Total 27 it specialist job vacancies in Legal / Public / Security category in 7 Tuas Loop, Singapore

ABOUT THE NATIONAL INSTITUTE OF EDUCATION (NIE)

The National Institute of Education (NIE), Singapore, is Singapore’s national teacher education institute and we are proud to be an integral part of the nation’s education service. We play a key role in the preparation of teachers and in the provision of teacher professional and school leadership development programmes. We are committed to our vision of being An Institute of Distinction: Leading the Future of Education and our mission to Inspire Learning, Transform Teaching and Advance Research.

NIE invites suitable candidates to join the Division of Academic Computing & Information Services (ACIS) as a Senior IT Security Analyst (3-year contract).

Key Responsibilities:

Incident Response Leadership

• Oversee the entire incident response lifecycle from detection to resolution.
• Lead investigations of IT security incidents and ensure thorough root cause analysis and remediation.
• Develop and maintain incident response playbooks and procedures.
• Coordinate with internal, external stakeholders, and vendors during incidents.
• Conduct post-incident reviews and report findings to management.

Monitoring and Detection

• Develop and implement advanced threat detection and monitoring strategies.
• Utilize SIEM, EDR, and other security tools for timely incident detection.
• Perform threat hunting and proactive security assessments.
• Collaborate with IT teams to deploy and optimize security solutions.

AI and Automation

• Integrate AI and automation technologies to enhance security operations.
• Develop automated workflows and scripts for incident response and routine tasks using SOAR.
• Leverage machine learning and AI-driven tools for threat detection and analysis.
• Stay updated with advancements in AI and evaluate their applicability to security operations.
• Apply system design thinking to security solutions.

Threat Statistics and Reporting

• Analyze and compile statistics on threats relevant to the Institute.
• Prepare and present detailed reports on threat statistics to stakeholders.
• Use data visualization tools to communicate threat trends and insights.

Innovation and Continuous Improvement

• Evaluate and integrate new technologies to enhance security operations.
• Foster a culture of continuous improvement within the team.
• Encourage continuous learning and professional development.

Forensics Capability Development

• Enhance the team's digital forensics capabilities.
• Develop forensic investigation procedures and protocols.
• Train team members in forensic tools and methodologies.
• Oversee the collection, preservation, and analysis of digital evidence.
• Collaborate with legal and compliance teams to ensure regulatory alignment.
• Conduct regular drills and simulations for forensic readiness.

Requirements:

• Degree in Information Systems, Computer Science, Cybersecurity, or a related field.
• Professional Certification(s) in incident handling and security analysis preferred.
• GCIH or its equivalent is preferred
• Minimum of 8 years of progressive experience in IT security, with a focus on Incident response
• Minimum of 4 years of experience in a security operations center, with proven leadership capabilities.
• Intermediate knowledge of security operations, incident analysis, incident handling, and vulnerability management or testing, system patching, log analysis, intrusion detection, or firewall administration
• Proven experience in managing incident response and performing threat hunting
• Proven experience in integrating AI and automation in IT Security using Security Orchestration Automated Response (SOAR) technologies.
• Proficiency in Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), traffic and packet analysis, digital forensics, and cloud security.
• Experience in Blue/Purple teaming, firewall, Intrusion Prevention Systems (IPS), Web Application Firewalls (WAF) administration, virtualization, and cloud technologies.
• Experience in monitoring and administering host-based intrusion detection systems.
• Knowledge and experience in Linux/Windows/Database technologies preferred.
• Strong knowledge of industry standards and information security policy frameworks.
• Hands-on experience with scripting and automation tools to enhance security operations.
• Ability to conduct gap analysis of current processes and identify opportunities for improvement.
• Evaluate internal and external environments for threats related to Information Security and act as a subject matter expert to ensure these are properly addressed and controlled.
• Continuously improve event correlation and alerting processes and use cases to detect potential incidents.
• Automate manual processes to enhance security incident response.
• Experience with network security assessment tools.
• Excellent leadership and team management skills, with the ability to inspire and motivate a team.
• Strong communication skills, with the ability to effectively interact with stakeholders at all levels, including University administration.
• Demonstrated ability to drive strategic initiatives and lead a team through change.
• Exceptional problem-solving skills and the ability to think critically under pressure.
• Ability to interview stakeholders to define and document business requirements.
• Provide advice and guidance on response action plans for information risk events and incidents based on incident type and severity.

Other Information

NIE staff can take chartered buses at their own expense from or near their home to the NIE campus. This is subject to the availability of bus routes and seats.

Req ID: R00018131

ABOUT THE NATIONAL INSTITUTE OF EDUCATION (NIE)

The National Institute of Education (NIE), Singapore, is Singapore’s national teacher education institute and we are proud to be an integral part of the nation’s education service. We play a key role in the preparation of teachers and in the provision of teacher professional and school leadership development programmes. We are committed to our vision of being An Institute of Distinction: Leading the Future of Education and our mission to Inspire Learning, Transform Teaching and Advance Research.

NIE invites suitable candidates to join the Division of Academic Computing & Information Services (ACIS) as a Security Analyst for Governance, Risk, and Compliance (GRC). This is a 3-year contract position.

