Total 24 it analyst job vacancies in Legal / Public / Security category in singapore south east

Position Overview

The IT Security Operations Analyst role’s is to safeguard the organization’s IT systems and data. This role requires the candidate's active participation in the implementation of security policies and procedures, the monitoring and analysis of security events and the maintenance of security tools. Other responsibilities are to identify, investigate and resolve any security threats, vulnerabilities and incidents. The candidate must keep up to date with the latest security trends, have excellent communication and problem-solving skills and have a deep understanding of security principles and technologies. The individual will have a functional role in mentoring other team members and share the off-hour support responsibilities.

Responsibilities

1. Monitor, maintain, and analyze network and computers for unusual activity or suspicious behavior by reviewing information security logs.
2. Manage and resolve security Level 2 support tickets per defined SLAs
3. Investigate and analyze security incidents to determine root cause and impact.
4. Report compliance failures to management for immediate remediation.
5. Responsible for the effective management of the organization’s Crowdstrike Falcon Admin Console.

• Deploy Crowdstrike Falcon EDR detection agent on all corporate devices.
• Ensure coverage of malware detection for all managed EDR Agent capable devices.
• Migrate existing server agents from alert-only mode to blocking mode.
• Provide EDR escalation support for agents already installed

1. Assist and collaborate with the Information Security Group and coordinate with IT Infrastructure on the following:

• IT Threats and Vulnerabilities Assessments, Protection, and Remediation
• IT security patch management follow-up and reporting
• Firewall rule documentation, review, and approval
• Promote within IT Infrastructure the proper Security controls aligned with the IT Security Program
• Validate and maintain operational security documentation.

1. Continuously assess the current Security Posture and provide recommendations for remediation and prevention of security incidents.
2. Collaborate with cross-functional teams to implement security solutions and technologies.
3. Stay up to date with industry trends and emerging security threats to proactively address potential risks.
4. Assist in the deployment of new security systems.
5. Participate in security audits and assessments to ensure compliance with regulations and standards.
6. Understand the dark and deep web ecosystem.
7. Manage and support the following applications:

• Palo Alto/Firewall
• Network security (Micro-segmentation)

1. Perform other duties as required

Qualifications and Experience

• Bachelor’s degree in Cybersecurity Engineering or Computer Sciences
• Strong professional experience in information security with a focus on security operations and technical support
• Strong Experience with Palo Alto and Crowdstrike platform
• Experience with VPN, SSL and other encryption technologies
• Good knowledge of server, workstation, and Active Directory technologies that impact security controls
• Deep understanding of TCP/IP, DNS and common network services
• Experience with security frameworks and compliance requirements such as GDPR, ISO 27001, NIST 800 and PCI DSS.

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s Degree in Computer Science/Information Technology or equivalent.
• At least 5 years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:

- CompTIA Security+

- Certified Information Systems Security Professional (CISSP)

- Certified Information Systems Auditor (CISA)

- Certified Information Security Manager (CISM)

Our Client is a telecommunications service provider in Singapore. With the expansion of the team, they are looking for a L1 Security Analyst to join the team.

Responsibilities: -

·       24 x 7 triage, short-turn analysis of real-time security alerts & generate tickets, or escalation to L2 Security Analysts that are not in the Automation Runbook.

·       24 x 7 escalation to resolver upon receiving automated generated incident tickets on the health of SOCaS infrastructure, IT/OT managed security devices, or from the website defacement restorer activation alert.

·       24 x 7 manage problems till closure which include:

o   Ensure that Service Level Agreements are met.

o   Liaising with customers with regards to information security incidents

o   Provision and performance of remedial actions to enhance customers' network security posture

·       Min 1 year working experience in IT Infrastructure Operation and/or Support.

·       Willing to work with 24/7 shift pattern that includes weekend work.

·       Sound fundamental knowledge on Internet technologies, such as TCP/IP, HTTP, SSL, DNS, OWASP Top10 and web servers (e.g. Apache, IIS, Nginx, etc.).

·       Understanding of firewalls, endpoint detection and response (EDR), IDS/IPS, WAF, etc.

Desired qualifications:

·       Bachelor’s degree / Polytechnic Diploma in Computer Science, Information Technology or Information System.

·       Experience in scripting (e.g. shell scripting, Macro, PHP, Perl, Java, etc.) and/or Regular Expression.

·       Experience with TCP/IP packet analysis / network debugging with tcp dump or similar.

·       Experience with web security concepts and technologies such as web application firewall, proxy.

·       Experience general security technologies, processes, and concepts.

·       Industry recognized security certifications (GCIA/GCIH, CISSP, CISA, CEH, etc.).

·       Experience writing/decoding exploit, vulnerability, and attack detection signatures.

·       Experience working with a SOC team is an advantage.

- Monthly allowances and end-of-contract bonus

• Western Digital’s Global Physical Security Organization is seeking a highly talented and motivated individual to join the team. Our business unit is a 24/7 model where you may be required to work outside of normal business hours to address critical operational and technology issues. You must be able to drive complex technical solutions that provide scalability, efficiency, and effectiveness. This position is primarily responsible for the APAC regions physical security systems program, but the role will also provide guidance and support for our locations globally. 

