Total 2,659 information security analyst job vacancies in Legal / Public / Security category in Singapore

Job Summary:

We are seeking a skilled and dedicated Information Security Analyst/Consultant to join our team. In this role, you will be responsible for advising, assisting, and implementing information security programs for our clients using frameworks such as ISO/IEC 27001:2022 and Cyber Trust Mark, in addition you will also be involve in overseeing the implementation of security solutions to assist clients in improving their information security and cyber security posture. You will work closely with clients to assess their security needs, develop robust security strategies, and ensure compliance with industry standards and are expected to manage client’s requirements and expectations during the consulting process helping them to achieve ISO/IEC 27001:2022 or Cyber Trust Mark Certification.

Key Responsibilities:

• Client Advisory and Consultation: Provide pre-sales support, expert advice and consultation to clients on information security practices and strategies.
• Framework Implementation: Assist clients in developing and implementing information security programs using frameworks like ISO/IEC 27001:2022 and Cyber Trust Mark.
• Security Assessments: Conduct comprehensive security assessments to identify vulnerabilities and recommend mitigation strategies.
• Policy Development: Develop and maintain information security policies, procedures, and guidelines for clients.
• Compliance and Auditing: Ensure client compliance with industry standards and regulatory requirements through regular audits and assessments.
• Risk Management: Identify, analyze, and manage information security risks for clients.
• Incident Response: Assist clients in developing incident response plans and provide support during security incidents.
• Training and Awareness: Conduct training sessions and workshops to raise awareness about information security best practices among client employees.
• Documentation: Prepare detailed reports and documentation for security assessments, policies, and compliance efforts.
• Monitoring Emerging Technologies and Threats: Stay up-to-date with emerging technologies and threats in AI, blockchain, and other relevant fields, and integrate this knowledge into security strategies.
• Security solutions: Understand and learn new cybersecurity solutions and assisting to implement these solutions to improve their security posture.

Qualifications:

• Education: Minimum diploma in Cyber Security, Computer Science, or related field and minimum 3 years of experience in IT or Cyber Security field.
• Certifications: Good to have certifications such as CISSP, CISM, or ISO/IEC 27001 Lead Auditor/Implementer, Certified Ethical Hacker.
• Experience: Proven experience in information security consulting, with a focus on implementing security frameworks like ISO/IEC 27001:2022, NIST, CSA Star and CIS.
• Skills: Strong analytical, problem-solving, and communication skills. Proficiency in security assessment tools and methodologies.
• Knowledge: In-depth knowledge of information security principles, standards, and best practices.
• Project management: Understanding of stakeholder management and managing project lifecycle.

What We Offer:

Opportunities for professional development and career growth. A dynamic and collaborative work environment.

Cybersecurity certification training opportunities

Details of the Division and Team:

Everyday DB observes thousands of cyber security intrusion attempts. Deutsche Bank’s COO Chief Security Office (CSO) integrates both Corporate Security (CS) and Information Security (CISO) as both teams are responsible for mitigating these risks.

The CSO team enables the business of Deutsche Bank by providing agile security operational capabilities.

With their expertise in Threat Intelligence, Data Leakage Protection, Cyber Threat Analytics, Malware Response & Research, Security Monitoring, Incident Response, Forensics and Vulnerability Management, they provide global services from key locations in Frankfurt, Jacksonville and Singapore while leveraging offshore capabilities in Pune and Bucharest.

What we will offer you:

A healthy, engaged and well-supported workforce are better equipped to do their best work and, more importantly, enjoy their lives inside and outside the workplace. That’s why we are committed to providing an environment with your development and wellbeing at its center.

You can expect:

• Flexible benefits plan including virtual doctor consultation services.
• Comprehensive leave benefits
• Gender Neutral Parental Leave
• Flexible working arrangements
• 21 days of annual paid leave, plus public holiday & Flexible Working Arrangement

Your key responsibilities:

The Deutsche Bank Chief Security Office is looking for an experienced DLP Information Security Analyst.

Adhering to internal and external policies, the role is required to work in a global team to identify and assess technical and personnel security breaches within a heterogeneous business and technical landscape. This will include working with a variety of technologies and business groups to detect, assess and document the escalation of security alerts and consequence management.

Additionally, the role will require collaboration with control functions as well as businesses to identify information that needs to be protected and controls that are best suited to address these requirements.

The work will also involve utilizing vendor solutions, bespoke control applications and supporting the development of team tasks, such as the continual assessment of preventive and detective controls.

