Total 211 financial consultant job vacancies in Legal / Public / Security category in Singapore

Summary

The Security consultant is a pivotal technical role essential for facilitating Zero Trust deployment initiatives. This role encompasses conducting thorough gap analyses, proficient project management, and delivering technical advisories. Collaboration with cross-functional regional teams across the Asia-Pacific region is integral to this role. The ideal candidate will exhibit a robust understanding of the Zero Trust framework (CISA Zero Trust Maturity Model and Microsoft Zero Trust Model), possess broad security experience, analytical acumen, and demonstrate a proactive approach to project management. This position will report to HQ.

Responsibilities:

• Cross-Functional Collaboration: Collaborate closely with cross-functional teams across the APAC region to ensure seamless integration and alignment of Zero Trust initiatives with broader organizational objectives.
• Documentation: Maintain accurate documentation of Zero Trust deployment processes, procedures, and best practices for reference and future optimization.
• Gap Analysis: Conduct comprehensive gap analyses to identify vulnerabilities and areas for improvement within existing security frameworks in APAC region. Perform APAC’s Information Security Risk Assessment in accordance with the Risk Register Policy and support information security risk assessments for APAC to determine the gaps to reach Zero Trust.
• Overall Security Posture: Support and maintain APAC’s information security strategy and ensure it is aligned with Global security strategy based on Zero Trust
• Project Management: Effectively manage Zero Trust deployment projects, including planning, research, monitoring, and reporting.
• Technical Advisory: Provide expert technical guidance and advisory services to stakeholders, facilitating informed decision-making regarding Zero Trust implementation, although not responsible for implementation, must comprehend the technical aspects of security technology and planning.
• Zero Trust Deployment Support: Lead and support Zero Trust deployment initiatives, ensuring alignment with organizational objectives and security best practices, Possess a strong background in security with a focus on general high-level knowledge.

Additional General Responsibilities:

• Build and develop cross functional relationships within APAC to engender support of security projects.
• Collaborate with APAC’s legal and compliance to ensure APAC is compliant with local information security laws and regulations.
• Collaboratively work with APAC to develop and implement processes that meet Global information policy and standards.
• Coordinate technical input and recommendations from GISS to APAC
• Encourage the development of innovative ideas that solve root causes of identified problems.
• Promote an information security-conscious culture.
• Promote the use of ‘right-sized’ solutions for APAC, including Global Shared Information Security Services, to drive increased standardization and effective use of security resources.
• Support information security activities across APAC (align activities where possible, foster joint plans, etc.).
• Support the efforts of APAC’s Security delivery resources to execute to expectations.
• Work on global initiatives as part of working groups (e.g.: standards refresh, new technology discussion, etc.)

Skills/Qualifications:

• At least 5+ years of experience in the cybersecurity industry.
• Consultation capability in related technology and or related service to customer.
• Consulting experience in Cyber domain.
• Great communication and interpersonal skills
• Proactive approach to problem-solving and project management, with a strong commitment to achieving objectives and deadlines.
• Project management experience.
• Proven experience in security engineering, with a focus on Zero Trust deployment.

Technology Proficiency:

• Azure Active Directory (AAD), identity management and MFA
• Core expertise in Microsoft technologies.
• Data Protection, Microsoft Information Protection (MIP) classifying, labelling, and protecting sensitive data.
• Microsoft Endpoint Manager
• Network Security, Azure Virtual Network and Azure Firewall

Job Responsibilities:

• Perform configuration of SAP GRC Access Control for S/4HANA Private Cloud, SuccessFactors, Ariba, and BTP according to industry best practices and company requirements.
• Lead the implementation and configuration of SAP GRC Access Control (AC) and Identity and Access Governance (IAG) modules.
• Collaborate with stakeholders to gather requirements and translate them into technical specifications for GRC configuration.
• Design and implement role-based access controls (RBAC), firefighting, and segregation of duties (SoD) rules to ensure compliance with regulatory standards and company policies.
• Develop and maintain GRC workflows, including access request, approval, and review processes.
• Conduct detailed assessments of existing access controls and authorization processes to identify gaps and risks.
• Provide technical guidance and support to internal teams and end-users on SAP GRC Access Control functionality and best practices.
• Stay current with industry trends and developments in SAP GRC and access management to recommend improvements and enhancements to our systems and processes.

Job Requirements:

• Bachelor's degree in Computer Science, Information Systems, or related field. Minimum 5 to 7 years of experience in SAP GRC, with a focus on Access Control and Identity and Access Governance modules.
• Proven experience leading at least two rounds of full SAP GRC Access Control implementations (version 10.1 and 10.2).
• Experience with at least one round of SAP GRC Identity and Access Governance (IAG) implementation.
• Strong understanding of SAP security concepts and principles, including user provisioning, role management, and authorization.
• Excellent analytical and problem-solving skills, with the ability to identify risks and develop effective mitigation strategies.
• Strong communication and interpersonal skills, with the ability to collaborate effectively with stakeholders at all levels.
• SAP GRC certification is a plus.

1 - Application Security Assessment (P5 - Master)

2 - Asset Control (P5 - Master)

3 - Enterprise Application Integration (EAI) (P3 - Advanced)

4 - English (C2 - Mastery)

Next Step:

• Prepare your updated resume (please include your current salary package with full breakdown such as base, incentives, annual wage supplement, etc.) and expected package.
• Simply click on 'Apply here' to drop your resume or email at [email protected]
• All shortlisted candidates will be contacted.

Saghana Sithara | Registration Number: R1550224

We are looking for a suitable candidate for our client for this role:
• Perform configuration of SAP GRC Access Control for S/4HANA Private Cloud, SuccessFactors, Ariba, and BTP according to industry best practices and company requirements.