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Agile in addressing troubleshooting issues and service requests
• Responsible for knowing status, locations of, quantities of, vendor, model, make and technical specifications of each system component, including connectivity requirements.
• Monitor performance of the system, highlight any issues, follow up on solution to resolution:
  • Initiate purchase order, service call, work order, etc., as necessary.
  • Verify that work was completed as requested.
• Provide training and guidance on security systems; create and maintain operator instructions, procedures, security system drawing, and related documentation as appropriate.
• Partner and drive physical security operations and systems technology with internal business units like IT, Real Estate, Legal, EH&S, Finance, Procurement when required
• Strategically improve system end users experience on a variety of applications
• Define physical security systems and technology roadmaps that drive overall program success
• Skilled in presenting solutions at a high level to internal key stakeholders
• Integrate and perform case studies, conduct research into product requirements to improve security systems and technology
• Familiar with internal tools, tracking and reviewing requests such as ServiceNow, Smartsheet, etc.
• Assist in deployment of enterprise level access control systems, video management systems, visitor management systems, etc.
• Work with multiple third-party vendors and SOCs to help maintain the global standard in security systems and technology
• Familiar with Windows, Linux and SQL, Networking, and IoT devices
• You will work to integrate a variety of security devices into existing network infrastructure including but not limited to: PSIM, C-Cure, Lenel, AMAG, Milestone, AXIS, ISOS, SWN, etc.
• Participate, oversee and drive project meetings and execute end-to-end, ensuring on-time delivery
• Configuring and maintaining APAC Security Systems, including hardware, system software, and security applications.
• Diagnosing and resolving hardware, software, networking, and system issues when they arise.
• Monitoring system performance to ensure everything runs smoothly and securely.
• Researching and recommending new approaches or system to improve the security system infrastructure. Enhance the current security model.
• Providing technical support when requested or be available at the site for further assistance.
• Works with users to identify system requirements; develops processing procedures and systems modifications to meet these specifications.
• Deploy, maintain, and troubleshoot core business applications, including application servers, associated hardware, endpoints, and databases.
• Document any processes, which employees need to follow in order to successfully work within our security systems

We’re searching for a Lead Consultant, IT Security to be part of our diverse team of talents here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

• Manage team of cyber day 2 engineering resources within Identity and Access Management & PKI track providing guidance, mentorship, performance evaluations.
• Involve in project work to deliver security service which require deeper level of expertise and to drive resolution of operational issue which are escalated to ensure satisfactory closure.
• Responsible for tracking the progress of building within Identity and Access Management & PKI technical competencies, develop training and growth plans within specialization track.
• Involve in the hiring process for cyber day 2 to expand the existing portfolio of services (e.g. network security, endpoint security, security analytics etc).
• Involve in the presale activities for cyber day 2, including defining the scope of cyber day 2 services, sizing the effort to support the security technologies deployed in client environment, determine what can be supported internally and what can be delivered via partnership with other parties in NCS or with sub-contractors and process standardization & improvement.
• Assist in improving the quality of service for cyber day 2 team.
• To be one of the Subject Matter Expert (or trusted technical advisor) in Identity and Access Management & PKI cyber technologies during presale and day 2 phases.
• Mentoring engineers or interns to ensure they can assist the team in executing operational tasks for projects.
• Accountable for various tasks above and provide regular update to the Practice Lead

We’re searching for a Lead Consultant, IT Security to be part of our diverse team of talents here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

• Manage team of cyber day 2 engineering resources within specialization track providing guidance, mentorship, performance evaluations.
• Involve in project work to deliver security service which require deeper level of expertise and to drive resolution of operational issue which are escalated to ensure satisfactory closure.
• Responsible for tracking the progress of building technical competencies, develop training and growth plans within specialization track.
• Involve in the hiring process for cyber day 2 to expand the existing portfolio of services (e.g. network security, endpoint security, security analytics etc).
• Involve in the presale activities for cyber day 2, including defining the scope of cyber day 2 services, sizing the effort to support the security technologies deployed in client environment, determine what can be supported internally and what can be delivered via partnership with other parties in NCS or with sub-contractors and process standardization & improvement.
• Assist in improving the quality of service for cyber day 2 team.
• To be one of the Subject Matter Expert (or trusted technical advisor) in cyber technologies during presale and day 2 phases.
• Mentoring engineers or interns to ensure they can assist the team in executing operational tasks for projects.
• Accountable for various tasks above and provide regular update to the Practice Lead

Responsibilities:

• Experience in leading and delivering multiple security projects and solutions across one or more IT Security domains (Cyber Program Management, Cyber Threat Management, Identity & Access Management, Data Protection, Privacy, Cyber Analytics). This experience should include both advisory, implementation and operation experiences.
• Design and develop a customized security architecture, evaluate and select the best security system in one or more of the above security domains.
• Provide high-level input and security consultation in a project-based environment and ensure adequate security controls in all Business IT solutions.
• Responsible for project planning, execution and managing scope due to any new information and/or changes to initial assumptions, including implications for project time, cost, quality and risk
• Ensure the security enhancements / new security project delivery is done in line with stakeholder’s requirements, timeline and cost.
• Develop and maintain a detailed security project plan which deliver to the cost, quality and time for enhancements
• The position will be heavily involved in IT security operations, including:Security solution delivery
  Security monitoring
  Administration for security systems (e.g. firewall, anti-malware system, IDS/IPS)
  Incident Response
  Level 2 support for IT Security operations.
  

Requirements:

• Min. Bachelor's degree in Computer Science
• Min. 6-8 years’ experience working in a large-scale IT environment; Including five (5) years of information security and risk experience within the past six (6) years; including risk analysis, endpoint, server, network and web application security
• Possess Security Industry Certifications such as CISSP, CISM, SANS, GSEC and PMP, ITIL, Microsoft, CISCO
• Having good understanding of TCP/IP protocol and OSI Seven Layer Model.
• Strong technical security skills in assessment, design, implementation architecture, and program / project delivery and work across various delivery models, (Waterfall, Agile, DevOps)
• Analyzes & prepares recommendations relating to security for existing IT infrastructures / Applications.
• Expert understanding of firewall technologies.
• Ability to plan, organize and prioritize tasks to complete within established time frames.
• Highly result oriented and can work independently.
• Ability to build relationships and interact effectively with internal and external parties.
• Strong analytical, technical, and communication (both oral and written) skills.

