.
• Involved in handling Government Projects related to risk, security attacks and system solutions.
• Consultancy on software and hardware for security vulnerabilities and risks
• Plan VAPT, execution, result analysis and provide fix recommendation.
• Provide guideline such as coding, key management, hardening, patch management, backup management, incident management, etc.
• Familiar with IM8 requirements and CIS, NIST security benchmark, cyber security tools to perform preliminary scan.

Skills Required

• Strong in knowledge in CyberSecurity, Risk Assessment, VAPT, Vulnerability and Cloud Security.
• Technically incline in CyberSecurity, Cloud, Risk and Vulnerabilities.
• Possess knowledge of IM8 and Government projects experience is preferred.
• Demonsrated
• Degree/Certifications in cyber security.
• Possess CyberSecurity certifications.
• Possess Government domain is preferred.

We respect your privacy and all communication will be treated with confidentiality.

Please contact us or apply in-confidence to us with you updated MS Word Resume to : [email protected]

Yong Jeline (Reg. No. R1101621)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

Responsibilities:

• Proactively assess the compliance exposure to current and emerging security-related regulatory requirements and plan & track remediation efforts.
• Manage reverse third-party due diligence engagements related to GIS.
• Manage audit, assurance and regulatory engagements related to GIS including ongoing knowledge management on queries and request for information.
• Track and report against the technology KORI (Key Operational Risk Indicators)/KRIs and required security metrics.
• Execution of the GIS KRCSA (Key Risk and Control Self Assessments).
• Management policy, procedures and standards updates and control.
• Manage various GIS initiatives and duties as assigned.

Requirements:

• Diploma/Degree in engineering/Computer Science / IT/Cyber Security from a recognized education institution.
• Professional Technology Risk Management/Cybersecurity related qualification will be favorable although not mandatory.
• Knowledge of industry best practices.
• Overall experience 5+ years of experience.
• 2+ years of relevant experience in Security/IT governance disciplines.
• Have a strong security risk and analytical mindset in approaching situations and interactions with stakeholders.
• Effective negotiating skills and demonstrated sensitivity to working and interacting with stakeholders.
• Good knowledge of Security concepts and practices.
• Good knowledge of Security related guidelines and advisories from regulators.
• Good with numbers for use in metrics.

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected]

We regret that only shortlisted candidates will be contacted.

EA License No. 01C4394

EA Personnel Reg.No. R1104824 (Samsudeen Mohamed Basith)

This is in partnership with Employment and Employability Institute Pte Ltd (“e2i”). e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance and skills upgrading services, and partnering employers to address their manpower needs through recruitment, training and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation-wide manpower and skills upgrading initiatives. By applying for this role, you consent to e2i’s PDPA.

“By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its local and overseas subsidiaries and affiliates collecting, using and disclosing your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services and such other purposes stated in our privacy policy. Our full privacy policy is available at www.persolkelly.com.sg. If you wish to withdraw your consent, please drop us an emailto let us know. Please feel free to contact us if you have any queries.

Role Overview

The Cyber Security Specialist is responsible for designing, implementing, and managing security solutions to protect the company's information systems, networks, and data from potential threats and cyber-attacks.

The primary role is to provide expert guidance, support, and leadership in all matters related to security within an organization. This role will require strong analytical and collaboration skills, detailed working knowledge of current and emerging security technologies, as well as the ability to correlate events to identify abnormal behavior.

Responsibilities

• Serve as a Subject Matter Expert (SME) for security technologies, supporting high visibility needs of the business in a variety of special projects. These unique projects often involve expedited deliverables, operational agility, and require top quality deliverables covering both the consulting and operations functions.
• Investigate any security incidents and provide insights to internal/external business users.
• Develop processes and procedures and fine-tune alerts as part of ongoing improvisation of security operations.
• Develop cloud/hybrid and cloud platform-specific security policies, standards, and procedures on cloud providers (Azure, AWS) and cloud-native platforms (PCF, Docker, Kubernetes, etc.).
• Identify and deliver appropriate cloud security controls based on industry standards (e.g. CCM) to drive cloud and customer security solutions framework based on business risk and cloud-native threats.
• Conduct integration of supported Cloud-based Security Products such as Web Application Firewall (WAF), Web Security Proxy, etc.
• Conduct detailed & comprehensive investigations and triage on a wide variety of security events.
• Recommend and implement remediation processes.
• Stay up-to-date with the latest security threats, vulnerabilities, and mitigation techniques.
• Collaborate with cross-functional teams to implement security measures and address security requirements.
• Communicate security risks, recommendations, and status updates to stakeholders, management, and team members.
• Identify opportunities to improve processes and/or tools to ensure the highest level of quality, including documentation, mentoring, and training sessions.
• Own the technical components of a customer integration project including but not limited to configuration, debugging, documentation, testing, and go-live support.
• Identify and mitigate potential security threats and vulnerabilities.
• Provide relevant recommendations to improve the overall security posture of customers.
• Deployment of security technologies while ensuring standards are adhered to as well as maintenance/repair supervision working with vendor support teams on corrective activities for system issues.
• Assist in any ad-hoc tasks when necessary.

