Total 52 Director/C-Level digital art director job vacancies in Legal / Public / Security category in Singapore

• LL.B/ J.D. from Recognized Institution with min. 4-7 years of Legal Advisory experience in Capital Market Services &/ Private Equity Venture Capital (CIS), preferably within a fintech/ financial services environment.
• Strong knowledge of legal and regulatory requirements related to corporate finance, banking, and fintech operations
• Legal talents from leading law firms covering North Asia would be ideal for amendment / translation of Chinese agreement

We are seeking a highly skilled and experienced Senior Legal Counsel/ Director to join our team of high-performing professionals in ensuring that all capital market and venture capital activities, including formation of Funds, are conducted in compliance with legal and regulatory requirements, while also supporting the strategic goals of the organization.

Key Responsibilities:

• Provide expert legal advice on a wide range of corporate finance and banking matters
• Draft, review, and negotiate a variety of contracts and agreements, including but not limited to investment agreements, partnership agreements, and financial instruments
• Manage and mitigate legal risks by designing and implementing company policies and procedures
• Represent the company in legal proceedings and liaise with external counsel as necessary
• Stay abreast of changes in laws and regulations affecting the fintech industry and advise senior management on relevant legal issues
• Develop, implement, and maintain robust compliance programs to ensure the company operates within regulatory frameworks
• Monitor and ensure compliance with applicable laws, regulations, and industry standards, including AML/KYC requirements, data protection laws, and financial regulations
• Conduct regular compliance audits and risk assessments, identifying areas for improvement and ensuring timely implementation of corrective actions
• Train and educate employees on compliance policies and procedures

Requirements:

• LL.B or J.D. from a recognized institution; additional qualifications in finance or business law is a plus
• min. 4-17 years of Legal Advisory experience in Capital Market and/or Private Equity Venture Capital (CIS), preferably within a fintech or financial services environment
• Legal talents from leading law firms covering North Asia would be a plus
• In-depth knowledge of legal and regulatory requirements related to corporate finance, banking, and fintech operations.
• Strong analytical, problem-solving, and decision-making skill
• Excellent communication and negotiation skill
• Proven ability to manage multiple tasks and projects simultaneously, with a keen attention to detail
• Demonstrated ability to work effectively in a fast-paced, dynamic environment
• High level of integrity, professionalism, and ethical standards
• Focus on Private Equity Venture Capital exposure with Collective Investment Scheme experience. Ideally formation of Funds
• Ideally able to amend / translate Chinese agreement

Summary of Role

The successful candidate will be responsible for developing and driving public communications strategies/campaigns to promote SHEIN’s corporate profile, as well as safeguarding the company’s reputation among external stakeholders in the APAC region.He/she is also responsible for fostering strategic partnerships with key media and public stakeholders in the country.

In this role, the candidate must be able to work effectively with various teams, including the Customer Service, Sustainability, Government Relations, Legal, Marketing, and Supply Chain teams, to advance SHEIN’s corporate interests in the APAC region.

The successful candidate should possess a deep interest and ability to understand how politics, business, fashion, sustainability, technology and innovation, as well as international relations are interconnected.

Responsibilities

• Write, develop and manage SHEIN communications materials to enhance corporate visibility and public image
• Develop, coordinate and drive implementation of external communication strategies and PR campaigns to position and promote SHEIN’s corporate profile
• Build and manage relationships with relevant media and other public stakeholders
• Track, monitor and lead daily reporting on media commentary and public discourse
• Responsible for managing corporate PR agency to meet KPIs
• Represent SHEIN in corporate/media activities
• Plan and execute corporate social responsibility programmes in partnership with internal and external stakeholders
• Pre-empt and provide counsel on issues management, as well as manage crisis communications situations
• Prepare and facilitate senior management for public speaking and media engagements

Qualifications and Experience

• Degree in Communications, Media, Journalism, Public Relations or related fields
• At least 8 years of experience in corporate communications or public relations
• Strong track record in developing and implementing external communication strategies/campaigns
• Excellent understanding of in-country media landscape, as well as strong top-tier media relations network with business, consumer and/or technology journalists
• Excellent writing, presentation and communication skills
• Good knowledge and experience in digital media tools/platforms
• Excellent interpersonal and teamwork skills
• Ability to multi-task and have exceptional attention to detail while operating in a fast-paced and dynamic environment
• Strong proficiency in English, proficiency in other Asian languages such as Chinese, Thai, Korean etc. will be considered an advantage

• LL.B/ J.D. from Recognized Institution with min. 7-12 years of Legal Advisory experience in Capital Market Services &/ Private Equity Venture Capital (CIS), preferably within a fintech/ financial services environment.
• Strong knowledge of legal and regulatory requirements related to corporate finance, banking, and fintech operations
• Legal talents from leading law firms covering North Asia would be ideal for amendment / translation of Chinese agreement

We are seeking a highly skilled and experienced Legal Director/Vice President to join our team of high-performing professionals in ensuring that all capital market and venture capital activities, including formation of Funds, are conducted in compliance with legal and regulatory requirements, while also supporting the strategic goals of the organization.

Key Responsibilities:

• Provide expert legal advice on a wide range of corporate finance and banking matters
• Draft, review, and negotiate a variety of contracts and agreements, including but not limited to investment agreements, partnership agreements, and financial instruments
• Manage and mitigate legal risks by designing and implementing company policies and procedures
• Represent the company in legal proceedings and liaise with external counsel as necessary
• Stay abreast of changes in laws and regulations affecting the fintech industry and advise senior management on relevant legal issues
• Develop, implement, and maintain robust compliance programs to ensure the company operates within regulatory frameworks
• Monitor and ensure compliance with applicable laws, regulations, and industry standards, including AML/KYC requirements, data protection laws, and financial regulations
• Conduct regular compliance audits and risk assessments, identifying areas for improvement and ensuring timely implementation of corrective actions
• Train and educate employees on compliance policies and procedures

Requirements:

• LL.B or J.D. from a recognized institution; additional qualifications in finance or business law is a plus
• min. 7-12 years of Legal Advisory experience in Capital Market and/or Private Equity Venture Capital (CIS), preferably within a fintech or financial services environment
• Legal talents from leading law firms covering North Asia would be a plus
• In-depth knowledge of legal and regulatory requirements related to corporate finance, banking, and fintech operations.
• Strong analytical, problem-solving, and decision-making skill
• Excellent communication and negotiation skill
• Proven ability to manage multiple tasks and projects simultaneously, with a keen attention to detail
• Demonstrated ability to work effectively in a fast-paced, dynamic environment
• High level of integrity, professionalism, and ethical standards
• Focus on Private Equity Venture Capital exposure with Collective Investment Scheme experience. Ideally formation of Funds
• Ideally able to amend / translate Chinese agreement

At KPMG, your long-term future is every bit as important to us as it is to you. That’s why our aim is to give you experiences that will stay with you for a lifetime. Whether it’s great training and development, working across functional sectors, mobility opportunities or corporate responsibility volunteering activities – you’ll gain a wealth of experiences on which to build a rewarding career. We’re proud of our culture – it’s one that recognises hard work, encourages new ways of thinking and embraces diversity and inclusion. We have an innovative spirit which inspires what we do and how we do it – striving to be better lies at the heart of who we are.

KPMG Cybersecurity professionals assist clients to address their concerns around Confidentiality, Integrity, and Availability of their technology, business systems, and information assets. Using a holistic view of how Technology and Business integrate, the Cyber team performs technology-risk focused assessments, technology compliance, IT/operational process reviews, and design of information risk & cyber security solutions.

Cyber team members regularly interact with C-Suite clients, such as Chief Executive Officer (CEO), Chief Information Security Officer (CISO), Chief Information Officer (CIO), Chief Operating Officer (COO), Chief Risk Officer (CRO) and their direct reports. Hence, a client centric mind-set, understanding of IT within a Business context, and well-developed communication skills are essential.

The role involves:

As a director within the Cyber Defence team, you will lead red team activities, improve the team's capabilities, interact with organizations and advise them on their security programs. You will mature and improve the outcomes of the red team and other ethical hacking services as well as coaching and leading team members on their assignments, developing them and growing the team’s capability.

• Engage with clients to identify business opportunities for red teaming, penetration testing and other technical assurance activities, and working with clients to scope and deliver those services.
• Being a spokes person for KPMG being able to represent KPMG and our Cyber team to a broad range of clients and other stakeholders.
• Fulfilling a leadership role within the Cyber Defence team, taking responsibility for driving enchantments of our services, processes, knowledge and skills.
• Leading complex red teaming and other technical engagements, as the primary contact taking responsibility for delivery on time and to budget.
• Horizon scanning looking for opportunities to develop new techniques for use in our work and opportunities to enhance our services and develop new services.
• Working with team members, you will develop services new services for delivery to clients and take responsibility for maintenance of existing services.
• You will act as a technical leader to the team, providing formal training and mentoring to the team.
• Being comfortable with associated disciplines of Security Policy and Governance

The ideal candidate should possess:

• Bachelor’s degree in computer science, Computer/Electrical Engineering, Information Technology or equivalent.
• A highly motivated individual in information security and excellent communicator with strong analytical and good problem-solving skills.
• Minimum 8 years of relevant experience in ethical hacking and red teaming.
• In depth knowledge of ethical hacking tactics, techniques, and procedures (TTPs) used by a threat actors to develop threats and engage in cyberattacks and the ability to emulate these TTPs as part of red teaming and ethical hacking engagements.
• Proven technical knowledge gained through demonstratable experience, training and professional qualifications, as a minimum OSCP and preferably high qualifications such as CCSAM, CTL, OSEP and OSED.

