Total 505 it analyst job vacancies in Legal / Public / Security category in Singapore

Job Description

• Industry/ Organization Type: Manufacturing/Electronic Components and Boards
• Position Title: IT Security Manager (Regional)
• Working Location: Bedok (Company pick-up provided at Bedok MRT)
• Working Hours: 5 Days, Mon – Fri (8:15 am – 5:15 pm)
• Salary: Basic up to $12,000 + Variable Bonus
• Duration: Permanent

Key Responsibilities

• Analyze and prioritize vulnerabilities based on severity, potential impact, and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention, and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques, and incident response strategies.

APPLY NOW!!!

• Bachelor’s Degree in Computer Science, IT, or equivalent experience.
• Has 5+ years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Professional information security certification preferred (e.g. CompTIA Security+, CISSP, CISA, CISM).

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job(at)anradus.com.sg. Kindly indicate #67372 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it’s likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

• Conduct macroeconomic research (quantitative and qualitative data) to draft a comprehensive white paper to government agencies on a Special Economic Zone
• Investigate public policies that will impact macroeconomic forces and financial markets (e.g., government policies on firm/individual-level outcomes)
• Monitor and keep abreast of Cambodian public policy regulations and communique
• Review government legislation and regulatory proposals and provide technical recommendations
• Examine statistical data on the exchange of goods and services in the region, and propose tax and business incentives to drive investments
• Research financial products, issuance, and related policies, and conduct peer benchmarking with financial centers in the region
• Prepare reports, presentations, and correspondence material to advance the development of the SEZ

Qualifications

• 3 -5 years of experience in a public policy, economics research, or consultancy role for Associate Level
• Academic English is mandatory, business Chinese fluency is advantageous

Job Responsibilities:

• Assist in the formulation of ICT security strategy and work plan, in alignment with strategic plans.
• Assist in providing security governance, enforcing cyber security risk assessment and risk acceptance from stakeholders.
• Establish and implement Company-wide information security policies, strategies, plans and architecture
• Develop and manage a security governance program
• Protect & secure Company’s information and assets
• Perform day-to-day security operations
• Review safety measures and processes
• Enhance and configure corporate systems to continually improve their security
• Recommend changes to security policies and standards in response to changing conditions
• Any other adhoc duties as assigned.

Job Requirement:

• Preferably ‘Certified Information Systems Security Professional’ (CISSP), ‘Certified Information Systems Auditor’ (CISA) or ‘Certified Information Security Manager’ (CISM).
• 5 years of experience related to information security and working knowledge of ICT operations, security policies and procedures.
• Good interpersonal and communication skills to provide support to end users.
• Possess a strong sense of responsibility, initiative and resourcefulness as well as a keen interest in problem-solving.
• Experience in cybersecurity in government and non-profit organisations is preferred.

Interested applicants, please Email , and look for

Jensen Fang Lifa

Recruit Express Pte Ltd

EA License No. 99C4599

EA Personnel Registration Number: R2197080

We regret that only shortlisted candidates will be contacted.

Job Responsibilities:

• Assist in the formulation of ICT security strategy and work plan, in alignment with strategic plans.
• Assist in providing security governance, enforcing cyber security risk assessment and risk acceptance from stakeholders.
• Establish and implement Company-wide information security policies, strategies, plans and architecture
• Develop and manage a security governance program
• Protect & secure Company’s information and assets
• Perform day-to-day security operations
• Review safety measures and processes
• Enhance and configure corporate systems to continually improve their security
• Recommend changes to security policies and standards in response to changing conditions
• Any other adhoc duties as assigned.

Job Requirement:

• Preferably ‘Certified Information Systems Security Professional’ (CISSP), ‘Certified Information Systems Auditor’ (CISA) or ‘Certified Information Security Manager’ (CISM).
• 5 years of experience related to information security and working knowledge of ICT operations, security policies and procedures.
• Good interpersonal and communication skills to provide support to end users.
• Possess a strong sense of responsibility, initiative and resourcefulness as well as a keen interest in problem-solving.
• Experience in cybersecurity in government and non-profit organisations is preferred.

Interested applicants, please Email , and look for

Jensen Fang Lifa

Recruit Express Pte Ltd

EA License No. 99C4599

EA Personnel Registration Number: R2197080

We regret that only shortlisted candidates will be contacted.

Job Description

• Industry/ Organization Type: Manufacturing/Electronic Components and Boards
• Position Title: IT Security Manager (Regional)
• Working Location: Bedok (Company pick-up provided at Bedok MRT)
• Working Hours: 5 Days, Mon – Fri (8:15 am – 5:15 pm)
• Salary: Basic up to $12,000 + Variable Bonus
• Duration: Permanent

Key Responsibilities

• Analyze and prioritize vulnerabilities based on severity, potential impact, and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention, and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques, and incident response strategies.

APPLY NOW!!!

• Bachelor’s Degree in Computer Science, IT, or equivalent experience.
• Has 5+ years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Professional information security certification preferred (e.g. CompTIA Security+, CISSP, CISA, CISM).

