Total 803 it manager job vacancies in Legal / Public / Security category in Singapore

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gwKjVuR6

• Autonomy to make key decisions
• Permanent role with an established company
• Normal working hours

About the company

Our client is an established multinational end user company. As part of their plan to invest in technology, they are now hiring a new Cyber Defense Incident Responder / Security Manager Incident response / SOC / SIEM to be part of their Cyber Security SOC team here in Singapore.

About the job

Working in a team of >3 headcounts within the Incident Response / SOC team, your role involves:

• Managing security operation to ensure implemented security technologies and controls are effective and adequate to protect the company
• Working closely with internal and external parties to manage the operation of SOC
• Conducting triage of cybersecurity incidents, investigation and incident response for Cyber security incidents
• Identifying root cause and remediating of cybersecurity incidents
• Providing advisory on security threats and vulnerabilities. This includes performing vulnerability scans and analyze results of scans
• Directing post-mortem activities following critical incidents
• Analysing and digesting the threat intelligence and presenting it to the relevant stakeholders in a report
• Overseeing the development and execution of corporate security awareness and training programs. This includes getting the buy-in of senior business stakeholders which includes securing funding for IT security programs
• Enhancing early detection capability - Driving lessons learned activities after incidence closure to identify potential gaps in security control

Skills and experience required
As a successful applicant, you will have at least 7 years of experience in IT Security / SOC / Incident response / SIEM / Splunk / Incident response.

Scripting experience will be of added advantage.

Whats on offer

This is an excellent opportunity to join an established company with ambitions to scale up their IT security capabilities. Security initiative will be well supported by top business management.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gwKjVuR6 (EA: 94C3609/ R1219669)

• Provide strategic legal counsel and advice to the management and business units on various legal and compliance matters.
• Assist with the development and implementation of internal compliance policies and procedures. Analyse and evaluate internal processes and provide recommendations to improve legal risk management.
• Develop compliance training programmes for employees to promote awareness and understanding of internal policies and legal and compliance requirements.
• Manage disputes, litigation and any regulatory matters that may arise or affect the company’s business in local and regional offices.
• Advise on corporate governance matters and ensure compliance with local regulatory requirements, such as meeting filing and lodgment requirements.
• Keep abreast of emerging compliance risks affecting the company. Continuously monitor new laws and regulations relevant to the business and ensure that the company's practices comply with the foregoing.
• Review a broad range of contracts, including sales/distributorship contracts, purchase contracts and service contracts. Identify areas of improvement to legal precedents and develop new templates and bespoke contracts in line with business needs.
• Liaise with China HQ on reporting and approval matters.
• Assist the Head of Department in leading and guiding the legal function.
• Handle any other work assigned by the Head of Department and management.

At AIA we’ve started an exciting movement to create a healthier, more sustainable future for everyone.

As pioneering innovators for over 100 years, we’re now transforming our organisation to be faster, simpler and more connected. Because we want to be even better equipped to develop digital solutions and experiences that help more people live Healthier, Longer, Better Lives.

To get there, we need people with tech/digital/analytics expertise and passion to help develop positive, sustainable change through digitally enhanced experiences that will impact the lives of millions of people and create a healthier future for everyone.

If you believe in developing a better tomorrow, read on. 

About the Role

WHAT YOU’LL BE DOING:

• This role includes responsibilities of managing 3 team members and overseeing operations, subsidiaries, assigned POA over specific matters and/or other appointments such as Data Protection Officer

• Maintain an oversight of all the alerts from FINTECH, MASNET, Group Cyber SOC for AIASG and provide support to incident response personnel to ensure all deliverables are met within SLAs.

• Maintain an oversight of related security posture and baseline and ensure related vulnerabilities are remediated timely as per established standard to minimize risk exposures.

• Drive local security projects and group security project facilitation.

• Develop and maintain local incident response playbooks and other detection/response related standard operating procedures to ensure compliant to the MAS regulations.

• Act for the incident response action approval chain and support any incident response obligation for third parties.

• Respond to computer security incidents according to established response processes, leverages subject matter expertise where established processes do not exist.

• Acts as a subject matter expert regarding CSIRT incident response processes from local perspective.

• Provides guidance to other stakeholders during the incident response process and follow & track all the remediation actions till incident closure.

• Chair local IMT (Incident Management Team) calls and keep senior management and stakeholder updates on the progress of cyber incident management.

• Identify and manage potential and actual operational issues within the incident detection/response domain and take corrective action whenever required

• Work as a liaison between the SOC Team, other departments, and upper management for AIASG and potentially local regulators

• Manage relationships with our customers’ and third parties’ tech incident teams and frequently interact with client management for any security incident related queries.

• Work closely with the Group SOC team to manage ongoing service delivery and onboarding of local process within the SOC alignment and compliant to the local regulations.

• Level and type of budgetary or financial control of the position, responsible for budget of Information Security and Governance unit.

• Other quantitative / qualitative measures, e.g. time, quality, feedback, etc., that are tied to the objective of the area of responsibilities.

• Downward trend in cyber security incidents and less DP incidents.

• Uplift Cyber Security process, controls and maturity level for Cyber Security Incident.

• Support for the Cyber Security score in the annual MAS CRAFT report.

WE ARE LOOKING FOR SOMEONE WITH | YOU WILL HAVE:

• Bachelor’s degree of computer science, computer engineering or other relevant degrees

• Minimum 8 years of IT experience with at least 4 years’ of experience in cyber security incident handling in a regulated environment (e.g. FSI, government etc.)

• Strong knowledge of cybersecurity incident management covering identification, containment, response, recovery and reporting

• Sound knowledge of Cloud, Cyber Monitoring, Threat Hunting, and Cyber Threat Intelligence

• Natural ability to take the lead and drive the investigation of complex security issues, with strong analytical and problem-solving skills

• Self-driven professional interested in the world of cyber security

• Standby for the serious security incident during weekend or off-working hours if necessary

• Hands-on experience for the cyber security incident scenario preparation and tabletop exercise

• Technical understanding of enterprise network, various components and designs and strong understanding of Operating Systems, Applications, Databases in both on-prem and Cloud environment, how they are exploited and how to defend

• Good knowledge of conducting RCA for the incident

• Information Systems Security professional certifications, such as CISSP, CISA, CISM, CSSP or Cloud related.