Role

The successful candidate will be part of the Global Public Affairs team, and will support the team’s efforts in managing global public policy risks for SHEIN, including implementing strategies / plans to enhance SHEIN’s credibility and corporate reputation in the following domain areas relevant to the company’s business: ESG, tech and data, and trade and investment.

The successful candidate will contribute to the analysis and assessment of key public policies across SHEIN’s global markets, and the development of recommendations to internal teams on regulatory and operational implications. He/she will also support the development of strategic plans to help SHEIN manage global policy risks and enhance its corporate reputation. In addition, he/she will work closely with relevant teams to develop global strategic partnerships across ESG, tech and data, or trade and investment domain areas, and to communicate key global projects/initiatives to both internal and external stakeholders.

In this role, the candidate must be able to work effectively with various teams, including SHEIN’s global and market-based Government Relations, Public Relations, Sustainability and business/operational teams.

Responsibilities

• Track, monitor and provide assessment of ESG, tech and data, and trade and investment policy issues and their implications to SHEIN’s business and operations
• Support the development of recommendations to senior management and relevant internal teams on strategies to manage public policy risks and enhance SHEIN’s corporate reputation
• Support the development of strategic partnerships with key global stakeholders (e.g. non-governmental and international organisations, industry associations, government officials and regulators, industry and business organisations), for instance public-private partnerships, strategic investment, business development, or social impact projects
• Organise and manage meetings with external parties related to ESG, tech and data, and trade and investment issues, including the preparation of briefing notes/presentations for senior management’s reference
• Support the development of SHEIN’s annual sustainability and social impact report and other strategic communications materials in support of the company’s overall policy positioning and profiling

Qualifications and Experience

• Degree in International Relations, Political Science, Global Studies, Law, Economics or related field
• At least 5 years of working experience in government relations or public policy relevant to ESG in either the public or private sector
• Keen interest in public-private partnerships, strategic investment, business development or social impact projects, with the ability to translate high-level objectives into practical outcomes
• Strong analytical, presentation (written and oral) and project management skills
• Excellent interpersonal skills
• Ability to multi-task and have exceptional attention to detail while operating in a fast-paced and dynamic environment

Are you ready to unleash your potential?

At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve.

We believe we have a responsibility to be a force for good, and WorldImpact is our portfolio of initiatives focused on making a tangible impact on society’s biggest challenges and creating a better future. We strive to advise clients on how to deliver purpose-led growth and embed more equitable, inclusive as well as sustainable business practices.

Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals.

We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognized for their contributions.

Ready to unleash your potential with us? Join the winning team now!

What you will do

As a Director in Cloud Security, you will lead the strategic vision and execution of cloud security initiatives, ensuring they align with client objectives and regulatory standards. You will oversee the development and implementation of comprehensive cloud security strategies, driving innovation and excellence in data protection, compliance, and risk mitigation. Your role will involve high-level engagement with stakeholders to demonstrate the value of cloud security initiatives, solidifying Deloitte’s position as a trusted leader in cloud security solutions.

You will

• Develop and drive the strategic vision for cloud security services across Southeast Asia.
• Lead and inspire cross-functional teams to deliver exceptional client outcomes.
• Oversee the setup, integration, deployment, and maintenance of Microsoft 365 and Purview security solutions.
• Identify, evaluate, and mitigate business and technology risks.
• Enhance internal controls and identify opportunities for continuous improvement.
• Build and nurture strong client relationships, providing strategic insights and recommendations.
• Manage project scope, schedule, status, and documentation, ensuring timely and within-budget delivery.
• Mentor and develop junior staff, promoting knowledge sharing and skills development.
• Identify and capitalize on opportunities to improve engagement profitability and drive business growth.

Your role as a leader

At Deloitte, we believe in the importance of empowering our people to be leaders at all levels. We expect our people to embrace and live our purpose and shared values, challenging themselves every day to identify issues that are most important to our clients, our people and the communities, and to make an impact that matters. In addition to living our purpose, Directors across our Firm are expected to:

• Lead from the front, acting as an exemplary role model of integrity for leaders at all levels; promote a strong sense of loyalty and followership as well as to energise others to perform at the highest level
• Build a high-performance culture by cultivating individual and team strengths; drive outstanding service, quality and stakeholder value, often through a mix of large cross-business and/or cross-border teams
• Anticipate market and competitor trends to develop and deliver bold and innovative solutions that differentiates Deloitte from others.
• Build and maintain trust-based relationships with senior stakeholders and influencers, using highly developed influencing skills to drive positive impact in complex situations.
• Set and communicate strategic direction, excite people around the vision and align diverse, cross-business as well as cross-border teams to achieve success.
• Manage the development of a strong pipeline of diverse talent for current/ future success; own and drive a talent experience that differentiates Deloitte from others.
• Anticipate market and competitor trends to develop and deliver bold and innovative solutions that differentiates Deloitte.

Enough about us, let's talk about you.

• 15+ years in cloud security, particularly in developing, implementing, or architecting Microsoft M365 security solutions.
• Hands-on experience with Entra ID (Azure Active Directory), Microsoft Intune, Microsoft Defender solutions, and Microsoft DLP, including their configuration, deployment, and management.
• Proven experience managing end-to-end projects involving Microsoft cloud security implementations.
• Relevant certifications such as Microsoft 365 Administrator, Microsoft Identity and Access Administrator, Microsoft Information Protection Administrator, with CISSP / CCSP being highly desirable.
• Bachelor’s degree in Computer Science, Information Security, or a related field; Master’s degree preferred.
• Ability to travel 25-50%, depending on the work and clients served.
• Excellent problem-solving skills and proven ability to lead a team of engineers.
• Strong communication skills to effectively advocate key security requirements to senior stakeholders.
• Strong critical-thinking and problem-solving abilities with clear communication.

Due to volume of applications, we regret that only shortlisted candidates will be notified.

Please note that Deloitte will never reach out to you directly via messaging platforms to offer you employment opportunities or request for money or your personal information.

Interested applicants are invited to apply directly at the NUS Career Portal

Your application will be processed only if you apply via NUS Career Portal

We regret that only shortlisted candidates will be notified.

Job Description

1. Policy implementation: Review and update policy on research security and collaborate with research units to implement related procedures and protocols.
2. Risk Assessment: Conduct regular risk assessments of research projects and facilities to identify potential security vulnerabilities and develop mitigation strategies through review of research agreements and related documents.
3. Training and Awareness: Develop awareness/training program for faculty, staff, and students on research security best practices, compliance requirements, and incident reporting procedures.
4. Point of Contact: Serve as the primary point of contact for internal and external stakeholders for research security matters. Work closely with various departments, including IT, compliance, legal, and research units to promote a culture of security and compliance in research activities.
5. Monitoring and Reporting: Monitor compliance with research security policy, perform related analysis and prepare reports for senior management on related activities. Support scheduled compliance audit/inspection on research security readiness and mitigation measures compliance and recommend improvements and follow up actions.

Qualifications

• Recognised degree in science or engineering discipline preferred;
• At least 5 years’ working experience in research management/administration or similar roles in compliance;
• Experience in research related functions in higher education sector, or research contracts management will be an advantage;
• Knowledge or experience in reviewing and developing policies and procedures;
• Excellent communication, analytical, and organizational skills and ability to work collaboratively in a diverse environment; strong problem-solving capabilities;
• Meticulous, independent and organised individual with the ability to maintain confidentiality and discretion as may be necessary in the job function.

The Senior Director IT is responsible for establishing and maintaining the information security program to ensure that information assets and associated technology, applications, systems, infrastructure and processes are adequately protected in the digital ecosystem in which we operate. The individual is responsible for identifying, evaluating and reporting on legal and regulatory, compliance, IT and cybersecurity risk to information assets, while supporting and advancing business objectives.

Description

Establish Governance and Build Knowledge

• Facilitate an information security governance structure through the implementation of a hierarchical governance program, including the formation of an information security steering committee or advisory board.
• Provide regular reporting on the current status of the information security program to enterprise risk teams and senior business leaders
• Work with the vendor management office to ensure that information security requirements are included in contracts by liaising with vendor management and procurement organizations.
• Create and manage a targeted information security awareness training program for all employees, contractors and approved system users, and establish metrics to measure the effectiveness of this security training program for the different audiences.
• Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems and services, including privacy, risk management, compliance and business continuity management.
• Provide clear risk mitigating directives for projects with components in IT, including the mandatory application of controls.

Develop the Frameworks

• Develop and enhance an up-to-date information security management framework based on one of the following: International Organization for Standardization (ISO) 2700X, ITIL, ENISA, ISA-62443, COBIT/Risk IT and National Institute of Standards and Technology (NIST) Cybersecurity Framework.
• Create and manage a unified and flexible control framework to integrate and normalize the wide variety and ever-changing requirements resulting from global laws, standards and regulations.
• Develop and maintain a document framework of continuously up-to-date information security policies, standards and guidelines. Oversee the approval and publication of these information security policies and practices.
• Create a framework for roles and responsibilities with regard to information ownership, classification, accountability and protection of information assets.
• Facilitate a metrics and reporting framework to measure the efficiency and effectiveness of the program, facilitate appropriate resource allocation, and increase the maturity of the information security, and review it with stakeholders at the executive and board levels.