Requirements

• Over 5 years of experience in Information Security or engineering.
• At least 2 years of direct experience in one of the public cloud platforms, such as AWS or Azure with strong knowledge of their security features.
• Industry-recognized security certifications (OSCP, CISSP, CISA, CEH, AWS Security, etc.).
• Ability to identify and drive remediation of public and hybrid cloud risks.
• Experience in general security technologies, processes, and concepts.
• Experience with web security concepts and technologies such as web application firewalls, and proxy.
• Working experience on SIEM / Analytics tools, eg: Securonix, MS Sentinel, Splunk is a MUST (*Configure policy, apply best practise, fine tuning, migration, L3 troubleshooting)
• Working experience with common security operations systems, Intrusion Detection Systems (IDS/IPS), Security Incident Event Management systems (SIEM), anti-virus log collection systems, etc.
• Working knowledge of security systems and programs.
• Sound fundamental knowledge of Internet technologies, such as TCP/IP, HTTP, SSL, DNS, OWASP Top10, and web servers (e.g. Apache, IIS, Nginx, etc.).
• Familiarity with AWS technologies, such as CodePipeline, CodeBuild, CodeDeploy, CodeStar, Guardrails, Amazon ECS, AWS Lambda, and Open-source tools like Jenkins, DefectDojo, and OWASP Glue will be an added advantage.
• Strong analytical and problem-solving skills, with the ability to identify and address security risks and Vulnerabilities.
• Ability to analyze and develop innovative recommendations and solutions.
• Excellent verbal and written communication skills.
• Independent and results-oriented.
• Willing to work on a flexible schedule depending on business need.

Summary:

The Security Governance Specialist role will support the Head of Security Governance in enhancing and maintaining the Security Governance within the Group Information Security(GIS) function in the Bank.

Key Responsibilities:

• This position will support senior Security Governance team members and work closely with various business, risk and technology stakeholders to:
• Proactively assess the compliance exposure to current and emerging security-related regulatory requirements and plan & track remediation efforts.
• Manage reverse third-party due diligence engagements related to GIS.
• Manage audit, assurance and regulatory engagements related to GIS including ongoing knowledge management on queries and request for information.
• Track and report against the technology KORI(Key Operational Risk Indicators)/KRIs and required security metrics.
• Execution of the GIS KRCSA (Key Risk and Control Self Assessments).
• Management policy, procedures and standards updates and control.
• Manage various GIS initiatives and duties as assigned.

Key Requirements:

• Communicate effectively with a variety of internal and external teams and stakeholders.
• Capable of managing a variety of priorities and deliverables with minimal guidance or supervision.
• Ability to respond to any requests and issues on a timely basis
• Diploma/Degree in engineering/Computer Science / IT/Cyber Security from a recognized education institution.
• Professional Technology Risk Management/Cybersecurity related qualification will be favorable although not mandatory.
• Knowledge of industry best practices.

Technical Skills

• Overall experience 5+ years of experience.
• 2+ years of relevant experience in Security/IT governance disciplines.

Find Your Dream Job with Us

WE ARE HIRING!! Apply now and make a difference.

Role: Security Governance Specialist

Job Requisition Number: JR33380

Experience: More than 10 Years of experience (L4)

Location: Singapore

Key Skills: Security/IT Governance, GIS

Key Responsibilities

This position will support senior Security Governance team members and work closely with various business, risk and technology stakeholders to:

· Proactively assess the compliance exposure to current and emerging security-related regulatory requirements and plan & track remediation efforts.

· Manage reverse third-party due diligence engagements related to GIS.

· Manage audit, assurance and regulatory engagements related to GIS including ongoing knowledge management on queries and request for information.

· Track and report against the technology KORI (Key Operational Risk Indicators)/KRIs and required security metrics.

· Execution of the GIS KRCSA (Key Risk and Control Self Assessments).

· Management policy, procedures and standards updates and control.

· Manage various GIS initiatives and duties as assigned.

Key Requirements:

· Communicate effectively with a variety of internal and external teams and stakeholders.

· Capable of managing a variety of priorities and deliverables with minimal guidance or supervision.

· Ability to respond to any requests and issues on a timely basis.

Education

· Diploma/Degree in engineering/Computer Science / IT/Cyber Security from a recognized education institution.

· Professional Technology Risk Management/Cybersecurity related qualification will be favorable although not mandatory.

· Knowledge of industry best practices. Technical Skills

· Overall experience 5+ years of experience.

· 2+ years of relevant experience in Security/IT governance disciplines.

· Have a strong security risk and analytical mindset in approaching situations and interactions with stakeholders.

· Effective negotiating skills and demonstrated sensitivity to working and interacting with stakeholders.

· Good knowledge of Security concepts and practices.

· Good knowledge of Security related guidelines and advisories from regulators.

· Good with numbers for use in metrics. Soft Skills.

· Good written and verbal communication skills and expertise in setting and managing stakeholder expectations.

· Process aware mindset.

· Strong analytical and problem-solving skills.

· Effective time management and organizational skills.

· Strong team player.

· Able to work independently with minimal supervision.

· High degree of attention to detail and discipline on tracking and managing the closure of identified gaps and issues.

· Willing to learn quickly.