• Continuously monitor DLP systems for alerts and act as a subject matter expert for all data leakage investigations globally across all regions where the bank has a footprint.
• Manage DLP incidents, ensuring coordinated response and timely escalations.
• Document all incidents, actions taken, and outcomes. Prepare detailed reports for management and compliance purposes.
• The incumbent also assumes responsibility for overseeing and coordinating all facets of incident management like initial evaluation, stakeholder management, technical triage, and incident resolution.
• Ensure DLP tools and technologies are maintained, optimized, and regularly evaluated through established cyber risk frameworks.
• Cooperate with control functions to understand regulatory requirements and applicable laws.
• Ability to methodically analyze complex data and requirements and provide accountable SME opinion.
• Design and implement new DLP monitoring use cases. Collaborate with business and control functions to identify sensitive information that needs to be protected.
• Propose ways to improve existing process to achieve better operational excellence via automation.

Your skills and experience:

• Minimum 3 years of working experience in either Data Loss Prevention (DLP) or Security Operations Center, with at least 1 year working in an enterprise-grade Operations Center.
• A Bachelor's degree in Information Technology, Computer Science, or a related field is required.
• Working experience with Data Loss related applications such as Symantec DLP, Digital Guardian; and SIEM tools such as Splunk, Sentinel.
• Working knowledge in IT Fundamentals such as networking, hardware/software.
• Analytical and critical thinking with an inquisitive mindset, collaboration, and conflict management with good communication skills.
• Mentor new team members and provide guidance and directions when required.
• Ability to work in fast paced environment and within tight deadlines.
• Certifications such as Symantec DLP certified specialist, CompTIA Security+, CISSP, Microsoft Information Protection, Certified Data Protection Officer etc.

Role is required to be performed on-site at One Raffles Quay office. Relevant vaccination requirements may apply.

How we’ll support you:

• Flexible working to assist you balance your personal priorities
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs
• Training and development to help you excel in your career

About us and our teams:

Deutsche Bank is the leading German bank with strong European roots and a global network. Click click here to see what we do.

Deutsche Bank & Diversity

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

Job Description: • Able to implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with). Define the process, provisioning, interfaces and provide recommendations.
• Access management and control.
• Engage and execute Security Vulnerability Scanning activities (HCR/NVA/Pen Test/ SAST/DAST activities etc) and resolve findings.
• Manage Access management and SIEM tools in the environment.
• Facilitate auditing processes conducted by external parties.
• Familiar with operational security processes
o OS level patching
o Application-level patching
o Operational housekeeping and archival.
o Server and application hardening procedure & steps
o IM8 policy
o Vulnerability Assessment
o Security Incident detection and reporting
o SSL certificate renewal

Technologies & Skills Required
• OS Administration (Linux / Windows)
• IBM Security Verify Access
• IBM Qradar
• Thales HSM
• OpenSSL
• Tenable Nessus, Burp Suite Enterprise

Top 3 MUST have skills:
• Minimum 2+ years of experience with IT Security.
• CISSP/CCSP/CCSK certification or its equivalent is preferred
• 1-2 areas of Cyber Security domains such as Identity Access Management, Security and Risk Management, Application and Network security, Vulnerability Management with a broad understanding of other areas.

Security Analyst

• 12 months contract
• Work location: CBD

The Opportunity

• Able to implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with). Define the process, provisioning, interfaces and provide recommendations.
• Access management and control.
• Engage and execute Security Vulnerability Scanning activities (HCR/NVA/Pen Test/ SAST/DAST activities etc) and resolve findings.
• Manage Access management and SIEM tools in the environment.
• Facilitate auditing processes conducted by external parties.

Your Background

• Minimum 2+ years of experience with IT Security.
• CISSP/CCSP/CCSK certification or its equivalent is preferred
• 1-2 areas of Cyber Security domains such as Identity Access Management, Security and Risk Management, Application and Network security, Vulnerability Management with a broad understanding of other areas.
• Only Singaporeans
• Familiar with operational security processes
  o OS level patching
  o Application-level patching
  o Operational housekeeping and archival.
  o Server and application hardening procedure & steps
  o IM8 policy
  o Vulnerability Assessment
  o Security Incident detection and reporting
  o SSL certificate renewal
  
  Technologies & Skills Required
  • OS Administration (Linux / Windows)
  • IBM Security Verify Access
  • IBM Qradar
  • Thales HSM
  • OpenSSL
  • Tenable Nessus, Burp Suite Enterprise

Interested parties please click "Apply Now" or contact May Anne Ramos (EA Reg no: R1110127) at [email protected] for more information.
Peoplebank Singapore Pte Ltd, EA Licence Number: 08C5248.

Avensys is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail and supply chain.

