Total 6 it analyst job vacancies in Legal / Public / Security category in D22 Jurong, Jurong Island, Tuas

Exciting role in the Public Sector - in the Technology industry!

Salary: $3400-$3800/month

Contract till August 2024, extendable

Job Responsibilities:

• Conduct surveys and design questionnaires that are intuitive and respondent friendly.
• Conduct data cleaning and analysis to translate data into actionable analysis
• Support data requests using in-house statistical tools to prepare the data based on the various data points and cuts as required by line divisions or stakeholders.
• Management and review of survey databases and creation of data visualization platform
• Prepare the layout and proofreading of surveys in hardcopy and electronic formats.
• Programme of the online survey questionnaire in the in-house survey system.
• Test survey validations and rules in the electronic survey platform.
• Conduct random checks of data entered survey forms to ensure data accuracy.
• Perform desktop research on the internet for supplementary information.
• Monitor fieldwork completion rates to ensure timely fieldwork completion.
• Monitor the response rate of every ongoing survey to ensure good representation of the data collected from every sector.
• Update the weekly response rate and monitor the progress of the survey fieldwork.
• Other adhoc duties as assigned

Looking for:

• Singaporeans only
• Min. Degree in Economics, Business Studies or any relevant field of study
• Good knowledge of quantitative research methodologies
• Good knowledge in using statistical software such as R, Python, Tableau
• Self-starter with strong numerical and analytical skills

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:
Contact you about potential opportunities.
Delete personal data not required at this application stage.
To withdraw consent, email [email protected].
All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Chloe Chew (R1768631)
ScienTec Consulting (ScienTec Personnel) - 11C578

ABOUT THE NATIONAL INSTITUTE OF EDUCATION (NIE)

The National Institute of Education (NIE), Singapore, is Singapore’s national teacher education institute and we are proud to be an integral part of the nation’s education service. We play a key role in the preparation of teachers and in the provision of teacher professional and school leadership development programmes. We are committed to our vision of being An Institute of Distinction: Leading the Future of Education and our mission to Inspire Learning, Transform Teaching and Advance Research.

NIE invites suitable candidates to join the Division of Academic Computing & Information Services (ACIS) as a Security Analyst for Governance, Risk, and Compliance (GRC). This is a 3-year contract position.

Key Responsibilities:

Governance

• Coordinate with internal and external audit teams and assist in audit planning.
• Help deliver security awareness programs for staff and manage security governance efforts.
• Stay updated on IT trends and recommend best practices to align with governance policies.
• Support cybersecurity projects to ensure alignment with security objectives.

Risk Management

• Assist in identifying and assessing IT risks and managing vulnerabilities and threats.
• Support risk management in cybersecurity projects by focusing on threats and vulnerabilities.
• Track and monitor audit remediation actions related to risk management.
• Measure the effectiveness of security awareness programs to minimize risks from human error.
  

Compliance

• Ensure compliance with internal standards (ISO 27001, ISO 22301) and external regulations.
• Facilitate responses to internal and external IT audits.
• Participate in audit engagements and report on audit issues and remediation.
• Provide ongoing compliance reporting to ensure timely remediation of audit findings.

Requirements:

Educational Qualification(s)

• A University Degree in Information Technology, Cybersecurity, Risk Management, or Compliance, or an equivalent qualification.
• Desirable Certifications: CISSP, CISM, CISA, CRISC, or other relevant certifications.

Relevant Experience

• 3-5 years of experience in Information Security, IT Risk Management, or Compliance, preferably in a higher education or similar environment.
• Experience with IT security audits and compliance reviews in regulated industries.
• Experience with vendor security assessments and managing third-party security risks.
• Experience in security awareness training and working in cross-functional teams.

Knowledge Required

• Security Frameworks: ISO 27001, CTM, NIST, CIS controls, and their application in operational environments.
• Regulatory Standards: Understanding of the Cybersecurity Bill, PDPA, and related security laws.
• Risk Management: Knowledge of risk assessments, mitigation strategies, and identifying threats to information systems.
• Audit Processes: Understanding security audit processes, compliance, and remediation.
• IT System: Good knowledge of IT infrastructure, application management, and cybersecurity practices.
• GRC Tools: Experience with Governance, Risk, and Compliance platforms and software is advantageous.

