Total 13 hr manager job vacancies in Legal / Public / Security category in d18 tampines pasir ris

Interested applicants are invited to apply directly at the NUS Career Portal

Your application will be processed only if you apply via NUS Career Portal

We regret that only shortlisted candidates will be notified.

Job Description

1. Policy implementation: Review and update policy on research security and collaborate with research units to implement related procedures and protocols.
2. Risk Assessment: Conduct regular risk assessments of research projects and facilities to identify potential security vulnerabilities and develop mitigation strategies through review of research agreements and related documents.
3. Training and Awareness: Develop awareness/training program for faculty, staff, and students on research security best practices, compliance requirements, and incident reporting procedures.
4. Point of Contact: Serve as the primary point of contact for internal and external stakeholders for research security matters. Work closely with various departments, including IT, compliance, legal, and research units to promote a culture of security and compliance in research activities.
5. Monitoring and Reporting: Monitor compliance with research security policy, perform related analysis and prepare reports for senior management on related activities. Support scheduled compliance audit/inspection on research security readiness and mitigation measures compliance and recommend improvements and follow up actions.

Qualifications

• Recognised degree in science or engineering discipline preferred;
• At least 5 years’ working experience in research management/administration or similar roles in compliance;
• Experience in research related functions in higher education sector, or research contracts management will be an advantage;
• Knowledge or experience in reviewing and developing policies and procedures;
• Excellent communication, analytical, and organizational skills and ability to work collaboratively in a diverse environment; strong problem-solving capabilities;
• Meticulous, independent and organised individual with the ability to maintain confidentiality and discretion as may be necessary in the job function.

Product area

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

Job description

Google's infrastructure needs go far beyond server computers. As Google's products and services scale the globe, the Strategic Negotiation team works behind the scenes to secure infrastructure for Google's future -- everything from underwater cables to physical data center space. As a Strategic Negotiator, you combine your deep market knowledge of a given sector with tech industry savvy to negotiate cost-effective solutions to support Google's infrastructure growth. You'll work with specific project teams on negotiating deals, managing vendor and partner relationships and presenting deal recommendations to our Tech leadership. Your successful negotiations have the potential to save Google millions of dollars in operating costs and impact every part of the business.

Additional job description

The Public Affairs team focuses on telling our story to decision-makers, opinion formers, and data center communities. We are focused on creating inclusive, strategic, and scalable solutions that have authentic and universal impact.

As the Public Affairs Manager for APAC, you will advise on how to shape our data center initiatives in a way that is aligned to state and local government priorities. You will lead the maximization of partner opportunities to partner with state and local institutions and tell the story of our data center commitment.

Qualifications

Job responsibilities

• Provide public policy through leadership, assist in building our workforce development pipeline, and build relationships within Google and externally by networking.
• Manage our economic, sustainability, and social contributions to create connections between technology and modern life.
• Provide region specific business advisory support for economic development agreements, including commercial review of terms, tax implications and infrastructure funding.
• Assist with various economic development and market advocacy team projects including data analytics and data hygiene.
• Collaborate with cross-functional partners including, but not limited to, tax, finance, legal, policy, and communications on a variety of economic development matters.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 10 years of experience working with public policy teams and cross-functional stakeholders.
• Experience with economic development issues such as direct or indirect taxes, tax policy, or infrastructure development.

Preferred qualifications

• Experience in indirect taxes, economic development policy, infrastructure development, agreement drafting, and presentation development. Experience with data center real estate markets.
• Experience developing and executing strategies to deliver exceptional solutions.
• Excellent attention to detail and political/communication skills.
• Ability to identify opportunities and areas for improvement, and operate in a fast-paced environment.
• Ability to think outside the box and propose commercially and technically creative solutions.
• Ability to comfortably work in ambiguous, collaborative, and fast-paced environments.

