Total 84 information analyst job vacancies in Legal / Public / Security category in 8 marina view singapore

Details of the Division and Team:

Everyday DB observes thousands of cyber security intrusion attempts. Deutsche Bank’s COO Chief Security Office (CSO) integrates both Corporate Security (CS) and Information Security (CISO) as both teams are responsible for mitigating these risks.

The CSO team enables the business of Deutsche Bank by providing agile security operational capabilities.

With their expertise in Threat Intelligence, Data Leakage Protection, Cyber Threat Analytics, Malware Response & Research, Security Monitoring, Incident Response, Forensics and Vulnerability Management, they provide global services from key locations in Frankfurt, Jacksonville and Singapore while leveraging offshore capabilities in Pune and Bucharest.

What we will offer you:

A healthy, engaged and well-supported workforce are better equipped to do their best work and, more importantly, enjoy their lives inside and outside the workplace. That’s why we are committed to providing an environment with your development and wellbeing at its center.

You can expect:

• Flexible benefits plan including virtual doctor consultation services.
• Comprehensive leave benefits
• Gender Neutral Parental Leave
• Flexible working arrangements
• 21 days of annual paid leave, plus public holiday & Flexible Working Arrangement

Your key responsibilities:

The Deutsche Bank Chief Security Office is looking for an experienced DLP Information Security Analyst.

Adhering to internal and external policies, the role is required to work in a global team to identify and assess technical and personnel security breaches within a heterogeneous business and technical landscape. This will include working with a variety of technologies and business groups to detect, assess and document the escalation of security alerts and consequence management.

Additionally, the role will require collaboration with control functions as well as businesses to identify information that needs to be protected and controls that are best suited to address these requirements.

The work will also involve utilizing vendor solutions, bespoke control applications and supporting the development of team tasks, such as the continual assessment of preventive and detective controls.

• Continuously monitor DLP systems for alerts and act as a subject matter expert for all data leakage investigations globally across all regions where the bank has a footprint.
• Manage DLP incidents, ensuring coordinated response and timely escalations.
• Document all incidents, actions taken, and outcomes. Prepare detailed reports for management and compliance purposes.
• The incumbent also assumes responsibility for overseeing and coordinating all facets of incident management like initial evaluation, stakeholder management, technical triage, and incident resolution.
• Ensure DLP tools and technologies are maintained, optimized, and regularly evaluated through established cyber risk frameworks.
• Cooperate with control functions to understand regulatory requirements and applicable laws.
• Ability to methodically analyze complex data and requirements and provide accountable SME opinion.
• Design and implement new DLP monitoring use cases. Collaborate with business and control functions to identify sensitive information that needs to be protected.
• Propose ways to improve existing process to achieve better operational excellence via automation.

Your skills and experience:

• Minimum 3 years of working experience in either Data Loss Prevention (DLP) or Security Operations Center, with at least 1 year working in an enterprise-grade Operations Center.
• A Bachelor's degree in Information Technology, Computer Science, or a related field is required.
• Working experience with Data Loss related applications such as Symantec DLP, Digital Guardian; and SIEM tools such as Splunk, Sentinel.
• Working knowledge in IT Fundamentals such as networking, hardware/software.
• Analytical and critical thinking with an inquisitive mindset, collaboration, and conflict management with good communication skills.
• Mentor new team members and provide guidance and directions when required.
• Ability to work in fast paced environment and within tight deadlines.
• Certifications such as Symantec DLP certified specialist, CompTIA Security+, CISSP, Microsoft Information Protection, Certified Data Protection Officer etc.

Role is required to be performed on-site at One Raffles Quay office. Relevant vaccination requirements may apply.

How we’ll support you:

• Flexible working to assist you balance your personal priorities
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs
• Training and development to help you excel in your career

About us and our teams:

Deutsche Bank is the leading German bank with strong European roots and a global network. Click click here to see what we do.

Deutsche Bank & Diversity

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

Singlife is a leading homegrown financial services company, offering consumers a better way to financial freedom. Through innovative, technology-enabled solutions and a wide range of products and services, Singlife provides consumers control over their financial wellbeing at every stage of their lives.

In addition to a comprehensive suite of insurance plans, employee benefits, partnerships with financial adviser channels and bancassurance, Singlife offers investment and advisory solutions through its GROW with Singlife platform. It also offers the Singlife Account, a mobile-first insurance savings plan.

Singlife is the exclusive insurance provider for the Ministry of Defence, Ministry of Home Affairs and Public Officers Group Insurance Scheme. Singlife is also an official signatory of the United Nations Principles for Sustainable Insurance and the United Nations-supported Principles for Responsible Investment, affirming its commitment to finding a better way to sustainability.

The merger of Aviva Singapore and Singlife was announced in September 2020 and created one of the largest homegrown financial services companies in Singapore in a deal valued at S$3.2 billion. It was the largest insurance deal in Singapore at the time.

Singlife was subsequently acquired by Sumitomo Life in March 2024, one of Japan’s leading life insurers, which valued Singlife at S$4.6 billion, making the transaction one of the largest insurance deals in Southeast Asia.

Purpose of the Role:

Responsible for the tactical and operational oversight of our information security program in term of managed security services. This role involves in implementing and maintaining robust security measures to safeguard our information and network infrastructure. One will be the driving force behind our cybersecurity strategy, ensuring our systems are resilient against threats, and our team is equipped with the knowledge and tools to maintain high security standards.

Role Attributes:

Running operation of Singlife’s Managed Security Services program for entire Singlife Group under the Cyber Fusion Centre team.

Key Responsibilities:

Security Measures Implementation and Performance Tracking

• Develop and implement effective security measures to protect company data and network infrastructure.
• Regularly track and report on the performance of these security measures.

Cybersecurity Architecture and Strategy

• Deep understanding of Singlife’s comprehensive cybersecurity architectures.
• Develop and update the company’s information security strategy, ensuring it aligns with industry best practices and business objectives.

System Security Requirements

• Identify, define, and document system security requirements.
• Prepare and maintain technical documentation.
• Recommend solutions to management based on these requirements.

Security Infrastructure Management

• Configure, troubleshoot, and maintain security infrastructure hardware and software.
• Install and manage software for monitoring systems and networks for security breaches and intrusions.

