Total 97 it auditor job vacancies in Legal / Public / Security category in outram park central singapore

IT Security Specialist

We are seeking a highly skilled IT Security Specialist with expertise in the insurance industry to join our dynamic team. The ideal candidate will play a pivotal role in ensuring the confidentiality, integrity, and availability of sensitive information within our organization. The IT Security Specialist will collaborate with cross-functional teams to implement and maintain robust security measures, compliance standards, and risk management practices specific to the insurance sector.

Responsibilities:

· Support development, implement and enforce security policies and procedures in alignment with industry regulations and best practices.

· Monitor and assess compliance with regulatory requirements (e.g., HIPAA, GDPR) relevant to the insurance sector (familiarity with SOC).

· Conduct risk assessments and vulnerability analyses to identify and mitigate potential security threats (VAPT).

· Develop and implement strategies to manage and respond to security incidents effectively.

· Design, implement, and maintain secure network architecture and infrastructure.

· Ensure the security of servers, databases, and other critical systems used in insurance operations.

· Implement and manage robust identity and access control measures to safeguard sensitive insurance data.

· Regularly review and update user access permissions based on business needs and principle of least privilege.

· Develop and maintain an incident response plan for swift and effective resolution of security incidents.

· Conduct digital forensics investigations to identify the root cause of security breaches and recommend preventative measures.

Qualifications:

· Bachelor's degree in Information Security, Cybersecurity, or a related field.

· Proven experience as an IT Security Specialist in the insurance industry.

· In-depth knowledge of insurance sector regulations and compliance requirements.

· Experience with risk assessment methodologies and tools.

· Proficiency in implementing and managing security solutions, including firewalls, intrusion detection/prevention systems, and antivirus software.

Certifications (Preferred):

· Certified Information Systems Security Professional (CISSP)

· Certified Information Security Manager (CISM)

· Certified Ethical Hacker (CEH)

· Certified Information Systems Auditor (CISA)

Benefits:

· Competitive salary with performance-based bonuses

· Ongoing professional development opportunities

· Collaborative and innovative work environment

The Legal Counsel will provide practical, business oriented legal advice to a fast-paced and global demanding business.

The role of the Legal Counsel will be to review, draft and negotiate contracts and support the business on all legal aspects in an ever evolving and growing company.

• Preparing, reviewing and negotiating sell-side complex IT contracts for software licensing (and related services) and partnership agreements in collaboration with various teams across the Asia-Pacific region; assisting in reviewing and responding to customer requests for proposals.
• Building close cross-functional relationships and working closely with with various teams across the organization to support the business, obtaining and maintaining a solid knowledge of the company’s business, and being able to communicate effectively and develop strong working relationships with senior management and business colleagues.
• Having strong subject matter expertise on complex legal terms and complex agreement structures (including intellectual property, licensing, indemnity, liability, identifying revenue impacting terms, data protection and other rights and obligations) required to ensure compliance within company policies and guidelines.
• Balancing competing priorities of constituencies as compared to business needs and using astute judgment as to when to seek executive-level direction.
• Monitoring and incorporating changes in laws and regulations across the Asia-Pacific region and ability to learn and apply new substantive areas of law to daily practice.
• Being highly self-directed and proactive - proactively identifying needs or potential legal issues, proposing solutions, and effectively executing on the solution.

What you offer

• Good knowledge and work experience in the area in the area of civil law and in particular contract law and corporate law;
• Affinity with ICT, Telecom, Privacy/data protection is a distinct advantage;
• Strong verbal and written communication skills in English, Chinese (Mandarin) is a distinct advantage.
• Bachelors degree (or equivalent) and 3 - 5 years of experience in related field
• Good communication and interpersonal skills
• Ability to work well under pressure

If you're interested in this role, click 'apply now'

If this job isn't quite right for you but you are looking for a new position, please contact us @ + 65 6645 4540 / [email protected] for a confidential discussion on your career.

License No: 11C3510 / EA Reg ID: R1658237

The Legal Counsel will provide practical, business oriented legal advice to a fast-paced and global demanding business.

The role of the Legal Counsel will be to review, draft and negotiate contracts and support the business on all legal aspects in an ever evolving and growing company.

• Preparing, reviewing and negotiating sell-side complex IT contracts for software licensing (and related services) and partnership agreements in collaboration with various teams across the Asia-Pacific region; assisting in reviewing and responding to customer requests for proposals.
• Building close cross-functional relationships and working closely with with various teams across the organization to support the business, obtaining and maintaining a solid knowledge of the company’s business, and being able to communicate effectively and develop strong working relationships with senior management and business colleagues.
• Having strong subject matter expertise on complex legal terms and complex agreement structures (including intellectual property, licensing, indemnity, liability, identifying revenue impacting terms, data protection and other rights and obligations) required to ensure compliance within company policies and guidelines.
• Balancing competing priorities of constituencies as compared to business needs and using astute judgment as to when to seek executive-level direction.
• Monitoring and incorporating changes in laws and regulations across the Asia-Pacific region and ability to learn and apply new substantive areas of law to daily practice.
• Being highly self-directed and proactive - proactively identifying needs or potential legal issues, proposing solutions, and effectively executing on the solution.