Skills and Competencies

• Analytical Skills: Ability to analyze security risks and make data-driven decisions.
• Communication Skills: Ability to convey technical security concepts to non-technical audiences and document findings.
• Problem-Solving: Strong problem-solving capabilities, particularly during security incidents.
• Attention to Detail: High focus on detail in audits and risk assessments.
• Project Management: Ability to manage multiple projects, prioritize tasks, and meet deadlines.
• Team Collaboration: Proven ability to work with cross-functional teams (IT, legal, compliance, vendors).

Other Personal Attributes

• Integrity and Confidentiality: High ethical standards and the ability to handle sensitive information.
• Proactivity: Ability to act independently and proactively address security challenges.
• Adaptability: Capable of adjusting to evolving security threats and changes in regulations.
• Resilience under Pressure: Ability to make sound decisions under pressure, particularly during audits or security incidents.

Other Information

NIE staff can take chartered buses at their own expense from or near their home to the NIE campus. This is subject to the availability of bus routes and seats.

Req ID: R00018942

The Mercedes-Benz AG Group CISO heads Mercedes-Benz’s Global Cyber Security Department (based in Stuttgart, Germany). We are looking for a Cyber Security Defensive Analyst to join our Cyber Intelligence and Response Centre (CIRC). The Global Cyber Security Department oversees a 24/7 follow-the-sun operation with counterparts in EMEA and NAFTA. This role focuses on providing an intelligence-driven approach towards incident response affecting any Mercedes-Benz assets and providing containtment, eradication and recovery of affected asssets involved in a cybersecurity incident in a timely and efficient manner.

Furthermore, the role requires the mitigation of identified threat, addresses identified vulnerabilities and also provide incident coordination towards internal stakeholders and external customers. The role is crucial in enabling Mercedes-Benz's business by ensuring agile security operations and maintaining a secure environment.

As a Cyber Security Defensive Analyst, you will be responsible for:

• Conducting technical analysis and triaging of triggering alerts ingested from Mercedes-Benz log sources to determine impact, scope of impact and determine corresponding remedial actions to mitigate, contain and/or otherwise limit the impact of the incident.
• Analysing, triaging and processing security threats to identify potential risk gaps and corresponding organizational impact by conducting in-depth analysis of the identified threat, attack vector or intelligence information.
• Working closely with the CIRC threat intelligence team to aid in the enhancement of contextual analysis and providing threat hunting support towards Open Source Intelligence (OSINT) related Indicators of Compromise (IoCs).
• Taking the lead in managing Mercedes-Benz end users and stakeholders in providing cybersecurity incidents updates and other related activities that might arise from time to time during the incident coordination, remediation and recovery
• Providing duty analyst support for the CIRC operations during weekends, utilizing a pre-defined duty roaster, ensuring the continued operations and monitoring of threats and triggering alerts 24 by 7, follow the sun model.
• Coordinating projects assigned by the Head of Global Defensive Operations towards the rollout, implementation and acting as the point of contact for local stakeholders towards the implementation and coordination of the projects assigned.
• Providing technical inputs towards the virtual teams as assigned by the Head of Global Defensive Operations towards the operational directions, method determination and other related administrative support required from time to time.
• Provide guidance and technical support in mentoring and guiding newer members of the team in technical and incident management skills and processes.

Qualifications

• Degree from a reputable university or significant course work in Computer Science, Networking, engineering or other computer-related fields of study
• One or more of the following professional certification is beneficial: CISSP, GCIH or similar.
• Have good emotional intelligence and is a proven team player
• Rational and able to remain calm under pressure
• Fluency in the English Language
• Effective oral and written communication skills
• Good timekeeping ability to cope with a tight deadline and achieve operational objectives
• Self-motivated with the ability to carry out assigned tasks with minimum supervision
• Proficient understanding of cyber and IT security risk, threat and prevention measure
• Proficient understanding of networking and network security technologies.
• Good understanding of Forensic tools and methodolgy used in incident response
• Good knowledge of security standards and best practices
• Good understanding of various operating systems
• Good understanding of the Cyber Kill Chain and the ability to display clear analytical skills
• Previous experience in a corporate or enterprise environment, engaging with and responding to a diverse array of internal stakeholders, including senior management.
• Knowledge of Microsoft Office suite (Word, Excel, PowerPoint and Access)
• Knowledge of Splunk is beneficial

This position is based in Singapore and a valid and approved work visa is required for employment in Singapore in accordance to local labour law regulations. Candidate may be offered a lower job level based on candidate’s experience. We regret to inform you that only shortlisted candidates will be notified.