We are currently looking to hire a Security Engineer/ Analyst. This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

JOB TYPE

Long Term Contract

ROLES AND RESPONSIBILITIES

• Able to implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with). Define the process, provisioning, interfaces and provide recommendations.
• Access management and control.
• Engage and execute Security Vulnerability Scanning activities (HCR/NVA/Pen Test/ SAST/DAST activities etc) and resolve findings.
• Manage Access management and SIEM tools in the environment.
• Facilitate auditing processes conducted by external parties.
• Familiar with operational security processes
• OS level patching
• Application-level patching
• Operational housekeeping and archival.
• Server and application hardening procedure & steps
• IM8 policy
• Vulnerability Assessment
• Security Incident detection and reporting
• SSL certificate renewal

REQUIREMENTS

Technologies & Skills Required
• OS Administration (Linux / Windows)
• IBM Security Verify Access
• IBM Qradar
• Thales HSM
• OpenSSL
• Tenable Nessus, Burp Suite Enterprise

Top 3 MUST have skills:
• Minimum 2+ years of experience with IT Security.
• CISSP/CCSP/CCSK certification or its equivalent is preferred
• 1-2 areas of Cyber Security domains such as Identity Access Management, Security and Risk Management, Application and Network security, Vulnerability Management with a broad understanding of other areas.

Good to have skills (Optional)
• Familiar with Singapore Government standards of security posture including planning and running SSAT, Security Compliance Check, Security Vulnerability Scanning, DAST & SAST.
• Work with security tools & environment.

WHAT’S ON OFFER

You will be remunerated with an excellent base salary and entitled to attractive company benefits. Additionally, you will get the opportunity to enjoy a fun and collaborative work environment, alongside a strong career progression.

To submit your application, please apply online or email your UPDATED CV in Microsoft Word format to [email protected]. Your interest will be treated with strict confidentiality.

CONSULTANT DETAILS

Consultant Name: Keerthana Ramakrishnan

Avensys Consulting Pte Ltd

EA License 12C5759

Privacy Statement: Data collected will be used for recruitment purposes only. Personal data provided will be used strictly in accordance with the relevant data protection law and Avensys' privacy policy.

Title: IT Security Analyst

Singlife is a leading homegrown financial services company, offering consumers a better way to financial freedom. Through innovative, technology-enabled solutions and a wide range of products and services, Singlife provides consumers control over their financial wellbeing at every stage of their lives.

In addition to a comprehensive suite of insurance plans, employee benefits, partnerships with financial adviser channels and bancassurance, Singlife offers investment and advisory solutions through its GROW with Singlife platform. It also offers the Singlife Account, a mobile-first insurance savings plan.

Singlife is the exclusive insurance provider for the Ministry of Defence, Ministry of Home Affairs and Public Officers Group Insurance Scheme. Singlife is also an official signatory of the United Nations Principles for Sustainable Insurance and the United Nations-supported Principles for Responsible Investment, affirming its commitment to finding a better way to sustainability.

The merger of Aviva Singapore and Singlife was announced in September 2020 and created one of the largest homegrown financial services companies in Singapore in a deal valued at S$3.2 billion. It was the largest insurance deal in Singapore at the time.

Singlife was subsequently acquired by Sumitomo Life in March 2024, one of Japan’s leading life insurers, which valued Singlife at S$4.6 billion, making the transaction one of the largest insurance deals in Southeast Asia.

Purpose of the Role:

Responsible for the tactical and operational oversight of our information security program in term of managed security services. This role involves in implementing and maintaining robust security measures to safeguard our information and network infrastructure. One will be the driving force behind our cybersecurity strategy, ensuring our systems are resilient against threats, and our team is equipped with the knowledge and tools to maintain high security standards.

Role Attributes:

Running operation of Singlife’s Managed Security Services program for entire Singlife Group under the Cyber Fusion Centre team.

Key Responsibilities:

Security Measures Implementation and Performance Tracking

• Develop and implement effective security measures to protect company data and network infrastructure.
• Regularly track and report on the performance of these security measures.

Cybersecurity Architecture and Strategy

• Deep understanding of Singlife’s comprehensive cybersecurity architectures.
• Develop and update the company’s information security strategy, ensuring it aligns with industry best practices and business objectives.

System Security Requirements

• Identify, define, and document system security requirements.
• Prepare and maintain technical documentation.
• Recommend solutions to management based on these requirements.

Security Infrastructure Management

• Configure, troubleshoot, and maintain security infrastructure hardware and software.
• Install and manage software for monitoring systems and networks for security breaches and intrusions.

Behavior Monitoring and Preventive Measures

• Monitor systems for irregular behavior and anomalies.
• Establish and enforce preventive measures to mitigate potential security threats.

Staff Training and Awareness

• Educate and train staff on information system security best practices.
• Foster a security-aware culture within the organization.

Project Monitoring and Milestone Achievement

• Ensure regular monitoring of project activities.
• Guarantee that project milestones are met in a timely and efficient manner.

Managed Security Device Expertise:

• Proficient in managing a range of security devices, including but not limited to: Email Security, IDPS, Attack Surface Monitoring, Anti-Malware Solution, Web Application Firewall, Certificate Management System (CMS)

Key Decision within the Role:

• Standard Operating Procedure write-up
• BAU Operation Process write-up

Requirements:

Experience

• Preferable to have 3+ years of relevant experience
• Knowledge in managing security solution stated above.
• Strong understanding of cybersecurity principles, practices, and solutions.
• Effective communication and analytical abilities.
• Ability to analyze complex security systems and identify vulnerabilities and solution.
• Expertise in computer programming and scripting languages.