Key Responsibilities:

Governance

• Coordinate with internal and external audit teams and assist in audit planning.
• Help deliver security awareness programs for staff and manage security governance efforts.
• Stay updated on IT trends and recommend best practices to align with governance policies.
• Support cybersecurity projects to ensure alignment with security objectives.

Risk Management

• Assist in identifying and assessing IT risks and managing vulnerabilities and threats.
• Support risk management in cybersecurity projects by focusing on threats and vulnerabilities.
• Track and monitor audit remediation actions related to risk management.
• Measure the effectiveness of security awareness programs to minimize risks from human error.
  

Compliance

• Ensure compliance with internal standards (ISO 27001, ISO 22301) and external regulations.
• Facilitate responses to internal and external IT audits.
• Participate in audit engagements and report on audit issues and remediation.
• Provide ongoing compliance reporting to ensure timely remediation of audit findings.

Requirements:

Educational Qualification(s)

• A University Degree in Information Technology, Cybersecurity, Risk Management, or Compliance, or an equivalent qualification.
• Desirable Certifications: CISSP, CISM, CISA, CRISC, or other relevant certifications.

Relevant Experience

• 3-5 years of experience in Information Security, IT Risk Management, or Compliance, preferably in a higher education or similar environment.
• Experience with IT security audits and compliance reviews in regulated industries.
• Experience with vendor security assessments and managing third-party security risks.
• Experience in security awareness training and working in cross-functional teams.

Knowledge Required

• Security Frameworks: ISO 27001, CTM, NIST, CIS controls, and their application in operational environments.
• Regulatory Standards: Understanding of the Cybersecurity Bill, PDPA, and related security laws.
• Risk Management: Knowledge of risk assessments, mitigation strategies, and identifying threats to information systems.
• Audit Processes: Understanding security audit processes, compliance, and remediation.
• IT System: Good knowledge of IT infrastructure, application management, and cybersecurity practices.
• GRC Tools: Experience with Governance, Risk, and Compliance platforms and software is advantageous.

Skills and Competencies

• Analytical Skills: Ability to analyze security risks and make data-driven decisions.
• Communication Skills: Ability to convey technical security concepts to non-technical audiences and document findings.
• Problem-Solving: Strong problem-solving capabilities, particularly during security incidents.
• Attention to Detail: High focus on detail in audits and risk assessments.
• Project Management: Ability to manage multiple projects, prioritize tasks, and meet deadlines.
• Team Collaboration: Proven ability to work with cross-functional teams (IT, legal, compliance, vendors).

Other Personal Attributes

• Integrity and Confidentiality: High ethical standards and the ability to handle sensitive information.
• Proactivity: Ability to act independently and proactively address security challenges.
• Adaptability: Capable of adjusting to evolving security threats and changes in regulations.
• Resilience under Pressure: Ability to make sound decisions under pressure, particularly during audits or security incidents.

Other Information

NIE staff can take chartered buses at their own expense from or near their home to the NIE campus. This is subject to the availability of bus routes and seats.

Req ID: R00018942

The Mercedes-Benz Group AG CISO heads Mercedes-Benz Global Cyber Security Department (based in Stuttgart, Germany). We are looking for an Offensive Cyber Security Specialist to join our Global Cyber Security Team. This role focuses on enhancing and implementing our global vulnerability management process to protect our customers from malicious attacks.

As part of our team, you will support and improve vulnerability management across on-premises and cloud environments for Mercedes-Benz Group AG in the APAC and Greater China regions. Your responsibilities will include working on technical topics such as the Vulnerability Disclosure Program, validating proof-of-concepts, and ensuring timely remediation of identified vulnerabilities.

You will also explore new technologies and processes to strengthen the organization’s security posture through innovative vulnerability research and detection. This role is crucial in maintaining a secure and resilient environment by proactively identifying, assessing, and mitigating security risks while collaborating with global teams to drive continuous improvement in cybersecurity practices.

Role and Responsibilities

• Analysing, triaging and processing security threats to identify potential risk gaps and corresponding organizational impact by conducting in-depth analysis of the identified threat, attack vector or intelligence information
• Collaborate on and enforce the implementation of the global Mercedes-Benz Vulnerability Management strategy
• Acting as a point of contact for APAC region for questions regarding different stages of the Vulnerability Management lifecycle, including vulnerability scanning and penetration testing
• Rate new technical vulnerabilities according to their business impact and prioritize remediation activities
• Support application and infrastructure teams on the vulnerability remediation process
• Perform vulnerability scans in the company’s internal networks
• Analyze, rate and confirm vulnerabilities reported by external researchers
• Provide duty analyst support for the Vulnerability Management operations during weekends, utilizing a pre-defined duty roaster.
• Provide project coordination support to assigned projects by the Head of Global Offensive operations towards the roll out, implementation and acting as the point of contact for local stakeholders towards the implementation and coordination of the projects assigned.
• Provide technical inputs towards the virtual teams as assigned by the Head of Global Offensive operations towards the operational directions, method determination and other related administrative support required from time to time.
• Coordinate Enhanced Proactive Analysis initiatives, as directed by the Head of Global Offensive Operations, to facilitate internal penetration testing of applications. Provide additional administrative support as needed to ensure smooth execution of related activities.
• Coordinate and support source code analysis initiatives, as directed by the Head of Global Offensive Operations, to ensure internal source code testing meets global security standards and is adequately hardened. Provide additional administrative support as needed to facilitate the seamless execution of these activities.

