Total 54 information technology job vacancies in Legal / Public / Security category in raffles city central singapore

As a Business Information Security Officer, you will play a key role in proactively managing the information security and Data privacy landscape within the organization. Your expertise will help guide strategic decision-making on technology risk and security matters, ensuring robust IT security architecture, practices, and compliance across the organization.

Key Responsibilities:

• Lead proactive management of InfoSec & privacy.
• Provide thought leadership on technology risk and security.
• Drive the development and implementation of IT security policies and solutions.
• Ensure secure software development practices and change management processes.
• Plan and manage security incident responses and investigations.
• Oversee global adoption of cybersecurity and privacy controls.
• Act as the main point of contact for InfoSec and privacy matters.
• Collaborate with external auditors and regulators for compliance.

Required Skills and Qualifications:

• Extensive experience in IT security architecture, policy, and procedure development.
• Demonstrated leadership with strong decision-making abilities.
• Knowledge of software development life cycle security and asset management.
• Proven track record in incident response management and cybersecurity investigations.
• Excellent communication skills for non-technical stakeholders.
• Proficiency in current and emerging security trends.
• Familiarity with Singapore regulatory IT security requirements (e.g., MAS TRM, Cyber Hygiene notice).
• Bachelor's degree in IT/Computer Science or related field.
• Preferred certifications: CISSP, CISA, CISM, GIAC.

Personal Attributes:

• Team-oriented and able to work collaboratively.
• Strong communication skills for engaging senior stakeholders.
• Analytical problem-solver with a creative mindset.
• Independent and hands-on approach with strong attention to detail.

Application Process:
If you are interested in this role, please send your resume to [email protected]

Singlife is a leading homegrown financial services company, offering consumers a better way to financial freedom. Through innovative, technology-enabled solutions and a wide range of products and services, Singlife provides consumers control over their financial wellbeing at every stage of their lives.

In addition to a comprehensive suite of insurance plans, employee benefits, partnerships with financial adviser channels and bancassurance, Singlife offers investment and advisory solutions through its GROW with Singlife platform. It also offers the Singlife Account, a mobile-first insurance savings plan.

Singlife is the exclusive insurance provider for the Ministry of Defence, Ministry of Home Affairs and Public Officers Group Insurance Scheme. Singlife is also an official signatory of the United Nations Principles for Sustainable Insurance and the United Nations-supported Principles for Responsible Investment, affirming its commitment to finding a better way to sustainability.

The merger of Aviva Singapore and Singlife was announced in September 2020 and created one of the largest homegrown financial services companies in Singapore in a deal valued at S$3.2 billion. It was the largest insurance deal in Singapore at the time.

Singlife was subsequently acquired by Sumitomo Life in March 2024, one of Japan’s leading life insurers, which valued Singlife at S$4.6 billion, making the transaction one of the largest insurance deals in Southeast Asia.

Purpose of the Role:

Responsible for the tactical and operational oversight of our information security program in term of managed security services. This role involves in implementing and maintaining robust security measures to safeguard our information and network infrastructure. One will be the driving force behind our cybersecurity strategy, ensuring our systems are resilient against threats, and our team is equipped with the knowledge and tools to maintain high security standards.

Role Attributes:

Running operation of Singlife’s Managed Security Services program for entire Singlife Group under the Cyber Fusion Centre team.

Key Responsibilities:

Security Measures Implementation and Performance Tracking

• Develop and implement effective security measures to protect company data and network infrastructure.
• Regularly track and report on the performance of these security measures.

Cybersecurity Architecture and Strategy

• Deep understanding of Singlife’s comprehensive cybersecurity architectures.
• Develop and update the company’s information security strategy, ensuring it aligns with industry best practices and business objectives.

System Security Requirements

• Identify, define, and document system security requirements.
• Prepare and maintain technical documentation.
• Recommend solutions to management based on these requirements.

Security Infrastructure Management

• Configure, troubleshoot, and maintain security infrastructure hardware and software.
• Install and manage software for monitoring systems and networks for security breaches and intrusions.

Behavior Monitoring and Preventive Measures

• Monitor systems for irregular behavior and anomalies.
• Establish and enforce preventive measures to mitigate potential security threats.

Staff Training and Awareness

• Educate and train staff on information system security best practices.
• Foster a security-aware culture within the organization.

Project Monitoring and Milestone Achievement

• Ensure regular monitoring of project activities.
• Guarantee that project milestones are met in a timely and efficient manner.

Managed Security Device Expertise:

• Proficient in managing a range of security devices, including but not limited to: Email Security, IDPS, Attack Surface Monitoring, Anti-Malware Solution, Web Application Firewall, Certificate Management System (CMS)

Key Decision within the Role:

• Standard Operating Procedure write-up
• BAU Operation Process write-up

Requirements:

Experience

• Preferable to have 3+ years of relevant experience
• Knowledge in managing security solution stated above.
• Strong understanding of cybersecurity principles, practices, and solutions.
• Effective communication and analytical abilities.
• Ability to analyze complex security systems and identify vulnerabilities and solution.
• Expertise in computer programming and scripting languages.

Education

• Academic: Bachelor’s degree in computer science / information technology(preferred)
• Professional Certification(s): CISSP, or any related vendor certification (preferred)

If you find yourself able to demonstrate the criteria above, apply with us now. We look forward to your application.

Details of the Division and Team:

Everyday DB observes thousands of cyber security intrusion attempts. Deutsche Bank’s COO Chief Security Office (CSO) integrates both Corporate Security (CS) and Information Security (CISO) as both teams are responsible for mitigating these risks.

The CSO team enables the business of Deutsche Bank by providing agile security operational capabilities.

With their expertise in Threat Intelligence, Data Leakage Protection, Cyber Threat Analytics, Malware Response & Research, Security Monitoring, Incident Response, Forensics and Vulnerability Management, they provide global services from key locations in Frankfurt, Jacksonville and Singapore while leveraging offshore capabilities in Pune and Bucharest.

What we will offer you:

A healthy, engaged and well-supported workforce are better equipped to do their best work and, more importantly, enjoy their lives inside and outside the workplace. That’s why we are committed to providing an environment with your development and wellbeing at its center.

You can expect:

• Flexible benefits plan including virtual doctor consultation services.
• Comprehensive leave benefits
• Gender Neutral Parental Leave
• Flexible working arrangements
• 21 days of annual paid leave, plus public holiday & Flexible Working Arrangement

Your key responsibilities:

The Deutsche Bank Chief Security Office is looking for an experienced DLP Information Security Analyst.

Adhering to internal and external policies, the role is required to work in a global team to identify and assess technical and personnel security breaches within a heterogeneous business and technical landscape. This will include working with a variety of technologies and business groups to detect, assess and document the escalation of security alerts and consequence management.

Additionally, the role will require collaboration with control functions as well as businesses to identify information that needs to be protected and controls that are best suited to address these requirements.

