Total 505 it analyst job vacancies in Legal / Public / Security category in Singapore

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.

Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day.

To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.

Join us.

Team Introduction

The Global Security Organization provides industry-leading cyber-security and business protection services to TikTok globally. Our organization employs four principles that guide our strategic and tactical operations. Firstly, we Champion Transparency & Trust by leading the charge in organizational transparency, prioritizing customer trust, and placing user needs first. Secondly, we aim to maintain Best in Class Global Security by proactively identifying and reducing risks while enabling innovative product development. We constantly work towards a sustainable world-class security capability. Thirdly, we strive to be a Business Catalyst & Enabler by embodying the DNA of technical innovation and ensuring our Global Security operations are fast and agile. Finally, we Drive Empowered & Risk-Informed Decision Making by providing our leaders with the necessary information to make agile decisions based on risk.

We are seeking a Digital Forensics Analyst to join our Forensics & Litigation Support team. The analyst will partner with internal stakeholders, such as Legal, HR, Ethics, Investigations, and Insider Threat, to support investigations and provide technical expertise. The role will perform forensic preservation of relevant devices and data, respond to incidents, and perform detailed analysis of systems and data. The role will require an individual able to apply forensics concepts and industry best-practice in the preservation and analysis of newly developed technologies engineered internally at the company.

Responsibilities

- Preserve network and host-based digital evidence in an industry accepted and forensically sound manner that would be admissible in court proceedings.

- Coordinate digital forensics analysis on large scale matters.

- Communicate technical events and analysis to both technical and non-technical audiences.

- Perform Apple macOS host-based forensics, including the analysis of user events, the APFS/HFS+ file system, internal services, default applications, and relevant logs.

- Perform Microsoft Windows host-based analysis using both Windows and Linux based forensic tools.

- Perform analysis of Linux servers, including user events, daemons, security logs, and cron jobs.

- Perform acquisitions and analysis of Apple iOS and Android mobile devices.

- Perform acquisitions and analysis of cloud platforms, such as Microsoft Azure, Amazon Web Services, Google Cloud Computing and/or others.

- Write detailed forensic reports for investigations.

Minimum Qualifications

- A bachelor’s degree in a computing field.

- 3-5 years in digital forensics analysis experience.

- Holds an industry accepted certification validating digital forensics capiblities: GCIH, GCFA, GCFE, CFCE, GREM, X-PERT, EnCE, CCE, etc.

- In-depth understanding of computer forensic principles, including digital and mobile forensics, log analysis, cloud-based systems, database structures, querying languages and common digital forensics tools.

- Knowledge and experience of Windows, Unix and Mac host-based forensics, Mobile OS’s and command line.

- Working knowledge of hardware configuration and network/data communications, software development and scripting, database technology and database exploitation/forensics.

- Experience with seizure of evidence, chain of custody and conducting analysis.

- Knowledge of data loss prevention systems and how they detect potential host and network-based data loss technologies or other insider threat risks.

Preferred Qualifications

- Completed the SANS course FOR518: Mac and iOS Forensic Analysis and Incident Response

- Experience in writing affidavits, depositions and serving as an expert witness in court proceedings.

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R1326740

Job Description:

We are seeking a highly skilled IT Security Specialist to ensure the security and integrity of an Application in one of the governments Agency. The successful candidate will be responsible for implementing, maintaining, and overseeing security procedures and protocols, ensuring compliance with regulatory requirements, and performing risk assessments.

Key Responsibilities:

• Security Compliance: Ensure the system complies with security policies, regulations, and standards as outlined by the Board, including ISO/IEC certifications (27001, 27017, 27018).
• Risk Assessment: Conduct risk assessments to identify potential threats to the system, assess vulnerabilities, and propose mitigation measures​.
• Security Audits and Testing: Coordinate and conduct security audits, penetration testing, and vulnerability assessments for hardware, software, and network components​.
• Incident Handling: Manage security incidents, including detection, containment, recovery, and root cause analysis​.
• Security Documentation: Maintain and update security policies, procedures, and reports, ensuring all documentation is up-to-date​.
• Personnel Management: Conduct background checks on personnel and ensure they meet the security clearance requirements​.
• Training and Awareness: Provide security training and awareness programs for internal staff and subcontractors​.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Certification in security standards such as ISO/IEC 27001, CISSP, or equivalent.
• Minimum 3-5 years of experience in IT security, risk management, or related fields.
• Experience in performing security assessments, audits, and implementing risk mitigation strategies.
• Familiarity with security frameworks like CIS, OWASP, and OSSTMM.
• Strong communication skills and the ability to work collaboratively with cross-functional teams.

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Job Description

• Industry/ Organization Type: Manufacturing/Electronic Components and Boards
• Position Title: IT Security Manager (Regional)
• Working Location: Bedok (Company pick-up provided at Bedok MRT)
• Working Hours: 5 Days, Mon – Fri (8:15 am – 5:15 pm)
• Salary: Basic up to $12,000 + Variable Bonus
• Duration: Permanent

Key Responsibilities

• Analyze and prioritize vulnerabilities based on severity, potential impact, and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention, and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques, and incident response strategies.

APPLY NOW!!!

• Bachelor’s Degree in Computer Science, IT, or equivalent experience.
• Has 5+ years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Professional information security certification preferred (e.g. CompTIA Security+, CISSP, CISA, CISM).

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job(at)anradus.com.sg. Kindly indicate #67372 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it’s likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

As an IT Security Analyst, you will be responsible for assessing and managing cybersecurity risks by evaluating technologies and solutions against industry standards. You will identify, analyze, and prioritize potential security threats while developing and implementing effective risk mitigation strategies. Regularly maintaining and updating the organization’s risk register will also be part of your duties.