Behavior Monitoring and Preventive Measures

• Monitor systems for irregular behavior and anomalies.
• Establish and enforce preventive measures to mitigate potential security threats.

Staff Training and Awareness

• Educate and train staff on information system security best practices.
• Foster a security-aware culture within the organization.

Project Monitoring and Milestone Achievement

• Ensure regular monitoring of project activities.
• Guarantee that project milestones are met in a timely and efficient manner.

Managed Security Device Expertise:

• Proficient in managing a range of security devices, including but not limited to: Email Security, IDPS, Attack Surface Monitoring, Anti-Malware Solution, Web Application Firewall, Certificate Management System (CMS)

Key Decision within the Role:

• Standard Operating Procedure write-up
• BAU Operation Process write-up

Requirements:

Experience

• Preferable to have 3+ years of relevant experience
• Knowledge in managing security solution stated above.
• Strong understanding of cybersecurity principles, practices, and solutions.
• Effective communication and analytical abilities.
• Ability to analyze complex security systems and identify vulnerabilities and solution.
• Expertise in computer programming and scripting languages.

Education

• Academic: Bachelor’s degree in computer science / information technology(preferred)
• Professional Certification(s): CISSP, or any related vendor certification (preferred)

If you find yourself able to demonstrate the criteria above, apply with us now. We look forward to your application.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gAHYjij4

• Strong support to invest in information security from the company
• Regional role with an established company

About the company

Our Client is an established company. With rapid expansion plan, they are now looking for a new Information Security Assistant Manager (GRC, ISO27001) to join their team.

About the job

Reporting to the Head of Security, you will be responsible for:

• Leading initiatives to assess the adequacy and effectiveness of IT controls and policies, ensuring that business users are compliant to the IS standards (ISO 27001, PDPA and etc).
• Planning and implementation Information Security, IT Risk Management, IT Audit and IT policy to improve the overall security posture for the organization across Asia. This includes reviewing and maintaining information security polices.
• Designing IT Security framework and roadmap to ensure the availability, integrity and confidentiality of IT system. This includes setting up the best practices and governance for Risk Control Security Assessment (RCSA). Designing processes to identify, improve and optimize IT risk management policies/practices.
• Identifying potential gaps in security control to enhance early detection capability. This is through leveraging internal security data (Performing analysis of forensic evidence, log data, compromised hosts, and network traffic) and external sources (Industry portals and etc) to identify existing gaps in security control and close the gaps.
• Overseeing the development and execution of corporate security awareness and training programs to business stakeholders to prevent and limit the impact of a potential cybersecurity event
• Monitoring compliance, keep abreast of legislative and regulatory trends to address potential impact and non-compliance/gaps.

Skills and experience required
As a successful applicant, you will have at least 5 years of experience in Information Security(ISO 27001, ISO 27701 or etc) / Governance, risk management, and compliance (GRC) Proven track record of engagement with C-level business stakeholder across Asia is required.

Whats on offer
This is an excellent opportunity to join an established company with lots of opportunity to improve the security posture of the company.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gAHYjij4 (EA: 94C3609/ R1219669)

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gM7-eVHS

• Decision making for Information Security including security strategy and roadmap for APAC
• Opportunity to implement information security with strong support from business stakeholders

About the company

Our Client is a Multi billion market leader within their industry. With rapid expansion across APAC, they are now looking for a new Manager, Information Security & GRC (Governance, Risk & Compliance) to join their team

About the job

• Reporting directly to the Head of Security based out of Asia, Your responsibility involves:
• Managing a lean team of information Security Analyst across Asia
• Developing and executing information security management framework and related IT Security policies within the organizations. This includes conducting continuous assessment of IT security practices and policies to improve the security posture of the company
• Leading initiatives to assess the adequacy and effectiveness of IT controls and policies, ensuring that business users are compliant to the IS standards (ISO 27001, PDPA and etc).
• Designing and implementing an on-going Information Security training and awareness programme for different levels of personnel. This includes monitoring the level of awareness to information security risk
• Planning and implementation Information Security, IT Risk Management, IT Audit and IT policy to improve the overall security posture for the organization across Asia. This includes reviewing and maintaining information security polices.

Skills and experience required

As a successful applicant, you will have at least 8 years of experience in IT frameworks (ISO 27001, NIST or etc) / IT control / Governance, risk management, and compliance (GRC) Proven track record of managing a team is required for this role.

Candidates with experience in cloud or SAP security will be of added advantage.

Whats on offer
This is an excellent opportunity to implement information security with strong support from business stakeholders.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gM7-eVHS (EA: 94C3609/ R1219669)

What you'll do:

As a Junior Cyber Security Analyst, your primary role will be to ensure the security and integrity of our client's digital assets. You will intake cybersecurity related requests from internal and external entities that require triage, remediation or escalation. Your excellent problem-solving skills will be put to use as you collaborate with your team members to resolve complex issues. Your commitment to accurate documentation will contribute significantly to record-keeping and analysis.

* Answer incoming calls to assist with information security inquiries or issues.
* Document all interactions accurately for record-keeping and analysis.
* Follow established processes and guidelines to handle common issues.
* Collaborate with team members to resolve more complex problems or escalate as necessary.
* Monitor your assigned queues and work cases in an efficient and effective manner.

What you bring:

The ideal candidate for the Junior Cyber Security Analyst role is someone who has a strong understanding of Cyber Security and Information Technology. Your effective typing skills will enable you to document all interactions accurately, while your strong problem-solving and critical thinking skills will be crucial in handling common issues. Your effective communication and interpersonal skills will allow you to collaborate effectively with team members.

* Effective typing skills
* Familiarity with Cyber Security and Information Technology
* Strong problem-solving and critical thinking skills
* Effective communication and interpersonal skills

What sets this company apart:

Our client is a leading global organisation that values collaboration, commitment, and growth. They offer an inclusive work environment where every employee is valued for their unique contributions. They believe in providing opportunities for learning and development, making it an ideal place for individuals who are eager to grow their careers.

What's next:

Ready to take the first step towards a rewarding career in cybersecurity? Don't hesitate!

Apply today by clicking on the link!

Do note that we will only be in touch if your application is shortlisted. Robert Walters (Singapore) Pte Ltd ROC No.: 199706961E | EA Licence No.: 03C5451 EA Registration No.: R24123088 Josue Hoyos Pardavell

As a Business Information Security Officer, you will play a key role in proactively managing the information security and Data privacy landscape within the organization. Your expertise will help guide strategic decision-making on technology risk and security matters, ensuring robust IT security architecture, practices, and compliance across the organization.