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job(at)anradus.com.sg. Kindly indicate #67372 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it’s likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

Responsibilities

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Participate in regular threat focus meetings with fellow SOCs
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assist the Security Analysts with the investigative works
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations thru CESM IE/MCE Rules, DB scripts etc.
• Works with R&D for new signature package for deployment.
• Filtering and fine-tuning the security events flowing to our databases
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Working with engineering team to set up new initiatives i.e. honeypot on the Internet ADSL link to improve security incident detection capabilities
• Monitor real-time third party security feeds, forums, and mailing lists to gather information on vulnerabilities and exploits related to the client
• Assess each event based on factual information and wider contextual information available
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

We are seeking a SOC L1 Engineer who will be part of our growing Global Operations & Delivery team, which monitors, investigates, and resolves security incidents, violations, and suspicious activities. Our global Operations group takes innovative approaches and uses the most cutting-edge technologies to transform the operations of our customers and secure the security landscape.
Level 1 SOC Analyst:

Job Description

· Resolve, escalate, report, and raise recommendations for resolving and remediating security incidents

· Handle the advanced monitoring of system logs, SIEM tools, and network traffic for unusual or suspicious activity

· Set up SIEM solutions and troubleshoot connectivity issues

· Investigate and resolve security violations by providing post-mortem analysis to illuminate issues and possible solutions

· Collate security incident and event data to produce monthly exception and management reports

· Report unresolved network security exposure, misuse of resources, or noncompliance situations using defined escalation processes

· Assist and train team members in the use of security tools, the preparation of security reports, and the resolution of security issues

· Develop and maintain documentation for security systems and procedures

· Recommend, schedule, and apply fixes, security patches, and any other measures required, in the event of a security breach

Experience & Qualifications Required

· Minimum 1 years of experience as a Analyst working as part of a SOC team

· Experience with SIEM vendors such as QRadar, ArcSight, RSA, and LogRhythm, Splunk.

· Experience in incident response, and in writing procedures runbooks and playbooks

· Ability to work with customer’s IT and security teams

Job Description & Requirements

Avensys is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail and supply chain.

We are currently looking to hire Cyber Security Defensive Operation Analyst. This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

Description

Provide Intelligence driven approach towards incident response affecting any client assets and providing containment, eradication and recovery of affected assets involved in a cybersecurity incident in a timely and efficient manner. Further, the role requires the mitigation of identified threat, addresses identified vulnerabilities and provide incident coordination towards internal stakeholders and external customers. The role enables the business of company by providing an agile security operation capabilities.

· Conduct technical analysis and triaging of triggering alerts ingested from company log sources to determine impact, scope of impact and determine corresponding remedial actions to mitigate, contain and/or otherwise limit the impact of the incident

· Analysing, triaging, and processing security threats to identify potential risk gaps and corresponding organizational impact by conducting in-depth analysis of the identified threat, attack vector or intelligence information.

· Working closely with the CIRC threat intelligence team to aid in the enhancement of contextual analysis and providing threat hunting support towards Open Source Intelligence (OSINT) related Indicators of Compromise (IoCs)

· Taking the lead in managing client's nd users and stakeholders in providing cybersecurity incidents updates and other related activities that might arise from time to time during the incident coordination, remediation and recovery.

· Provide duty analyst support for the CIRC operations during weekends, utilizing a pre-defined duty roaster, ensuring the continued operations and monitoring of threats and triggering alerts 24 by 7, follow the sun model.

· Provide project coordination support to assigned projects by the Head of Global Defensive operations towards the roll out, implementation and acting as the point of contact for local stakeholders towards the implementation and coordination of the projects assigned.

· Provide technical inputs towards the virtual teams as assigned by the Head of Global Defensive operations towards the operational directions, method determination and other related administrative support required from time to time.

· Provide guidance and technical support in mentoring and guiding newer members of the team in technical and incident management skills and processes.

Qualification

· Degree from a reputable university or significant course work in Computer Science, Networking, engineering, or other computer-related fields of study.

· One or more of the following professional certifications is beneficial: CISSP, GCIH or similar.

· Have good emotional intelligence and is a proven team player

· Rational and able to remain calm under pressure

· Fluency in the English Language

· Effective oral and written communication skills

· Good timekeeping ability to cope with a tight deadline and achieve operational objectives

· Self-motivated with the ability to carry out assigned tasks with minimum supervision

· Proficient understanding of cyber and IT security risk, threat, and prevention measure.

· Proficient understanding of networking and network security technologies.

· Good understanding of Forensic tools and methodolgy used in incident response

· Good knowledge of security standards and best practices

· Good understanding of various operating systems

· Good understanding of the Cyber Kill Chain and the ability to display clear analytical skills

· Previous experience in a corporate or enterprise environment, engaging with and responding to a diverse array of internal stakeholders, including senior management.