The work will also involve utilizing vendor solutions, bespoke control applications and supporting the development of team tasks, such as the continual assessment of preventive and detective controls.

• Continuously monitor DLP systems for alerts and act as a subject matter expert for all data leakage investigations globally across all regions where the bank has a footprint.
• Manage DLP incidents, ensuring coordinated response and timely escalations.
• Document all incidents, actions taken, and outcomes. Prepare detailed reports for management and compliance purposes.
• The incumbent also assumes responsibility for overseeing and coordinating all facets of incident management like initial evaluation, stakeholder management, technical triage, and incident resolution.
• Ensure DLP tools and technologies are maintained, optimized, and regularly evaluated through established cyber risk frameworks.
• Cooperate with control functions to understand regulatory requirements and applicable laws.
• Ability to methodically analyze complex data and requirements and provide accountable SME opinion.
• Design and implement new DLP monitoring use cases. Collaborate with business and control functions to identify sensitive information that needs to be protected.
• Propose ways to improve existing process to achieve better operational excellence via automation.

Your skills and experience:

• Minimum 3 years of working experience in either Data Loss Prevention (DLP) or Security Operations Center, with at least 1 year working in an enterprise-grade Operations Center.
• A Bachelor's degree in Information Technology, Computer Science, or a related field is required.
• Working experience with Data Loss related applications such as Symantec DLP, Digital Guardian; and SIEM tools such as Splunk, Sentinel.
• Working knowledge in IT Fundamentals such as networking, hardware/software.
• Analytical and critical thinking with an inquisitive mindset, collaboration, and conflict management with good communication skills.
• Mentor new team members and provide guidance and directions when required.
• Ability to work in fast paced environment and within tight deadlines.
• Certifications such as Symantec DLP certified specialist, CompTIA Security+, CISSP, Microsoft Information Protection, Certified Data Protection Officer etc.

Role is required to be performed on-site at One Raffles Quay office. Relevant vaccination requirements may apply.

How we’ll support you:

• Flexible working to assist you balance your personal priorities
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs
• Training and development to help you excel in your career

About us and our teams:

Deutsche Bank is the leading German bank with strong European roots and a global network. Click click here to see what we do.

Deutsche Bank & Diversity

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gAHYjij4

• Strong support to invest in information security from the company
• Regional role with an established company

About the company

Our Client is an established company. With rapid expansion plan, they are now looking for a new Information Security Assistant Manager (GRC, ISO27001) to join their team.

About the job

Reporting to the Head of Security, you will be responsible for:

• Leading initiatives to assess the adequacy and effectiveness of IT controls and policies, ensuring that business users are compliant to the IS standards (ISO 27001, PDPA and etc).
• Planning and implementation Information Security, IT Risk Management, IT Audit and IT policy to improve the overall security posture for the organization across Asia. This includes reviewing and maintaining information security polices.
• Designing IT Security framework and roadmap to ensure the availability, integrity and confidentiality of IT system. This includes setting up the best practices and governance for Risk Control Security Assessment (RCSA). Designing processes to identify, improve and optimize IT risk management policies/practices.
• Identifying potential gaps in security control to enhance early detection capability. This is through leveraging internal security data (Performing analysis of forensic evidence, log data, compromised hosts, and network traffic) and external sources (Industry portals and etc) to identify existing gaps in security control and close the gaps.
• Overseeing the development and execution of corporate security awareness and training programs to business stakeholders to prevent and limit the impact of a potential cybersecurity event
• Monitoring compliance, keep abreast of legislative and regulatory trends to address potential impact and non-compliance/gaps.

Skills and experience required
As a successful applicant, you will have at least 5 years of experience in Information Security(ISO 27001, ISO 27701 or etc) / Governance, risk management, and compliance (GRC) Proven track record of engagement with C-level business stakeholder across Asia is required.

Whats on offer
This is an excellent opportunity to join an established company with lots of opportunity to improve the security posture of the company.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gAHYjij4 (EA: 94C3609/ R1219669)

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gM7-eVHS

• Decision making for Information Security including security strategy and roadmap for APAC
• Opportunity to implement information security with strong support from business stakeholders

About the company

Our Client is a Multi billion market leader within their industry. With rapid expansion across APAC, they are now looking for a new Manager, Information Security & GRC (Governance, Risk & Compliance) to join their team

About the job

• Reporting directly to the Head of Security based out of Asia, Your responsibility involves:
• Managing a lean team of information Security Analyst across Asia
• Developing and executing information security management framework and related IT Security policies within the organizations. This includes conducting continuous assessment of IT security practices and policies to improve the security posture of the company
• Leading initiatives to assess the adequacy and effectiveness of IT controls and policies, ensuring that business users are compliant to the IS standards (ISO 27001, PDPA and etc).
• Designing and implementing an on-going Information Security training and awareness programme for different levels of personnel. This includes monitoring the level of awareness to information security risk
• Planning and implementation Information Security, IT Risk Management, IT Audit and IT policy to improve the overall security posture for the organization across Asia. This includes reviewing and maintaining information security polices.

Skills and experience required

As a successful applicant, you will have at least 8 years of experience in IT frameworks (ISO 27001, NIST or etc) / IT control / Governance, risk management, and compliance (GRC) Proven track record of managing a team is required for this role.

Candidates with experience in cloud or SAP security will be of added advantage.

Whats on offer
This is an excellent opportunity to implement information security with strong support from business stakeholders.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gM7-eVHS (EA: 94C3609/ R1219669)

Your New Role:

Align IT needs with the strategic directions of the enterprise.

Allocate budget and resources accordingly by taking into consideration business impact

of the information security risks.

Analyse various internal and external information security risk reporting sources.

Contribute to the development of a strategy plan.

Determine appropriate IT strategies and solutions.

Develop a budget.

Develop business cases that support information security programme investments.

Disseminate organisation's IT security goals and objectives to business units and senior

management.

Evaluate IT security goals and objectives against the benchmarks.

Evaluate existing IT environment against organisation's IT strategic directions.

Formulate information security goals and objectives.

Identify and implement business innovation.

Identify controls and solutions to address/mitigate risks.

Implement change management process.

Manage overall information security risk.

Maximise business value of IT investments.

Obtain management support for information security programme investments highlighted

in the endorsed business cases.

Select new technology models for business.

Translate solutions into information security programmes.

What you'll get in return
This is an exciting opportunity to join a global company. You will be part of a dynamic team and you will be remunerated at market competitive rates.

What you need to do now

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV.

Referrals are welcome.

EA Reg Number: R21103035

EA License Number: 07C3924 | Company Registration No: 200609504D

• Driving innovation and shaping the future with cutting-edge projects
• Personal growth and collaboration.

About Our Client

Client is a global technology firm known for its innovative approach to content creation and distribution. It operates a range of platforms that combine artificial intelligence and machine learning to deliver personalized experiences to users. The company's products span entertainment, social networking, and e-commerce, with a strong focus on fostering creativity and community engagement. It has a diverse and rapidly growing global presence, continuously pushing the boundaries of digital media and technology.