Implement security operations strategy

• Contribute to the definition of the overall security strategy

• Align security operations functions with the organisation’s overall business objectives

• Advise senior leaders on critical issues that may affect corporate security objectives

• Advise the design and implementation of security policy and controls

• Provide expertise on security technologies and innovative security concepts

• Provide technical and operational oversight for security tool deployment and implementation

Operate/Monitor security systems

• Develop plans for operating/monitoring security systems (e.g. endpoint security tools, firewalls, etc)

• Guide the identification and measurement of critical security operations metrics

• Develop detection and alerting rules

• Review/approve firewall rules

• Review/approve changes on AV systems

• Monitor levels of service of the security operations

• Present periodic status reports to management

Security planning, review & compliance

• Coordinate ongoing reviews of existing security programs/protocols and planned upgrades

• Monitor compliance to security policies, regulations, rules and norms

• Participate in reviews/gap analysis of posture and compliance and follow-up with proposed treatment plan

• Authorised/Unauthorised software installation reviews

• Drive continuous improvement of security operations

Respond to security incidents

• Set internal guidelines for effective processing and escalation of incidents

• Review reports on incidents and breaches

• Develop contingency and disaster recovery plans for specific security incidents

• Coordinate prioritisation of alarms and resources for incident responses

• Oversee the development of emergency protocols

• Recommend systems and procedures for the prevention, detection, containment and correction of security breaches

• At least 15 years' of experience in IT Security

• Strong knowledge and experience in End User Computing, Server, Network and Security spaces

• Strong experience in supporting Windows, Linux, Vulnerability scanning tools, Firewalls and WAF

• Preferable experience in cloud-native security platforms and offerings from AWS or Azure

• Knowledge of patch management for OS and security products (Firewalls, Windows, Linux)

• Strong knowledge of endpoint security tools

• Preferred Knowledge of vulnerability assessment tools and techniques

• Preferred knowledge in conducting risk assessments

• Preferred Security/ITIL/Vendor certifications including but not limited to: (Fortinet NSE4, CISSP, CCSP, CEH, ITIL, CCNA-Security)

Job requirement

-Minimum of 10 years in technology/software service management

-Professional certifications in information security, such as CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager), are highly desirable.

-In-depth experience of information security principles, practices, and technologies.

-Knowledgeable about (Java, Sprint, React, Cloud (Azure/Aws), SQL Server, Unix, Networking)

-Individual with strong problem-solving skills and excellent customer service

-Hands-on experience in technical support and incident management with any certifications a plus (eg ITIL)

-To be proactive in improving our tools and processes

-Knowledge of ZOHO, Jira and confluence a plus.

-Collaborate with your wider team to work shift to support our global member base.

-An individual that has strong written and verbal communications

-A strong work ethic and ability to navigate and thrive in fast-changing environment.

Test Engineering Services (TES) at Synapxe is embarking on a journey to constantly transform its services by exploiting state-of-the-art technologies and tools to enhance TES’ ability to offer specialized testing services to its stakeholders. TES is passionate about making an impact with lasting change and we aim to provide our stakeholders with automated and optimized testing solutions to not only help them speed-up testing but produce accurate, reliable, and repeatable results.

TES is planning to implement and roll out a Dynamic/Interactive Application Security Testing (D/IAST) solution. This will act as a control measure proposed for implementation in response to Secured-by-Design Framework v1.0 as recommended by CSA’s Cybersecurity Code of Practice (CCoP).

As an Application Security Testing Specialist, you will be responsible for:
• Leading the request for proposal from a technical perspective to procure a D/IAST solution.
• Defining and documenting technical product requirements and specifications for a D/IAST solutions, evaluating the solution proposals to perform fit/gap analysis, determining the detailed evaluation criteria and producing recommendations to prevent, detect and analyse security threats and weaknesses in the running application.
• Leading the implementation and roll out of the identified D/IAST solution; work with the senior manager and product vendor to plan, set-up, on-board, test and deploy the D/IAST solution.
• Automated application security using the D/IAST tool to perform application security testing, gather and understand reports, assess potential security vulnerabilities, work closely with the application developers/vendors to resolve any vulnerabilities, and present the risks to the business for acceptance or mitigation.
• Removing false positives from the reports and working closely with the development/test teams to automate test and embed security testing in the CI/CD pipe line.
• Developing comprehensive and accurate reports and presentations for both technical and management audiences and effectively communicating the findings and remediation strategies.
• Recognising and safely utilising attacker tools, tactics, and procedures
• Maintaining and performing routine maintenance on D/IAST monitoring servers, reports repository, agents, etc.