• Lead the implementation and configuration of SAP GRC Access Control (AC) and Identity and Access Governance (IAG) modules.
• Collaborate with stakeholders to gather requirements and translate them into technical specifications for GRC configuration.
• Design and implement role-based access controls (RBAC), firefighting, and segregation of duties (SoD) rules to ensure compliance with regulatory standards and company policies.
• Develop and maintain GRC workflows, including access request, approval, and review processes.
• Conduct detailed assessments of existing access controls and authorization processes to identify gaps and risks.
• Provide technical guidance and support to internal teams and end-users on SAP GRC Access Control functionality and best practices.
• Stay current with industry trends and developments in SAP GRC and access management to recommend improvements and enhancements to our systems and processes.

Qualifications:

1. Bachelor's degree in Computer Science, Information Systems, or related field.

2. Minimum 5 to 7 years of experience in SAP GRC, with a focus on Access Control and Identity and Access Governance modules.

3. Proven experience leading at least two rounds of full SAP GRC Access Control implementations (version 10.1 and 10.2).

4. Experience with at least one round of SAP GRC Identity and Access Governance (IAG) implementation.

5. Strong understanding of SAP security concepts and principles, including user provisioning, role management, and authorization.

8. SAP GRC certification is a plus.

Your background

• Previous information technology/security audit/assessment experience preferred.
• Ability to leverage attention to detail and analytical skills.
• Ability to multi-task and work both independently as well as part of an assessment team
• Ability to plan, execute and document assessment and remediation activities following established processes and procedures.
• Must be comfortable in delivering messages across a wide spectrum of individuals having varying degrees of technical understanding.
• Minimally, CISSP and/or CISA certifications are required as well as five to eight years of experience in information security or business continuity.
• Technical skills include the domains of information security and business continuity including:
  Information Security Controls (Cloud Security, Infrastructure Security, Access Management, Physical Security, Application Security, etc.),
  IT Compliance, SOX Compliance
  Change Management
  Enterprise Risk Management
  Solid grasp of NIST, PCI, ISO, SDLC, COBIT, and ITIL standards.
• Must be able to travel up to 25% of the time.
• Experience in Cloud technologies, OSINT and threat modeling will be advantageous.

What you can expect

The Third Party Cyber Security Assessor will conduct information security and business continuity assessments of third parties providing services to Bank of America. The assessor will examine a third party's program to determine if they meet the Bank’s requirements, identifying control gaps that may expose the Bank to risks and subsequently work with the third party on all remediation activities.

To succeed in this role, you should be highly independent, motivated and possess strong, hands-on, technical knowledge of a wide range of information security and business continuity controls and the processes used for evaluating their design and effectiveness and possess strong written and verbal communication skills including ability to communicate clearly and concisely to various levels, up to and including executive level management, and explain the need for key controls to technical and non-technical resources.

There will be opportunities to be involved in projects to improve processes & transform the assessment program. This will enable you to leverage and grow your leadership skills as you'll be expose to various internal stakeholders and industry partners.

What you will do

• Manage and execute assessments of third parties providing services to Bank of America.
• Evaluate design and effectiveness of controls implemented by third parties providing services to Bank of America
• Drive remediation of issues identified through the assessments and any subsequent risk conversations with the third parties and other internal stakeholders.
• Interface with external third parties and internal line of business stakeholders to provide consultation on information security topics and build strong working relationships with these parties.
• Partner with regional and global GIS teammates to collaborate on opportunities and to identify, analyze, and resolve complex problems or security gaps.
• Contribute to the development and transformation of the Third Party Cyber Assurance program.
• Conduct cyber risk assessment in support of technology initiatives to help identify IT related risk and determine appropriate controls to mitigate risks.
• Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions.

About Bank of America

Our purpose as a firm is to make financial lives better, through the power of every connection. Across the world, we partner with leading corporate and institutional investors through our offices in more than 35 countries. In the U.S. alone, we serve almost all of the Fortune 500 companies and approximately 67 million consumer and small-business clients. We provide a full suite of financial products and services, from banking and investments to asset and risk management. We cover a broad range of asset classes, making us a global leader in corporate and investment banking, sales and trading.

Connecting Asia Pacific to the world

Our Asia Pacific team is spread across 19 cities in 12 markets. We are focused on connecting Asia to the world and the world to Asia, using our global expertise to ensure success is shared between us, our clients and our communities. Our regional footprint covers 12 currencies, more than a dozen languages and five time zones, placing us firmly among the region’s leading financial services companies.

• Minimum 8 years of experienc ein Azure Cloud
• Good hands-on experience in Azure Synapse environment able to develop code / build pipelines.
• Require Data Modeling expert, with detailed understanding and prior experience of EDW tables, Database scheme and EDW data dictionary.
• Study, analyze and understand business requirements in context to Azure Synapse Analytics
• Design and map data to shift raw data into target storage.
• Spot key performance indicators with apt objectives
• Analyze pervious and present data for better decision making.
• Hand on experience on configuring and defining advance threat management, antispam, antiphishing and impersonation with EOP
• Incident, change and problem management with high quality and provide service improvement plans
• Hands on experience on OneDrive, and other office 365 suites to configure and administer according the requirements
• Configure and control, external sharing and access with right RBAC of the office 365 suite
• Good knowledge on AD Connect, ADFS, AD and Azure AD and tools associated with administration of O365

OUR CLIENT

• International Bank

HIGHLIGHTS

• Excellent remuneration and perks
• Hybrid work arrangement
• Good career progression

LOCATION

• Central

RESPONSIBILITIES:

• Advice business on legal matters for corporate and investment banking transactions such as structured finance, syndicated loans, etc.
• Advice business on global markets transactions including FX, Derivatives, etc.
• Prepare, draft and review legal documents.
• Review corporate facility documents.

JOB REQUIREMENTS:

• Degree in Law with at least 3 years PQE.
• Good knowledge of investment banking transactions such as structured finance and project finance.
• good stakeholder management skills.

Interested applicants, please Click on the Apply icon or send your CV to canice.sar@paradigmrecruitment.com.sg.

We regret to inform you that only shortlisted applicants will be contacted.