Architecture/Engineering Support

• Work with IT staff to ensure that security is factored into the evaluation, selection, installation and configuration of hardware, applications and software.
• Recommend and coordinate the implementation of technical controls to support and enforce defined security policies.
• Research, evaluate, design, test, recommend or plan the implementation of new or updated information security hardware or software, and analyze its impact on the existing environment; provide technical and managerial expertise for the administration of security tools.
• Work with the enterprise architecture team to ensure that there is a convergence of business, technical and security requirements; liaise with IT management to align existing technical installed base and skills with future architectural requirements.

Operational Execution

• Coordinate, measure and report on the technical aspects of security management.
• Manage outsourced vendors that provide information security functions for compliance with contracted service-level agreements.
• Manage and coordinate operational components of incident management, including detection, response and reporting.
• Maintain a knowledgebase comprising a technical reference library, security advisories and alerts, information on security trends and practices, and laws and regulations.
• Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend treatment plans and communicate information about residual risk.
• Manage security projects and provide expert guidance on security matters for other IT projects.
• Assist and guide the disaster recovery planning team in the selection of recovery strategies and the development, testing and maintenance of disaster recovery plans.
• Ensure audit trails, system logs and other monitoring data sources are reviewed periodically and are in compliance with policies and audit requirements.
• Design, coordinate and oversee security testing procedures to verify the security of systems, networks and applications, and manage the remediation of identified risks.

Qualifications

• Bachelor’s Degree in Engineering, Computer Science, Information Systems, or related discipline required.
• Master’s Degree in a related field is preferred.
• Professional security management certification is desirable, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials

Experiences

• A minimum of ten years of IT experience, with seven years in an information security role and at least five years in a managerial capacity is required.
• Experience working with legal, audit and compliance staff is preferred.
• Experience developing and maintaining policies, procedures, standards and guidelines is required.
• Familiarity with applicable legal and regulatory requirements, including, but not limited to, the U.S. Sarbanes-Oxley Act, the U.S. Health Insurance Portability and Accountability Act (HIPAA), the European Union Privacy Directive, and the Japanese Financial Instruments and Exchange Law ("J-SOX").

Skill Sets

• Excellent analytical skills, the ability to manage multiple projects under strict timelines, as well as the ability to work well in a demanding, dynamic environment and meet overall objectives
• Project management skills: financial/budget management, scheduling and resource management
• Ability to lead and motivate the information security team to achieve tactical and strategic goals, even when only "dotted line" reporting lines exist
• A master of influencing entities and decisions in situations where no formal reporting structures exist, but achieving the desirable outcome is vital
• Excellent communication, interpersonal and collaborative skills. Experience working with a multi-continent technical team preferred
• High degree of initiative, dependability and ability to work with little supervision while being resilient to change

Technical Competencies

• Experience with common information security management frameworks, such as International Standards Organization (ISO) 2700x, the IT Infrastructure Library (ITIL) and Control Objectives for Information and Related Technology (COBIT) frameworks
• An understanding of operating system internals and network protocols.
• Familiarity with the principles of cryptography and cryptanalysis.
• Experience in application technology security testing (white box, black box and code review).
• Experience in system technology security testing (vulnerability scanning and penetration testing).

As a Business Information Security Officer, you will play a key role in proactively managing the information security and Data privacy landscape within the organization. Your expertise will help guide strategic decision-making on technology risk and security matters, ensuring robust IT security architecture, practices, and compliance across the organization.

Key Responsibilities:

• Lead proactive management of InfoSec & privacy.
• Provide thought leadership on technology risk and security.
• Drive the development and implementation of IT security policies and solutions.
• Ensure secure software development practices and change management processes.
• Plan and manage security incident responses and investigations.
• Oversee global adoption of cybersecurity and privacy controls.
• Act as the main point of contact for InfoSec and privacy matters.
• Collaborate with external auditors and regulators for compliance.

Required Skills and Qualifications:

• Extensive experience in IT security architecture, policy, and procedure development.
• Demonstrated leadership with strong decision-making abilities.
• Knowledge of software development life cycle security and asset management.
• Proven track record in incident response management and cybersecurity investigations.
• Excellent communication skills for non-technical stakeholders.
• Proficiency in current and emerging security trends.
• Familiarity with Singapore regulatory IT security requirements (e.g., MAS TRM, Cyber Hygiene notice).
• Bachelor's degree in IT/Computer Science or related field.
• Preferred certifications: CISSP, CISA, CISM, GIAC.

Personal Attributes:

• Team-oriented and able to work collaboratively.
• Strong communication skills for engaging senior stakeholders.
• Analytical problem-solver with a creative mindset.
• Independent and hands-on approach with strong attention to detail.

Application Process:
If you are interested in this role, please send your resume to [email protected]

At KPMG, your long-term future is every bit as important to us as it is to you. That’s why our aim is to give you experiences that will stay with you for a lifetime. Whether it’s great training and development, working across functional sectors, mobility opportunities or corporate responsibility volunteering activities – you’ll gain a wealth of experiences on which to build a rewarding career. We’re proud of our culture – it’s one that recognises hard work, encourages new ways of thinking and embraces diversity and inclusion. We have an innovative spirit which inspires what we do and how we do it – striving to be better lies at the heart of who we are.

KPMG Cybersecurity professionals assist clients to address their concerns around Confidentiality, Integrity, and Availability of their technology, business systems, and information assets. Using a holistic view of how Technology and Business integrate, the Cyber team performs technology-risk focused assessments, technology compliance, IT/operational process reviews, and design of information risk & cyber security solutions.

Cyber team members regularly interact with C-Suite clients, such as Chief Executive Officer (CEO), Chief Information Security Officer (CISO), Chief Information Officer (CIO), Chief Operating Officer (COO), Chief Risk Officer (CRO) and their direct reports. Hence, a client centric mind-set, understanding of IT within a Business context, and well-developed communication skills are essential.

The role involves:

As a director within the Cyber Defence team, you will lead red team activities, improve the team's capabilities, interact with organizations and advise them on their security programs. You will mature and improve the outcomes of the red team and other ethical hacking services as well as coaching and leading team members on their assignments, developing them and growing the team’s capability.

• Engage with clients to identify business opportunities for red teaming, penetration testing and other technical assurance activities, and working with clients to scope and deliver those services.
• Being a spokes person for KPMG being able to represent KPMG and our Cyber team to a broad range of clients and other stakeholders.
• Fulfilling a leadership role within the Cyber Defence team, taking responsibility for driving enchantments of our services, processes, knowledge and skills.
• Leading complex red teaming and other technical engagements, as the primary contact taking responsibility for delivery on time and to budget.
• Horizon scanning looking for opportunities to develop new techniques for use in our work and opportunities to enhance our services and develop new services.
• Working with team members, you will develop services new services for delivery to clients and take responsibility for maintenance of existing services.
• You will act as a technical leader to the team, providing formal training and mentoring to the team.
• Being comfortable with associated disciplines of Security Policy and Governance

The ideal candidate should possess:

• Bachelor’s degree in computer science, Computer/Electrical Engineering, Information Technology or equivalent.
• A highly motivated individual in information security and excellent communicator with strong analytical and good problem-solving skills.
• Minimum 8 years of relevant experience in ethical hacking and red teaming.
• In depth knowledge of ethical hacking tactics, techniques, and procedures (TTPs) used by a threat actors to develop threats and engage in cyberattacks and the ability to emulate these TTPs as part of red teaming and ethical hacking engagements.
• Proven technical knowledge gained through demonstratable experience, training and professional qualifications, as a minimum OSCP and preferably high qualifications such as CCSAM, CTL, OSEP and OSED.

We are looking for a Director of Public Relations (PR) that leads PR strategies to elevate clients' brand visibility, increase market penetration, and build trusted relationships with media and KOLs. This role involves strategizing, executing, and optimizing campaigns that leverage media and influencer networks to achieve impactful client results, while maintaining strong relationships with media and KOLs across relevant industries.

Key Responsibilities:

1. PR Strategy Development for Client Campaigns:

• Develop customized PR strategies aligned with each client’s brand positioning, business goals, and target audience.
• Identify and prioritize media channels and KOLs that resonate with clients’ target demographics.
• Design crisis communication plans and support clients with crisis response protocols.

2. KOL Engagement and Relationship Management:

• Identify, vet, and onboard KOLs and influencers relevant to clients' industries and brand values.
• Manage partnerships with KOLs, establishing clear deliverables and KPIs to maximize campaign ROI for clients.
• Foster long-term relationships with high-impact KOLs and influencers, maintaining a comprehensive agency network that clients can leverage.

3. Media Relations and Client Representation:

• Cultivate relationships with journalists, editors, and media outlets, establishing the agency as a trusted PR partner.
• Pitch story ideas and secure media coverage that aligns with clients' campaigns and core messages.
• Coordinate and lead media interviews, press briefings, and product launches, both for the agency’s brand and on behalf of clients.

4. Content Creation and PR Campaign Management:

• Oversee creation of high-quality PR materials, including press releases, articles, blog posts, and social media content tailored to each client’s brand voice.
• Conceptualize and manage integrated PR campaigns that combine traditional media with KOL-driven influencer marketing.
• Ensure cohesive messaging and branding in all client-facing materials, monitoring KOL-generated content to align with clients' brand guidelines.