Key Responsibilities:

• Lead proactive management of InfoSec & privacy.
• Provide thought leadership on technology risk and security.
• Drive the development and implementation of IT security policies and solutions.
• Ensure secure software development practices and change management processes.
• Plan and manage security incident responses and investigations.
• Oversee global adoption of cybersecurity and privacy controls.
• Act as the main point of contact for InfoSec and privacy matters.
• Collaborate with external auditors and regulators for compliance.

Required Skills and Qualifications:

• Extensive experience in IT security architecture, policy, and procedure development.
• Demonstrated leadership with strong decision-making abilities.
• Knowledge of software development life cycle security and asset management.
• Proven track record in incident response management and cybersecurity investigations.
• Excellent communication skills for non-technical stakeholders.
• Proficiency in current and emerging security trends.
• Familiarity with Singapore regulatory IT security requirements (e.g., MAS TRM, Cyber Hygiene notice).
• Bachelor's degree in IT/Computer Science or related field.
• Preferred certifications: CISSP, CISA, CISM, GIAC.

Personal Attributes:

• Team-oriented and able to work collaboratively.
• Strong communication skills for engaging senior stakeholders.
• Analytical problem-solver with a creative mindset.
• Independent and hands-on approach with strong attention to detail.

Application Process:
If you are interested in this role, please send your resume to [email protected]

Your New Role:

Align IT needs with the strategic directions of the enterprise.

Allocate budget and resources accordingly by taking into consideration business impact

of the information security risks.

Analyse various internal and external information security risk reporting sources.

Contribute to the development of a strategy plan.

Determine appropriate IT strategies and solutions.

Develop a budget.

Develop business cases that support information security programme investments.

Disseminate organisation's IT security goals and objectives to business units and senior

management.

Evaluate IT security goals and objectives against the benchmarks.

Evaluate existing IT environment against organisation's IT strategic directions.

Formulate information security goals and objectives.

Identify and implement business innovation.

Identify controls and solutions to address/mitigate risks.

Implement change management process.

Manage overall information security risk.

Maximise business value of IT investments.

Obtain management support for information security programme investments highlighted

in the endorsed business cases.

Select new technology models for business.

Translate solutions into information security programmes.

What you'll get in return
This is an exciting opportunity to join a global company. You will be part of a dynamic team and you will be remunerated at market competitive rates.

What you need to do now

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV.

Referrals are welcome.

EA Reg Number: R21103035

EA License Number: 07C3924 | Company Registration No: 200609504D

• Driving innovation and shaping the future with cutting-edge projects
• Personal growth and collaboration.

About Our Client

Client is a global technology firm known for its innovative approach to content creation and distribution. It operates a range of platforms that combine artificial intelligence and machine learning to deliver personalized experiences to users. The company's products span entertainment, social networking, and e-commerce, with a strong focus on fostering creativity and community engagement. It has a diverse and rapidly growing global presence, continuously pushing the boundaries of digital media and technology.

Job Description

• Communicate technical and non-technical concepts effectively to the business side.
• Coordinate security assessments with product teams.
• Conduct cyber risk assessments and technical security reviews to identify IT risks for new products and features, and recommend controls.
• Collaborate with security and business teams to design defense-in-depth controls and improve security posture.
• Fulfill business security requirements like red teaming, fraud detection, and penetration tests, while enhancing security maturity.
• Monitor and manage risk mitigations, exceptions, and ensure adequate monitoring is in place.
• Track emerging cyber threats, vulnerabilities, and exploits affecting infrastructure and products.

The Successful Applicant

A successful candidate will have a strong technical background in cybersecurity, with the ability to communicate effectively between technical teams and business stakeholders. They should be skilled in risk assessments, vulnerability management, and implementing security controls. Proactive, collaborative, and able to manage security requirements like red teaming and penetration testing, they will stay ahead of emerging threats and continuously improve security posture across the organization.

What's on Offer

A chance to work on impactful security initiatives in an innovative environment, collaborate with cross-functional teams, and grow your career. You'll receive a competitive package, opportunities for professional development, and the chance to work with cutting-edge technologies.

Contact

Miao Xia Neo (Lic No: R21103441/ EA no: 18C9065)

Quote job ref

JN-112024-6583081

Phone number

+65 6416 9828

Michael Page International Pte Ltd | Registration No. 199804751N

About the company

CGS International Securities Pte. Ltd. (CGS International) is an award-winning and market leading integrated financial services provider, ranked among the top securities houses in Asia.

CGS International taps on our wealth of global and ASEAN insights to offer equities trading, leveraged products, wealth management, investment banking, equities research, Shariah-compliant financing, fixed income, currency and commodities, structured products and prime brokerage services in over 15 countries and regions.

Along with its parent organisation China Galaxy Securities, a leading securities house in China, CGS International is trusted by more than 15 million customers globally.

Job Description

1) Threat Detection:

- Use of tools to scan/ detect/ analyze/ correlate threats

- Manually review to detect/ analyze/ correlate threats

- Participate in design of infrastructure and process of threat detection

- Perform triage of security alerts to filter false positives, classify alerts and determine response type

2) Threat Hunting:

- Collect and analyze data to identify patterns and anomalies that indicate presence of a hidden threat

- Investigate potential threats to determine if they pose a real threat

3) Threat Intelligence:

- Keep up to date of threats reported by reliable internal and external sources

- Maintain samples, logs and records, compromised information that help understanding of attacks

4) Incident Response:

- Inform relevant members and departments of threats and advise of remediation and mitigation

- Coordinate and follow up with all relevant members and departments to collect data and evidences, to ensure completion of remediation and mitgation

- Document all security incidents with records of assessment, investigation, remediation and mitigation

- Maintain playbooks and guide other departments on contributing to them

- Lead and participate actively in security incident response effort

- Lead and participate actively in post-incident reviews to evaluate response effectiveness and recommend improvements

- Conduct, coordinate and debrief simulated exercises on security incident management across departments

5) Requirements Review:

- Insurance coverage of incident response management

- Third party agreement coverage of security monitoring and incident response management

Corporate policies, standards and procedures in security monitoring and incident response management