ABOUT THE NATIONAL INSTITUTE OF EDUCATION (NIE)

The National Institute of Education (NIE), Singapore, is Singapore’s national teacher education institute and we are proud to be an integral part of the nation’s education service. We play a key role in the preparation of teachers and in the provision of teacher professional and school leadership development programmes. We are committed to our vision of being An Institute of Distinction: Leading the Future of Education and our mission to Inspire Learning, Transform Teaching and Advance Research.

NIE invites suitable candidates to join the Division of Academic Computing & Information Services (ACIS) as a Senior IT Security Analyst (3-year contract).

Key Responsibilities:

Incident Response Leadership

• Oversee the entire incident response lifecycle from detection to resolution.
• Lead investigations of IT security incidents and ensure thorough root cause analysis and remediation.
• Develop and maintain incident response playbooks and procedures.
• Coordinate with internal, external stakeholders, and vendors during incidents.
• Conduct post-incident reviews and report findings to management.

Monitoring and Detection

• Develop and implement advanced threat detection and monitoring strategies.
• Utilize SIEM, EDR, and other security tools for timely incident detection.
• Perform threat hunting and proactive security assessments.
• Collaborate with IT teams to deploy and optimize security solutions.

AI and Automation

• Integrate AI and automation technologies to enhance security operations.
• Develop automated workflows and scripts for incident response and routine tasks using SOAR.
• Leverage machine learning and AI-driven tools for threat detection and analysis.
• Stay updated with advancements in AI and evaluate their applicability to security operations.
• Apply system design thinking to security solutions.

Threat Statistics and Reporting

• Analyze and compile statistics on threats relevant to the Institute.
• Prepare and present detailed reports on threat statistics to stakeholders.
• Use data visualization tools to communicate threat trends and insights.

Innovation and Continuous Improvement

• Evaluate and integrate new technologies to enhance security operations.
• Foster a culture of continuous improvement within the team.
• Encourage continuous learning and professional development.

Forensics Capability Development

• Enhance the team's digital forensics capabilities.
• Develop forensic investigation procedures and protocols.
• Train team members in forensic tools and methodologies.
• Oversee the collection, preservation, and analysis of digital evidence.
• Collaborate with legal and compliance teams to ensure regulatory alignment.
• Conduct regular drills and simulations for forensic readiness.

Requirements:

• Degree in Information Systems, Computer Science, Cybersecurity, or a related field.
• Professional Certification(s) in incident handling and security analysis preferred.
• GCIH or its equivalent is preferred
• Minimum of 8 years of progressive experience in IT security, with a focus on Incident response
• Minimum of 4 years of experience in a security operations center, with proven leadership capabilities.
• Intermediate knowledge of security operations, incident analysis, incident handling, and vulnerability management or testing, system patching, log analysis, intrusion detection, or firewall administration
• Proven experience in managing incident response and performing threat hunting
• Proven experience in integrating AI and automation in IT Security using Security Orchestration Automated Response (SOAR) technologies.
• Proficiency in Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), traffic and packet analysis, digital forensics, and cloud security.
• Experience in Blue/Purple teaming, firewall, Intrusion Prevention Systems (IPS), Web Application Firewalls (WAF) administration, virtualization, and cloud technologies.
• Experience in monitoring and administering host-based intrusion detection systems.
• Knowledge and experience in Linux/Windows/Database technologies preferred.
• Strong knowledge of industry standards and information security policy frameworks.
• Hands-on experience with scripting and automation tools to enhance security operations.
• Ability to conduct gap analysis of current processes and identify opportunities for improvement.
• Evaluate internal and external environments for threats related to Information Security and act as a subject matter expert to ensure these are properly addressed and controlled.
• Continuously improve event correlation and alerting processes and use cases to detect potential incidents.
• Automate manual processes to enhance security incident response.
• Experience with network security assessment tools.
• Excellent leadership and team management skills, with the ability to inspire and motivate a team.
• Strong communication skills, with the ability to effectively interact with stakeholders at all levels, including University administration.
• Demonstrated ability to drive strategic initiatives and lead a team through change.
• Exceptional problem-solving skills and the ability to think critically under pressure.
• Ability to interview stakeholders to define and document business requirements.
• Provide advice and guidance on response action plans for information risk events and incidents based on incident type and severity.