· Knowledge of Microsoft Office suite (Word, Excel, PowerPoint, and Access)

· Knowledge of Splunk is beneficial

WHAT’S ON OFFER:

You will be remunerated with an excellent base salary and entitled to attractive company benefits. Additionally, you will get the opportunity to enjoy a fun and collaborative work environment, alongside a strong career progression

To submit your application, please apply online or email your UPDATED CV in Microsoft Word format to [email protected] Your interest will be treated with strict confidentiality.

CONSULTANT DETAILS:

Consultant Name : Jyotsana Madnani

Avensys Consulting Pte Ltd

EA Licence 12C5759

Privacy Statement: Data collected will be used for recruitment purposes only. Personal data provided will be used strictly in accordance with the relevant data protection law and Avensys' privacy policy.

Job Description

• Industry/ Organization Type: Manufacturing/Electronic Components and Boards
• Position Title: IT Security Manager (Regional)
• Working Location: Bedok (Company pick-up provided at Bedok MRT)
• Working Hours: 5 Days, Mon – Fri (8:15 am – 5:15 pm)
• Salary: Basic up to $12,000 + Variable Bonus
• Duration: Permanent

Key Responsibilities

• Analyze and prioritize vulnerabilities based on severity, potential impact, and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention, and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques, and incident response strategies.

APPLY NOW!!!

• Bachelor’s Degree in Computer Science, IT, or equivalent experience.
• Has 5+ years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Professional information security certification preferred (e.g. CompTIA Security+, CISSP, CISA, CISM).

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job(at)anradus.com.sg. Kindly indicate #67372 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it’s likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

Job Summary

We are currently looking for a seasoned leader as the Head of IT Security. The incumbent will be responsible for leading the transformation while establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. This role oversees the development and implementation of security policies, standards, and procedures to ensure the protection of the organization's information systems and data.

Mandatory Skill-set

• Degree in Computer Science, Information Security, Information Systems or a related field;
• At least 12-15 years of experience in IT security & risk management preferably in a large scale organisation;
• Deep knowledge and understanding of internal controls, security frameworks, risk management and IT governance, auditing techniques, threat modeling and risk management principles;
• Good knowledge of enterprise IT systems and components (applications, operating systems, databases, networks, cloud, DevOps;
• Knowledgeable in using various cyber security monitoring and analysis tools and techniques depending on the organization's needs and requirements;
• Familiarity with security technologies such as firewalls, intrusion detection systems, and endpoint protection;
• Familiar with cyber security standards, protocols and frameworks such as NIST, CIS, PCI/ DSS, MAS TRM, ISO standards;
• Experience with Security operations centers (SOC) and setting up SOC models;
• Experience in driving enterprise initiatives for E2E security posture analysis;
• Ability to work with subsidiaries and understand regional security requirements;
• Strong in analytical thinking with attention to detail;
• Excellent communication and inter personal skills.

Desired Skill-set

• CISSP, CISM, CRISC, CGEIT and/or CISA certified.

Responsibilities

• Define and implement the Enterprise InfoSec (IS) landscape and roadmap;
• Responsible for documenting methodologies and tools to mitigate information security or cyber risk for on-prem and clous platforms;
• Prepare reports for information security or cyber risk related reporting, threat awareness and security awareness reports;
• Design and implement secure cloud architecture for various cloud platforms and act as an SME for cloud platforms (AWS, GCP, or Azure) using cloud-native security services;
• Recommend corrective actions or appropriate security controls to mitigate technical risk;
• Conduct Technology Security Risk Assessments on systems throughout their lifecycle to identify and mitigate security risks;
• Assist in the development of policies for conducting cyber security risk assessments and compliance audits;
• Formulate governance procedures for documenting and updating security policy, standards, guidelines and procedures;
• Perform information security or cyber risk assessment activities and assess third party security controls and internal security systems including onsite assessments;
• Establish scope of risk analysis for new technology initiatives and identify security risks in the Tech Obsolescence Risk program;
• Communicate with regulators such as MAS and ensure solutions meet external and internal requirements and guidelines
• Keep abreast of the dynamic cyber threat landscape and identify opportunities for enhancement of IT risk processes;
• Provide regular updates on the overall health of compliance, criticality assessment, audit findings, remediation and action plans.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

· 15+ years of Experience in managing network and security infra.

· 10+ years’ Experience in handling major network security projects (ex: SDWAN)

· 10+ years’ Experience in handling Firewalls/IPS/F5/Pulse/Proxies, Routers/Switches.

· Excellent analytical skills

· Excellent oral and written communication

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R22111604

Responsibilities:

1. Design & Implement Secure Systems: Build secure financial applications & recommend enhancements for existing systems.
2. Stay Ahead of Threats: Continuously learn about cyber threats & advancements in security.
3. Manage Risk & Compliance: Conduct security assessments, ensure compliance with regulations, and support audits.
4. Foster Collaboration: Work with teams to implement secure systems.
5. Secure Coding Expertise: Provide guidance on secure coding practices, testing, and vulnerability management.
6. Security Subject Matter Expert: Possess deep knowledge in application & security engineering principles.