Job Description

• Communicate technical and non-technical concepts effectively to the business side.
• Coordinate security assessments with product teams.
• Conduct cyber risk assessments and technical security reviews to identify IT risks for new products and features, and recommend controls.
• Collaborate with security and business teams to design defense-in-depth controls and improve security posture.
• Fulfill business security requirements like red teaming, fraud detection, and penetration tests, while enhancing security maturity.
• Monitor and manage risk mitigations, exceptions, and ensure adequate monitoring is in place.
• Track emerging cyber threats, vulnerabilities, and exploits affecting infrastructure and products.

The Successful Applicant

A successful candidate will have a strong technical background in cybersecurity, with the ability to communicate effectively between technical teams and business stakeholders. They should be skilled in risk assessments, vulnerability management, and implementing security controls. Proactive, collaborative, and able to manage security requirements like red teaming and penetration testing, they will stay ahead of emerging threats and continuously improve security posture across the organization.

What's on Offer

A chance to work on impactful security initiatives in an innovative environment, collaborate with cross-functional teams, and grow your career. You'll receive a competitive package, opportunities for professional development, and the chance to work with cutting-edge technologies.

Contact

Miao Xia Neo (Lic No: R21103441/ EA no: 18C9065)

Quote job ref

JN-112024-6583081

Phone number

+65 6416 9828

Michael Page International Pte Ltd | Registration No. 199804751N

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will assist in the end to end implementation of security solutions for our clients and support our clients in their desire to protect the business.

The Opportunity

This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, advising stakeholders, providing workshops and supporting business development. If you’re flexible and ready to adapt to a constantly changing environment, there’s no better place to develop your skills. Since you’ll be working directly with clients, some travel will be required.

Your Key Responsibilities

As a Cyber Security Operations consultant, you will be part of the team to assess, design, build, implement and manage security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience.

Skills and Attributes for Success

• Familiarity with Security Information and Event Management (SIEM) solutions.
• Experience with network security monitoring and incident response activities.
• Ability to process impacts of activities and be able to collaborate with IT operations and Cybersecurity teams on mitigations and remediations.
• Ability to apply cybersecurity and privacy principles to organizational requirements.
• Ability to create standard operating procedures and other similar documentation.

To Qualify for the role, you must have

• A recognized university degree in Computer Science, Computer/Electrical Engineering, Information Technology or equivalent
• At least 3 years of relevant experience. Preferably with a year experience in business consulting role in a leading consultancy firm
• Strong interest in the field of information security
• Creative, independent with good problem-solving skills
• Excellent communicator with strong analytical, interpersonal and writing skills

Ideally, you’ll also have

• Industry related certification preferred (e.g. CISSP, CISA, CISM, SABSA, PRINCE2, TOGAF, ITIL).
• Solution Level Certifications, OSCP, CREST, GIAC would be advantageous, as well as penetration testing experience.

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.

What we offer

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

Apply now.

• GRC Lead for APAC regions, including China and India
• People Manager role with a strong track record in leadership
• Reporting line to headquarters in France

About the company

Our client is a multinational company that has a rich history spanning nearly 200 years, a testament to their enduring success in the business world. Headquartered in Paris, France, the company has grown to become one of the world's leading wine and spirits producers. They are a prominent player in the global alcoholic beverage industry, renowned for its extensive brand portfolio, commitment to quality, and dedication to sustainability and social responsibility.

About the job

• Develop, govern and enforce cybersecurity policies, standards, and guidelines to ensure robust security practices.
• Lead evaluations of security and privacy risks, coordinating swift responses to suspected cyber incidents/events.
• Monitor cybersecurity risks and report findings to relevant technical and business executive committees.
• Manage the Information Security GRC team, focusing on all cybersecurity aspects within the designated region, domains, and tech portfolio.
• Proactively drive risk reduction initiatives within the defined scope.
• Ensure effective security measures within the scope of assigned regions, domains, and technology areas.
• Collaborate on cyber strategy and roadmap creation for long-term security goals.
• Drive compliance with internal standards and regional cybersecurity regulations, both internally and externally.

successful candidate

Minimum of 10 years' experience in Governance, Risk, and Compliance (GRC), with a solid understanding of cybersecurity frameworks such as ISO 27001, SOC 2, MITRE ATT&CK, and NIST, as well as expertise in penetration testing and security audits.

Skilled in managing incident response, evaluating cybersecurity risks, and conducting vulnerability assessments.

Proven ability to lead a team, with a track record of managing 2-3 direct reports.

Experience working in a regional setting, with the ability to navigate diverse regulatory environments and cultural considerations.

Whats on offer
The permanent opportunity for a Information Security & Risk Governance Lead (GRC), will pay a salary range of $13,000 - $ 15,000 plus benefits. This opportunity offers hybrid working arrangement.

To apply online please use the 'apply' function, alternatively you can reach me at
https://www.linkedin.com/in/Oliviatoh-032330132/. (EA: 94C3609 / R22109942)

As an Information Security Engineer, you will play a crucial role in our Security Operations Center. Your responsibilities will include monitoring, detecting, investigating, analyzing, and responding to security events within our IT infrastructure, including Operational Technology (OT) systems. Your expertise in cybersecurity frameworks, risk management, and incident response protocols will help fortify our defenses. A thorough understanding of Operational Technology security principles is essential, as you will oversee the integration of security practices in both IT and OT environments to protect our critical infrastructure. You will also apply Scaled Agile Scrum methodologies to coordinate technical meetings and manage security projects efficiently.

Roles and Responsibilities

• Design and implement advanced security architectures for IT and OT environments to ensure robust protection against emerging threats.
• Lead the development and integration of custom security solutions tailored to the specific needs of our digital and physical infrastructures.
• Conduct high-level vulnerability assessments and penetration testing to evaluate the security of IT and OT systems.
• Develop and refine incident response strategies to enhance our ability to respond to and recover from security breaches swiftly and effectively.
• Collaborate with IT and OT teams to ensure seamless integration of security technologies across all platforms.
• Serve as the technical lead on projects involving cybersecurity technologies, ensuring compliance with industry standards and regulatory requirements.
• Mentor junior engineers and analysts, providing guidance on complex technical issues and fostering a culture of technical excellence and innovation.
• Stay current with the latest cybersecurity technologies and trends, applying this knowledge to continuously improve our security posture.
• Prepare and present detailed technical reports and security briefings to senior management, offering strategic recommendations based on your assessments and findings.

Requirements

• A master’s degree in Cybersecurity, Computer Science, Engineering, or a related field, along with significant professional experience in cybersecurity.
• Expertise in designing and managing security solutions for both IT and Operational Technology systems.
• Advanced certifications in cybersecurity such as CISSP, CISM, or GIAC, with specific training in areas like SCADA or ICS security.
• Strong leadership skills with experience in managing complex security projects and leading cross-functional teams.
• Deep understanding of regulatory compliance and security frameworks such as ISO 27001, NIST, SOC 2, and others relevant to IT and OT cybersecurity.