What you offer

• Good knowledge and work experience in the area in the area of civil law and in particular contract law and corporate law;
• Affinity with ICT, Telecom, Privacy/data protection is a distinct advantage;
• Strong verbal and written communication skills in English, Chinese (Mandarin) is a distinct advantage.
• Bachelors degree (or equivalent) and 3 - 5 years of experience in related field
• Good communication and interpersonal skills
• Ability to work well under pressure

If you're interested in this role, click 'apply now'

If this job isn't quite right for you but you are looking for a new position, please contact us @ + 65 6645 4540 / [email protected] for a confidential discussion on your career.

License No: 11C3510 / EA Reg ID: R1658237

Department: Regional Information Systems Division
Reports to: Regional IT General Manager
Functional Relationships with: Global Security Team, ASEAN Business Units, ASEAN local IT divisions

Successful candidate will: Be engaged and responsible for SecOps (security operations), security incident handling, SOC response, etc as a Senior Specialist, Information Security Incident Response Lead, responsible for CSIRT operations in cyber security

Key Duties & Responsibilities
• Be responsible for handling overall SecOps in cooperation with partner IT vendors and related internal departments as a member of the incident handling team within CSIRT
• Work with partner IT vendors that maintain information security infrastructure tools implemented in our company
• Monitor and continuously assess the IT security aspects and impact.
• Knowledge and strong understanding on CIS CSC to continuously improve IT security
• Reporting to Regional IT General Manager and the head of Global Security Team

Responsibilities:

• While increasing cyber security risks, we must strengthen its security measures to secure our business expansion.
• He/She will be able to keep updating our skill sets by touching on the latest technology trends as we continue introducing new services and technologies to achieve "Zero Trust” and “IT/OT cyber security”.
• In addition, he/she can obtain a global business perspective since there are many opportunities to discuss security countermeasures with overseas members by crossing the border

1. Cyber incident response

• He/She must enhance the process of incident handling and our ability to respond to incidents through the implementation of security solutions, training, and incident-handling experiences

2. Vulnerability Assessment on platform and application/implementation of countermeasures

• Based on the results of various diagnostics and tools, countermeasures against vulnerabilities will be promoted together with each application engineer. We will also work with the CCoE team and PSIRT to implement measures for cloud environments, promote pre-release diagnostics, and add tools to meet operational requirements in the production environment.

3. Implementation and Maintenance of security solutions

• Client is developing advanced solutions for emerging threats.
• He/she must be responsible for the selection of suitable security products to fit our maintenance and operation requirements and lead PoC and implementation with well-designed operations

Ability / Competency Required

• Bachelor or Master’s Degree in Computer Science, Information Systems, or equivalent experience.
• Minimum three years of experience in the Cyber Security and Infrastructure fields
• Security tool implementation and operational experience/application security technology experience
• CISSP - Certified Information Systems Security Professional Certifications

Interested candidates, please click "APPLY" to begin your job search journey and submit your CV directly through the official PERSOLKELLY job application platform - https://go.persolkelly.com/job/apply/7657

We regret to inform you that only shortlisted candidates will be notified.

Siow Ee Sheng | REG No : R23118145

PERSOLKELLY SINGAPORE PTE LTD | EA License No : 01C4394

This is in partnership with Employment and Employability Institute Pte Ltd (“e2i”). e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance and skills upgrading services, and partnering employers to address their manpower needs through recruitment, training and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation-wide manpower and skills upgrading initiatives. By applying for this role, you consent to e2i’s PDPA.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Responsibilities

• Develop and maintain compliance frameworks for IT regulations (e.g., PDPA, MAS TRM, PCI).
• Monitor and report on adherence to organizational security policies and standards.
• Evaluate IT risks, including those from new technologies like IoT, and develop mitigation strategies.
• Conduct security awareness programs and manage phishing simulations.
• Assist in IT security project evaluations and collaborate with counterparts in regional office.

Requirements

• Minimum 3 years of experience in IT Security, focusing on consultancy and risk management.
• Certifications like CISSP, CISM, or CISA, with knowledge of regulations (PDPA, MAS TRM, PCI).
• Strong organizational, planning, and interpersonal skills.
• Ability to work independently, follow structured frameworks, and meet deadlines.
• Experience in larger organizations with diverse business lines is an advantage.