Requirements:

1. Degree in Computer Science (or related field).
2. 5+ years in security engineering with deep domain expertise.
3. 5+ years of experience in application security, mandatory.
4. Experience in Cloud & Cybersecurity a must.
5. IT Security certifications, highly advantageous.
6. Familiarity with MAS TRM, PCI DSS, PCI PTS, and payment card standards, advantageous.

Working for banking client , as part of their IT security team, you will be carrying out the following

Key Responsibilities

Day-to-day monitoring, triaging, and investigating of potential suspected anomalous usage behavior alerts

To work with internal teams to validate alerts

Perform investigatin of usage behavior trends to discover potentially fraudulent

Understand business applications to be able to analyze, recognize and identify potentially anomalous activities

Investigate Data Loss Prevention (DLP) alerts and escalate DLP incidents in accordance to the DLP incident response and handling procedures

Carry out DLP System Ruleset change requests in accordance to change management procedures

Support management reporting of DLP incidents and statistics for ad-hoc and monthly reporting

Coordinate DLP audit requests; respond to questions or reporting requirements from local authorities as required

To work with internal cyber security teams to ensure investigations are comprehensive and to track and follow up on all escalated incidents to closure

Requirements

Minimum 3-5 years of relevant experience as an insider fraud/threat analyst in a financial institution

Excellent analytical and investigative skills

Prior experience with analytical platforms

Experienced with working with machine learning enabled platforms would be advantageous

Experience with administration and operation of DLP Systems preferred

Experience in development and fine tuning of DLP Ruleset preferred

Knowledge of Cyber Security would be advantageous

Relevant working experience in SOC environment and related processes will be added advantages

Interested candidates please email your latest resume to [email protected]

Job Responsibilities

Insider Threat Analyst is an operational role within UOB’s Group Security Operations Center. The incumbent will be responsible for the continuous monitoring, analyzing, and investigating of insider threats and data leakage incidents. He/She must have good analytical and investigative skills to recognize and detect anomalous behavior.

Key Responsibilities

§ To participate in the day-to-day monitoring, triaging, and investigating of potential suspected anomalous usage behavior alerts

§ To work with internal teams to validate alerts within stipulated SLA

§ To perform analysis on usage behavior trends to discover potentially fraudulent activities

§ To perform continuous review and improvement on current monitoring operations to enhance effectiveness of monitoring

§ Work with external partners to resolve issues or implement improvement to monitoring

§ To gain good understanding of internal business applications to be able to analyze, recognize and identify potentially anomalous activities

§ Investigate Data Loss Prevention (DLP) alerts and escalate DLP incidents in accordance to the DLP incident response and handling procedures

§ Carry out DLP System Ruleset change requests in accordance to change management procedures

§ Support management reporting of DLP incidents and statistics for ad-hoc and monthly reporting

§ Coordinate DLP audit requests; respond to questions or reporting requirements from local authorities as required

§ To work with internal cyber security teams to ensure investigations are comprehensive and to track and follow up on all escalated incidents to closure

Job Requirements

Education

§ Diploma/Degree in Business Information Technology/Business Analytics from recognized academic institutions

Technical Skills and Experience

§ Minimum 3-5 years of relevant experience as an insider fraud/threat analyst in a financial institution

§ Excellent analytical and investigative skills

§ Prior experience with analytical platforms

§ Experienced with working with machine learning enabled platforms would be advantageous

§ Experience with administration and operation of DLP Systems preferred

§ Experience in development and fine tuning of DLP Ruleset preferred

§ Knowledge of Cyber Security would be advantageous

§ Relevant working experience in SOC environment and related processes will be added advantages

Soft Skills

§ Good communication skills

§ Strong analytical and problem-solving skills

§ Ability to adhere to work processes and procedures

Other Requirements

§ Ability to work independently

§ Ability to work well with the rest of the team and department

Responsibilities:

1. Administer day-to-day IT Infrastructure security operations in alignment with established security frameworks and requirements.

2. Implement security controls, conduct patching, and enforce hardening measures for infrastructure components.

3. Assess the business and operational impact of security remediation activities before making changes to the IT Infrastructure environment.

4. Document and escalate security findings that require attention beyond standard remediation procedures.

5. Continuously evaluate Azure and AWS cloud resources for security vulnerabilities, prioritize responses, and implement necessary measures.

6. Apply Azure and AWS cloud hardening practices following industry benchmarks and company security frameworks.

7. Monitor and optimize the patching status of the entire IT Infrastructure, ensuring timely application of patches.

8. Remediate infrastructure vulnerabilities based on severity and internal risk assessments.

9. Take corrective actions based on insights from Azure Defender, AWS Security Hub, and vulnerability assessment tools.

10. Perform Azure Active Directory administration, including managing access control policies and whitelisting/blacklisting.