Job Requirements

• Strong knowledge of information security principles, incident response methodologies, network protocols, logging/detection/response tools (e.g. SIEM, EDR, XDR)
• Proficient in network communications, log analysis, scripting
• Good problem-solving, analytical and communication skills
• Preferably has experience working with cross-geographical teams
• 1-3 years of experience as a Security Operations Analyst or similar role
• Diploma or Bachelor degree in Computing or related field
• Preferably has relevant certifications (e.g. GCIH, GCIA)
• Proactive and independent
• Keen to learn
• Has an eye for detail
• Willing to share and collaborate as a team player

• GRC Lead for APAC regions, including China and India
• People Manager role with a strong track record in leadership
• Reporting line to headquarters in France

About the company

Our client is a multinational company that has a rich history spanning nearly 200 years, a testament to their enduring success in the business world. Headquartered in Paris, France, the company has grown to become one of the world's leading wine and spirits producers. They are a prominent player in the global alcoholic beverage industry, renowned for its extensive brand portfolio, commitment to quality, and dedication to sustainability and social responsibility.

About the job

• Develop, govern and enforce cybersecurity policies, standards, and guidelines to ensure robust security practices.
• Lead evaluations of security and privacy risks, coordinating swift responses to suspected cyber incidents/events.
• Monitor cybersecurity risks and report findings to relevant technical and business executive committees.
• Manage the Information Security GRC team, focusing on all cybersecurity aspects within the designated region, domains, and tech portfolio.
• Proactively drive risk reduction initiatives within the defined scope.
• Ensure effective security measures within the scope of assigned regions, domains, and technology areas.
• Collaborate on cyber strategy and roadmap creation for long-term security goals.
• Drive compliance with internal standards and regional cybersecurity regulations, both internally and externally.

successful candidate

Minimum of 10 years' experience in Governance, Risk, and Compliance (GRC), with a solid understanding of cybersecurity frameworks such as ISO 27001, SOC 2, MITRE ATT&CK, and NIST, as well as expertise in penetration testing and security audits.

Skilled in managing incident response, evaluating cybersecurity risks, and conducting vulnerability assessments.

Proven ability to lead a team, with a track record of managing 2-3 direct reports.

Experience working in a regional setting, with the ability to navigate diverse regulatory environments and cultural considerations.

Whats on offer
The permanent opportunity for a Information Security & Risk Governance Lead (GRC), will pay a salary range of $13,000 - $ 15,000 plus benefits. This opportunity offers hybrid working arrangement.

To apply online please use the 'apply' function, alternatively you can reach me at
https://www.linkedin.com/in/Oliviatoh-032330132/. (EA: 94C3609 / R22109942)

· Act as Incident first responder for a 24/7 staffed SOC.

· Monitor security sensors and review logs to identify network anomalies or intrusions.

· Perform initial analysis of security alerts.

· Escalate security incidents using established policies and procedures in a timely manner.

· Work with customers to analysis potential security incidents, identifying root cause and implement mitigation step(s)/ remedial action(s).

· Performing Response action based on standardize workflow and agreement with clients.

· Assist with the development of incident response plans, workflows, and SOPs.

· Provide threat and vulnerability analysis security advisory services.

· Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management.

· Act as Incident first responder for a 24/7 staffed SOC.

· Monitor security sensors and review logs to identify network anomalies or intrusions.

· Perform initial analysis of security alerts.

· Escalate security incidents using established policies and procedures in a timely manner.

· Work with customers to analysis potential security incidents, identifying root cause and implement mitigation step(s)/ remedial action(s).

· Performing Response action based on standardize workflow and agreement with clients.

· Assist with the development of incident response plans, workflows, and SOPs.

· Provide threat and vulnerability analysis security advisory services.

· Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management.

As an Information Security Engineer, you will play a crucial role in our Security Operations Center. Your responsibilities will include monitoring, detecting, investigating, analyzing, and responding to security events within our IT infrastructure, including Operational Technology (OT) systems. Your expertise in cybersecurity frameworks, risk management, and incident response protocols will help fortify our defenses. A thorough understanding of Operational Technology security principles is essential, as you will oversee the integration of security practices in both IT and OT environments to protect our critical infrastructure. You will also apply Scaled Agile Scrum methodologies to coordinate technical meetings and manage security projects efficiently.

Roles and Responsibilities

• Design and implement advanced security architectures for IT and OT environments to ensure robust protection against emerging threats.
• Lead the development and integration of custom security solutions tailored to the specific needs of our digital and physical infrastructures.
• Conduct high-level vulnerability assessments and penetration testing to evaluate the security of IT and OT systems.
• Develop and refine incident response strategies to enhance our ability to respond to and recover from security breaches swiftly and effectively.
• Collaborate with IT and OT teams to ensure seamless integration of security technologies across all platforms.
• Serve as the technical lead on projects involving cybersecurity technologies, ensuring compliance with industry standards and regulatory requirements.
• Mentor junior engineers and analysts, providing guidance on complex technical issues and fostering a culture of technical excellence and innovation.
• Stay current with the latest cybersecurity technologies and trends, applying this knowledge to continuously improve our security posture.
• Prepare and present detailed technical reports and security briefings to senior management, offering strategic recommendations based on your assessments and findings.

Requirements

• A master’s degree in Cybersecurity, Computer Science, Engineering, or a related field, along with significant professional experience in cybersecurity.
• Expertise in designing and managing security solutions for both IT and Operational Technology systems.
• Advanced certifications in cybersecurity such as CISSP, CISM, or GIAC, with specific training in areas like SCADA or ICS security.
• Strong leadership skills with experience in managing complex security projects and leading cross-functional teams.
• Deep understanding of regulatory compliance and security frameworks such as ISO 27001, NIST, SOC 2, and others relevant to IT and OT cybersecurity.

Interested candidates, who wish to apply for the advertised position, please email us an updated copy of your resume.

We regret that only shortlisted candidates will be notified.

EA License No.: 01C4394

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy

COMPANY BACKGROUND

Haier is the number one brand of Major Appliances in the world with 16.3 percent of global market share. Headquartered in Qingdao, Haier has over 80,000 employees across 30 countries in the world.

Haier Singapore is the International HQ of Haier Group and is the main platform to provide procurement, trading, R&D and big data and cybersecurity supports to over 80 countries in Asia, Europe, Africa and North America markets.