• A team-player taking ownership and helping colleagues.

• Excellent Analytical, Coordination and Interpersonal Skills.

• Good communication skills and the communication network of the incumbent is expected to be internally within Technology Department (30%) and Enterprise Risk Management, Compliance, Internal Audit (15%), Business Departments (10%), Senior Management and Sub-Committees (10%),Group Technology and Group Information Security (20%) and external with Vendors and Service Providers (15%).

#LI-SC1

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.

Overview:

Cybersecurity Manager is responsible for managing a security team in effective IT security compliance programs involving activities such as reviewing and development of security policies, processes or procedures and guidelines, ensuring policy compliance and conducting security reviews.

In addition to the above, this role also involves cybersecurity services management and enhancement as part of the service offering development. This role will also be heavily involved in tender participation, providing security solution consultation and assist the Assistant Director on resource planning.

Responsibilities:

• Develop new cybersecurity services and enhance current ones as part of continual service offering improvement.
• Assist the Solution Architect team by participating bid and tender solutioning, providing input on the right services to be offered for all requirements related to cybersecurity.
• Establish third-party engagement with principles and distributors to expand cybersecurity solution options.
• Manage a diverse team of professional resources providing Information Security and compliance support for customers, including managing matrix reporting relationships and consultants.
• Effectively assess Information Security resource allocation and manage resource productivity, prioritization of work and individual goals/objectives, including performing bi-annual and annual performance evaluations.
• Establish and enhance cyber Threat Intelligence management, including methodologies for threat analysis, intelligence dissemination and vulnerability management services.
• Design and implement the cyber Threat Intelligence strategy, conducting cybersecurity reviews and proposing vulnerability management recommendations.
• Communicate the threat landscape, actor tactics, active campaigns, and risks to business leadership and IT teams.
• Manage operational initiatives and capital planning projects, as deemed necessary by the Senior Management.
• Produce/deliver management level presentation to higher management of both internal team and customers.
• Perform security related duties as needed for risk management, audit and compliance.
• Work closely with and support the Senior Management to maintain the Information Security Compliance Program for internal infrastructure and customers.
• Manage and support emerging frameworks and processes related to security for cloud computing, including developing and managing security operational processes/procedures.
• Develops and/or interprets information security policies, standards and procedures and manages the maintenance of revisions and updates.

Requirements:

• Minimally Diploma/Degree in Information Technology or equivalent.
• 8 to 10 years of experience with a broad range of exposure to Information Security aspects, including security controls, baseline standards, general business planning, system analysis, system development, maintenance and application development.
• 6+ years of experience with information security, regulatory compliance and risk management concepts.
• 5+ years’ experience with managing team(s) and project(s) and with working in matrixed high-performance teams.
• General understanding of networking and communication techniques including WANs, LANs, Internet, Intranet, protocols, such as TCP/IP and their impact on security.
• Proficient in cyber threat intelligence frameworks e.g. Mitre ATT&CK, Cyber Kill Chain.
• Certifications like Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in the Governance of Enterprise IT (CGEIT) or others are an added advantage.
• Strong communication and stakeholder management skills.

Public Policy Program Manager

Location: Singapore

Position Type: Full-time for six-month contract

Job Overview: Work hard, have fun, and make history with our client's Public Policy. We are looking for a hardworking and innovative individual to support our Public Policy Asia Pacific and Japan team on a broad range of policy issues throughout the Asia Pacific region and in particular ASEAN. Our policy issues are broad, forward-thinking, and driven by what is best for our customers. The role is for a six-month contract.

Key Responsibilities:

• Working with the ASEAN Public Policy Director and the Strategy, Operations, and Enablement team, the Public Policy program manager will specifically help support the running of the ASEAN public policy team, drive accountability of goals, and help manage internal reporting process. Additionally, he/she will help design training programs to enhance the skills and capabilities of the team, research and implement tools and technologies that contribute to collaboration and communication across the team, and help oversee project management, ensuring timely delivery of initiatives within budget and scope.
• The Public Policy program manager will work collaboratively with the team to ensure alignment, act as a liaison between different sub-teams to ensure seamless communication and integration of initiatives, and establish, maintain relationships with key stakeholders to drive successful program outcomes, and provide regular updates and reports on the progress and impact of strategy, operations, and enablement programs.
• The position will be based in Singapore. The role is broad-based and will require an individual who can thrive in a dynamic environment. Successful candidates are organized, detail-oriented, and effective communicators. Top of FormBottom of Form

Basic Qualifications:

- BA/BS required
- Work, internship, or other leadership experience in a professional environment, with an emphasis and demonstrated interest in public policy and government relations work

Preferred Qualification:

- A keen understanding of the legislative and regulatory policy process as well as the technology industry
- Strong written and verbal communication skills and experience creating and effectively delivering factual, relevant, and easily understandable talking points and other messaging
- Ability to maintain the highest personal levels of ethical conduct, confidentiality, and integrity
- Highly effective oral, written, and interpersonal communication skills; demonstrated ability to effectively and comfortably interact at all corporate and political levels
- Self-starter who can take general direction and produce specific results
- Ability to influence, negotiate with, and persuade others, with the ability to intelligently build a course of action, analyze trade-offs, and make recommendations even in ambiguous situations

Jessie Hoe Huey Miin

CEI R1103861

EA: 99C4599

Job Description:

Administrate corporate legal affairs.

Review and provide legal advice on agreements, contacts and other legal documents.

Provide legal protection and risk management advice to management.

Provide and interpret legal information, conduct training and disseminate appropriate legal requirements to staff.

Liaise with Tokyo head office, legal advisors, company secretary.

Negotiate with external parties.

Set, review and manage policies on corporate governance.