Interested candidates, who wish to apply for the advertised position, please email us an updated copy of your resume.

We regret that only shortlisted candidates will be notified.

EA License No.: 01C4394

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy

COMPANY BACKGROUND

Haier is the number one brand of Major Appliances in the world with 16.3 percent of global market share. Headquartered in Qingdao, Haier has over 80,000 employees across 30 countries in the world.

Haier Singapore is the International HQ of Haier Group and is the main platform to provide procurement, trading, R&D and big data and cybersecurity supports to over 80 countries in Asia, Europe, Africa and North America markets.

As the continuous demands from global businesses, we are looking for passionate Information Security Professional to join our Global Information Security team.

KEY RESPONSIBILITIES

Based in Singapore, you will be part of the Global Information Security team, providing Cybersecurity and IT support to Haier businesses in the world.

• Responsible for the construction of Haier's overseas regional information security system, identify issues and risks in security construction and continuously optimize them;
• Establish information security capabilities in various overseas regions, such as endpoint security, data security, application security, vulnerability management, OT security, security operation, etc;
• Responsible for emergency response to information security incidents in overseas regions, quickly resolving problems;
• Responsible for enhancing the information security awareness of employees in overseas regions and developing security training plans;
• Responsible for overseas compliance construction, such as data security compliance, personal privacy compliance, etc., and developing an annual information security audit plan.

KEY REQUIREMENTS

The ideal candidate should be a seasoned information security manager with:

• Degree in Computer Science or its equivalent.
• With minimum of 10 years of work experience and at least of 3 years’ experience in team management.
• Establishment of the ISO27001/NIST/ information security system.
• Proficient in security technologies in various fields, such as endpoint security, vulnerability management, application security, etc.
• Certification in the Information security, risk management, preferably.
• Fluent in Mandarin and English.

Job Summary:

The Legal Support Specialist provides administrative and clerical support to the legal department, ensuring the smooth and efficient functioning of all legal operations. This role involves assisting legal professionals with case management, document preparation, and research, while maintaining high levels of confidentiality and attention to detail.

Key Responsibilities:

Administrative Support:

· Assist with the preparation and filing of legal documents, including contracts, agreements, pleadings, and corporate filings.

· Organize and maintain both physical and electronic legal files, ensuring all documents are up to date and easily accessible.

· Coordinate with internal departments to gather information and documentation required for legal matters.

Case Management:

· Track case status and court dates, ensuring deadlines are met.

· Maintain calendars for legal proceedings, meetings, and hearings.

· Assist in managing legal case files, including case opening and closing procedures.

Document Preparation:

· Draft, proofread, and format legal documents, including correspondence, reports, and contracts.

· Conduct initial review of legal agreements and flag issues for legal counsel’s attention.

Legal Research:

· Conduct legal research on relevant laws, regulations, and precedents as needed.

· Summarize legal findings for internal use.

Client and Vendor Communication:

· Handle routine communication with clients, vendors, and external counsel under supervision.

· Respond to inquiries and requests for information with professionalism and confidentiality.

Compliance Support:

· Assist in monitoring compliance with legal regulations and internal policies.

· Support the legal team in internal audits and regulatory matters.

General Duties:

· Assist in maintaining the legal department’s databases and records management systems.

· Perform other clerical duties such as scheduling meetings, answering phone calls, and processing legal invoices.

Qualifications:

· Bachelor's degree or diploma in legal studies, law, or related field preferred.

· Paralegal certification or relevant training is a plus.

· Minimum of 2 years of experience in a legal support or paralegal role.

· Experience in corporate law, litigation, or contracts administration is desirable.

· Strong understanding of legal terminology and document management.

· Excellent organizational skills and attention to detail.

· Proficiency with legal research tools and databases.

· Familiarity with case management software and Microsoft Office Suite.

· Ability to prioritize tasks, manage time effectively, and work under deadlines.

· Strong communication skills, both verbal and written.

· Ability to handle sensitive information with discretion and confidentiality.

Company Overview:

Traveloka is a leading technology company that provides a one-stop travel and lifestyle platform for customers in Southeast Asia. Our platform offers a wide range of travel-related services, including flight and hotel bookings, activities, attractions, and more. With a mission to empower travelers with seamless experiences, we're committed to pushing the boundaries of technology and innovation in the travel industry.

It's fun to work in a company where people truly BELIEVE in what they're doing!

Job Description:

As a leading travel technology company, Traveloka manages a vast ecosystem of APIs, microservices, cloud infrastructures, and front-end applications (web and mobile) that serve millions of users worldwide. On the back side, we operate large-scale data pipelines and internal business operations, many are engineered in-house, which require robust security measures to protect user data, intellectual property, and sensitive corporate information.

The Security Engineering Manager will take a holistic approach to safeguarding our engineering assets, working and managing across multiple teams including DevSecOps, Product Security, and Offensive Security. Success in this role requires strong analytical, problem-solving, and leadership abilities, as well as the capacity to think from defensive, offensive, and engineering perspectives to craft tailored security solutions for our unique environment. The ideal candidate will not only be proficient in using readily available or off-the-shelf tools but will also have the expertise to assess when and how custom security tools need to be developed and maintained with a software engineering perspective to address specific challenges.

Requirements:

• Proven experience managing Security Engineering or Software Engineering teams, with at least 7 years of extensive expertise in cybersecurity.
• Strong background in leading cybersecurity or software development projects using agile methodologies.
• Experience securing applications in fast-paced environments with frequent changes.
• Proficient in general-purpose programming languages (e.g., Python) and Object-Oriented Programming (e.g., Java).
• Hands-on experience with cloud platforms like AWS and GCP, including platform- specific security features and common security tools.
• Familiarity with modern technologies such as containerization, managed container services, serverless functions, infrastructure as code, API gateways, BFF (Backend for Frontend), CI/CD, and microservices.
• Deep technical knowledge of web, mobile, OS, and network security
• Able to practically demonstrate various security tests and control implementation such as SAST, DAST, SCA, WAF, secure-by-design, and secure application framework.
• Excellent verbal and written communication skills.
• Strong self-initiative to bridge gaps between Software Engineering, Infrastructure Engineering, and Security Engineering, while providing a security framework for the entire technology team and management.
• Commitment to cybersecurity with a dedication to continuous learning and staying updated on new technologies.
• Experience in CTF, bug bounty programs, presenting at security conferences, or publications is a plus.
• Experience with penetration testing, red teaming, or purple teaming is a plus.
• Web development experience or developing security tools is a plus.
• Relevant technical security certifications (e.g., Offensive Security, CREST, SANS GIAC) are a plus

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!