11. Administer email filtering processes, analyze spam and phishing attempts, and conduct investigations as needed.

12. Integrate IT assets into SIEM security dashboards, addressing any gaps in asset discovery.

13. Collaborate with IT security officers, managers, and support teams to analyze and investigate SIEM events.

14. Serve as a subject matter expert in IT Infrastructure security, actively participating in IT infrastructure and operations meetings.

15. Attend weekly IT security meetings and respond to ad hoc IT security inquiries.

Qualifications:

a. Proven experience in IT Infrastructure security administration.

b. Familiarity with Azure and AWS cloud environments.

c. Strong understanding of security frameworks and best practices.

d. Ability to assess and prioritize security risks.

e. Proficiency in applying security measures to cloud resources.

f. Experience with vulnerability assessment tools.

g. Knowledge of Azure Active Directory and email filtering.

h. Familiarity with SIEM security dashboards.

i. Excellent collaboration and communication skills.

Responsible for maintaining the overall security posture of the IT infra. ITSO will be the single point of contact for all security related tasks which includes reporting, managing security tools, assist in handling security incidents, Security Governance, Compliance and Auditing.

• Be the point of contact for HSA IT security matters for 24hrs x 7 days.
• Provide IT security consultancy and advisory to Agency.
• To assist agency to consolidate, track and report the status of security advisory received from GITSIR, CSA, NCSC etc.
• Follow up with respective Facilities Management Team on the implementation of the remediation against the security advisory received, IOC scanning and reporting, patching of the system and vulnerability for systems in HQ DC.
• Provide ad hoc, monthly report for Privilege Access Manager, Early Detection and Response solution, Database Activities Monitoring, log review, account review etc.
• Review of logs capture in the syslog server from all the systems in HSA HQ and GDC.
• Support HSA in the IT security audit, compliance audit, and security related matters.
• Work on quarterly Vulnerability scanning and remediation with ATFM and provide reporting and track the status.
• ITSO resources will be full time dedicated to HSA to support all related IT security requirement.
• ITSO shall work with IT security engineer to Conduct Quarterly or OnDemand VA Scan all system and follow up with IT Facility Management on the remediation to meet IM8 timeline.
• Share domain and technical expertise, providing technical mentorship and cross-training to other peers and team members.

Requirements

• 5+ years IT security experience required.
• Experience with Networks, Servers (Windows and UNIX), Database.
• Experience in IT security auditing, security assessments.
• Understand protocols, traffic flows, ability to analyze logs from various sources.
• Knowledge of Active Directory, Endpoint protection solutions, Early Detection and Response solution, Database Activities Monitoring tools, SIEM etc.
• Excellent written and verbal communication, presentation skills.
• Proficiency in Microsoft Excel.
• Flexible, team player, “get-it-done” personality.
• Ability to organize and plan work independently.
• Ability to work in a rapidly changing environment.
• Ability to multi-task and context-switch effectively between different activities and teams
• CISSP certification preferred, CISM, Security+, IT security tools certifications (Imperva, Carbon Black) is a plus.

Responsibilities:

• Lead the IT Security team to manage and all IT security-related matters that support business objectives and strategies
• Develop and carry out IT security policies and plans
• Conduct security review of existing systems on their ability to provide adequate defence against the latest security threats.
• Conduct vulnerability assessments and penetration tests for all critical IT systems
• Drive and conduct IT Security awareness and training like security talks, phishing simulation and incident response exercises
• Manage and investigate all cyber security alerts and notifications from cyber surveillance and threat intelligence to identify root cause and impact for effective containment, mitigation and future improvements
• Manage and investigate all IT Security incidents to identify root cause and impact for effective containment, mitigation and future improvements
• Engage IT project teams throughout the SDLC to identify and prioritize applicable security controls and provide guidance on how to implement these controls
• Jointly perform, monitor, track and review with IT Governance team and other IT teams on all information systems and infrastructure and security
• Maintain and enhance the Information Security risk assessment methodology
• Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit
• Act as Subject Matter Expert (SME) in security technologies, and provide knowledge sharing and technical assistance to other team members
• Define security configuration standards for platforms and technologies
• Detailed reporting on IT security initiatives, scans, incidents to management and statutory reporting
• Any other ad hoc duties as assigned.

Requirements:

• Bachelor's degree in Computer Science, of Information Technology or equivalent, with minimum 5-7 years' experience in Information and Cyber Security
• Good knowledge and experience with cloud security of Amazon Web Services (AWS), Microsoft Azure and SaaS solutions, security standards and frameworks like NIST, ISO27001, MTCS, CSA Security-by-Design (SBD) and Personal Data Protection Act (PDPA) is preferred.
• Other relevant certifications such as CISSP/CISA/CISM, CREST, CEH, CHFI would be advantageous
• Demonstrated leadership and adaptability, with willingness to readily and voluntarily take ownership of highly challenging tasks and problems, even beyond initial scope of responsibility.
• Ability to handle multiple tasks concurrently and meet deadlines, while maintaining focus despite conflicting demands.