Qualifications

• Degree from a reputable university or significant course work in Computer Science, Information Technology or other IT-related fields of study.
• One or more of the following professional certification is beneficial: OSCP, OSCE, CREST, SANS GIAC Penetration Tester, Web Application Penetration Tester, Exploit Researcher, Advanced Penetration Tester or similar.
• 5+ years working experience in technical offensive cyber security related field in a corporate, military, or law enforcement environment.
• Honest, Professional, strong team influencer, able to proactively support team culture that fosters knowledge sharing, excellence and collaboration.
• Able to work under pressure, facilitate discussion, decision-making, and conflict resolution.
• Excellent communicator, able to engage and effectively respond to diverse stakeholders
• Fluency in the English Language
• Self-motivated with the ability to carry out assigned tasks with minimum supervision
• Proficient understanding of networking and network security technologies.
• Good understanding of Threat Intelligence utilization towards new Vulnerability Detection
• Excellent knowledge of cyber security standards, risks, threats, prevention measures and best practices
• Experiences in improving a vulnerability management process and/or a vulnerability-scanning concept.
• Hands-on experience with vulnerability scanning and management processes and tools (Qualys and ServiceNow Vulnerability Response).
• Experience with Vulnerability Management in cloud solutions.
• Experience with Vulnerability Management Lifecycle
• Good understanding of various operating systems
• Good understanding of the Cyber Kill Chain and the ability to display clear analytical skills

This position is based in Singapore and a valid and approved work visa is required for employment in Singapore in accordance to local labour law regulations. Candidate may be offered a lower job level based on candidate’s experience. We regret to inform you that only shortlisted candidates will be notified.

Control Risks is working with a global household-name company to identify and embed a Physical Security Specialist who will take responsibility for the day-to-day management of the client's security operations in South East Asia. Key duties of the role will include interacting with all corporate cross-functional partners and country leadership teams, vendor management and financial reporting, support for corporate events, and travel security.

This key role will require an individual who is passionate, self-motivated, proactive, quick-thinking, flexible, able to pivot when necessary, thorough and able to juggle multiple and diverse responsibilities with a strong emphasis on organization and unwavering attention to detail at all times. This is a demanding and fast-moving position that requires someone who is a proactive and positive thinker, and able to exercise good judgment and communication.

Responsibilities:

• Managing the day to day security operations at the client's corporate locations across South East Asia.
• Drive multiple security projects effectively including management of key performance indicators, vendor management and quality control. This will often include liaising with other members of the Enterprise Security or Environmental Health and Safety team to ensure alignment on new projects.
• Where necessary, contextualize and add regional specific vigor to global programs to further optimize overall program delivery.
• Develop key relationships with the client's corporate workplace teams, the landlord and third-party security vendors, ensuring cohesion across the site’s security and safety functions.
• Develop bespoke training packages in support of existing guard force and corporate security.
• Development and implementation of site incident management procedures.
• Support and liaise with the EHS team to ensure all standards are maintained across all facilities.
• Ensuring effective communication and reporting to the Regional Head of Security Operations and work towards the standards set by the wider security team.

• 5+ years experience in corporate security, and operational management.
• Bachelor’s degree required (or higher), relevant certifications (ex. CPP) a plus
• General understanding of security systems (cameras, card readers, radios, etc.)
• General understanding of incident response and crisis management
• A team player with an ability to supervise several projects in a fast-paced environment.
• Access to high-quality vendors, production support staff contacts.
• Ability to respond after hours to important, timely or urgent manners.
• Ability to be discreet and handle confidential information.
• Proficiency in Google Docs, Sheets, Gmail, Gdrive, MS Word, Excel.
• Understanding of how to prioritize and respond accordingly.
• Willingness to continue learning to ensure understanding of Netflix enterprise security approach.
• Strong written and verbal communication skills.
• Willingness to take educated risks and think out of the box.

We’re searching for a Lead Consultant, IT Security to be part of our diverse team of talents here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

• Manage team of cyber day 2 engineering resources within Identity and Access Management & PKI track providing guidance, mentorship, performance evaluations.
• Involve in project work to deliver security service which require deeper level of expertise and to drive resolution of operational issue which are escalated to ensure satisfactory closure.
• Responsible for tracking the progress of building within Identity and Access Management & PKI technical competencies, develop training and growth plans within specialization track.
• Involve in the hiring process for cyber day 2 to expand the existing portfolio of services (e.g. network security, endpoint security, security analytics etc).
• Involve in the presale activities for cyber day 2, including defining the scope of cyber day 2 services, sizing the effort to support the security technologies deployed in client environment, determine what can be supported internally and what can be delivered via partnership with other parties in NCS or with sub-contractors and process standardization & improvement.
• Assist in improving the quality of service for cyber day 2 team.
• To be one of the Subject Matter Expert (or trusted technical advisor) in Identity and Access Management & PKI cyber technologies during presale and day 2 phases.
• Mentoring engineers or interns to ensure they can assist the team in executing operational tasks for projects.
• Accountable for various tasks above and provide regular update to the Practice Lead

k-ID is a trailblazing tech startup, specializing in providing advanced, privacy-centric tools designed to protect and empower kids and teens online. We have secured pivotal partnerships with key industry leaders in the gaming industry and are venture-backed by leading global VCs. We are poised for unprecedented growth and expansion in the coming year.