We’re searching for a Senior/Manager, Client Information Security (Infra) to be part of our diverse team of talent here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

• Drive the implementation of NCS cybersecurity, data protection, and privacy policies, standards and processes within the practice. You will work to continually improve the security posture of projects through proactive risk management and the establishment of a broad range of cybersecurity controls
• Provide direct support to colleagues to ensure cybersecurity is addressed throughout the engagement delivery lifecycle, from infrastructure and security tooling choices to the secure storage, processing and deletion of client data.
• Act as a single point of contact and escalation for the SOC, Threat Intel and Crisis Response teams for practice-related cybersecurity incidents, ensuring timely identification, remediation and lessons learned.
• Manage the security SLA governance and provide practice-level cybersecurity reporting, metrics and forecasting to leadership.
• Responsible for information security, data protection, privacy, GRC, and audit requests for the practice, acting as single point of contact on relevant client security assessment and audits execution. Eg. independent third-party attestations of industry cybersecurity standards and certifications, such as ISO 27001, SOC 2 for practice-specific solutions and products
• Contribute to the definition of the client specific security baseline. Consult and advise internal and external clients about security topics and support the opportunity management process by providing subject matter expertise and support
• Help win client business by providing cybersecurity assurance to RFIs, RFPs, proposals, contract drafting, security questionnaires, workshops and other client due diligence processes

Job Description Summary:

As a Cyber Defense Engineer at PayPal's Cybersecurity Defense Center, you'll play a vital role in fortifying our security measures. You'll monitor and respond to security events, collaborating with cross-functional teams to provide valuable insights and guidance. Proactively hunting for threats, you'll identify vulnerabilities and mitigate risks. Your expertise will contribute to robust incident response capabilities and resilient architectures. Staying informed about emerging threats, you'll drive innovation in cyber defense techniques. By safeguarding our digital assets and users' data, you'll help maintain trust and enable secure online transactions.

Join our dynamic and highly skilled team at the PayPal Cybersecurity Defense Center. By We are seeking individuals who are passionate about cybersecurity and are eager to make a difference in protecting our systems and data. As a member of our team, you will have the opportunity to continuously enhance your skills through ongoing training and professional development. With access to cutting-edge technologies and resources, you will stay at the forefront of the ever-evolving cyber threat landscape. Your contributions will directly impact our ability to safeguard our infrastructure and ensure the privacy of our customers' information. Join us in our mission to create a secure digital environment and be part of a team that is committed to excellence in cyber defense. Together, we will defend against emerging threats and build a resilient security foundation.

Job Description:

Your way to impact

• Take ownership of enhancing our security posture and protecting our infrastructure, systems, and data from cyber threats.
• Provide guidance and recommendations to cross-functional teams, assisting them in implementing effective security measures.
• Collaborate closely with teams across the PayPal, ensuring seamless security experiences and operational efficiency.
• Drive continuous improvement in security operations by identifying opportunities for process optimization, automation, and integration of security technologies.
• Assume centralized ownership of key cybersecurity applications/tools, setting the vision and driving towards a best-in-class future state.
• Engage in incident response readiness exercises, conducting simulations and tabletop exercises to strengthen the PayPal's ability to respond swiftly and effectively to security incidents.
• Foster a culture of proactive security through knowledge sharing, training sessions, and promoting security awareness across the PayPal.

Your day to day

• Monitor security alerts and events from various sources and respond promptly to security incidents, following the established incident management plan.
• Collaborate with the security teams to conduct in-depth analysis of security events and incidents, utilizing advanced threat intelligence and security tools.
• Document and track security incidents, maintaining accurate incident records and providing regular updates to stakeholders.
• Build and nurture influential partnerships with key stakeholders, acting as a conduit between cybersecurity and cross-functional teams.
• Participate in tabletop exercises and simulations to enhance the PayPal's incident response preparedness and identify areas for improvement.
• Proactively review and refine the incident management plan based on emerging threats and evolving cybersecurity landscape.
• Stay updated on industry trends, best practices, and our business strategy to enable the achievement of cybersecurity objectives.

What you need to bring

• Demonstrate proven experience in security incident handling and security operations.
• Possess an in-depth understanding of network protocols, systems, and infrastructure security principles.
• Exhibit proficiency in analyzing business and employee needs, recommending, and designing end-to-end security solutions.
• Display strong incident management skills, effectively managing multiple incidents and driving results.
• Stay abreast of emerging threats, vulnerabilities, and attack techniques through continuous monitoring of threat intelligence sources and participation in security communities and forums.
• Participate in cross-functional security projects and initiatives, providing security expertise and guidance to ensure the secure implementation of new technologies and systems.
• Possess excellent communication skills to collaborate with cross-functional teams and convey complex security concepts effectively.

Responsibilities

• Assist in creating and enforcing security policies and procedures to protect company systems and data.
• Identify risks and implement solutions to minimize potential security threats.
• Investigate security incidents, document findings, and support response and recovery efforts.
• Design and evaluate security measures for applications, networks, and physical systems.
• Lead security awareness training and promote best practices across the organization.
• Collaborate with internal teams to ensure compliance with security policies and initiatives.
• Manage security operations like access control, vulnerability assessments, and system monitoring.
• Coordinate third-party security risk assessments with vendors and suppliers.

Requirements:

• Bachelor's degree in Computer Science, IT, or a related field.
• Possess at least 3 years of experience in security operations, governance, or risk management.
• Recognized certifications like CISSP, CISM, or CISA are preferred.
• Strong knowledge of NIST, ISO27001, and data privacy regulations (e.g., PDPA, GDPR).
• Ability to explain technical security concepts to non-technical stakeholders.
• Strong organizational skills with the ability to work independently and manage multiple priorities.

Please submit your updated resume in Word format by using the Apply Now Button.
We regret that only shortlisted candidates will be notified.

Email resume to [email protected]

People Profilers Pte Ltd, 20 Cecil Street, #08-09, PLUS Building, Singapore 049705.
Tel: 6950 9724

http://www.peopleprofilers.com
EA License Number: 02C4944
Registration Number: R1872398

Posting Personnel: Ng Jwee Ken

Ref: L98XV3VY

The Legal Counsel will provide practical, business oriented legal advice to a fast-paced and global demanding business.

The role of the Legal Counsel will be to review, draft and negotiate contracts and support the business on all legal aspects in an ever evolving and growing company.

• Preparing, reviewing and negotiating sell-side complex IT contracts for software licensing (and related services) and partnership agreements in collaboration with various teams across the Asia-Pacific region; assisting in reviewing and responding to customer requests for proposals.
• Building close cross-functional relationships and working closely with with various teams across the organization to support the business, obtaining and maintaining a solid knowledge of the company’s business, and being able to communicate effectively and develop strong working relationships with senior management and business colleagues.
• Having strong subject matter expertise on complex legal terms and complex agreement structures (including intellectual property, licensing, indemnity, liability, identifying revenue impacting terms, data protection and other rights and obligations) required to ensure compliance within company policies and guidelines.
• Balancing competing priorities of constituencies as compared to business needs and using astute judgment as to when to seek executive-level direction.
• Monitoring and incorporating changes in laws and regulations across the Asia-Pacific region and ability to learn and apply new substantive areas of law to daily practice.
• Being highly self-directed and proactive - proactively identifying needs or potential legal issues, proposing solutions, and effectively executing on the solution.