What we seek to accomplish together:

• Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis.
• Establish compliance with these policies / procedures through ongoing security reviews and audits, not limited to log analysis and security assessment of customer ICT systems
• Conduct security risk management exercise
• Conduct table-top exercises
• Conduct vulnerability assessment, coordinate penetration tests activities
• Conduct information security awareness training
• Responsible for the development and management of customer’s security incident response plan.
• Lead and support customer in the matters of security incident resolution and response.
• Be the point-of-contact/customer liaison to assist and advise customer for ICT security related matters
• Project managed the activities and deliverables during the implementation phase.

Job Summary

We are currently looking for a seasoned leader as the Head of IT Security. The incumbent will be responsible for leading the transformation while establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. This role oversees the development and implementation of security policies, standards, and procedures to ensure the protection of the organization's information systems and data.

Mandatory Skill-set

• Degree in Computer Science, Information Security, Information Systems or a related field;
• At least 12-15 years of experience in IT security & risk management preferably in a large scale organisation;
• Deep knowledge and understanding of internal controls, security frameworks, risk management and IT governance, auditing techniques, threat modeling and risk management principles;
• Good knowledge of enterprise IT systems and components (applications, operating systems, databases, networks, cloud, DevOps;
• Knowledgeable in using various cyber security monitoring and analysis tools and techniques depending on the organization's needs and requirements;
• Familiarity with security technologies such as firewalls, intrusion detection systems, and endpoint protection;
• Familiar with cyber security standards, protocols and frameworks such as NIST, CIS, PCI/ DSS, MAS TRM, ISO standards;
• Experience with Security operations centers (SOC) and setting up SOC models;
• Experience in driving enterprise initiatives for E2E security posture analysis;
• Ability to work with subsidiaries and understand regional security requirements;
• Strong in analytical thinking with attention to detail;
• Excellent communication and inter personal skills.

Desired Skill-set

• CISSP, CISM, CRISC, CGEIT and/or CISA certified.

Responsibilities

• Define and implement the Enterprise InfoSec (IS) landscape and roadmap;
• Responsible for documenting methodologies and tools to mitigate information security or cyber risk for on-prem and clous platforms;
• Prepare reports for information security or cyber risk related reporting, threat awareness and security awareness reports;
• Design and implement secure cloud architecture for various cloud platforms and act as an SME for cloud platforms (AWS, GCP, or Azure) using cloud-native security services;
• Recommend corrective actions or appropriate security controls to mitigate technical risk;
• Conduct Technology Security Risk Assessments on systems throughout their lifecycle to identify and mitigate security risks;
• Assist in the development of policies for conducting cyber security risk assessments and compliance audits;
• Formulate governance procedures for documenting and updating security policy, standards, guidelines and procedures;
• Perform information security or cyber risk assessment activities and assess third party security controls and internal security systems including onsite assessments;
• Establish scope of risk analysis for new technology initiatives and identify security risks in the Tech Obsolescence Risk program;
• Communicate with regulators such as MAS and ensure solutions meet external and internal requirements and guidelines
• Keep abreast of the dynamic cyber threat landscape and identify opportunities for enhancement of IT risk processes;
• Provide regular updates on the overall health of compliance, criticality assessment, audit findings, remediation and action plans.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

VP - ICT Security Operations Analyst

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and, in our clients’, best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do. We keep the bank safe and provide the technical tools our workers need to be successful. We design our digital architecture and ensure our platforms provide a first-class customer experience. Our operations teams manage risk, resources, and program management. We focus on enterprise resiliency and business continuity. We develop, coordinate, and execute strategic operational plans. Essentially, Enterprise Operations & Technology re-engineers client and partner processes to deliver excellence through secure, reliable, and controlled services.

Trust is part of our DNA at Citi. As such, we take safeguarding our customer data very seriously. The Chief Information Security Office (CISO) is made up of deeply dedicated and talented colleagues who work together to ensure the safety of Citi’s and our clients’ assets and information. We manage information security as an end-to-end program – one with a clear mandate and accountability. Our mission is to continually execute and enhance a global security program that is fully anchored to modern control and security frameworks, fully aligned with the technology of the firm, threat-focused and data-driven, and deeply integrated across all Citi businesses globally.

Being talent-driven, we are focused on attracting, developing, and retaining diverse and inclusive talent with a high technical skill level. As a member of our team we will provide you with career development opportunities at all stages of your career. Our employees model a passion for protecting Citi and our clients and believe in treating others with dignity and respect.

The Chief Information Security Office (CISO) is home to deeply talented colleagues that work to ensure the safety of Citi's clients' and our proprietary data. We manage information security as one end-to-end program – one with a clear mandate and accountability. Our mission is a program that is fully anchored to modern control and architectural frameworks, is fully aligned with the enterprise architecture of the firm and is deeply integrated into the sectors and functions.

CISO’s Cyber Security Engineering and Architecture is responsible for delivering integrated risk reduction capabilities and services aligned to the architectural goals and priorities associated with leading ‘Change the Bank’ (CTB) and ‘Run the Bank’ (RTB) initiatives. This role entails leading and coordinating the execution of SASE Services, across the network security domain. The successful candidate will have demonstrated success and be highly adept at: leading global programs and engineering change efforts; managing risk and execution of global programs by aligning resources and tactical/strategic decisions; and driving transformation across a complex enterprise to support cybersecurity goals. The candidate needs to have the ability to work on defining highly scalable and integrated security architectures, and influence roadmaps across a variety of product portfolios. The candidate needs to have the ability to define and drive interoperability with security components of a complex end to end network and cloud security ecosystem, focusing on client experience. Strong experience across cybersecurity, Technology Infrastructure, large enterprises will assist in delivering aspects of this service.

