Total 8 distribution manager job vacancies in Legal / Public / Security category in Singapore, South East

The Job

Specific (85%)

• Oversee and manage IT security, audits, and compliance, ensuring the implementation of robust security measures, adherence to regulatory requirements, and the effective management of risks, data protection, and business continuity planning. Recommend and implement innovative tools and solutions to improve the organisation's cybersecurity posture.
• Security Implementation: Implement and review IT security systems, tools, system patches, upgrades and solutions to safeguard application, system and infrastructure.
• System and Audit Compliance: Ensure continuous improvement and compliance of on-premises and cloud-based systems with applicable security and regulatory standards (e.g., ISO 27001, PDPA). Work with CISO, internal teams, cyber insurance, vendors and external auditors to meet compliance requirements with security policies.
• Security Operations: Manage, monitor, and establish security operations procedures, including incident response workflows, tabletop exercise and drill.
• Risk Management: Conduct regular assessments to identify IT risks and vulnerabilities. Plan and implement mitigation strategies to minimise security risks.
• Cybersecurity Awareness: Plan and conduct training programs to promote cybersecurity awareness among employees. Educate staff on best practices for secure system use and data protection.
• Data Governance & Protection: With closely with DPO to implement data security controls and ensure compliance with data governance frameworks and PDPA.
• Business Continuity Planning (BCP): Plan and put in place effective BCP plan for operational continuity with key stakeholders. Organise cybersecurity assessments and tabletop exercises to test and refine plans.
• Disaster Recovery Plan (DRP): Plan and put in place disaster recovery strategies and procedures for IT systems and data. Coordinate with application and infrastructure teams to ensure recovery objectives are met through regular testing and updates.
• Incident Response: Lead and coordinate incident response efforts, ensuring swift resolution of cybersecurity breaches. Establish and maintain post-incident reporting and root cause analysis processes.
• Assist Head of IT in the planning of annual IT budgets and projects planning.

General (15%)

• Work closely with the infrastructure and network team to ensure maximum system stability and uptime.
• Any other duties, tasks and non-IT related events as assigned by Head of information Technology.

Summary 

This position is responsible in ensuring a safe environment for the hotel employees and guests, and safeguards the assets of the hotel. The Security Manager assists the Management, employees and guests in every way that is consistent with the protection and prevention objectives. 

Job Responsibilities 

• Prepare monthly staffing schedules, monitoring staff attendance and assist in planning work schedules.  
• Maintain a Hotel logbook on incidents, complaints etc. and refer them, if required to the appropriate department for follow up action.  
• Handle and resolve all guest queries and complaints in an efficient manner and to establish an amicable relationship with all clients, and guests of the Hotel.  
• Be proactive in guests’ requests and anticipate Safety needs according to Singapore’s events. 
• Maintain a high level of controlling details within the guest areas. 
• Conform to and enforce Security policies, procedures, rules, and regulations as laid down by ACCOR and the hotel in order to achieve the highest levels of uniformity and guest service.  
• Prepare the annual capital and operating budgets for the Department.  
• Ensure that all potential and real Hazards are reported immediately and rectified. 
• Be fully familiar of the Emergency Procedures, Policies and Standard Operating Procedures as established by the Hotel.  
• Assist in safety and emergency training for all employees. 
• Ensure that all emergency procedures are rehearsed, implemented and enforced to provide for the security and safety of guests and employees. 
• Ensure the safety of the persons and the property of all within the premises by fairly applying Hotel Regulations by strict adherence to existing laws, statutes etc. 
• Ensure all staff within the department work in a manner which is safe and unlikely to give risk of harm or injury to selves or others. 
• Use safe manual handling techniques and practise safe work habits following Accor Health, Safety and Environment policies, maintain procedures to minimise our impact on the environment and prevent pollution. 
• Perform other duties as directed by the General Manager. 

Job Summary

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

Mandatory Skill-set

• 5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;
• Strong knowledge of ISO 27001:2022 standards and requirements;
• Experience in developing and maintaining comprehensive project plans, including timelines and milestones;
• Experience in managing ISO 27001-related risks and conducting internal/external audits;
• Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

Desired Skill-set

• ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;
• PMP, CISSP, CISM, or similar certifications are a plus;

Responsibilities

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;

Strong knowledge of ISO 27001:2022 standards and requirements;

Experience in developing and maintaining comprehensive project plans, including timelines and milestones;

Experience in managing ISO 27001-related risks and conducting internal/external audits;

Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;

PMP, CISSP, CISM, or similar certifications are a plus;

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE's website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

Summary

This position is responsible in ensuring a safe environment for the hotel employees and guests, and safeguards the assets of the hotel. The Security Manager assists the Management, employees and guests in every way that is consistent with the protection and prevention objectives.