What you offer

• Good knowledge and work experience in the area in the area of civil law and in particular contract law and corporate law;
• Affinity with ICT, Telecom, Privacy/data protection is a distinct advantage;
• Strong verbal and written communication skills in English, Chinese (Mandarin) is a distinct advantage.
• Bachelors degree (or equivalent) and 3 - 5 years of experience in related field
• Good communication and interpersonal skills
• Ability to work well under pressure

If you're interested in this role, click 'apply now'

If this job isn't quite right for you but you are looking for a new position, please contact us @ + 65 6645 4540 / [email protected] for a confidential discussion on your career.

License No: 11C3510 / EA Reg ID: R1658237

Job Summary:

The Legal Support Specialist provides administrative and clerical support to the legal department, ensuring the smooth and efficient functioning of all legal operations. This role involves assisting legal professionals with case management, document preparation, and research, while maintaining high levels of confidentiality and attention to detail.

Key Responsibilities:

Administrative Support:

· Assist with the preparation and filing of legal documents, including contracts, agreements, pleadings, and corporate filings.

· Organize and maintain both physical and electronic legal files, ensuring all documents are up to date and easily accessible.

· Coordinate with internal departments to gather information and documentation required for legal matters.

Case Management:

· Track case status and court dates, ensuring deadlines are met.

· Maintain calendars for legal proceedings, meetings, and hearings.

· Assist in managing legal case files, including case opening and closing procedures.

Document Preparation:

· Draft, proofread, and format legal documents, including correspondence, reports, and contracts.

· Conduct initial review of legal agreements and flag issues for legal counsel’s attention.

Legal Research:

· Conduct legal research on relevant laws, regulations, and precedents as needed.

· Summarize legal findings for internal use.

Client and Vendor Communication:

· Handle routine communication with clients, vendors, and external counsel under supervision.

· Respond to inquiries and requests for information with professionalism and confidentiality.

Compliance Support:

· Assist in monitoring compliance with legal regulations and internal policies.

· Support the legal team in internal audits and regulatory matters.

General Duties:

· Assist in maintaining the legal department’s databases and records management systems.

· Perform other clerical duties such as scheduling meetings, answering phone calls, and processing legal invoices.

Qualifications:

· Bachelor's degree or diploma in legal studies, law, or related field preferred.

· Paralegal certification or relevant training is a plus.

· Minimum of 2 years of experience in a legal support or paralegal role.

· Experience in corporate law, litigation, or contracts administration is desirable.

· Strong understanding of legal terminology and document management.

· Excellent organizational skills and attention to detail.

· Proficiency with legal research tools and databases.

· Familiarity with case management software and Microsoft Office Suite.

· Ability to prioritize tasks, manage time effectively, and work under deadlines.

· Strong communication skills, both verbal and written.

· Ability to handle sensitive information with discretion and confidentiality.

We protect Bloomberg.

There's no such thing as a "safe system" - only safer systems. Our security teams work to build and maintain the safest operating environment for Bloomberg’s users. The security analysts within the Cyber Security Operations Center are the main defenders of the company. The Cyber Security Analyst - Triage's function, within the CSOC, is considered to be a key pillar in Bloomberg’s security, as they are the initial responders to security events. Are you a motivated technical professional, who has a passion towards cyber security? And are accomplished in a systems- or applications-support role, or already have cyber security experience? In this security role, Bloomberg will provide you the opportunity to apply your current skills, while you rapidly develop new ones that are required in the cyber security field.

The Bloomberg CSOC is responsible for the detection of cyber threats, and when detected, responsible for the rapid response, across both the diverse lines of business and the global network. The CSOC is an open and collaborative environment, where members work together to identify and address the latest cyber security threats facing the company. The CSOC is staffed 24 x 7 x 365, with varying shifts, and multiple tiers of support, ranging from first response teams to the Computer Incident Response Team. Furthermore, there is opportunity to work with these more experienced members on some of the latest cyber security defense technologies.

In this role, we'll trust you to:

• Work within a dedicated shift, 8AM - 6PM, Wednesday through Sunday, to support the 24x7x365 Cyber Security Operations Center (some holiday coverage may be required)
• Demonstrate passion and good judgement as a network defender
• Identify, and act as the initial responder, to all security events
• Learn and understand the broader security of Bloomberg’s environment
• Monitor for events that match predefined criteria, and respond accordingly to standard operating procedures, as well as use good judgement for matters where a procedure doesn’t exist
• Bring to closure a significant majority of events without the involvement of other teams
• Share robust case notes when raising issues in order to help the next team member
• Remain up-to-date with cyber security threats and trends
• Deliver on relevant cyber security metrics and measurements for the role and area of responsibility
• Collaborate directly with colleagues across the firm to resolve security matters while furthering the program’s brand with a constructive and thoughtful approach
• Respond to varying seniority levels of employees and contractors throughout Bloomberg to address cyber security concerns
• Ensure appropriate coverage for the assigned shift and provide ample awareness to changes to commitments
• Produce and maintain documentation and standard operating procedures
• Generate ideas for continued improvement, including conceptual design of new threat scenarios

You'll need to have:

• A diploma or a degree in cyber security or a related technical field
• Minimum 1+ years of experience in a cyber security related role (e.g., Cyber Security Operations Center)
• Experience dealing with non-physical Security Operations, Incident Analysis, and/or Network and Host Log Analysis)
• Deep understanding in logs from a variety of sources, their log events, and Splunk
• Knowledge of enterprise network and host security controls
• Ability to be autonomous but proactive in reaching out for support
• Good familiarity with operating systems (Windows, Linux and MAC)
• Deep understanding of cyber security trends and potential threats
• Knowledge of client-server applications, multi-tier web applications, relational databases, firewalls, VPNs and enterprise antivirus products
• Good communication and interpersonal skills and the ability to take initiative
• Dedication to role and ability to collaborate with team members
• Excellent written and verbal communication skill in English
• Demonstrated continuous career growth within an organisation

We'd love to see:

• Knowledge of AWS, Azure, and GCP cloud platforms
• Previous experience working with a Security Information and Event Management (SIEM) platform
• Certifications in the information security space (CompTIA Security+, SSCP, CEH)
• Familiarity with programming / scripting

If this sounds like you:

Apply! If we think you are a good match we'll get in touch to let you know the next steps.

