Total 198 Others/Any health consultant job vacancies in Legal / Public / Security category in Singapore

The Team

Cundall’s security consultancy team’s mission is to play a key role in keeping people safe from the security threats and risks that affect them in their day to day lives. We also aim to protect our client’s assets and business, ensuring its continued operation in the event of a security incident – we pride ourselves on our exemplary track record of providing intelligent advice designing innovative security solutions.

The security consultancy team are a source of world leading expertise – and offer a pro-active and collaborative approach to skill development, and professional excellence.

The Role

This is an excellent opportunity for a talented and dynamic security design consultant to join the team in our Singapore office to play a role in ensuring the successful delivery of electronic security systems design for some of the most exciting and high-profile projects across the mixed-use, workplace and critical systems sectors.

As part of our established team of security consultants, you will prepare concept, developed and technical electronic security systems designs. The proposals you create will include schedules, schematics, design specifications and technical documentation all in keeping with client requirements, regulations and standards.

The Skills

You will have a good background in the design and engineering of security systems (including video surveillance, access control, intruder alarm, intercom and integrated security management systems) and will have gained experience in delivering these following the RIBA Plan of Work design stages or equivalent.

You will have proven ability in preparing specifications, reports, general arrangement drawings, schematics and carrying out site inspections and surveys. Also, crucially – you have a passion for creative and intuitive design.

It would also be beneficial if you have knowledge and / or experience of security and operational risk management and the application of physical security solutions (including but not limited to Hostile vehicle Mitigation (HVM), forced entry protection, blast and ballistic mitigation in order to achieve a holistic approach to security risk mitigations, but this is not essential.

Given the collaborative and client focussed nature of this role, excellent communication skills and the ability to use your initiative to overcome challenges are essential.

Flexible Services from Pinsent Masons Vario provides legal professionals access to high-quality legal work with top-tier clients.

Our growing hub of legal experts have a variety of skills, specialisms and experience but they all enjoy quality legal projects best suited to their skillset and unparalleled support during their assignments.

We are now looking to expand our bench with an exceptional legal professional with experience in data privacy law.

As a legal consultant, you will need:

• Minimum 8 PQE in-house or within a law firm
• Experience in providing subject legal advice relating to the entire life cycle of personal data from collection to deletion
• Ability to liaise and collaborating on privacy legal matters with, particularly understanding global positions derived from the GDPR and advising when local APAC legal considerations apply
• Experience in online technology and AI is preferred

To join our hub, you need to demonstrate the following:

• Qualified lawyer with a strong academic background
• Top international law firm or equivalent in-house/secondment experience
• Flexible, communicative and adaptable
• Enthusiastic about embracing new work cultures
• Rapidly develop close, trusting relationships

To Apply, click on “Apply” and attach your latest CV. Alternatively you can contact our Account Executive, Rachel Lee at [email protected] for a confidential conversation.

Drake International is a global leader in talent management solutions, dedicated to helping organizations find the best talent to drive their success. With a strong presence in Singapore, we are committed to delivering exceptional recruitment services across various industries.

Job Description: We are seeking a dynamic and experienced Legal Recruitment Consultant to join our team in Singapore. The ideal candidate will have a strong background in legal recruitment, excellent communication skills, and a passion for connecting top legal talent with leading organizations.

Key Responsibilities:

• Manage the end-to-end recruitment process for legal positions, including sourcing, screening, interviewing, and placing candidates.
• Build and maintain strong relationships with clients and candidates to understand their needs and provide tailored recruitment solutions.
• Conduct market research to stay updated on industry trends and identify potential business opportunities.
• Develop and implement effective recruitment strategies to attract high-quality legal professionals.
• Provide expert advice and guidance to clients and candidates throughout the recruitment process.
• Ensure compliance with all relevant laws and regulations related to recruitment and employment.

Requirements:

• Proven experience in legal recruitment, preferably within a recruitment agency.
• Strong understanding of the legal industry and its specific recruitment needs.
• Excellent communication and interpersonal skills, with the ability to build rapport with clients and candidates.
• Highly organized and detail-oriented, with the ability to manage multiple tasks and priorities.
• Proactive and results-driven, with a strong focus on achieving recruitment targets.
• Bachelor's degree in Human Resources, Law, or a related field is preferred.

What We Offer:

• Competitive salary and performance-based incentives.
• Opportunities for professional development and career growth.
• A supportive and collaborative work environment.
• Access to a global network of industry professionals.

How to Apply: If you are passionate about legal recruitment and looking for an exciting opportunity to join a leading recruitment agency, we would love to hear from you. Please submit your resume and cover letter to [email protected] .

*Only shortlisted candidates will be notified.

Registration No. R1656042 | EA License No. 11C3510 | Drake International

Flexible Services from Pinsent Masons Vario provides legal professionals access to high-quality legal work with top-tier clients. Our growing hub of legal experts have a variety of skills, specialisms and experience but they all enjoy quality legal projects best suited to their skillset and unparalleled support during their assignments.

We are now looking to expand our bench with an exceptional legal professional with experience in the commodities industry.

You will need to possess:

• 5 - 12 years’ PQE in-house or within a law firm;
• Ability to negotiate and draft commodity sales contracts or significant experience in negotiating and drafting B2B sales contracts in the industrial / manufacturing sector;
• Ability to provide advice on commodities - related disputes, sanctions, trade finance, and geopolitical risks;
• Ability to advise on documents integral to commodities supply chain;

To join our hub, you need to demonstrate the following:

• Strong academic background and legal qualification;
• Top international law firm or equivalent in-house/secondment experience;
• Flexible, communicative and adaptable;
• Enthusiastic about embracing new work cultures and strong intercultural skills;
• Ability to develop close, trusting relationships.

To Apply, click on “Apply” and attach your latest CV. Alternatively you can contact our Account Executive, Rachel Lee at [email protected] for a confidential conversation.

Responsibilities

• Develop, implement, and maintain Group-wide security policies and standards to ensure consistency across all operations.
• Oversee data management and governance, ensuring the integrity and security of all data, including Level 2 (L2) assurance.
• Act as the domain knowledge expert, providing guidance and support to all sites to ensure operational excellence in security practices. Including and not limited to: Security Strategy, Security Technology, Incident Response and Investigation, Security Training and Awareness Program, Group Reporting.
• Lead initiatives to enhance security capabilities and build competencies across various locations.
• Conduct regular assessments and audits to identify areas for improvement and ensure compliance with security standards.

Requirements

• Degree in Security Management, Information Technology, or a related field.
• 10 years of experience in a senior security role, data management and assurance
• Knowledge of security policies, standards, and governance.