Education

• Academic: Bachelor’s degree in computer science / information technology(preferred)
• Professional Certification(s): CISSP, or any related vendor certification (preferred)

If you find yourself able to demonstrate the criteria above, apply with us now. We look forward to your application.

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

The suitable candidate will join a team of engineers and operations specialists in the support of enterprise privileged access management infrastructure and operations. He/She will be responsible for the end to end design, deployment, operations and development of the bank’s privileged access management framework, infrastructure and processes.

Key responsibilities

Drive the automation and integration of privileged access management infrastructure to other systems to achieve straight through processing and reduce manual work.

Provide on-going operations support including management reporting and operations dashboards relating to the governance oversight of privileged accounts and passwords.

Requirements

5+ Years of CyberArk Experience:

Demonstrated expertise in the deployment, configuration, management, and support of CyberArk infrastructure components. Proven ability to provide regional support and integrate CyberArk solutions via APIs. CyberArk certifications are preferred to validate knowledge and skills.

Scripting and Reporting:

Proficient in writing PowerShell scripts and SQL statements to develop comprehensive management reports focused on the usage and operational management of privileged accounts. This includes automating reporting processes and ensuring accurate data presentation for stakeholders.

Data Visualization: Experienced with Grafana for creating data visualizations and dashboards, enabling real-time insights into access management and security posture. Skilled at translating complex data sets into understandable visual formats for better decision-making.

Privileged Access Management: Strong understanding of enterprise privileged access management principles, encompassing risk management, compliance, governance, and control. Ability to develop and enforce policies that mitigate risks associated with privileged access.

Audit Experience:

Extensive experience in responding to audit queries and preparing detailed reports related to access management. Skilled in analyzing audit findings and implementing corrective actions to address compliance gaps. Proven ability to collaborate with internal and external auditors to ensure all necessary documentation is accurate and readily available.

Remediation Expertise:

Extensive experience in remediating CyberArk failed objects to ensure that auto-managed objects comply with security policies and standards. This includes troubleshooting and resolving issues to maintain operational integrity and compliance.

Technical Platform Knowledge:

In-depth knowledge of key operating systems and databases, including Windows, Unix, MSSQL, and MariaDB. Previous experience in administering these platforms enhances ability to manage and secure privileged accounts effectively.

Banking Environment Experience:

Familiarity with working in a banking or financial services environment, understanding the unique regulatory and security requirements involved. This background supports effective implementation of access management solutions tailored to industry standards.

Educational Background:

Bachelor’s degree in Computer Science, Information Systems, or Engineering (or a related field). Alternatively, a combination of relevant professional experience and CyberArk certifications is also acceptable, demonstrating a solid foundation in security practices.

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gAHYjij4

• Strong support to invest in information security from the company
• Regional role with an established company

About the company

Our Client is an established company. With rapid expansion plan, they are now looking for a new Information Security Assistant Manager (GRC, ISO27001) to join their team.

About the job

Reporting to the Head of Security, you will be responsible for:

• Leading initiatives to assess the adequacy and effectiveness of IT controls and policies, ensuring that business users are compliant to the IS standards (ISO 27001, PDPA and etc).
• Planning and implementation Information Security, IT Risk Management, IT Audit and IT policy to improve the overall security posture for the organization across Asia. This includes reviewing and maintaining information security polices.
• Designing IT Security framework and roadmap to ensure the availability, integrity and confidentiality of IT system. This includes setting up the best practices and governance for Risk Control Security Assessment (RCSA). Designing processes to identify, improve and optimize IT risk management policies/practices.
• Identifying potential gaps in security control to enhance early detection capability. This is through leveraging internal security data (Performing analysis of forensic evidence, log data, compromised hosts, and network traffic) and external sources (Industry portals and etc) to identify existing gaps in security control and close the gaps.
• Overseeing the development and execution of corporate security awareness and training programs to business stakeholders to prevent and limit the impact of a potential cybersecurity event
• Monitoring compliance, keep abreast of legislative and regulatory trends to address potential impact and non-compliance/gaps.

Skills and experience required
As a successful applicant, you will have at least 5 years of experience in Information Security(ISO 27001, ISO 27701 or etc) / Governance, risk management, and compliance (GRC) Proven track record of engagement with C-level business stakeholder across Asia is required.