Perform required procedures for internal control and compliance.

Organizing Board of Directors Meeting and Annual General Meeting.

Manage Human Resources issues.

Review and draft Employee Handbook.

Recruit staffs including interviews, contracting employment agreements and other necessary procedures.

Maintain office environment by arranging renovation, leasing, office equipment and supplies.

Conduct company events (e.g. company trip).

Support credit control of counterparties.

Carry out other duties assigned by Managing Director, Deputy Managing Director and Finance & Administration Manager as and when necessary.

Job Requirements:

Bachelor or Master degree of Law is required.

At least 8 years of relevant experience in oil trading / oil and gas industries.

At least 4 years work experience in a legal function.

Good knowledge of corporate law, contracts management and compliance.

Proficient in MS Office (Excel, Word, Power Point).

Ability to communicate in fluent English to communicate with colleague and clients well.

Ability to speak and write in fluent Japanese language is required to communicate and negotiate with Japanese speaking associates and clients and to report to headquarter managements and employees in Japan who cannot speak and write in English well.

Strong negotiation and analytical skills with a strategic mind.

Meticulous with good communication and presentation skill.

An effective team player who is innovative and forward thinking.

Note:

We regret that we will not be able to respond to all applications as only shortlisted candidates will be notified.

Bloomberg unleashes the power of information and technology to bring clarity to a complex world. Global customers rely on us to deliver accurate, real-time business and market-moving information that helps them make critical financial decisions.

We're seeking a risk and security professional to join our Singapore office as a Territory Security Manager overseeing our operations in Southeast Asia. As part of the Bloomberg Security Operations team, you will join a global team that ensures the safety and security of our employees, facilities, and business operations around the world. You will actively build, shape, and develop our security operations, Global Health and Life safety, and Incident Management programs, and will be central to developing the organizational resilience culture here at Bloomberg.

We’ll trust you to:

• Assist with the oversight of all security operations and emergency preparedness functions including, but not limited to, physical, event and travel security, incident response and life safety
• Support Bloomberg's business by mitigating risks to employees, facilities, and business operations through thoughtful regional specific exercises and building relationships with key stakeholders both within the business and the wider security community
• Develop and maintain strong relationships and rapport with key stakeholders, including partnering effectively with regional Incident Management Team (IMT) members, office bureau chiefs and key department managers
• Partner with our Enterprise Resilience and Incident Management (ERIM) team to identify and assess threats and events that have the potential to impede life, safety, or operational incidents
• Assist, along with our Incident Management Teams (IMT), in ensuring the timely escalation and resolution of incidents to minimize business disruption
• Oversee and drive the Global Health and Life Safety (GHLS) program within APAC, ensuring adherence to local occupational health and safety standards
• Expand our emergency response program across APAC in collaboration with the IMBC, GHLS and wider Security Operations team
• Design, implement and oversee security for large-scale events
• Identify opportunities to enhance, streamline and refine our security program, and coordinate with the business and leadership on improvements
• Conduct Threat and Risk Assessments (TARA) for Bloomberg offices, nodes, warehouse and other assets
• Partner with our Security Technology team to identify security technology gaps and implement new technology solutions
• Support in the enhancement and production of Bloomberg's geopolitical intelligence output

You’ll need to have:

• Tertiary Degree (security, risk/crisis, international relations, etc.) or other relevant qualifications within a security, Occupational Health and Safety (OHS), crisis or emergency management environment
• Minimum 5 years’ experience in security risk management, incident management or OHS, ideally in a multinational finance or news organisation
• Experience of developing OHS programs and knowledge of OHS standards
• Strong cultural awareness through experience working in and/or covering countries in and around the Asia Pacific
• Highly effective communication and collaboration skills, with ability to build strong relationships across various department, and internal and external stakeholders
• Strong project management skills with experience managing security projects from start to finish
• Proficiency in security technologies and software
• Ability to work in a high-pressure and deadline focused environment while being able to understand, assess and prioritise business needs
• Ability to travel across Asia Pacific as needs arise
• Excellent presentation and communication skills in English, including attention to detail and the ability to create and deliver effective presentations
• Demonstrated continuous career progression in an organisation

We’d love to see:

• A well-established network within the security profession
• Experience managing physical security teams
• Experience in vendor management and budget negotiations
• A working knowledge of the operational and technical infrastructure of financial firms and the financial markets

If this sounds like you:

Apply if you think we're a good match. We'll get in touch to let you know what the next steps are, but in the meantime feel free to have a look at this: https://www.bloomberg.com/professional

Why Bloomberg?

We’re individuals with diverse backgrounds, talents, and experiences who take on big challenges and create even bigger impact through our work. We’re interested in what makes you you, and how we can create opportunities for you to channel your unique, personal energy and grow to your fullest potential.

Learn more about our office and benefits:

Singapore | www.bloomberg.com/singapore

Bloomberg is an equal opportunity employer and we value diversity at our company. We do not discriminate on the basis of age, ancestry, color, gender identity or expression, genetic predisposition or carrier status, marital status, national or ethnic origin, race, religion or belief, sex, sexual orientation, sexual and other reproductive health decisions, parental or caring status, physical or mental disability, pregnancy or maternity/parental leave, protected veteran status, status as a victim of domestic violence, or any other classification protected by applicable law.

Bloomberg provides reasonable adjustment/accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable adjustment/accommodation to apply for a job or to perform your job. Examples of reasonable adjustment/accommodation include but are not limited to making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you would prefer to discuss this confidentially, please email [email protected] (Americas), [email protected] (Europe, the Middle East and Africa), or [email protected] (Asia-Pacific), based on the region you are submitting an application for.

• Draft, review and negotiate a wide range of commercial agreements in the construction matters.
• Study and advise on possible legal risk and provide mitigation strategies.
• Understand the laws, rulings, and regulations for construction transactions.
• Handle regulatory and compliance-related services and contractual matters.
• Coordinate and work closely with external counsels.