Please forward your resume in MS word format to [email protected]and [email protected]

Please refer your friends for any IT openings as we have various positions.

Please do not send PDF Format Resume . Send the following details

1. Notice period

2. Current Salary

3. Expected Salary

4. Visa Status in Singapore

5. Current Location

Job Objectives

The Security Governance Specialist role will support the Head of Security Governance in enhancing and maintaining the Security Governance within the Group Information Security(GIS) function in the Bank.

Key Responsibilities

This position will support senior Security Governance team members and work closely with various business, risk and technology stakeholders to:

• Proactively assess the compliance exposure to current and emerging security-related regulatory requirements and plan & track remediation efforts.

• Manage reverse third-party due diligence engagements related to GIS.

• Manage audit, assurance and regulatory engagements related to GIS including ongoing knowledge management on queries and request for information.

• Track and report against the technology KORI(Key Operational Risk Indicators)/KRIs and required security metrics.

• Execution of the GIS KRCSA (Key Risk and Control Self Assessments).

• Management policy, procedures and standards updates and control.

• Manage various GIS initiatives and duties as assigned.

Key Requirements

• Communicate effectively with a variety of internal and external teams and stakeholders.

• Capable of managing a variety of priorities and deliverables with minimal guidance or supervision.

• Ability to respond to any requests and issues on a timely basis.

Education

• Diploma/Degree in engineering/Computer Science / IT/Cyber Security from a recognized education institution.

• Professional Technology Risk Management/Cybersecurity related qualification will be favorable although not mandatory.

• Knowledge of industry best practices.

Technical Skills

• Overall experience 5+ years of experience.

• 2+ years of relevant experience in Security/IT governance disciplines.

• Have a strong security risk and analytical mindset in approaching situations and interactions with stakeholders.

• Effective negotiating skills and demonstrated sensitivity to working and interacting with stakeholders.

• Good knowledge of Security concepts and practices.

• Good knowledge of Security related guidelines and advisories from regulators.

• Good with numbers for use in metrics.

Soft Skills

• Good written and verbal communication skills and expertise in setting and managing stakeholder expectations.

• Process aware mindset.

• Strong analytical and problem-solving skills.

• Effective time management and organizational skills.

• Strong team player.

• Able to work independently with minimal supervision.

• High degree of attention to detail and discipline on tracking and managing the closure of identified gaps and issues.

• Willing to learn quickly.

What the role is

At #TeamCPF, you’re not just joining a team; you are embracing a culture of excellence, collaboration, and meaningful impact. You will play a pivotal role in empowering over 4 million members to secure their retirement, healthcare, housing needs and better navigate life’s uncertainties.

We thrive on sharp minds and insightful decisions. Your ability to analyse and think critically isn't just valued; it's essential. Every choice you make contributes to our collective success.

Collaboration is our way of life. We believe in the power of effective partnerships and seamless communications across teams. Together, we amplify each other’s strengths and achieve remarkable results.

Our learning never stops. We encourage your inquisitiveness and courage to embrace new challenges head-on. Your agility, readiness to challenge conventions, embrace of data-driven strategies, dedication to learning and applying new skills fuels our innovation and progress.

At the core of everything we do lies a genuine desire to make a difference. We serve our community and support each other with compassion, empathy, and unwavering dedications. Every action we take is guided by a deep sense of purpose and a commitment to those we serve.

Join us at #TeamCPF! Together, let's redefine possibilities and leave a legacy that echoes for generations.

What you will be working on

As a member of the Compliance and Enforcement Department (CED), you will play a crucial role in detecting, investigating, and enforcing CPF non-compliance by employers. Your work will directly impact CPF members, ensuring they receive their rightful contributions for healthcare, housing, and retirement needs.

In this role, you will:

• Lead a team of enforcement officers to enforce and recover CPF contributions, as well as all CPF arrears from defaulters.
• Enforce court orders obtained against defaulters and collaborate with legal counterparts on case decisions.
• Manage complex correspondences related to enforcement activities.
• Review existing processes and implement initiatives for efficient enforcement strategies and process improvements.
• Handle project implementation, ensuring timely delivery and meeting requirements.
• Lead and guide a team of executives in their daily operational activities.

What we are looking for

We value the diverse talents and experiences that each individual brings to the table. While mastery of every requirement may not be necessary, familiarity and expertise in some of the following areas will position you for success within this team.

• Experience in operational and project management, with a proven track record of successfully managing complex projects from start to finish, preferred.
• Prior experience in enforcement, compliance, or legal operations will be preferred.
• Proficiency in data visualisation and automation tools such as Power BI, UIPath, and Generative AI would be an advantage.
• Ability to work independently and as part of a team, demonstrating strong interpersonal and organisational skills.
• Possess strong analytical, writing, and communication skills to effectively manage stakeholders.
• Self-motivated and ready to innovate in a dynamic environment.

The seniority of appointment and actual corporate job title will commensurate with individual work experiences.

We welcome fresh graduates in any discipline and candidates without working experience to apply. To help us better understand your academic background, please provide an official or unofficial copy of your academic transcript, as well as any other relevant documents or certificates that you believe would support your application.