• 8 years of experience with SAST/DAST/IAST/RASP methodologies and technologies to catch security flaws in the software?
• Hands-on experience with a wide-range of security tools such as MF Fortify, WebInspect, Contrast Security Assess and Protect, IBM AppScan, Checkmarx, MS Threat Modeling, BurpSuite, etc.
• Eager to collectively learn, share and solve problems within the area of application security testing in the area of healthcare domain?
• Consistent attention to details and work under pressure to achieve agreed targets/goals
• Work with intra-teams, and building rapport with the stakeholders and be able to manage difficult people
• Think out of the box and carries the courage to try and implement unconventional approach to deliver solutions

Job Responsibilities

・Support HQ designated project and business from legal perspective

in collaboration with legal members global wide

・Implement process for global distribution of Uvance offerings

・Support global and local deals including M&A projects

・Support Fujitsu’s business in alignment with HQ legal and other

local/global functions in an effective and timely manner

Job Requirements

・At least 10 years’ of working experience

・Experience in corporate/commercial law and contract negotiations

・Have working experience in a law firm or in-house legal and

compliance counsel

・Experience in overseeing legal, compliance, risk management and

intellectual property in a regional role

・Experience working in a Japanese company and liaising with Japanese

HQ counterparts

・Degree or above with a major in law from a reputable law school

Responsibilities:

• Actively develop new business and participate in new business pitches
• Develop and execute communications strategy and tactics for clients
• Set up framework for monitoring and measuring performance for clients
• Develop materials required for clients including but not limited to: briefing books, press releases, media pitches, thought leadership articles
• Act as point of contact for clients; cultivate and maintain cordial client relationships, and ensure high level of client satisfaction
• Manage client accounts independently with little guidance from directors
• Cultivate and maintain strong media relationships not limited to target markets
• Manage account budgets and ensure account profitability
• Manage and mentor SAEs, AEs and interns
• Be able to troubleshoot bottlenecks in processes and workflow, and provide solutions to make internal improvements
• Actively build firm visibility through networking opportunities, develop and execute internal PR strategy

Requirements:

• 3 or more years of public relations/integrated communications experience in an agency with proven track record in securing new business and accounts management
• Able to manage given budgets independently
• Strong organisational, project management and leadership abilities
• Experience in managing one or more account executives and/or intern
• Solution-minded with an open mind to embrace new ideas and methodologies
• Strategic thinker
• Detail-oriented
• An interest in emerging markets such as technology and esports
• Able to embrace the startup culture and willingness to be hands-on to grow with the agency
• Uphold professional conduct and DIFY’s core values
• Web 3 knowledge preferred
• Gaming knowledge preferred
• Meltwater certified preferred
• Team management skills

Bonus:

Knowledge in Technology/Fintech/Blockchain/Web3

Only shortlisted candidates will be notified

Responsibilities:

• Provide daily counseling on employment, contingent workforce, and HR compliance issues across APAC, especially in South East Asia.
• Address areas including recruiting and hiring, employee management, CWF management, terminations, leaves and benefits, wage and hour compliance, and internal HR operations.
• Review, revise, and update employment-related agreements and HR policies, and guide HR and business teams on their implementation.
• Manage arbitration related to employee equity compensation and advise on equity compensation matters, including plan design, establishment, administration, and management.
• Offer training to internal stakeholders on employment and Employee Stock Ownership Plan (ESOP) issues.

Requirements:

• Legal qualification from Singapore or an international jurisdiction.
• Minimum 10 years of post-qualification experience in employment or equity compensation law, ideally with experience in a large law firm or in-house legal department.
• Significant experience in APAC employment laws is preferred.
• Experience in employment litigation/arbitration is a plus; experience with equity compensation-related litigation/arbitration is highly advantageous.
• Willingness to travel internationally to APAC countries.

If you are interested, kindly apply through mycareersfuture.

I regret to share that only shortlisted candidates will be notified.

www.dadaconsultants.com

EA Registration Number: R21100604

Data provided is for recruitment purposes only

Business Registration Number: 201735941W.

Licence Number: 18S9037

JOB DESCRIPTION

Google's infrastructure needs go far beyond server computers. As Google's products and services scale the globe, the Strategic Negotiation team works behind the scenes to secure infrastructure for Google's future -- everything from underwater cables to physical data center space. As a Strategic Negotiator, you combine your deep market knowledge of a given sector with tech industry savvy to negotiate cost-effective solutions to support Google's infrastructure growth. You'll work with specific project teams on negotiating deals, managing vendor and partner relationships and presenting deal recommendations to our Tech leadership. Your successful negotiations have the potential to save Google millions of dollars in operating costs and impact every part of the business.

ADDITIONAL JOB DESCRIPTION

The Public Affairs team focuses on telling our story to decision-makers, opinion formers, and data center communities. We are focused on creating inclusive, strategic, and scalable solutions that have authentic and universal impact.