Our commitment to diversity includes a workforce that represents the clients we serve globally from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.

Responsibilities:

• Working with Transformation Program Directors, Senior Architects, Steering Committees, CISO and CTI partners in delivering the transformational Programs related to SASE. Onboarding of users on Zscalar and ensuring smooth transition.
• Troubleshooting issues and work on finding RCA.
• Zscaler Internet Access design and migration methods from legacy Internet Access solutions to SASE based architecture.
• Interface and support Citi’s Security Architecture Council and Working Groups building strong rapport across teams.
• Firewall rules Management (creation/ modification/ deletion) by following Change management process and via automation.
• Participate in migration activities and provide troubleshooting support from Infrastructure defense standpoint. Identify issues, provide support for isolating problems, finding RCA.
• Willing to work on weekends for migration activities off business hours.
• Completing additional tasks in connection with the role but not detailed in the current job description, charged by the direct manager, supervisor, or the functional head.

Qualifications:

• 8-12 years of extensive Security Experience with Checkpoint Firewalls, Juniper Networks Firewalls, Palo Alto Network Firewalls, Bluecoat Proxy, IPS/IDS, Illumio, Crowdstrike and EDR tools.
• Extensive knowledge on SASE Zscalar user onboarding and operational support experience.
• Strong troubleshooting skills over the Firewalls, Proxy and network infrastructure.
• Extensive Data Networking knowledge and an understanding of network security standards such as Firewall Rules, Security Zones, Multicast Data Feeds, Ultra Low Latency Network Architectures & Platforms.
• Hands-on experience in Zscaler Internet Access, Zscaler Private Access and Zscaler Digital Experience
• Proven influencing and relationship management skills.
• Exhibiting a high degree of flexibility and ability to multi-task, seeking guidance where necessary
• Strong communication skills, including verbal and written skills.
• Ability to work as part of a team with remote colleagues in other countries.
• Strong knowledge of Proxy functionality and Proxy features
• Consistently demonstrates clear and concise written and oral communication as well as strong presentation skills to both technical and non-technical audiences.
• Advanced analytical and problem-solving skills
• Demonstrated ability to take ownership and work with cross functional teams to manage multiple projects simultaneously under pressure.
• Thorough understanding of industry and corporate technology standards for Cyber Security services

Critical Competencies:

• Firewalls, Proxy and network infrastructure
• Zscaler Internet Access, Zscaler Private Access

You will be part of a well-established international team in Information Security focused on Cloud Security Architecture, Security Tooling Engineering and Automation.  

Your role will contribute to the success of the team and the Company. 

Your key tasks

• Support Cloud & Infrastructure Organization by reviewing and analysing Network, Systems, and Application architectures to enforce and validate Security requirements.
• Leads Threat Model exercises for new services/major changes.
• Actively Collaborate with your team members to support them on daily operations, including: 
  • Review of IT infrastructure solution designs to ensure compliance with policies and standards. 
  • Operational implementation, Automation, and ownership of Security Tools 
  • Assist in deploying automation of operational processes and procedures, identify weaknesses, propose, plan, and deploy improvements to address and enhance the infrastructure design. 
• Support and maintain the APAC’s Information Security Management System (ISMS) to assure continuous compliance with regulations, laws, and contractual obligations by adopting and deploying industry and market standards and accepted best practices.
• Be on routine standby to support the team.

What we seek to accomplish together:

• and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis.
• compliance with these policies / procedures through ongoing security reviews and audits, not limited to log analysis and security assessment of customer ICT systems
• conduct security risk management exercise
• manage vulnerability assessment
• conduct information security awareness training
• for the development and management of customer’s security response plan. To lead and support customer in the matters of security incident resolution and response.
• of contact to assist and advise customer for ICT security related matters

Senior Manager, Or Manager - Cyber Security & IT Governance

Responsible for the assessment, development, implementation and maintenance of enterprise-wide cyber security and IT Governance programmes to preserve the confidentiality, integrity, and availability of information resources. As part of the IT leadership team, this individual will be expected to provide technical leadership and consultation across the organisation. S/he will also work with external experts to implement security solutions, detect, and contain cyber security incidents.

Responsibilities

Cyber Security:

Assess and review environment and cybersecurity measures to ensure security and operational effectiveness, for e.g. network, system, application, endpoint security, physical and logical access security, etc.

Review and develop security framework, information security policies, processes, procedures, and guidelines.

Conduct cybersecurity risk assessments, penetration tests, and IT controls tests.

Identify security gaps and propose mitigating measures and escalate security incidents and non-compliances on a timely basis.

Evaluate, deploy, and maintain cybersecurity infrastructure to improve cybersecurity posture. Design, implement and maintain security incident response and escalation procedures.

Monitor, analyze and correlate events to determine the best course of action, to mitigate and contain threats when detected.

improve cybersecurity awareness of staff, for e.g. by conducting awareness training. Automate security controls, data, and processes.

IT Governance:

Review and enhance IT policies, standards, guidelines, and best practices regularly to ensure that these are aligned to organization objectives and industry best practices.

Develop and implement effective change management plans (such as communication plans and training programs) to drive adoption and compliance.

Participate in audit planning meetings with internal/external auditors, collate/provide the required materials on a timely basis, validate audit findings, provide remediation solutions, and implement the agreed solutions on a timely basis.

Drive security access and activity log reviews on regular basis.

Promote IT risk management, governance, and compliance culture across the organization.

