Total 160 digital design manager job vacancies in Legal / Public / Security category in Singapore

Company Overview:

Traveloka is a leading technology company that provides a one-stop travel and lifestyle platform for customers in Southeast Asia. Our platform offers a wide range of travel-related services, including flight and hotel bookings, activities, attractions, and more. With a mission to empower travelers with seamless experiences, we're committed to pushing the boundaries of technology and innovation in the travel industry.

It's fun to work in a company where people truly BELIEVE in what they're doing!

Job Description:

As a leading travel technology company, Traveloka manages a vast ecosystem of APIs, microservices, cloud infrastructures, and front-end applications (web and mobile) that serve millions of users worldwide. On the back side, we operate large-scale data pipelines and internal business operations, many are engineered in-house, which require robust security measures to protect user data, intellectual property, and sensitive corporate information.

The Security Engineering Manager will take a holistic approach to safeguarding our engineering assets, working and managing across multiple teams including DevSecOps, Product Security, and Offensive Security. Success in this role requires strong analytical, problem-solving, and leadership abilities, as well as the capacity to think from defensive, offensive, and engineering perspectives to craft tailored security solutions for our unique environment. The ideal candidate will not only be proficient in using readily available or off-the-shelf tools but will also have the expertise to assess when and how custom security tools need to be developed and maintained with a software engineering perspective to address specific challenges.

Requirements:

• Proven experience managing Security Engineering or Software Engineering teams, with at least 7 years of extensive expertise in cybersecurity.
• Strong background in leading cybersecurity or software development projects using agile methodologies.
• Experience securing applications in fast-paced environments with frequent changes.
• Proficient in general-purpose programming languages (e.g., Python) and Object-Oriented Programming (e.g., Java).
• Hands-on experience with cloud platforms like AWS and GCP, including platform- specific security features and common security tools.
• Familiarity with modern technologies such as containerization, managed container services, serverless functions, infrastructure as code, API gateways, BFF (Backend for Frontend), CI/CD, and microservices.
• Deep technical knowledge of web, mobile, OS, and network security
• Able to practically demonstrate various security tests and control implementation such as SAST, DAST, SCA, WAF, secure-by-design, and secure application framework.
• Excellent verbal and written communication skills.
• Strong self-initiative to bridge gaps between Software Engineering, Infrastructure Engineering, and Security Engineering, while providing a security framework for the entire technology team and management.
• Commitment to cybersecurity with a dedication to continuous learning and staying updated on new technologies.
• Experience in CTF, bug bounty programs, presenting at security conferences, or publications is a plus.
• Experience with penetration testing, red teaming, or purple teaming is a plus.
• Web development experience or developing security tools is a plus.
• Relevant technical security certifications (e.g., Offensive Security, CREST, SANS GIAC) are a plus

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!

Job Description

• Industry/ Organization Type: Manufacturing/Electronic Components and Boards
• Position Title: IT Security Manager (Regional)
• Working Location: Bedok (Company pick-up provided at Bedok MRT)
• Working Hours: 5 Days, Mon – Fri (8:15 am – 5:15 pm)
• Salary: Basic up to $12,000 + Variable Bonus
• Duration: Permanent

Key Responsibilities

• Analyze and prioritize vulnerabilities based on severity, potential impact, and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention, and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques, and incident response strategies.

APPLY NOW!!!

• Bachelor’s Degree in Computer Science, IT, or equivalent experience.
• Has 5+ years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Professional information security certification preferred (e.g. CompTIA Security+, CISSP, CISA, CISM).

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job(at)anradus.com.sg. Kindly indicate #67372 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it’s likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

Product area

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

Job description

Google's infrastructure needs go far beyond server computers. As Google's products and services scale the globe, the Strategic Negotiation team works behind the scenes to secure infrastructure for Google's future -- everything from underwater cables to physical data center space. As a Strategic Negotiator, you combine your deep market knowledge of a given sector with tech industry savvy to negotiate cost-effective solutions to support Google's infrastructure growth. You'll work with specific project teams on negotiating deals, managing vendor and partner relationships and presenting deal recommendations to our Tech leadership. Your successful negotiations have the potential to save Google millions of dollars in operating costs and impact every part of the business.

Additional job description

The Public Affairs team focuses on telling our story to decision-makers, opinion formers, and data center communities. We are focused on creating inclusive, strategic, and scalable solutions that have authentic and universal impact.

As the Public Affairs Manager for APAC, you will advise on how to shape our data center initiatives in a way that is aligned to state and local government priorities. You will lead the maximization of partner opportunities to partner with state and local institutions and tell the story of our data center commitment.

Qualifications

Job responsibilities

• Provide public policy through leadership, assist in building our workforce development pipeline, and build relationships within Google and externally by networking.
• Manage our economic, sustainability, and social contributions to create connections between technology and modern life.
• Provide region specific business advisory support for economic development agreements, including commercial review of terms, tax implications and infrastructure funding.
• Assist with various economic development and market advocacy team projects including data analytics and data hygiene.
• Collaborate with cross-functional partners including, but not limited to, tax, finance, legal, policy, and communications on a variety of economic development matters.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 10 years of experience working with public policy teams and cross-functional stakeholders.
• Experience with economic development issues such as direct or indirect taxes, tax policy, or infrastructure development.

Preferred qualifications

• Experience in indirect taxes, economic development policy, infrastructure development, agreement drafting, and presentation development. Experience with data center real estate markets.
• Experience developing and executing strategies to deliver exceptional solutions.
• Excellent attention to detail and political/communication skills.
• Ability to identify opportunities and areas for improvement, and operate in a fast-paced environment.
• Ability to think outside the box and propose commercially and technically creative solutions.
• Ability to comfortably work in ambiguous, collaborative, and fast-paced environments.