Account Manager

Kerwin Tan Kai Bin (R1331624)

[email protected]

EA16S8107

Responsibilities:

· Perform day-to-day account work which includes developing program activities and a wide range of written materials (including strategy papers and press releases), coordinating events, maintaining client and media contacts, managing projects.

· Develop and manage projects/programs, including implementation plans, evaluation mechanisms, staffing plans, budgets and timelines.

· Develop all manner of content for media pitching, including pitch letters, press releases, specification sheets and media announcements.

· Communications plans for accounts and understands and track clients’ businesses.

· Presentations for clients relative to project management/program status under the supervision of the team leader.

· Act as a liaison between client, outside suppliers (graphic designers, photographers, A/V houses, etc.) and, as appropriate, other internal and external audiences (e.g., employees, media, interest groups).

· Assists with administrative assignments for client when required.

Requirements:

• Degree in Mass Communications/Marketing/Public Relations.

• Open to entry level candidates and those with 1-2 years of professional public relations other comms related role.

• Proficient in using the Microsoft Office suite of products.

• Strong language command; possess excellent writing and editing skills.

• Good communication and interpersonal skills.

• Organised and systematic; ability to adhere to deadline.

• Ability to work independently with minimal supervision.

Cyber Security Consultant

About empathAIse:

At empathAIse, we provide cutting-edge SaaS CRM solutions designed to empower businesses by streamlining their sales, marketing, and customer engagement processes. As we continue to grow, we recognise the critical importance of cyber security in safeguarding our clients' data and systems. We’re looking for a Cyber Security Consultant to join our team and help clients address their unique cyber security challenges with confidence and expertise.

Main Responsibilities:

• Assess Client Security Needs: Evaluate clients’ current security posture, configurations, and strategies to identify gaps, vulnerabilities, and opportunities for improvement.
• Consult on Cyber Security Solutions: Advise clients on best practices, develop tailored cyber security plans, and recommend solutions aligned with their business goals and compliance requirements.
• Strategy and Policy Development: Help clients design and implement cyber security strategies, policies, and procedures to protect their systems and data.
• Client Training and Support: Provide training to ensure clients understand fundamental cyber security risks, practices, and mitigation tactics, empowering them to take proactive measures.
• Deliver Expert Insights: Create high-quality reports and presentations detailing assessments, findings, and actionable plans to address specific cyber risks and vulnerabilities.
• Collaborate on Tool Development: Work with the empathAIse team to develop and refine cyber security assessment tools, services, and best practices.
• Enhance CRM Security Integration: Offer insights on how empathAIse CRM tools can support client security needs and provide solutions that integrate seamlessly into their operations.

Requirements:

• Educational Qualifications:
  • Minimum Master’s degree in Information Systems, Computer Science, or a related field.
  • Relevant certifications in cyber security, such as CISSP, OSCP, CEH, or CSA.
  • Project Management certifications, such as PMP or Agile certifications, are essential.
• Professional Experience:
  • At least 15 years in the IT industry, with a proven track record in IT development, project management, and business analysis.
  • Minimum 10 years of business and technical architecture experience, with relevant qualifications.
  • At least 5 years in Program Management with IT PMO experience, including ownership of budgets.
  • Extensive experience in IT Project Management, IT Change Management, and Agile project management.
  • Strong experience managing project teams and budgets, demonstrating financial and budget management skills.
  • At least 5 years of cyber security experience, with certifications to validate expertise.
• Technical Knowledge:
  • Proficient in network security
  • Experience with cloud security and authentication protocols
  • Expertise in IT development and implementation across diverse platforms and industries.
• Client-Facing and Leadership Skills:
  • Proven ability to lead complex IT projects, ensuring alignment with business goals and delivering results on time and within budget.
  • Strong communication and presentation skills, with the ability to document and explain technical information in a concise, understandable manner.
  • Experience delivering high-quality solutions to internal or external clients, with a focus on exceeding expectations.
• Change Management Expertise:
  • Experience and qualifications in Change Management are preferred, showcasing the ability to manage organisational change initiatives effectively.

Why Join empathAIse?

• Be part of a dynamic team shaping the future of SaaS CRM security.
• Engage directly with clients to make meaningful, measurable impacts on their cyber security readiness.
• Collaborate in an innovative environment that values expertise, teamwork, and client success.

Ready to Apply?

If you’re a cyber security professional passionate about helping clients navigate the complexities of cyber threats and solutions, we’d love to hear from you. Apply today and join us at empathAIse to drive secure, scalable growth for businesses worldwide.

Job Summary:

We are seeking a skilled and dedicated Information Security Analyst/Consultant to join our team. In this role, you will be responsible for advising, assisting, and implementing information security programs for our clients using frameworks such as ISO/IEC 27001:2022 and Cyber Trust Mark, in addition you will also be involve in overseeing the implementation of security solutions to assist clients in improving their information security and cyber security posture. You will work closely with clients to assess their security needs, develop robust security strategies, and ensure compliance with industry standards and are expected to manage client’s requirements and expectations during the consulting process helping them to achieve ISO/IEC 27001:2022 or Cyber Trust Mark Certification.

Key Responsibilities:

• Client Advisory and Consultation: Provide pre-sales support, expert advice and consultation to clients on information security practices and strategies.
• Framework Implementation: Assist clients in developing and implementing information security programs using frameworks like ISO/IEC 27001:2022 and Cyber Trust Mark.
• Security Assessments: Conduct comprehensive security assessments to identify vulnerabilities and recommend mitigation strategies.
• Policy Development: Develop and maintain information security policies, procedures, and guidelines for clients.
• Compliance and Auditing: Ensure client compliance with industry standards and regulatory requirements through regular audits and assessments.
• Risk Management: Identify, analyze, and manage information security risks for clients.
• Incident Response: Assist clients in developing incident response plans and provide support during security incidents.
• Training and Awareness: Conduct training sessions and workshops to raise awareness about information security best practices among client employees.
• Documentation: Prepare detailed reports and documentation for security assessments, policies, and compliance efforts.
• Monitoring Emerging Technologies and Threats: Stay up-to-date with emerging technologies and threats in AI, blockchain, and other relevant fields, and integrate this knowledge into security strategies.
• Security solutions: Understand and learn new cybersecurity solutions and assisting to implement these solutions to improve their security posture.