We are looking for a highly skilled Legal Operations Specialist with a strong background in both large-scale tech environments and startups. The key focus of this role is to streamline and optimize our legal processes, particularly in the areas of privacy and safety law. This role requires a strategic thinker who can build legal operations from the ground up, ensuring that our legal team is equipped to handle the complexities of protecting kids and teens online.

Key Responsibilities:

1. Legal Operations Management:

• Develop and implement efficient legal operations processes to support the legal team’s work, with a focus on privacy and safety law.
• Manage and optimize workflows, ensuring the legal team can effectively handle day-to-day tasks and long-term projects.
• Establish and maintain systems for contract management, compliance tracking, and legal documentation.

• Identify opportunities for process improvements and automation within the legal function, leveraging technology to enhance efficiency.
• Implement legal tech tools and systems to streamline operations, such as contract management systems, e-billing, and compliance tracking software.
• Train legal team members and other stakeholders on new tools and processes.

• Work closely with cross-functional teams, including product, engineering, and compliance, to ensure legal considerations are integrated into business operations.
• Serve as a liaison between the legal team and other departments, facilitating communication and collaboration on privacy and safety matters.

• Assist in managing the legal department’s budget, including tracking expenses, forecasting costs, and optimizing resource allocation.
• Manage relationships with external legal vendors, including law firms and legal tech providers, ensuring cost-effective and high-quality service.

Minimum Requirements:

• 3 years of experience working with legal teams in big tech companies or startups, preferably with a focus on privacy and online safety law.
• Proven experience in developing and managing legal operations processes, with a strong understanding of legal tech tools and systems.
• Highly organized with strong attention to detail and the ability to manage multiple priorities in a fast-paced environment.

Preferred Requirements:

• Relevant law degree (JD or equivalent) is required.
• Strong knowledge of global privacy laws.

Competitive Salary

• A competitive startup salary commensurate with experience and skills

Benefits Package

• Comprehensive benefits including health, dental, and vision insurance
• Employee Stock Ownership Plan (ESOP)

Professional Development

• Opportunities for ongoing learning and development.
• Exposure to multifaceted projects in a fast-growing industry

Innovative Culture

• A collaborative and inclusive work environment
• The opportunity to be a part of a company that’s making a positive impact on the online experiences of kids and teens

We’re searching for a Lead Consultant, IT Security to be part of our diverse team of talents here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

• Manage team of cyber day 2 engineering resources within specialization track providing guidance, mentorship, performance evaluations.
• Involve in project work to deliver security service which require deeper level of expertise and to drive resolution of operational issue which are escalated to ensure satisfactory closure.
• Responsible for tracking the progress of building technical competencies, develop training and growth plans within specialization track.
• Involve in the hiring process for cyber day 2 to expand the existing portfolio of services (e.g. network security, endpoint security, security analytics etc).
• Involve in the presale activities for cyber day 2, including defining the scope of cyber day 2 services, sizing the effort to support the security technologies deployed in client environment, determine what can be supported internally and what can be delivered via partnership with other parties in NCS or with sub-contractors and process standardization & improvement.
• Assist in improving the quality of service for cyber day 2 team.
• To be one of the Subject Matter Expert (or trusted technical advisor) in cyber technologies during presale and day 2 phases.
• Mentoring engineers or interns to ensure they can assist the team in executing operational tasks for projects.
• Accountable for various tasks above and provide regular update to the Practice Lead

What we seek to accomplish together:

• Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis.
• Establish compliance with these policies / procedures through ongoing security reviews and audits, not limited to log analysis and security assessment of customer ICT systems
• Conduct security risk management exercise
• Conduct table-top exercises
• Conduct vulnerability assessment, coordinate penetration tests activities
• Conduct information security awareness training
• Responsible for the development and management of customer’s security incident response plan.
• Lead and support customer in the matters of security incident resolution and response.
• Be the point-of-contact/customer liaison to assist and advise customer for ICT security related matters
• Project managed the activities and deliverables during the implementation phase.

ABOUT THE NATIONAL INSTITUTE OF EDUCATION (NIE)

The National Institute of Education (NIE), Singapore, is Singapore’s national teacher education institute and we are proud to be an integral part of the nation’s education service. We play a key role in the preparation of teachers and in the provision of teacher professional and school leadership development programmes. We are committed to our vision of being An Institute of Distinction: Leading the Future of Education and our mission to Inspire Learning, Transform Teaching and Advance Research.

NIE invites suitable candidates to join the Division of Academic Computing & Information Services (ACIS) as a Senior IT Security Analyst (3-year contract).