Summary

This position is responsible in ensuring a safe environment for the hotel employees and guests, and safeguards the assets of the hotel. The Security Manager assists the Management, employees and guests in every way that is consistent with the protection and prevention objectives.

Job Responsibilities

• Prepare monthly staffing schedules, monitoring staff attendance and assist in planning work schedules.
• Maintain a Hotel logbook on incidents, complaints etc. and refer them, if required to the appropriate department for follow up action.
• Handle and resolve all guest queries and complaints in an efficient manner and to establish an amicable relationship with all clients, and guests of the Hotel.
• Be proactive in guests’ requests and anticipate Safety needs according to Singapore’s events.
• Maintain a high level of controlling details within the guest areas.
• Conform to and enforce Security policies, procedures, rules, and regulations as laid down by ACCOR and the hotel in order to achieve the highest levels of uniformity and guest service.
• Prepare the annual capital and operating budgets for the Department.
• Ensure that all potential and real Hazards are reported immediately and rectified.
• Be fully familiar of the Emergency Procedures, Policies and Standard Operating Procedures as established by the Hotel.
• Assist in safety and emergency training for all employees.
• Ensure that all emergency procedures are rehearsed, implemented and enforced to provide for the security and safety of guests and employees.
• Ensure the safety of the persons and the property of all within the premises by fairly applying Hotel Regulations by strict adherence to existing laws, statutes etc.
• Ensure all staff within the department work in a manner which is safe and unlikely to give risk of harm or injury to selves or others.
• Use safe manual handling techniques and practise safe work habits following Accor Health, Safety and Environment policies, maintain procedures to minimise our impact on the environment and prevent pollution.
• Perform other duties as directed by the General Manager.

We are seeking a highly motivated Public Policy Associate to join our South Asia Public Policy team. The ideal candidate will have a passion for technology and its potential to create opportunities, connect communities throughout the region in a safe and responsible manner, and possess deep understanding of the political and regulatory landscape within the region.

As part of this role, you will be responsible for understanding Meta’s policies and business priorities, and will work closely with country policy leads across South Asia to develop and execute strategic regional policy plans, aligned with global policy priorities and local market needs. Additionally, you will collaborate with colleagues globally, engage with trade associations, and work with third-party groups. The successful candidate will join a team addressing some of the most intriguing public policy challenges of our time, including AI, privacy, safety, freedom of expression, and the growth of the digital economy. This position is based in Singapore and reports to the Director of Public Policy for South & Central Asia.

Responsibilities

• Collaborate with country policy leads across South Asia to develop and execute strategic regional policy plans, aligned with global/regional policy priorities and local market needs.
• Track key policy developments in South Asia, focusing on issues at the intersection of technology, social media, and the digital economy, and provide timely analysis and recommendations to country policy leads.
• Support regional country policy team on strategic engagements with policymakers, NGOs, private sector organizations, and other stakeholders across South Asia to advance Meta’s public policy interests on issues such as safety, security, content policy, AI, and other technology-relevant matters.
• Partner with cross-functional teams across product, legal, marketing, and communications to enhance internal and external understanding of key policy issues in South Asia and promote Meta’s policy positions.
• Help prepare submissions and responses to consultations from external stakeholders, including governments, NGOs, and industry bodies, on relevant policy matters in South Asia.
• Foster creative partnerships with advocacy groups, academia, and industry bodies in South Asia to promote Meta’s policy goals and support the growth of the digital economy in the region.

Minimum Qualifications

• Bachelor's degree in a relevant field (e.g., law, political science, international relations, public policy)
• 4+ years of experience in public policy, government affairs, or a related field
• Strong knowledge of the political, economic, and social landscape in South Asia
• Excellent communication and interpersonal skills, with the ability to build relationships with a wide range of stakeholders
• Strong analytical and problem-solving skills, with the ability to think strategically and creatively
• Ability to work independently and as part of a team, with a high level of self-motivation and discipline
• Ability to manage and drive multiple projects and campaigns simultaneously.
• Passion for technology and addressing key policy issues such as AI, online content and safety, privacy, and internet governance.
• Ability to travel to Pakistan, Bangladesh, Nepal and Sri Lanka.

Preferred Qualifications

• Policy experience at a multi-national corporation or institution working in Pakistan and Bangladesh.
• Experience with policy advocacy, executing policy programs or campaigns domestically and/or internationally

Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today—beyond the constraints of screens, the limits of distance, and even the rules of physics.

Responsibilities

• Draft and review a wide variety of contracts, mainly, telco infrastructure related.
• Advise internal clients on implications of contract terms
• Lead or support contractual negotiations with suppliers
• Where required, provide sound legal advice within a fast paced and dynamic working environment to business units
• Liaise and work collaboratively with internal and external stakeholders to obtain and address feedback on commercial contracts and operational issues
• Work with other internal stakeholders both in Singapore and Australia to ensure internal policies and corporate governance is strictly adhered to
• Provide legal education and trainings to business units from time to time; and manage compliance programs and policies/procedures
• Manage disputes matters.
• Regular tracking and reporting on contracts reviewed
• Drive user experience improvement initiatives related to the contracting process

Requirements:

• Law degree with 5 years of Post Qualification Experience (PQE) acquired in a reputable local law firm or in-house in a telecommunication and/or IT related organisation. Prior in-house experience of at least 1 year is an added advantage.
• Excellent knowledge of local laws and regulations
• Ability to work in a fast paced and dynamic environment to meet aggressive deadlines
• Excellent written and verbal skills with an eye for detail
• A team player with excellent inter-personal skills and ability to communicate and influence effectively at all levels
• Willing to explore and learn new skillsets
• Must be able to work independently
• Experience in a supervisory role is beneficial

EA Personnel Name: Izz Bin Lokman
EA Personnel No: R24124828
EA License No: 05C3451

About Our client

Our client is a non-profit organisation, headquartered in Singapore. Their mission is to improve public sector capabilities and governance around the world. We believe that when governments are effective and responsive, they will earn the trust of citizens and businesses, which in turn encourages investment and work, and supports national development and prosperity.