Whats on offer
This is an excellent opportunity to join an established company with lots of opportunity to improve the security posture of the company.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gAHYjij4 (EA: 94C3609/ R1219669)

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gM7-eVHS

• Decision making for Information Security including security strategy and roadmap for APAC
• Opportunity to implement information security with strong support from business stakeholders

About the company

Our Client is a Multi billion market leader within their industry. With rapid expansion across APAC, they are now looking for a new Manager, Information Security & GRC (Governance, Risk & Compliance) to join their team

About the job

• Reporting directly to the Head of Security based out of Asia, Your responsibility involves:
• Managing a lean team of information Security Analyst across Asia
• Developing and executing information security management framework and related IT Security policies within the organizations. This includes conducting continuous assessment of IT security practices and policies to improve the security posture of the company
• Leading initiatives to assess the adequacy and effectiveness of IT controls and policies, ensuring that business users are compliant to the IS standards (ISO 27001, PDPA and etc).
• Designing and implementing an on-going Information Security training and awareness programme for different levels of personnel. This includes monitoring the level of awareness to information security risk
• Planning and implementation Information Security, IT Risk Management, IT Audit and IT policy to improve the overall security posture for the organization across Asia. This includes reviewing and maintaining information security polices.

Skills and experience required

As a successful applicant, you will have at least 8 years of experience in IT frameworks (ISO 27001, NIST or etc) / IT control / Governance, risk management, and compliance (GRC) Proven track record of managing a team is required for this role.

Candidates with experience in cloud or SAP security will be of added advantage.

Whats on offer
This is an excellent opportunity to implement information security with strong support from business stakeholders.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gM7-eVHS (EA: 94C3609/ R1219669)

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

What you'll do:

As a Junior Cyber Security Analyst, your primary role will be to ensure the security and integrity of our client's digital assets. You will intake cybersecurity related requests from internal and external entities that require triage, remediation or escalation. Your excellent problem-solving skills will be put to use as you collaborate with your team members to resolve complex issues. Your commitment to accurate documentation will contribute significantly to record-keeping and analysis.

* Answer incoming calls to assist with information security inquiries or issues.
* Document all interactions accurately for record-keeping and analysis.
* Follow established processes and guidelines to handle common issues.
* Collaborate with team members to resolve more complex problems or escalate as necessary.
* Monitor your assigned queues and work cases in an efficient and effective manner.

What you bring:

The ideal candidate for the Junior Cyber Security Analyst role is someone who has a strong understanding of Cyber Security and Information Technology. Your effective typing skills will enable you to document all interactions accurately, while your strong problem-solving and critical thinking skills will be crucial in handling common issues. Your effective communication and interpersonal skills will allow you to collaborate effectively with team members.

* Effective typing skills
* Familiarity with Cyber Security and Information Technology
* Strong problem-solving and critical thinking skills
* Effective communication and interpersonal skills

What sets this company apart:

Our client is a leading global organisation that values collaboration, commitment, and growth. They offer an inclusive work environment where every employee is valued for their unique contributions. They believe in providing opportunities for learning and development, making it an ideal place for individuals who are eager to grow their careers.

What's next:

Ready to take the first step towards a rewarding career in cybersecurity? Don't hesitate!

Apply today by clicking on the link!

Do note that we will only be in touch if your application is shortlisted. Robert Walters (Singapore) Pte Ltd ROC No.: 199706961E | EA Licence No.: 03C5451 EA Registration No.: R24123088 Josue Hoyos Pardavell

The Senior Director IT is responsible for establishing and maintaining the information security program to ensure that information assets and associated technology, applications, systems, infrastructure and processes are adequately protected in the digital ecosystem in which we operate. The individual is responsible for identifying, evaluating and reporting on legal and regulatory, compliance, IT and cybersecurity risk to information assets, while supporting and advancing business objectives.

Description

Establish Governance and Build Knowledge

• Facilitate an information security governance structure through the implementation of a hierarchical governance program, including the formation of an information security steering committee or advisory board.
• Provide regular reporting on the current status of the information security program to enterprise risk teams and senior business leaders
• Work with the vendor management office to ensure that information security requirements are included in contracts by liaising with vendor management and procurement organizations.
• Create and manage a targeted information security awareness training program for all employees, contractors and approved system users, and establish metrics to measure the effectiveness of this security training program for the different audiences.
• Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems and services, including privacy, risk management, compliance and business continuity management.
• Provide clear risk mitigating directives for projects with components in IT, including the mandatory application of controls.

Develop the Frameworks

• Develop and enhance an up-to-date information security management framework based on one of the following: International Organization for Standardization (ISO) 2700X, ITIL, ENISA, ISA-62443, COBIT/Risk IT and National Institute of Standards and Technology (NIST) Cybersecurity Framework.
• Create and manage a unified and flexible control framework to integrate and normalize the wide variety and ever-changing requirements resulting from global laws, standards and regulations.
• Develop and maintain a document framework of continuously up-to-date information security policies, standards and guidelines. Oversee the approval and publication of these information security policies and practices.
• Create a framework for roles and responsibilities with regard to information ownership, classification, accountability and protection of information assets.
• Facilitate a metrics and reporting framework to measure the efficiency and effectiveness of the program, facilitate appropriate resource allocation, and increase the maturity of the information security, and review it with stakeholders at the executive and board levels.