Please contact Ted Tan or email your cv directly in word format to [email protected]

Please note that due to the high number of applications only shortlisted candidates will be contacted.

We regret to inform you that your application for this position was unsuccessful if you do not hear from us in the next 5 business days.

EA License: 16S8131

Recruiter License: R1987706

• Min. 10 years of IT infrastructure management with experience in monitoring, production support and troubleshooting issues, preferrably within Financial Services/ Fintech enviroment
• In depth knowledge of cloud services, in particular AWS and Azure Clouds
• Familiar with information security, audit and risk management functions

Job Summary:

We are seeking a highly skilled and experienced Technology Director to lead our IT infrastructure and DevOps team. The ideal candidate will be responsible for overseeing the IT infrastructure, production monitoring and support, production releases and optimization of our technology infrastructure, ensuring the highest levels of availability, performance, and security.

You will be working closely with our Chief Operating Officer in accordance to the requirements of business needs, technology platforms, information security, regulatory, and compliance.

Together with the team, you will be working with internal and external stakeholders on Infrastructure Platforms, Identity & Access Management team, including assignments that may consist of parts of a single technical area, application, software, or technical methodology within the infrastructure engineering discipline.

Key Responsibilities:

- Infrastructure Management:

• Oversee the design, implementation, and maintenance of the company’s technology infrastructure, including servers, networks, storage systems, HSM and cloud services.
• Ensure the infrastructure is scalable, reliable, and secure to meet current and future business needs by conducting capacity planning in cooperation with the business lines and development teams.
• Manage external vendors, including monitoring of the SLA.
• Maintain a tight control on costs.
• Oversee day-to-day IT operations, ensuring efficient and effective service delivery.
• Monitor production and provide support to ensure timely resolution of incidents and problems, liaising with the relevant IT software support and development teams to resolve incidents. Handle the crisis management process if needed.
• Develop and enforce policies and procedures for incident management, problem management, and change management.
• Monitor system performance and implement proactive measures to prevent issues.
• Be the main person in charge for IT audits and regulatory inspections.

- Risk & Control Management:

• Assess the effectiveness of controls, determine the impact of control issues, identify corrective action, and track issues to closure.
• Perform risk assessments, regulatory and compliance assessments for services and processes.
• Partnering with internal and external parties to manage technology and infra related risks and compliance to regulatory requirements.

- Compliance & Security:

• Ensure compliance with industry standards, regulatory requirements, and internal policies.
• Implement and maintain robust security measures to protect the company’s data and systems.

- Foster a culture of continuous improvement and operational excellence.

- Manage of team of IT professionals in Singapore.

Requirements:

• Degree in Computer Science, Information Technology, or a related field.
• Minimum of 10 years of experience in IT Infrastructure & Security management, preferrably within Financial Services/ Fintech enviroment
• Experience in monitoring, production support and troubleshooting issues.
• In depth knowledge of cloud services, in particular AWS and Azure Clouds.
• Familiar with information security, audit and risk management functions.
• Strong problem-solving and analytical abilities.
• Excellent communication and interpersonal skills.
• Fluency in English and Chinese.
• Experience in the financial industry and knowledge of Singapore’s regulatory requirements.
• Knowledge of crypto and related infrastructure are a plus.

Morgan McKinley is seeking an IT Security Engineer for a 12 month contract assignment with a possibility to extend or to go perm!

Key Responsibilities:

• Implement a security architecture blueprint ensuring cohesive interaction among applications, infrastructure, and operational security.
• Define processes, provisioning, and interfaces while providing actionable recommendations.
• Execute security vulnerability scanning activities (HCR/NVA/Pen Testing/SAST/DAST) and address identified findings.
• Manage access management and SIEM tools within the organization's environment.
• Facilitate external auditing processes.
• Ensure application-level and OS-level patching and operational housekeeping.
• Execute server and application hardening procedures.
• Uphold IM8 policy, conduct vulnerability assessments, and manage security incident detection and reporting.
• Oversee SSL certificate renewals and other operational security processes.

Qualifications:

• Minimum 2+ years of experience in IT Cyber Security domains, such as Identity Access Management, Security and Risk Management, Application and Network Security, and Vulnerability Management, along with a broad understanding of related areas.
• Proficiency in OS Administration (Linux/Windows).
• Hands-on experience with IBM Security Verify Access and IBM Qradar.
• Knowledge of Thales HSM, OpenSSL, and tools like Tenable Nessus and Burp Suite Enterprise.