EA Reg No: R1329095

EA License No: 21C0434

Summary

The Security consultant is a pivotal technical role essential for facilitating Zero Trust deployment initiatives. This role encompasses conducting thorough gap analyses, proficient project management, and delivering technical advisories. Collaboration with cross-functional regional teams across the Asia-Pacific region is integral to this role. The ideal candidate will exhibit a robust understanding of the Zero Trust framework (CISA Zero Trust Maturity Model and Microsoft Zero Trust Model), possess broad security experience, analytical acumen, and demonstrate a proactive approach to project management. This position will report to HQ.

Skills/Qualifications:

• At least 5+ years of experience in the cybersecurity industry.

• Consulting experience in Cyber domain.

• Proven experience in security engineering, with a focus on Zero Trust deployment.

• Consultation capability in related technology and or related service to customer.

• Great communication and interpersonal skills

• Bilingual (English / Japanese) preferred but not required (proficient English is a requirement)

• Proactive approach to problem-solving and project management, with a strong commitment to achieving objectives and deadlines.

• Project management experience.

Technology Proficiency:

• Core expertise in Microsoft technologies.

• Azure Active Directory (AAD), identity management and MFA

• Microsoft Endpoint Manager

• Network Security, Azure Virtual Network and Azure Firewall

• Data Protection, Microsoft Information Protection (MIP) classifying, labelling, and protecting sensitive data.

Main Responsibilities:

• Overall Security Posture: Support and maintain APAC’s information security strategy and ensure it is aligned with Global security strategy based on Zero Trust

• Zero Trust Deployment Support: Lead and support Zero Trust deployment initiatives, ensuring alignment with organizational objectives and security best practices, Possess a strong background in security with a focus on general high-level knowledge.

• Gap Analysis: Conduct comprehensive gap analyses to identify vulnerabilities and areas for improvement within existing security frameworks in APAC region. Perform APAC’s Information Security Risk Assessment in accordance with the Risk Register Policy and support information security risk assessments for APAC to determine the gaps to reach Zero Trust.

• Project Management: Effectively manage Zero Trust deployment projects, including planning, research, monitoring, and reporting.

• Technical Advisory: Provide expert technical guidance and advisory services to stakeholders, facilitating informed decision-making regarding Zero Trust implementation, although not responsible for implementation, must comprehend the technical aspects of security technology and planning.

• Cross-Functional Collaboration: Collaborate closely with cross-functional teams across the APAC region to ensure seamless integration and alignment of Zero Trust initiatives with broader organizational objectives.

• Documentation: Maintain accurate documentation of Zero Trust deployment processes, procedures, and best practices for reference and future optimization.

Additional General Responsibilities:

• Promote the use of ‘right-sized’ solutions for APAC, including Global Shared Information Security Services, to drive increased standardization and effective use of security resources.

• Promote an information security-conscious culture.

• Collaboratively work with APAC to develop and implement processes that meet Global information policy and standards.

• Support information security activities across APAC (align activities where possible, foster joint plans, etc.).

• Collaborate with APAC’s legal and compliance to ensure APAC is compliant with local information security laws and regulations.

• Support the efforts of APAC’s Security delivery resources to execute to expectations.

• Encourage the development of innovative ideas that solve root causes of identified problems.

• Build and develop cross functional relationships within APAC to engender support of security projects.

• Coordinate technical input and recommendations from GISS to APAC

• Work on global initiatives as part of working groups (e.g.: standards refresh, new technology discussion, etc.)

Summary

The Security consultant is a pivotal technical role essential for facilitating Zero Trust deployment initiatives. This role encompasses conducting thorough gap analyses, proficient project management, and delivering technical advisories. Collaboration with cross-functional regional teams across the Asia-Pacific region is integral to this role. The ideal candidate will exhibit a robust understanding of the Zero Trust framework (CISA Zero Trust Maturity Model and Microsoft Zero Trust Model), possess broad security experience, analytical acumen, and demonstrate a proactive approach to project management. This position will report to HQ.

Skills/Qualifications:

• At least 5+ years of experience in the cybersecurity industry.

• Consulting experience in Cyber domain.

• Proven experience in security engineering, with a focus on Zero Trust deployment.

• Consultation capability in related technology and or related service to customer.

• Great communication and interpersonal skills

• Bilingual (English / Japanese) preferred but not required (proficient English is a requirement)

• Proactive approach to problem-solving and project management, with a strong commitment to achieving objectives and deadlines.

• Project management experience.

Technology Proficiency:

• Core expertise in Microsoft technologies.

• Azure Active Directory (AAD), identity management and MFA

• Microsoft Endpoint Manager

• Network Security, Azure Virtual Network and Azure Firewall

• Data Protection, Microsoft Information Protection (MIP) classifying, labelling, and protecting sensitive data.

Main Responsibilities:

• Overall Security Posture: Support and maintain APAC’s information security strategy and ensure it is aligned with Global security strategy based on Zero Trust

• Zero Trust Deployment Support: Lead and support Zero Trust deployment initiatives, ensuring alignment with organizational objectives and security best practices, Possess a strong background in security with a focus on general high-level knowledge.

• Gap Analysis: Conduct comprehensive gap analyses to identify vulnerabilities and areas for improvement within existing security frameworks in APAC region. Perform APAC’s Information Security Risk Assessment in accordance with the Risk Register Policy and support information security risk assessments for APAC to determine the gaps to reach Zero Trust.

• Project Management: Effectively manage Zero Trust deployment projects, including planning, research, monitoring, and reporting.

• Technical Advisory: Provide expert technical guidance and advisory services to stakeholders, facilitating informed decision-making regarding Zero Trust implementation, although not responsible for implementation, must comprehend the technical aspects of security technology and planning.

• Cross-Functional Collaboration: Collaborate closely with cross-functional teams across the APAC region to ensure seamless integration and alignment of Zero Trust initiatives with broader organizational objectives.

• Documentation: Maintain accurate documentation of Zero Trust deployment processes, procedures, and best practices for reference and future optimization.

Additional General Responsibilities:

• Promote the use of ‘right-sized’ solutions for APAC, including Global Shared Information Security Services, to drive increased standardization and effective use of security resources.

• Promote an information security-conscious culture.

• Collaboratively work with APAC to develop and implement processes that meet Global information policy and standards.

• Support information security activities across APAC (align activities where possible, foster joint plans, etc.).