Architecture/Engineering Support

• Work with IT staff to ensure that security is factored into the evaluation, selection, installation and configuration of hardware, applications and software.
• Recommend and coordinate the implementation of technical controls to support and enforce defined security policies.
• Research, evaluate, design, test, recommend or plan the implementation of new or updated information security hardware or software, and analyze its impact on the existing environment; provide technical and managerial expertise for the administration of security tools.
• Work with the enterprise architecture team to ensure that there is a convergence of business, technical and security requirements; liaise with IT management to align existing technical installed base and skills with future architectural requirements.

Operational Execution

• Coordinate, measure and report on the technical aspects of security management.
• Manage outsourced vendors that provide information security functions for compliance with contracted service-level agreements.
• Manage and coordinate operational components of incident management, including detection, response and reporting.
• Maintain a knowledgebase comprising a technical reference library, security advisories and alerts, information on security trends and practices, and laws and regulations.
• Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend treatment plans and communicate information about residual risk.
• Manage security projects and provide expert guidance on security matters for other IT projects.
• Assist and guide the disaster recovery planning team in the selection of recovery strategies and the development, testing and maintenance of disaster recovery plans.
• Ensure audit trails, system logs and other monitoring data sources are reviewed periodically and are in compliance with policies and audit requirements.
• Design, coordinate and oversee security testing procedures to verify the security of systems, networks and applications, and manage the remediation of identified risks.

Qualifications

• Bachelor’s Degree in Engineering, Computer Science, Information Systems, or related discipline required.
• Master’s Degree in a related field is preferred.
• Professional security management certification is desirable, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials

Experiences

• A minimum of ten years of IT experience, with seven years in an information security role and at least five years in a managerial capacity is required.
• Experience working with legal, audit and compliance staff is preferred.
• Experience developing and maintaining policies, procedures, standards and guidelines is required.
• Familiarity with applicable legal and regulatory requirements, including, but not limited to, the U.S. Sarbanes-Oxley Act, the U.S. Health Insurance Portability and Accountability Act (HIPAA), the European Union Privacy Directive, and the Japanese Financial Instruments and Exchange Law ("J-SOX").

Skill Sets

• Excellent analytical skills, the ability to manage multiple projects under strict timelines, as well as the ability to work well in a demanding, dynamic environment and meet overall objectives
• Project management skills: financial/budget management, scheduling and resource management
• Ability to lead and motivate the information security team to achieve tactical and strategic goals, even when only "dotted line" reporting lines exist
• A master of influencing entities and decisions in situations where no formal reporting structures exist, but achieving the desirable outcome is vital
• Excellent communication, interpersonal and collaborative skills. Experience working with a multi-continent technical team preferred
• High degree of initiative, dependability and ability to work with little supervision while being resilient to change

Technical Competencies

• Experience with common information security management frameworks, such as International Standards Organization (ISO) 2700x, the IT Infrastructure Library (ITIL) and Control Objectives for Information and Related Technology (COBIT) frameworks
• An understanding of operating system internals and network protocols.
• Familiarity with the principles of cryptography and cryptanalysis.
• Experience in application technology security testing (white box, black box and code review).
• Experience in system technology security testing (vulnerability scanning and penetration testing).

Job Responsibilities

• Responsible for conducting audit to assess organizations' Information Security Management System and related Statement of Applicability (SoA) for conformity with ISO/IEC 27001 requirements;
• Conduct other related Information Security, Cybersecurity, Data Protection audits
• Prepare audit plans for ISO audits and audit reports and submit within the required timeline;
• Ensure assigned audits are carried out in compliance with accreditation requirements;
• Review audit reports as and when assigned by Operations team;
• Follow-up closely with client on NC notes and take necessary actions to address and close queries promptly;
• To carry out any other task assigned by Operation Manager;
• Ensure compliance with Corporate’ policy & procedures, ISO/IEC 17021, ISO 19011 standard requirements;
• Manage the entire audit process from planning, conducting, reporting, and following up on the assigned audits.
• Conduct and develop course materials related to Information Security, Cybersecurity, Data Protection for trainings/workshops/seminars
• Support in technical review of audit reports and technical advice to Sales Team and Certification Team as and when required.

Knowledge/ Skills/ Competencies Required (if applicable)

• Minimum Possess a professional degree in Computer Science/Information Security/Cybersecurity or related fields to Information Technology
• Minimum 4 years working experience and at least two years are in a role or function relating to information security/Cybersecurity
• Successfully completed a Lead Auditor Course in ISO/IEC 2700 Information Security Management System (ISMS)
• Having completed training courses in Singapore PDPA Fundamentals/Practitioner and holding industry certifications like CISA, CIPM, CISSP will be advantageous
• Detailed and customer-oriented with strong interpersonal skills and a team player Excellent communication, report writing, presentation and analytical skills
• Willing to travel overseas to conduct audits;
• Computer literacy for MS Word, Excel, and PowerPoint;
• Professional training will be provided
• Be able to work independently with high level of initiative and resourcefulness
• Candidates with related working experiences are welcome for trainee position.