Requirements:

• Bachelor's degree in Law (LLB) with a valid practicing certificate.
• At least 5 years law practice specifically in Construction/Contract Law.
• Strong knowledge in different standard forms of contracts (PSSCOC, SIA, LTA, REDAS, FIDIC, NEC).
• Exceptional legal, transactional and management skills.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R1326740

Job Description:
1. Drive proactive paid/owned/earned storytelling across product and tech - which requires the hire to keep on top of product updates, shape comms strategies and narratives around these developments and then execute
2. Support executives in external engagements
3. Oversee our corporate communications review processes, including press room management, reporting and media relationship management
4. Provide support for key campaigns and media activities

Key Skills and Requirements:
- Bachelor’s degree (no preference in field)
- Minimum 7 years of experience: Technology PR, media relations, crisis/issues management
- Experience working in a regional or global team in a fast-growth company
- Proficient in English (written and spoken)
- Hands-on and motivated by challenging work

Responsibilities

• Coordinating all public relations activities

• Developing a marketing communications plan including strategy, goals, budget and tactics

• Developing a media relations strategy, seeking high-level placements in print, broadcast and online media

• Develop a marketing communications plan including strategy, goals, budget and tactics.

• Manage media inquiries and interview requests

• Create content for press releases, byline articles and keynote presentations

• Evaluate opportunities for partnerships, sponsorships and advertising on an on-going basis.

• Working hours are from 9pm to 5am

Requirements and skills

• Ability to work under pressure

• High standard of organizational and communication skills

• Must have existing and active connections with Thailand, Vietnam and Korea candidates

• Problem-solving skills, ability to think on your feet

• Travelling to Thailand, Vietnam and Korean is required

• Solid verbal and written communication skills in Thai, Vietnamese and Korean

JOB OBJECTIVE

CDS Asia provides a range of cybersecurity services and solutions to our regional clients with a strong focus on Operational Technology. Our ambition is to scale up our existing business and increase our footprint in the region with a refreshed strategy and mandate to leverage our global capability and win new business in our core markets.

We are actively seeking a Senior Cybersecurity Engineer to take a leading role in design, development and implementation of IT/OT cybersecurity solutions within our existing install base.

The role will require someone that this is a problem solver, determined and enthusiastic. They will bring experience of implementing a wide variety of cybersecurity products and solutions within large complex system development. They will have the ability to apply cybersecurity and principles to organizational requirements and be able to identify and remediate critical infrastructure systems that were designed without system security considerations.

The successful Candidate will enjoy a rewarding role full of new challenges and be part of a company that provides highly complex solutions in the most critical operational environments where robust safety and resilience standards are applied.

ROLES & RESPONSIBILITIES

• Define overall security solution strategies based on customer requirements.
• Work with Thales engineering teams to integrate cybersecurity solutions into existing and new platforms.
• Act as the single point of contact for customer security queries.
• Contribute to the management of the risks and/or opportunities during the project implementation phase, including managing subcontractors and partners
• Analyse design constraints, analyse trade-offs and detailed system and security design, and consider life cycle support.
• Build, test, and modify product prototypes using working models or theoretical models.
• Design and develop cybersecurity or cybersecurity-enabled solutions.
• Design or integrate appropriate cybersecurity capabilities into overall system designs.
• Develop and execute system testing and validation procedures and documentation.
• Develop architectures or system components consistent with technical specifications.
• Identify and direct the remediation of technical problems encountered during testing and implementation of new systems.
• Identify, assess, and recommend cybersecurity or cybersecurity-enabled products for use within a system and ensure that recommended products are in compliance with evaluation and validation requirements.
• Perform risk analysis whenever an application or system undergoes a major change.
• Provide guidelines for implementing developed systems to customers or installation teams.
• Store, retrieve, and manipulate data for analysis of system capabilities and requirements.
• Utilize models and simulations to analyse or predict system performance under different operating conditions.
• Implement and integrate various system development life cycle methodologies into development environment.
• Conduct a market analysis to identify, assess, and recommend commercial, off-the-shelf, and open source products for use within a system and ensure recommended products are in compliance with evaluation and validation requirements.
• Design and develop system administration and management functionality for privileged access users.
• Design, implement, test, and evaluate secure interfaces between information systems, physical systems, and/or embedded technologies.
• Ensure that design and development activities are properly documented and updated as necessary.
• Design to security requirements to ensure requirements are met for all systems and/or applications.
• Develop detailed design documentation for component and interface specifications to support system design and development.
• Implement designs for new or existing system(s).
• Perform security reviews and identify security gaps in architecture.
• Provide input to implementation plans, standard operating procedures, maintenance documentation, and maintenance training materials
• Provide support to test and evaluation activities.
• Trace system requirements to design components and perform gap analysis.
• Analyse user needs and requirements to plan and conduct system development.
• Develop designs to meet specific operational needs and environmental factors (e.g., access controls, automated applications, networked operations.
• Collaborate on cybersecurity designs to meet specific operational needs and environmental factors (e.g., access controls, automated applications, networked operations, high integrity and availability requirements, multilevel security/processing of multiple classification levels, and processing Sensitive Compartmented Information).

WORK EXPERIENCE REQUIREMENTS

• Minimum of 8 years’ experience of security engineering
• Strong critical thinking and problem-solving skills and a passion for information security
• Experience of working with internal experts/external vendors to resolve technical issues independently
• Fluent communicator in both written and spoken English;
• Previous consulting or professional services experience
• Knowledge of Aviation, Government, Defence and Transportation sectors
• Knowledge of computer networking concepts and protocols, and network security methodologies.
• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
• Knowledge of regional laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
• Knowledge of cyber threats and vulnerabilities.
• Knowledge of OT security architecture.
• Knowledge of industrial evaluation and validation requirements.
• Knowledge of installation, integration, and optimization of system components.
• Knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Knowledge of information security systems engineering principles.
• Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
• Knowledge of network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML).
• Knowledge of various operating systems.
• Knowledge of secure configuration management techniques.
• Knowledge of software development and engineering models (e.g., Agile, Lean, Waterfall Model, Spiral Model).
• Knowledge of system software and organizational design standards, policies, and authorized approaches (e.g., International Organization for Standardization [ISO] guidelines) relating to system design.
• Knowledge of system life cycle management principles, including software security and usability.
• Knowledge of Supply Chain Risk Management Practices
• Knowledge of critical infrastructure systems with information communication technology that were designed without system security considerations.
• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defence-in-depth).
• Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
• Knowledge of countermeasure design for identified security risks.