• Collaborate with APAC’s legal and compliance to ensure APAC is compliant with local information security laws and regulations.

• Support the efforts of APAC’s Security delivery resources to execute to expectations.

• Encourage the development of innovative ideas that solve root causes of identified problems.

• Build and develop cross functional relationships within APAC to engender support of security projects.

• Coordinate technical input and recommendations from GISS to APAC

• Work on global initiatives as part of working groups (e.g.: standards refresh, new technology discussion, etc.)

Summary

The Security consultant is a pivotal technical role essential for facilitating Zero Trust deployment initiatives. This role encompasses conducting thorough gap analyses, proficient project management, and delivering technical advisories. Collaboration with cross-functional regional teams across the Asia-Pacific region is integral to this role. The ideal candidate will exhibit a robust understanding of the Zero Trust framework (CISA Zero Trust Maturity Model and Microsoft Zero Trust Model), possess broad security experience, analytical acumen, and demonstrate a proactive approach to project management. This position will report to HQ.

Skills/Qualifications:

• At least 5+ years of experience in the cybersecurity industry.

• Consulting experience in Cyber domain.

• Proven experience in security engineering, with a focus on Zero Trust deployment.

• Consultation capability in related technology and or related service to customer.

• Great communication and interpersonal skills

• Bilingual (English / Japanese) preferred but not required (proficient English is a requirement)

• Proactive approach to problem-solving and project management, with a strong commitment to achieving objectives and deadlines.

• Project management experience.

Technology Proficiency:

• Core expertise in Microsoft technologies.

• Azure Active Directory (AAD), identity management and MFA

• Microsoft Endpoint Manager

• Network Security, Azure Virtual Network and Azure Firewall

• Data Protection, Microsoft Information Protection (MIP) classifying, labelling, and protecting sensitive data.

Main Responsibilities:

• Overall Security Posture: Support and maintain APAC’s information security strategy and ensure it is aligned with Global security strategy based on Zero Trust

• Zero Trust Deployment Support: Lead and support Zero Trust deployment initiatives, ensuring alignment with organizational objectives and security best practices, Possess a strong background in security with a focus on general high-level knowledge.

• Gap Analysis: Conduct comprehensive gap analyses to identify vulnerabilities and areas for improvement within existing security frameworks in APAC region. Perform APAC’s Information Security Risk Assessment in accordance with the Risk Register Policy and support information security risk assessments for APAC to determine the gaps to reach Zero Trust.

• Project Management: Effectively manage Zero Trust deployment projects, including planning, research, monitoring, and reporting.

• Technical Advisory: Provide expert technical guidance and advisory services to stakeholders, facilitating informed decision-making regarding Zero Trust implementation, although not responsible for implementation, must comprehend the technical aspects of security technology and planning.

• Cross-Functional Collaboration: Collaborate closely with cross-functional teams across the APAC region to ensure seamless integration and alignment of Zero Trust initiatives with broader organizational objectives.

• Documentation: Maintain accurate documentation of Zero Trust deployment processes, procedures, and best practices for reference and future optimization.

Additional General Responsibilities:

• Promote the use of ‘right-sized’ solutions for APAC, including Global Shared Information Security Services, to drive increased standardization and effective use of security resources.

• Promote an information security-conscious culture.

• Collaboratively work with APAC to develop and implement processes that meet Global information policy and standards.

• Support information security activities across APAC (align activities where possible, foster joint plans, etc.).

• Collaborate with APAC’s legal and compliance to ensure APAC is compliant with local information security laws and regulations.

• Support the efforts of APAC’s Security delivery resources to execute to expectations.

• Encourage the development of innovative ideas that solve root causes of identified problems.

• Build and develop cross functional relationships within APAC to engender support of security projects.

• Coordinate technical input and recommendations from GISS to APAC

• Work on global initiatives as part of working groups (e.g.: standards refresh, new technology discussion, etc.)

Responsibilities:

• Collaborate on building a robust cloud architecture blueprint aligned with business goals and technical needs.
• Spearhead secure cloud practices and drive their widespread adoption across the organization.
• Design, review, and architect cloud solutions, ensuring a secure and constantly evolving cloud environment encompassing compute, storage, network, and applications.
• Become a thought leader, researching disruptive forces shaping digital transformation and cloud security, and strategically integrating their impact into our cloud architecture and security roadmap.
• Partner with subject matter experts to develop and deliver effective cloud security services, achieving optimal business outcomes.
• Consult on cloud security solution deployments, ensuring alignment with the secure cloud architecture and identifying opportunities for improvement to meet both present and future needs.
• Champion cloud security solutions and services alongside product managers, owners, and peers.
• Architect and tailor cloud security solutions to meet unique customer infrastructure, application, and workload needs, balancing business and technical considerations.
• Own the deployment, administration, management, configuration, testing, and integration of cloud security solutions and multi-account cloud architecture across compute, storage, network, and applications.
• Proactively identify, analyze, and address vulnerabilities in cloud security solutions and multi-account cloud architecture.
• Develop and maintain DevOps tools, fostering a secure cloud-based orchestration platform for infrastructure as code (IaC).
• Design, develop, and maintain cloud security solutions for CI/CD pipelines, optimizing the continuous integration, testing, delivery, and deployment processes within agile software development.