Qualifications:

• Education: Minimum diploma in Cyber Security, Computer Science, or related field and minimum 3 years of experience in IT or Cyber Security field.
• Certifications: Good to have certifications such as CISSP, CISM, or ISO/IEC 27001 Lead Auditor/Implementer, Certified Ethical Hacker.
• Experience: Proven experience in information security consulting, with a focus on implementing security frameworks like ISO/IEC 27001:2022, NIST, CSA Star and CIS.
• Skills: Strong analytical, problem-solving, and communication skills. Proficiency in security assessment tools and methodologies.
• Knowledge: In-depth knowledge of information security principles, standards, and best practices.
• Project management: Understanding of stakeholder management and managing project lifecycle.

What We Offer:

Opportunities for professional development and career growth. A dynamic and collaborative work environment.

Cybersecurity certification training opportunities

Job Description & Requirements

We are looking for a highly driven and self-motivated Cyber Security Consultant to join our team! As a member at our company, you will have the opportunity to work on new and exciting projects and develop your career.

JOB SUMMARY

You will participate in a variety of engagements, focusing on targets that may include network equipment, servers, applications, APIs, wireless infrastructures, mobile devices, and other information systems. Using a variety of tools and techniques that may include red teaming, you will have the opportunity to combine technical expertise with your imagination to discover innovative methods with the goal of ensuring customers remain one step ahead of its adversaries.

Hands on Responsibilities:

·Support the sales by attending security sales meeting (if necessary), effort estimation and provide security testing project timeline

·Develop the security acceptance test plan

·Provide expert technical support during the security testing activities

·Security test preparation, setting-up of testing environment, configuration and installation of the security testing tools

·Perform manual or automated security testing using commercial security testing tools

· Conduct Greybox Testing (Authenticated) and/or Blackbox Testing (Unauthenticated) Penetration Tests

· Conduct Whitebox Testing and Secure Code Review

· Conduct Network and Infrastructure Vulnerability Assessment and Penetration Testing

· Conduct Web, Mobile and Desktop Application Vulnerability Assessment and Penetration Testing

· Find and pinpoint the vulnerabilities of the assess target system / application

· Document and Report the vulnerabilities found in the system

· Provide professional recommendations / advice to mitigate and resolve the vulnerabilities

· Present the security testing results to the relevant stakeholders

·Provide weekly status reporting on the security testing activity progress

Requirements:

· Bachelor's degree, preferably in computer science or information systems, or equivalent work experience

· Minimum 3 - 5 years security experience in a security analyst, engineer, architect, consultant, or a similar role

· Minimum 3 years’ professional experience in conducting vulnerability assessment and penetration testing

· Required Certifications: Any of the followings

o CREST Registered Penetration Tester (CREST CRT)

o Offensive Security Certified Professional (OSCP)

· Knowledge in conducting security testing with the following guidelines and standards

o Open Web Application Security Project (OWASP Top 10 Frameworks)

o Common Vulnerability Scoring System (CVSS)

o Common Vulnerabilities and Exposures (CVE)

o Common Weakness Enumeration (CWE) / SANS Top 25 Software Errors

· High proficiency in manual and automated techniques for penetration testing (network equipment, servers, web applications, APIs, wireless, mobile, databases, and other information systems), as well as executing vulnerability assessments (injection, privilege escalation, fuzzing, buffer overflows, etc.)

· Tools – Proxies, Port Scanners, Vulnerability Scanners, Exploit Frameworks (ex: Burp, Nessus, Nmap, Metasploit)

· Strong oral and written communication skills, including a demonstrated ability to prepare quality documentation and presentations for technical and non-technical audiences

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will assist in the end to end implementation of security solutions for our clients and support our clients in their desire to protect the business.

The Opportunity

This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, advising stakeholders, providing workshops and supporting business development. If you’re flexible and ready to adapt to a constantly changing environment, there’s no better place to develop your skills. Since you’ll be working directly with clients, some travel will be required.

Your Key Responsibilities

As a Cyber Security Operations consultant, you will be part of the team to assess, design, build, implement and manage security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience.

Skills and Attributes for Success

• Familiarity with Security Information and Event Management (SIEM) solutions.
• Experience with network security monitoring and incident response activities.
• Ability to process impacts of activities and be able to collaborate with IT operations and Cybersecurity teams on mitigations and remediations.
• Ability to apply cybersecurity and privacy principles to organizational requirements.
• Ability to create standard operating procedures and other similar documentation.

To Qualify for the role, you must have

• A recognized university degree in Computer Science, Computer/Electrical Engineering, Information Technology or equivalent
• At least 3 years of relevant experience. Preferably with a year experience in business consulting role in a leading consultancy firm
• Strong interest in the field of information security
• Creative, independent with good problem-solving skills
• Excellent communicator with strong analytical, interpersonal and writing skills

Ideally, you’ll also have

• Industry related certification preferred (e.g. CISSP, CISA, CISM, SABSA, PRINCE2, TOGAF, ITIL).
• Solution Level Certifications, OSCP, CREST, GIAC would be advantageous, as well as penetration testing experience.

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.

What we offer

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

Apply now.

Job Scope:

• Collaborate with SAP specialists to implement SAP S/4HANA Cloud, Public Edition, across various customer projects in multiple industries.
• Contribute to functional and business analysis to support solution configuration and implementation.
• Assist in presales activities by preparing and delivering S/4HANA Cloud demonstrations.

Key accountabilities:

• Support the team in the successful implementation of S/4HANA Cloud functionalities in line with project goals and timelines.
• Actively engage with customers to discuss project updates, address challenges and ensure project acceptance while cultivating strong, ongoing customer relationships.
• Contribute to recommending and designing solutions based on project requirements.
• Document and track project risks and issues, ensuring proactive resolutions and keeping projects on track throughout their lifecycles.
• Report project progress to the project team lead or manager.
• Assist in preparing and delivering impactful S/4HANA Cloud demonstrations for prospective customers.
• Pursue and work towards obtaining S/4HANA Cloud consultant certification to progress toward becoming a fully qualified consultant.
• Stay up to date with new S/4HANA Cloud features and industry developments.

What you will gain:

• Be part of a collaborative and innovative team making a meaningful impact in the cloud ERP space.
• Gain hands-on experience with the latest SAP S/4HANA Cloud technologies and work on diverse, high-impact projects.
• Continuous opportunities to develop your skills in line with industry trends and earn certifications to accelerate your career growth.

Minimum Requirements (must have):

• Understanding of ERP systems; any exposure to S/4HANA Cloud, SAP Business ByDesign or other cloud ERP solutions is advantageous.
• Background in finance with exposure to business processes in industries such as manufacturing, distribution or healthcare.
• Proactive, hands-on approach with a strong willingness to learn and a genuine enthusiasm for tackling practical challenges.
• Strong communication and interpersonal skills.
• Singapore citizen or Permanent Resident with a good command of English. Proficiency in additional languages is advantageous.