Risk Management

• Evaluate technologies against cybersecurity standards.
• Identify and prioritize security risks.
• Advise on cloud security for platforms like AWS and Azure.
• Update and maintain the risk register.

Compliance

• Stay updated on IT security regulations (e.g., PCI-DSS, ITRM, IM8).
• Develop and enforce security policies.
• Monitor compliance and report to stakeholders.

Security Operations

• Monitor and mitigate potential data loss events, and investigate suspected incidents.
• Investigate security incidents and implement appropriate response measures.

Business Continuity

• Review and update crisis plans.
• Organize simulation exercises.

Qualifications:

• Bachelor’s degree in Cybersecurity, IT, or equivalent experience.
• At least 3 years of experience in IT security and compliance.
• Strong knowledge of IT security frameworks.
• Familiarity with security tools (e.g., DLP, SIEM).
• Experience with cloud platforms (AWS, Azure).
• Cloud security certification (e.g., CCSP, AZ 500) is a plus.
• CISA, CISM, or CISSP certification is an advantage.

Responsibilities:

• Domain Expert responsible for design and implementation of network security architectural framework, standard methodologies, and compliance requirements.
• Identify and implement defense-in-depth network analytics technologies and solutions.
• Ensure best security practices, and provide technical consulting on the use of firewall, access control, intrusion detection and prevention, malware analysis, and threat correlation.
• Implementation of load balancers and other security appliances like email security, web gateway, web security appliances, etc
• Implementation of Firewall or APT like Cisco / Sonicwall / Palo Alto / Fortinet / Juniper
• Implementation of security applications like DLP / Anti-virus / NAC / SIEM
• Ability to provide customers' satisfaction and execution for all project deliverables
• Provide rectification and resolution of network problems/issues

Requirements:

• Degree with min 2 years' experience in Network & Security Project Implementation
• CCDA / CCNP certification
• Strong background in security architecture including a deep knowledge of IT network security (secure LAN, WAN, vLAN, MPLS, and secure network zoning and restricted network design) and cloud-based technologies
• Strong background in Network Engineering including a deep understanding of Windows Server architecture, Windows Virtualization, Networking, Backup Solutions, and Disaster Recovery
• Project management of large scale network projects will be an advantage
• Provide daily support team to meet stringent SLA requirements

Interested candidates who wish to apply for the advertised position, please click APPLYto submit your resume.

EA License No: 13C6305

Reg. No.: R1770654

For candidate who applied for the advertised position is deemed to have consented to us that we may collect, use or disclose your personal information for purpose in connection with the services provided by us.

Senior IT Security Specialist will be tasked with:

• Implementing and evaluating cloud architecture and deployments, and services across the client.
• Advising on IT security solutions and their implementation, integration and operation into business systems and processes.
• •Overseeing the overall security implementation/ Integration of the new platform
• Designing, Implementing, vulnerability scanning, threat detection, deployment and troubleshooting of complex network security issues involving Fortigate Firewalls, WAF, Azure Sentinel, Azure/AWS WAF, Azure/AWS DDoS protection, and IBM guardium etc.
• End to end architecting, designing and engineering plan and managing the Cloud based platform including log source integration on Azure Cloud
• Configuring data digestion types and connectors
• Analysis of design and configuration of the events and logs being digested
• Develop, automate, and orchestrate tasks (playbooks) with logic apps based on certain events
• Implementing use cases and log management
• Create incident categorization and threat management plan
• Configure Sentinel Incidents, Workbooks, Hunt queries, Notebooks.
• Deployment and configuration of cloud based Nessus/ Qualys scanner appliance

• What you'll need to excel in the role:
• Must hold good hands-on expertise across various security technologies involving any of the Azure sentinel, Fortigate firewall, Vulnerability assessment, Azure/AWS WAF, IBM Guardium and AWS Cloud native and enterprise security services etc.
• Should have good experience in Security Architecture designing and implementing as well as demonstrating solutions delivery, principles and emerging technologies.
• Deep understanding of how to implement best practices for designing and securing Azure platform
• Expertise in vulnerability management
• Experience in Cloud based WAF solution such as; AWS WAF or Azure application firewall
• Good knowledge on DHCP / DNS and other networking protocols Monitor, troubleshoot, and escalate production problems affecting network infrastructure
• Good to have Infrastructure background/expertise (Unix/Linux/Windows servers, Database, Web/TCP IP networking,
• Storage & Backup systems etc.) Exceptional communication skills with diverse audiences - Strong critical thinking and analytical skills
• Strong stakeholders (i.e. Vendors, Suppliers etc.) management experience
• Strong leadership, project and team-building skills, including the ability to lead teams and drive projects and initiatives in multiple departments
• Demonstrated ability to identify risks associated with business processes, operations, information security programs and technology projects • Working experience on Govtech’s Government Commercial Cloud (GCC) platform will be an added advantage

Preferred skills/certifications:

• Certification in the given discipline will add advantage (i.e., CEH, CHFI, CISSP etc.)
• Microsoft Azure OR Amazon Web Services OR Google Cloud Platform Certified
• Azure sentinel certification/ Fortinate certified/ Nessus or Qualys Certified/ IBM Guardium certified etc

Responsibilities:

1. Security Architecture Leadership
   Act as the security architecture expert and work with stakeholders to ensure compliance with industry standards.
2. Design & Implement Secure Systems
   Design, maintain, and troubleshoot security systems, evaluate the current security posture, recommend improvements, and implement new technologies to protect against intrusions while ensuring continuous monitoring.
3. Drive Zero Trust Security Architecture or Layered Defense strategy
4. Stay Ahead of Threats: Continuously learn about cyber threats & advancements in security.
5. Manage Risk & Compliance: Conduct security assessments, ensure compliance with regulations, and support audits.
6. Foster Collaboration: Work with teams to implement secure systems.
7. Security Subject Matter Expert: Possess deep knowledge in security engineering principles.