IT Management:

Contribute to IT strategic planning and budgeting. Ensure IT vendors meet contractual obligations.

Maintain up-to-date knowledge on cybersecurity technologies and standards.

Attend to any other reasonable duties as assigned by Director, Information Technology.

Requirements

Degree in engineering, science or information technology, or equivalent education.

8-10 years of related work experience in cybersecurity management and security governance.

Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.

Strong understanding of cybersecurity standards.

Hands-on experience with cybersecurity tools such as Next Generation Firewalls, SASE, Endpoint Protection, Data Loss Protection, Email Security, etc.

To apply:

Please email Resume in Microsoft Word format

Please state your Position/ positions applied on the “on TOP” of your resume.

Please state Available Commencement Date or notice period

Please state current and last SALARY and Expected Salary in your resume.

Please state Reasons for leaving current & previous Employment.

Cyber Security, Associate Engineer

Salary: up to $4000+

Responsible in maintaining and improving the organization’s cybersecurity posture on an ongoing basis. S/he will work with external experts to implement security solutions, and work with vendors to monitor, detect and contain cybersecurity incidents to minimize impact to the organization.

Responsibilities

• Assist in the development of information security policies, processes / procedures and guidelines on an ongoing basis.

• Work with vendor to conduct security assessments and penetration tests.

• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.

• Standardize and refine security incident response and escalation processes.

• Mitigate and contain threats when detected.

• Escalate security incidents and non-compliances on a timely basis.

• Work with IT infrastructure team to evaluate, implement and enhance the network perimeter security, endpoint security, SIEM.

• Monitor information security alerts triage, mitigate, and escalate issues as needed.

• Conduct information security awareness training.

• Provide security advisory to end users on regular basis.

• IT Security Management of various aspects, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.

• Keep abreast of industrial IT security advancements and introduce appropriate security enhancements to IT infrastructure and systems.

• To perform daily monitoring of logs and review of security notifications and alerts, and assist on the assessment and reporting weekly trends, incidents and security events. Abnormalities found in the review of security events must be reported to the Cyber Security Manager.

• To provide daily technical support in terms of Cyber Security operations for Sophos Endpoint Protection, Cisco FTD Firewall, Advanced Email Threat Protection, Web Application Firewall, Cisco Email Security, DG DLP, Tenable SCCV, Splunk, Cisco Umbrella, etc.

• Attend to any other reasonable duties as assigned by the Senior Cyber Security & IT Governance Manager and IT Director.

Requirements

• Degree/ Diploma with min 2 years related work experience in cybersecurity management in Singapore.

• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.

• Good command of written and spoken English.

• Excellent interpersonal and communication skills.

• Pro-active, independent, resourceful, able to work in a team environment and work independently with minimal supervision.

To apply:

Please email Resume in Microsoft Word format

Please state your Position/ positions applied on the “on TOP” of your resume.

Please state Available Commencement Date or notice period

Please state current and last SALARY and Expected Salary in your resume.

Please state Reasons for leaving current & previous Employment.

InfoCepts stands as a global leader in comprehensive data and analytics solutions, boasting nearly two decades of expertise. Recognized as Gartner's Customers' Choice for Data & Analytics providers in 2020, 2021, and 2022, we've sustained impressive year-over-year growth, now employing over 1,000 professionals globally. Committed to our mission since our inception in 2004, we aim to assist our clients in staying modern, enabling informed, data-driven decisions.

As part of our expansion, we seek dedicated professionals who share our passion for leveraging data's transformative power to contribute to a better world.

We are seeking a highly skilled and experienced IT Security and Infrastructure Manager to join our team. The ideal candidate will have a minimum of three (3) years of proven work experience in the IT security field, with a focus on enterprise systems, network, and cloud infrastructure.

• Develop and implement comprehensive IT security policies, procedures, and protocols to protect the organization's information assets and infrastructure.
• Manage and oversee the organization's network infrastructure, including routers, switches, firewalls, and VPNs, ensuring optimal performance, reliability, and security.
• Lead efforts to assess and mitigate cybersecurity risks, vulnerabilities, and threats across the organization's IT infrastructure.
• Collaborate with internal teams to design, implement, and maintain secure and resilient cloud-based systems and services.
• Conduct regular security audits, vulnerability assessments, and penetration testing to identify and address security weaknesses and gaps.
• Monitor and analyze security logs and alerts to detect and respond to security incidents and breaches in a timely manner.
• Stay up-to-date with the latest trends, technologies, and best practices in IT security and infrastructure management.
• Provide guidance, training, and support to IT staff and end-users on security best practices and compliance requirements.
• Prepare and present reports, metrics, and recommendations to senior management on the organization's security posture and risk exposure.
• Liaise with external vendors, partners, and regulatory agencies on security-related matters as needed.

Requirements:

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Minimum of three (3) years of progressive experience in the IT security field, with a focus on enterprise systems, network, and cloud infrastructure.
• Professional certifications such as CISSP, CISM, or CCSP are highly desirable.
• In-depth knowledge of cybersecurity principles, practices, technologies, and frameworks.
• Hands-on experience with network security, firewalls, intrusion detection/prevention systems (IDS/IPS), and endpoint security solutions.
• Proficiency in cloud security concepts and technologies, including identity and access management (IAM), encryption, and security monitoring.
• Strong analytical and problem-solving skills, with the ability to assess complex security issues and develop effective solutions.
• Excellent communication and interpersonal skills, with the ability to effectively communicate technical information to non-technical stakeholders.
• Ability to work independently and collaboratively in a fast-paced, dynamic environment.
• Demonstrated leadership and project management skills, with the ability to prioritize tasks, meet deadlines, and deliver results.