QUALIFICATION, CERTIFICATION & EDUCATIONAL REQUIREMENTS

• Degree in Information Security (preferred) or Information Technology or Computer Science
• Certified Information Systems Security Professional (CISSP), or
• Certified Information Security Manager (CISM)

Preferred

• Information Security Masters degree from either:U.S. National Centres of Academic Excellence in Cyber Defence; or, those certified by U.K. National Cyber Security Centre
  
• CREST Registered Technical Security Architect (CRTSA); or
• Information Systems Security Architecture Professional (CISSP-ISSAP).

Public Policy Program Manager

Location: Singapore

Position Type: Full-time for six-month contract

Job Overview: Work hard, have fun, and make history with our client's Public Policy. We are looking for a hardworking and innovative individual to support our Public Policy Asia Pacific and Japan team on a broad range of policy issues throughout the Asia Pacific region and in particular ASEAN. Our policy issues are broad, forward-thinking, and driven by what is best for our customers. The role is for a six-month contract.

Key Responsibilities:

• Working with the ASEAN Public Policy Director and the Strategy, Operations, and Enablement team, the Public Policy program manager will specifically help support the running of the ASEAN public policy team, drive accountability of goals, and help manage internal reporting process. Additionally, he/she will help design training programs to enhance the skills and capabilities of the team, research and implement tools and technologies that contribute to collaboration and communication across the team, and help oversee project management, ensuring timely delivery of initiatives within budget and scope.
• The Public Policy program manager will work collaboratively with the team to ensure alignment, act as a liaison between different sub-teams to ensure seamless communication and integration of initiatives, and establish, maintain relationships with key stakeholders to drive successful program outcomes, and provide regular updates and reports on the progress and impact of strategy, operations, and enablement programs.
• The position will be based in Singapore. The role is broad-based and will require an individual who can thrive in a dynamic environment. Successful candidates are organized, detail-oriented, and effective communicators. Top of FormBottom of Form

Basic Qualifications:

- BA/BS required
- Work, internship, or other leadership experience in a professional environment, with an emphasis and demonstrated interest in public policy and government relations work

Preferred Qualification:

- A keen understanding of the legislative and regulatory policy process as well as the technology industry
- Strong written and verbal communication skills and experience creating and effectively delivering factual, relevant, and easily understandable talking points and other messaging
- Ability to maintain the highest personal levels of ethical conduct, confidentiality, and integrity
- Highly effective oral, written, and interpersonal communication skills; demonstrated ability to effectively and comfortably interact at all corporate and political levels
- Self-starter who can take general direction and produce specific results
- Ability to influence, negotiate with, and persuade others, with the ability to intelligently build a course of action, analyze trade-offs, and make recommendations even in ambiguous situations

Jessie Hoe Huey Miin

CEI R1103861

EA: 99C4599

Summary:

As a IT Security Engineer, you will provide IT security and vulnerability management support for a suite of business applications. You will support Corporate Business Systems, used by over 6,000 users to fulfill the agency’s mission to protect the nation’s Digital Way of Life and defend Singapore’s Critical Information Infrastructure (CII) to ensure the continuous delivery of essential services to all Singapore residents. You will be part of a 20+ person full-service application delivery team.

Job Description:

• Responsible for IT Security portfolio of a for large scale IT infrastructure implementation project. Develop, implement, integrate, administer, maintain, and enhance enterprise security services, technologies, and platforms. This includes, but is not limited to Vulnerabilities Assessment, Penetration Testing, Privileged Access Management, Dynamic Access Management, Identity Governance & Administration, Endpoint Detection and Response, and etc.
• Building of policies to enforce controls to meet business use cases
• Develop and communicate policies, procedures, standards, and controls to enhance the user experience, manage risk, and to ensure compliance with legal, regulatory, and contractual requirements;
• Develop automation scripts for patching or automating security administration, monitoring or reporting tasks using Perl, Python, etc
• Conduct tracking of patch management activities from initial reporting of vulnerabilities / availabilities of patches to successful remediation for servers and network routers/switches.
• Perform Daily Check/Schedule of weekly/monthly automated or ad-hoc MVMS vulnerability scan of Applications, Servers and Network routers/switches status. Troubleshooting and re-activation/re-scheduling of scanning if fail.
• Ongoing maintenance of Tenable MVMS asset inventory management for onboarding of new target systems and offboarding of existing targets systems to be scanned by MVMS.
• Perform signature update, Faults/Performance monitoring of the Nessus application.
• Test and update Endpoint Protection and EDR signatures. Extracting quarantined malware for reverse engineering. Creating and maintaining EDR blacklist.
• Conduct ad-hoc Malware IOC scan for servers upon emerging threat.
• Provide post go-live support i.e. maintain, troubleshoot, patch and update various security tools and scanners.
• Escalate issue to Principal Security Engineer for follow-up for severity 1, 2, 3 security vulnerabilities and configuration compliance.
• Conduct monthly/ad-hoc compliance audit scan for servers and routers/switches.
• Produce security reports and SOP documentation (Track vulnerabilities, produce security metrics reports, operating procedures, continuity documents and support Tactics, Techniques, Procedures updates).
• Present management reporting and dashboarding to stakeholders, with analysis of data and trends, and recommend next steps.