To learn more, visit our YouTube channel "Inside Bloomberg" www.youtube.com/InsideBloomberg

Situated in the heart of Singapore's Central Business District, Rakuten Asia Pte. Ltd. is Rakuten's Asia Regional headquarters. Established in August 2012 as part of Rakuten's global expansion strategy, Rakuten Asia comprises various businesses that provide essential value-added services to Rakuten's global ecosystem. Through advertisement product development, product strategy, and data management, among others, Rakuten Asia is strengthening Rakuten Group's core competencies to take the lead in an increasingly digitalized world.

Rakuten is a global Internet and e-commerce company with over 1.3 billion registered users worldwide. Our e-commerce platform is the largest of its kind in Japan and among the world's largest by sales. Rakuten has many subsidiaries as well, including well-known brands like Rakuten VIKI, Rakuten Symphony, Rakuten TV, Kobo (e-Reading), and Viber (messaging). For more information, visit http://global.rakuten.com/corp/about/.

The Regional Chief Information Security Office (CISO) is to lead information security related actions to protect Rakuten Group companies in Asia region from internal/external security threat. You will be required to define, prioritizes, and implement IT security projects to reduce or eliminate risks that have been identified. This will involve working with regional teams and sister companies in all technology areas to address different types of IT security risks.

Role Responsibilities

• Maintains hardware, software and network firewalls and encryption protocols.
• Administers cybersecurity policies to control physical and virtual access to systems.
• Performs network security audits and testing and evaluates system security configurations to ensure efficacy and compliance with policies and procedures.
• Maintaining and supporting ISO/IEC27001 activities
• Responds to cybersecurity breaches, identifies intrusions and isolates, blocks and removes unauthorized access.
• Researches and evaluates cybersecurity threats and performs root cause analysis. Assists in the creation and implementation of security solutions.
• Provides information to management regarding impact on the business caused by theft, destruction, alteration or denial of access to information and systems.

Requirements / Qualification

• Minimum 3 years of working experience in Information Security
• Bachelor's Degree preferably in a service management or information technology-related field
• Experience in leveraging industry standards and frameworks such as ISO/IEC 27001
• Working knowledge in one or more security and privacy domains such as: security governance policies and procedures, risk management, compliance, access control, network
• Project management skills to lead IT security projects
• CISA, CISM, CISSP and security related qualifications are recommended

Rakuten is an equal opportunities employer and welcomes applications regardless of sex, marital status, ethnic origin, sexual orientation, religious belief or age.

My client within the tech space is hiring for a Senior Legal Counsel - APAC

The Role

• Acting as a Legal business partner for all in-region commercial transactions, with a strong focus on sales in Singapore.
• Structuring, negotiating and drafting sales, partner and vendor contracts and related agreements which can range from standard contracts to bespoke, complex and enterprise transactions.
• Advising sales leaders and other business team members on general legal and contract specific issues and risks, their impact and mitigating actions.

To Qualify

• Degree in Law with minimum 5 - 8 years of experience in related field is required
• Excellent legal & contract analytical skills with a good eye for detail
• Excellent drafting capabilities and negotiation/ communication skills

To Apply

If you feel your experience and professionalism can make an impact with this firm, please submit your details resume to [email protected]

Personal data provided by job applicants will be used strictly in accordance with the employer's personal data policies, a copy of which will be provided.

*Only shortlisted candidate will be notified.

Registration No. R1658237 | EA License No. 11C3510 | Drake International

You may also register at our company website https://sgjobs.drakeintl.com/jobs/

Or like us on Facebook www.facebook.com/drakesgtemp/ for more job opportunity!!!

Job Description

• Defining and implementing a Cybersecurity Strategic Plan at Lockton entities in-scope, aligned with the Global Cybersecurity Strategic Plan, business objectives, local and regional regulatory and compliance requirements
• Determining methods to implement, enforce and advise the Lockton entities in-scope on cybersecurity related issues. This includes educating business and functional leaders on security awareness, operationalization of policies, standards and baselines
• Mitigating Lockton’s risk exposure at entities in-scope, ensuring that appropriate risk treatment plans are developed to comply with defined risk appetite. This includes risk identification, risk acceptance, solution development and risk mitigation implementation support
• Leading Lockton’s cybersecurity transformation journey to put in place at entities in-scope, an organization based on key disciplines: Information Security, Cyber Incident Response, Operational Resilience, Data Protection. This includes collaborating on key security tasks, such as incident management, access control, threat modeling, vulnerability management, third party assessments, etc.
• Ensuring well-informed security decisions are taken, escalating risk, when required to the executive management
• Ensuring the provisioning of adequate resources (financial, human, technological, etc.) to implement the Lockton Global Cybersecurity Strategic Plan
• Securing and monitoring the necessary budget and investments to deliver the mission
• Support information security awareness and training initiatives to educate workforce about information risks and mitigation
• Ensuring that sound and consistent information security architectures that have been defined and documented are leveraged and effectively communicated to local business lines and technology support groups
• Ensuring effective governance is in place within the local operation and business environments supporting the global CISO directives and policies
• Leading the design and operation of related compliance monitoring and improvement activities to ensure compliance both with internal security policies and applicable laws and regulations
• Leading or commissioning information security risk assessments and controls selection activities
• Providing information security interface to the business continuity plan/program for the company's data, information, and assets.
• Acting as liaison with auditors and regulators regarding their role in information security policies and procedures and is responsible for the closure of audit issues relating to information security locally
• Liaising with and offering strategic direction to related governance functions (such as physical security/ facilities, risk management, technology, HR, legal and compliance) and senior and middle managers throughout the organization as necessary, on information security matters such as routine security activities plus emerging security risks and control technologies
• Participates on appropriate committees/task forces
• Provides second, third line information and cybersecurity support, triaging incidents in accordance with the incident response plan
• Provides cybersecurity support and guidance on privacy, regulatory, compliance events

Qualifications

• Minimum 10 years of information security experience with at least 2 years as senior security leader responsible for overall security function
• Team Management & Leadership

1. Ability to engage with Business Leaders of his/her perimeter as well as with CIO/COO/CISO hierarchy
2. Organized, self-sufficient with ability to manage teams globally and drive change

• Ability to prioritize and execute tasks in a high-pressure environment
• Excellent written, oral, and interpersonal communication skills (English)
• Demonstrated experience understanding security risks, identifying gaps, and creating risk-mitigating and remediation plans, drawing up IT Security roadmap
• Demonstrated experience understanding of technical aspects of information and IT technology and core security components such as network, firewall, proxy, VPN, anti-malware, email protection and filtering, system security controls, vulnerability assessment, penetration testing
• In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management etc.
• Good grasp of PCI-DSS, ISO 27001, NIST, UK Cyber Essentials, GDPR, POPIA, and other security norms, regulations, standards & frameworks
• One or more of the following or similar certifications is a plus: CISM, CISSP, CCISO, CRISC
• Analysis and synthesis skills