As a Public Affairs Manager for APAC and India, you will advise on how to shape our data center initiatives in a way that is aligned to state and local government priorities. You will lead the maximization of partner opportunities to partner with state and local institutions and tell the story of our data center commitment.

Qualifications

JOB RESPONSIBILITIES

• Enhance and safeguard the data center lifecycle.
• Manage our economic, sustainability, and social contributions to create connections between technology and modern life.
• Execute our community grants programs while building our public policy and community engagement activities in an organized way.
• Provide public policy through leadership, assist in building our workforce development pipeline, and build relationships within Google and externally by networking.

MINIMUM QUALIFICATIONS

• Bachelor's degree or equivalent practical experience.
• 6 years of experience negotiating and structuring agreements or leading business development.
• At least 6 years of experience working on political communications or technology policy issues within government, think tanks, public interest groups, private sector, or relevant industry associations.
• Ability to communicate in Hindi fluently to drive discussions with key stakeholders and local communities.

PREFERRED QUALIFICATIONS

• Experience working with public policy teams and cross-functional stakeholders.
• Experience developing and executing strategies to deliver exceptional solutions.
• Experience executing cross-functional projects.
• Ability to identify opportunities and areas for improvement, and operate in a fast-paced environment.
• Excellent attention to detail and political/communication skills.

PRODUCT AREA

At Google we work hard to earn our users’ trust every day. Trust & Safety is Google’s team of abuse fighting and user trust experts working daily to make the internet a safer place. We partner with teams across Google to deliver bold solutions in abuse areas such as malware, spam and account hijacking. A diverse team of Analysts, Policy Specialists, Engineers, and Program Managers, we work to reduce risk and fight abuse across all of Google’s products, protecting our users, advertisers, and publishers across the globe in over 40 languages.

JOB DESCRIPTION

Fast-paced, dynamic, and proactive, YouTube’s Trust & Safety team is dedicated to making YouTube a safe place for users, viewers, and content creators around the world to belong, create, and express themselves. Whether understanding and solving their online content concerns, navigating within global legal frameworks, or writing and enforcing worldwide policy, the Trust & Safety team is on the frontlines of enhancing the YouTube experience, building internet safety, and protecting free speech in our ever-evolving digital world.

ADDITIONAL JOB DESCRIPTION

As a Policy Enforcement Manager, you will be responsible for working with global teams to prevent violative content from appearing on the site, and build a safer online experience for all users around the world. You will ensure that we improve our understanding of trends and risks to content safety on YouTube, including understanding the abusive patterns of bad actors to help prevent and remove offensive content as quickly as possible.

In this role, you will evaluate abuse trends and quality with the vendor operations teams, and you will develop creative solutions to address quality, workflows, and processes. You will also review decisions about the appropriateness of different content, including considerations of cultural and political sensitivities. You will turn learning into a succinct, actionable story that often bridges the gap between technical and non-technical teams. You will work non-standard working hours, including on-call rotation work hours.

Qualifications

JOB RESPONSIBILITIES

• Track and monitor performance against key metrics, turning data into digestible and actionable stories for cross-functional teams.
• Manage content escalations, providing data and content-driven insights and implementing solutions. Review graphic, controversial, and offensive content in-line with YouTube’s community guidelines.
• Research and stay up-to-date on key trends and suspicious patterns across policy areas. Ensure effective implementation of policy by drafting guidelines for reviewers.
• Oversee enforcement quality across policy areas, including calibrations with vendor teams. Work cross-functionally, think strategically, and keep the users safe while protecting free speech.
• Provide operational and policy expertise to our Product, Engineering, and User Experience teams. Support the development of automated enforcement solutions.

MINIMUM QUALIFICATIONS

• Bachelor's degree or equivalent practical experience.
• 2 years of experience in data analytics, cybersecurity, technology research, anti-abuse, policy, or related fields.

PREFERRED QUALIFICATIONS

• Experience with SQL and/or spreadsheet software, including using data to drive strategy and business action.
• Experience with identifying abuse trends or working in news or policy.
• Experience working in fields related to suicide prevention and mental health (e.g., researcher, clinician, social worker, non-profit).
• Experience with project management, working with internal or external partners.
• Ability to build relationships with cross-functional stakeholders to drive consensus across geographies.
• Excellent business acumen, influencing, and communication skills.

We are JTI, Japan Tobacco International, and we are present in 130 countries. We have spent years innovating, creating new and better products for the consumers to choose from. This is our business. But not only. Our business is our people. Their talent. Their potential. We believe that when they are free to be themselves, and they are given the opportunity to grow, travel and develop, amazing things can happen.