5. Event Management for Client and Agency PR:

• Lead planning and execution of press conferences, brand showcases, and client events, managing end-to-end logistics.
• Facilitate client events with KOL participation to boost campaign visibility and audience engagement.
• Oversee guest lists, manage budgets, and coordinate pre- and post-event media coverage for optimal client exposure.

6. Monitoring, Analysis, and Reporting:

• Track PR performance metrics, including media coverage, audience reach, engagement rates, and KOL impact.
• Provide detailed analysis and reporting on the effectiveness of PR campaigns and KOL partnerships for each client.
• Use insights to enhance future PR and KOL engagement strategies, continuously improving client results.

7. Client Relationship and Account Management:

• Act as the primary contact for clients, presenting PR strategies, campaign progress, and post-campaign performance.
• Collaborate with internal teams, including content, social media, and marketing, to ensure cohesive campaign execution.
• Continuously update clients on PR trends, KOL opportunities, and potential new strategies for enhanced brand impact.

Qualifications:

• Bachelor’s degree in Public Relations, Communications, Marketing, or a related field.
• 8-10 year of working experience in PR
• Extensive experience in PR and influencer marketing within an agency setting, with a track record of successful client campaigns.
• Strong network of media contacts and established relationships with KOLs in various industries.
• Skilled in strategic planning, team management, and client communication in a fast-paced, multi-client environment.

SimplifyNext is the largest Intelligent Automation Services Provider in ASEAN, dedicated to enabling the future of work for organizations across the region. Our technology advisory, implementation, and capability development services allow our clients to unlock new levels of productivity, innovation, and business outcomes.

At SimplifyNext, we are committed to empowering our employees to make a positive impact for our clients, people, and the broader community. Since our inception in 2018, we have established ourselves as a leader in the industry, earning numerous Global and Asia Pacific region awards along the way. Our success is due in no small part to the dedication and contributions of our talented team, which includes industry leaders and top technologists.

Despite our rapid growth, we remain committed to embodying a startup culture that encourages innovation, collaboration, and creativity. We are proud to focus on mentoring and grooming the next generation of consulting practitioners and technology experts, ensuring that we continue to provide exceptional services to our clients and make a meaningful impact on the communities we serve. In addition to working on projects for our clients, our people spend time to build the broader ecosystem including students at universities and polytechnics through trainings, mentoring, hackathons, etc.

We are looking for a highly motivated individual that has proven track record to take on Sales / Client Manager position focusing on the Enterprise Sector. Join us and create your own success story!

Work you’ll do

As a member of our Sales & Business Development team, you will be responsible for driving sales including account penetration, prospect qualification, sales process planning, and closing all sales opportunities in the Public Sector.

This role will focus on building deep and trusted business relationships with new and existing clients to help them scale automation and analytics - in the process transforming the way they work and making a real difference to their business as well as their employees.

The role requires the individual to act as a trusted client advisor and bring together the relevant expertise and thought leadership from within SimplifyNext to deliver successful outcomes for our clients as well as SimplifyNext.

Our simple and flat organization structure and a collaborative culture is an enabler for high performing sales professionals to thrive in and express themselves.

Key Responsibilities

• Grow the portfolio of clients within the Public Sector
• Take primary responsibility for the client and act as internal client owner within assigned accounts
• Create comprehensive client business plans to build a stable, growing pipeline of current and future business opportunities
• Collaboratively work with internal teams as well as our technology partners to successfully position the solutions and/or services and see the opportunity through to closure
• Lead business negotiations for contracts focusing on win-win outcomes for both the clients and SimplifyNext
• Maintain a high level of the relevant industry, product, and service knowledge to have meaningful conversations and generally stay ahead of trends
• Take an active role in defining the GTM plan for the Public Sector Sector
• Track and manage the entire sales process and account management activities with the support of pre-sales architect and project managers.
• Be accountable for the achievement of sales and revenue targets

Skills and Qualifications

• Bachelor’s Degree or Diploma
• At least 8 years of relevant technology sales experience in the Singapore Public Sector
• Strong people networking and excellent verbal and written communication skills
• In-depth knowledge of sales cycle and ability to source new prospects and scale existing accounts
• Experience in selling to senior client stakeholders
• Ability to pro-actively and independently identify and qualify opportunities
• Proven sales record with established relationships within the Public Sector
• Quick learner to understand any new solutions that are ready to take to market

Legal Director, APAC (MedTech) – Multinational Medical Device Organisation

The Role

A multinational organisation specialising in Medical Technology is seeking for a Legal Director to lead the APAC region including South-East Asia, China, India, New Zealand.

The Opportunity

This MedTech organisation specialises in developing innovative technologies which play a significant role in therapy advancements and in addressing diseases in Hematology, Oncology, Neurology, Autoimmune Diseases and Regenerative Medicine.

The Legal Director will lead the legal function and oversee all legal and compliance matters for the organisation. This role involves providing strategic legal advice to senior management, ensuring compliance with global regulations, managing legal risks, and protecting the company’s interests.

The Legal Director will support the business's growth and operations by advising on various legal issues, including corporate governance, intellectual property, regulatory compliance, licensing, contracts, litigation and Mergers & Aquisitions.

This position requires a proactive and strategic legal professional with experience in the Medical Device and healthcare sector.

What we look for:

• Law degree (LLB or JD) from a recognised institution, with a license to practice law in at least one jurisdiction (Masters degree preferred).
• Minimum of 10-15 years of legal experience, with a significant portion in the Medical Device, healthcare, or life sciences industry (Medical Device & MedTech sectors are highly preferred)
• Experience in a multinational organisation or law firm handling complex legal and regulatory issues.
• Strong knowledge of medical device regulations, requirements, anti-corruption laws, and other relevant healthcare laws.
• Experience with M&A, joint ventures, or other strategic transactions.
• Demonstrated leadership skills, with the ability to manage a legal team and collaborate with cross-functional teams.
• Excellent negotiation, contract drafting & review, communication skills and ability to draft legal terminology in Chinese language
• Ability to work in a fast-paced, dynamic environment with a proactive, business-oriented approach to legal issues.

What we offer:

• Multinational organisation
• Competitive salary and benefits package.
• Opportunity to work in a dynamic and growing industry.
• Leadership role with significant influence on the company’s strategic direction.
• A collaborative and innovative work environment.

What’s next:

This description is tailored to reflect the responsibilities and requirements for a Legal Director in a multinational medical device company, with a focus on regulatory, compliance, and strategic legal matters.

The selection process is now taking place and we are keen to identify the suitably qualified Legal Director candidate for this global organisation.

Please reply directly to this posting with your most updated CV or to [email protected]

Should you not hear from us, please assume your application was unsuccessful for this time and we welcome your application again the next.

We look forward to considering your application.

Engage Life Science - Singapore / South-East Asia

[email protected]

Engage Group Pte.Ltd is a licensed business under the Ministry of Manpower: (EA: 18C9316)

Associate Director Regional Security, AP

• Based in Singapore, the regional hub for Asia Pacific (AP) and top-ranked biopharmaceutical company on the Straits Times and Statista’s list of Best Employers in Singapore for two consecutive years (2020, 2021).
• Join the premier biopharmaceutical company that has been in Singapore for more than 25 years and in AP for over 60 years.

Reporting to the Regional Security Director, the Associate Director Regional Security (ADRS), AP is responsible for providing security support across a wide range of services in AP region for people and assets and operations, which include sales and marketing; manufacturing; and research. Incumbents are also responsible for providing lawful, objective and thorough support for internal and external investigations.

Responsibilities

• Provide tactical & strategic security support to AP (assigned markets) operations.
• Establish and maintain seamless interface with AP management and operations.
• Support the analysis of security exposures and implement cost effective passive, reactive, and proactive programs to address these exposures.
• As directed by Regional Security Director, conduct/support internal and external investigations within AP. Will be required to travel extensively.
• Maintain close liaison with government, industry, security, and intelligence professionals within AP.
• Provide guidance and support to site operations within AP ensuring that worldwide standards, policies and procedures are implemented and maintained.
• Provide support as directed in the areas of Executive Protection, Crisis Management, Site Security Surveys, and Risk Assessment / Risk Analysis.

Experience Required

• Security professional with 5-10 years’ experience in corporate security and/or 5-10 years’ experience in law enforcement within AP.
• Strong background in investigations.
• Ability to identify security issues and customize & implement solutions.
• Proven ability to work in varying situations, from committee work in which a “team player” approach is essential to situations in which considerable independence and self-motivation is required.
• Demonstrated ability to perform under pressure and respond rapidly to breaking situations. Sound, proven judgment is a must.
• Fluent English skills and fluency in Korean/Chinese/ Japanese advantageous
• Bachelor’s Degree (minimum) or equivalent.

We are proud to be a company that embraces the value of bringing diverse, talented, and committed people together. The fastest way to breakthrough innovation is when diverse ideas come together in an inclusive environment. We encourage our colleagues to respectfully challenge one another’s thinking and approach problems collectively. We are an equal opportunity employer, committed to fostering an inclusive and diverse workplace

Associate Director, Regional Security

• Based in Singapore, the regional hub for Asia Pacific (AP) and top-ranked biopharmaceutical company on the Straits Times and Statista’s list of Best Employers in Singapore for two consecutive years (2020, 2021).
• Join the premier biopharmaceutical company that has been in Singapore for more than 25 years and in AP for over 60 years.