As the continuous demands from global businesses, we are looking for passionate Information Security Professional to join our Global Information Security team.

KEY RESPONSIBILITIES

Based in Singapore, you will be part of the Global Information Security team, providing Cybersecurity and IT support to Haier businesses in the world.

• Responsible for the construction of Haier's overseas regional information security system, identify issues and risks in security construction and continuously optimize them;
• Establish information security capabilities in various overseas regions, such as endpoint security, data security, application security, vulnerability management, OT security, security operation, etc;
• Responsible for emergency response to information security incidents in overseas regions, quickly resolving problems;
• Responsible for enhancing the information security awareness of employees in overseas regions and developing security training plans;
• Responsible for overseas compliance construction, such as data security compliance, personal privacy compliance, etc., and developing an annual information security audit plan.

KEY REQUIREMENTS

The ideal candidate should be a seasoned information security manager with:

• Degree in Computer Science or its equivalent.
• With minimum of 10 years of work experience and at least of 3 years’ experience in team management.
• Establishment of the ISO27001/NIST/ information security system.
• Proficient in security technologies in various fields, such as endpoint security, vulnerability management, application security, etc.
• Certification in the Information security, risk management, preferably.
• Fluent in Mandarin and English.

The Security Analyst is responsible for monitoring security systems, responding to alerts and incidents, and ensuring the organization’s security controls are effective. This role involves creating and tuning security device metrics, documenting processes, and identifying unusual activities by correlating events. Strong analytical skills, collaborative abilities, and an in-depth understanding of both current and emerging security technologies are essential to succeed in this position.

Key Responsibilities:

1. Security Monitoring & Advisory: Continuously monitor and provide guidance on security issues related to systems and workflows, ensuring that internal security controls are appropriate and functioning effectively.
2. Incident Response Coordination: Lead and coordinate responses to information security incidents, minimizing impact and supporting rapid resolution.
3. Policy Development: Create, update, and enforce information security policies, procedures, standards, and guidelines that align with best practices and compliance requirements.
4. Data Classification & Audits: Assist in data classification assessments, conduct security audits, and contribute to remediation plans as necessary.
5. Vulnerability Management: Collaborate with IT management to address security vulnerabilities and coordinate vulnerability assessment efforts.
6. Testing & Assessment: Conduct network penetration testing, vulnerability assessments, and comprehensive risk assessments to identify and mitigate security risks.
7. Server Hardening: Develop, coordinate, and review server hardening procedures for all platforms used within the organization’s environment.
8. Log Review & Analysis: Regularly review security logs from servers, networks, and other platforms to detect any security anomalies.
9. User Security Awareness: Design, conduct, and maintain user security awareness training to strengthen the organization's security culture.
10. Security Research: Stay informed of the latest security policies and conduct research to continually enhance the organization’s security posture.
11. Additional Security Duties: Undertake other security-related tasks as assigned to support organizational needs.

Qualifications & Requirements:

• Education: Bachelor’s degree in Computer Science, Information Technology, or equivalent.
• Experience: Minimum of 3 years in IT, with a background in security monitoring and response.
• Technical Skills:
  • Familiarity with IT network infrastructure, server platforms (Unix, Windows), and desktop systems (OS X, Windows XP and above).
  • Proficiency with security tools such as Security Endpoint solutions, HP ArcSight, QRadar, Rapid7 Nexpose, and Tenable Nessus.
• Certifications: One or more of the following certifications are required: QISP, CISSP, Cybersecurity Nexus, CompTIA Security.

We’re searching for a Senior/Manager, Client Information Security (Infra) to be part of our diverse team of talent here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

• Drive the implementation of NCS cybersecurity, data protection, and privacy policies, standards and processes within the practice. You will work to continually improve the security posture of projects through proactive risk management and the establishment of a broad range of cybersecurity controls
• Provide direct support to colleagues to ensure cybersecurity is addressed throughout the engagement delivery lifecycle, from infrastructure and security tooling choices to the secure storage, processing and deletion of client data.
• Act as a single point of contact and escalation for the SOC, Threat Intel and Crisis Response teams for practice-related cybersecurity incidents, ensuring timely identification, remediation and lessons learned.
• Manage the security SLA governance and provide practice-level cybersecurity reporting, metrics and forecasting to leadership.
• Responsible for information security, data protection, privacy, GRC, and audit requests for the practice, acting as single point of contact on relevant client security assessment and audits execution. Eg. independent third-party attestations of industry cybersecurity standards and certifications, such as ISO 27001, SOC 2 for practice-specific solutions and products
• Contribute to the definition of the client specific security baseline. Consult and advise internal and external clients about security topics and support the opportunity management process by providing subject matter expertise and support
• Help win client business by providing cybersecurity assurance to RFIs, RFPs, proposals, contract drafting, security questionnaires, workshops and other client due diligence processes

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.

Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day.

To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.

Join us.

Team Introduction

The Global Security Organization provides industry-leading cyber-security and business protection services to TikTok globally. Our organization employs four principles that guide our strategic and tactical operations. Firstly, we Champion Transparency & Trust by leading the charge in organizational transparency, prioritizing customer trust, and placing user needs first. Secondly, we aim to maintain Best in Class Global Security by proactively identifying and reducing risks while enabling innovative product development. We constantly work towards a sustainable world-class security capability. Thirdly, we strive to be a Business Catalyst & Enabler by embodying the DNA of technical innovation and ensuring our Global Security operations are fast and agile. Finally, we Drive Empowered & Risk-Informed Decision Making by providing our leaders with the necessary information to make agile decisions based on risk.

We are seeking a Digital Forensics Analyst to join our Forensics & Litigation Support team. The analyst will partner with internal stakeholders, such as Legal, HR, Ethics, Investigations, and Insider Threat, to support investigations and provide technical expertise. The role will perform forensic preservation of relevant devices and data, respond to incidents, and perform detailed analysis of systems and data. The role will require an individual able to apply forensics concepts and industry best-practice in the preservation and analysis of newly developed technologies engineered internally at the company.

Responsibilities

- Preserve network and host-based digital evidence in an industry accepted and forensically sound manner that would be admissible in court proceedings.

- Coordinate digital forensics analysis on large scale matters.

- Communicate technical events and analysis to both technical and non-technical audiences.