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s Degree in Computer Science/Information Technology or equivalent.
• 5+ years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:

- CompTIA Security+

- Certified Information Systems Security Professional (CISSP)

- Certified Information Systems Auditor (CISA)

- Certified Information Security Manager (CISM)

This is a 6-month contract role based in Singapore office.

Responsibilities:

• Bring operational excellence to a team that handles a large volume of requests from law enforcement and ensure that all requests are scrutinized and handled in strict accordance with applicable law, our terms of service, and our law enforcement guidelines.
• Review, analyze and process high volumes of incoming requests from law enforcement authorities and governments in the Region, as business need arises, with high quality, speed, and accuracy.
• Record and clearly articulate operational decisions ensuring compliance in line with policies and procedures.
• Implement high-quality and efficient processes and practices for maintaining and exceeding productivity and quality service level agreements.
• Willing and able to maturely work with sensitive issues that may include graphic content which may be considered offensive or disturbing.

Requirements:

• Fluency in English is required.
• Excellent verbal and written communication skills.
• Strong attention to detail to ensure quality of work.
• Self-starter requiring minimal direction.
• Proven ability to analyze information to assess threat and risk.
• Proven ability to make effective decisions independently using good judgement and rationale.
• BA/BS degree and relevant operational experience.
• Experience prioritizing multiple functions and tasks while managing work time without compromising quality.
• General knowledge of the intersection of legal guidance, policy and free speech on the Internet (note that this is not a practicing attorney role).
• Knowledge of social media suite of products.
• Experience working independently and using good judgment.
• Experience with various computer systems, Internet technology and software.

Technical Specifications:

• Good in providing solution by investigating and post-mortem analysis to resolve security violations.
• Experience in Information Security
• CISSP or Global Information Assurance Certification (GIAC) or equivalent.
• Performed asset and network discovery activities to ensure full coverage of vulnerability discovery.
• Good Experience in system and application vulnerability testing for Web servers, DB servers, Network devices Etc. using Nessus or Nexpose or other vulnerability Manager Tools.
• Good in monitoring security vulnerability information from vendors and third parties applications.
• Good in implementing policy audit for servers and workstations
• Prioritizing remediation activities with operational teams through risk ratings of vulnerabilities and assets.
• Research threats and vulnerabilities and, where appropriate, take action to mitigate threats and remediate vulnerabilities.
• In-depth knowledge of security systems and applications and a strong foundation in core area of security (e.g. OS hardening, Active Directory, DLP, network and perimeter).
• Good experience in configuring hardening guidelines and helped in maintaining baseline standards.
• Good experience in configuring CIS benchmarks on (Servers, Desktop & Network Devices)
• Configuring and monitoring of operational security infrastructure
• Good exposure to industry standards such as ISO 27001, PCI-DSS, with Audit experience in large enterprise/Service provider environment.
• Have good knowledge in web application security testing.
• Have a very good understanding about life cycle of Information Security Audit / VA
• Recommend, scheduled the security patches and other measures required in the event of a security breach.
• Monitor system logs, SIEM tools and network traffic for unusual or suspicious activity. Interpret such activity and make recommendations for resolution.
• Experienced in investigate and resolve security violations by providing post-mortem analysis to illuminate the issues and possible solutions.
• Good knowledge of Application exploitations and configuring alerts on SIEM
• Worked on installation, configuration management of security systems and applications, includes policy assessment, compliance tools, network security appliances and host-based security systems.
• ·Worked on monthly management reports, dashboards, documentation for security systems and procedures.
• Good in reporting unresolved network security exposures, misuse of resources or noncompliance situations using defined escalation processes.
• Good in training, mentoring and guiding for team members to use of security tools and resolve issues.
• Good in evaluating, implementing information security solutions to protect against potential threats for security violations
• Worked on incident response and architecture review processes.
• Managed and supported Endpoint Security/ ePolicy Orchestrator, Virus scan Enterprise, Data Loss Prevention, Host Intrusion Prevention and Endpoint Encryption.
• Have good knowledge on Data loss prevention and Endpoint Encryption tools.

Proficio is an award-winning managed detection and response (MDR) services provider. We provide 24/7 security monitoring, investigation, alerting and response services to organizations in healthcare, financial services, manufacturing, retail and other industries. Take a video tour of our global network of 24/7 Security Operations Centers (SOCs).

Proficio has been highlighted in Gartner’s Market Guide for Managed Detection and Response Services for the last five consecutive years. MSSP Alert ranks Proficio among the top 250 global Managed Security Services Providers (MSSPs).

We have a track record of innovation. Proficio invented the concept of SOC-as-a-Service. We were the first MSSP to provide automated response services and are the only company in our space with a patent for cyber risk scoring and security posture gap analysis.

Our typical client is a medium to large-sized organization that lacks the in-house resources to address the challenges of a rapidly changing threat landscape. The difficulty of hiring and retaining cybersecurity professionals are widely understood. Our prospective clients are also challenged to effectively harness technology and build hardened processes that reduce the risk of security breaches.

While Proficio has developed a unified service delivery platform designed to meet the needs of the most demanding clients, what sets us apart is the quality and passion of our people. We believe the SOC of the Future will meld the creativity of human intelligence with the power of advanced technologies like AI.

Proficio’s commitment to developing and promoting our team members is unparalleled in our industry. Most of our senior managers were promoted from within.

Summary:

The Offsite Security Analysts are a key component of our SOC-as-a-Service operations.  They are on the front line receiving and triaging alerts from our clients who require dedicated support.  Our Security Analysts have strong network and security knowledge, are strong problem solvers, and work under time pressure to quickly analyze and report security threats in our client’s networks.

The Offsite Security Analyst will be reporting to the Offsite Lead, he/she will be working closely with the client’s cybersecurity threat operation management team.