Other Information

NIE staff can take chartered buses at their own expense from or near their home to the NIE campus. This is subject to the availability of bus routes and seats.

Req ID: R00018131

Job Responsibilities

• Develop and maintain all documentation on security policies, standards and controls and enforce compliance with policies and procedures in entire organisation
• Develop, implement and monitor reporting mechanisms for governance, security and risk practices to support compliance and highlight areas of exposure
• Keep abreast of current advances in all areas of information technology concerning vulnerabilities, security breaches or malicious attacks, and maintain up-to-date knowledge of IT security industry
• Work with internal units to conduct regular reviews and audit of IT systems and applications to ensure statutory compliance
• Develops, tracks, and reports on Key Risk Indicators (KRIs) for information technology security risk assessment progress
• Support data protection under Personal Data Protection requirements
• Develop and maintain business continuity plan and IT disaster recovery plan. Conduct annual business continuity and IT Disaster recovery testing
• Conduct IT risk assessment, review and reporting of key IT risk exposures and metrics, develop IT risk management framework and remediation plans to improve security posture with IT security best practices
• Assist in the execution for enterprise information and security governance and architecture roadmap
• Identify potential threats or attempted breaches to minimise vulnerabilities and risks in operating environment
• Design, develop and conduct cybersecurity and personal data protection act awareness workshops.
• Execute, manage, enhance and implement security operational processes to comply with IT regulatory and corporate requirements
• Responsible to ensure information security agreement is established for any required IT system/service contracts
• Perform incident and security management through Identify, Protect, Detect, Respond and Recover functions
• Any other related tasks assigned by supervisor

Job Requirements

• Bachelor’s Degree in Computer Science / Cyber Security / Information Technology or equivalent
• Minimum 3 years’ experience in IT audit, IT security or Data protection
• Possess relevant IT Governance, security and project management certifications (eg COBIT, CISSP, CISA, CISM, CITPM, PMP) will be advantageous
• Strong understanding of key IT security concepts such as access control, confidential data, encryption, business continuity, info-sec scans, and vendor apps
• Strong knowledge of IT organisation business processes and systems including (IT Security, data management, architectural and planning, technology life cycle management)
• Good understanding of risk management functions, including IT audit, cyber security, and/or IT compliance.
• Experience in or knowledge of 3rd party / vendor management lifecycle
• Good understanding of Singapore Personal Data Protection Act (PDPA)
• Strong oral and written communication skills to work effectively with staff at all levels of the organisation

Note: All new hires will be offered a two-year contract in the first instance. Contract renewal and emplacement on permanent appointment will be subject to continuous good performance.

Responsibilities :

● Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.

● Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.

● Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.

● Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.

● Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.

● Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.

● Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.

● Developing and implementing security policies and procedures that ensure the organization’s data

and systems are protected against cyber threats.

● Conduct regular vulnerability assessments and penetration testing to identify potential security

weaknesses and risks to make improvements in the organization’s security.

● Report all security incidents to the home office and work with corporate IT on response and resolution strategy.

● Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.

● Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

● Bachelor’s degree in computer science, information technology, or equivalent experience.

● 5+ Years of experience in a cyber or information security management role.

● Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).

● Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.

● Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.

● Demonstrated understanding of business processes, IT risk management, and related standards.

● Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.

● Excellent problem-solving skills and the ability to think critically under pressure.

● Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.

● Proven track record of staying current with evolving cybersecurity threats and best practices.

● Exceptional planning and organizational skills, and excellent written and oral communication.

● Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.

● Professional information security certification preferred, such as:

○ CompTIA Security+

○ Certified Information Systems Security Professional (CISSP)

○ Certified Information Systems Auditor (CISA)

○ Certified Information Security Manager (CISM)

Location: East area

HOW TO APPLY :

Interested candidates, please submit your resume by clicking on “Apply Now” or aliceyap(a)hkmsvs.com

All applications will be treated in the strictest confidence and only shortlisted candidates will be notified

Yap Lay Choo

EA Licence No. 03C5391 | Registration No. R1987101