They partner with governments in Africa, Asia, Latin America, and the Middle East to build public sector capability and leadership through training programmes, technical projects, and practical knowledge creation and sharing. Examples of these training programmes include programmes that impart critical knowledge and skills, and share good practices in national governance.

The opportunity

They are currently seeking to hire a qualified talent for a Senior Manager/Manager (Programmes) to design, manage and deliver training programmes for the Academy which is the training arm of the organization.

The right candidate will have notable qualifications and a well-rounded understanding of the public sector landscape. They should be well-versed in programme design and implementation, able to lead engagements with government clients, and deliver training in diverse international settings.

Some of the specific job responsibilities are listed below Key Responsibilities:

Key Responsibilities:

• Work with the Deputy Dean (Programmes) and Dean of the Academy to engage external stakeholders, including government clients and a network of subject matter experts, to design and deliver impactful training programmes
• Develop and manage learning interventions (e.g., identifying learning needs, designing curriculum, and evaluating learning interventions) based on CIG’s curriculum framework
• Scope, design and execute projects related to institution building and strengthening of National Schools of Government (e.g. strategic planning and review, organisational design, and internal capability development)
• Identify, engage, and work with subject matter experts and trainers to shape the content, curriculum and learning outcomes of the learning interventions
• Independently manage client engagements, understanding their learning needs, and contextualising learning interventions to suit local public sector environments
• Facilitate workshops and programmes in the countries where our client operates
• Lead and coordinate programme organisation and administration, which includes but is not restricted to management of programme logistics and provision of learner support
• Undertake any other responsibilities related to the establishment and operations of the Academy, as may be reasonably expected given the candidate’s experience and capabilities.

Experience and Qualifications

• Possessed a Humanity Degree or Masters from a recognised university
• For the Senior Manager position, at least 7-8 years’ progressive experience in government and public policy
• For the Manager position, at least 5-6 years’ progressive experience in government and public policy
• Good track record of designing and developing learning interventions targeted at adult learners including blended and online learning

Skillsets & Aptitudes

The ideal candidate should excel in:

• A commitment to excellence and willingness to learn. You should be proactive about ensuring that work is completed to a high standard and within deadlines. You will need to be willing and able to learn through hands-on experience and take on board feedback constructively to improve.
• A strong belief in our mission and goals, with the willingness to learn and grow alongside the organisation.
• Adaptability and resourcefulness, able to find creative solutions to new challenges and opportunities, even if these extend beyond your specific job scope
• Multitasking and managing several concurrent projects with different partners, while maintaining attention to detail

Advantages:

• Love for frequent international travel
• Familiarity in leading and coordinating cross-border, multi-cultural stakeholders across time zones
• Familiarity in working in countries other than Singapore
• Written and spoken proficiency in languages other than English

Work Arrangement

• Our client adopts a hybrid working arrangement which allows for a mix of in-office work and telecommuting.

Interested applicants may email updated CV to Daniel Yuan (R1102385): [email protected]

We regret only shortlisted will be notify

Job Description & Requirements

We are seeking an experienced fundraising, public relations and volunteer management manager with excellent leadership and networking abilities. The incumbent shall supervise and coordinate all operations that cultivate public and private resources (revenue and volunteers) to support and sustain programmes for our visually impaired beneficiaries.

The incumbent shall lead a team that builds good relationships with prospective donors and volunteers and facilitates effective communication with general public. The team also conducts workshops and programs to raise public and volunteer awareness of visually impairment and how to engage persons with visual impairment.

The incumbent should be familiar with both online and offline fund raising and marketing strategies. Apart from being approachable and culturally sensitive, the incumbent should also be proactive, able to inspire others and able to execute well-planned and ad hoc activities. Candidates with good public speaking skills and experienced in delivering presentations to different audiences are preferred.

Responsibilities:

· Develop and implement organisation fund raising & volunteer management strategies

· Align and implement organisation public relations strategy to annual workplan

· Prepare quarterly operations budget and reports for internal reporting

· Lead and develop collaborations with partners (schools, corporates etc) to support with fundraising and volunteers

· Organise public awareness talks (in collaboration with White Cane Club & Braille Production Unit) to general public, volunteers and corporate partners

· Manage and maintain database of donors and volunteers

· Engage existing donors and attract new donors to support organisation

· Conduct annual reviews of best practices for fundraising, volunteer management and public relations

· Perform liaison function with NCSS and external agencies for all fund raising, volunteer management and public relations related activities

Experience and Qualifications:

· Degree in Business Administration, Marketing, Communications or any related field.

· At least 5 years of relevant work experience (fundraising, marketing, communications)

· At least 3 years’ experience in leading a team.

· Previous experience in sales or marketing also acceptable.

· Interest to work in a non-profit / charity organisation

· Excellent written, verbal, and telephonic communication skills.