Requirementrs:

• 3 – 5 years of experience designing, implementing, and operating within a large enterprise cloud environment. Expertise in cloud technologies, cloud security solutions, infrastructure and network design, servers, storage, and virtualization (especially in architectural or engineering roles) is a must.
• Deep understanding of cybersecurity technologies, practices, operations, vulnerability, and risk management.
• Proficiency and hands-on experience with cloud systems like AWS, Azure, or Google Cloud Platform, coupled with expertise in cloud security technologies like CNAPP, CWPP, CSPM, SASE, and ZTNA. Familiarity with software-defined infrastructure, IaC tools (Terraform, Cloudformation, etc.), and CI/CD pipelines is essential.
• Proven track record of architecting, designing, developing, and maintaining secure, complex, enterprise-grade, multi-account hybrid cloud infrastructure integrated with cloud security solutions.
• The ability to translate business and technical requirements into practical, secure cloud-based architecture and solutions, ensuring compliance with security policies and best practices.
• Strong collaboration skills to thrive in a team-oriented environment, fostering a culture of innovation to achieve organizational goals.
• Certification as a CISSP, CISM, or a related field

Chin, SF

sf.chin[at]jondavidsongroup.com

JonDavidson Pte Ltd

Co. Reg. No. 200709068N. Licence No. 22S1412

Registration Number: R21100141

"Personal data collected will be used for recruitment purposes only"

• Leading regional financial institution
• Focus in Information Security Compliance, Policy & Control
• Open to IT professionals with passion in InfoSec Control and Risk Management

Reporting to Head of Information Security & IT GRC, here are your responsibilities:

• Collaborate with the cybersecurity team to develop and execute the annual information security action plan.
• Establish and maintain an efficient incident reporting and tracking system, overseeing corrective and improvement measures.
• Monitor and provide guidance on the effectiveness of information security workflows and controls.
• Lead information security projects and automation initiatives in Asia.
• Manage outsourcing matters across BUs in Asia and oversee outsourcing requirements
• Conduct annual on-site reviews of BUs in Asia.
• Support compliance efforts under Singapore’s PDPA, including policy communication, query management, and liaison with regulatory authorities.
• Report to the Board and management on adherence to laws, regulations, and information security policies.
• Review and update regional information security and outsourcing policies to ensure compliance.
• Develop training materials to enhance information security awareness.
• Design, develop, and maintain automated compliance and information security workflow management systems.
• Manage regional reporting tools and consolidate results.
• Prepare reports and documents for internal committee meetings.
• Collaborate with the Compliance team on various compliance-related initiatives.

Requirements:

• Bachelor's degree in computer science or related disciplines
• Preferred certifications: CISM and/or CISSP.
• 3+ years of experience in information security or IT risk management
• Strong understanding of information security risks, controls, processes, and trends.
• Experience in project management.
• Familiarity with regional information security regulations and the insurance sector.
• Understanding of Asian cultural and business dynamics.

If you are interested in the above job or related information security opportunities, please kindly send your updated CV to [email protected]

Reg No.R23112660
BeathChapman Pte Ltd
Licence no. 16S8112

Major, Lindsey & Africa is unmatched in the legal talent we attract, the services that we provide and the global reach we possess. With legal recruiting offices in more than 20 major markets across the United States, EMEA and Asia Pacific, we provide in-depth market insights on a global scale that deliver superior results for clients and candidates.

We are currently looking for Legal Consultant to join our team.

Responsibilities include:

• Review, draft, negotiate and advise on a broad range of commercial contracts and legal documents
• Provide legal advise to the business and operational units of the company
• Work and liaise with the various stakeholders within the company
• Perform other related duties as assigned

The ideal candidate would have:

• A Degree in Law or equivalent
• 8+ years PQE and called to the Singapore or a common law jurisdiction bar
• Strong commercial background, with good knowledge of contract law
• A strong team player with interpersonal skills and the ability to collaborate effectively with personnel at all levels
• Excellent verbal and written communication skills with good attention to detail
• Strong organizational skills and adaptable and flexible with regard to activities undertaken

Please apply and we can have a confidential discussion.

Major, Lindsey & Africa (Singapore) Pte. Ltd.

EA License No. 16S8347

EA Registration No. R24121617

The professional will be joining a top team in delivering complex Cyber Security solutions to defend against cyber threats of the world. We are looking for a dedicated team player who wants to make a career in the Vulnerability Management (VM), Data Protection or Governance, Risk and Compliance (GRC) domain.

He/she will be responsible for his/her career by providing professional services to implement turnkey projects for our clients. A problem solver, he/she will treat each technical issue as a learning opportunity and challenge. No two days will be the same as opportunities are aplenty in deploying challenging solutions in various enterprise settings.

Roles & Responsibilities:

• Engage clients in identifying business and technical requirements relating to cyber security solutions for GRC, VMS, Data Protection (DLP)
• Deploy projects and provide consultation to clients as a Subject Matter Expert (SME) from Design to Implementation phase in System Development Lifecycle (SDLC)
• Create technical documentation for the solution deployment
• Empower clients through technical enablement
• Communicate and handover to support team (L1) after implementation
• Support as post-sales support services (L2) when necessary

The ideal candidate should possess:

• At least 2 to 5 years of IT or Cyber Security experience
• At least 1 to 2 years of implementation experience in one or more of Vulnerability Management (VM), Data Protection and Governance, Risk and Compliance (GRC) solutions
• Problem solver with strong analytical skills
• Dynamic individual and team player with positive working attitude
• Good communication and written skills
• Passionate about Cyber Security
• Relevant diploma or degree qualifications in Information Technology or Cyber Security

Candidates with more years of relevant experience may be considered for the role of a Senior Consultant.

Responsibilities

• Engage clients to identify requirements relating to cyber security solutions for Data Protection
• Proposal, scope and size technical solutions for clients
• Deploy competency’s related projects and provide consultation to clients with regard to the deployment as a Subject Matter Expert (SME)
• Create technical documentation for the solution deployment
• Empower clients through technical enablement
• Provide post-sales support services for corrective and preventive maintenance when necessary

Requirements

• Good Diploma or Bachelor’s Degree in Information Technology
• At least 5 to 8 years of IT security experience
• Experience in leveraging and expanding the capabilities of existing analytical tools and technologies; recommend new technologies as appropriate
• Experience with web security, email security and Cloud Access Security Broker (CASB) and will be preferred
• Positive working attitude
• Good communication and written skills
• Passionate in information security
• Experience in programming and scripting is preferred

Duties & Responsibilities:

• Carry out pre-sales engagement for projects relating to AA
• Deploy AA related projects and provide consultation with regard to the deployment as a Subject Matter Expert (SME)
• Develop SIEM correlation rules for security monitoring and detection of new threats
• Develop SIEM and Threat Intelligence report templates that are useful for analysis by the customers
• Create technical documentation for the AA deployment
• Provide post-sales support services for corrective and preventive maintenance
• Carry out technical enablement