Personal Attributes

• Executive presence, and the ability to foster relationship management, negotiate and influence
• Effective communications skills, including both written and verbal communication skills, and the ability to translate security principles into business terms
• Foundational technical expertise, including both business acumen and strategic thinking, as well as the ability to identify issues and provide innovative problem solving
• Passionate about driving and sustaining change through committed leadership
• Creative and results-oriented, who is good at balancing multiple priorities and issues
• Team player up and down the organizational structure, across countries and IT/ Security departments
• Ability to form open, effective, and trusting relationships with country CxO members
• Provides a high level of professional service to customers (both internal and external) consistent with Lockton standards and procedures
• Good skills in Microsoft Office Suite, especially, PowerPoint

▪ Assist with security incident management and response activities
▪ General day-to-day support on managing and responding to security alerts from systems and end users
▪ Perform daily, weekly, and monthly security checks, reconciliation and compliance checks and investigate exceptions
▪ Completing client security requirement questionnaires and support the bidding process
▪ Identify and raise awareness of security risks
▪ Develop and enhance security policies, processes, procedures, and technical controls to strengthen Turner & Townsend’s security capabilities and resilience to cyber threats
▪ Take a proactive role in identifying security risks, mitigations, and opportunities to strengthen Turner & Townsend’s resilience to cyber-attacks and security incidents
▪ Participate in the design and implementation of systems and applications
▪ Develop user and technical training guides
▪ Maintain and manage the IT Risk register
▪ Test DR plans and capabilities to ensure they work as designed, identifying gaps and lessons learnt and work with the business to drive continual development and enhancement

Role overview

We are recruiting a Senior Information Security Governance Manager which is part of the Global Information Security team, with a focus on the Governance, Risk and Compliance aspects of Information Security. Reporting directly into the Head of Information Security and with three direct reports, the role holder will be responsible for the firm's global information security policies and standards and delivering compliance with external security accreditations including ISO27001 and the UK's Cyber Essentials standard and managing the firm's information security policies, standards, and risk management framework.

NB: There is a requirement to work flexible hours 2 days per week to overlap with UK operating hours.

Reports to:

Head of Information Security

Career level:

Senior Manager

Status:

Permanent

Duties and responsibilities

· Manage the information security management system in accordance with the requirements of ISO27001

· Delivering compliance with external security accreditations including ISO 27001 and UK's Cyber Essentials plus standard

· Own and develop the firms Information Security Governance framework

· Manage client information security due diligence questionnaires, as well as bid and tender documents to support business development for clients in APAC and the UK.

· Manage internal and external audits, minimising the impact of audit fieldwork and maximising the relevance and benefit of findings and actions

· Manage information security audit actions to ensure actions identified are managed to completion within the required timescales

· Work across the Legal and Business Services team teams to integrate information security practices and initiatives with firm operational practises

· Regularly review and evaluate policies, processes, procedures and standards to ensure they are effective and drive continuous improvement for information security

· Deliver information security education, training and awareness programmes

· Maintain the Information Security Risk & Control Register, risk treatment plans and information security improvement programmes

· Undertake regular risk and control assessments with risk and control owners

· Ensure changes to information security risks are reported and escalated where required

· Provide regular governance, risk and compliance reporting utilising key risk and key performance indicators and metrics

· Own and manage the third-party risk management framework

· Undertake regular identity and access management reviews and recertifications

· Ensure timely third-party security assessments on new and existing suppliers

· Maintain current expertise in information security governance risk and compliance

· Provide Information Security advice to stakeholders

· Line management, mentoring, and coaching of the team

Experience Required

· Extensive experience working in a multinational law firm

· Detailed knowledge of Singapore, Hong Kong and UK information and cyber security regulatory and legislative requirements

· A proven track record delivering information security in accordance with the requirements of information security standards including ISO27001 and the UK's Cyber Essentials plus standard

· Experience developing and implementing practical information security policies, processes procedures, and standards

· Experience in identify and access governance and user access recertifications

· Demonstrable security risk management knowledge and experience

· Experience in operational risk management frameworks

· Experience in conducting security reviews and/or audits

· Excellent written and verbal communication skills with an emphasis on confidentiality, tact and diplomacy

· Previous experience working in regulated/compliance-oriented environments

· Experience delivering designing and implementing control and delivering compliance with ISAE3402 / SOC2.

· Solid experience in information security governance roles

· Solid experience leading, managing, and mentoring people

Attributes

· Knowledge and experience across cyber security, information security and risk management in the following areas: Access control and management, Threat and Vulnerability Management, Data Loss Prevention, Malware Protection, Incident Management, Information Classification, Education and Awareness, Software Development Lifecyle, Cloud Security

· Knowledge of best practice security standards

· Strong presentation skills with proven ability to successfully interface with and influence at all levels

· Holds at least one of the following, Certified Information Security Manager (CISM) or Certified Information Systems Auditor (CISA) or ISO27001 lead auditor

· Excellent stakeholder management skills

· Comfortable having difficult conversations

· Strong analytical, investigative and independent problem-solving skills

· Able to work independently and manage own workload

· Well organised / analytical & logical approach, with attention to detail

· Client focussed – able to focus on the ‘big picture’

· Capable of innovative problem-solving and process improvements

· Strong and resilient character – able to overcome resistance

· Self-motivated, energetic and enthusiastic manner

· Flexible and reliable team player

Job Purpose

A Red Team operator is a member of the Information Security Assurance group driving security improvement through continuous assessment of our threat landscape. The Red Team is a globally dispersed “testing” team.

Team Duties

• Red Team Core (70%): primarily, as a Red Team operator, you will work closely with team members to deliver sophisticated engagements focusing on high priority, global security objectives. This will take the form of engagements that deliver chained exploits and a full kill-chain of specific recommendations, to demonstrate and explain security gaps in the context of other vulnerabilities. These engagements may include working with externally contracted red teams and exploring Artificial Intelligence based applications such as Large Language Models (LLMs).
• Threat Automation and Detection development (15%): you will be developing and recreating atomic red team tests (“TTPs”) not developed as part of Red Team Core duties. These will be used to improve our Blue Team detection and response capabilities.
• Infrastructure support and development (15%): you will run, support and maintain our red team-owned tools and infrastructure alongside other team members.

Responsibilities
Seniority is determined by experience and demonstration of exceptional competencies including:

• Documenting and effectively publishing technology guidance and repeatable processes
• Mentoring peers in groups and individually
• Improving processes and incorporating advanced methodologies into engagements
• Taking initiative to learn business goals, liaise with other departments, and identify ways to increase productivity in other ICE groups and offices

Knowledge and Experience

• University degree in Mathematics, Computer Science, Engineering, or related discipline
• 4 years or more direct penetration testing and red teaming experience.
• Scripting - python, bash, Go etc, software engineering, and system administration
• Offensive Security Certified Expert (OSCE) or CREST CCT qualification
• Artificial Intelligence background is a plus

Schedule

This role offers work from home flexibility of one day per week.

Intercontinental Exchange, Inc. is an Equal Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin or ancestry, age, disability or veteran status, or other protected status.