Reporting to the Regional Security Director, the Associate Director Regional Security (ADRS), AP is responsible for providing security support across a wide range of services in AP region for people and assets and operations, which include sales and marketing; manufacturing; and research. Incumbents are also responsible for providing lawful, objective, and thorough support for internal and external investigations.

Responsibilities

· Provide tactical & strategic security support to AP (assigned markets) operations.

· Establish and maintain seamless interface with AP management and operations.

· Support the analysis of security exposures and implement cost effective passive, reactive, and proactive programs to address these exposures.

· As directed by Regional Security Director, conduct/support internal and external investigations within AP. Will be required to travel extensively.

· Maintain close liaison with government, industry, security, and intelligence professionals within AP.

· Provide guidance and support to site operations within AP ensuring that worldwide standards, policies, and procedures are implemented and maintained.

· Provide support as directed in the areas of Executive Protection, Crisis Management, Site Security Surveys, and Risk Assessment / Risk Analysis.

Experience Required

· Security professional with 5-10 years’ experience in corporate security and/or 5-10 years’ experience in law enforcement within AP.

· Strong background in investigations.

· Ability to identify security issues and customize & implement solutions.

· Proven ability to work in varying situations, from committee work in which a “team player” approach is essential to situations in which considerable independence and self-motivation is required.

· Demonstrated ability to perform under pressure and respond rapidly to breaking situations. Sound, proven judgment is a must.

· Fluent English skills and fluency in Korean/Chinese/ Japanese advantageous

· Bachelor’s Degree (minimum) or equivalent.

We are proud to be a company that embraces the value of bringing diverse, talented, and committed people together. The fastest way to breakthrough innovation is when diverse ideas come together in an inclusive environment. We encourage our colleagues to respectfully challenge one another’s thinking and approach problems collectively. We are an equal opportunity employer, committed to fostering an inclusive and diverse workplace.

We are seeking an experienced senior manager to lead our information security team, combining strong hands-on technical expertise as well as people management experience in the information security domain. They will lead a team to design and/or review application security including but not limited to penetration test, source code review, Cloud Security and various inter-connected application and infrastructures, especially in the area of authentication, authorization, information protection, and cryptographic controls for both on-premise and cloud environment. The role also has supervision of the AIA-SG IAM and Threat Intelligence Manager and their team.

This role is responsible for providing leadership in application security review for the strategic digital solutions across technology to ensure secure solutions for business growth. The person should have solid written and verbal communication skills.

WHAT YOU’LL BE DOING:

VAPT

Manage the AIA-SG Vulnerability Assessment and Penetration Testing team responsible for delivering the following services to AIA-SG, including Security Architecture:

Application Security

• Design and/or review application security architecture proposal for various security-driven initiatives or business-driven initiatives for on-premise and cloud environment.
• Manage external third-party for application penetration testing engagements.

Infrastructure Security

• Manage end-to-end infrastructure security activities, such as vulnerability management, servers’ security monitoring & hardening, infrastructure as a code, etc.
• Design and/or review infrastructure security architecture proposal for various security-driven initiatives for on-premise and cloud environment.

Cloud Security

• Manage compliancy level of AIA SG cloud security assets based on ongoing regular scanning according to the defined threshold.
• Evaluate the security aspect of new cloud-based solutions proposed by application development team, infrastructure team, or business users.
• Manage various cloud security BAU activities, such as assets provisioning, deprovisioning, hardening, etc.

Penetration Testing

• Manage end-to-end application security activities, including application penetration testing, authentication / authorization design / review, and DevSecOps design & roll out.
• Manage Third Party relationships with industry vendors who undertake security assessment services.
• Oversight of annual Pen testing schedule.

Information Security Architecture

• Lead a team to design and/or review application security architecture proposal for various security-driven initiatives or business-driven initiatives for on-premise and cloud environment.
• Design and/or review authentication and authorization flow of the applications, whether it is aligned with security best practices and organization's IT security technology policy & procedure in terms of the strength of access controls, session management, cache management, cookie management, token management, cryptographic algorithm, and information/data protection.
• Assess the security aspect of new proposed application tools / platforms from application team, and relevance/consequences to existing security architecture.
• Work closely with application development and infrastructure team to proactively stay on top of latest secure application design to deliver thorough security recommendation aligned with organization's IT security technology policy & procedure.

Identity and Access Management

• Supervise the AIA-SG IAM Manager and their team performing IAM Governance functions for the Business Unit.

Cyber Security & Security Incident Handling

• Work with Security Operation Centre (SOC) Team to ensure secure protection of AIA SG environment.
• Deploy new cyber security initiatives and roll out the platform together with SOC Team.
• Point of contact for security incident handling and investigation, starting from incident is identified, handled, and resolved.

Security Advisory

• Provide feasible security recommendations or guidance based on queries / changes initiated by application development team, infrastructure team, or business users.
• Facilitate challenging security conversations and provide acceptable solutions where IT standards are contradicting with business demands to achieve acceptable business solutions without sacrificing security and compliance aspects.

Managerial Responsibilities

• Lead promotion of activities to increase information security within your teams to embed and continuously improve adherence to good practice.
• Drive a continues Learning and Development program for staff training. (with inhouse and external training programs).

WHAT WE ARE LOOKING FOR:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).
• Minimum 15 years of experiences of information security domain, especially in Application Security, Infrastructure Security and Cloud Security.
• Preferable to have application development or infrastructure operation background with hands-on experiences of designing and/or reviewing application security or infrastructure security.
• Hands-on information security experience in the Multiple Cloud Environment (SaaS, PaaS and IaaS) and Cyber Incident management.
• Certifications related to security architecture or Cloud Security is preferable, such as CCSP, Azure DevOps certification, Azure Solutions Architect certification, etc.
• Preferably a holder of one or more of the following information security and audit qualifications: CISSP, CISA, CRISC, CCSP.
• Good knowledge of latest security technologies and cyber landscape in a highly regulated industry.
• Good interpersonal and communication skill.
• Strong leadership with a high integrity, proactive mindset, and strong ownership.
• Working experiences in insurance / banking / IT industry is preferred.
• Leading DevSecOps tool experience such as Snyk, Veracode, SonarQube
• Infrastructure Security: Windows, Linux, AS400.
• Application framework and Security: NodeJS, ReactJS, .NET
• Security Advisory and Assessment.
• Security Incident Management.
• CI/CD pipelines: Azure DevOps, Bamboo, Jenkins, GitHub, Bitbucket.

Key Responsibilities:

• Develop and implement comprehensive legal and compliance policies and procedures across the organization.
• Conduct regular risk assessments and implement appropriate mitigation strategies.
• Support the launch of new products and services, ensuring they meet regulatory requirements.
• Oversee the company’s compliance program, ensuring activities are executed effectively and meet all regulatory requirements.
• Provide strategic legal advice to the executive team on all significant issues affecting the company.
• Manage corporate governance and ensure compliance with all statutory and regulatory obligations.
• Review and revise business agreements, public announcements, terms and conditions, etc.
• Lead internal audits and investigations, respond to external audits, and manage any litigation or regulatory actions.
• Coordinate with various department heads to ensure that company practices are in alignment with legal and regulatory frameworks.
• Train and supervise the legal and compliance department staff, ensuring high levels of performance and professional development.
• Stay abreast of changes in laws that affect the company’s operations and strategic initiatives.
• Represent the company to external stakeholders and regulatory bodies.
• Lead KYC, CDD, and AML related work, ensuring accurate KYC/CDD records.
• Identify & escalate risks to management, when necessary.
• Support the effectiveness of the firm's compliance monitoring program - i.e., reviewing of marketing materials, monitoring of clients correspondence, provide oversight into staff's trading activities, conducting investment compliance monitoring to ensure the firm's business is compliant with regulatory requirements.
• Conduct compliance and regulatory training to internal staff.
• Contribute to the investment portfolio risk analysis and monitoring.

Requirements:

• Bachelor degree or higher in Law, Finance, Business Administration, or a related field.
• Minimum of 8 years of relevant experience in experience in regulatory compliance and AML/CFT within financial institutions,
• Strong knowledge of MAS regulations and the Securities and Futures Act.
• Interest in the crypto industry and a willingness to stay informed about industry trends and developments.
• Proven experience in managing compliance within a complex organizational structure.
• Excellent negotiation, communication, and presentation skills.
• Demonstrated ability to think strategically and provide leadership across multiple levels of an organization.
• Multi-lingual skills (English and Mandarin) are a plus, given the need to work across different cultures and geographies.
• Ability to work independently and as part of a team.
• Professional certifications in compliance or AML/CFT are an advantage (e.g., ICA, ACAMS).

JOB SUMMARY

Lead and manage security architecture and engineering in APEC. Performs security accreditation and evaluates the implementation of those controls in order to grant Approval to Operate for a release of new infrastructure, services, applications and processes into Marriott’s Production Environments in regional level.

Leverages existing Security Engagement processes and documentation, in conjunction with security compliance tools, to determine control implementation status. Will routinely process ITSM Release and Security Engagement Tasks to document justification for all approvals. Will routinely collaborate with multiple teams, including, but not limited to, Business Release Sponsors, Project Managers, Security Architects, Security Architecture Analysts, and

Change Management teams to ensure the Security Processes are followed and completed in order to accredit the engagement or release.