Good to Have Skills (Optional):

• Familiarity with Singapore Government standards of security posture, including planning and executing SSAT, Security Compliance Check, and Security Vulnerability Scanning (DAST & SAST).
• Experience in working with security tools and environments.
• CISSP/CCSP/CCSK certification or equivalent is preferred.

Interested candidates may apply through the application system or send it to [email protected]. Shortlisted candidates will be notified.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan Mckinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.morganmckinley.com/sg/privacy-policy. You acknowledge that you have read, understood, and agree with the Privacy Policy.


Morgan McKinley Pte Ltd
Koh Boon Sien
EA Licence No: 11C5502
EA Registration No. R1110345

Company’s Profile

Julian Grey’s client is a solution provider for security and enterprise applications.

Responsibilities

• Plan, implement, manage, monitor, and upgrade IT security solutions.
• Support projects by delivering project deliverables and completing milestones.
• Develop and maintain technical, operational, and configuration documentation necessary for project implementation.
• Coordinate and manage vendors for product implementation and troubleshooting.
• Evaluate security products and conduct Proof of Concept (POC) to verify the effectiveness of security measures, ensuring their continued efficacy post-implementation.
• Provide technical support and incident response for IT security infrastructure components to the maintenance team.

Requirements

• Proficient in Endpoint Security solutions, including Anti-Malware, Host Firewall, Application & Change Control, Disk Encryption, and EDR.
• Knowledgeable in Identity & Access Control solutions, such as PKI solutioning, Hardware Security Module (HSM), Privileged Access Management, 2FA, and OS Hardening Policies.
• Implement Endpoint or Identity & Access Control Security tools.
• Familiarity with various operating systems like Windows or Linux.

Follow us for more updates, interview tips!

https://www.instagram.com/juliangreygroup/

https://www.linkedin.com/company/juliangreygroup/

https://www.facebook.com/juliangreygroup/

Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei

Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.

EA License No: 19C9568

Company’s Profile

Julian Grey’s client is a solution provider for security and enterprise applications.

Responsibilities

• Plan, implement, manage, monitor, and upgrade IT security solutions.
• Support projects by delivering project deliverables and completing milestones.
• Develop and maintain technical, operational, and configuration documentation necessary for project implementation.
• Coordinate and manage vendors for product implementation and troubleshooting.
• Evaluate security products and conduct Proof of Concept (POC) to verify the effectiveness of security measures, ensuring their continued efficacy post-implementation.
• Provide technical support and incident response for IT security infrastructure components to the maintenance team.

Requirements

• Proficient in Endpoint Security solutions, including Anti-Malware, Host Firewall, Application & Change Control, Disk Encryption, and EDR.
• Knowledgeable in Identity & Access Control solutions, such as PKI solutioning, Hardware Security Module (HSM), Privileged Access Management, 2FA, and OS Hardening Policies.
• Implement Endpoint or Identity & Access Control Security tools.
• Familiarity with various operating systems like Windows or Linux.

Follow us for more updates, interview tips!

https://www.instagram.com/juliangreygroup/

https://www.linkedin.com/company/juliangreygroup/

https://www.facebook.com/juliangreygroup/

Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei

Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.

EA License No: 19C9568

Company’s Profile

Julian Grey’s client is a solution provider for security and enterprise applications.

Responsibilities

• Plan, implement, manage, monitor, and upgrade IT security solutions.
• Support projects by delivering project deliverables and completing milestones.
• Develop and maintain technical, operational, and configuration documentation necessary for project implementation.
• Coordinate and manage vendors for product implementation and troubleshooting.
• Evaluate security products and conduct Proof of Concept (POC) to verify the effectiveness of security measures, ensuring their continued efficacy post-implementation.
• Provide technical support and incident response for IT security infrastructure components to the maintenance team.

Requirements

• Proficient in Endpoint Security solutions, including Anti-Malware, Host Firewall, Application & Change Control, Disk Encryption, and EDR.
• Knowledgeable in Identity & Access Control solutions, such as PKI solutioning, Hardware Security Module (HSM), Privileged Access Management, 2FA, and OS Hardening Policies.
• Implement Endpoint or Identity & Access Control Security tools.
• Familiarity with various operating systems like Windows or Linux.

Follow us for more updates, interview tips!

https://www.instagram.com/juliangreygroup/

https://www.linkedin.com/company/juliangreygroup/

https://www.facebook.com/juliangreygroup/

Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei

Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.

EA License No: 19C9568

Job Responsibilities

• Offer legal advice and guidance on a variety of issues, including contracts and agreements, negotiations, documentation, regulatory compliance, intellectual property, and litigation.
• Support the drafting, reviewing, and negotiation of legal documents.
• Provide counsel on intellectual property matters, including trademarks and copyrights, and assist with filing or defending infringement claims when necessary.
• Manage and oversee the administration of legal contracts.
• Ensure adherence to contract terms and conditions.
• Assist in resolving contract disputes and contribute to the development and implementation of compliance programs.
• Conduct compliance reviews and assessments.
• Offer guidance and representation in legal disputes, which may include preparing legal documents, performing legal research, and working with litigation attorneys.
• Help coordinate efforts with external counsel.