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s degree in computer science, information technology, or equivalent experience.
• 5+ Years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:CompTIA Security+
  Certified Information Systems Security Professional (CISSP)
  Certified Information Systems Auditor (CISA)
  Certified Information Security Manager (CISM)
  

Interested candidates who wish to apply for the advertised position, please clock on “Apply”. We regret that only shortlisted candidates will be notified.

EA License No.: 01C4394 (PERSOLKELLY Singapore PTE LTD)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Job Description:
We are seeking a highly skilled and experienced Cybersecurity Manager to lead and strengthen our Clients' organization’s security posture. The successful candidate will be responsible for analyzing vulnerabilities, developing security strategies, leading incident response efforts, and managing security technologies across the enterprise. This role involves close collaboration with cross-functional teams to ensure the security of systems, networks, and data, while keeping abreast of the latest cybersecurity threats and best practices. If you have a passion for cybersecurity and a proven track record in security management, we’d love to hear from you!

Key Responsibilities:

1. Vulnerability Analysis & Mitigation

• Analyze and prioritize vulnerabilities based on severity, potential impact, and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and recommend appropriate improvements.

2. Incident Response & Management

• Lead and participate in the development, implementation, and continuous improvement of incident response procedures and processes.
• Collaborate with geographically diverse teams to investigate and document security incidents, perform root cause analysis, and recommend remediation actions.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.

3. Security Systems & Network Management

• Manage and configure security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitor systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Plan and appraise ongoing assessments of antivirus, application control, firewall, SIEM, VPN, SSL, and other network component policies.

4. Security Policy & Compliance

• Develop and implement security policies and procedures to ensure the organization’s data and systems are protected against cyber threats.
• Stay up to date with the latest cybersecurity threats, attack techniques, and incident response strategies.
• Contribute to security awareness training programs for employees to enhance security awareness and best practices.

5. Strategic Guidance & Collaboration

• Provide strategic guidance and direction on technological, cybersecurity, and policy-related topics.
• Collaborate across teams to drive the implementation of security solutions and initiatives that align with business objectives.
• Communicate technical security concepts to non-technical stakeholders effectively, ensuring clarity and alignment on security measures.

Education & Certifications:

• Bachelor’s degree in Computer Science, Information Technology, or a related field.

Requirements:

Experience & Knowledge

• 5+ Years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, and modern cybersecurity concepts and technologies, including but not limited to:Zero Trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, and Azure Well Architected Framework.
  
• Experience in domains such as Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management is preferred.
• Proficiency in using industry-standard tools for vulnerability scanning, assessment, and penetration testing.

Skills & Abilities

• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments, and respond to security incidents.
• Strong analytical and problem-solving skills, with the ability to think critically under pressure.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• 
  
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.

Interested candidates who wish to apply for the advertised position, please click on “Apply”. We regret that only shortlisted candidates will be notified.

EA License No.: 01C4394 (PERSOLKELLY Singapore PTE LTD)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s Degree in Computer Science/Information Technology or equivalent.
• At least 5 years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:

- CompTIA Security+

- Certified Information Systems Security Professional (CISSP)

- Certified Information Systems Auditor (CISA)

- Certified Information Security Manager (CISM)

The Team

Cundall’s security consultancy team’s mission is to play a key role in keeping people safe from the security threats and risks that affect them in their day to day lives, both at home and at work. We also aim to protect our client’s assets, ensuring they are safe and secure, and business, ensuring its continued operation in the event of a security incident – we pride ourselves on our exemplary track record of providing intelligent advice designing innovative security solutions.

The security consultancy team are a source of world leading expertise – and offer a pro-active and collaborative approach to skill development, and professional excellence.

The Role

This is an excellent opportunity for a talented Principal Security Consultant to join a diverse team in our Singapore office to play a role in ensuring the successful delivery of security controls for some of the most exciting and high-profile projects across various sectors.

You will lead and manage an established team of electronic security systems consultants in the delivery of design and advice on appropriate and proportionate electronic security solutions.

You will also work closely with colleagues of various disciplines to manage the delivery of technically excellent, profitable projects.

The Skills

You will have an extensive background in security systems designs (video surveillance, access control, intruder alarm, intercom and integrated security management systems) and will have gained experience in delivering these following the RIBA Plan of Work design stages or equivalent.

You will also have good overall knowledge and / or experience of security risk management and the application of physical security solutions (including but not limited to Hostile vehicle Mitigation (HVM), forced entry protection, blast and ballistic mitigation to achieve a holistic approach to security risk mitigations.

You will have proven ability in managing direct reports, project teams, internal and external security stakeholders, preparing specifications, reports, general arrangement drawings and carrying out site inspections and surveys. Also, crucially – you have a passion for creative and intuitive design.

Given the collaborative and client focussed nature of this role, excellent communication skills and experience of using your initiative to overcome challenges are essential.

We know that to be the best at what we do we need a diverse workforce underpinned by an inclusive culture. Creating environments where everyone can find joy doing their best work is also great for everyone. That’s why we positively welcome applications from people of all backgrounds and identities, and encourage, support, and celebrate the diverse voices of our people.

Job Description

• Industry/ Organization Type: Manufacturing/Electronic Components and Boards
• Position Title: IT Security Manager (Regional)
• Working Location: Bedok (Company pick-up provided at Bedok MRT)
• Working Hours: 5 Days, Mon – Fri (8:15 am – 5:15 pm)
• Salary: Basic up to $12,000 + Variable Bonus
• Duration: Permanent

Key Responsibilities

• Analyze and prioritize vulnerabilities based on severity, potential impact, and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention, and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques, and incident response strategies.

APPLY NOW!!!