Other Requirements (good to have):

• Experience working in a Professional Services/Consulting environment.
• Experience working in global virtual teams.
• Familiarity with SAP and SaaS solutions.
• Knowledge of business processes in industries not listed above.

Note for applicants:

• Applicants with higher qualifications or more relevant experience may be considered for a full consultant position or a more senior role within the team.
• We regret that only shortlisted candidates will be notified.

Responsibilities

•Work closely with the senior IT Services stakeholders to ensure that appropriate security guidance is provided to support project delivery;

•Input in to the design and implementation of standards, policies, guidelines and appropriate architectural principles to ensure the firm’s cyber security goals continue to be met;

•Provide risk based direction in conjunction with IT Services for future system enhancements in line with the overall firm’s strategy;

•Recognize potential opportunities for enhancing the firm’s security, ensuring minimal impact to practitioners;

•Provide subject matter expertise to support business relationship management functions.

•Take ownership and ensure Governance, Policy and Procedures in relation to Management of Information

Security meets agreed standards and Technology Risk Assurance

•Develop a culture of in-depth understanding as to why security testing is required at both business and internal team level;

•Analysis of information protection technologies and processes to identify technology security weaknesses;

•Lead ongoing risk assessments of data processing systems to confirm the design of logical controls are effective and meet regulatory and legal requirements; and

•Provide quality reports to summarize test activities, including objectives, planning, methodology, results, analysis and recommendations to both technical and non-technical audiences. From the output of the reports provide suggested approaches to enhance further.

•Provide oversight and guidance during security incidents and investigations, ensure RCA is undertaken and input suggested approaches to deal with lessons identified

•Assist in the enhancement of delivery and management of key technology security platforms.

•Provide continuous improvement to the Technology Security function;

•Collaborate with IT Services to develop and maintain secure technology solutions; and

•Actively contribute to the overall Ogier risk management framework reporting to the Head of Risk & Compliance ensuring consistency in the advice we provide to the business.

•Prepare Monthly reports

•Provide Internal and External Audit Support.

• Experience on Windows Server and Networking

• Knowledge on Azure SAAS

Essential Requirements (Skills Requirements)

· A Bachelor’s degree in Information Technology, Information Systems Security, Cyber Security related or IT related equivalent. Years of Experience

· Minimum 6 to 8 years of IT & Security Experience

· Preferred industry qualifications - CISSP / CISA / CRISC / or equivalent

· Broad knowledge of a wide range of Information Technology systems and a deep understanding of the inherent security risks associated with these technologies;

· Understanding of information security principles and best practice (e.g., ISO27001 and ISF Standards of Good Practice for Information Security);

Technical / Professional Skills

· VAPT

· Infrastructure Security (Nessus, Qualys)

· Risk assessment

· Application security

· Security Audit

Non-Technical / Soft Skills

· Ability to understand and assess technology systems and applications from both a technical and business

· function perspective;

· Ability to communicate business and technical risk to all levels of audience;

· Excellent interpersonal skills with the ability to build and influence teams; and self-motivated

· Strong technical abilities, combined with business acumen;

· Ability to present security topics to a non-technical audience and presenting the business value of security;

GOOD TO HAVE

· Understand IT security and infrastructure technology

· Understand IT service management

· A good understanding of IT networking and access management concepts

· Prior experiences in leading an end-to-end IT Audit with COBIT framework and ITIL practices.

Job Description & Requirements

Responsibilities

•Work closely with the senior IT Services stakeholders to ensure that appropriate security guidance is provided to support project delivery;

•Input in to the design and implementation of standards, policies, guidelines and appropriate architectural principles to ensure the firm’s cyber security goals continue to be met;

•Provide risk based direction in conjunction with IT Services for future system enhancements in line with the overall firm’s strategy;

•Recognize potential opportunities for enhancing the firm’s security, ensuring minimal impact to practitioners;

•Provide subject matter expertise to support business relationship management functions.

•Take ownership and ensure Governance, Policy and Procedures in relation to Management of Information

Security meets agreed standards and Technology Risk Assurance

•Develop a culture of in-depth understanding as to why security testing is required at both business and internal team level;

•Analysis of information protection technologies and processes to identify technology security weaknesses;

•Lead ongoing risk assessments of data processing systems to confirm the design of logical controls are effective and meet regulatory and legal requirements; and

•Provide quality reports to summarize test activities, including objectives, planning, methodology, results, analysis and recommendations to both technical and non-technical audiences. From the output of the reports provide suggested approaches to enhance further.

•Provide oversight and guidance during security incidents and investigations, ensure RCA is undertaken and input suggested approaches to deal with lessons identified

•Assist in the enhancement of delivery and management of key technology security platforms.

•Provide continuous improvement to the Technology Security function;

•Collaborate with IT Services to develop and maintain secure technology solutions; and

•Actively contribute to the overall Ogier risk management framework reporting to the Head of Risk & Compliance ensuring consistency in the advice we provide to the business.

•Prepare Monthly reports

•Provide Internal and External Audit Support.

• Experience on Windows Server and Networking

• Knowledge on Azure SAAS

Essential Requirements (Skills Requirements)

· A Bachelor’s degree in Information Technology, Information Systems Security, Cyber Security related or IT related equivalent. Years of Experience

· Minimum 6 to 8 years of IT & Security Experience

· Preferred industry qualifications - CISSP / CISA / CRISC / or equivalent

· Broad knowledge of a wide range of Information Technology systems and a deep understanding of the inherent security risks associated with these technologies;

· Understanding of information security principles and best practice (e.g., ISO27001 and ISF Standards of Good Practice for Information Security);

Technical / Professional Skills

· VAPT

· Infrastructure Security (Nessus, Qualys)

· Risk assessment

· Application security

· Security Audit

Non-Technical / Soft Skills

· Ability to understand and assess technology systems and applications from both a technical and business

· function perspective;

· Ability to communicate business and technical risk to all levels of audience;

· Excellent interpersonal skills with the ability to build and influence teams; and self-motivated

· Strong technical abilities, combined with business acumen;

· Ability to present security topics to a non-technical audience and presenting the business value of security;

GOOD TO HAVE

· Understand IT security and infrastructure technology

· Understand IT service management

· A good understanding of IT networking and access management concepts

· Prior experiences in leading an end-to-end IT Audit with COBIT framework and ITIL practices.

Skills (Key Words)

VAPT,Infra security, Security architecture review, Application Security

Job Description & Requirements

Responsibilities

•Work closely with the senior IT Services stakeholders to ensure that appropriate security guidance is provided to support project delivery;

•Input in to the design and implementation of standards, policies, guidelines and appropriate architectural principles to ensure the firm’s cyber security goals continue to be met;

•Provide risk based direction in conjunction with IT Services for future system enhancements in line with the overall firm’s strategy;

•Recognize potential opportunities for enhancing the firm’s security, ensuring minimal impact to practitioners;

•Provide subject matter expertise to support business relationship management functions.