Requirements:

1. 10+ years of relevant working experience.
2. 5+ years of experience as Security Architect.
3. Security Engineering in Cloud experience is a must.
4. IT security certifications are highly advantageous.
5. Familiarity with MAS TRM, PCI DSS, PCI PTS, and payment card standards, advantageous
6. Degree in Computer Science or a related field.

Location: East (Near Bedok MRT)

Salary: $8,000 - $12,000

Responsibilities:

• Identifying and fixing security weaknesses in the company's systems and networks.
• Leading the response to security incidents and cyberattacks.
• Developing and implementing security policies and procedures.
• Keeping up-to-date on the latest cybersecurity threats and making sure the company is protected.
• Training employees on how to stay safe online.

Requirements

• A degree in computer science or IT (or similar experience).
• At least 5 years of experience in IT security management.
• Strong knowledge of cybersecurity threats and technologies.
• Experience in Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management.
• Ability to manage and configure security systems, monitor traffic and logs, conduct security assessments, and respond to incidents.
• Preferred certifications: CompTIA Security+, CISSP, CISA, or CISM.
• Excellent communication and problem-solving skills.
• The ability to work independently and as part of a team.

Interested applicants, please email your resume to [email protected]

Tan Li Lian

EA 01C3135

Reg R1100465

Job Description

Western Digital’s Global Physical Security Organization is seeking a highly talented and motivated individual to join the team. Our business unit is a 24/7 model where you may be required to work outside of normal business hours to address critical operational and technology issues. You must be able to drive complex technical solutions that provide scalability, efficiency, and effectiveness. This position is primarily responsible for the APAC regions physical security systems program, but the role will also provide guidance and support for our locations globally.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Agile in addressing troubleshooting issues and service requests
• Responsible for knowing status, locations of, quantities of, vendor, model, make and technical specifications of each system component, including connectivity requirements.
• Monitor performance of the system, highlight any issues, follow up on solution to resolution:Initiate purchase order, service call, work order, etc., as necessary.
• Verify that work was completed as requested.
• Provide training and guidance on security systems; create and maintain operator instructions, procedures, security system drawing, and related documentation as appropriate.
• Partner and drive physical security operations and systems technology with internal business units like IT, Real Estate, Legal, EH&S, Finance, Procurement when required
• Strategically improve system end users experience on a variety of applications
• Define physical security systems and technology roadmaps that drive overall program success
• Skilled in presenting solutions at a high level to internal key stakeholders
• Integrate and perform case studies, conduct research into product requirements to improve security systems and technology
• Familiar with internal tools, tracking and reviewing requests such as ServiceNow, Smartsheet, etc.
• Assist in deployment of enterprise level access control systems, video management systems, visitor management systems, etc.
• Work with multiple third-party vendors and SOCs to help maintain the global standard in security systems and technology
• Familiar with Windows, Linux and SQL, Networking, and IoT devices
• You will work to integrate a variety of security devices into existing network infrastructure including but not limited to: PSIM, C-Cure, Lenel, AMAG, Milestone, AXIS, ISOS, SWN, etc.
• Participate, oversee and drive project meetings and execute end-to-end, ensuring on-time delivery
• Configuring and maintaining APAC Security Systems, including hardware, system software, and security applications.
• Diagnosing and resolving hardware, software, networking, and system issues when they arise.
• Monitoring system performance to ensure everything runs smoothly and securely.
• Researching and recommending new approaches or system to improve the security system infrastructure. Enhance the current security model.
• Providing technical support when requested or be available at the site for further assistance.
• Works with users to identify system requirements; develops processing procedures and systems modifications to meet these specifications.
• Deploy, maintain, and troubleshoot core business applications, including application servers, associated hardware, endpoints, and databases.
• Document any processes, which employees need to follow in order to successfully work within our security systems
  

Qualifications

REQUIRED:

• At least 6 years of experience in security system administration and project management or in professional IT / System with demonstrated experience related to physical Security etc.
• Front end programmer, Create basic user interface.
• Knowledge of security best practice in hardening and protecting cloud environment, MSSQL database and applications.
• Proficiency with Access Control, Video Management Systems,
• Security Hardware, Locks, Sensors, IoT devices etc.
• Excellent communication skills. Fluent in English both writen and spoken
• Ability to construct working relationships with cross-functional teams and key stakeholders
• Ability to provide systems and technology solutions that meets corporate standards
• Ability to manage multiple vendors and budgets

PREFERRED:

• Associates or Bachelor’s degree in Computer Science, Engineering, Information Systems or related experience
• Certified in AMAG, Lenel, C-Cure, Genetec, Milestone or equivalent
• Certifications CCNA, SQL, CompTIA or equivalent
• Familiar with cloud and virtualization environments
• 5+ years of experience testing, piloting, and supporting physical security hardware
• Experienced in presenting to key internal stakeholders
• Experienced in system integrations, migrations, and cutover projects in a variety of environments
• 5+ years of experience in designing and deploying large enterprise security systems
• SME in physical security design and standards
  

• Handle overall security operations and work with partner IT vendors and internal departments.
• Maintain infrastructure tools implemented in the company
• Monitor and assess the IT security aspects and impact
• Handle cyber incident response and perform vulnerability assessment on platform and implement countermeasure