• Bachelor’s Degree in Computer Science, IT, or equivalent experience.
• Has 5+ years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Professional information security certification preferred (e.g. CompTIA Security+, CISSP, CISA, CISM).

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job(at)anradus.com.sg. Kindly indicate #67372 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it’s likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

Responsibilities

• Develop, implement, and maintain Group-wide security policies and standards to ensure consistency across all operations.
• Oversee data management and governance, ensuring the integrity and security of all data, including Level 2 (L2) assurance.
• Act as the domain knowledge expert, providing guidance and support to all sites to ensure operational excellence in security practices. Including and not limited to: Security Strategy, Security Technology, Incident Response and Investigation, Security Training and Awareness Program, Group Reporting.
• Lead initiatives to enhance security capabilities and build competencies across various locations.
• Conduct regular assessments and audits to identify areas for improvement and ensure compliance with security standards.

Requirements

• Degree in Security Management, Information Technology, or a related field.
• 10 years of experience in a senior security role, data management and assurance
• Knowledge of security policies, standards, and governance.

Account Manager

Kerwin Tan Kai Bin (R1331624)

[email protected]

EA16S8107

Job opportunity:

• Opportunity to join a well-known multinational corporation in the telco sector. The Legal Contracts Manager is required to work closely with Group Networks Procurement as well as the internal stakeholders to draft, review and negotiate a wide variety of contracts.
• Salary up to $7k (subject to experience)
• Mon - Fri: Office hours
• Location: Central East
• 6 months contract

The Talent:

• Law degree with 5 years of Post Qualification Experience (PQE) acquired in a reputable local law firm or in-house in a telecommunication and/or IT related organisation. Prior in-house experience of at least 1 year is an added advantage.
• Excellent knowledge of local laws and regulations
• Ability to work in a fast paced and dynamic environment to meet aggressive deadlines
• Excellent written and verbal skills with an eye for detail
• A team player with excellent inter-personal skills and ability to communicate and influence effectively at all levels
• Willing to explore and learn new skillsets
• Must be able to work independently
• Experience in a supervisory role is beneficial

Job Description

• Draft and review a wide variety of contracts
• Advise internal clients on implications of contract terms
• Lead or support contractual negotiations with suppliers
• Where required, provide sound legal advice within a fast paced and dynamic working environment to business units
• Liaise and work collaboratively with internal and external stakeholders to obtain and address feedback on commercial contracts and operational issues
• Work with other internal stakeholders both in Singapore and Australia to ensure internal policies and corporate governance is strictly adhered to
• Provide legal education and trainings to business units from time to time; and manage compliance programs and policies/procedures
• Manage disputes matters.
• Regular tracking and reporting on contracts reviewed
• Drive user experience improvement initiatives related to the contracting process

Next Step

• Prepare your updated resume (please include your current salary package with full breakdown such as base, incentives, annual wage supplement, etc.) and expected package
• Simply click on 'Apply here' or email to [email protected] to drop your resume
• All shortlisted candidates will be contacted

Amelia Lau An Qi

Direct Line: +65 6697 7987
EA License No: 91C2918
Personnel Registration Number: R1987023

The Mercedes-Benz AG Group CISO heads Mercedes-Benz’s Global Cyber Security Department (based in Stuttgart, Germany). We are looking for a Cyber Security SIEM Use-Case Engineer to join our Cyber Intelligence and Response Centre (CIRC). This role is crucial for the engineering, development, and continuous improvement of threat detection use-cases within our SIEM . You will also be involved in the engineering and development of custom rules to detect potential threats swiftly and creating transparency to map existing detection capabilities to the MITRE ATT&CK framework.

Key Responsibilities:

• Proactively create, test, and tune new detection use-cases in the SIEM
• Review and enhance existing detection use-cases using Machine Learning or User & Entity Behaviour Analytics (UEBA).
• Map detection use-cases to the MITRE ATT&CK framework to assess SIEM monitoring coverage.
• Perform regularly updates to threat detection engineering playbooks, processes, and documentation.
• Collaborate closely with the SOC to challenge and improve detection and prevention capabilities.
• Identify and implement SIEM use-cases to address blind spots.
• Coordinate with the log onboarding team and SIEM architect to validate new log sources for compliance and improve SIEM backend performance.
• Collaboration with Service Operations team to address challenges, process fulfillment, documentations, and improvement of Service Operations Quality.
• Provide governance on topic which related to operational stability.

Join us to play a pivotal role in enhancing our cyber security measures and protecting our global operations.

QUALIFICATIONS

Specific Knowledge

• Intense knowledge in using Splunk Enterprise Security (ES)
• Intense knowledge in developing and tuning detection use-cases (Correlation Searches) in Splunk based on Data Models
• Experience in Machine Learning and Risk Based Monitoring in Splunk is an advantage
• Ability to analyse and interpret security logs and events to identify potential threats and attack patterns
• Experience in validating data source compliant using the common interface model (CIM)
• Experience of setting up and utilize data models in Splunk
• Deep understanding of cyber security concepts to create detection use-cases targeting various phases of attack lifecycle
• Understanding of MITRE ATT&CK framework and detections of various tactics and techniques
• Experience and capable of creating interactive dashboards, alerts, reports in Splunk

Experience

• Degree from a reputable university or significant course work in Computer Science, Networking, engineering or other computer-related fields of study.
• At least 3 years of experience with demonstrable skillsets in SIEM use-case engineering, with over 5 years of experience
  in cybersecurity
• Previous relevant experience working in a security operational role, ideally within a Corporate, Military, or Police environment; engaging with and responding to a diverse array of internal stakeholders, including senior management
• Have good emotional intelligence and is a proven team player
• Rational and calm under pressure
• Fluency in the English language
• Effective oral and written communication skills
• Good timekeeping ability to cope with a tight deadline and achieve operational objectives
• Self-motivated with the ability to carry out assigned tasks with minimum supervision

This position is based in location Singapore. A valid and approved work visa is required for employment in Singapore in accordance to local labour law regulations. We regret to inform you that only shortlisted candidates will be notified.