- Perform Apple macOS host-based forensics, including the analysis of user events, the APFS/HFS+ file system, internal services, default applications, and relevant logs.

- Perform Microsoft Windows host-based analysis using both Windows and Linux based forensic tools.

- Perform analysis of Linux servers, including user events, daemons, security logs, and cron jobs.

- Perform acquisitions and analysis of Apple iOS and Android mobile devices.

- Perform acquisitions and analysis of cloud platforms, such as Microsoft Azure, Amazon Web Services, Google Cloud Computing and/or others.

- Write detailed forensic reports for investigations.

Minimum Qualifications

- A bachelor’s degree in a computing field.

- 3-5 years in digital forensics analysis experience.

- Holds an industry accepted certification validating digital forensics capiblities: GCIH, GCFA, GCFE, CFCE, GREM, X-PERT, EnCE, CCE, etc.

- In-depth understanding of computer forensic principles, including digital and mobile forensics, log analysis, cloud-based systems, database structures, querying languages and common digital forensics tools.

- Knowledge and experience of Windows, Unix and Mac host-based forensics, Mobile OS’s and command line.

- Working knowledge of hardware configuration and network/data communications, software development and scripting, database technology and database exploitation/forensics.

- Experience with seizure of evidence, chain of custody and conducting analysis.

- Knowledge of data loss prevention systems and how they detect potential host and network-based data loss technologies or other insider threat risks.

Preferred Qualifications

- Completed the SANS course FOR518: Mac and iOS Forensic Analysis and Incident Response

- Experience in writing affidavits, depositions and serving as an expert witness in court proceedings.

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Job Description Summary:

As a Cyber Defense Engineer at PayPal's Cybersecurity Defense Center, you'll play a vital role in fortifying our security measures. You'll monitor and respond to security events, collaborating with cross-functional teams to provide valuable insights and guidance. Proactively hunting for threats, you'll identify vulnerabilities and mitigate risks. Your expertise will contribute to robust incident response capabilities and resilient architectures. Staying informed about emerging threats, you'll drive innovation in cyber defense techniques. By safeguarding our digital assets and users' data, you'll help maintain trust and enable secure online transactions.

Join our dynamic and highly skilled team at the PayPal Cybersecurity Defense Center. By We are seeking individuals who are passionate about cybersecurity and are eager to make a difference in protecting our systems and data. As a member of our team, you will have the opportunity to continuously enhance your skills through ongoing training and professional development. With access to cutting-edge technologies and resources, you will stay at the forefront of the ever-evolving cyber threat landscape. Your contributions will directly impact our ability to safeguard our infrastructure and ensure the privacy of our customers' information. Join us in our mission to create a secure digital environment and be part of a team that is committed to excellence in cyber defense. Together, we will defend against emerging threats and build a resilient security foundation.

Job Description:

Your way to impact

• Take ownership of enhancing our security posture and protecting our infrastructure, systems, and data from cyber threats.
• Provide guidance and recommendations to cross-functional teams, assisting them in implementing effective security measures.
• Collaborate closely with teams across the PayPal, ensuring seamless security experiences and operational efficiency.
• Drive continuous improvement in security operations by identifying opportunities for process optimization, automation, and integration of security technologies.
• Assume centralized ownership of key cybersecurity applications/tools, setting the vision and driving towards a best-in-class future state.
• Engage in incident response readiness exercises, conducting simulations and tabletop exercises to strengthen the PayPal's ability to respond swiftly and effectively to security incidents.
• Foster a culture of proactive security through knowledge sharing, training sessions, and promoting security awareness across the PayPal.

Your day to day

• Monitor security alerts and events from various sources and respond promptly to security incidents, following the established incident management plan.
• Collaborate with the security teams to conduct in-depth analysis of security events and incidents, utilizing advanced threat intelligence and security tools.
• Document and track security incidents, maintaining accurate incident records and providing regular updates to stakeholders.
• Build and nurture influential partnerships with key stakeholders, acting as a conduit between cybersecurity and cross-functional teams.
• Participate in tabletop exercises and simulations to enhance the PayPal's incident response preparedness and identify areas for improvement.
• Proactively review and refine the incident management plan based on emerging threats and evolving cybersecurity landscape.
• Stay updated on industry trends, best practices, and our business strategy to enable the achievement of cybersecurity objectives.

What you need to bring

• Demonstrate proven experience in security incident handling and security operations.
• Possess an in-depth understanding of network protocols, systems, and infrastructure security principles.
• Exhibit proficiency in analyzing business and employee needs, recommending, and designing end-to-end security solutions.
• Display strong incident management skills, effectively managing multiple incidents and driving results.
• Stay abreast of emerging threats, vulnerabilities, and attack techniques through continuous monitoring of threat intelligence sources and participation in security communities and forums.
• Participate in cross-functional security projects and initiatives, providing security expertise and guidance to ensure the secure implementation of new technologies and systems.
• Possess excellent communication skills to collaborate with cross-functional teams and convey complex security concepts effectively.

Responsibilities

• Assist in creating and enforcing security policies and procedures to protect company systems and data.
• Identify risks and implement solutions to minimize potential security threats.
• Investigate security incidents, document findings, and support response and recovery efforts.
• Design and evaluate security measures for applications, networks, and physical systems.
• Lead security awareness training and promote best practices across the organization.
• Collaborate with internal teams to ensure compliance with security policies and initiatives.
• Manage security operations like access control, vulnerability assessments, and system monitoring.
• Coordinate third-party security risk assessments with vendors and suppliers.

Requirements:

• Bachelor's degree in Computer Science, IT, or a related field.
• Possess at least 3 years of experience in security operations, governance, or risk management.
• Recognized certifications like CISSP, CISM, or CISA are preferred.
• Strong knowledge of NIST, ISO27001, and data privacy regulations (e.g., PDPA, GDPR).
• Ability to explain technical security concepts to non-technical stakeholders.
• Strong organizational skills with the ability to work independently and manage multiple priorities.

Please submit your updated resume in Word format by using the Apply Now Button.
We regret that only shortlisted candidates will be notified.

Email resume to [email protected]

People Profilers Pte Ltd, 20 Cecil Street, #08-09, PLUS Building, Singapore 049705.
Tel: 6950 9724

http://www.peopleprofilers.com
EA License Number: 02C4944
Registration Number: R1872398

Posting Personnel: Ng Jwee Ken

Ref: L98XV3VY

About the role

The position is part of our SOC team, and is responsible for real time security event monitoring and security incident investigation.