Requirements:

• Good Diploma or Bachelor’s Degree in Information Technology
• Knowledge in information security technologies such as SIEM, Threat Intelligence and Vulnerability Management is preferred
• At least 2 to 5 years of IT security experience
• Good communication and written skills
• Positive working attitude
• Passionate in information security

Duties & Responsibilities

• Engage clients to identify requirements relating to cyber security solutions such as Database Security, Application and Cloud Native Security
• Conduct Solutions Presentations and Perform Proof of Concept (POC) / Proof of Value (POV) for clients to ensure the solution meets their requirements
• Respond to RFP, ITQ, RFQ, generate proposals, scope, and size technical solutions for clients
• Conduct project deployments and provide consultation to clients as a Subject Matter Expert (SME)
• Create technical documentation for the solution deployment
• Perform knowledge transfers / trainings to clients through technical enablement
• Provide post-project support services for corrective and preventive maintenance when necessary

Requirements

• Good diploma or bachelor’s degree in Information Technology
• Experience with Cloud Computing Platforms, Database Security and Application Security will be preferred
• Experience in leveraging and expanding the capabilities of existing analytical tools and technologies
• Experience with DevOps and Cloud Native Security is advantageous
• Knowledge in information security technologies & cyber threat actors, cyber-crimes and fraudulent activity targeting the technology or various industries
• Positive working attitude
• Good communication and written skills
• Passionate in information security
• Experience in programming and scripting is preferred

The Role:
Our client, is a leading Financial Services Firm dedicated to providing innovative solutions within broker dealer space and they are looking for a Legal Counsel to join their team. In this role, you will play a pivotal role in supporting corporate activities, particularly in the areas of M&A and JV transactions. You will work closely with cross-functional teams to facilitate the legal aspects of mergers, acquisitions, and joint ventures, ensuring compliance with regulatory requirements and safeguarding the interests of the company.

Requirements:

• 3 to 4 years of experience in Corporate Transactions of a top-tier law firm, coupled with a robust academic background.
• M&A transactions and joint venture experience would be an advantage
• Excellent drafting and negotiation skills, with meticulous attention to detail.
• Ability to communicate complex legal concepts effectively and collaborate with diverse stakeholders.

Alternatively, if you are looking for Private Practice or In-House roles, feel free to send your resume to Raiza via [email protected] or to Linus Choo [email protected]

EA Personnel No R1216328
BeathChapman Pte Ltd
Licence No 16S8112

Duties & Responsibilities:

• Managing and leading a team of engineers for presales and project deliveries
• Supporting pre-sales engagement for projects relating to Advanced Analytics
• Responsible for ensuring projects are delivered in a timely manner
• Responsible for supporting presales activities in relation to developing solution design, bill of materials and scope of work
• Deploy Advanced Analytics solution related projects and provide consultation with regard to the deployment as a Subject Matter Expert (SME)
• Create technical documentation for the AA deployment
• Provide post-sales support services for corrective and preventive maintenance
• Carry out technical enablement to sales team and/or junior members of the team
• Perform consultancy activities such as conducting technical presentations and engagement to prospective customers, preparing scope of work, bill of materials and technical proposal for submission for tender bids
• Identity, evaluate and recommend new technologies that would be relevant to Adaptive Defence
• Provide mentorship and guidance to junior staff

Requirements:

• Bachelor’s Degree in Information Technology or Cyber Security
• Professional certificates such as SANS or ISC2 would be advantageous
• At least 7 years of IT security experience and experienced in a wide range of cyber-security technologies
• Technical knowledge in the following information security technologies & solutions is preferred: SOAR Platform / Threat Intel Platform / Threat Intel Feeds
• Experience in IT Network / System Administration will be a strong advantage
• Experience as a technical lead in large-scale projects involving multiple technologies as part of a turn-key solution
• Strong troubleshooting and analytical skills that can resolve issues as the final point of escalation
• Strong presentation, communication and written skills
• Basic project management skills
• Positive working attitude
• Passionate in information security

Job Description

The incumbent is responsible for delivering information security projects that are related to Advanced Analytics (AA), such as Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Threat Intelligence Management and Vulnerability Management, including the execution of all project implementation activities.

Responsibilities

• Carry out pre-sales engagement for projects relating to AA

• Deploy AA related projects and provide consultation with regard to the deployment as a Subject Matter Expert (SME)

• Develop SIEM correlation rules for security monitoring and detection of new threats

• Develop SIEM and Threat Intelligence report templates that are useful for analysis by the customers

• Develop playbooks for automated incident management

• Create technical documentation for the AA deployment

• Provide post-sales support services for corrective and preventive maintenance

• Carry out technical enablement

Requirements

• Good Diploma or Bachelor’s Degree in Information Technology

• Knowledge and experience in information security technologies such as SIEM, Threat Intelligence and Vulnerability Management is preferred

• At least 3 to 5 years of IT security experience

• Good communication and written skills

• Positive working attitude

• Passionate in information security

Duties & Responsibilities

• Be clear of customer's security framework, such as information security policies, processes/procedures, guidelines and etc.
• Ensure compliance with customer's cybersecurity policies.
• Perform activities necessary to ensure customer's data systems and networks are secure, sure activities are not limited to log analysis and security assessment of customer ICT systems.
• To manage/conduct vulnerability assessment and coordinate penetration tests activities.
• To conduct information security awareness training

Requirements

• Degree in Computer Science, Information Systems, Engineering or equivalent
• At least 3 years of IT security experience in areas of security governance, risk management, application security design, security project management, security operation, network security
• Must have either:CISSP, CISM, CISA, CCSP or other similar security certifications
• Self-motivated with the ability to work independently and as a team member with minimal direction
• Strong interpersonal and stakeholder management skills
• Good written and communication skills
• Singapore Citizen only

JOB SUMMARY

· The Cyber Security Assessment (CSA) is an integral part of Cyber Security with an aligned goal to ensure secure by design as relates to any software we build or buy or connect to in the Bank. To that end the CSA needs to ensure all security controls related to security threats are being adhered to by projects and application development teams. As part of CSS, we work effortlessly in ensuring the Bank soundly meets its commitments to internal and external stakeholders and maintains an appropriate cyber security defence posture through as part of our 'Secure by Design' initiatives.