The Legal Contracts Manager is required to work closely with Group Networks Procurement as well as the internal stakeholders to draft, review and negotiate a wide variety of telco/IT procurement contracts.

Responsibilities:

• Draft and review a wide variety of contracts, mainly, telco infrastructure related.
• Advise internal clients on implications of contract termsLead or support contractual negotiations with suppliers
• Where required, provide sound legal advice within a fast paced and dynamic working environment to business units
• Liaise and work collaboratively with internal and external stakeholders to obtain and address feedback on commercial contracts and operational issues
• Work with other internal stakeholders both in Singapore and Australia to ensure internal policies and corporate governance is strictly adhered to
• Provide legal education and trainings to business units from time to time; and manage compliance programs and policies/procedures
• Manage disputes matters.
• Regular tracking and reporting on contracts reviewed
• Drive user experience improvement initiatives related to the contracting process

Requirements

• Law degree with 5 years of Post Qualification Experience (PQE) acquired in a reputable local law firm or in-house in a telecommunication and/or IT related organisation. Prior in-house experience of at least 1 year is an added advantage.
• Excellent knowledge of local laws and regulations
• Ability to work in a fast paced and dynamic environment to meet aggressive deadlines
• A team player with excellent inter-personal skills and ability to communicate and influence effectively at all levels
• Willing to explore and learn new skillsets
• Must be able to work independently
• Experience in a supervisory role is beneficial

COMPANY BACKGROUND

Haier is the number one brand of Major Appliances in the world with 16.3 percent of global market share. Headquartered in Qingdao, Haier has over 80,000 employees across 30 countries in the world.

Haier Singapore is the International HQ of Haier Group and is the main platform to provide procurement, trading, R&D and big data and cybersecurity supports to over 80 countries in Asia, Europe, Africa and North America markets.

As the continuous demands from global businesses, we are looking for passionate Information Security Professional to join our Global Information Security team.

KEY RESPONSIBILITIES

Based in Singapore, you will be part of the Global Information Security team, providing Cybersecurity and IT support to Haier businesses in the world.

• Responsible for the construction of Haier's overseas regional information security system, identify issues and risks in security construction and continuously optimize them;
• Establish information security capabilities in various overseas regions, such as endpoint security, data security, application security, vulnerability management, OT security, security operation, etc;
• Responsible for emergency response to information security incidents in overseas regions, quickly resolving problems;
• Responsible for enhancing the information security awareness of employees in overseas regions and developing security training plans;
• Responsible for overseas compliance construction, such as data security compliance, personal privacy compliance, etc., and developing an annual information security audit plan.

KEY REQUIREMENTS

The ideal candidate should be a seasoned information security manager with:

• Degree in Computer Science or its equivalent.
• With minimum of 10 years of work experience and at least of 3 years’ experience in team management.
• Establishment of the ISO27001/NIST/ information security system.
• Proficient in security technologies in various fields, such as endpoint security, vulnerability management, application security, etc.
• Certification in the Information security, risk management, preferably.
• Fluent in Mandarin and English.

Cyber Security Roles in Singapore
Job Posting by Belle Lim, Section Manager at Hays Singapore
[email protected]

Cyber Governance GRC – Manager / Senior Manager

Cyber Security jobs in Singapore
ACTIVELY HIRING NOW

Hi Everyone,

An established leading major Infocomm sector is looking for a Cyber Governance and Assurance candidate to join the team. Cyber Security experience and technical knowledge is needed to plan, manage and execute governance and assurance initiatives for the organization.

Your new role

· Lead the development, review and implementation of cybersecurity policies, standards and guidelines.

· Oversee and manage compliance audits, enforcement actions and continual improvement

· Demonstrate value through leading initiatives including post-incident reviews and risk assessments.

· Engage and collaborate with internal and external stakeholders on risk management initiatives.

· Assess, evaluate and make recommendations to management regarding the adequacy of cybersecurity controls

What you’ll need to succeed

· At least 5 years of relevant Cyber GRC experience. Candidates with more years of experience can be considered for a Senior Manager Role.

· Candidates who have experience with Telecommunications industry is highly preferred / Consulting candidates with experience in Telco and CII sectors are welcome to apply.

· Knowledge of cybersecurity best practices and security principles for Identify, Protect, Detect, Respond and Recover (IPDRR) functions etc.

· Good knowledge of cybersecurity risk management frameworks and standards (e.g. NIST SP 800-53, ISO 27002 etc.).

· Professional certifications such as CISSP, CISM, or CISA are highly desirable.

What you’ll get in return

· Attractive Career Development / Growth

· Attractive Remuneration Package

What you need to do now
If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV to [email protected]. If this job isn't quite right for you but you are looking for a new position, please contact me for a confidential discussion on your career.

Apply now or refer a friend (Get rewarded with $200 CapitaStar Gift voucher upon a successful friend referral!)

At Hays, we value diversity and are passionate about placing people in a role where they can flourish and succeed. We actively encourage people from diverse backgrounds to apply.