Position is on a 1-year full-time contract directly under the payroll of CPF Board with an option to renew, contingent upon confirmation and subject to organisational needs.Additionally, there is potential for emplacement into a permanent position.

What you can expect

Being part of #TeamCPF means embarking on a challenging and rewarding career in a progressive workplace that values productivity and growth. Here’s what awaits you:

• Opportunities to engage in a mix of formal and informal training, keeping your skills sharp in our ever-evolving technological landscape.
• Promotion opportunities based on your capability and on-the-job performance.
• A vibrant community of like-minded and friendly colleagues, where collaboration and creativity thrive.
• A hybrid work model that offers flexibility for remote work, subject to exigencies of service.
• Flexible dress code that empowers you to choose your appropriate outfit for the day.
• A comprehensive rewards package that includes annual leave, pro-family leave, medical and dental benefits, and access to recreational activities.

About Central Provident Fund Board

At the Central Provident Fund (CPF) Board, we believe in developing individuals who are inspired to do their life’s best work, through 3Ps: Purposeful Work, Professional Growth, People & Culture.

Purposeful Work – The CPF Board helps 4 million members save for their retirement, healthcare and housing needs. Beyond being a pension fund, we are unique in being a national social security organisation, and we serve CPF members knowing that we make a difference.

Professional Growth – At CPF Board, you will have the opportunity to learn on the job and pick up new skills and knowledge. Although you are joining one organisation, you will have access to many career paths in the years ahead.

People and Culture – When you join CPF Board, you become part of a mission-oriented organisation with a strong culture of teamwork, collaboration, and innovation. As an employer, we value our people as our greatest asset, and foster a culture of respect, diversity, and inclusivity, where everyone's voice is heard, and contributions are recognised and celebrated.

Come and be a part of #TeamCPF today, to make a difference in the lives of others and in the future of Singapore.

k-ID is a trailblazing tech startup, specializing in providing advanced, privacy-centric tools designed to protect and empower kids and teens online. We have secured pivotal partnerships with key industry leaders in the gaming industry and are venture-backed by leading global VCs. We are poised for unprecedented growth and expansion in the coming year.

We are looking for a highly skilled Legal Operations Specialist with a strong background in both large-scale tech environments and startups. The key focus of this role is to streamline and optimize our legal processes, particularly in the areas of privacy and safety law. This role requires a strategic thinker who can build legal operations from the ground up, ensuring that our legal team is equipped to handle the complexities of protecting kids and teens online.

Key Responsibilities:

1. Legal Operations Management:

• Develop and implement efficient legal operations processes to support the legal team’s work, with a focus on privacy and safety law.
• Manage and optimize workflows, ensuring the legal team can effectively handle day-to-day tasks and long-term projects.
• Establish and maintain systems for contract management, compliance tracking, and legal documentation.

• Identify opportunities for process improvements and automation within the legal function, leveraging technology to enhance efficiency.
• Implement legal tech tools and systems to streamline operations, such as contract management systems, e-billing, and compliance tracking software.
• Train legal team members and other stakeholders on new tools and processes.

• Work closely with cross-functional teams, including product, engineering, and compliance, to ensure legal considerations are integrated into business operations.
• Serve as a liaison between the legal team and other departments, facilitating communication and collaboration on privacy and safety matters.

• Assist in managing the legal department’s budget, including tracking expenses, forecasting costs, and optimizing resource allocation.
• Manage relationships with external legal vendors, including law firms and legal tech providers, ensuring cost-effective and high-quality service.

Minimum Requirements:

• 3 years of experience working with legal teams in big tech companies or startups, preferably with a focus on privacy and online safety law.
• Proven experience in developing and managing legal operations processes, with a strong understanding of legal tech tools and systems.
• Highly organized with strong attention to detail and the ability to manage multiple priorities in a fast-paced environment.

Preferred Requirements:

• Relevant law degree (JD or equivalent) is required.
• Strong knowledge of global privacy laws.

Competitive Salary

• A competitive startup salary commensurate with experience and skills

Benefits Package

• Comprehensive benefits including health, dental, and vision insurance
• Employee Stock Ownership Plan (ESOP)

Professional Development

• Opportunities for ongoing learning and development.
• Exposure to multifaceted projects in a fast-growing industry

Innovative Culture

• A collaborative and inclusive work environment
• The opportunity to be a part of a company that’s making a positive impact on the online experiences of kids and teens

Your new company

Be a part of a world’s leading tech company, engaging with exciting new technologies.

Your new role

Key Responsibilities:

• CyberArk Privileged Cloud Management: Serve as an individual contributor for the SaaS-based CyberArk Privileged Cloud 12.6, hosted on AWS, Azure, and GCP, ensuring secure and efficient operations within the organization's cybersecurity framework.
• Cloud Migration and Cybersecurity Upgrades: Lead efforts to migrate existing on-premises services to the cloud, in collaboration with the CyberArk vendor, while upgrading connector machines from 12.6 to 13.1 following SaaS security bulletin guidelines.
• Cybersecurity Configuration: Configure and customize CyberArk PSM/PSMP for secure target system access protocols, such as SSH, RDP, and Telnet. Install and configure Conjur containers, handle seed file management, and perform certificate imports on master, standby, and follower servers to enhance cybersecurity.
• Remote Access Security: Implement CyberArk's Alero solution for secure remote vendor access management, reinforcing the organization’s cybersecurity posture.
• Product Feedback and Cybersecurity Improvements: Collaborate with CyberArk product teams to provide feedback and suggestcybersecurity improvements based on Telemetry report data, enhancing the overall security of the CyberArk environment.
• Custom Reporting and Cybersecurity Analysis: Develop and maintain custom reports for PAS Reporter as per client requirements, providing detailed cybersecurity insights.
• Integration with Cybersecurity Tools: Work with CyberArk vendors to integrate CyberArk Privileged Cloud 12.6 with Splunk and other cybersecurity tools, such as OKTA SAML MFA, to enhance monitoring and access control.
• User Authentication and Session Management: Manage user authentication and session management using CyberArk Identity, ensuring secure and compliant access to privileged systems.
• Collaboration on Cybersecurity Policies: Collaborate with cross-functional teams to develop least privilege access policies and entitlements for cloud assets, reinforcing the organization’s overall cybersecurity strategy

What you'll need to succeed

· Minimum of 8 plus years of experience in cybersecurity with a strong focus on privileged access management and hands-on experience with CyberArk solutions.

· Deep knowledge of CyberArk PAS components and their integration within a cybersecurity framework.

· Experience with cloud platforms (AWS, Azure, GCP) and their security implications in CyberArk deployments.

· Strong understanding of cybersecurity best practices, risk management, and compliance.

· Proficiency with scripting and automation tools (e.g., PowerShell, Python) for cybersecurity tasks.

· Certifications: Highly preferable to have one of these certifications:

o CyberArk Certified Trustee (CAU301)

o CyberArk Defender (CAU302),

o OR any other relevant cybersecurity certifications such as CISSP, CISM, etc.

· Soft Skills:

o Strong analytical and problem-solving skills within a cybersecurity context.

o Excellent communication and interpersonal skills, with an emphasis on cybersecurity collaboration.

o Ability to work independently in a fast-paced cybersecurity environment.

What you'll get in return
This is an exciting opportunity to join a global tech firm. You will be part of a dynamic team and you will be remunerated at market competitive rates.

What you need to do now

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV for a confidential discussion.

EA Reg Number: R21103035

EA License Number: 07C3924 | Company Registration No: 200609504D

Job Description

• Implement and manage compensation programs per policies.
• Oversee annual salary reviews, bonuses, and other payments.
• Manage performance appraisals and support manpower budgeting.
• Assist with compensation and benefits audits.
• Advise on compensation and benefits for managers, staff, and HRBP.
• Review and update compensation policies.
• Develop and execute communication plans on compensation and benefits.
• Participate in compensation surveys.
• Lead or support HR projects as assigned.

Job Requirement

• Min Bachelor’s degree
• 4-5 years of relevant experience

All qualified applicants, please click “ APPLY NOW”

Kimmy Low Yi Ting (Kim) | CEI Registration Number: R23112122

Recruit Express Pte Ltd Company Reg. No. 199601303W | EA LICENCE Number: 99C4599

Situated in the heart of Singapore's Central Business District, Rakuten Asia Pte. Ltd. is Rakuten's Asia Regional headquarters. Established in August 2012 as part of Rakuten's global expansion strategy, Rakuten Asia comprises various businesses that provide essential value-added services to Rakuten's global ecosystem. Through advertisement product development, product strategy, and data management, among others, Rakuten Asia is strengthening Rakuten Group's core competencies to take the lead in an increasingly digitalized world.

Rakuten is a global Internet and e-commerce company with over 1.3 billion registered users worldwide. Our e-commerce platform is the largest of its kind in Japan and among the world's largest by sales. Rakuten has many subsidiaries as well, including well-known brands like Rakuten VIKI, Rakuten Symphony, Rakuten TV, Kobo (e-Reading), and Viber (messaging). For more information, visit http://global.rakuten.com/corp/about/.

The Regional Chief Information Security Office (CISO) is to lead information security related actions to protect Rakuten Group companies in Asia region from internal/external security threat. You will be required to define, prioritizes, and implement IT security projects to reduce or eliminate risks that have been identified. This will involve working with regional teams and sister companies in all technology areas to address different types of IT security risks.

Role Responsibilities

• Maintains hardware, software and network firewalls and encryption protocols.
• Administers cybersecurity policies to control physical and virtual access to systems.
• Performs network security audits and testing and evaluates system security configurations to ensure efficacy and compliance with policies and procedures.
• Maintaining and supporting ISO/IEC27001 activities
• Responds to cybersecurity breaches, identifies intrusions and isolates, blocks and removes unauthorized access.
• Researches and evaluates cybersecurity threats and performs root cause analysis. Assists in the creation and implementation of security solutions.
• Provides information to management regarding impact on the business caused by theft, destruction, alteration or denial of access to information and systems.

Requirements / Qualification

• Minimum 3 years of working experience in Information Security
• Bachelor's Degree preferably in a service management or information technology-related field
• Experience in leveraging industry standards and frameworks such as ISO/IEC 27001
• Working knowledge in one or more security and privacy domains such as: security governance policies and procedures, risk management, compliance, access control, network
• Project management skills to lead IT security projects
• CISA, CISM, CISSP and security related qualifications are recommended

Rakuten is an equal opportunities employer and welcomes applications regardless of sex, marital status, ethnic origin, sexual orientation, religious belief or age.