Requirements:

• At least Bachelor’s degree in Science or Engineering and 5 years’ relevant working experience in IT Security or Cyber Security, or equivalent experience; Working knowledge of several of the following areas is required: Understanding of business security practices and procedures; knowledge of current security tools available; hardware/software security implementation; different communication protocols; encryption techniques/tools; familiarity with commercial products, and current Cloud Technologies.
• At least one or two of the followings Professional and technical security certifications such as CEH, GIAC, CISSP, CISM, CCNA Security, GICSP, GSEC, SSCP and/or specific technology platform certifications e.g. CyberArk, Splunk, Carbon Black, Guardium, Imperva, SolarWinds and etc is preferred.
• Strong fundamental knowledge of SSH, TCP/IP, UDP, SSL, HTTP, HTTPS, PKI, DNS, and other common protocols.
• Familiar in at least any THREE (3) of the followings - Penetration Testing, Vulnerability Assessments, Compliance Scanning, Secure Code Review, DevOps/DevSecOps, cyber exercises, security awareness programmes.
• Familiarity with scripting for automating tasks using Perl, Python, etc.
• Hands on experience in operating and maintaining enterprise security tools such as Tenable Nessus vulnerability scanner.
• Experience with web application compliance scanning (BURP preferred).
• Familiarity with Privilege Access Management (PAM) tools such as BeyondTrust, SailPoint, ForgeRock, CyberArk, and etc. Familiarity with Dynamic Access Management (DAM) tools such as IBM Guardium, Imperva SecureSphere DAM and etc.
• 3+ years of hands-on experience in the PAM and DAM environment responsible for design, architecture, installation, and configuration of Base platform configuration, configuration of user onboarding and permission/role mapping, setup of folders and templates for various platforms, setup of Auto-Discovery functions, rules, and automation of account/secret placement, configuration of secret autorotation, check out/in, and JIT workflows, configuration of session proxying and recording, and migration of secrets from other platforms into the PAM & DAM solution.
• Advanced knowledge of security controls, audits, and configurations including Endpoint Detection and Response EDR tools such as VMware Carbon Black Endpoint, Crowdstrike Falcon and etc.
• Experience with Windows OS security setting/STIG reviews.
• Demonstrable experience with modern computing infrastructures such as AWS, Azure, GCP, OpenStack, etc. Familiarity with security testing on cloud environments is advantageous.

RESPONSIBILITIES

1. Reviewing and drafting service agreements and contract documents including joint ventures, M&A deals, private equity transactions and restructurings (including cross-border transactions in Asia, Australia and Europe).

2. Monitor, coordinate & advise, cross-functional stakeholders on legal issues including IPR / risk implication on possible legal risk and provide mitigation strategies.

3. Monitor legal and risk and give guidance on the acceptable assumption of risk.

4. Keep abreast of regulatory developments within or outside of the company as well as evolving best practices in compliance control.

5. Managing legal disputes and negotiate terms with customers, partners and suppliers.

6. Develop and oversee control systems to prevent or deal with violations of legal/compliance guidelines

7. Support the Business Unit Heads to ensure that team members work effectively and proactively with business teams and industry participants to advise and assist in the management of legal, risk and compliance matters

8. Coordinate and liaise with external counsels.

Requirements :

1. Bachelor of Law Degree (LLB) or equivalent from a reputable university

2. 7 to 10 years of work experience in a law firm or in-house

3. Sound knowledge in company law, contract law, product liability law, and mergers and acquisitions.

4. Experienced in advising on complex international transactions and in organizing and managing transactions, including cross-border transactions.

5. Demonstrate excellent document drafting skills. You should demonstrate strong communication and analytical skills along with a high level of commercial awareness.

6. Strong background in corporate work, probably gained from practice in a law firm or as an in-house counsel.

• Manage H&M (Hull and Machinery), PNI (Protection and Indemnity), FD&D (Freight Demurrage & Defence) and other insurance covers for company’s fleet;
• Ensure all claims are filed with relevant insurers in a timely manner;
• Coordinate with relevant insurers to process various marine claims (hull, cargo, crew & related P&I claims);
• Review contracts on charterparties, ship managements and new buildings and provide legal advice;
• Assist commercial team to handle and settle charterparty disputes;
• Lead Loss Prevention Initiatives & continuous improvement in marine claims processing & procedures;
• Ensure proper documentation and record of all premium payments and insurance claims of the company.

Requirements (Knowledge, Skills, Abilities & Qualifications)

• Degree on maritime law and / or marine insurance;
• At least 3 years relevant marine insurance and claims experience, preferably with a shipowner / management firm / P&I Club;
• Hands-on person with good communication skills and proven supervisory skills;
• Resilient, possesses a sense of urgency and work well under demanding timeline;
• Strong conceptual and analytical skills

Public Policy Program Manager

Location: Singapore

Position Type: Full-time for six-month contract

Job Overview: Work hard, have fun, and make history with our client's Public Policy. We are looking for a hardworking and innovative individual to support our Public Policy Asia Pacific and Japan team on a broad range of policy issues throughout the Asia Pacific region and in particular ASEAN. Our policy issues are broad, forward-thinking, and driven by what is best for our customers. The role is for a six-month contract.

Key Responsibilities:

• Working with the ASEAN Public Policy Director and the Strategy, Operations, and Enablement team, the Public Policy program manager will specifically help support the running of the ASEAN public policy team, drive accountability of goals, and help manage internal reporting process. Additionally, he/she will help design training programs to enhance the skills and capabilities of the team, research and implement tools and technologies that contribute to collaboration and communication across the team, and help oversee project management, ensuring timely delivery of initiatives within budget and scope.
• The Public Policy program manager will work collaboratively with the team to ensure alignment, act as a liaison between different sub-teams to ensure seamless communication and integration of initiatives, and establish, maintain relationships with key stakeholders to drive successful program outcomes, and provide regular updates and reports on the progress and impact of strategy, operations, and enablement programs.
• The position will be based in Singapore. The role is broad-based and will require an individual who can thrive in a dynamic environment. Successful candidates are organized, detail-oriented, and effective communicators. Top of FormBottom of Form

Basic Qualifications:

- BA/BS required
- Work, internship, or other leadership experience in a professional environment, with an emphasis and demonstrated interest in public policy and government relations work