•Take ownership and ensure Governance, Policy and Procedures in relation to Management of Information

Security meets agreed standards and Technology Risk Assurance

•Develop a culture of in-depth understanding as to why security testing is required at both business and internal team level;

•Analysis of information protection technologies and processes to identify technology security weaknesses;

•Lead ongoing risk assessments of data processing systems to confirm the design of logical controls are effective and meet regulatory and legal requirements; and

•Provide quality reports to summarize test activities, including objectives, planning, methodology, results, analysis and recommendations to both technical and non-technical audiences. From the output of the reports provide suggested approaches to enhance further.

•Provide oversight and guidance during security incidents and investigations, ensure RCA is undertaken and input suggested approaches to deal with lessons identified

•Assist in the enhancement of delivery and management of key technology security platforms.

•Provide continuous improvement to the Technology Security function;

•Collaborate with IT Services to develop and maintain secure technology solutions; and

•Actively contribute to the overall Ogier risk management framework reporting to the Head of Risk & Compliance ensuring consistency in the advice we provide to the business.

•Prepare Monthly reports

•Provide Internal and External Audit Support.

• Experience on Windows Server and Networking

• Knowledge on Azure SAAS

Essential Requirements (Skills Requirements)

· A Bachelor’s degree in Information Technology, Information Systems Security, Cyber Security related or IT related equivalent. Years of Experience

· Minimum 6 to 8 years of IT & Security Experience

· Preferred industry qualifications - CISSP / CISA / CRISC / or equivalent

· Broad knowledge of a wide range of Information Technology systems and a deep understanding of the inherent security risks associated with these technologies;

· Understanding of information security principles and best practice (e.g., ISO27001 and ISF Standards of Good Practice for Information Security);

Technical / Professional Skills

· VAPT

· Infrastructure Security (Nessus, Qualys)

· Risk assessment

· Application security

· Security Audit

Non-Technical / Soft Skills

· Ability to understand and assess technology systems and applications from both a technical and business

· function perspective;

· Ability to communicate business and technical risk to all levels of audience;

· Excellent interpersonal skills with the ability to build and influence teams; and self-motivated

· Strong technical abilities, combined with business acumen;

· Ability to present security topics to a non-technical audience and presenting the business value of security;

GOOD TO HAVE

· Understand IT security and infrastructure technology

· Understand IT service management

· A good understanding of IT networking and access management concepts

· Prior experiences in leading an end-to-end IT Audit with COBIT framework and ITIL practices.

Skills (Key Words)

VAPT,Infra security, Security architecture review, Application Security

Job Description & Requirements

Responsibilities

•Work closely with the senior IT Services stakeholders to ensure that appropriate security guidance is provided to support project delivery;

•Input in to the design and implementation of standards, policies, guidelines and appropriate architectural principles to ensure the firm’s cyber security goals continue to be met;

•Provide risk based direction in conjunction with IT Services for future system enhancements in line with the overall firm’s strategy;

•Recognize potential opportunities for enhancing the firm’s security, ensuring minimal impact to practitioners;

•Provide subject matter expertise to support business relationship management functions.

•Take ownership and ensure Governance, Policy and Procedures in relation to Management of Information

Security meets agreed standards and Technology Risk Assurance

•Develop a culture of in-depth understanding as to why security testing is required at both business and internal team level;

•Analysis of information protection technologies and processes to identify technology security weaknesses;

•Lead ongoing risk assessments of data processing systems to confirm the design of logical controls are effective and meet regulatory and legal requirements; and

•Provide quality reports to summarize test activities, including objectives, planning, methodology, results, analysis and recommendations to both technical and non-technical audiences. From the output of the reports provide suggested approaches to enhance further.

•Provide oversight and guidance during security incidents and investigations, ensure RCA is undertaken and input suggested approaches to deal with lessons identified

•Assist in the enhancement of delivery and management of key technology security platforms.

•Provide continuous improvement to the Technology Security function;

•Collaborate with IT Services to develop and maintain secure technology solutions; and

•Actively contribute to the overall Ogier risk management framework reporting to the Head of Risk & Compliance ensuring consistency in the advice we provide to the business.

•Prepare Monthly reports

•Provide Internal and External Audit Support.

• Experience on Windows Server and Networking

• Knowledge on Azure SAAS

Essential Requirements (Skills Requirements)

· A Bachelor’s degree in Information Technology, Information Systems Security, Cyber Security related or IT related equivalent. Years of Experience

· Minimum 6 to 8 years of IT & Security Experience

· Preferred industry qualifications - CISSP / CISA / CRISC / or equivalent

· Broad knowledge of a wide range of Information Technology systems and a deep understanding of the inherent security risks associated with these technologies;

· Understanding of information security principles and best practice (e.g., ISO27001 and ISF Standards of Good Practice for Information Security);

Technical / Professional Skills

· VAPT

· Infrastructure Security (Nessus, Qualys)

· Risk assessment

· Application security

· Security Audit

Non-Technical / Soft Skills

· Ability to understand and assess technology systems and applications from both a technical and business

· function perspective;

· Ability to communicate business and technical risk to all levels of audience;

· Excellent interpersonal skills with the ability to build and influence teams; and self-motivated

· Strong technical abilities, combined with business acumen;

· Ability to present security topics to a non-technical audience and presenting the business value of security;

GOOD TO HAVE

· Understand IT security and infrastructure technology

· Understand IT service management

· A good understanding of IT networking and access management concepts

· Prior experiences in leading an end-to-end IT Audit with COBIT framework and ITIL practices.

Skills (Key Words)

VAPT,Infra security, Security architecture review, Application Security

Job Description & Requirements

Responsibilities

•Work closely with the senior IT Services stakeholders to ensure that appropriate security guidance is provided to support project delivery;

•Input in to the design and implementation of standards, policies, guidelines and appropriate architectural principles to ensure the firm’s cyber security goals continue to be met;

•Provide risk based direction in conjunction with IT Services for future system enhancements in line with the overall firm’s strategy;

•Recognize potential opportunities for enhancing the firm’s security, ensuring minimal impact to practitioners;

•Provide subject matter expertise to support business relationship management functions.