· Over 5 years of experience in Information Security

• At least 2 years of direct experience in one of the Public Cloud platforms, such as AWS or Azure with strong knowledge of their security features.

• Ability to identify and drive remediation of public and hybrid cloud risks

• Experience in general security technologies, processes, and concepts.

• Industry-recognized security certifications (OSCP, CISSP, CISA, CEH, AWS Security, etc.).

• Working experience on SIEM / Analytics tools, eg: Securonix, Sentinel

• Working experience with common security operations systems, Intrusion Detection Systems (IDS/IPS), Security Incident Event Management systems (SIEM), anti-virus log collection systems, etc

• Strong analytical and problem-solving skills, with the ability to identify and address security risks and vulnerabilities

• Working knowledge of security systems and programs

• Ability to analyze and develop innovative recommendations and solutions.

• Sound fundamental knowledge of Internet technologies, such as TCP/IP, HTTP, SSL, DNS, OWASP Top10, and web servers (e.g. Apache, IIS, Nginx, etc.).

• Experience with web security concepts and technologies such as web application firewalls, and proxy.

• Familiarity with AWS technologies, such as CodePipeline, CodeBuild, CodeDeploy, CodeStar, Guardrails, Amazon ECS, AWS Lambda, and Open-source tools like Jenkins, DefectDojo, and OWASP Glue will be an added advantage.

· Excellent verbal and written communication skills

Cyber Security Specialist

Job Description

Architect, design, review and implement cyber security resilient in our product and projects. You are familiar with cloud security architectures and solutions, making sure the companies can operate in a safe, secure environment.

Responsibilities

• Responsible in managing CyberSecurity VAPT, Vulnerability Assessment, Risk Management and Testing.
• Manage Network and Cloud Security Risk Assessment and Audit.
• Involved in handling Government Projects related to risk, security attacks and system solutions.
• Consultancy on software and hardware for security vulnerabilities and risks
• Plan VAPT, execution, result analysis and provide fix recommendation.
• Provide guideline such as coding, key management, hardening, patch management, backup management, incident management, etc.
• Familiar with IM8 requirements and CIS, NIST security benchmark, cyber security tools to perform preliminary scan.

Skills Required

• Strong in knowledge in CyberSecurity, Risk Assessment, VAPT, Vulnerability and Cloud Security.
• Technically incline in CyberSecurity, Cloud, Risk and Vulnerabilities.
• Possess knowledge of IM8 and Government projects experience is preferred.
• Demonsrated
• Degree/Certifications in cyber security.
• Possess CyberSecurity certifications.
• Possess Government domain is preferred.

We respect your privacy and all communication will be treated with confidentiality.

Please contact us or apply in-confidence to us with you updated MS Word Resume to : [email protected]

Yong Jeline (Reg. No. R1101621)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

Responsibilities:

• Experience in leading and delivering multiple security projects and solutions across one or more IT Security domains (Cyber Program Management, Cyber Threat Management, Identity & Access Management, Data Protection, Privacy, Cyber Analytics). This experience should include both advisory, implementation and operation experiences.
• Design and develop a customized security architecture, evaluate and select the best security system in one or more of the above security domains.
• Provide high-level input and security consultation in a project-based environment and ensure adequate security controls in all Business IT solutions.
• Responsible for project planning, execution and managing scope due to any new information and/or changes to initial assumptions, including implications for project time, cost, quality and risk
• Ensure the security enhancements / new security project delivery is done in line with stakeholder’s requirements, timeline and cost.
• Develop and maintain a detailed security project plan which deliver to the cost, quality and time for enhancements
• The position will be heavily involved in IT security operations, including:Security solution delivery
  Security monitoring
  Administration for security systems (e.g. firewall, anti-malware system, IDS/IPS)
  Incident Response
  Level 2 support for IT Security operations.
  

Requirements:

• Min. Bachelor's degree in Computer Science
• Min. 6-8 years’ experience working in a large-scale IT environment; Including five (5) years of information security and risk experience within the past six (6) years; including risk analysis, endpoint, server, network and web application security
• Possess Security Industry Certifications such as CISSP, CISM, SANS, GSEC and PMP, ITIL, Microsoft, CISCO
• Having good understanding of TCP/IP protocol and OSI Seven Layer Model.
• Strong technical security skills in assessment, design, implementation architecture, and program / project delivery and work across various delivery models, (Waterfall, Agile, DevOps)
• Analyzes & prepares recommendations relating to security for existing IT infrastructures / Applications.
• Expert understanding of firewall technologies.
• Ability to plan, organize and prioritize tasks to complete within established time frames.
• Highly result oriented and can work independently.
• Ability to build relationships and interact effectively with internal and external parties.
• Strong analytical, technical, and communication (both oral and written) skills.

Your new company

Located in Singapore, this is well established shipping firm. With demand increasing, it is seeking for a Legal Secretary to expand and grow a team of people.