Job Requirements

• Bachelor degree in computer science, information systems or equivalent
• Min 3 years of experience in cyber security and infrastructure fields
• Experience in security tool implementation and operational experience
• Certified Information Systems Security Professional Certifications (CISSP) will be preferred

For interested applicant, click 'apply'

EA Reg no: R1328476
EA License No: 16C8443
EA Personnel Name: Melody
EA Personnel No: R2095899

Job Description

• Industry/ Organization Type: Manufacturing/Electronic Components and Boards
• Position Title: IT Security Manager (Regional)
• Working Location: Bedok (Company pick-up provided at Bedok MRT)
• Working Hours: 5 Days, Mon – Fri (8:15 am – 5:15 pm)
• Salary: Basic up to $12,000 + Variable Bonus
• Duration: Permanent

Key Responsibilities

• Analyze and prioritize vulnerabilities based on severity, potential impact, and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention, and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques, and incident response strategies.

APPLY NOW!!!

• Bachelor’s Degree in Computer Science, IT, or equivalent experience.
• Has 5+ years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Professional information security certification preferred (e.g. CompTIA Security+, CISSP, CISA, CISM).

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job(at)anradus.com.sg. Kindly indicate #67372 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it’s likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

- 1-year outsourced contract

- Up to $5,000 + Allowance

- Mon – Fri: 8:30am – 6pm

- AMK

Job Responsibilities:

• Apprised of the current state of computer security in place in the organization
• Technically proficient and up-to-date in basic computer security policies and practices
• Proactive in preventing Cyber-Security Incident
• To perform technical security assessment for IT & Network components - Vulnerability assessment, Penetration testing, Opportunistic Hacking, Web application security testing, Security source code review etc.
• To monitor and track the identified vulnerability, issues and fix detected vulnerabilities to maintain a high-security standard
• Be familiar with browser, Web service, cloud security, mobile applications security, and operating system security concepts
• Understanding of leading vulnerability scoring standards and ability to translate vulnerability severity as security risk
• Perform forensic investigation if required
• Review all security logs

Period:

• 1-year outsourced contract

Working Hours:

• Mon – Fri: 8:30am – 6pm

Salary:

• Up to $5,000 + Support allowance $200

Location:

• AMK

Requirements:

• Degree in Computer Engineering, Computer Science or equivalent, although consideration will be given to experience and certifications in lieu of degree.
• At least 2-3 years' experience in cyber security
• Certifications such as CREST, OSCP and CISSP.
• Special Knowledge or Skills:

1. Perform PenTest, Vulnerability Assessment & Risk Assessment
2. Strong in technical skill
3. Able to handle demanding service response and recovery turnaround
4. Able to manage daily support tasks to meet stringent SLA requirements
5. Excellent scheduling and multitasking skills
6. Meticulous and process-oriented
7. Good, hard-working attitude with ability to work well under pressure
8. Good communication skills English (written, spoken) to serve English-speaking clients
9. Good analytical skills with ability to work with others to resolve problems.
10. Good organization skills, with ability to properly document and track information
11. Dynamic, customer oriented, experience working in a fast paced environment
12. Good Knowledge of following products will be advantageous:

- Splunk

- FireEye

- Tenable

Interested applicants, kindly email your detailed resume (MS Word format is preferred):
[email protected] (Registration no: R1332758)

Please ensure that applications sent through email are no bigger than 1Mb.

We thank all applicants for your interest but regret to inform that only shortlisted candidates would be notified.

Success Resource Centre Pte Ltd (EA License Number: 04C3201)

3 Shenton Way, #19-01 Shenton House, Singapore 068805

T: 6337 3183 | F: 6337 0329 | W: www.successhrc.com.sg

Position

Data Security Specialist - Data Security and Endpoint Security

Data Security Specialist is a technical Specialist role within the Data Security Services team and will be responsible for managing, administration and supporting the Data Security and Endpoint Security technologies for the bank.

Person will be the technical point of contact for the Run team and the related activities to data security and will be the last level of escalation for the Security specialists in the team. He/She is also responsible for the technical transition and validation of Security services from other regions to Singapore. He/She will be involved in projects and POC’s that may involve security services. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Specialist on the technologies within data security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France and UK) and Asia remotely from Singapore. France infrastructure represents approximately 80% of the worldwide production activities of the company in Singapore.

Team works in Europe time zones and this role will be aligned primarily to Paris working hours. Flexible rotations are followed based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect,
• Encryption Solutions: Disk Encryption, File and Folder encryption,
• Database Audit Monitoring solutions
• Email and Web Phishing Prevention solutions
• Vulnerability Management

Detailed Job Responsibilities

The Specialist has a wide spectrum of responsibilities and actions. Person will be responsible for following (but not limited to) responsibilities in day-to-day work:

As the Specialist of the team, he/she:

• act as the last level of escalation for the team members
• own Incident, Problem and change management process for the team
• assigns technical tasks and manages delegation
• animates the team to encourage collaboration and sharing of practices
• participates to recruitment process for the team

As the Specialist of his/her scope of activity, he/she:

• is actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management
• Is the final technical approver for any changes into Data Security systems and is accountable for any technical changes in the environment from a RUN/BAU perspective
• Is involved in projects like End of Life, New Builds, migrations and technical upgrades of the solution managed by the team
• Participates in global Infra events (like Power down and DR Tests)
• ensures activity is performed in compliance with norms, standards, processes and procedures
• gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting
• ensures documentation is up to date and relevant for use
• lead the continuous improvement initiatives
• responsible to drive and deliver root cause for any high severity issues
• Focus on automation and optimum use of the team to improve efficiency
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

• Work schedule is mainly focused to support Asia and EMEA (Paris) time zone; however, may have to support during non-offce hours for critical incidents or escalation as per the assigned on-call support requirements;
• Rotational Shift schedule is followed;
• Work Hours: 2 PM – 11 PM SGT (with 1 week of General shift 9 AM – 6 PM SGT).