Job Requirements

• Degree in Law
• Minimum 5 years of experience in Contract Management & Dispute Resolution
• Experience in a tech firm or Airline industry will have added advantageous
• Minimum travelling for business needs is required

Interested candidates who wish to apply for the advertised position, please click on “Apply”. We regret that only shortlisted candidates will be notified.

EA License No.: 01C4394 (PERSOLKELLY Singapore PTE LTD)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Company’s Profile

Julian Grey’s client is a solution provider for security and enterprise applications.

Responsibilities

• Plan, implement, manage, monitor, and upgrade IT security solutions.
• Support projects by delivering project deliverables and completing milestones.
• Develop and maintain technical, operational, and configuration documentation necessary for project implementation.
• Coordinate and manage vendors for product implementation and troubleshooting.
• Evaluate security products and conduct Proof of Concept (POC) to verify the effectiveness of security measures, ensuring their continued efficacy post-implementation.
• Provide technical support and incident response for IT security infrastructure components to the maintenance team.

Requirements

• Proficient in Endpoint Security solutions, including Anti-Malware, Host Firewall, Application & Change Control, Disk Encryption, and EDR.
• Knowledgeable in Identity & Access Control solutions, such as PKI solutioning, Hardware Security Module (HSM), Privileged Access Management, 2FA, and OS Hardening Policies.
• Implement Endpoint or Identity & Access Control Security tools.
• Familiarity with various operating systems like Windows or Linux.

Follow us for more updates, interview tips!

https://www.instagram.com/juliangreygroup/

https://www.linkedin.com/company/juliangreygroup/

https://www.facebook.com/juliangreygroup/

Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei

Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.

EA License No: 19C9568

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s degree in computer science, information technology, or equivalent experience.
• 5+ Years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:CompTIA Security+
  Certified Information Systems Security Professional (CISSP)
  Certified Information Systems Auditor (CISA)
  Certified Information Security Manager (CISM)
  

Interested candidates who wish to apply for the advertised position, please clock on “Apply”. We regret that only shortlisted candidates will be notified.

EA License No.: 01C4394 (PERSOLKELLY Singapore PTE LTD)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

The successful candidate will support the development and implementation of a comprehensive compliance and governance framework to ensure ongoing adherence to relevant IT legislative and regulatory requirements (e.g., PDPA, MAS TRM, PCI). They will report regularly to IT Management on compliance status and engage with various teams to promote a strong organizational security posture.

Key Responsibilities:

• Compliance & Governance Framework Development: Assist in the creation and implementation of a compliance framework to maintain ongoing adherence to relevant IT legislative and regulatory requirements. Prepare and submit reports to IT Management on the framework’s effectiveness and any compliance gaps.
• Policy Compliance Monitoring: Support the development of a governing framework to uphold organizational information security policies, standards, and procedures, and report compliance status to IT Management.
• Risk Management for Emerging Technologies: Contribute to the evaluation and formulation of a risk management framework that addresses new technologies, such as the Internet of Things (IoT).
• Policy Review & Recommendations: Review and recommend updates to information security policies, standards, and procedures, accounting for deviation requests and audit findings.
• Information Security Scorecard Development: Develop and maintain an Information Security scorecard framework that assesses and reflects the organization’s compliance level against established policies, standards, and procedures.
• IT Risk Management & Assessment: Assist in developing the organizational IT risk management framework, performing periodic risk assessments.
• Awareness & Phishing Programs: Support the design and execution of information security awareness and phishing simulations to strengthen organizational security culture.
• IT Security Project Support: Collaborate on the evaluation, planning, and implementation of IT Security projects, ensuring alignment with compliance requirements.

Requirements:

• Experience: Minimum of 2 years in Information Security, with a focus on consultancy and IT risk management.
• Certifications: Security certifications such as CISSP, CISM, or CISA are preferred, with solid knowledge of IT legislation (e.g., PDPA, MAS TRM, PCI) and industry best practices.

Interested candidate who wish to apply for the advertised position, please click on “Apply Now”. We regret that only shortlisted candidates will be notified.

EA License NO.: 01C4394

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its overseas subsidiaries and affiliates collecting, using and disclosing your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services and such other purposes stated in our privacy policy. Our full privacy policy is available at www.persolkelly.com.sg. If you wish to withdraw your consent, please drop us an email to let us know.