That’s why our employees, from around the world, choose to be a part of JTI. It is why 80% of employees feel happy working at JTI. And why we’ve been awarded Global Top Employer status, ten years running.

So when you’re ready to choose a career you’ll love, in a company you’ll love, feel free to #JoinTheIdea.

Learn more: jti.com

Global Travel Retail (GTR) is among the largest volume markets in JTI, operating in 160+ countries with 37 brands. We sell JTI products to international travelers in various channels (airports, border shops, ferries, diplomatic shops, etc.) and aspire to become the No.1 Tobacco Company in Travel Retail.

GTR is a highly culturally diverse market with employees from 37 nationalities working across the globe, with the market HQ based in Geneva and several Regional Hubs around the world.

What this position is about – Purpose

The GTR Legal Manager will be responsible for providing legal advice to the GTR business on all legal matters affecting its operations. The aim is to achieve corporate and commercial objectives in a manner that ensures compliance with the law and appropriate monitoring and management of legal risk.

The Legal Manager will be responsible for all legal matters (marketing activities, products regulation, contracts, etc.) for the ASIA and MENEAT Hubs and act as 1st point of contact for the business teams. Active participation in business meetings as well as collaboration with Market and HQ Lawyers and other Legal and Regulatory Affairs functions are key.

What will you do – Responsibilities:

• Performs legal advice on Tobacco regulations to the business teams in the ASIA and MENEAT hubs and to GTR central functions. Performs complex research and analysis of local laws in GTR markets with a focus on product regulation and marketing activities.
• Works in close collaboration with Market Lawyers.
• Analyzes the potential impact of anticipated regulations and actively supports the Corporate Affairs Department in its advocacy efforts
• Responsible for the review, drafting, and legal negotiation of GTR agreements in the Regional hubs he/she is responsible for (e.g. sales and distribution agreements and on Smoking Lounges agreements).
• Supports the development of the GTR Route to Market strategy in these markets
• Works closely with the Legal Director on a variety of topics, such as the implementation and monitoring of JTI's Competition law Policy and International Economic Sanctions. Responsible for the preparation of training materials for these matters, including delivering the necessary training to GTR colleagues
• Closely cooperates with external counsels and ensures the quality of outsourced legal advice as well as cost control/follow-up

Whom are we looking for – Requirements:

• University Degree in Law
• Minimum 8 years of work experience in a law firm and/or multinational corporation
• Capacity to work autonomously and make effective decisions quickly, capacity to prioritize a diverse workload.
• Strong negotiation and excellent communications skills, cultural sensitivity, business and results oriented.
• Demonstrated competence as a practicing lawyer in international business transactions, contracts, distribution, and competition/antitrust areas as well as regulatory issues.
• Experience in the Travel Retail Industry is not required
• Fluency in the English language both written and verbal
• Fluency in Mandarin is an advantage.

PRODUCT AREA

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats.

ADDITIONAL JOB DESCRIPTION

As a Strategic Services Function Manager, you will blend risk assessment, strategic planning, and client collaboration. You will manage a team of cyber security consultants. You'll conduct in-depth cyber maturity assessments, develop forward-thinking strategies, and lead realistic simulations that help clients prepare for and respond to cyber threats.

In this role, you will identify vulnerabilities and develop actionable mitigation plans. You'll empower clients with data-driven insights, enhancing their security posture.

Qualifications

JOB RESPONSIBILITIES

• Manage and inspire a highly skilled team towards surpassing our goals by driving performance and outcomes, while managing workload, scheduling resources, and ensuring the quality of their output.
• Foster expansion in the APAC region for our Strategic Services Practice through the identification and advancement of opportunities, aiding in the creation and development of Statements of Work, and participating in responses to RFPs/RFIs/RFQs. Promote a culture of continuous learning and development within the cyber security practice.
• Perform in-depth assessments to identify and analyse cyber vulnerabilities and threats. Prioritize risks based on their potential impact.
• Craft cyber risk mitigation strategies, ensuring alignment with regulations (e.g., GDPR, ISO 27001, NIST/CIS Controls).
• Collaborate with clients to tailor cyber security solutions. Generate clear reports and presentations explaining risks and mitigation plans. Scope and propose solutions to clients.

MINIMUM QUALIFICATIONS

• Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent practical experience.
• 10 years of experience in cyber security with a risk assessment focus.