Qualifications and Profile

Functional

• 8 - 10 years of IT Security experience in administration and management of IT Security technologies primarily Symantec Data Loss Prevention, Symantec Endpoint Protection, Email Security, Data Classification and other endpoint & data security solutions;
• Should be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;
• Knowledge of different domains of IT Security;
• Working & hands-on experience in administering the IT Security Solutions;
• Must have experience in working in similar Production setup in Run (Operations) mode;
• Ability to apply risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;
• Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;
• Excellent in analytical, communication and documentation skills;
• Ability to organize work and be able to priories work as per the needs of Production Operation’s needs;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Ability to work independently and as well as a part of team and is able to work under minimal supervision;
• Should have time management skills and able to manage work in fast moving environment;
• Excellent written and oral English language skills;
• Knowledge of French language is preferred.

Technical

• Hands-on experience on Symantec Data Loss Prevention (DLP);
• Highly proficient in data leakage prevention (DLP) technologies - troubleshooting and configuration management;
• Deployment, integration and administration experience of various components of Symantec DLP:

- Symantec Endpoint Protect

- Symantec Web Prevent

- Symantec Email Prevent

- Symantec Enforce

• Must have experience in defining, designing and configuring DLP Policies as per the business requirements;
• Deploy, upgrade and troubleshooting knowledge on Symantec DLP solution;
• Scripting knowledge (Phyton, Regular Expression, Powershell) is desirable;
• Professional Certifications:

- CISSP certified is highly preferred

- Symantec Certified Specialist: Administration of Data Loss Prevention (any version) is highly preferred.

• Must be experienced to cover the scope as mentioned in the SKILLS MATRIX section of this document.

SKILLS MATRIX

Technical skills

• Symantec Data Loss Prevention Administration (DLP Policy/Rules creation Specialistise): Must to have
• Trend Micro Deep Discovery Email Inspector (Phishing Prevention): Good to have
• Symantec Endpoint Protection (Anti-Virus): Good to have
• Phyton, Regular Expression, Powershell: Good to have

General skills

• Ability to prioritize effectively: Must to have
• Ability to work autonomously: Must to have
• Ability to work successfully in a team: Must to have
• Adaptability to changing environments: Must to have
• Inter-personal skills: Must to have

Management skills

• Ability to deal with issues, time management: Critical
• Manage escalated incidents: Critical
• Capacity to cooperate / work across discipline: Critical
• Capacity to develop others: Desired

Language skills

• English: Must to have
• French: Good to have

Next Step

Prepare your updated resume and expected package.

Simply click on 'Apply here' or email to [email protected] to drop your resume

All shortlisted candidates will be contacted.

Prasant Sirohi

EA License Number: 91C2918

Registration Number: R22106307

The Mercedes-Benz AG Group CISO heads Mercedes-Benz’s Global Cyber Security Department (based in Stuttgart, Germany). We are looking for a Cyber Security Defensive Analyst to join our Cyber Intelligence and Response Centre (CIRC). The Global Cyber Security Department oversees a 24/7 follow-the-sun operation with counterparts in EMEA and NAFTA. This role focuses on providing an intelligence-driven approach towards incident response affecting any Mercedes-Benz assets and providing containtment, eradication and recovery of affected asssets involved in a cybersecurity incident in a timely and efficient manner.

Furthermore, the role requires the mitigation of identified threat, addresses identified vulnerabilities and also provide incident coordination towards internal stakeholders and external customers. The role is crucial in enabling Mercedes-Benz's business by ensuring agile security operations and maintaining a secure environment.

As a Cyber Security Defensive Analyst, you will be responsible for:

• Conducting technical analysis and triaging of triggering alerts ingested from Mercedes-Benz log sources to determine impact, scope of impact and determine corresponding remedial actions to mitigate, contain and/or otherwise limit the impact of the incident.
• Analysing, triaging and processing security threats to identify potential risk gaps and corresponding organizational impact by conducting in-depth analysis of the identified threat, attack vector or intelligence information.
• Working closely with the CIRC threat intelligence team to aid in the enhancement of contextual analysis and providing threat hunting support towards Open Source Intelligence (OSINT) related Indicators of Compromise (IoCs).
• Taking the lead in managing Mercedes-Benz end users and stakeholders in providing cybersecurity incidents updates and other related activities that might arise from time to time during the incident coordination, remediation and recovery
• Providing duty analyst support for the CIRC operations during weekends, utilizing a pre-defined duty roaster, ensuring the continued operations and monitoring of threats and triggering alerts 24 by 7, follow the sun model.
• Coordinating projects assigned by the Head of Global Defensive Operations towards the rollout, implementation and acting as the point of contact for local stakeholders towards the implementation and coordination of the projects assigned.
• Providing technical inputs towards the virtual teams as assigned by the Head of Global Defensive Operations towards the operational directions, method determination and other related administrative support required from time to time.
• Provide guidance and technical support in mentoring and guiding newer members of the team in technical and incident management skills and processes.