Company Description

ESGpedia Pte Ltd is Asia’s leading ESG data and technology company, headquartered in Singapore. Its ESGpedia platform powers the ESCAP Sustainable Business Network (ESBN) Asia-Pacific Green Deal digital platform, the ASEAN Single Accesspoint for ESG Data (SAFE) pilot initiative, and the Monetary Authority of Singapore’s (MAS) Greenprint ESG Registry. With more than 5 million sustainability data points, ESGpedia serves as the Nexus of ESG, digitally empowering the financial sector, corporates, and SMEs to ensure compliance towards ESG regulations and attain their ESG goals.

ESGpedia is an Award Winner of the MAS Global FinTech Innovation Challenge Awards 2020, and a two-time awardee of the Financial Sector Technology and Innovation (FSTI) Proof of Concept (POC) grant, under the Financial Sector Development Fund administered by the MAS. ESGpedia is also an IMDA Spark company and GRI Licensed.

Job Summary

The primary role of the IT Security Officer is to ensure that it acts in the best integrity to align to ESGpedia’s Information Security Strategy and achieves ESGpedia’s information security objectives. It works with the various Committees of the Company (such as ISMS Committee, Risk Committee, Sustainability & BCM Committee) to undertake these aspects:

a) Establishing, implementing and maintaining the Information Security Management System in compliance with the Information Security Policies governed under ISO Standards, SOC2 Type 2 and all relevant local regulations pertaining to IT Security compliance standards.

b) Coordinating operational security activities for ESGpedia’s, managing the ISMS daily and conducting risk assessments, and in some cases timely remediations of internal/external audits points pertaining to all IT Security matters.

c) Escalating any issues, as necessary, to the respective Committees that govern after IT and Operational Security matters.

Job Responsibilities

a) Assume role of an Administrator and have oversight function of the system access management of AWS, Atlassian, and Microsoft platforms, including user access management, security configurations, and vulnerability assessments.

b) Conduct regular security assessments and audits to identify and mitigate potential risks and vulnerabilities.

c) Collaborate with cross-functional teams to develop, update, and enforce IT security policies, procedures, and guidelines.

d) Provide company-wide training on IT Security Awareness to promote a culture of security consciousness and best practices.

e) Stay up to date with the latest industry trends, threats, and technologies to proactively identify potential security risks and recommend appropriate countermeasures.

f) Manage vendor relationships, including selection, evaluation, and ongoing oversight to ensure compliance with security requirements.

g) Perform proof-of-concept evaluations for new security technologies, solutions, or enhancements.

h) Respond to security incidents, conduct investigations, and provide recommendations for incident response and remediation.

i) Collaborate with internal and external stakeholders to develop and implement incident response plans and business continuity strategies.

j) Maintain documentation of security processes, procedures, and controls to meet regulatory and compliance requirements.

k) Participate in security-related projects, initiatives, and risk assessments as required.

Qualifications for IT Security Officer

a) Graduate from a recognized University with a degree in Computer Science, IT Engineering subjects is preferred.

b) Professional certifications such as CISSP, Security+, CEH, or similar are welcomed.

c) Proven experience in administering AWS, Atlassian, and Microsoft platforms is advantageous.

d) In-depth knowledge of IT security principles, best practices, and standards.

e) Ability to monitor surveillance systems and respond to emergency situations

f) Excellent team-building and leadership skills

g) Ability to pay close attention to detail

h) Interest in protecting the people and assets within the organization or company

i) Able to handle stress well, maintain a positive attitude, full of initiative and able to work independently with minimum supervision.

Technical Skillset Requirements

• Min. 2- 3 years' working experiences in IT Security operations
• Good knowledge of Industry Standards such as ISO 27001, PDPA, NIST, PCI-DSS, MTCS and TRM.
• Good command of English, both written and spoken.
• Able to work independently & take ownership, an out-of-the box thinker with modern concepts and initiatives who likes to come out of the comfort zone with a can-do attitude.

Notice

We regret to inform that only shortlisted candidates will be notified. All applications will be treated with strictest confidence.

By submitting any application or resume to us, you will be deemed to have read and agreed to the terms of our Privacy Policy(https://esgpedia.io/privacy-policy/), and consented to us collecting, using, retaining and disclosing your personal information to prospective employers for their consideration.

You may refer and access our website(https://esgpedia.io/) for more information.

Company’s Profile

Julian Grey’s client is a solution provider for security and enterprise applications.

Responsibilities

• Plan, implement, manage, monitor, and upgrade IT security solutions.
• Support projects by delivering project deliverables and completing milestones.
• Develop and maintain technical, operational, and configuration documentation necessary for project implementation.
• Coordinate and manage vendors for product implementation and troubleshooting.
• Evaluate security products and conduct Proof of Concept (POC) to verify the effectiveness of security measures, ensuring their continued efficacy post-implementation.
• Provide technical support and incident response for IT security infrastructure components to the maintenance team.