Will routinely manage and communicate the status of the tasks assigned in ITSM to thoroughly document the accreditation resulting in granting of Approval to Operate. Understand, communicate, interpret and enforce MI Policies and Security Standards throughout the Certification and Accreditation process. Understand and communicate control objectives in terms of both MI Policy and Standards and Security Best Practice Frameworks, including, but not limited to, NIST RMF, NIST CSF, PCI DSS, GDPR, MPLS, EU Privacy, ISO, as referenced in Marriott’s Common Controls Framework. Will periodically provide status and metrics for the assigned C&A Engagements in order to provide visibility and transparency to GIS Senior Leadership

CANDIDATE PROFILE

Education and Experience

Required:

• Bachelor’s degree in Information Systems, Computer Science or related field or equivalent experience/certification
• 8+ years’ experience in Information Security with:3+ years in process-oriented Security Audit/Assurance/Technical Assessment role
  2+ years’ team management experience with security technical team members
  1-2 years’ experience/exposure to Common Controls Framework
  Exposure/functional understanding of NIST RMF
  
• Current and relevant information security certifications such as: CISSP (Certified Information Systems Security Professional), (ISC)2 CGRC certification, ISACA, PCI QSA/ISA, ITIL, IS Certification & Accreditation Professional - ISCAP, GIAC Information Security Professional (GISP),

Preferred Skills & Attributes

• Strong oral and written communication skills and comfortable with speaking in large groups virtually and in person.
• Ability to conduct independent security research.
• Strong understanding of common OWASP flagship projects, Top 10, Cheat Sheets…etc.
• Strong understanding of cryptography concepts: hashing, signing, encryption, decryption, tokenization
• Strong understanding of SDLC and security integration points
• Functional understanding of microservice application architecture
• Functional understanding of common application security controls such as WAF, RASP, Intercepting Proxies
• Comfortable with the following tools and technologies: GitHub Advanced Security, Postman, Fortify SCA, Jenkins, Artifactory, SonarQube, Docker, JIRA, Confluence, Aqua CSP, Nessus Pro or Tenable.io
• Comfortable with technical report writing and crafting security requirements.
• Basic understanding of network security concepts: DOS, DNS Spoofing, ARP Poisoning, Firewalls, Intrusion Detection, Segmentation
• Basic understanding of Vulnerability and Patch Management practices
• Basic understanding of endpoint security controls: EDR, Vulnerability Scanning Agents, HIDS, FIM
• Basic understanding of Agile Software Development Practices & DevOps
• Master’s degree in Computer Science or Software Engineering
• Mid-level cloud computing certification, AWS Solutions Architect Associate, Azure Administrator Associate, Google Associate Cloud Engineer
• Functional knowledge software engineering concepts: GOF software design patterns, SOLID design principles (SRP, OSP, LSP, ISP, and DIP) and design methods (Scrum, XP, Lean, Waterfall)
• Functional understanding of common cryptographic algorithms and libraries
• Functional foundational understanding of Cloud Computing

CORE WORK ACTIVITIES

Security Accreditation

• Works with development teams to review application source code for security and operational risks.
• Perform manual code reviews of applications that are not compatible with automated SAST tools.
• Provide detailed security documentation to developers, software engineers and technical personnel when necessary.
• Provide guidance and recommendation to software architects and engineers on how to correct code related security flaws.

Managing Work, Projects, and Policies

• Manage security architecture and engineering team in APEC.
• Participate in peer reviews of security assessments created by other team members.
• Manage tickets and SLAs associated with security testing efforts.
• Maintain and contribute to the enterprise SSDLC standard.
• Coordinates and implements work and projects as assigned.
• Generates and provides accurate and timely results in the form of reports, presentations, etc.
• Analyzes information and evaluates results to choose the best solution and solve problems.
• Develops specific goals and plans to prioritize, organize, and accomplish work.
• Sets and tracks goal progress for self and others.
• Monitors the work of others to ensure it is completed on time and meets expectations.
• Provides direction and assistance to other organizational units’ policies and procedures, and efficient control and utilization of resources.

Leading Team

• Creates a team environment that encourages accountability, high standards, and innovation.
• Leads specific team while assisting with meeting or exceeding department goals.
• Makes sure others understand performance expectations.
• Ensures that goals are being translated to the team as they relate to tracking and productivity.
• Creates and nurtures an environment that emphasizes motivation, empowerment, teamwork, continuous improvement and a passion for providing service.
• Understands employee and develops plans to address need areas and expand on the strengths.
• Provides the team with the capabilities needed to meet or exceed expectations.
• Leads by example demonstrating self-confidence, energy and enthusiasm.

Conducting Human Resources Activities

• Acts proactively when dealing with employee concerns.
• Extends professionalism and courtesy to employees at all times.
• Communicates/updates all goals and results with employees.
• Meets semiannually with staff on a one-to-one basis.
• Establishes and maintains open, collaborative relationships with employees.
• Solicits employee feedback.
• Interviews job candidates and assists in making hiring decisions.
• Receives hiring recommendations from team supervisors.
• Ensures orientations for new team members are thorough and completed in a timely fashion.
• Observes behaviors of employees and provides feedback to individuals.

Additional Responsibilities

• Provides information to supervisors, co-workers, and subordinates by telephone, in written form, e-mail, or in person in a timely manner.
• Manages group or interpersonal conflict.
• Informs and/or updates executives, peers, and subordinates on relevant information in a timely manner.
• Manages time effectively and conducts activities in an organized manner.
• Presents ideas, expectations and information in a concise, organized manner.
• Uses problem solving methodology for decision making and follow up.
• Performs other reasonable duties as assigned by manager.

Marriott International is an equal opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered under applicable law.

We are seeking an experienced senior manager to lead our information security team, combining strong hands-on technical expertise as well as people management experience in the information security domain. They will lead a team to design and/or review application security including but not limited to penetration test, source code review, Cloud Security and various inter-connected application and infrastructures, especially in the area of authentication, authorization, information protection, and cryptographic controls for both on-premise and cloud environment. The role also has supervision of the AIA-SG IAM and Threat Intelligence Manager and their team.

This role is responsible for providing leadership in application security review for the strategic digital solutions across technology to ensure secure solutions for business growth. The person should have solid written and verbal communication skills.

WHAT YOU’LL BE DOING:

VAPT

Manage the AIA-SG Vulnerability Assessment and Penetration Testing team responsible for delivering the following services to AIA-SG, including Security Architecture:

Application Security

• Design and/or review application security architecture proposal for various security-driven initiatives or business-driven initiatives for on-premise and cloud environment.
• Manage external third-party for application penetration testing engagements.

Infrastructure Security

• Manage end-to-end infrastructure security activities, such as vulnerability management, servers’ security monitoring & hardening, infrastructure as a code, etc.
• Design and/or review infrastructure security architecture proposal for various security-driven initiatives for on-premise and cloud environment.

Cloud Security

• Manage compliancy level of AIA SG cloud security assets based on ongoing regular scanning according to the defined threshold.
• Evaluate the security aspect of new cloud-based solutions proposed by application development team, infrastructure team, or business users.
• Manage various cloud security BAU activities, such as assets provisioning, deprovisioning, hardening, etc.

Penetration Testing

• Manage end-to-end application security activities, including application penetration testing, authentication / authorization design / review, and DevSecOps design & roll out.
• Manage Third Party relationships with industry vendors who undertake security assessment services.
• Oversight of annual Pen testing schedule.

Information Security Architecture

• Lead a team to design and/or review application security architecture proposal for various security-driven initiatives or business-driven initiatives for on-premise and cloud environment.
• Design and/or review authentication and authorization flow of the applications, whether it is aligned with security best practices and organization's IT security technology policy & procedure in terms of the strength of access controls, session management, cache management, cookie management, token management, cryptographic algorithm, and information/data protection.
• Assess the security aspect of new proposed application tools / platforms from application team, and relevance/consequences to existing security architecture.
• Work closely with application development and infrastructure team to proactively stay on top of latest secure application design to deliver thorough security recommendation aligned with organization's IT security technology policy & procedure.

Identity and Access Management

• Supervise the AIA-SG IAM Manager and their team performing IAM Governance functions for the Business Unit.

Cyber Security & Security Incident Handling

• Work with Security Operation Centre (SOC) Team to ensure secure protection of AIA SG environment.
• Deploy new cyber security initiatives and roll out the platform together with SOC Team.
• Point of contact for security incident handling and investigation, starting from incident is identified, handled, and resolved.

Security Advisory

• Provide feasible security recommendations or guidance based on queries / changes initiated by application development team, infrastructure team, or business users.
• Facilitate challenging security conversations and provide acceptable solutions where IT standards are contradicting with business demands to achieve acceptable business solutions without sacrificing security and compliance aspects.

Managerial Responsibilities

• Lead promotion of activities to increase information security within your teams to embed and continuously improve adherence to good practice.
• Drive a continues Learning and Development program for staff training. (with inhouse and external training programs).