Your new role

Reporting directly to the GC, you’ll be responsible for supporting local SG office on providing administrative and secretarial support to the legal team. Manage documents, including preparation, drafting, and filing. Assist with case support, including searches and document review. Handle insurance and vendor management, and financial tasks like payments and scheduling. Respond to correspondence and maintain calendars and documents.

· Provide administrative and secretarial assistance to the legal team

· Document management:

· Prepare and draft various documents

· File documents on the in-house legal platform

· Assist with drafting, proofreading, and editing agreements, letters, and documents

· Case support:

· Conduct case searches as needed

· Review and verify Charterparties, Addendums, Fixing Notes, and proforma CP

· Insurance and vendor management:

· Update slot declaration lists and declare newly chartered vessels to insurance brokers

· Liaise with insurers regarding certificates and respond to queries from other departments

· Manage external vendor communications and updates

· Financial and operational tasks:

· Monitor and process payments for invoices, insurance premiums, club invoices, and legal invoices

· Manage files, documents, and deadlines

· Schedule appointments and meetings, and maintain calendars

· Respond to correspondence, emails, and faxes

What you’ll need to succeed

To ensure your success in this role, you will need:

· Qualifications: Diploma in Legal Secretary/Business Administration or a related field

· Experience: 1-3 years of relevant work experience, with shipping sector experience being a plus

· Pleasant and dynamic personality

· Positive attitude and willingness to learn

· Meticulous, able to multitask, and willing to work overtime if required

· Ability to work independently and collaboratively as part of a team

· Think creatively and outside the box

· Strong skills in excel and ppt required.

What you need to do now

If you're interested in this role, click 'apply now' or forward an up-to-date copy of your CV to me at [email protected]. If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion on your career.

EA Reg Number: R22106488

EA License Number: 07C3924 | Company Registration No: 200609504D

Cyber Security Specialist

Job Description

Architect, design, review and implement cyber security resilient in our product and projects. You are familiar with cloud security architectures and solutions, making sure the companies can operate in a safe, secure environment.

Responsibilities

• Responsible in managing CyberSecurity VAPT, Vulnerability Assessment, Risk Management and Testing.
• Manage Network and Cloud Security Risk Assessment and Audit.
• Involved in handling Government Projects related to risk, security attacks and system solutions.
• Consultancy on software and hardware for security vulnerabilities and risks
• Plan VAPT, execution, result analysis and provide fix recommendation.
• Provide guideline such as coding, key management, hardening, patch management, backup management, incident management, etc.
• Familiar with IM8 requirements and CIS, NIST security benchmark, cyber security tools to perform preliminary scan.

Skills Required

• Strong in knowledge in CyberSecurity, Risk Assessment, VAPT, Vulnerability and Cloud Security.
• Technically incline in CyberSecurity, Cloud, Risk and Vulnerabilities.
• Possess knowledge of IM8 and Government projects experience is preferred.
• Demonsrated
• Degree/Certifications in cyber security.
• Possess CyberSecurity certifications.
• Possess Government domain is preferred.

We respect your privacy and all communication will be treated with confidentiality.

Please contact us or apply in-confidence to us with you updated MS Word Resume to : [email protected]

Yong Jeline (Reg. No. R1101621)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

Job Description

Architect, design, review and implement cyber security resilient in our product and projects. You are familiar with cloud security architectures and solutions, making sure the companies can operate in a safe, secure environment.

Responsibilities

• To develop and build cloud security architectures and solutions
• Monitor, research, and analyze security risks to mitigate threats and security attacks
• Solution design for product to help reduce attacks on cloud service data storage, create preventative features, and implement corrective controls when breaches do occur
• Regular security and risk assessment for system solutions
• Support on audit trial for security related implementation
• Consultancy on software and hardware for security vulnerabilities and risks
• Plan VAPT, execution, result analysis and provide fix recommendation.
• Provide guideline such as coding, key management, hardening, patch management, backup management, incident management, etc.
• Familiar with IM8 requirements and CIS, NIST security benchmark, cyber security tools to perform preliminary scan.
• Familiar with public cloud infrastructure such as Azure, AWS, GCP and Huawei.

Skills Required

• Strong IT skills and knowledge including cloud, network, hardware, and software
• Degree/Certifications in cyber security.
• Ability to keep up with the fast pace of change in the criminal cyber-underworld
• Ability to seek out vulnerabilities in IT infrastructures
• Meticulous attention to detail

We respect your privacy and all communication will be treated with confidentiality.

If you have meet the job requirements that we are looking for or wish to find out more on this role, please contact us or apply in-confidence to us with your updated resume in MS Words format to : [email protected]

*Only shortlisted candidate will be notified.