Requirements

• Proficient in Endpoint Security solutions, including Anti-Malware, Host Firewall, Application & Change Control, Disk Encryption, and EDR.
• Knowledgeable in Identity & Access Control solutions, such as PKI solutioning, Hardware Security Module (HSM), Privileged Access Management, 2FA, and OS Hardening Policies.
• Implement Endpoint or Identity & Access Control Security tools.
• Familiarity with various operating systems like Windows or Linux.

Follow us for more updates, interview tips!

https://www.instagram.com/juliangreygroup/

https://www.linkedin.com/company/juliangreygroup/

https://www.facebook.com/juliangreygroup/

Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei

Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.

EA License No: 19C9568

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R1326740

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R1326740

Job Description:

We are seeking a highly skilled IT Security Specialist to ensure the security and integrity of an Application in one of the governments Agency. The successful candidate will be responsible for implementing, maintaining, and overseeing security procedures and protocols, ensuring compliance with regulatory requirements, and performing risk assessments.

Key Responsibilities:

• Security Compliance: Ensure the system complies with security policies, regulations, and standards as outlined by the Board, including ISO/IEC certifications (27001, 27017, 27018).
• Risk Assessment: Conduct risk assessments to identify potential threats to the system, assess vulnerabilities, and propose mitigation measures​.
• Security Audits and Testing: Coordinate and conduct security audits, penetration testing, and vulnerability assessments for hardware, software, and network components​.
• Incident Handling: Manage security incidents, including detection, containment, recovery, and root cause analysis​.
• Security Documentation: Maintain and update security policies, procedures, and reports, ensuring all documentation is up-to-date​.
• Personnel Management: Conduct background checks on personnel and ensure they meet the security clearance requirements​.
• Training and Awareness: Provide security training and awareness programs for internal staff and subcontractors​.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Certification in security standards such as ISO/IEC 27001, CISSP, or equivalent.
• Minimum 3-5 years of experience in IT security, risk management, or related fields.
• Experience in performing security assessments, audits, and implementing risk mitigation strategies.
• Familiarity with security frameworks like CIS, OWASP, and OSSTMM.
• Strong communication skills and the ability to work collaboratively with cross-functional teams.

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s degree in computer science, information technology, or equivalent experience.
• 5+ Years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:CompTIA Security+
  Certified Information Systems Security Professional (CISSP)
  Certified Information Systems Auditor (CISA)
  Certified Information Security Manager (CISM)
  

Interested candidates who wish to apply for the advertised position, please clock on “Apply”. We regret that only shortlisted candidates will be notified.

EA License No.: 01C4394 (PERSOLKELLY Singapore PTE LTD)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Company’s Profile

Julian Grey’s client is a solution provider for security and enterprise applications.

Responsibilities

• Plan, implement, manage, monitor, and upgrade IT security solutions.
• Support projects by delivering project deliverables and completing milestones.
• Develop and maintain technical, operational, and configuration documentation necessary for project implementation.
• Coordinate and manage vendors for product implementation and troubleshooting.
• Evaluate security products and conduct Proof of Concept (POC) to verify the effectiveness of security measures, ensuring their continued efficacy post-implementation.
• Provide technical support and incident response for IT security infrastructure components to the maintenance team.

Requirements

• Proficient in Endpoint Security solutions, including Anti-Malware, Host Firewall, Application & Change Control, Disk Encryption, and EDR.
• Knowledgeable in Identity & Access Control solutions, such as PKI solutioning, Hardware Security Module (HSM), Privileged Access Management, 2FA, and OS Hardening Policies.
• Implement Endpoint or Identity & Access Control Security tools.
• Familiarity with various operating systems like Windows or Linux.

Follow us for more updates, interview tips!

https://www.instagram.com/juliangreygroup/

https://www.linkedin.com/company/juliangreygroup/

https://www.facebook.com/juliangreygroup/

Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei

Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.

EA License No: 19C9568

Company’s Profile

Julian Grey’s client is a solution provider for security and enterprise applications.

Responsibilities

• Plan, implement, manage, monitor, and upgrade IT security solutions.
• Support projects by delivering project deliverables and completing milestones.
• Develop and maintain technical, operational, and configuration documentation necessary for project implementation.
• Coordinate and manage vendors for product implementation and troubleshooting.
• Evaluate security products and conduct Proof of Concept (POC) to verify the effectiveness of security measures, ensuring their continued efficacy post-implementation.
• Provide technical support and incident response for IT security infrastructure components to the maintenance team.