•  Perform the security tasks for PCIDSS Compliance and other Aspire Lifestyles-related compliance required for internal and external audits (ISO27001, SOC2 Type II, etc.) and ensure successful completion.
• Provide technical consultation and support on the resolution of the findings on the security tests done.
• Assist compliance officers/managers in preparing and timely submission of security evidence for audits (remote and onsite) and ensure timely and successful closure of assessments.
• Provide security support for client assurance (evidence, questionnaire and audits).
• Perform or coordinate PCI DSS scans and penetration tests including tracking of findings remediation, required for PCI DSS Compliance on Aspire in scope components and coordinate with systems, network, local IT, applications and relevant departments on timely resolution of findings.

• Application vulnerability scans – Perform or coordinate dynamic security scan of internal and external web applications. The tests to be of the following types:
    a. Dynamic Web Application Scans
    b. Patch Management - Coordinate and maintain patch tracking for servers/devices in scope for PCI DSS and ISO27001
    c. Vulnerability tracking - Track and follow-up with Stakeholders to fix the reported vulnerabilities and share Dashboard with Compliance team on monthly basis
    e. Highlight and report deviations on the activities or high-risk audit areas.
• Perform or coordinate internal vulnerability assessments required to manage PCIDSS compliance on networks, systems and security related systems. The tests to be of the following types:
    a. Configuration Scan,
    b. Patch Scan, and
    c. Vulnerability Scan
• Operate an effective Log Management, Host Based Intrusion Detection System across geographies and support the incident management and change management work and maintain PCIDSS compliance, SOC 2 Type II Compliance and ISO 27001 Compliance.
• Maintain compliance tracks and ensure HIPS system, compliance system, etc. are maintained up to date for certifications (PCIDSS, SOC 2 Type II, ISO/IEC 27001 Certification audits).
• Perform troubleshooting on SIEM, FIM and HIPS products and seek support from AV support team by creating and following up on tickets.
• Ensure the SIEM, HIPS, FIM, MSS and other technologies implemented for PCIDSS compliance runs optimally with no negative impact on systems.
• Prepare reports from the technical (SIEM, MSS, HIPS, FIM) and non-technical systems (excel reports) the support the client audit requests, PCIDSS audits, ISO27001 audits, SOC 2 Type II etc. and maintain the dashboards.
• Firewall Review - Perform Firewall review using automated tools and maintain PCI DSS requirement.
• Access review - Perform periodic access reviews of security solutions.
• Configuration review of Security devices - Periodic review of security devices as per MSS guidelines
• Segmentation testing - Perform or coordinate segmentation test for the PCI in scope systems.
• Any other delegated tasks reasonably considered to be within the scope of the post and as agreed with managers.

• At least 2+ years of working experience in a cybersecurity function such as Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence or Vulnerability Management.  Work with SIEM technologies receiving and triaging alerts from various log sources preferred.
• Network security or IT certifications are advantageous.
• Knowledge of network concepts, network protocols, and network security methodologies.
• Knowledge of network technologies in one or more areas such as perimeter firewalls, demilitarized network zones (DMZ), encryption, encoding, network virtualization or wireless networks.
• Knowledge of enterprise IT networks, cybersecurity threats and vulnerabilities at the network layer.
• Knowledge of network traffic analysis methods such as packet analysis and analyzing network flow data.
• Continuous learner who has a passion for defensive cybersecurity; ability to utilize resources at your disposal in an efficient manner; advanced problem-solving skills when encountering emerging security attack scenarios
• Demonstrated communication skills including written documentation of troubleshooting and required responses
• Proven ability to work in a fast-paced environment with strict SLAs for response time

• Opportunity to work in a progressive organization with structured training and roadmap for success

• Lunches and fun employee activities!
• Experience in one of the hottest IT industries today

Proficio is an EOE employer.

Joining Razer will place you on a global mission to revolutionize the way the world games. Razer is a place to do great work, offering you the opportunity to make an impact globally while working across a global team located across 5 continents. Razer is also a great place to work, providing you the unique, gamer-centric #LifeAtRazer experience that will put you in an accelerated growth, both personally and professionally.

Job Responsibilities :

• Implement security detection and monitoring processes and use cases
• Monitor and respond to security alerts and incidents
• Partner with internal and external stakeholders in the containment of and response to breaches, including threat hunting
• Work with internal and external stakeholders on the remediation of security vulnerabilities as part of the vulnerability scanning, bug bounty management and penetration testing effort
• Conduct vulnerability scanning across multiple platforms and architectures
• Follow through on all remediations to ensure closure with SLA
• Assist in the implementation of Infosec initiatives
• Develop automations to further improve the efficiency of security operations
• Perform any other tasks assigned by line manager

Pre-Requisites :

• Diploma or Degree in Computer Science, IT, Cyber Security or related field
• Minimum 4 years of hands-on experience in the information security operations domain
• Familiar with security tools (e.g., CSPM, SIEM, Privileged Access Management)
• Good knowledge of AWS or Azure Cloud platform, Active Directory and Linux
• Possess at least CISSP or equivalent information security certifications
• Ability to develop solutions and use tools to help discover and mitigate security vulnerabilities
• Experience in one or more scripting languages, e.g., Python, Java
• Good verbal/written communications skills
• Positive mindset, open-minded and adaptable for a change fast-paced environment
• A strong multi-tasker with a keen eye for detail

Good-to-have(s):

• DevSecOps (CI/CD) knowledge
• Experience in an end-user environment

Are you game?

We is seeking a talented Cyber Security Analyst based in Singapore. As a Cyber Security Analyst, you will play a key role in ensuring the security and integrity of our organization's data and systems.