Lee Kelvin (Reg No. R1872625)

STAR CAREER CONSULTING PTE. LTD (EA License: 20C0353)

• Banking / operations experience, with at least 2 years of professional experience in Operations/Back-Office area/ideally in securities environment
• Work closely with other business units like front office middle office technology, etc. to ensure smooth conduct of operational tasks.
• Should display an appreciation of control quality and risk related issues, proactive approach to avoid potential incidents such as buy-ins, TMPG claim, and cash management charges, late payment fees, etc..
• Ensure existing controls are followed by team. Active participation in daily team huddle and raise all best practices.
• Escalate to internal/external parties regularly for earliest & timely settlements of trades, etc.
• Ensure proper communication compliance of company and regulatory policies affecting areas managed.
• Maintain holistic, optimistic team environment encouraging people to speak up & the challenge status quo
• Identify, suggest, participate in process improvement related initiatives for successful execution.
• Good understanding of securities business domain and trade lifecycle.
• Client focused and motivated to work in partnership with front to back stakeholders to define practical solutions that meets the internal policies and regulatory requirements.
• Strong risk and control mindset with a structured and logical approach to analysis and problem-solving.

Skills & Education

• Monitor settlement transaction to ensure timely settlement incl. pre-matching and cancel and rebook transactions
• Place manual settlement and / or transfer instructions, affirm broker confirmations and handle broker enquiries.
• Systematically chase and resolve pending transfers/ settlements, differences and breaks (cash and security)
• Manage trade processing and lifecycle events, ensuring trade Confirmations are dispatched to clients and lifecycle events are booked accordingly.
• Administrate our securities settlement static data and standard settlement instructions (SSI) reference table
• Collaborate with interface partners as part of efficiency improvements and improve processes continuously.
• Process and send notification on corporate actions events for structured products

Job Description

Architect, design, review and implement cyber security resilient in our product and projects. You are familiar with cloud security architectures and solutions, making sure the companies can operate in a safe, secure environment.

Responsibilities

• To develop and build cloud security architectures and solutions
• Monitor, research, and analyze security risks to mitigate threats and security attacks
• Solution design for product to help reduce attacks on cloud service data storage, create preventative features, and implement corrective controls when breaches do occur
• Regular security and risk assessment for system solutions
• Support on audit trial for security related implementation
• Consultancy on software and hardware for security vulnerabilities and risks
• Plan VAPT, execution, result analysis and provide fix recommendation.
• Provide guideline such as coding, key management, hardening, patch management, backup management, incident management, etc.
• Familiar with IM8 requirements and CIS, NIST security benchmark, cyber security tools to perform preliminary scan.
• Familiar with public cloud infrastructure such as Azure, AWS, GCP and Huawei.

Skills Required

• Strong IT skills and knowledge including cloud, network, hardware, and software
• Degree/Certifications in cyber security.
• Ability to keep up with the fast pace of change in the criminal cyber-underworld
• Ability to seek out vulnerabilities in IT infrastructures
• Meticulous attention to detail

We respect your privacy and all communication will be treated with confidentiality.

If you have meet the job requirements that we are looking for or wish to find out more on this role, please contact us or apply in-confidence to us with your updated resume in MS Words format to : [email protected]

*Only shortlisted candidate will be notified.

Lee Kelvin (Reg No. R1872625)

STAR CAREER CONSULTING PTE. LTD (EA License: 20C0353)

• To conduct periodic cybersecurity vulnerability assessment for the respective sectors and liaising with Group IT and SOC for remediation;
• To own and conduct all Security Acceptance Test (SAT) for the group and sectors IT initiatives, and liaise with the business owners for remediation;
• To provide cybersecurity awareness training, technical advisory and consultancy to the group and sectors;
• To review the group and sectors security appliances’ rules i.e. Firewall, Intrusion Protection System, Proxy, Web Application Firewall (WAF), Network Access Control (NAC), Antivirus, Data Loss Prevention (DLP) and ensure relevancy;
• To be the group and/or sector’s interface for all cybersecurity queries, reviews and audits;

Requirements

• Degree in Computer Science, Information Technology, Computer Engineering or equivalent.
• Minimum 2/3 years experience in infrastructure & application security.
• Excellent communication skills and able to work independently.
• Candidate with Certification in Systems Security Certified Practitioner (SSCP) or Information System Security Professional (CISSP) or Ethical Hacker (CEH) will be an advantage.
• A team player.

Your new company

This is a multinational investment bank.

Your new role

• Develop and implement a comprehensive cloud DLP security strategy that aligns with the organization's goals and compliance requirements.
• Design and architect secure cloud solutions, considering aspects such as network security, identity and access management (IAM), encryption, and data protection.
• Guide implementation of proactive measures to address security concerns effectively.
• Ensure that cloud security practices adhere to industry standards and regulatory compliance, such as GDPR, HIPAA, or SOC 2.

What you'll need to succeed

• Minimum of 10 years of experience in information security, with at least 5 years focused on cloud security. Prior experience as a Security Architect or similar role is highly desirable.
• Experience with developing performance baselines for DLP tools.
• Proficiency in cloud platforms such as AWS, Azure, or Google Cloud, including knowledge of their security services and best practices.
• Certified Cloud Security Professional (CCSP) preferred.

What you'll get in return

• Challenging yet fulfilling career with an equal opportunity employer.
• Various opportunities to learn and upgrade your skill sets
• Competitive remuneration package and benefits

What you need to do now

If you’re interested in this role, click ‘apply now’ to forward an up-to-date copy of your CV, or call Shabnam at Hays on +65 60271964 or email [email protected] for a confidential discussion.

Referrals are welcome.

Registration ID No. R1873584 | EA License number: 07C3924 | Company Registration No. 200609504D