Requirements

• Proficient in Endpoint Security solutions, including Anti-Malware, Host Firewall, Application & Change Control, Disk Encryption, and EDR.
• Knowledgeable in Identity & Access Control solutions, such as PKI solutioning, Hardware Security Module (HSM), Privileged Access Management, 2FA, and OS Hardening Policies.
• Implement Endpoint or Identity & Access Control Security tools.
• Familiarity with various operating systems like Windows or Linux.

Follow us for more updates, interview tips!

https://www.instagram.com/juliangreygroup/

https://www.linkedin.com/company/juliangreygroup/

https://www.facebook.com/juliangreygroup/

Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860

Shortlisted candidates will be notified

Quek Jian Wei

Reg No. R22110928

Julian Grey Corporate Advisory Pte. Ltd.

EA License No: 19C9568

We’re searching for a Lead Consultant, IT Security to be part of our diverse team of talents here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

• Manage team of cyber day 2 engineering resources within Identity and Access Management & PKI track providing guidance, mentorship, performance evaluations.
• Involve in project work to deliver security service which require deeper level of expertise and to drive resolution of operational issue which are escalated to ensure satisfactory closure.
• Responsible for tracking the progress of building within Identity and Access Management & PKI technical competencies, develop training and growth plans within specialization track.
• Involve in the hiring process for cyber day 2 to expand the existing portfolio of services (e.g. network security, endpoint security, security analytics etc).
• Involve in the presale activities for cyber day 2, including defining the scope of cyber day 2 services, sizing the effort to support the security technologies deployed in client environment, determine what can be supported internally and what can be delivered via partnership with other parties in NCS or with sub-contractors and process standardization & improvement.
• Assist in improving the quality of service for cyber day 2 team.
• To be one of the Subject Matter Expert (or trusted technical advisor) in Identity and Access Management & PKI cyber technologies during presale and day 2 phases.
• Mentoring engineers or interns to ensure they can assist the team in executing operational tasks for projects.
• Accountable for various tasks above and provide regular update to the Practice Lead

We’re searching for a Lead Consultant, IT Security to be part of our diverse team of talents here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

• Manage team of cyber day 2 engineering resources within specialization track providing guidance, mentorship, performance evaluations.
• Involve in project work to deliver security service which require deeper level of expertise and to drive resolution of operational issue which are escalated to ensure satisfactory closure.
• Responsible for tracking the progress of building technical competencies, develop training and growth plans within specialization track.
• Involve in the hiring process for cyber day 2 to expand the existing portfolio of services (e.g. network security, endpoint security, security analytics etc).
• Involve in the presale activities for cyber day 2, including defining the scope of cyber day 2 services, sizing the effort to support the security technologies deployed in client environment, determine what can be supported internally and what can be delivered via partnership with other parties in NCS or with sub-contractors and process standardization & improvement.
• Assist in improving the quality of service for cyber day 2 team.
• To be one of the Subject Matter Expert (or trusted technical advisor) in cyber technologies during presale and day 2 phases.
• Mentoring engineers or interns to ensure they can assist the team in executing operational tasks for projects.
• Accountable for various tasks above and provide regular update to the Practice Lead

Responsibilities:

• Lead a small team, manage daily operations, provide guidance, and foster a collaborative work environment.
• Track and address security vulnerabilities, and implement controls to mitigate risks.
• Review security testing reports, monitor alerts, and analyze IT system logs.
• Conduct threat intelligence and identify indicators of cybersecurity attacks.
• Develop and distribute security advisories, and run security awareness programs.
• Assist with business impact analysis and maintain the cybersecurity risk register.
• Support vendor due diligence and lead third-party risk management.
• Develop business continuity plans, incident response, and disaster recovery procedures.
• Lead Incident Management Team meetings and update stakeholders on cyber incidents.
• Identify and resolve operational issues in incident detection and response.
• Support internal and external audits.
• Collaborate with regional offices to enhance IT security and ensure compliance.
• Perform Line 2 IT Security functions, including policy development and implementation.

Requirements:

• Passionate about security with up-to-date knowledge of threats and technologies.
• Strong understanding of cyber-attack vectors and relevant controls.
• Experience managing security solutions like Anti-malware, 2FA, and DLP.
• Solid understanding of Risk Management principles.
• Ability to maintain real-time security awareness with distributed teams.
• Familiarity with standards like MAS TRM, ISO 27001, and NIST SP 800.
• Proven ability to delegate, mentor, and drive successful project completion
• CISM certification is an advantage.

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected].

We regret to inform that only shortlisted candidates will be contacted.

PERSOLKELLY Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1875348 (Tewari Priyanka)

**********************************

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available