Key Responsibilities:

Incident Response Leadership

• Oversee the entire incident response lifecycle from detection to resolution.
• Lead investigations of IT security incidents and ensure thorough root cause analysis and remediation.
• Develop and maintain incident response playbooks and procedures.
• Coordinate with internal, external stakeholders, and vendors during incidents.
• Conduct post-incident reviews and report findings to management.

Monitoring and Detection

• Develop and implement advanced threat detection and monitoring strategies.
• Utilize SIEM, EDR, and other security tools for timely incident detection.
• Perform threat hunting and proactive security assessments.
• Collaborate with IT teams to deploy and optimize security solutions.

AI and Automation

• Integrate AI and automation technologies to enhance security operations.
• Develop automated workflows and scripts for incident response and routine tasks using SOAR.
• Leverage machine learning and AI-driven tools for threat detection and analysis.
• Stay updated with advancements in AI and evaluate their applicability to security operations.
• Apply system design thinking to security solutions.

Threat Statistics and Reporting

• Analyze and compile statistics on threats relevant to the Institute.
• Prepare and present detailed reports on threat statistics to stakeholders.
• Use data visualization tools to communicate threat trends and insights.

Innovation and Continuous Improvement

• Evaluate and integrate new technologies to enhance security operations.
• Foster a culture of continuous improvement within the team.
• Encourage continuous learning and professional development.

Forensics Capability Development

• Enhance the team's digital forensics capabilities.
• Develop forensic investigation procedures and protocols.
• Train team members in forensic tools and methodologies.
• Oversee the collection, preservation, and analysis of digital evidence.
• Collaborate with legal and compliance teams to ensure regulatory alignment.
• Conduct regular drills and simulations for forensic readiness.

Requirements:

• Degree in Information Systems, Computer Science, Cybersecurity, or a related field.
• Professional Certification(s) in incident handling and security analysis preferred.
• GCIH or its equivalent is preferred
• Minimum of 8 years of progressive experience in IT security, with a focus on Incident response
• Minimum of 4 years of experience in a security operations center, with proven leadership capabilities.
• Intermediate knowledge of security operations, incident analysis, incident handling, and vulnerability management or testing, system patching, log analysis, intrusion detection, or firewall administration
• Proven experience in managing incident response and performing threat hunting
• Proven experience in integrating AI and automation in IT Security using Security Orchestration Automated Response (SOAR) technologies.
• Proficiency in Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), traffic and packet analysis, digital forensics, and cloud security.
• Experience in Blue/Purple teaming, firewall, Intrusion Prevention Systems (IPS), Web Application Firewalls (WAF) administration, virtualization, and cloud technologies.
• Experience in monitoring and administering host-based intrusion detection systems.
• Knowledge and experience in Linux/Windows/Database technologies preferred.
• Strong knowledge of industry standards and information security policy frameworks.
• Hands-on experience with scripting and automation tools to enhance security operations.
• Ability to conduct gap analysis of current processes and identify opportunities for improvement.
• Evaluate internal and external environments for threats related to Information Security and act as a subject matter expert to ensure these are properly addressed and controlled.
• Continuously improve event correlation and alerting processes and use cases to detect potential incidents.
• Automate manual processes to enhance security incident response.
• Experience with network security assessment tools.
• Excellent leadership and team management skills, with the ability to inspire and motivate a team.
• Strong communication skills, with the ability to effectively interact with stakeholders at all levels, including University administration.
• Demonstrated ability to drive strategic initiatives and lead a team through change.
• Exceptional problem-solving skills and the ability to think critically under pressure.
• Ability to interview stakeholders to define and document business requirements.
• Provide advice and guidance on response action plans for information risk events and incidents based on incident type and severity.

Other Information

NIE staff can take chartered buses at their own expense from or near their home to the NIE campus. This is subject to the availability of bus routes and seats.

Req ID: R00018131

You will be part of a well-established international team in Information Security focused on Cloud Security Architecture, Security Tooling Engineering and Automation.  

Your role will contribute to the success of the team and the Company. 

Your key tasks

• Support Cloud & Infrastructure Organization by reviewing and analysing Network, Systems, and Application architectures to enforce and validate Security requirements.
• Leads Threat Model exercises for new services/major changes.
• Actively Collaborate with your team members to support them on daily operations, including: 
  • Review of IT infrastructure solution designs to ensure compliance with policies and standards. 
  • Operational implementation, Automation, and ownership of Security Tools 
  • Assist in deploying automation of operational processes and procedures, identify weaknesses, propose, plan, and deploy improvements to address and enhance the infrastructure design. 
• Support and maintain the APAC’s Information Security Management System (ISMS) to assure continuous compliance with regulations, laws, and contractual obligations by adopting and deploying industry and market standards and accepted best practices.
• Be on routine standby to support the team.