Interested applicants, please Email , and look for

Jensen Fang Lifa

Recruit Express Pte Ltd

EA License No. 99C4599

EA Personnel Registration Number: R2197080

We regret that only shortlisted candidates will be contacted.

Responsible for maintaining the overall security posture of the IT infra. ITSO will be the single point of contact for all security related tasks which includes reporting, managing security tools, assist in handling security incidents, Security Governance, Compliance and Auditing.

• Be the point of contact for HSA IT security matters for 24hrs x 7 days.
• Provide IT security consultancy and advisory to Agency.
• To assist agency to consolidate, track and report the status of security advisory received from GITSIR, CSA, NCSC etc.
• Follow up with respective Facilities Management Team on the implementation of the remediation against the security advisory received, IOC scanning and reporting, patching of the system and vulnerability for systems in HQ DC.
• Provide ad hoc, monthly report for Privilege Access Manager, Early Detection and Response solution, Database Activities Monitoring, log review, account review etc.
• Review of logs capture in the syslog server from all the systems in HSA HQ and GDC.
• Support HSA in the IT security audit, compliance audit, and security related matters.
• Work on quarterly Vulnerability scanning and remediation with ATFM and provide reporting and track the status.
• ITSO resources will be full time dedicated to HSA to support all related IT security requirement.
• ITSO shall work with IT security engineer to Conduct Quarterly or OnDemand VA Scan all system and follow up with IT Facility Management on the remediation to meet IM8 timeline.
• Share domain and technical expertise, providing technical mentorship and cross-training to other peers and team members.

Requirements

• 5+ years IT security experience required.
• Experience with Networks, Servers (Windows and UNIX), Database.
• Experience in IT security auditing, security assessments.
• Understand protocols, traffic flows, ability to analyze logs from various sources.
• Knowledge of Active Directory, Endpoint protection solutions, Early Detection and Response solution, Database Activities Monitoring tools, SIEM etc.
• Excellent written and verbal communication, presentation skills.
• Proficiency in Microsoft Excel.
• Flexible, team player, “get-it-done” personality.
• Ability to organize and plan work independently.
• Ability to work in a rapidly changing environment.
• Ability to multi-task and context-switch effectively between different activities and teams
• CISSP certification preferred, CISM, Security+, IT security tools certifications (Imperva, Carbon Black) is a plus.

Job Description

Avensys is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success, we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail and supply chain.

We are currently looking for Cyber Security Defensive Operation Analyst who has proven track record in IT Industry. This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

Cyber Security Defensive Operation Analyst

Contract Duration: 1 year, subjected to approval for renewable

Working Hours/ Location: Monday – Friday (9am to 6pm) at Westgate Tower office; Hybrid work arrangement of 2 days per week in office, remaining days work from home

REQUIREMENTS

Qualification

· Degree from a reputable university or significant course work in Computer Science, Networking, engineering, or other computer-related fields of study.

· One or more of the following professional certifications is beneficial: CISSP, GCIH or similar.

· Have good emotional intelligence and is a proven team player

· Rational and able to remain calm under pressure

· Fluency in the English Language

· Effective oral and written communication skills

· Good timekeeping ability to cope with a tight deadline and achieve operational objectives

· Self-motivated with the ability to carry out assigned tasks with minimum supervision

· Proficient understanding of cyber and IT security risk, threat, and prevention measure.

· Proficient understanding of networking and network security technologies.

· Good understanding of Forensic tools and methodolgy used in incident response

· Good knowledge of security standards and best practices

· Good understanding of various operating systems

· Good understanding of the Cyber Kill Chain and the ability to display clear analytical skills

· Previous experience in a corporate or enterprise environment, engaging with and responding to a diverse array of internal stakeholders, including senior management.

· Knowledge of Microsoft Office suite (Word, Excel, PowerPoint, and Access)

· Knowledge of Splunk is beneficial

Threat hunting/threat intelligence experience is mandatory:

· Experience with Threat Hunting techniques (endpoint and network data)

· Strong understanding of attack lifecycle and common attack vectors, tools and techniques

· Ability to leverage existing data to identify anomalies / IOA / TTP

· Ability to develop / maintain detection/prevention use cases

· SIEM (Splunk ES) and EDR (CrowdStrike) experiences

· Strong report writing and communication skills

· Nice to have:

o Experiences in leveraging AI / ML for Threat Hunting

o Experience with OT / ICS and Cloud environments

o Experience working with threat intelligence platforms and premium intelligence sources/feeds

Job descriptions

WHAT’S ON OFFER

You will be remunerated with an excellent base salary and entitled to attractive company benefits. Additionally, you will get the opportunity to enjoy a fun and collaborative work environment, alongside a strong career progression.

To submit your application, please apply online or email your UPDATED CV in Microsoft Word format to [email protected] Your interest will be treated with strict confidentiality.

CONSULTANT DETAILS:

Consultant Name : Seema Verma

Avensys Consulting Pte Ltd

EA Licence 12C5759

Privacy Statement:

We take your personal data protection seriously and adhere to both EU and local data protction regulations.