· The role is expected to be a chapter lead for Cloud and Container policy and control governance and implementation in the tools and services that we own and embed as part of the build pipeline and platform. The incumbent will provide direction to Security champions in ICS as well as federated security champions on which controls are most appropriate for Cloud and containers as well as define how best to initiate the control checks in the pipeline and platform. The role requires the ability to communicate and build relationships with technology product owners and support teams across geographies mainly ADO, AWS, Azure, SKE, CIO domains and other ICS control leads related to secure by design.

· The Lead, Principal Cyber Security Consultant needs to be a DevOps, Cloud and Container SME with institutional and industry knowledge. Ability to drive product development, security as policy coding requirements as well as influence security champions to #doTheRghtThing in their reviews. Coding capability is essential

RESPONSIBILITIES

Strategy

· Develop and implement a comprehensive strategy for security as code and policy as code practices, aligning with the overall ICS objectives

· Lead the adoption of automated security and compliance solutions across the development lifecycle

· Drive innovation in integrating security into CI/CD pipelines, facilitating a shift-left approach to security

Business

· Collaborate with key business stakeholders to understand business objectives, providing insights on how security as code can support these goals

· Translate business requirements into secure, scalable, and reliable security practices

· Foster a culture of security awareness and ensure security best practices are incorporated into business operations

Processes

· Establish and refine processes for integrating security tools and practices into the software development and deployment processes

· Develop and maintain policy-as-code frameworks to enforce security policies automatically within the infrastructure

· Ensure continuous improvement of security processes through regular review and incorporation of feedback mechanisms

People & Talent

· Conduct comprehensive risk assessments and enforce risk management policies to identify and mitigate potential security threats

· Develop metrics and reporting frameworks to monitor the effectiveness of security measures

· Liaise with the risk management team to integrate cybersecurity risk into the organizations overall risk profile

Risk Management

· Conduct comprehensive risk assessments and enforce risk management policies to identify and mitigate potential security threats

· Develop metrics and reporting frameworks to monitor the effectiveness of security measures

· Liaise with the risk management team to integrate cybersecurity risk into the organizations overall risk profile

Governance

· Ensure compliance with relevant ICS policies and, regulations and standards related to cyber security and data protection

· Establish governance frameworks for policy as code to ensure consistent application and enforcement of security policies across all assets being built on the central devops pipeline

Regulatory & Business Conduct

· Display exemplary conduct and live by the Group’s Values and Code of Conduct.

· Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.

· Lead the DevSecOps Automation Cloud and Container Policy checks to achieve the outcomes set out in the Bank’s Conduct Principles

· Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.

Key Stakeholders

· ICS Control owners

· Cloud Platform

· ADO Engineering

· Security Architecture

· CIO Domains

Other Responsibilities

· Embed Here for good and Group’s brand and values in ICS-CS; Perform other responsibilities assigned under Group, Country, Business or Functional policies and procedures; Multiple functions (double hats);

Our Ideal Candidate

· 5+ years of experience in Information security, preferably in Banking and Financial services sector.

· 5+ years of hands-on experience on application/ infrastructure risk assessments, Along with 3 years of experience in implementation or management of security tools/ projects.

· Proven experience in leading security initiatives

· Subject matter expert in DevOps, AWS, Azure and Kubernetes especially EKS and AKS

· Familiar with policy as code

· Self-starter, capable of working without direction and able to deliver projects from scratch

· Full Software Development Lifecycle experience in a mature Continuous Integration and Continuous Delivery environment, probably as a developer

· Strong DevOps toolchain experience: ADO, Artifactory, Sonaqube, Nexus, Aqua

· Configuration and deployment tools experience – Ansible or Puppet

· Strong scripting skills – Python, Ruby, or similar; Perl .

· Breadth of knowledge – operating systems, networking, distributed computing

· Cloud deployment and systems management experience – AWS, Azure

· Container orchestration expertise – EKS, AKS

· Strong knowledge of UNIX and TCP/IP – understand strace and tcpdump output

· Bachelor’s Degree in engineering, Computer Science/Information Technology or its equivalent.

· CSPM, CISSP, nice to have

Role Specific Technical Competencies

· DevOps

· Cloud

· Containers

· Security

· Policy as Code

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 160 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents. And we can't wait to see the talents you can bring us.
Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion. Together we:

· Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do

· Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well

· Be better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

· Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations

· Time-off including annual, parental/maternity (20 weeks), sabbatical (12 weeks maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum

· Flexible working options based around home and office locations, with flexible working patterns

· Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits

· A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning

· Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.

· Recruitment assessments - some of our roles use assessments to help us understand how suitable you are for the role you've applied to. If you are invited to take an assessment, this is great news. It means your application has progressed to an important stage of our recruitment process.

Visit our careers website www.sc.com/careers

Who we are

CyberArk (NASDAQ: CYBR) is the global leader in Identity Security. Centered on privileged access management, CyberArk provides the most comprehensive security offering for any identity – human or machine – across business applications, distributed workforces, hybrid cloud workloads and throughout the DevOps lifecycle. The world’s leading organizations trust CyberArk to help secure their most critical assets. To learn more about CyberArk, visit https://www.cyberark.com, read the CyberArk blogs or follow us on Twitter via @CyberArk, LinkedIn or Facebook.

What you will do

CyberArk is seeking a skilled communicator and technically proficient professional to join our team. As experts in enterprise security and CyberArk’s Identity Security and Access Management solutions, our Senior Security Consultants take leading roles in complex deployments, breach remediation projects, and within CyberArk establish best practices and new approaches in the ever-changing security landscape.

Senior Security Consultants must coordinate closely with implementation resources, sales teams, and product management to ensure the solutions they architect meet customer needs and are successfully executed either on-premise or in the Cloud.