•Take ownership and ensure Governance, Policy and Procedures in relation to Management of Information

Security meets agreed standards and Technology Risk Assurance

•Develop a culture of in-depth understanding as to why security testing is required at both business and internal team level;

•Analysis of information protection technologies and processes to identify technology security weaknesses;

•Lead ongoing risk assessments of data processing systems to confirm the design of logical controls are effective and meet regulatory and legal requirements; and

•Provide quality reports to summarize test activities, including objectives, planning, methodology, results, analysis and recommendations to both technical and non-technical audiences. From the output of the reports provide suggested approaches to enhance further.

•Provide oversight and guidance during security incidents and investigations, ensure RCA is undertaken and input suggested approaches to deal with lessons identified

•Assist in the enhancement of delivery and management of key technology security platforms.

•Provide continuous improvement to the Technology Security function;

•Collaborate with IT Services to develop and maintain secure technology solutions; and

•Actively contribute to the overall Ogier risk management framework reporting to the Head of Risk & Compliance ensuring consistency in the advice we provide to the business.

•Prepare Monthly reports

•Provide Internal and External Audit Support.

• Experience on Windows Server and Networking

• Knowledge on Azure SAAS

Essential Requirements (Skills Requirements)

· A Bachelor’s degree in Information Technology, Information Systems Security, Cyber Security related or IT related equivalent. Years of Experience

· Minimum 6 to 8 years of IT & Security Experience

· Preferred industry qualifications - CISSP / CISA / CRISC / or equivalent

· Broad knowledge of a wide range of Information Technology systems and a deep understanding of the inherent security risks associated with these technologies;

· Understanding of information security principles and best practice (e.g., ISO27001 and ISF Standards of Good Practice for Information Security);

Technical / Professional Skills

· VAPT

· Infrastructure Security (Nessus, Qualys)

· Risk assessment

· Application security

· Security Audit

Non-Technical / Soft Skills

· Ability to understand and assess technology systems and applications from both a technical and business

· function perspective;

· Ability to communicate business and technical risk to all levels of audience;

· Excellent interpersonal skills with the ability to build and influence teams; and self-motivated

· Strong technical abilities, combined with business acumen;

· Ability to present security topics to a non-technical audience and presenting the business value of security;

GOOD TO HAVE

· Understand IT security and infrastructure technology

· Understand IT service management

· A good understanding of IT networking and access management concepts

· Prior experiences in leading an end-to-end IT Audit with COBIT framework and ITIL practices.

Skills (Key Words)

VAPT,Infra security, Security architecture review, Application Security

Responsibilities

•Work closely with the senior IT Services stakeholders to ensure that appropriate security guidance is provided to support project delivery;

•Input in to the design and implementation of standards, policies, guidelines and appropriate architectural principles to ensure the firm’s cyber security goals continue to be met;

•Provide risk based direction in conjunction with IT Services for future system enhancements in line with the overall firm’s strategy;

•Recognize potential opportunities for enhancing the firm’s security, ensuring minimal impact to practitioners;

•Provide subject matter expertise to support business relationship management functions.

•Take ownership and ensure Governance, Policy and Procedures in relation to Management of Information

Security meets agreed standards and Technology Risk Assurance

•Develop a culture of in-depth understanding as to why security testing is required at both business and internal team level;

•Analysis of information protection technologies and processes to identify technology security weaknesses;

•Lead ongoing risk assessments of data processing systems to confirm the design of logical controls are effective and meet regulatory and legal requirements; and

•Provide quality reports to summarize test activities, including objectives, planning, methodology, results, analysis and recommendations to both technical and non-technical audiences. From the output of the reports provide suggested approaches to enhance further.

•Provide oversight and guidance during security incidents and investigations, ensure RCA is undertaken and input suggested approaches to deal with lessons identified

•Assist in the enhancement of delivery and management of key technology security platforms.

•Provide continuous improvement to the Technology Security function;

•Collaborate with IT Services to develop and maintain secure technology solutions; and

•Actively contribute to the overall Ogier risk management framework reporting to the Head of Risk & Compliance ensuring consistency in the advice we provide to the business.

•Prepare Monthly reports

•Provide Internal and External Audit Support.

• Experience on Windows Server and Networking

• Knowledge on Azure SAAS

Essential Requirements (Skills Requirements)

· A Bachelor’s degree in Information Technology, Information Systems Security, Cyber Security related or IT related equivalent. Years of Experience

· Minimum 6 to 8 years of IT & Security Experience

· Preferred industry qualifications - CISSP / CISA / CRISC / or equivalent

· Broad knowledge of a wide range of Information Technology systems and a deep understanding of the inherent security risks associated with these technologies;

· Understanding of information security principles and best practice (e.g., ISO27001 and ISF Standards of Good Practice for Information Security);

Technical / Professional Skills

· VAPT

· Infrastructure Security (Nessus, Qualys)

· Risk assessment

· Application security

· Security Audit

Non-Technical / Soft Skills

· Ability to understand and assess technology systems and applications from both a technical and business

· function perspective;

· Ability to communicate business and technical risk to all levels of audience;

· Excellent interpersonal skills with the ability to build and influence teams; and self-motivated

· Strong technical abilities, combined with business acumen;

· Ability to present security topics to a non-technical audience and presenting the business value of security;

GOOD TO HAVE

· Understand IT security and infrastructure technology

· Understand IT service management

· A good understanding of IT networking and access management concepts

· Prior experiences in leading an end-to-end IT Audit with COBIT framework and ITIL practices.

Major, Lindsey & Africa is unmatched in the legal talent we attract, the services that we provide and the global reach we possess. With legal recruiting offices in more than 20 major markets across the United States, EMEA and Asia Pacific, we provide in-depth market insights on a global scale that deliver superior results for clients and candidates.

We are currently looking for Legal Consultant to join our team.

Responsibilities include:

• Review, draft, negotiate and advise on a broad range of commercial contracts and legal documents
• Provide legal advise to the business and operational units of the company
• Work and liaise with the various stakeholders within the company
• Perform other related duties as assigned

The ideal candidate would have:

• A Degree in Law or equivalent
• 8+ years PQE and called to the Singapore or a common law jurisdiction bar
• Strong commercial background, with good knowledge of contract law
• A strong team player with interpersonal skills and the ability to collaborate effectively with personnel at all levels
• Excellent verbal and written communication skills with good attention to detail
• Strong organizational skills and adaptable and flexible with regard to activities undertaken

Please apply and we can have a confidential discussion.

Major, Lindsey & Africa (Singapore) Pte. Ltd.

EA License No. 16S8347

EA Registration No. R24121617

Sygnia is the foremost global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With a team of deep digital combat, leading- edge, purpose-built technology, and enterprise security specialists, it enables companies to proactively build cyber resilience and defeat attacks within their networks. Sygnia is a trusted advisor and service provider of technology and security teams, executives and boards of leading organizations worldwide. Sygnia supports clients at each stage of their security journey, bringing frontline experience and technological acumen to help them be unstoppable in the face of cyber threats.