Job Responsibilities

• Prepare monthly staffing schedules, monitoring staff attendance and assist in planning work schedules.
• Maintain a Hotel logbook on incidents, complaints etc. and refer them, if required to the appropriate department for follow up action.
• Handle and resolve all guest queries and complaints in an efficient manner and to establish an amicable relationship with all clients, and guests of the Hotel.
• Be proactive in guests’ requests and anticipate Safety needs according to Singapore’s events.
• Maintain a high level of controlling details within the guest areas.
• Conform to and enforce Security policies, procedures, rules, and regulations as laid down by ACCOR and the hotel in order to achieve the highest levels of uniformity and guest service.
• Prepare the annual capital and operating budgets for the Department.
• Ensure that all potential and real Hazards are reported immediately and rectified.
• Be fully familiar of the Emergency Procedures, Policies and Standard Operating Procedures as established by the Hotel.
• Assist in safety and emergency training for all employees.
• Ensure that all emergency procedures are rehearsed, implemented and enforced to provide for the security and safety of guests and employees.
• Ensure the safety of the persons and the property of all within the premises by fairly applying Hotel Regulations by strict adherence to existing laws, statutes etc.
• Ensure all staff within the department work in a manner which is safe and unlikely to give risk of harm or injury to selves or others.
• Use safe manual handling techniques and practise safe work habits following Accor Health, Safety and Environment policies, maintain procedures to minimise our impact on the environment and prevent pollution.
• Perform other duties as directed by the General Manager.

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s Degree in Computer Science/Information Technology or equivalent.
• At least 5 years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:

- CompTIA Security+

- Certified Information Systems Security Professional (CISSP)

- Certified Information Systems Auditor (CISA)

- Certified Information Security Manager (CISM)

Position Overview

The IT Security Operations Analyst role’s is to safeguard the organization’s IT systems and data. This role requires the candidate's active participation in the implementation of security policies and procedures, the monitoring and analysis of security events and the maintenance of security tools. Other responsibilities are to identify, investigate and resolve any security threats, vulnerabilities and incidents. The candidate must keep up to date with the latest security trends, have excellent communication and problem-solving skills and have a deep understanding of security principles and technologies. The individual will have a functional role in mentoring other team members and share the off-hour support responsibilities.

Responsibilities

1. Monitor, maintain, and analyze network and computers for unusual activity or suspicious behavior by reviewing information security logs.
2. Manage and resolve security Level 2 support tickets per defined SLAs
3. Investigate and analyze security incidents to determine root cause and impact.
4. Report compliance failures to management for immediate remediation.
5. Responsible for the effective management of the organization’s Crowdstrike Falcon Admin Console.

• Deploy Crowdstrike Falcon EDR detection agent on all corporate devices.
• Ensure coverage of malware detection for all managed EDR Agent capable devices.
• Migrate existing server agents from alert-only mode to blocking mode.
• Provide EDR escalation support for agents already installed

1. Assist and collaborate with the Information Security Group and coordinate with IT Infrastructure on the following:

• IT Threats and Vulnerabilities Assessments, Protection, and Remediation
• IT security patch management follow-up and reporting
• Firewall rule documentation, review, and approval
• Promote within IT Infrastructure the proper Security controls aligned with the IT Security Program
• Validate and maintain operational security documentation.

1. Continuously assess the current Security Posture and provide recommendations for remediation and prevention of security incidents.
2. Collaborate with cross-functional teams to implement security solutions and technologies.
3. Stay up to date with industry trends and emerging security threats to proactively address potential risks.
4. Assist in the deployment of new security systems.
5. Participate in security audits and assessments to ensure compliance with regulations and standards.
6. Understand the dark and deep web ecosystem.
7. Manage and support the following applications:

• Palo Alto/Firewall
• Network security (Micro-segmentation)

1. Perform other duties as required

Qualifications and Experience

• Bachelor’s degree in Cybersecurity Engineering or Computer Sciences
• Strong professional experience in information security with a focus on security operations and technical support
• Strong Experience with Palo Alto and Crowdstrike platform
• Experience with VPN, SSL and other encryption technologies
• Good knowledge of server, workstation, and Active Directory technologies that impact security controls
• Deep understanding of TCP/IP, DNS and common network services
• Experience with security frameworks and compliance requirements such as GDPR, ISO 27001, NIST 800 and PCI DSS.

We’re searching for a Senior/Manager, Client Information Security (Infra) to be part of our diverse team of talent here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

• Drive the implementation of NCS cybersecurity, data protection, and privacy policies, standards and processes within the practice. You will work to continually improve the security posture of projects through proactive risk management and the establishment of a broad range of cybersecurity controls
• Provide direct support to colleagues to ensure cybersecurity is addressed throughout the engagement delivery lifecycle, from infrastructure and security tooling choices to the secure storage, processing and deletion of client data.
• Act as a single point of contact and escalation for the SOC, Threat Intel and Crisis Response teams for practice-related cybersecurity incidents, ensuring timely identification, remediation and lessons learned.
• Manage the security SLA governance and provide practice-level cybersecurity reporting, metrics and forecasting to leadership.
• Responsible for information security, data protection, privacy, GRC, and audit requests for the practice, acting as single point of contact on relevant client security assessment and audits execution. Eg. independent third-party attestations of industry cybersecurity standards and certifications, such as ISO 27001, SOC 2 for practice-specific solutions and products
• Contribute to the definition of the client specific security baseline. Consult and advise internal and external clients about security topics and support the opportunity management process by providing subject matter expertise and support
• Help win client business by providing cybersecurity assurance to RFIs, RFPs, proposals, contract drafting, security questionnaires, workshops and other client due diligence processes