As a Business Information Security Officer, you will play a key role in proactively managing the information security and Data privacy landscape within the organization. Your expertise will help guide strategic decision-making on technology risk and security matters, ensuring robust IT security architecture, practices, and compliance across the organization.

Key Responsibilities:

• Lead proactive management of InfoSec & privacy.
• Provide thought leadership on technology risk and security.
• Drive the development and implementation of IT security policies and solutions.
• Ensure secure software development practices and change management processes.
• Plan and manage security incident responses and investigations.
• Oversee global adoption of cybersecurity and privacy controls.
• Act as the main point of contact for InfoSec and privacy matters.
• Collaborate with external auditors and regulators for compliance.

Required Skills and Qualifications:

• Extensive experience in IT security architecture, policy, and procedure development.
• Demonstrated leadership with strong decision-making abilities.
• Knowledge of software development life cycle security and asset management.
• Proven track record in incident response management and cybersecurity investigations.
• Excellent communication skills for non-technical stakeholders.
• Proficiency in current and emerging security trends.
• Familiarity with Singapore regulatory IT security requirements (e.g., MAS TRM, Cyber Hygiene notice).
• Bachelor's degree in IT/Computer Science or related field.
• Preferred certifications: CISSP, CISA, CISM, GIAC.

Personal Attributes:

• Team-oriented and able to work collaboratively.
• Strong communication skills for engaging senior stakeholders.
• Analytical problem-solver with a creative mindset.
• Independent and hands-on approach with strong attention to detail.

Application Process:
If you are interested in this role, please send your resume to [email protected]

Qualification training shall be provided as necessary to attain competency to deliver job responsibilities.

Main Job Responsibilities:

• Conduct 3rd party audits to assess organizations' Information Security Management System and related Statement of Applicability (SoA) for conformity with ISO/IEC 27001 and in strict compliance with GIC's Code of Ethics and established audit procedures
• Conduct other related Information Security, Cybersecurity, Data Protection audits – ISO/IEC 27701, ISO/IEC 27017, ISO/IEC 27018, CSA Cyber Essentials mark, CSA Cyber Trust mark, IMDA Data Protection Trust mark, GDPR Compliance audits, Second Party IT audits
• Conduct Information Security, Cybersecurity, Data Protection trainings/workshops/seminars
• Manage the entire audit process from planning, conducting, reporting, and following up on the assigned audits.
• Support in technical review of audit reports and technical advice to Sales Team and Certification Team as and when required.

Job Qualifications / Requirements:

• Possess a professional degree in Computer Science/Information Security/Cybersecurity or related fields to Information Technology
• At least two years are in a role or function relating to information security/Cybersecurity
• Successfully completed a Lead Auditor Course in ISO/IEC 2700 Information Security Management System (ISMS)
• Having completed training courses in Singapore PDPA Fundamentals/Practitioner and holding industry certifications like CISA, CIPM, CISSP will be advantageous

Your New Role:

Align IT needs with the strategic directions of the enterprise.

Allocate budget and resources accordingly by taking into consideration business impact

of the information security risks.

Analyse various internal and external information security risk reporting sources.

Contribute to the development of a strategy plan.

Determine appropriate IT strategies and solutions.

Develop a budget.

Develop business cases that support information security programme investments.

Disseminate organisation's IT security goals and objectives to business units and senior

management.

Evaluate IT security goals and objectives against the benchmarks.

Evaluate existing IT environment against organisation's IT strategic directions.

Formulate information security goals and objectives.

Identify and implement business innovation.

Identify controls and solutions to address/mitigate risks.

Implement change management process.

Manage overall information security risk.

Maximise business value of IT investments.

Obtain management support for information security programme investments highlighted

in the endorsed business cases.

Select new technology models for business.

Translate solutions into information security programmes.

What you'll get in return
This is an exciting opportunity to join a global company. You will be part of a dynamic team and you will be remunerated at market competitive rates.

What you need to do now

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV.

Referrals are welcome.

EA Reg Number: R21103035

EA License Number: 07C3924 | Company Registration No: 200609504D

About the company

CGS International Securities Pte. Ltd. (CGS International) is an award-winning and market leading integrated financial services provider, ranked among the top securities houses in Asia.

CGS International taps on our wealth of global and ASEAN insights to offer equities trading, leveraged products, wealth management, investment banking, equities research, Shariah-compliant financing, fixed income, currency and commodities, structured products and prime brokerage services in over 15 countries and regions.

Along with its parent organisation China Galaxy Securities, a leading securities house in China, CGS International is trusted by more than 15 million customers globally.