Key Responsibilities:

• Design and architect solutions to meet the needs of CyberArk’s customers
• Guide complex deployments of CyberArk’s solutions through their full lifecycle
• Provide guidance on practices and trends in privileged account security
• Assess near-term needs to establish business priorities and advise on options, benefits, and impact to customers
• Perform health checks for customers as a proactive or reactive measure
• Demonstrate a strong understanding of large-scale information technology systems, security regulatory risk management, and security vulnerabilities
• Establish new standard approaches and practices for deploying CyberArk’s solutions and securing privileged accounts
• Create initial drafts of design, architecture, and planning documentation

What you need to succeed

• Bachelor’s degree in a relevant field
• At least 10-15 years’ experience in a technology consulting role, or similar
• Certified Information Systems Security Professional (CISSP), or similar certifications are advantageous
• Experience with enterprise solutions architecture, and information security.
• Strong written and verbal communication skills; ability to communicate to different target audiences from technical to executive level
• A wide understanding of technologies and technical disciplines, including databases, networking, systems administration, cloud infrastructure, and information security
• Ability to work independently and manage concurrent engagements
• Passionate about identity security, and its impact to the world

Who we are

CyberArk (NASDAQ: CYBR) is the global leader in Identity Security. Centered on privileged access management, CyberArk provides the most comprehensive security offering for any identity – human or machine – across business applications, distributed workforces, hybrid cloud workloads and throughout the DevOps lifecycle. The world’s leading organizations trust CyberArk to help secure their most critical assets. To learn more about CyberArk, visit https://www.cyberark.com, read the CyberArk blogs or follow us on Twitter via @CyberArk, LinkedIn or Facebook.

What you will do

CyberArk is seeking a skilled communicator and technically proficient professional to join our team. As experts in enterprise security and CyberArk’s Identity Security and Access Management solutions, our Senior Security Consultants take leading roles in complex deployments, breach remediation projects, and within CyberArk establish best practices and new approaches in the ever-changing security landscape.

Senior Security Consultants must coordinate closely with implementation resources, sales teams, and product management to ensure the solutions they architect meet customer needs and are successfully executed either on-premise or in the Cloud.

Key Responsibilities:

• Design and architect solutions to meet the needs of CyberArk’s customers
• Guide complex deployments of CyberArk’s solutions through their full lifecycle
• Provide guidance on practices and trends in privileged account security
• Assess near-term needs to establish business priorities and advise on options, benefits, and impact to customers
• Perform health checks for customers as a proactive or reactive measure
• Demonstrate a strong understanding of large-scale information technology systems, security regulatory risk management, and security vulnerabilities
• Establish new standard approaches and practices for deploying CyberArk’s solutions and securing privileged accounts
• Create initial drafts of design, architecture, and planning documentation

What you need to succeed

• Bachelor’s degree in a relevant field
• At least 10-15 years’ experience in a technology consulting role, or similar
• Certified Information Systems Security Professional (CISSP), or similar certifications are advantageous
• Experience with enterprise solutions architecture, and information security.
• Strong written and verbal communication skills; ability to communicate to different target audiences from technical to executive level
• A wide understanding of technologies and technical disciplines, including databases, networking, systems administration, cloud infrastructure, and information security
• Ability to work independently and manage concurrent engagements
• Passionate about identity security, and its impact to the world

• Rapidly Growing Real Estate Developer
• 5-day work week
• South
• Excellent Employee-Centric Environment

Our client, a renowned Real Estate firm, has an opportunity for a Winner to join the Team as a Legal Secretary.

RESPONSIBILITIES:

• Manage and administer leases for various properties under the company
• Prepare and check lease documents, activate the contracts and maintain tenancy schedule
• Responsible for lease documentation, audit checks on leases and tenants, arrears management, tenant and other related lease management functions
• Enterand maintain data in SAP system
• Execute the arrears management process in collecting payments from tenants of a portfolio of properties, prepare arrears report on a regular interval
• In charge of tracking security deposit, monitor submission of gross sales turnover reports and audited sales reports by tenants and adjustment of audited sales
• Adhoc duties as allocated

REQUIREMENTS:

• Possess a Diploma in relevant courses
• Minimum 2 years of relevant experience
• Strong admin that does contracts and work in legal/law firm will have added advantage
• Proficiency in Microsoft Word and Excel are essential
• Experience in SAP will be an added advantage

OTHER INFORMATION:

• Location: South
• Working hours: Monday – Friday, Office Hours
• Salary: up to S$4,300 and Bonus (Salary will commensurate according to experience & qualifications)
• Challenging, open, engaging, collaborative and creative environment
• The Company strives to achieve employee satisfaction by providing attractive staff benefits, welfare & training programmes to all staff.

HOW TO APPLY:

If you are a team player, meticulous & organized, and more importantly, believe that YOU CAN MAKE A DIFFERENCE, we would like to hear from you.

Submit your application by emailing a detailed copy of your updated Resume in MS Word Format to David Sia Yi Sheng (EA Personnel Reg. No. R1875905, Achieve Career Consultant Pte Ltd EA Licence No. 05C3451) by clicking the “Apply Now” or contact David at 65909958 for a confidential discussion.

Please indicate the below information in your resume:

• Current & Expected salary
• Reason(s) for leaving
• Notice Period / Availability to commence work

YOUR SUCCESS IS OUR ACHIEVEMENT!

Notice:

We regret that only short-listed candidates will be notified. All applications will be treated with the strictest confidence.

By submitting any application or resume to us, you will be deemed to have read & agreed to the terms of our Privacy Policy, and consented to us collecting, using, retaining and disclosing your personal information to prospective employers for their consideration, and for our marketing EDMs which you may opt out by unsubscribing in the mailer. You may refer and access our website at www.achievegroup.asia/privacy-policy/ for more information.

Cessation of Collection of full NRIC Numbers:

In compliance with the Personal Data Protection Act and commitment to protect candidates’ personal data, Achieve Group will cease to collect, process or use full NRIC numbers during our screening and job application process.

Kindly ensure your resumes provided to us does not contain your full NRIC number and full home address during your job application.