EA License Number: 07C3924 l Registration Number: R21100438 l Company Registration ID No.: 200609504D

Job Description

• Industry/ Organization Type: Manufacturing/Electronic Components and Boards
• Position Title: IT Security Manager (Regional)
• Working Location: Bedok (Company pick-up provided at Bedok MRT)
• Working Hours: 5 Days, Mon – Fri (8:15 am – 5:15 pm)
• Salary: Basic up to $12,000 + Variable Bonus
• Duration: Permanent

Key Responsibilities

• Analyze and prioritize vulnerabilities based on severity, potential impact, and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention, and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques, and incident response strategies.

APPLY NOW!!!

• Bachelor’s Degree in Computer Science, IT, or equivalent experience.
• Has 5+ years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Professional information security certification preferred (e.g. CompTIA Security+, CISSP, CISA, CISM).

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job(at)anradus.com.sg. Kindly indicate #67372 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it’s likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

Roles & Responsibilities:

• Legal support services within the companies which may include drafting, reviewing and negotiating of various types of commercial contracts including contracts involving the sale and purchase of oil products, charter-party agreements, storage leases, corporate guarantees, letters of intent, multi-party settlement agreements, financing documents, supply agreement and logistics agreements, insurance contracts;
• Legal support to associated companies: Review of all legal documents, board resolutions, shareholders' resolutions, and by-law amendments;
• Projects Investment-related: Assist in the review of investment-related transactional documents which may include the review and negotiation of non-disclosure agreements, terms of engagement of professional advisers, legal due diligence reports, joint venture agreement, long-term storage agreement, land leases and other related documents, liaise with external legal counsels or other professional advisers and coordinate with other parties involved in the project;
• Disputes Resolution: Manage legal disputes including any demurrage-related disputes, and assist with drafting of relevant reports to the Management and providing updates and progress on the disputes， where necessary;
• Others: Plan, organise and coordinate legal knowledge/information sharing sessions for all personnel of the Company. Assist in the drafting and/or updating of contract templates;
• Other ad-hoc duties as assigned by the Head of Legal and Compliance.

Requirements:

• Recognised degree in law, preferably admitted to the Singapore Bar or a common law jurisdiction;
• At least 3 years post-qualifying experience in an established law firm or general corporate and commercial work in a corporation, preferably as a legal counsel in an in-house environment in the energy industry;
• Excellent people skills and communication skills;
• Strong attention to details and effective analytical skills with ability to understand complex information and apply logical reasoning and assessment;

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.

Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day.

To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.

Join us.

Team Introduction

The Global Security Organization provides industry-leading cyber-security and business protection services to TikTok globally. Our organization employs four principles that guide our strategic and tactical operations. Firstly, we Champion Transparency & Trust by leading the charge in organizational transparency, prioritizing customer trust, and placing user needs first. Secondly, we aim to maintain Best in Class Global Security by proactively identifying and reducing risks while enabling innovative product development. We constantly work towards a sustainable world-class security capability. Thirdly, we strive to be a Business Catalyst & Enabler by embodying the DNA of technical innovation and ensuring our Global Security operations are fast and agile. Finally, we Drive Empowered & Risk-Informed Decision Making by providing our leaders with the necessary information to make agile decisions based on risk.

We are seeking a Digital Forensics Analyst to join our Forensics & Litigation Support team. The analyst will partner with internal stakeholders, such as Legal, HR, Ethics, Investigations, and Insider Threat, to support investigations and provide technical expertise. The role will perform forensic preservation of relevant devices and data, respond to incidents, and perform detailed analysis of systems and data. The role will require an individual able to apply forensics concepts and industry best-practice in the preservation and analysis of newly developed technologies engineered internally at the company.

Responsibilities

- Preserve network and host-based digital evidence in an industry accepted and forensically sound manner that would be admissible in court proceedings.

- Coordinate digital forensics analysis on large scale matters.

- Communicate technical events and analysis to both technical and non-technical audiences.

- Perform Apple macOS host-based forensics, including the analysis of user events, the APFS/HFS+ file system, internal services, default applications, and relevant logs.

- Perform Microsoft Windows host-based analysis using both Windows and Linux based forensic tools.

- Perform analysis of Linux servers, including user events, daemons, security logs, and cron jobs.

- Perform acquisitions and analysis of Apple iOS and Android mobile devices.

- Perform acquisitions and analysis of cloud platforms, such as Microsoft Azure, Amazon Web Services, Google Cloud Computing and/or others.

- Write detailed forensic reports for investigations.

Minimum Qualifications

- A bachelor’s degree in a computing field.

- 3-5 years in digital forensics analysis experience.

- Holds an industry accepted certification validating digital forensics capiblities: GCIH, GCFA, GCFE, CFCE, GREM, X-PERT, EnCE, CCE, etc.

- In-depth understanding of computer forensic principles, including digital and mobile forensics, log analysis, cloud-based systems, database structures, querying languages and common digital forensics tools.

- Knowledge and experience of Windows, Unix and Mac host-based forensics, Mobile OS’s and command line.

- Working knowledge of hardware configuration and network/data communications, software development and scripting, database technology and database exploitation/forensics.

- Experience with seizure of evidence, chain of custody and conducting analysis.

- Knowledge of data loss prevention systems and how they detect potential host and network-based data loss technologies or other insider threat risks.

Preferred Qualifications

- Completed the SANS course FOR518: Mac and iOS Forensic Analysis and Incident Response

- Experience in writing affidavits, depositions and serving as an expert witness in court proceedings.