The company draws on top talent from the ranks of elite military technology units and from across the cyber industry, and has some of the world's top talents in cybersecurity. Described by Forbes as a "cyber security delta force," Sygnia applies technological supremacy, digital combat experience, data analytics, and a business-driven mindset to cyber security, enabling organizations to excel in the age of cyber.

Sygnia is looking for a Cyber Security Consultant to perform a range of expert level services. The successful candidates should have experience both as a security practitioner and security consultant, profound technological cyber knowledge and passion for cyber security. In addition, they should have a service approach, excellent communication skills and the ability to learn and work with the best in the field.

Main Responsibilities:

• Evaluate the state of security, configurations, and security strategy, identifying gaps and opportunities and anticipating needs
• Consult in cyber security engagements, including development of a cyber security plans and design implementation, and provide guidance on building security
• Recommend cyber security strategies, policies, and procedures
• Develop and support clients with internal training to assure deep understanding of fundamental cyber security practices, risks, and recommended mitigation tactics
• Create expert-level deliverables, and present results of the assessment to a broad range of clients and design plans to address specific cyber risks and vulnerabilities
• Collaborate with the cyber experts’ team in the development and implementation of cyber assessment tools, services, and best practices
• At least 5 years of experience as a cybersecurity professional, including:
• Knowledge of security design and architecture.
• Hands-on technical configuration and implementation of cyber security standards and controls.
• At least 2 years in professional services consulting delivering value directly to organizations, or demonstrated experience delivering to internal clients.
• At least one or comparable skills and experience: CISSP, OSCP, CCIE, CCSE, CEH, CCDP, CSA; or equivalent military tech training.
• Demonstrated experience working in IT, security engineering, application security, or similar positions in which you have gained profound network security understanding (routers, firewalls and NG FW & IPS, proxies, WAF, DLP, AD, GPO, EDR, cloud security).
• Knowledge of authentication protocols, Active Directory, Exchange and Office365, Azure, GCP and AWS knowledge – advantage.
• Proven Presentation skills and client facing experience, including the ability to document and explain technical information in a concise, understandable manner.
• Ability to work in parallel on multiple projects under tight deadline.
• Fluent English (written and spoken). Native English speaker - an advantage.
• Academic degree, preferably in Computer Sciences or a technical discipline – an advantage.
• Willing to travel domestically and abroad.

At KPMG, your long-term future is every bit as important to us as it is to you. That’s why our aim is to give you experiences that will stay with you for a lifetime. Whether it’s great training and development, working across functional sectors, mobility opportunities or corporate responsibility volunteering activities – you’ll gain a wealth of experiences on which to build a rewarding career. We’re proud of our culture – it’s one that recognises hard work, encourages new ways of thinking and embraces diversity and inclusion. We have an innovative spirit which inspires what we do and how we do it – striving to be better lies at the heart of who we are.

KPMG Cybersecurity professionals assist clients to address their concerns around Confidentiality, Integrity, and Availability of their technology, business systems, and information assets. Using a holistic view of how Technology and Business integrate, the Cyber team performs technology-risk focused assessments, technology compliance, IT/operational process reviews, and design of information risk & cyber security solutions.

Cyber team members regularly interact with C-Suite clients, such as Chief Executive Officer (CEO), Chief Information Security Officer (CISO), Chief Information Officer (CIO), Chief Operating Officer (COO), Chief Risk Officer (CRO) and their direct reports. Hence, a client centric mind-set, understanding of IT within a Business context, and well-developed communication skills are essential.

The role involves:

As a director within the Cyber Defence team, you will lead red team activities, improve the team's capabilities, interact with organizations and advise them on their security programs. You will mature and improve the outcomes of the red team and other ethical hacking services as well as coaching and leading team members on their assignments, developing them and growing the team’s capability.

• Engage with clients to identify business opportunities for red teaming, penetration testing and other technical assurance activities, and working with clients to scope and deliver those services.
• Being a spokes person for KPMG being able to represent KPMG and our Cyber team to a broad range of clients and other stakeholders.
• Fulfilling a leadership role within the Cyber Defence team, taking responsibility for driving enchantments of our services, processes, knowledge and skills.
• Leading complex red teaming and other technical engagements, as the primary contact taking responsibility for delivery on time and to budget.
• Horizon scanning looking for opportunities to develop new techniques for use in our work and opportunities to enhance our services and develop new services.
• Working with team members, you will develop services new services for delivery to clients and take responsibility for maintenance of existing services.
• You will act as a technical leader to the team, providing formal training and mentoring to the team.
• Being comfortable with associated disciplines of Security Policy and Governance

The ideal candidate should possess:

• Bachelor’s degree in computer science, Computer/Electrical Engineering, Information Technology or equivalent.
• A highly motivated individual in information security and excellent communicator with strong analytical and good problem-solving skills.
• Minimum 8 years of relevant experience in ethical hacking and red teaming.
• In depth knowledge of ethical hacking tactics, techniques, and procedures (TTPs) used by a threat actors to develop threats and engage in cyberattacks and the ability to emulate these TTPs as part of red teaming and ethical hacking engagements.
• Proven technical knowledge gained through demonstratable experience, training and professional qualifications, as a minimum OSCP and preferably high qualifications such as CCSAM, CTL, OSEP and OSED.

*This role requires a security clearance. Eligible individuals will be prioritised.

Our Red Team Offensive Security Consultants work with organisations and technical teams to perform a variety of assessments and provide practical advice to keep them secure. Red team members are generally familiar with and apply themselves to most aspects of cybersecurity but specialize in web application security, code reviews, architecture design, network security, attack simulations or even specialist fields such as mainframe or SCADA systems. They help to ensure cybersecurity issues and identified along with their associated risks, and guide organisations to manage this risk in a practical manner.

You will be:

• Serve as an engagement manager, subject matter expert and team lead for the team and our engagements.
• Mentoring junior consultants and peers to become the subject matter experts – just like yourself;
• Designing solutions to customers problems and helping them to choose Privasec;
• Being an ambassador for your area or expertise, the profession and Privasec; and
• Taking ownership and accountability for engagements you manage.

In addition to offering great career growth opportunities, the position offers benefits such as training and certification opportunities, flexible working arrangement, a good working culture and the opportunity to become a well-rounded manager whilst working with a team of like-minded, friendly people.