PREFERRED QUALIFICATIONS

• Master's degree in a relevant field.
• Professional certifications in cyber security (e.g., CISSP, CISM, CRISC)
• Consulting and/or project management experience, and experience leading cyber security assessments, including Table-Top Exercises (TTX).
• Knowledge of security frameworks (e.g., ISO 27000, NIST CSF).
• Ability to present complex security concepts to varied audiences (e.g., technical and executive).
• Excellent communication and problem solving skills.

At AIA we’ve started an exciting movement to create a healthier, more sustainable future for everyone.

As pioneering innovators for over 100 years, we’re now transforming our organisation to be faster, simpler and more connected. Because we want to be even better equipped to develop digital solutions and experiences that help more people live Healthier, Longer, Better Lives.

To get there, we need people with tech/digital/analytics expertise and passion to help develop positive, sustainable change through digitally enhanced experiences that will impact the lives of millions of people and create a healthier future for everyone.

If you believe in developing a better tomorrow, read on. 

About the Role

WHAT YOU’LL BE DOING:

• This role includes responsibilities of managing 3 team members and overseeing operations, subsidiaries, assigned POA over specific matters and/or other appointments such as Data Protection Officer

• Maintain an oversight of all the alerts from FINTECH, MASNET, Group Cyber SOC for AIASG and provide support to incident response personnel to ensure all deliverables are met within SLAs.

• Maintain an oversight of related security posture and baseline and ensure related vulnerabilities are remediated timely as per established standard to minimize risk exposures.

• Drive local security projects and group security project facilitation.

• Develop and maintain local incident response playbooks and other detection/response related standard operating procedures to ensure compliant to the MAS regulations.

• Act for the incident response action approval chain and support any incident response obligation for third parties.

• Respond to computer security incidents according to established response processes, leverages subject matter expertise where established processes do not exist.

• Acts as a subject matter expert regarding CSIRT incident response processes from local perspective.

• Provides guidance to other stakeholders during the incident response process and follow & track all the remediation actions till incident closure.

• Chair local IMT (Incident Management Team) calls and keep senior management and stakeholder updates on the progress of cyber incident management.

• Identify and manage potential and actual operational issues within the incident detection/response domain and take corrective action whenever required

• Work as a liaison between the SOC Team, other departments, and upper management for AIASG and potentially local regulators

• Manage relationships with our customers’ and third parties’ tech incident teams and frequently interact with client management for any security incident related queries.

• Work closely with the Group SOC team to manage ongoing service delivery and onboarding of local process within the SOC alignment and compliant to the local regulations.

• Level and type of budgetary or financial control of the position, responsible for budget of Information Security and Governance unit.

• Other quantitative / qualitative measures, e.g. time, quality, feedback, etc., that are tied to the objective of the area of responsibilities.

• Downward trend in cyber security incidents and less DP incidents.

• Uplift Cyber Security process, controls and maturity level for Cyber Security Incident.

• Support for the Cyber Security score in the annual MAS CRAFT report.

WE ARE LOOKING FOR SOMEONE WITH | YOU WILL HAVE:

• Bachelor’s degree of computer science, computer engineering or other relevant degrees

• Minimum 8 years of IT experience with at least 4 years’ of experience in cyber security incident handling in a regulated environment (e.g. FSI, government etc.)

• Strong knowledge of cybersecurity incident management covering identification, containment, response, recovery and reporting

• Sound knowledge of Cloud, Cyber Monitoring, Threat Hunting, and Cyber Threat Intelligence

• Natural ability to take the lead and drive the investigation of complex security issues, with strong analytical and problem-solving skills

• Self-driven professional interested in the world of cyber security

• Standby for the serious security incident during weekend or off-working hours if necessary

• Hands-on experience for the cyber security incident scenario preparation and tabletop exercise

• Technical understanding of enterprise network, various components and designs and strong understanding of Operating Systems, Applications, Databases in both on-prem and Cloud environment, how they are exploited and how to defend

• Good knowledge of conducting RCA for the incident

• Information Systems Security professional certifications, such as CISSP, CISA, CISM, CSSP or Cloud related.

• A team-player taking ownership and helping colleagues.

• Excellent Analytical, Coordination and Interpersonal Skills.

• Good communication skills and the communication network of the incumbent is expected to be internally within Technology Department (30%) and Enterprise Risk Management, Compliance, Internal Audit (15%), Business Departments (10%), Senior Management and Sub-Committees (10%),Group Technology and Group Information Security (20%) and external with Vendors and Service Providers (15%).

#LI-SC1

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.