What we seek to accomplish together:

• and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis.
• compliance with these policies / procedures through ongoing security reviews and audits, not limited to log analysis and security assessment of customer ICT systems
• conduct security risk management exercise
• manage vulnerability assessment
• conduct information security awareness training
• for the development and management of customer’s security response plan. To lead and support customer in the matters of security incident resolution and response.
• of contact to assist and advise customer for ICT security related matters

Job Responsibilities

• Develop and maintain all documentation on security policies, standards and controls and enforce compliance with policies and procedures in entire organisation
• Develop, implement and monitor reporting mechanisms for governance, security and risk practices to support compliance and highlight areas of exposure
• Keep abreast of current advances in all areas of information technology concerning vulnerabilities, security breaches or malicious attacks, and maintain up-to-date knowledge of IT security industry
• Work with internal units to conduct regular reviews and audit of IT systems and applications to ensure statutory compliance
• Develops, tracks, and reports on Key Risk Indicators (KRIs) for information technology security risk assessment progress
• Support data protection under Personal Data Protection requirements
• Develop and maintain business continuity plan and IT disaster recovery plan. Conduct annual business continuity and IT Disaster recovery testing
• Conduct IT risk assessment, review and reporting of key IT risk exposures and metrics, develop IT risk management framework and remediation plans to improve security posture with IT security best practices
• Assist in the execution for enterprise information and security governance and architecture roadmap
• Identify potential threats or attempted breaches to minimise vulnerabilities and risks in operating environment
• Design, develop and conduct cybersecurity and personal data protection act awareness workshops.
• Execute, manage, enhance and implement security operational processes to comply with IT regulatory and corporate requirements
• Responsible to ensure information security agreement is established for any required IT system/service contracts
• Perform incident and security management through Identify, Protect, Detect, Respond and Recover functions
• Any other related tasks assigned by supervisor

Job Requirements

• Bachelor’s Degree in Computer Science / Cyber Security / Information Technology or equivalent
• Minimum 3 years’ experience in IT audit, IT security or Data protection
• Possess relevant IT Governance, security and project management certifications (eg COBIT, CISSP, CISA, CISM, CITPM, PMP) will be advantageous
• Strong understanding of key IT security concepts such as access control, confidential data, encryption, business continuity, info-sec scans, and vendor apps
• Strong knowledge of IT organisation business processes and systems including (IT Security, data management, architectural and planning, technology life cycle management)
• Good understanding of risk management functions, including IT audit, cyber security, and/or IT compliance.
• Experience in or knowledge of 3rd party / vendor management lifecycle
• Good understanding of Singapore Personal Data Protection Act (PDPA)
• Strong oral and written communication skills to work effectively with staff at all levels of the organisation

Note: All new hires will be offered a two-year contract in the first instance. Contract renewal and emplacement on permanent appointment will be subject to continuous good performance.

Responsibilities :

● Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.

● Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.

● Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.

● Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.

● Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.

● Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.

● Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.

● Developing and implementing security policies and procedures that ensure the organization’s data

and systems are protected against cyber threats.

● Conduct regular vulnerability assessments and penetration testing to identify potential security

weaknesses and risks to make improvements in the organization’s security.

● Report all security incidents to the home office and work with corporate IT on response and resolution strategy.

● Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.

● Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

● Bachelor’s degree in computer science, information technology, or equivalent experience.

● 5+ Years of experience in a cyber or information security management role.

● Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).

● Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.

● Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.

● Demonstrated understanding of business processes, IT risk management, and related standards.

● Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.

● Excellent problem-solving skills and the ability to think critically under pressure.

● Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.

● Proven track record of staying current with evolving cybersecurity threats and best practices.

● Exceptional planning and organizational skills, and excellent written and oral communication.

● Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.

● Professional information security certification preferred, such as:

○ CompTIA Security+

○ Certified Information Systems Security Professional (CISSP)

○ Certified Information Systems Auditor (CISA)

○ Certified Information Security Manager (CISM)

Location: East area

HOW TO APPLY :

Interested candidates, please submit your resume by clicking on “Apply Now” or aliceyap(a)hkmsvs.com

All applications will be treated in the strictest confidence and only shortlisted candidates will be notified

Yap Lay Choo

EA Licence No. 03C5391 | Registration No. R1987101

Role Accountability

This role is responsible for supporting Lubrizol’s Information Security Training and Awareness initiatives to elevate the understanding and adoption of a security culture that reduces overall cyber risk to the organization. Participate in the development and delivery of training and educational materials, Lubrizol’s simulated phishing program, all while providing reporting of activity to stakeholders with a respectful understanding of Lubrizol’s multicultural, global background.

Essential Job Functions

• Support the Information Security Training and Awareness program initiatives, following our internal policies and procedures.
• Identify training needs among the various business units supporting Lubrizol and supporting the phishing simulation program as needed.
• Assist with tabulation and reporting of results of training and phishing activities, tracking activity status in a consistently manner.
• Provide a bridge of communication utilizing all channels available to achieve a positive behavioural change.
• Support the Security Ambassadors program across Lubrizol.
• Gain an understanding of the unique security awareness requirements of Lubrizol business and manufacturing environments and serve as their primary point of contact.
• Instil a security culture that reduces the possibility of information security incidents.
• Provide insight and recommendations as part of a global information security team.
• Other Information Security activities as needed.

Critical Competencies

• Dynamic, initiative-taker that applies their strong, people-centric cyber-risk background along with effective communication and training skills to significantly improve the cybersecurity culture.
• Demonstrated effectiveness of working independently, establishing priorities, and managing task completion.
• Organizational awareness with an understanding of how to engage with employees and contractors to achieve best results.
• A true collaborator with a strong internal customer service approach, able to effectively build relationships and work in a collaborative, global environment.
• Sound decision-making and initiative-taking/creative critical thinking skills.
• Strong people skills.
• Responsive to internal stakeholders.