Preferred Qualification:

- A keen understanding of the legislative and regulatory policy process as well as the technology industry
- Strong written and verbal communication skills and experience creating and effectively delivering factual, relevant, and easily understandable talking points and other messaging
- Ability to maintain the highest personal levels of ethical conduct, confidentiality, and integrity
- Highly effective oral, written, and interpersonal communication skills; demonstrated ability to effectively and comfortably interact at all corporate and political levels
- Self-starter who can take general direction and produce specific results
- Ability to influence, negotiate with, and persuade others, with the ability to intelligently build a course of action, analyze trade-offs, and make recommendations even in ambiguous situations

Jessie Hoe Huey Miin

CEI R1103861

EA: 99C4599

Job Description & Requirements

• Troubleshooting security and network problems.
• Testing and identifying network and system vulnerabilities.
• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.
• Standardize and refine security incident response and escalation processes.
• Mitigate and contain threats when detected.
• Escalate security incidents and non-compliances on a timely basis.
• Monitor information security alerts triage, mitigate, and escalate issues as needed.
• Provide security advisory to end users on regular basis.
• IT Security Management of various aspect, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.

Requirements

• Diploma/ Bachelor's Degree in IT/Computer Science/Cyber Security or Engineering related fields.
• Professional Certification and at least 5 years’ hands on experience in routing & switching preferred CCNP.
• Strong analytical, problem-solving, and decision-making skills.
• Understanding of network protocols and troubleshooting.
• Ability to manage multiple priorities and work effectively under pressure
• Hands on experience on one or more of the following skills as below:-
• Routing & Switching - Cisco / FortiSwitch / HP
• Firewall - Sophos / Fortigate / Palo Alto / Forcepoint
• WIFI AP - Ruckus / Aruba / Ubiquiti
• Willing to learn Work endpoint security, SIEM, secured remote access, MFA, Identity Access Management and Privileged Access Management.

Airswift is seeking to invite an experienced LEGAL MANAGER in the oil and gas downstream sector to join one of our clients.

Responsibilities are but not limited to:

• Provide legal advice for Project Development, M&A, Joint Venture and legal affairs in the APAC region
• Draft, review and negotiate documentation for project development activities including joint venture and other partnership agreements, wide range of corporate and commercial contract, development services agreements, EPC contacts, O&M agreements
• Advise on project financing transactions within the Asia Pacific region, including the negotiation of loan and security documentation with financiers.
• Provide advice and counsel to both the business and technical teams involved in the development and execution of renewable energy projects, in consultation with other members of the Legal team and external counsel, as necessary
• Advise on corporate governance matters and ensure compliance with legal and regulatory requirements
• Active involvement in the legal and commercial analysis of acquisition and due diligence documentation
• Provide legal advice and support to corporate functions as well as day to day operational matters
• Proactively work with internal functions (Risk, Legal, Tax & Finance) to ensure successful project execution
• Assist with the management of ongoing project development activities with local partners and service providers
• Effectively work with external counsel when necessary and appropriate

Requirements:

• Degree/Masters in Law from reputed international university
• Qualification as legal practitioner in a common law jurisdiction with at least 10 – 15 years of relevant working experience preferably in the petrochemical or oil and gas industry in Singapore.
• Training and experience working in an internationally recognised law firm and currently working either as (a) an in-house counsel at a recognised energy or infrastructure company (preferably in the renewable energy sector) or (b) a senior associate specialising in energy project development/M&A at a top-ranked law firm
• Highest standards of professional ethics, integrity and judgment
• Transaction execution is an important part of this role and the ability to lead and manage transactions, multi-task and prioritise competing demands are essential attributes
• Extensive experience executing corporate and / or project development transactions in the Asia Pacific region
• Excellent communication (written and verbal) and interpersonal skills
• Strong cross-cultural communication skills
• Excellent teamwork skills and ability to partner with business and technical colleagues, external counsel and staff
• Proven ability to collaborate cross-functionally and to engage effectively with all levels of staff and management
• Ability to build trust and lead complex and demanding projects
• Highly organised, detail oriented, efficient, resourceful with strong follow-through and passion to "make things happen"
• Entrepreneurial with a desire to learn the business and function as part of a collaborative and interdisciplinary team

Please forward your resume and certification to us. We regret only shortlisted candidates will be notified.

By submitting your personal data and/or resume, you consent to the collection, use and disclosure of your personal data by Airswift for the purpose for which it is collected. EA License Number: 09C5031

Responsibilities:

• Conduct technical analysis and triaging of triggering alerts ingested from Mercedes-Benz log sources to determine impact, scope of impact and determine corresponding remedial actions to mitigate, contain and/or otherwise limit the impact of the incident
• Analyzing, triaging and processing security threats to identify potential risk gaps and corresponding organizational impact by conducting in-depth analysis of the identified threat, attack vector or intelligence information
• Working closely with the CIRC threat intelligence team to aid in the enhancement of contextual analysis and providing threat hunting support towards Open Source Intelligence (OSINT) related Indicators of Compromise (IoCs)
• Acting as a point of contact towards Company end users and stakeholders in providing cybersecurity incidents updates and other related activities that might arise from time to time during the incident coordination, remediation and recovery
• Provide duty analyst support for the CIRC operations during weekends, utilizing a pre-defined duty roaster, ensuring the continued operations and monitoring of threats and triggering alerts 24 by 7, follow the sun model
• Provide project coordination support to assigned projects by the Head of Global Defensive operations towards the roll out, implementation and acting as the point of contact for local stakeholders towards the implementation and coordination of the projects assigned
• Provide technical inputs towards the virtual teams as assigned by the Head of Global Defensive operations towards the operational directions, method determination and other related administrative support required from time to time

Requirements:

• Degree in Computer Science or any relevant discipline.
• One of the following certifications is beneficial: CISSP, GCIH or similar
• Experience with Threat Hunting techniques (endpoint and network data)
• Strong understanding of attack lifecycle and common attack vectors, tools and techniques
• Ability to leverage existing data to identify anomalies / IOA / TTP
• Ability to develop / maintain detection/prevention use cases
• Proficient understanding of cyber and IT security risk, threat and prevention measure

Please submit your updated resume in Word format by using the Apply Now Button.
We regret that only shortlisted candidates will be notified

Email resume to [email protected]

People Profilers Pte Ltd, 20 Cecil Street, #08-09, PLUS Building, Singapore 049705.
Tel: 6950 9740

http://www.peopleprofilers.com

EA License Number: 02C4944
Registration Number: R1330005
Posting Personnel: Reeve Lim Kok Kiong

Ensure that the restaurant operate efficiently and profitably, achieving targets set by the company.