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Job Description:

1. Lead, manage and provide cybersecurity governance and related support activities such as: -

• Conducting comprehensive risk assessments on IT assets and vulnerabilities, including logs analysis and security assessments;

• Ensuring all penetration and vulnerability assessment findings, gap analyses, deviations and threat analyses is properly tracked, managed, and resolved in a timely manner;

• Planning and executing cybersecurity initiatives to protect against emerging threats;

• Working with Group of IT to implement and ensure compliance for the company and its Overseas Business Units on the following: -

1. • Group Cyber Security Master Plan (CSMP)
2. • Group IT Security Standards (GITSS)
3. • Group Operational Technology Security Standards (GOTSS)
4. • Cybersecurity Capability Maturity Model (C2M2)

• Conducting monthly phishing exercises, information security awareness training;

• Organising Business Continuity Planning (BCP) and Table-Top exercise with internal stakeholders annually;

• Providing monthly updates to Group IT on cybersecurity activities and compliance status;

• Contributing to the development, maintenance, and reporting of ongoing monthly Key Risk Indicators;

• Developing and maintaining cybersecurity documentation, including policies, procedures, and incident reports;

• Keeping abreast of industrial IT security advancements and recommending appropriate security enhancements to IT infrastructure and systems;

• Communicating security risks and incidents to senior management and stakeholders.

2. Play the role of Data Governance and Data Protection Officer: -

• Ensuring the company’s compliance according to data protection policies, including company's Data Governance policy and Singapore's Personal Data Protection Act (PDPA);

• Reviewing, identifying, tracking, and resolving gaps and deviations identified from the data protection policies.

3. Lead and coordinate with internal and external auditors: -

• during annual audits, focusing on areas of Cybersecurity, PDPA and ISO27001;

• ensuring audit readiness and successful audit outcomes.

The successful candidate should preferably possess the following:-

• A degree in Computer Science, Information Technology, Cybersecurity or equivalent

• At least 5 years of professional experience in security governance, security audits, security systems management, protection of classified and sensitive information, and compliance management.

• Professional certifications in Certified Information Systems Security Professional (“CISSP”) OR

• GIAC Certified Incident Handler (GCIH) certifications in cybersecurity is essential.

• Prior experience in conducting risk assessments and gap analyses is essential.

• Prior experience in developing and implementing cybersecurity and data protection policies, procedures, and standards is essential.

• Prior experience in at least 2 of the below is essential: -

• IT infrastructure support / applications development / project management / team management

• Strong understanding in cloud security, application security, network security, and data protection is preferred.

• Understanding of international security standards such as ISO27001, ISO27002, NIST Cybersecurity Framework and OWASP is preferred.

• Ability to muti-task; manage multiple projects and priorities simultaneously.

• Excellent written, effective communication and proven leadership skills

Interested applicants please send your resume to [email protected]

Venessa Goh Wee Ni
R24124686
Recruit Express Pte Ltd
EA License No: 99C4599
RCB No.: 199601303W

• Monday to Friday; office hours
• Accessible location; Walkable distance from MRT Station in the central location
• Competitive Salary & Benefits
• 2 years Contract (Possibility of conversion/ renewal)

Our client, our established government-linked agency in the healthcare sector, is seeking for suitable candidates to join the growing team!

Job Responsibilities:

• Support the Chief Information Security Officer and Team lead with engaging the Community health sector on Cyber Security Initiatives
• Provide outreach to the relevant sectors on Security best practices
• Drive the compliance program and outreach to the sector
• Support the sector and digitization team engagement with sector on cyber security
• Spearhead and drive the Cyber Essential+ certification and Trust Mark certification program

Job Requirements:

• Minimum Degree in Information Technology or equivalent
• Minimum 10 years of relevant work experience in Cyber Security, preferably from both vendor and end user environment
• Candidates with professional certification in CISM, CRISM, CGEIT will be preferred
• Good understanding of Cyber Security best practices and standards (NIST, ISO27000, Cyber Kill Chain, MITRE)
• Knowledge on Cyber Security Governance and Assurance is preferred
• Good past track record in stakeholder management

Interested and suitable candidates, please email your CV in MS Word to

[email protected]

Ammerline Lam Sze Yi

Division Manager

CEI Reg. No.: R1104463

Personal Data Protection

“By submitting your curriculum vitae or disclosing your personal information in connection with your job application, you are deemed to have read and agreed to the terms of our Privacy Policy, and consented to the collection, use and disclosure of your personal data by us, in accordance with our Privacy Policy. Please access our website at www.celecti.com.sg for a copy of our Privacy Policy.”

We’re searching for a Senior/Manager, Client Information Security (Infra) to be part of our diverse team of talent here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

• Drive the implementation of NCS cybersecurity, data protection, and privacy policies, standards and processes within the practice. You will work to continually improve the security posture of projects through proactive risk management and the establishment of a broad range of cybersecurity controls
• Provide direct support to colleagues to ensure cybersecurity is addressed throughout the engagement delivery lifecycle, from infrastructure and security tooling choices to the secure storage, processing and deletion of client data.
• Act as a single point of contact and escalation for the SOC, Threat Intel and Crisis Response teams for practice-related cybersecurity incidents, ensuring timely identification, remediation and lessons learned.
• Manage the security SLA governance and provide practice-level cybersecurity reporting, metrics and forecasting to leadership.
• Responsible for information security, data protection, privacy, GRC, and audit requests for the practice, acting as single point of contact on relevant client security assessment and audits execution. Eg. independent third-party attestations of industry cybersecurity standards and certifications, such as ISO 27001, SOC 2 for practice-specific solutions and products
• Contribute to the definition of the client specific security baseline. Consult and advise internal and external clients about security topics and support the opportunity management process by providing subject matter expertise and support
• Help win client business by providing cybersecurity assurance to RFIs, RFPs, proposals, contract drafting, security questionnaires, workshops and other client due diligence processes