Required Qualifications

Education / Certifications:

• Associate degree in information technology (IT) or equivalent business experience.
• SACP, CSAP certifications are a plus.

Experience:

• Minimum four (4) years of IT or relevant business experience, preferably working in a cybersecurity team.
• Understanding of cybersecurity, human, and IT risk concepts, along with industry standards.

Skills & Systems:

• Solid experience with Microsoft Windows-based operating systems and Office products.
• Understanding of information security concepts.
• Ability to resolve issues via research and investigation.
• Experience in documenting issues and solutions to assist end user understanding.
• Understanding of the manufacturing environment and its unique information security needs a plus.
• Non-English language proficiency a plus.

• Manage cloud and on-premises systems, including system security, monitoring tools, Google Workspace, websites, office automation systems, and databases. This involves daily operations, provisioning, and support.
• Provide Level 2 technical support, resolving issues through both on-site and remote troubleshooting methods.
• Manage vendors to ensure good quality service delivery on time and issues are resolved with agreed SLA
• Act as the primary point of contact for all matters related to systems and databases, including solution development.
• Research, evaluate and recommend hardware and software solutions, present evaluation comparison analysis to the management, prepare detailed plans and specifications for systems requirements.
• Oversee the lifecycle management of all system assets, including inventory tracking, technology refreshes, preventive maintenance, and disposal.
• Coordinate and schedule maintenance for compute and storage resources, communicating maintenance schedules and impact on system availability to users.
• Maintain comprehensive documentation of systems, including diagrams, technology stacks, contracts, subscriptions, and licenses.
• Collaborate with external contractors to ensure seamless delivery of systems and services.
• Conduct regular cybersecurity assessments to identify and mitigate risks, ensuring the security and integrity of all systems and data.
• Investigate and respond to cyber incidents in a timely and effective manner, following the incident response procedure
• Collaborate with other Group entities within the Cybersecurity team to enhance the overall security posture of the organization and group
• Demonstrate the ability to handle stress effectively, particularly in high-pressure situations.
• Document and update IT infrastructure, policies, and SOP documents. Involve in audits
• Conduct systems/user ID and access review and involve in audits.
• Perform additional IT-related tasks as assigned.

Requirements

• Diploma or Bachelor's degree in Computer Science or a related field.
• A minimum of 5 years of experience in IT.
• Certifications in MCSE or MCSA, with additional certifications in Google and Azure administration or similar.
• Proficiency in configuring and managing on-premises servers, storage, databases, and AWS resources.
• Skilled in configuring and managing document management and workflow systems.
• Proven ability in designing, implementing, and maintaining data backup and recovery systems.
• Knowledge or experience in network administration and Cyber security is preferred.
• Strong critical thinking, analytical abilities and ability to handle stress.
• Strong in vendor management and troubleshooting skills
• A fast and collaborative team player.
• Able to work and collaborate effectively with cross functional teams within the larger group.
• Strong verbal and written communication skills, capable of creating good quality training guides and videos, explaining IT architecture, drafting clear and precise IT announcement.

Responsibilities:

• Attend to feedback & complaint received from clients or any other stakeholders
• Liaise with client / consultants, contractor for the monitoring and closure of any complaints, feedback and defects
• General administration work (e.g documents filling, answering phone calls, attend to enquiries or other administative tasks as assigned by the Director /Managers
• Assist in adminstrative works across projects on hand e.g time attendance, leave matters
• Provide administrative support assistance and other ad-hoc adminstrative roles when required

Requirements:

• At least 2 years relevant working experience in related field and preferably in Construction Industry
• WSQ Service Excellence (Level 1) Certification or General Skills Competencies (GSC) preferred
• Good communication & interpersonal skills
• Ability to work well in a team
• Initiative and independent

Technical Specifications:

• Good in providing solution by investigating and post-mortem analysis to resolve security violations.
• Experience in Information Security
• CISSP or Global Information Assurance Certification (GIAC) or equivalent.
• Performed asset and network discovery activities to ensure full coverage of vulnerability discovery.
• Good Experience in system and application vulnerability testing for Web servers, DB servers, Network devices Etc. using Nessus or Nexpose or other vulnerability Manager Tools.
• Good in monitoring security vulnerability information from vendors and third parties applications.
• Good in implementing policy audit for servers and workstations
• Prioritizing remediation activities with operational teams through risk ratings of vulnerabilities and assets.
• Research threats and vulnerabilities and, where appropriate, take action to mitigate threats and remediate vulnerabilities.
• In-depth knowledge of security systems and applications and a strong foundation in core area of security (e.g. OS hardening, Active Directory, DLP, network and perimeter).
• Good experience in configuring hardening guidelines and helped in maintaining baseline standards.
• Good experience in configuring CIS benchmarks on (Servers, Desktop & Network Devices)
• Configuring and monitoring of operational security infrastructure
• Good exposure to industry standards such as ISO 27001, PCI-DSS, with Audit experience in large enterprise/Service provider environment.
• Have good knowledge in web application security testing.
• Have a very good understanding about life cycle of Information Security Audit / VA
• Recommend, scheduled the security patches and other measures required in the event of a security breach.
• Monitor system logs, SIEM tools and network traffic for unusual or suspicious activity. Interpret such activity and make recommendations for resolution.
• Experienced in investigate and resolve security violations by providing post-mortem analysis to illuminate the issues and possible solutions.
• Good knowledge of Application exploitations and configuring alerts on SIEM
• Worked on installation, configuration management of security systems and applications, includes policy assessment, compliance tools, network security appliances and host-based security systems.
• ·Worked on monthly management reports, dashboards, documentation for security systems and procedures.
• Good in reporting unresolved network security exposures, misuse of resources or noncompliance situations using defined escalation processes.
• Good in training, mentoring and guiding for team members to use of security tools and resolve issues.
• Good in evaluating, implementing information security solutions to protect against potential threats for security violations
• Worked on incident response and architecture review processes.
• Managed and supported Endpoint Security/ ePolicy Orchestrator, Virus scan Enterprise, Data Loss Prevention, Host Intrusion Prevention and Endpoint Encryption.
• Have good knowledge on Data loss prevention and Endpoint Encryption tools.