Qualifications

• Degree from a reputable university or significant course work in Computer Science, Networking, engineering or other computer-related fields of study
• One or more of the following professional certification is beneficial: CISSP, GCIH or similar.
• Have good emotional intelligence and is a proven team player
• Rational and able to remain calm under pressure
• Fluency in the English Language
• Effective oral and written communication skills
• Good timekeeping ability to cope with a tight deadline and achieve operational objectives
• Self-motivated with the ability to carry out assigned tasks with minimum supervision
• Proficient understanding of cyber and IT security risk, threat and prevention measure
• Proficient understanding of networking and network security technologies.
• Good understanding of Forensic tools and methodolgy used in incident response
• Good knowledge of security standards and best practices
• Good understanding of various operating systems
• Good understanding of the Cyber Kill Chain and the ability to display clear analytical skills
• Previous experience in a corporate or enterprise environment, engaging with and responding to a diverse array of internal stakeholders, including senior management.
• Knowledge of Microsoft Office suite (Word, Excel, PowerPoint and Access)
• Knowledge of Splunk is beneficial

This position is based in Singapore and a valid and approved work visa is required for employment in Singapore in accordance to local labour law regulations. Candidate may be offered a lower job level based on candidate’s experience. We regret to inform you that only shortlisted candidates will be notified.

Summary

Imagine what you could do here. At Apple, new ideas have a way of becoming extraordinary products, services, and customer experiences very quickly. Bring passion and dedication to your job and there's no telling what you could accomplish. Do you wish to be challenged to think creatively? The people here at Apple don’t just craft products - they build the kind of wonder that’s revolutionized entire industries. It’s the diversity of those people and their ideas that inspires the innovation that runs through everything we do, from amazing technology to industry-leading environmental efforts. Join Apple, and help us leave the world better than we found it.

Description

Apple is looking for a skilled security professional to join its Apple Information Security SPAN organization, within the Supplier Trust function. The ideal candidate will have a solid technical background and significant experience in Information Security, with a particular emphasis on the assessment to remediation lifecycle. In this role, you will collaborate with a global team of security experts operating to secure the posture of critical manufacturing and corporate suppliers, with a primary focus on identifying and remediating findings. Your contributions will play a key role in safeguarding Apple’s customers, brand, and data through essential security controls. This position offers the opportunity to work on innovative technologies and processes with worldwide impact.

Minimum Qualifications

• Ability to evaluate, conduct security assessments and monitor security posture of third-party Suppliers.
• Proven experience in handling and conducting large-scale security remediations with track record of effective threat mitigation.
• Ability to provide guidance to Suppliers on mitigating risks posed due to open Information Security gaps in assessment reports.
• Skills to deliver recommendations and timely updates to management on the risk level of Suppliers.
• Experience working with large-scale, globalized, multi-lingual business environments.
• Experience simultaneously working with multiple constituencies, balance disparate priorities, and solve problems in high-demand situations.
• Ability to develop security metrics to track efficiency of controls and remediation efforts and generate reports for management on insight of organization’s security posture.
• Ability and skills to ensure all security assessments and remediation activities are aligned with relevant regulatory requirements and industry standards.
• Strong ability to analyse complex data sets, identify patterns, anomalies and potential threats. Familiarity with data analytics tools is a plus.

Preferred Qualifications

• Outstanding communication skills and attention to details on sophisticated issues.
• Strong personal leadership traits such as self-accountability, priority management, and pride in work.
• Relevant industry certifications such as CISSP, CISM, CEH or OSCP.
• Proven ability to work within various cultural settings.

Apple is an Equal Opportunity Employer that is committed to inclusion and diversity. We also take affirmative action to offer employment and advancement opportunities to all applicants, including minorities, women, protected veterans, and individuals with disabilities. Apple will not discriminate or retaliate against applicants who inquire about, disclose, or discuss their compensation or that of other applicants. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Summary of the Position

He/She will be a technical RUN expert for all Network Security services in the company. As such, he/she will provide support and act as the last level of escalation point for all production support activities within the Network Security operations team in Singapore. He/She is accountable for the overall health and stability of the technical solutions within his scope. He/She has to effectively work with technical peers such as architects, peer experts and project teams on technology road maps and projects. He/She will have control over the scope of technical activities, develop best practices, manage knowledge and ensure the necessary trainings are imparted to the team wherever applicable.

The 20-member Network-Security team operates the RUN activities and delivers projects for its infrastructure scope.

An Expert has a wide spectrum of responsibilities and actions.

Main Duties

As an expert of his/her team, he/she:

• assigns technical tasks and manages delegation for technical issues,
• animates the team to encourage collaboration and sharing of best practices,
• has a role in supporting technical skills development and provides training when required,
• supports new technologies and leverages them to provide consistency of service across streams,
• manages service improvements for all Network and Security services supported throughout the organization,
• documents, reviews, maintains and shares relevant technical information to the team
• provides technical direction, supports services both proactively and reactively to maintain the availability and reliability of system infrastructure in accordance to the SLA,
• implements and develops improvements based on the company's best practices,
• focuses on automation and optimum use of the team to improve efficiency,
• drives and delivers root cause for any high severity issue,
• reviews technology changes to identify potential risks,
• is responsible for problem management and resolution
• Perform real-time analysis and trending of security systems
• Respond to user incident reports and evaluates the type and severity of security events.
• Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.
• Interpret and apply security policies and procedures.
• Establish escalation processes for security incidents and develops contingency plans and disaster recovery procedures.

As an experienced professional in Network-Security Services, he/she:

• supports his/her team during diagnosis when technical issues rise in his/her scope of expertise,
• is aware of the global IT structure so that he/she anticipates interrelationships within the organization,
• engages with technical peer, Service managers, Architect and project teams on technology roadmap and projects,
• facilitates transformation projects and suggest future directions for new areas of improvement and change,
• guarantees the production readiness and license to operate of new projects and solutions
• is available and able to drive technically, any complex or high severity incidents that occur within the scope of their role,
• actively engages to understand new technologies and technology trends and reviews them with a view to incorporating them into the comapny's operations,
• actively assists in identifying the most technical skilled candidates for open roles,
• technically coach and develop partner resources to improve quality and productivity,
• Define the technical skillset required to support the company's technologies.