Responsibilities:

• Continuously monitor security alerts queue and perform initial triage to identify any false positives and initiate escalations as necessary.
• Monitors health of security sensors and managed infrastructure, and provide necessary support, including onsite troubleshooting, root cause analysis, incident reports.
• Manage ticket queue and take ownership and responsibility of tickets assigned, within agreed SLA.
• Collects data, evidence, and context necessary for Level 2 escalation.
• Works closely with Level 2 & Level 3 team towards the continuous improvement of the service.
• Ensure that daily operations and tasks are properly completed or followed up.
• Escalate issues and liaise with subject matter experts as required to resolve issues.
• Support After-office hours activities and standby requirements as necessary.
• Prepare scheduled and ad-hoc report and documentation.

Candidate requirements:

• Diploma/Degree in Computer Science/Computer Engineering/Information Engineering/Cybersecurity or equivalent.
• At least 2 years hands-on experience with security solutions and tools such as Firewall, Proxy, EDR, PAM, IDS/IPS, SIEM, DLP, CASB etc.
• Basic understanding of common networking protocols and system infrastructure.
• Strong analytical, problem solving and interpersonal skills.
• Keen Interest in cyber security domain and developing skillsets in new technologies.
• Proficiency in one or more general-purpose programming languages (Perl, Python, PHP, Shell, .Net or Java etc) will be a plus.
• Ability to work independently, under the general guidance.
• Support after office hour and during weekend/public holiday.
• Working experience and knowledge on system infrastructure with interest of exploring security product also welcome to apply.
• Leadership roles are available for engineers with relevant experience in cybersecurity domain.

Our Client is a telecommunications service provider in Singapore. With the expansion of the team, they are looking for a L1 Security Analyst to join the team.

Responsibilities: -

·       24 x 7 triage, short-turn analysis of real-time security alerts & generate tickets, or escalation to L2 Security Analysts that are not in the Automation Runbook.

·       24 x 7 escalation to resolver upon receiving automated generated incident tickets on the health of SOCaS infrastructure, IT/OT managed security devices, or from the website defacement restorer activation alert.

·       24 x 7 manage problems till closure which include:

o   Ensure that Service Level Agreements are met.

o   Liaising with customers with regards to information security incidents

o   Provision and performance of remedial actions to enhance customers' network security posture

·       Min 1 year working experience in IT Infrastructure Operation and/or Support.

·       Willing to work with 24/7 shift pattern that includes weekend work.

·       Sound fundamental knowledge on Internet technologies, such as TCP/IP, HTTP, SSL, DNS, OWASP Top10 and web servers (e.g. Apache, IIS, Nginx, etc.).

·       Understanding of firewalls, endpoint detection and response (EDR), IDS/IPS, WAF, etc.

Desired qualifications:

·       Bachelor’s degree / Polytechnic Diploma in Computer Science, Information Technology or Information System.

·       Experience in scripting (e.g. shell scripting, Macro, PHP, Perl, Java, etc.) and/or Regular Expression.

·       Experience with TCP/IP packet analysis / network debugging with tcp dump or similar.

·       Experience with web security concepts and technologies such as web application firewall, proxy.

·       Experience general security technologies, processes, and concepts.

·       Industry recognized security certifications (GCIA/GCIH, CISSP, CISA, CEH, etc.).

·       Experience writing/decoding exploit, vulnerability, and attack detection signatures.

·       Experience working with a SOC team is an advantage.

- Monthly allowances and end-of-contract bonus

• Western Digital’s Global Physical Security Organization is seeking a highly talented and motivated individual to join the team. Our business unit is a 24/7 model where you may be required to work outside of normal business hours to address critical operational and technology issues. You must be able to drive complex technical solutions that provide scalability, efficiency, and effectiveness. This position is primarily responsible for the APAC regions physical security systems program, but the role will also provide guidance and support for our locations globally. 

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Agile in addressing troubleshooting issues and service requests
• Responsible for knowing status, locations of, quantities of, vendor, model, make and technical specifications of each system component, including connectivity requirements.
• Monitor performance of the system, highlight any issues, follow up on solution to resolution:
  • Initiate purchase order, service call, work order, etc., as necessary.
  • Verify that work was completed as requested.
• Provide training and guidance on security systems; create and maintain operator instructions, procedures, security system drawing, and related documentation as appropriate.
• Partner and drive physical security operations and systems technology with internal business units like IT, Real Estate, Legal, EH&S, Finance, Procurement when required
• Strategically improve system end users experience on a variety of applications
• Define physical security systems and technology roadmaps that drive overall program success
• Skilled in presenting solutions at a high level to internal key stakeholders
• Integrate and perform case studies, conduct research into product requirements to improve security systems and technology
• Familiar with internal tools, tracking and reviewing requests such as ServiceNow, Smartsheet, etc.
• Assist in deployment of enterprise level access control systems, video management systems, visitor management systems, etc.
• Work with multiple third-party vendors and SOCs to help maintain the global standard in security systems and technology
• Familiar with Windows, Linux and SQL, Networking, and IoT devices
• You will work to integrate a variety of security devices into existing network infrastructure including but not limited to: PSIM, C-Cure, Lenel, AMAG, Milestone, AXIS, ISOS, SWN, etc.
• Participate, oversee and drive project meetings and execute end-to-end, ensuring on-time delivery
• Configuring and maintaining APAC Security Systems, including hardware, system software, and security applications.
• Diagnosing and resolving hardware, software, networking, and system issues when they arise.
• Monitoring system performance to ensure everything runs smoothly and securely.
• Researching and recommending new approaches or system to improve the security system infrastructure. Enhance the current security model.
• Providing technical support when requested or be available at the site for further assistance.
• Works with users to identify system requirements; develops processing procedures and systems modifications to meet these specifications.
• Deploy, maintain, and troubleshoot core business applications, including application servers, associated hardware, endpoints, and databases.
• Document any processes, which employees need to follow in order to successfully work within our security systems

We protect Bloomberg.