Upon submission of your CV, you grant Avensys Consulting permission to retain your personal information in our electronic database, unless you specify otherwise. This data will be used to evaluate your suitability for current and potential job openings within our organization. Should you wish to have your personal data removed at any point, a simple notification to us will suffice.

Rest assured, we will not disclose your personal information to any third parties, and we remain steadfast in our commitment to providing equal opportunities to all applicants.

KEY ROLES AND RESPONSIBILITIES

• Ensure enhancement of SOC for cyber threats monitoring, detection, analysis and response through the use of threat intelligent and automation

• Project management and Vendors Management

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Synthesize multiple information sources and analysis reports into a holistic view of potential threats

• Conduct in-depth research into cyber security issues of industry- or nation-wide significance

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Develop a playbook for cyber incident management

• Perform the remediation and resolution of cyber incidents at the organizational level

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 3-5 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Advance Persistence Threat Solution

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Familiar with Kill Chain methodology, MITRE Att&ck, NIST Cybersecurity Framework, ISO 27001, 27002 and etc.

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

Job Description & Requirements

• Manage, configure and upgrade a wide variety of security technologies
• Respond to managed security technologies fault alerts and/or customer escalation
• Troubleshoot product-specific technical issues within SLA and work with internal teams/external vendors to resolve technical issues
• Prepare and submit Incident Reports on high severity incidents
• Perform regular configuration backups on managed security products
• Create and update technical documentations on managed security technologies
• Generate monthly reports according to service scope requirements
• Adhere to organization and project security policies, procedures and security best practices
• Certifications is advantage: CISA / CISM

• Manage, configure and upgrade a wide variety of security technologies
• Respond to managed security technologies fault alerts and/or customer escalation
• Troubleshoot product-specific technical issues within SLA and work with internal teams/external vendors to resolve technical issues
• Prepare and submit Incident Reports on high severity incidents
• Perform regular configuration backups on managed security products
• Create and update technical documentations on managed security technologies
• Generate monthly reports according to service scope requirements
• Adhere to organization and project security policies, procedures and security best practices
• Certifications is advantage: CISA / CISM

• MNC at CBD
• Salary: $9,000 - $12,500 per month
• Permanent position

Responsibilities

• Perform or coordinate the core operational cyber-security functions such as incident handling, incident response, vulnerability management, penetration testing, application security, data leakage prevention and identity/access management.
• Participate in response planning and remediation actions.
• Review existing and proposed system configurations and designs to ensure compliance with security controls and baselines.
• Participate in or conduct cyber-security assessments, and evaluate proposed changes, and/or execute action plans to enhance cyber-security resilience and risk mitigation.
• Design, implement, operate and maintain security tools, advance detection solutions with minimal supervision and guidance.
• Enhance cyber-security operations functions through process enhancements and stakeholder engagement.
• Lead enhancement of cyber-security functions through vendor/supplier identification, scope of work development, justification, contract review, contract negotiation and procurement engagement.
• Execute and communicate enhancement strategy of cyber-security functions using measured goals, proper tracking and reporting.
• Establish, maintain and enforce procedures, guidelines and baselines related to security for the users and administration of IT systems.
• Collaborate with stake holders from other IT functions for cyber gaps remediations efforts and provide security review consultations if required.
• Assess cloud security and propose improvements or solutions
• Implement security and data protection solutions in the cloud
• Strong understanding of API management and application integration methodologies
• Perform other miscellaneous duties as directed

Requirement:

• Bachelor's degree in the IT field.
• 9 years’ experience in IT and/or cybersecurity field.
• At least 5 years work experience at information security service-company or cybersecurity department.
• Intermediate or Advanced GIAC certifications in any of Cyber Defense, Penetration Testing, and/or Digital Forensics & Incident Response domains preferred (examples: GPEN, GWAPT, GCIH).
• CISSP or equivalent professional certification is preferred.
• Strong knowledge with emerging technologies, such as intelligent automation, artificial intelligence (AI)/ machine learning (ML)
• Strong Knowledge of modern cloud technology components and deployment patterns
• Cloud security certification is preferred (CCSP, CCSE, AZ 500, GCSA, CompTIA Cloud+ etc)
• Experience developing software such as Python or scripting language
• Strong knowledge of REST APIs implementation
• Proficient in written and oral English.
• Proficient in SIEM and Log Management Solutions. – SOAR solutions recommended.
• Understanding and familiarity with securing cloud infrastructure.
• Proficient in both Windows and Unix/Linux operating system implementation and administration.

All Successful candidates can expect a very competitive remuneration package and a comprehensive range of benefits.