As the escalation point of contact for Clients, he/she:

• manages the daily relationship with Clients including planning, requests clarification, risks mitigation and service quality

Legal and Regulatory Responsibilities

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• Fluent in English, both written and spoken
• 15+ years of Experience in managing network and security infra.
• 10+ years Experience in handling major network security projects (ex: SDWAN )
• 10+ years Experience in handling Firewalls/IPS/F5/Pulse/Proxies, Routers/Switches.
• At least a Bachelor’s degree in any of these faculties:
• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Working Hours:

• Primarily match Europe business hours
• On-call support will be expected on a rotational basis

Next Step

Prepare your updated resume and expected package.

Simply click on 'Apply here' or email to [email protected] to drop your resume

All shortlisted candidates will be contacted.

Prasant Sirohi

EA License Number: 91C2918

Registration Number: R22106307

Company’s Profile

Julian Grey’s client is a solution provider for security and enterprise applications.

Responsibilities

• Plan, implement, manage, monitor, and upgrade IT security solutions.
• Support projects by delivering project deliverables and completing milestones.
• Develop and maintain technical, operational, and configuration documentation necessary for project implementation.
• Coordinate and manage vendors for product implementation and troubleshooting.
• Evaluate security products and conduct Proof of Concept (POC) to verify the effectiveness of security measures, ensuring their continued efficacy post-implementation.
• Provide technical support and incident response for IT security infrastructure components to the maintenance team.

Requirements

• Proficient in Endpoint Security solutions, including Anti-Malware, Host Firewall, Application & Change Control, Disk Encryption, and EDR.
• Knowledgeable in Identity & Access Control solutions, such as PKI solutioning, Hardware Security Module (HSM), Privileged Access Management, 2FA, and OS Hardening Policies.
• Implement Endpoint or Identity & Access Control Security tools.
• Familiarity with various operating systems like Windows or Linux.

Follow us for more updates, interview tips!

https://www.instagram.com/juliangreygroup/

https://www.linkedin.com/company/juliangreygroup/

https://www.facebook.com/juliangreygroup/

Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei

Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.

EA License No: 19C9568

Avensys is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail and supply chain.

We are currently looking to hire a IT Security Analyst. This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

JOB TYPE:

Long Term Contract

Roles and Responsibilities

RQ24-02031-1-1 – Security Analyst

Responsibilities:

• Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis.

• Establish compliance with these policies / procedures through ongoing security reviews and audits, not limited to log analysis and security assessment of customer ICT systems

• Conduct security risk management exercise

• Conduct table-top exercises

• Conduct vulnerability assessment, coordinate penetration tests activities

• Conduct information security awareness training

• Responsible for the development and management of customer’s security incident response plan.

• Lead and support customer in the matters of security incident resolution and response.

• Be the point-of-contact/customer liaison to assist and advise customer for ICT security related matters

• Project managed the activities and deliverables during the implementation phase.

Requirements:

• 3+ years IT security experience required.

• Experience with Networks, Servers (Windows and UNIX), Database.

• Experience in IT security auditing, security assessments.

• Understand protocols, traffic flows, ability to analyse logs from various sources. • Knowledge of Active Directory, Endpoint protection solutions, Early Detection and Response solution, Database Activities Monitoring tools, SIEM etc.

• Excellent written and verbal communication, presentation skills.

• Proficiency in Microsoft Excel.

• Flexible, team player, “get-it-done” personality.

• Ability to organize and plan work independently.

• Ability to work in a rapidly changing environment.

• Ability to multi-task and context-switch effectively between different activities and teams

• CISSP certification is a Must, CISM, Security+, IT security tools certifications (Imperva, Carbon Black) is a plus.

To submit your application, please apply online or share the updated cv to [email protected]. Your interest will be treated with strict confidentiality.

CONSULTANT DETAILS

Consultant Name: Khalid Farooq

Avensys Consulting Pte Ltd

EA Licence 12C5759

Privacy Statement: Data collected will be used for recruitment purposes only. Personal data provided will be used strictly in accordance with the relevant data protection law and Avensys' personal information and privacy policy.

Job Description

We are looking for a skilled IT Security Specialist to be responsible for designing, implementing, and managing security measures to protect our customer’s ICT systems. The role involves developing security frameworks, conducting assessments, managing incidents, and advising on ICT security matters. This position requires strong experience in IT security, excellent analytical skills, and the ability to lead security projects.

Key Responsibilities:

• Review and develop security frameworks, information security policies, processes, procedures, and guidelines on an ongoing basis.
• Establish compliance with policies and procedures through continuous security reviews and audits, including log analysis and security assessment of customer ICT systems.
• Conduct security risk management exercises and table-top exercises to test security readiness.
• Conduct vulnerability assessments and coordinate penetration testing activities.
• Lead information security awareness training sessions for employees and stakeholders.
• Develop and manage the customer’s security incident response plan.
• Lead and support the customer in security incident resolution and response.
• Act as the main point-of-contact and customer liaison for ICT security-related matters, providing assistance and advice as needed.
• Manage the activities and deliverables during the implementation phase of security projects.

Requirements:

· Minimum of 3 years of experience in IT security.

· Hands-on experience with Networks, Servers (Windows and UNIX), and Database systems.

· Proven experience in IT security auditing and security assessments.

· Strong understanding of protocols, traffic flows, and the ability to analyse logs from various sources.