Responsibilities:

• Monitor, detect, and respond to cyber threats and security incidents,
• Conduct vulnerability assessments and penetration testing to identify potential weaknesses in our systems,
• Develop and implement security measures and best practices to protect against cyber attacks,
• Stay up-to-date with the latest cyber security trends and technologies,
• Collaborate with cross-functional teams to identify security risks and implement appropriate solutions,
• Provide training and guidance to employees on cyber security awareness and best practices.

Requirements:

• Bachelor's degree in Computer Science, Information Security, or a related field,
• Proven experience in cyber security or a related role,
• Strong knowledge of security protocols and tools,
• Ability to analyze and interpret complex data and make informed decisions,
• Excellent problem-solving and communication skills,
• Relevant certifications (e.g. CISSP, CISM) are preferred but not required.

About Us

Zone IT Solutions is an Australia-based Recruitment Company. We specialise in Digital, ERP and larger IT Services. We offer flexible, efficient and collaborative solutions to any organisation that requires IT, experts. Our agile, agnostic and flexible solutions will help you source the IT Expertise you need. Our delivery Offices are in Melbourne, Sydney, India, USA and UK. If you are looking for new opportunities, your profile at [email protected] or contact us at +61434189909

Also, follow our LinkedIn page for new job opportunities and more.

Zone IT Solutions is an equal-opportunity employer, and our recruitment process focuses on essential skills and abilities.

Control Risks' Embedded Consulting practice is growing in Singapore and we have a great opportunity for a Senior Intelligence Analyst to join us as part of a dedicated team, embedded within a high profile, international technology company.

The Senior Security Intelligence Analyst will be a key member of the Global Security Intelligence team as they collect, curate, and disseminate current and forecasted risk intelligence in a timely manner to partners and stakeholders. This position will also work to edit and compile written analysis by the Junior Analysts.

Responsibilities:

• Monitor and analyse geopolitical and global events identify and assess threats the client's specific global operations, assets, and personnel.
• Provide major vent safety and security assessment, forecast, and vulnerability reports.
• Oversee production of analysis by the Junior Analysts on the team.
• Conduct site and travel vulnerability assessments to ensure the safety of the client's employees and locations.
• Support location-specific intelligence, including active and archived alerts; city and country intelligence; and interactive maps.
• Drafting comprehensive, well-researched, and articulate analysis products providing tailored research for client-specific needs.
• Define priorities for in-depth analysis of selected locations relevant to the client's global interests.
• Lead production of specific briefings or presentations.
• Other responsibilities may develop with programme growth.

• A bachelor's degree in history, political science, international relations, intelligence analysis, or a related discipline.
• 5-7 years of experience in related global risk and threat analysis experience required.
• Experience in collection and analytical methodologies.
• Experience in editing and compiling written analysis.
• Keen understanding of social media monitoring techniques.
• Proficiency in client workspace product suite; the ability to present information in a graphic format and concise reports.
• Excellent research, analytical, writing, and verbal presentation skills.
• Ability to quickly adapt to the external environment and organization.
• A strong customer service focus and ability to build and maintain trusting relationships.
• Ability to be a positive and effective team member.
• Ability to effectively manage multiple projects simultaneously and prioritize.

• Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarised in the full job offer.
• We operate a discretionary global bonus scheme that incentivises, and rewards individuals based on company and individual performance.
• Control Risks supports hybrid working arrangements, wherever possible, that emphasise the value of in-person time together - in the office and with our clients - while continuing to support flexible and remote working.
• As an equal opportunities employer, we encourage suitably qualified applicants from a wide range of backgrounds to apply and join us and are fully committed to equal treatment, free from discrimination, of all candidates throughout our recruitment process.

Control Risks' Embedded Consulting practice is growing in Singapore and we have a great opportunity for a Junior Intelligence Analyst to join us as part of a dedicated team, embedded within a high profile, international technology company.

The Junior Security Intelligence Analyst will help collect, curate, and disseminate current and forecasted risk intelligence in a timely manner to partners and stakeholders. Analysts provide strategic foresight and analysis on security and operational concerns that may pose a safety risk to the client, its employees, or community.

Responsibilities:

• Monitor and analyse geopolitical and global events identify and assess threats the client's specific global operations, assets, and personnel.
• Provide major event safety and security assessment, forecast, and vulnerability reports.
• Conduct site and travel vulnerability assessments to ensure the safety of the client's employees and locations.
• Support location-specific intelligence, including active and archived alerts; city and country intelligence; and interactive maps.
• Drafting comprehensive, well-researched, and articulate analysis products providing tailored research for client-specific needs.
• Other responsibilities may develop with programme growth.

• A bachelor’s degree in history, political science, international relations, intelligence analysis, or a related discipline.
• 0-2 years of experience in related global risk and threat analysis experience required.
• Experience in collection and analytical methodologies.
• Keen understanding of social media monitoring techniques.
• Proficiency in client workspace product suite; the ability to present information in a graphic format and concise reports.
• Excellent research, analytical, writing, and verbal presentation skills.
• Ability to quickly adapt to the external environment and organization.
• A strong customer service focus and ability to build and maintain trusting relationships.
• Ability to be a positive and effective team member.
• Ability to effectively manage multiple projects simultaneously and prioritize.

• Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarised in the full job offer.
• We operate a discretionary global bonus scheme that incentivises, and rewards individuals based on company and individual performance.
• Control Risks supports hybrid working arrangements, wherever possible, that emphasise the value of in-person time together - in the office and with our clients - while continuing to support flexible and remote working.
• As an equal opportunities employer, we encourage suitably qualified applicants from a wide range of backgrounds to apply and join us and are fully committed to equal treatment, free from discrimination, of all candidates throughout our recruitment process.