There's no such thing as a "safe system" - only safer systems. Our security teams work to build and maintain the safest operating environment for Bloomberg’s users. The security analysts within the Cyber Security Operations Center are the main defenders of the company. The Cyber Security Analyst - Triage's function, within the CSOC, is considered to be a key pillar in Bloomberg’s security, as they are the initial responders to security events. Are you a motivated technical professional, who has a passion towards cyber security? And are accomplished in a systems- or applications-support role, or already have cyber security experience? In this security role, Bloomberg will provide you the opportunity to apply your current skills, while you rapidly develop new ones that are required in the cyber security field.

The Bloomberg CSOC is responsible for the detection of cyber threats, and when detected, responsible for the rapid response, across both the diverse lines of business and the global network. The CSOC is an open and collaborative environment, where members work together to identify and address the latest cyber security threats facing the company. The CSOC is staffed 24 x 7 x 365, with varying shifts, and multiple tiers of support, ranging from first response teams to the Computer Incident Response Team. Furthermore, there is opportunity to work with these more experienced members on some of the latest cyber security defense technologies.

In this role, we'll trust you to:

• Work within a dedicated shift, 8AM - 6PM, Wednesday through Sunday, to support the 24x7x365 Cyber Security Operations Center (some holiday coverage may be required)
• Demonstrate passion and good judgement as a network defender
• Identify, and act as the initial responder, to all security events
• Learn and understand the broader security of Bloomberg’s environment
• Monitor for events that match predefined criteria, and respond accordingly to standard operating procedures, as well as use good judgement for matters where a procedure doesn’t exist
• Bring to closure a significant majority of events without the involvement of other teams
• Share robust case notes when raising issues in order to help the next team member
• Remain up-to-date with cyber security threats and trends
• Deliver on relevant cyber security metrics and measurements for the role and area of responsibility
• Collaborate directly with colleagues across the firm to resolve security matters while furthering the program’s brand with a constructive and thoughtful approach
• Respond to varying seniority levels of employees and contractors throughout Bloomberg to address cyber security concerns
• Ensure appropriate coverage for the assigned shift and provide ample awareness to changes to commitments
• Produce and maintain documentation and standard operating procedures
• Generate ideas for continued improvement, including conceptual design of new threat scenarios

You'll need to have:

• A diploma or a degree in cyber security or a related technical field
• Minimum 1+ years of experience in a cyber security related role (e.g., Cyber Security Operations Center)
• Experience dealing with non-physical Security Operations, Incident Analysis, and/or Network and Host Log Analysis)
• Deep understanding in logs from a variety of sources, their log events, and Splunk
• Knowledge of enterprise network and host security controls
• Ability to be autonomous but proactive in reaching out for support
• Good familiarity with operating systems (Windows, Linux and MAC)
• Deep understanding of cyber security trends and potential threats
• Knowledge of client-server applications, multi-tier web applications, relational databases, firewalls, VPNs and enterprise antivirus products
• Good communication and interpersonal skills and the ability to take initiative
• Dedication to role and ability to collaborate with team members
• Excellent written and verbal communication skill in English
• Demonstrated continuous career growth within an organisation

We'd love to see:

• Knowledge of AWS, Azure, and GCP cloud platforms
• Previous experience working with a Security Information and Event Management (SIEM) platform
• Certifications in the information security space (CompTIA Security+, SSCP, CEH)
• Familiarity with programming / scripting

If this sounds like you:

Apply! If we think you are a good match we'll get in touch to let you know the next steps.

To learn more, visit our YouTube channel "Inside Bloomberg" www.youtube.com/InsideBloomberg

SOC Cloud Monitoring Resources

1. Act as Incident first responder for a 24/7 SOC Cloud Operations

2. Monitor security sensors and review logs to identify network anomalies or intrusions

3. Perform initial analysis of security alerts

4. Escalate security incidents using established policies and procedures in a timely manner

5. Work with clients to analyse potential security incidents, identifying root cause and implement mitigation step(s)/ remedial action(s)

6. Perform Response action based on standardize workflow

7. Assist with the development of incident response plans, workflows, and SOPs

8. Provide threat and vulnerability analysis security advisory services

9. Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management

10. Support 12 hours shift per day for 24 hours 365 days

Situated in the heart of Singapore's Central Business District, Rakuten Asia Pte. Ltd. is Rakuten's Asia Regional headquarters. Established in August 2012 as part of Rakuten's global expansion strategy, Rakuten Asia comprises various businesses that provide essential value-added services to Rakuten's global ecosystem. Through advertisement product development, product strategy, and data management, among others, Rakuten Asia is strengthening Rakuten Group's core competencies to take the lead in an increasingly digitalized world.

Rakuten is a global Internet and e-commerce company with over 1.3 billion registered users worldwide. Our e-commerce platform is the largest of its kind in Japan and among the world's largest by sales. Rakuten has many subsidiaries as well, including well-known brands like Rakuten VIKI, Rakuten Symphony, Rakuten TV, Kobo (e-Reading), and Viber (messaging). For more information, visit http://global.rakuten.com/corp/about/.

The Regional Chief Information Security Office (CISO) is to lead information security related actions to protect Rakuten Group companies in Asia region from internal/external security threat. You will be required to define, prioritizes, and implement IT security projects to reduce or eliminate risks that have been identified. This will involve working with regional teams and sister companies in all technology areas to address different types of IT security risks.

Role Responsibilities

• Maintains hardware, software and network firewalls and encryption protocols.
• Administers cybersecurity policies to control physical and virtual access to systems.
• Performs network security audits and testing and evaluates system security configurations to ensure efficacy and compliance with policies and procedures.
• Maintaining and supporting ISO/IEC27001 activities
• Responds to cybersecurity breaches, identifies intrusions and isolates, blocks and removes unauthorized access.
• Researches and evaluates cybersecurity threats and performs root cause analysis. Assists in the creation and implementation of security solutions.
• Provides information to management regarding impact on the business caused by theft, destruction, alteration or denial of access to information and systems.

Requirements / Qualification

• Minimum 3 years of working experience in Information Security
• Bachelor's Degree preferably in a service management or information technology-related field
• Experience in leveraging industry standards and frameworks such as ISO/IEC 27001
• Working knowledge in one or more security and privacy domains such as: security governance policies and procedures, risk management, compliance, access control, network
• Project management skills to lead IT security projects
• CISA, CISM, CISSP and security related qualifications are recommended

Rakuten is an equal opportunities employer and welcomes applications regardless of sex, marital status, ethnic origin, sexual orientation, religious belief or age.