· Knowledge of security technologies such as Active Directory, Endpoint protection solutions, Early Detection and Response (EDR) solutions, Database Activity Monitoring tools, and SIEM (Security Information and Event Management).

· Proficiency in Microsoft Excel for data analysis and reporting. Excellent written and verbal communication and presentation skills.

· Strong organizational skills and the ability to plan and execute work independently.

· Ability to work in a fast-paced environment with a flexible, team-oriented approach.

· Strong multitasking skills with the ability to switch contexts effectively between different activities and teams.

Preferred Certifications:

· CISSP certification is a must.

· Additional certifications such as CISM, Security+, and IT security tools certifications (e.g., Imperva, Carbon Black) are a plus.

The IT Security Officer (ITSO) will oversee the security of the IT infrastructure, serving as the primary contact for all security-related issues.

Key responsibilities include:

• Be the point of contact for IT security matters for 24hrs x 7 days.
• Provide IT security consultancy and advisory to Agency.
• To assist agency to consolidate, track and report the status of security advisory received from GITSIR, CSA, NCSC etc.
• Follow up with respective Facilities Management Team on the implementation of the remediation against the security advisory received, IOC scanning and reporting, patching of the system and vulnerability for systems in HQ DC.
• Provide ad hoc, monthly report for Privilege Access Manager, Early Detection and Response solution, Database Activities Monitoring, log review, account review etc.
• Review of logs capture in the syslog server from all the systems in HQ.
• Support in the IT security audit, compliance audit, and security related matters.
• Work on quarterly Vulnerability scanning and remediation with ATFM and provide reporting and track the status.
• ITSO resources will be full time dedicated to support all related IT security requirement.
• ITSO shall work with IT security engineer to Conduct Quarterly or OnDemand VA Scan all system and follow up with IT Facility Management on the remediation to meet IM8 timeline.
• Share domain and technical expertise, providing technical mentorship and cross-training to other peers and team members.
• Any other ad hoc duties as assigned by supervisor.

Interested applicants, please email your resume to Andre Chua Jing Ming

Email: [email protected]

CEI Reg No: R1989053

EA Licence No: 99C4599

Recruit Express Pte Ltd

Job Description

• Industry/ Organization Type: Manufacturing/Electronic Components and Boards
• Position Title: IT Security Manager (Regional)
• Working Location: Bedok (Company pick-up provided at Bedok MRT)
• Working Hours: 5 Days, Mon – Fri (8:15 am – 5:15 pm)
• Salary: Basic up to $12,000 + Variable Bonus
• Duration: Permanent

Key Responsibilities

• Analyze and prioritize vulnerabilities based on severity, potential impact, and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention, and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques, and incident response strategies.

APPLY NOW!!!

• Bachelor’s Degree in Computer Science, IT, or equivalent experience.
• Has 5+ years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Professional information security certification preferred (e.g. CompTIA Security+, CISSP, CISA, CISM).

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job(at)anradus.com.sg. Kindly indicate #67372 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it’s likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

Embedded within a top-tier international company in Singapore, your will be working in the team serves as a focal point for coordinating responses to security incidents and crisis situations which may pose risks to the organization’s staff, business, reputation and facilities across Asia Pacific.

Successful candidate will be provided a comprehensive on-the-job training while working in a collaborative and dynamic environment with other security professionals to address an array of security risk matters.

Responsibilities

• Work under Regional Security Services Centre which maintains a 24/7 service hotline
• Monitor and assess impact of regional security events, ensuring that risks are identified and escalated to relevant stakeholders in a timely manner; raise any concerns or issues where necessary
• Conduct research and analysis on security events and geopolitical issues
• Assist the preparation of routine management reports, post-incident documentations and regional initiatives / projects with excellent record-keeping practice
• Liaise closely with overseas security members and perform any other duties as assigned

Requirements

Successful candidate should have / be:

• Sound geo-political knowledge of the Asia Pacific region
• Self-motivated and able to multi-task efficiently with minimal supervision
• Good command of spoken and written English
• Proficient in Microsoft Office
• Able to work shift hours (approximately 20 days per month), including overnight shifts
• 0 – 3 years of working experience will be considered

Relevant experience in corporate security or customer services preferred but not essential

Responsibilities:

• Security Infrastructure Management: Designing, implementing, and maintaining security systems such as firewalls, intrusion detection systems, and encryption protocols.
• System Monitoring and Analysis: Continuously monitor network traffic, system logs, and other data sources for signs of suspicious activity. Use tools and techniques to detect and analyse potential security threats.
• Vulnerability Assessment and Management: Conducting regular assessments to identify and address potential vulnerabilities in IT infrastructure.
• Risk Assessment: Conducting risk assessments to identify potential security risks and developing strategies to mitigate them.
• Incident Response: Developing and implementing incident response plans to address security breaches and minimise their impact. Conduct investigation to determine the source and impact of security issues and implement corrective actions.
• Security Policy Development: Creating and enforcing security policies and procedures to ensure compliance with industry standards and regulations. Regularly review and update security policies.
• Security Audits and Compliance: Performing regular security audits to ensure compliance with relevant regulations and standards.
• Security Research and Analysis: Staying updated on the latest security threats and trends and analysing their potential impact on the organisation's security posture.
• Security Incident Investigation: Investigating security incidents to determine the root cause and implementing measures to prevent similar incidents in the future.
• Collaboration with IT Teams: Working closely with other IT teams to integrate security measures into the organisation's overall IT infrastructure and operations and provide support for security-related issues, including troubleshooting and resolving security problems.

Note: Proceeding to apply on this job post means you have read, understand and agreed to WPH DATA PROTECTION NOTICE FOR JOB APPLICANTS in the link below.

https://www.wphdigital.com/notices