KEY RESPONSIBILITIES:

· Responsible for business performance of the restaurant in achieving budget and maintaining operating costs.

· Analyse and review menu with Li Bai Executive Chef regularly for popular and unpopular items and make appropriate recommendations for new listing, keeping abreast of market trends.

· Assist to organise marketing activities, such as promotional events and discount schemes.

· Create and execute plans for department sales, profit and staff development.

· Coordinate entire operation of the restaurant during scheduled shifts.

· Deal and resolve customer complaints tactfully and update the F&B Management accordingly.

· Check on guest’s satisfaction and solicit for feedback, and maintain database of guests on their dining preferences.

· Implement effective systems to prevent breakages and damage of operating equipments.

· Ensure that the outlet is adequately equipped with operating equipments and restaurant accessories to support the operations.

· Maintain high standards of quality control, hygiene, and health and safety.

· Any other duties assigned by Director of F&B.

Job Description

Main duties and responsibilities:

· Establishment and management of company-wide (Group) information security management system (ISO27001)

· Manage the organization’s information security department.

· Analyze existing information security posture and establish detailed improvement plans.

· Develop or maintain and publish up-to-date information security policies, processes and standards.

· Ensure all software, technology, information security policies, processes and guidelines adhere to local legislation and legal frameworks.

· Manage all audit work and enquiries involving Information and Cyber Security across the Group.

Job Requirements:

· Bachelor’s degree in computer / information technology / information security related field or equivalent experience.

· At least 5 years of corporate information security related experience.

· Industry security certification (ISMS/ISO27001 auditor, CISA, CISSP, etc)

· Experience in privacy law (eg GDPR, PDPA), network, cloud technology (eg AWS) and IT audits

· Good communication skills in English

· Good communication skills in Korean will be an added advantage

The Mercedes-Benz Group AG CISO heads Mercedes-Benz’s Global Cyber Security Department (based in Stuttgart, Germany). Cyber Intelligence and Response Centre (CIRC) is responsible for providing Intelligence-driven approach towards Digital Forensics Incident Response (DFIR). The CIRC is a 24 by 7 follow the sun operations with counterparts in EMEA and NAFTA to provide holistic support towards incident management affecting our global Mercedes-Benz assets working closely with our threat intelligence team to monitor our global threat landscape.

Role and Responsibilities:

• Conduct technical analysis and triaging of triggering alerts ingested from Mercedes-Benz log sources to determine impact, scope of impact and determine corresponding remedial actions to mitigate, contain and/or otherwise limit the impact of the incident
• Analyzing, triaging and processing security threats to identify potential risk gaps and corresponding organizational impact by conducting in-depth analysis of the identified threat, attack vector or intelligence information
• Working closely with the CIRC threat intelligence team to aid in the enhancement of contextual analysis and providing threat hunting support towards Open Source Intelligence (OSINT) related Indicators of Compromise (IoCs)
• Acting as a point of contact towards Mercedes-Benz end users and stakeholders in providing cybersecurity incidents updates and other related activities that might arise from time to time during the incident coordination, remediation and recovery
• Provide duty analyst support for the CIRC operations during weekends, utilizing a pre-defined duty roaster, ensuring the continued operations and monitoring of threats and triggering alerts 24 by 7, follow the sun model
• Provide project coordination support to assigned projects by the Head of Global Defensive operations towards the roll out, implementation and acting as the point of contact for local stakeholders towards the implementation and coordination of the projects assigned
• Provide technical inputs towards the virtual teams as assigned by the Head of Global Defensive operations towards the operational directions, method determination and other related administrative support required from time to time

Education and Certifications:

• Degree from a reputable university or significant course work in Computer Science, Networking, engineering or other computer-related fields of study
• One or more of the following professional certification is beneficial: CISSP, GCIH or similar

Technical Skills:

• Experience with Threat Hunting techniques (endpoint and network data)
• Strong understanding of attack lifecycle and common attack vectors, tools and techniques
• Ability to leverage existing data to identify anomalies / IOA / TTP
• Ability to develop / maintain detection/prevention use cases
• Proficient understanding of cyber and IT security risk, threat and prevention measure
• Good understanding of Threat Intelligence utilization towards incident response
• Good knowledge of security standards and best practices
• Good understanding of various operating system
• Good understanding of the Cyber Kill Chain and the ability to display clear analytical skills
• Previous experience in a corporate or enterprise environment, engaging with and responding to a diverse array of internal stakeholders, including senior management
• Knowledge of Microsoft Office suite (Word, Excel, PowerPoint and Access)
• SIEM (Splunk ES) and EDR (CrowdStrike) experiences
• Good to have the following experiencesExperiences in leveraging AI / ML for Threat Hunting
• Experience with OT / ICS and Cloud environments
• Experience working with threat intelligence platforms and premium intelligence sources/feeds

Experience:

• Have good emotional intelligence and is a proven team player
• Rational and calm under pressure
• Fluency in the English Language
• Strong report writing and communication skills
• Good timekeeping ability to cope with a tight deadline and achieve operational objectives
• Self-motivated with the ability to carry out assigned tasks with minimum supervision

This position is based in location Singapore. A valid and approved work visa is required for employment in Singapore in accordance to local labour law regulations. We regret to inform you that only shortlisted candidates will be notified.