The responsibilities of the Senior Consultant include :

• Manage the RED team members to ensure the performance and happiness of your unit with a collaborative, open and professional culture;
• Act as the engagement manager for several concurrent RED engagements (ensure the quality, suitability and timeliness of engagements and provide the first point of escalation for project issues);
• Manage staff and keep a collaborative, open and professional culture;
• Provide mentorship and support to peers and subordinates and help in their professional growth (technical and consulting);
• Deliver individual engagements yourself to maintain your skills set and consciously acquire new competences though formal training and self-development;
• Pass certifications as required to maintain your status as an expert in your field (in addition to blog post, training, CTFs and presentations);
• Help improve internal processes, building towards efficient and standardised delivery for Privasec services;
• Lead the recruitment of local technical resources;
• Attend industry events regularly to learn, earmark potential recruits, network and identify opportunities;
• Support commercial opportunities when relevant; and
• Lead the execution of the OFFSEC strategy, working closely with the senior management.

Experience and Certification

• 4- 8 years of client facing consulting experience
• Must have - OSCP and CREST CRT
• Nice to have: OSCE or CREST CCT or other specialist certifications
  Can we maybe consolidate it to be.

Mandatory Skills: Cybersecurity

Preferred Skills: DAM (Imperva, IBM Guardium), SIEM SOAR (Qradar, Splunk, Palo, Google Secops, Devo)

RQ24-02333-1-1 - Security Consultant

Job Overview:

The Cyber Security consultant will design, implement, test, document, and hand over security solutions with a focus on Security by Design principles. The role includes deploying and managing SIEM, SOAR, UEBA, TIPs, DAM, and cloud security across AWS and Azure environments. Additionally, the engineer will use Terraform and other IaC tools to automate security infrastructure, conduct various security tests (SSAT, OSAT, IAT, UAT), and perform system hardening to safeguard systems against vulnerabilities.

Key Responsibilities:

• Security by Design: Integrate security into all stages of system design and development. Perform risk assessments and threat modelling when required.
• Implementation & Automation: Deploy SIEM, SOAR, UEBA, and cloud security solutions. Automate security infrastructure with Terraform and maintain consistent security deployments.
• Testing & Hardening: Conduct System Security Acceptance Testing (SSAT), Operational Security Acceptance Testing (OSAT), Integration Acceptance Testing (IAT), User Acceptance Testing (UAT), and system hardening to ensure secure configurations.
• Documentation & Handover: Create detailed documentation for security controls and processes. Provide training and handover to the operations team, with operational guides for security management.
• Log Management & Monitoring: Implement log management systems to centralize security event data and monitor cloud environments with AWS and Azure tools.

Added Advantage - Experience in Qradar, Splunk, Google Secops.

We’re Hiring : Public Relations Manager

We are looking for a strategic, detail-oriented individual to join our team as a Security Consultant with a focus on Governance, Risk, and Compliance (GRC). Your responsibilities will include assessing security risks, ensuring compliance with regulatory standards, and developing policies to enhance the security posture of our organisation and clients.

As the Security Consultant (GRC), you should have excellent attention to details, strong strategic planning skills, and the ability to navigate complex regulatory environments. Consultants must possess good communication and interpersonal skills, confident to engage with people at all levels, along with good knowledge of security frameworks and compliance standards.

Security Consultant Responsibilities:

• Conducting security risk assessments to identify, quantify, and prioritise security risks in line with compliance requirements.
• Developing and implementing security policies and procedures to address regulatory and compliance standards/guidelines (e.g., ISO 27001, NIST, CIS, PDPA, OSPAR, MAS Guidelines, IM8).
• Creating risk treatment plans and advising on best practices for mitigating risks and achieving compliance.
• Coordinating and collaborating with a team of security specialists, assigning tasks related to GRC objectives, and providing guidance.
• Meeting with clients to discuss risk assessments, regulatory compliance, and governance requirements, presenting findings and recommended controls.
• Performing regular security audits and compliance checks, recommending corrective actions to improve security posture.
• Compiling and presenting detailed reports on risk assessments, compliance status, and audit results.
• Providing guidance on enhancing current security policies and protocols to strengthen governance and risk management.
• Remaining up to date with industry standards, regulations, and best practices in GRC, including continuous learning on evolving security frameworks.
• Training staff on compliance requirements, risk management practices, and security policies.

Security Consultant Requirements:

• A Bachelor's degree in Cybersecurity, Information Technology, or a related field.
• Solid understanding of GRC frameworks (e.g., ISO 27001, NIST, CIS, IM8, OSPAR, MAS Guidelines).
• Excellent skills in policy development, risk assessment, and compliance management.
• Strong communication skills, with the ability to explain complex regulatory requirements in an accessible way.
• Highly analytical, with excellent organisational and strategic planning skills.
• A detail-oriented, objective, professional and ethical approach to security and compliance.
• Good teamwork and time management skills.

This is a permanent, full-time role, as an individual contributor in a team of 5.

Responsibilities

• Define, enhance and demonstrate company’s point of view and delivery towards our approach of cybersecurity-focused services
• Guide the end-users on Governance, Risk and Compliance aspects of Security Management
• Work with various teams within Client to fulfill security requirements to establish compliance and document risks
• Participate in Project activities and guide Project teams to remediate new and outstanding issues
• Support Auditors and Audits in providing relevant details necessary to show Compliance statuses
• Participate in overall security governance programs and provide quality of service to ensure security standards
• Participate in design activities and provide various solutions to ensure security is not compromised at various phases of the program lifecycle
• Recommend and provide templates where possible for end users to assist in minimising the security risks
• Responsible for procedures and controls to assure compliance with applicable regulatory and legal requirements, and good business practices
• Establish and oversee formal risk analysis and self-assessment programs for various Information Services processes
• Ensure compliance with Banking Regulatory Compliance (BFSI), HIPAA, PCI and the NC Identify Theft law
• Establish and oversee a formal vulnerability and testing program
• Manage to remediate new and outstanding issues; track security-related issues
• Maintain expertise on security trends through training, research and development in order to mitigate exposures
• Manage, coach, lead and develop a small/mid-staff GRC personnel

Requirements

• Bachelor's degree in computer engineering
• At least 10 years of experience as Principal Consultant, with at least 5 years as a Consultant in Cybersecurity
• Hands-on experience in GRC implementation
• Understanding of cybersecurity concepts and risks
• Knowledge on CIS security standards and guidelines in guiding the team for establishing compliance
• Knowledge and understanding of the attack vectors to provide solutions during design phase to the programs on minimising them with appropriate security controls
• Strong familiarity with industry frameworks such as ISO standards, GDPR, NIST, PCI, DSS, CISO

Preferred Requirements

• CISA certified
• CISSP certified
• CRISC certified