WHAT WE ARE LOOKING FOR:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).
• Minimum 15 years of experiences of information security domain, especially in Application Security, Infrastructure Security and Cloud Security.
• Preferable to have application development or infrastructure operation background with hands-on experiences of designing and/or reviewing application security or infrastructure security.
• Hands-on information security experience in the Multiple Cloud Environment (SaaS, PaaS and IaaS) and Cyber Incident management.
• Certifications related to security architecture or Cloud Security is preferable, such as CCSP, Azure DevOps certification, Azure Solutions Architect certification, etc.
• Preferably a holder of one or more of the following information security and audit qualifications: CISSP, CISA, CRISC, CCSP.
• Good knowledge of latest security technologies and cyber landscape in a highly regulated industry.
• Good interpersonal and communication skill.
• Strong leadership with a high integrity, proactive mindset, and strong ownership.
• Working experiences in insurance / banking / IT industry is preferred.
• Leading DevSecOps tool experience such as Snyk, Veracode, SonarQube
• Infrastructure Security: Windows, Linux, AS400.
• Application framework and Security: NodeJS, ReactJS, .NET
• Security Advisory and Assessment.
• Security Incident Management.
• CI/CD pipelines: Azure DevOps, Bamboo, Jenkins, GitHub, Bitbucket.

JOB DESCRIPTION

As a dynamic, collaborative, and extremely talented group of storytellers spread across 20 countries worldwide, headquartered in Singapore, we are committed to creating the best for our customers, delivering excellence to our employees, and making a positive impact on our societies. If you are someone who strives to raise the bar and consistently gives your best, we invite you to join our team!

Client

• Perform as a Business Unit Leader by providing a vision for the unit while developing the team
• Be responsible for managing an existing portfolio of clients and maintaining high client satisfaction
• Conceptualize and implement strategic public relations and communications initiatives for clients
• Cultivate and maintain relationships with media and influential professionals
• Coordinate coverage opportunities and manage crisis communications
• Proactively drive new business and convert strategic opportunities to expand client portfolio and grow revenue
• Collaborate across borders with Redhill Group entities
• Ensure all client work and projects are completed on time and within budget

Financial

• Be responsible for the business unit portfolio’s financial performance and P&L – take proactive steps to improve bottom line, identify savings and effectively manage capacity
• Ensure fair and competitive pricing of services and products
• Partner with finance and business managers on business unit’s financial matters

Team

• Lead, motivate and inspire your team
• Set clear objectives for team members and manage each member's performance
• Encourage learning and growth activities with team members
• Work closely with the senior leadership team to develop, implement and analyse the company’s strategic growth plans
• In carrying out the job responsibilities, the Executive shall maintain a high quality of work and professional standards.

Required skills and experiences you should have:

• 10+ years’ experience in the field of public relations and communications in an agency setting is preferable
• Experience in consumer clients is beneficial
• Proven track record in effectively managing portfolio of clients
• Drive to work in a fast-paced, startup environment

Our client is actively searching for a Deputy Director, Legal to join their team!

If you are a dynamic individual seeking a new career opportunity, read further!

Our client is seeking for qualified candidates to provide legal support to the investment team at the University’s Investment Office. The Investment Office manages the investment of the University’s endowment and related funds. This position will report to the Chief Investment Officer; providing day-to-day direction on investment matters.

The responsibilities of this role are:

• Reviewing and drafting agreements and other documents relating to domestic and foreign private investment funds, managed accounts, and co-investment vehicles
• Monitoring and advising on domestic and foreign legal, regulatory, and compliance matters relating to investment matters
• Supporting operational due diligence
• Reviewing and implementing systems, policies and procedures to streamline processes and manage risks in the investment process
• Supporting the investment responsibility function at the Investment Office.
• Working with outside counsel, investment professionals, and members of the investment operations team to address other legal, regulatory, and business issues
• Reviewing and drafting other commercial agreements, including non-disclosure agreements, vendor contracts, consulting agreements, and engagement letters.
• Providing legal advice on other non-investment issues as required, including contentious and non-contentious corporate/commercial matters
• Advising on legal compliance, governance and policy issues
• Legal research
• Conducting or arranging in-house legal training and education

The ideal candidate will need to have the following qualities and experience:

• Recognised law degree and professional qualifications (preferably called to the Singapore Bar)
• Minimum 5 years PQE in a law firm or as an in-house legal counsel
• Strong corporate and commercial experience with interest in or exposure to investment-related work; experience in investor-side review and negotiation of investment fund agreements, and familiarity with regulatory and compliance issues associated with investment-related activities would be advantageous
• Excellence in judgment, writing, analytical and communication skills
• Ability to work independently as well as collaboratively in a team environment with internal and external contacts at all levels
• Highest level of professionalism and integrity
• Strong interpersonal and communication skills

An exciting career awaits the right candidate! Click "Quick Apply" to register your interest now.

All applicants' CV will be treated with the strictest confidentiality. We regret to inform that only shortlisted candidates will be contacted.

Responsibilities

Facility operational Security

• Promote awareness and ensure facilities are compliant with Physical Security Standard/Policy of security related GEA policies, procedures, and guidelines.
• Ensure that all necessary sites in the region have Business Continuity Plans in place.
• Assist in coordinating the installation or replacement of security systems at GEA facilities to ensure compatibility and continuity of systems and applications.
• Conduct comprehensive reviews and analysis of GEA facility security plans for compliance with existing GEA policies and procedures.
• When needed conduct comprehensive site security reviews of GEA construction projects underway in AOR.
• Ensure the reporting of all incidents involving crime, security violations, critical security intelligence and incident trends via GEA reporting system, review incoming reports and provide guidance to close incidents.
• Security incident/investigation leader, receive and evaluate information on security-related adverse incidents and make recommendations to preclude recurrence.
• Provide general oversight and guidance on the security operations for GEA sites, to include advising on security protocols/standards, guard services, access control, crisis management and business continuity.
• Ensure SSLs are conducting security related training exercises, tabletops, and mitigating findings.
• Provide security education and awareness activities, including leading continuing education efforts for sites and leadership teams as well as all employees through awareness programs.
• As a future build, may have people leader responsibilities to include, but not limited to, hiring, training, and managing employees.

Regional Security Point of Contact

• Keep abreast of relevant security industry standards/regulations, incoming security-related correspondence as well as monitor national and international events to assess security-related trends and implications on GEA business operations and staff within the region.
• Provide oversight and leadership on security-related activities as the primary security focal-point for the region and the business leadership.
• When necessary, travel outside of AOR to assist other GEA members of the Global Security team.
• Deploy as part of an Incident Management Team in response to an incident when on the ground assistance is required.
• Represent GEA among key industry groups and at association functions when needed.
• Maintain 24/7 availability to provide incident response coverage and intelligence reporting to GEA when needed.
• Undertake security missions and crisis management support roles and providing security support for special events as required and/or directed by the GEA Global Security and/or the business needs of the region.
• Build and maintain an effective working relationship with key law enforcement and security agencies and professional security organizations related to the area of responsibility.
• Working with GEA legal and compliance teams, ensure GEA legal entities and operations comply with local regulations.
• Coordinate, assist, and collaborate with other regional security managers as well as members of GEA Global security teams.
• Responsible for working with related GEA components such as facilities, logistics, procurement, and digital technology teams, to support the Global Security mission.

Collaborate and share critical information with the GEA Aerospace Response Center (ARC)

• Monitor national and international events to assess security-related trends and implications on GEA business operations and staff within the region.
• Ensure there are country/zone level crisis plans to provide an established and validated process to limit the intensity of a negative threat or event to GEA’s employees, products, services, financial condition, and reputation within the area.
• Keep abreast of relevant travel security risk as well as provide oversight of travel security support activities, i.e., escorts, meet and greet, etc.
• Provide travel security support by monitoring trends that may cause issues for GE travelers in the designated Area of Responsibility and work with GEA ARC for country assessments and ratings and communicate with travelers accordingly.
• Provide site readiness and security-related statistical information and yearly progress to the GEA Regional Security Director and the GEA executive team.

Audits/Assessments

• Conduct security audits & inspections of GEA facilities. Participate in other GEA audits and inspections as required by GEA Global Security.
• Analyze the potential security risk with regards to newly acquired businesses and implementing GEA security policies and processes in these businesses, supply chain partners.
• Provide GEA regional business leaders with technical knowledge and assist in coordinating vendors with field locations on proposed security-related equipment and expenses.
• Conduct comprehensive risk and site vulnerability assessments to identify deficiencies and best practices and provide recommendations for the protection of employees and to prevent financial loss, damage, or business interruptions.
• Develop exercise simulation scenarios to test the various country and site crisis plans. Identify and propose gap resolutions for local crisis plans. Audit and drive to closure.