Overview

This position is responsible for developing and executing a comprehensive PR strategy and plans that support the overall product marketing plans.

Roles & Responsibilities

• Work closely with Marketing, Sales teams, and the appointed PR agency to develop the overall PR strategy and plans for HMGICS products.
• Establish and maintain strong relationships with all media contacts, key opinion leaders, and key industry stakeholders.
• Plan and organize media engagement events, including product previews, launches, and showcases.
• Manage the development and distribution of press materials, including media releases, keynote speeches, product factsheets, etc.
• Actively pitch new story angles/media interviews to maximize product exposure.
• Manage the HMGICS Newsroom to ensure all product news and information (local/global) are updated in a timely manner.
• Oversee the overall management of media test drives and the test car fleet.
• Monitor industry trends and news, and conduct monthly media monitoring of HMGICS clippings.
• Serve as the key liaison for all product-related media inquiries.

Requirements

• Bachelor’s degree in Marketing, Mass Communication, or related disciplines
• Minimum 5 years of experience in Public Relations (preferably in the Automotive industry)
• Strong knowledge of traditional and digital PR techniques, including media relations, influencer marketing, and content creation
• Strategic thinker with a passion for the automotive industry and a proven track record of delivering successful PR campaigns
• Excellent written and verbal communication skills, with the ability to craft compelling messages and narratives

We is seeking a talented Cyber Security Analyst based in Singapore. As a Cyber Security Analyst, you will play a key role in ensuring the security and integrity of our organization's data and systems.

Responsibilities:

• Monitor, detect, and respond to cyber threats and security incidents,
• Conduct vulnerability assessments and penetration testing to identify potential weaknesses in our systems,
• Develop and implement security measures and best practices to protect against cyber attacks,
• Stay up-to-date with the latest cyber security trends and technologies,
• Collaborate with cross-functional teams to identify security risks and implement appropriate solutions,
• Provide training and guidance to employees on cyber security awareness and best practices.

Requirements:

• Bachelor's degree in Computer Science, Information Security, or a related field,
• Proven experience in cyber security or a related role,
• Strong knowledge of security protocols and tools,
• Ability to analyze and interpret complex data and make informed decisions,
• Excellent problem-solving and communication skills,
• Relevant certifications (e.g. CISSP, CISM) are preferred but not required.

About Us

Zone IT Solutions is an Australia-based Recruitment Company. We specialise in Digital, ERP and larger IT Services. We offer flexible, efficient and collaborative solutions to any organisation that requires IT, experts. Our agile, agnostic and flexible solutions will help you source the IT Expertise you need. Our delivery Offices are in Melbourne, Sydney, India, USA and UK. If you are looking for new opportunities, your profile at [email protected] or contact us at +61434189909

Also, follow our LinkedIn page for new job opportunities and more.

Zone IT Solutions is an equal-opportunity employer, and our recruitment process focuses on essential skills and abilities.

We are looking for an individual with a passion for cyber security to work alongside a talented team to improve and operate a cyber security center.

The role requires a strong background and understanding of all cyber security domains. 

In this position, you will be part of the global cyber security operations team with focus on identification, analysis and response to cyber security threats and events. You will support the Head of our Cyber Security Operations Center in improving the effectiveness of the team and lead the planning, implementation, documentation as well actively coordinating and overseeing the service providers including MSSP.

You can expect a demanding and complex international environment, which is highly stimulating and encouraging. The growth of the company demands your structured and innovative approach, as well as flexibility to a high degree. As a committed team player, you will support developing the maturity of the cyber security operation center, its controls and processes.

Your key tasks 

• Manage and handle Cyber Security Incidents on a daily basis
• Identify cyber security gaps in existing and proposed projects
• Participate in organizational security projects, as required
• Support in development processes, and procedures for the team
• Assist correlating alerts, implementing monitoring Use Cases
• Provide implementations, recommendations for protecting and resolving threats and incidents
• Participate in the selection and evaluation of security solutions, or enhancements to existing cyber security solutions, to improve overall enterprise security