Job Description

1) Threat Detection:

- Use of tools to scan/ detect/ analyze/ correlate threats

- Manually review to detect/ analyze/ correlate threats

- Participate in design of infrastructure and process of threat detection

- Perform triage of security alerts to filter false positives, classify alerts and determine response type

2) Threat Hunting:

- Collect and analyze data to identify patterns and anomalies that indicate presence of a hidden threat

- Investigate potential threats to determine if they pose a real threat

3) Threat Intelligence:

- Keep up to date of threats reported by reliable internal and external sources

- Maintain samples, logs and records, compromised information that help understanding of attacks

4) Incident Response:

- Inform relevant members and departments of threats and advise of remediation and mitigation

- Coordinate and follow up with all relevant members and departments to collect data and evidences, to ensure completion of remediation and mitgation

- Document all security incidents with records of assessment, investigation, remediation and mitigation

- Maintain playbooks and guide other departments on contributing to them

- Lead and participate actively in security incident response effort

- Lead and participate actively in post-incident reviews to evaluate response effectiveness and recommend improvements

- Conduct, coordinate and debrief simulated exercises on security incident management across departments

5) Requirements Review:

- Insurance coverage of incident response management

- Third party agreement coverage of security monitoring and incident response management

Corporate policies, standards and procedures in security monitoring and incident response management

Job Requirements

• Strong knowledge of information security principles, incident response methodologies, network protocols, logging/detection/response tools (e.g. SIEM, EDR, XDR)
• Proficient in network communications, log analysis, scripting
• Good problem-solving, analytical and communication skills
• Preferably has experience working with cross-geographical teams
• 1-3 years of experience as a Security Operations Analyst or similar role
• Diploma or Bachelor degree in Computing or related field
• Preferably has relevant certifications (e.g. GCIH, GCIA)
• Proactive and independent
• Keen to learn
• Has an eye for detail
• Willing to share and collaborate as a team player

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;

Strong knowledge of ISO 27001:2022 standards and requirements;

Experience in developing and maintaining comprehensive project plans, including timelines and milestones;

Experience in managing ISO 27001-related risks and conducting internal/external audits;

Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;

PMP, CISSP, CISM, or similar certifications are a plus;

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE's website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

• Driving innovation and shaping the future with cutting-edge projects
• Personal growth and collaboration.

About Our Client

Client is a global technology firm known for its innovative approach to content creation and distribution. It operates a range of platforms that combine artificial intelligence and machine learning to deliver personalized experiences to users. The company's products span entertainment, social networking, and e-commerce, with a strong focus on fostering creativity and community engagement. It has a diverse and rapidly growing global presence, continuously pushing the boundaries of digital media and technology.

Job Description

• Communicate technical and non-technical concepts effectively to the business side.
• Coordinate security assessments with product teams.
• Conduct cyber risk assessments and technical security reviews to identify IT risks for new products and features, and recommend controls.
• Collaborate with security and business teams to design defense-in-depth controls and improve security posture.
• Fulfill business security requirements like red teaming, fraud detection, and penetration tests, while enhancing security maturity.
• Monitor and manage risk mitigations, exceptions, and ensure adequate monitoring is in place.
• Track emerging cyber threats, vulnerabilities, and exploits affecting infrastructure and products.

The Successful Applicant

A successful candidate will have a strong technical background in cybersecurity, with the ability to communicate effectively between technical teams and business stakeholders. They should be skilled in risk assessments, vulnerability management, and implementing security controls. Proactive, collaborative, and able to manage security requirements like red teaming and penetration testing, they will stay ahead of emerging threats and continuously improve security posture across the organization.

What's on Offer

A chance to work on impactful security initiatives in an innovative environment, collaborate with cross-functional teams, and grow your career. You'll receive a competitive package, opportunities for professional development, and the chance to work with cutting-edge technologies.

Contact

Miao Xia Neo (Lic No: R21103441/ EA no: 18C9065)

Quote job ref

JN-112024-6583081

Phone number

+65 6416 9828

Michael Page International Pte Ltd | Registration No. 199804751N

Job Description & Requirements

Fulltime Senior Security Officer

Salary Offer: S$3,000.00 per calendar month

• Cairnhil Rice (Dayshift )
• Dunman(Day shift)
• Sentosa ( Day and Night shift)

Fulltime Security Officer

• Tampines Central (Day & Night Shift) Salary Offer: S$2,900.00 per calendar month

Fulltime Floater Security Officer

Salary Offer: S$3,000.00 per calendar month

Location: Islandwide

Job Description & Requirements

• Can work in Residential or Condo
• Can Perform Security Screening
• Patrolling and guarding
• Access and egress control
• Incident response
• Able to Respond to emergencies/incidents and accidents at the site
• Conduct security audits and risk assessment
• Familiar with PWM Job Function
• Must have RTT Certificate
• Able to work 12 hours per shift
• Able to speak in English (plus point if can speak Mandarin)
• must have one (1) Notification Available under PLRD
• must be Fully Vaccinated

For more information:

For Interested Applicant, you may call

6396-7371 / 8321-8096 / 8797-8615

You may also visit us at

200 Jalan Sultan #11-04 Textile Centre Singapore 199018