Alternatively, you may wish to email your resume in a detailed Word format to [email protected]

We regret that only shortlisted candidates will be notified

People Profilers Pte Ltd, 20 Cecil Street, #08-09 PLUS Building, Singapore 049705

Tel: 6950 9748

http://www.peopleprofilers.com

[email protected]

Consultant in charge: So Boon Shyen, Debbie

EA Licence Number: 02C4944

Registration Number: R1111376

VP - ICT Security Operations Analyst

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and, in our clients’, best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do. We keep the bank safe and provide the technical tools our workers need to be successful. We design our digital architecture and ensure our platforms provide a first-class customer experience. Our operations teams manage risk, resources, and program management. We focus on enterprise resiliency and business continuity. We develop, coordinate, and execute strategic operational plans. Essentially, Enterprise Operations & Technology re-engineers client and partner processes to deliver excellence through secure, reliable, and controlled services.

Trust is part of our DNA at Citi. As such, we take safeguarding our customer data very seriously. The Chief Information Security Office (CISO) is made up of deeply dedicated and talented colleagues who work together to ensure the safety of Citi’s and our clients’ assets and information. We manage information security as an end-to-end program – one with a clear mandate and accountability. Our mission is to continually execute and enhance a global security program that is fully anchored to modern control and security frameworks, fully aligned with the technology of the firm, threat-focused and data-driven, and deeply integrated across all Citi businesses globally.

Being talent-driven, we are focused on attracting, developing, and retaining diverse and inclusive talent with a high technical skill level. As a member of our team we will provide you with career development opportunities at all stages of your career. Our employees model a passion for protecting Citi and our clients and believe in treating others with dignity and respect.

The Chief Information Security Office (CISO) is home to deeply talented colleagues that work to ensure the safety of Citi's clients' and our proprietary data. We manage information security as one end-to-end program – one with a clear mandate and accountability. Our mission is a program that is fully anchored to modern control and architectural frameworks, is fully aligned with the enterprise architecture of the firm and is deeply integrated into the sectors and functions.

CISO’s Cyber Security Engineering and Architecture is responsible for delivering integrated risk reduction capabilities and services aligned to the architectural goals and priorities associated with leading ‘Change the Bank’ (CTB) and ‘Run the Bank’ (RTB) initiatives. This role entails leading and coordinating the execution of SASE Services, across the network security domain. The successful candidate will have demonstrated success and be highly adept at: leading global programs and engineering change efforts; managing risk and execution of global programs by aligning resources and tactical/strategic decisions; and driving transformation across a complex enterprise to support cybersecurity goals. The candidate needs to have the ability to work on defining highly scalable and integrated security architectures, and influence roadmaps across a variety of product portfolios. The candidate needs to have the ability to define and drive interoperability with security components of a complex end to end network and cloud security ecosystem, focusing on client experience. Strong experience across cybersecurity, Technology Infrastructure, large enterprises will assist in delivering aspects of this service.

Our commitment to diversity includes a workforce that represents the clients we serve globally from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.

Responsibilities:

• Working with Transformation Program Directors, Senior Architects, Steering Committees, CISO and CTI partners in delivering the transformational Programs related to SASE. Onboarding of users on Zscalar and ensuring smooth transition.
• Troubleshooting issues and work on finding RCA.
• Zscaler Internet Access design and migration methods from legacy Internet Access solutions to SASE based architecture.
• Interface and support Citi’s Security Architecture Council and Working Groups building strong rapport across teams.
• Firewall rules Management (creation/ modification/ deletion) by following Change management process and via automation.
• Participate in migration activities and provide troubleshooting support from Infrastructure defense standpoint. Identify issues, provide support for isolating problems, finding RCA.
• Willing to work on weekends for migration activities off business hours.
• Completing additional tasks in connection with the role but not detailed in the current job description, charged by the direct manager, supervisor, or the functional head.

Qualifications:

• 8-12 years of extensive Security Experience with Checkpoint Firewalls, Juniper Networks Firewalls, Palo Alto Network Firewalls, Bluecoat Proxy, IPS/IDS, Illumio, Crowdstrike and EDR tools.
• Extensive knowledge on SASE Zscalar user onboarding and operational support experience.
• Strong troubleshooting skills over the Firewalls, Proxy and network infrastructure.
• Extensive Data Networking knowledge and an understanding of network security standards such as Firewall Rules, Security Zones, Multicast Data Feeds, Ultra Low Latency Network Architectures & Platforms.
• Hands-on experience in Zscaler Internet Access, Zscaler Private Access and Zscaler Digital Experience
• Proven influencing and relationship management skills.
• Exhibiting a high degree of flexibility and ability to multi-task, seeking guidance where necessary
• Strong communication skills, including verbal and written skills.
• Ability to work as part of a team with remote colleagues in other countries.
• Strong knowledge of Proxy functionality and Proxy features
• Consistently demonstrates clear and concise written and oral communication as well as strong presentation skills to both technical and non-technical audiences.
• Advanced analytical and problem-solving skills
• Demonstrated ability to take ownership and work with cross functional teams to manage multiple projects simultaneously under pressure.
• Thorough understanding of industry and corporate technology standards for Cyber Security services

Critical Competencies:

• Firewalls, Proxy and network infrastructure
• Zscaler Internet Access, Zscaler Private Access