Qualifications:

• Bachelor’s degree and/or equivalent advance degree
• Minimum 10 years of professional experience as a people leader at the senior level.
• Minimum 5 years’ regional security experience.
• Extensive operational experience in security management, Law Enforcement, or military preferred.
• Experience working domestically and internationally in multiple settings (office & field)
• Familiarity with global/international security laws, regulations, and an understanding and acceptance of varying global perspectives, ideologies, and cultures.
• Strong oral and written communication skills in the English language.
• Strong interpersonal, judgement and leadership skills and a demonstrated background in successfully leading complex programs/projects.
• Extensive crisis management/incident response experience.
• Demonstrable experience managing and executing event security functions.
• Demonstrable experience managing and executing executive protection/asset protection functions protection.
• Extensive operational experience in security management, Law Enforcement, or military service preferred.
• Working knowledge of Word, Excel, Power Point, etc.
• Able to work effectively across multiple cultures and time zones.
• Significant domestic and international travel required.
• Self motivated, self directed, flexible and able to work under pressure and in fast paced team environments.
• Strong understanding of designated region to include local laws, regulations, customs, and cultures.
• Strong understanding of security nuances (methodologies, vulnerabilities) within respective region
• High level of interpersonal, verbal and written communication skills, with an emphasis on collaboration, and the ability to engage executive-level decision-makers
• Excellent English language communication skills: experience communicating across multiple levels (including executive level), functions and regions; able to clearly and effectively communicate complex information both verbally and in writing.
• Experience establishing and implementing departmental strategic initiatives.
• Proven project management skills (multi-faceted & complex projects) with ability to handle multiple tasks and deliver results on time
• Experience conducting investigations on a variety of circumstances such as criminal activity, security violations, significant misconduct, etc.
• Has cultural awareness & sensitivity: ability to flex style to suit differing cultural norms and experience of leading a culturally diverse team.
• Can operate successfully in a highly autonomous environment.

Language: English fluency is required. Demonstrable multilingual capability (Hindi, Mandarin, Malay, Japanese) will be highly regarded.

Desired Characteristics:

• Humble: respectful, receptive, agile, eager to learn
• Transparent: shares critical information, speaks with candor, contributes constructively
• Focused: quick learner, strategically prioritizes work, committed
• Leadership ability: strong communicator, decision-maker, collaborative
• Problem solver: analytical-minded, challenges existing processes, critical thinker

What We Do

At Coda, we break down barriers between publishers and their audiences by thinking outside of the app. Coda is trusted by 300+ top digital content publishers – including industry giants Activision Blizzard, Bigo, Electronic Arts, Riot Games, and Zynga – to grow revenue, profit margins, and customer engagement in 60+ markets with ease. For publishers, this means less lift, more players and more payers. For players, Coda’s solutions allow them to pay for play their way.

Our winning formula? A laser-focused, pragmatic attitude coupled with an unwavering commitment to excellence. We are customer-centric, creative, and solution-oriented, always delivering to our users the top-tier entertainment content they want at competitive prices.

If you’re ambitious, bold and ready to take your career to the next level, get in touch!

Legal at Coda

Step into the dynamic world of Coda's Legal team, where we craft inventive legal solutions to fuel our business growth. As a key force behind the daring ideas that drive Coda's success, our mission is to empower those around us by continually elevating our abilities.

To excel in Coda's legal department, you will need a positive attitude and unwavering integrity. We are on the lookout for curious and inspired individuals who are eager to make a difference and excited to tackle new challenges every day.

Coda is seeking an experienced and dynamic Legal Director to join our legal leadership team. The Legal Director will manage all legal, regulatory, and policy matters for the Americas region. The ideal candidate will demonstrate excellent critical thinking, good judgment, excellent verbal and written communication skills, and adept stakeholder management. As a Legal Director, you will lead a team of legal professionals, setting the bar for excellence across the legal team.

Responsibilities

• Strategic Leadership: Develop and implement legal strategies to support and advance the organization's goals and objectives.
• Team Management: Lead, mentor, and manage a team of legal professionals, fostering a collaborative and high-performance culture.
• Stakeholder Management: Build and maintain strong relationships with internal and external stakeholders, providing clear, pragmatic and effective legal advice.
• Risk Management: Identify, assess, and manage potential legal risks, advising senior management on appropriate courses of action.
• Commercial: Support the business on commercial deals, including negotiating and drafting commercial contracts with game publishers, payment channel partners and distribution partners.
• Dispute Resolution: Manage and resolve legal disputes, working with external counsel as necessary.
• Regulatory Liaison: Serve as the primary point of contact with regulatory, law enforcement and government bodies in the Americas, ensuring timely and accurate communications.

Requirements

• JD or LLM and admission to at least one state bar in the US
• Minimum combined 8 years of law firm and in-house experience with a strong background in commercial negotiations
• Excellent critical thinking and judgment
• Excellent verbal and written communication skills
• Strong stakeholder management and interpersonal skills
• Proven leadership and team management abilities
• Demonstrated ability to work in a global, fast-based and dynamic environment
• Strong negotiation and conflict resolution skills

Working at Coda

Joining the Coda team means diving into a fast-paced, challenging, and exciting world. With Codans spread across over 30 countries around the world, our highly collaborative environment breaks down time zones and cultural barriers, empowering you to chase innovative ideas, contribute to Coda’s growth, and make a lasting impact.

If you have a passion for pushing boundaries, and thrive on continuous improvement through experimentation, we'd love to hear from you!

Our Perks*

• WFH Support: Get a monthly allowance to cover your work-from-home expenses and keep you connected.
• Wellness Boost: Stay healthy with resources for physical and mental well-being with our flexible benefits and Employee Assistance Program - because you matter!
• Customized Benefits: Tailor your benefits with our flexible plan.
• Growth Opportunities: Unlock your potential through clear progression paths.
• Skill Development: Access training resources to fuel your personal and professional growth.
• Volunteer Time Off: Enjoy paid time off to make a difference in the world through volunteering.
• Family Care: Take advantage of paid Family Care Leave to bond with your family, while our selected Flexible Benefits also cater to your family's needs.

*Benefits are reviewed and updated on a yearly basis

We are proud to be an equal opportunity employer, embracing the unique qualities of every individual, regardless of gender, race, age, religion, disability, or other local protected classes. Our goal is to foster an inclusive environment where everyone feels welcome and valued.

Due to the large number of exceptional applications we receive, we can only reach out to shortlisted candidates. If you don't hear from us, rest assured there may be another opportunity at Coda that aligns better with your unique abilities. Remember to check our Careers Page for more exciting job openings!

The Restaurant Brands International (RBI) Legal Department is recruiting for the role Legal Director, International. This is a role in the Singapore office for a corporate lawyer with at least six years of transactional legal experience. In this role, the lawyer will work closely with internal stakeholders and leading law firms in jurisdictions across the world.

Responsibilities

• Prepare, review, negotiate and finalize legal agreements, including franchise agreements, development agreements, investment agreements, letter agreements and other relevant documents, with a strong attention to detail and a view to managing risk while maximizing protections and benefits to the business.
• Support and provide guidance on franchise disclosure and registration requirements, in compliance with applicable laws.
• Support and coordinate legal opinions and advice from local counsel in various jurisdictions.
• Provide regular training on transactions, corporate, franchising and other legal matters.
• Support the business teams on day-to-day matters, including drafting of various letters and communications, interpretation of legal documents, updating of contract templates and ensuring compliance with internal policies and procedures.
• Perform other general legal and/or business duties and functions as may be assigned or required by business needs.

Requirements

• Fully qualified lawyer admitted to practice in Singapore, US, England & Wales, or any commonwealth country.
• At least 6 years of transactional experience in a leading law firm.
• Outstanding judgment and ability to identify, distill and manage complex issues quickly and effectively.
• Excellent drafting skills and fluency in written and spoken English.
• Strong collaborative skills, including the ability to coordinate with RBI attorneys across the world, external counsel, business leaders and executives, business development colleagues, communications, finance, accounting and tax partners and other advisors.
• A positive attitude and ability to work well within teams and the skills to work across business functions and cultures with teams located in multiple time zones, as well as the ability to act independently in a fast-paced environment.
• Highly organized and demonstrated ability to work under pressure with a high-volume workload and tight timelines. Results-oriented.
• Ability to anticipate legal issues and risks, develop legal strategy and set objectives.

Security Market Development Associate Director

Accenture is a global professional services company with leading capabilities in digital, cloud and security. Combining unmatched experience and specialized skills across more than 40 industries, we offer Strategy and Consulting, Interactive, Technology and Operations services—all powered by the world’s largest network of Advanced Technology and Intelligent Operations centres. Our 506,000 people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries. We embrace the power of change to create value and shared success for our clients, people, shareholders, partners and communities. Visit us at www.accenture.com.

• Open to suitable candidates based in any of the Growth Markets MU’s including SEA, LATAM and ANZ.
• Collaborate with Alliance Partner to jointly originate Security opportunities and increase qualified pipeline.
• Qualify opportunities and collaborate with Sales Capture Lead.
• Execute the offering activation strategy, confirming strategic alignment between Accenture and the Partner.
• Develop and align field engagement with Alliance Partners framing the unique value proposition for the offering in combination with Accenture Security.
• Develop strong relationship with Alliance Partner executives to identify accounts to approach jointly.
• Manage relationships with the Alliance Partner sales team throughout the entire sales cycle.
• Bring strong knowledge of offerings into partner, client team, and client discussions.
• Leverage enablement materials on offerings, adjusting as needed to fit a particular client’s situation.

Requirements:

• Bachelor's Degree
• With extensive experience in Sales, Security
• With wide range of connections to be able to help bring in additional clients

Why join us?

You will have opportunities to hone your functional skills and expertise in an area of specialization. We offer a variety of formal and informal training programs at every level to help you acquire and build specialized skills faster. Learning takes place both on the job and through formal training conducted online, in the classroom, or collaboration with teammates. The sheer variety of work we do, and the experience it offers, provide an unbeatable platform from which to build a career.

Accenture is an equal opportunities employer and welcomes applications from all sections of society and does not discriminate on grounds of race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, or any other basis as protected by applicable law.