Total 528 it specialist job vacancies in Legal / Public / Security category in Singapore

Global Security protects the firm's employees and assets throughout the world. This responsibility includes the development of security and safety policies and procedures, regulatory and legislative compliance, incident management, corporate building security and customer/visitor/client safety, fraud investigations, physical crime investigations, workplace violence, fire and life safety, executive protection, pre-employment screening, security guard management, alarm response and other security operations on a global basis.

As a Global Security Specialist in the Global Security team, you will be an integral member of the 24/7/365 team in the Singapore-based APAC Global Security Operations Center (GSOC) providing intelligence collection and analysis, risk incident triage and escalation as well as crisis management support to the firm across APAC. This is an opportunity to serve within a mature corporate security operation and work with seasoned security experts, overseeing a broad and diverse portfolio of responsibilities and geographies. You should be a self-driven and resilient individual with the ability to perform under pressure and deliver across competing priorities.

Job responsibilities:

• Support senior management and line-of-business stakeholders closely by triaging risks and ensuring business continuity during any incident or crisis.

• Proactively gather, analyse information from various sources and draft reports to provide management and global contacts with useful and actionable intelligence.

• Manage and administer travel security operations including tracking, assisting and advising international travelers on any incident or crisis.

• Oversee the firm’s local incident management teams throughout the APAC region, and coordinate with other regional GSOCs for international incidents or crisis.

• Work closely with partner teams including Real Estate, Global Technology Infrastructure, Resiliency, line-of-business Business Resiliency and Global Security managers to ensure effective execution of crisis management processes.

• Manage tasks or projects which are also part of GSOC's operational support such as those related to Technical, Physical and Travel Security.

• Manage any other duties or projects as directed by APAC Global Security senior managers.

Required qualifications, capabilities, and skills:

• Minimum Polytechnic diploma in relevant disciplines such as administration, risk, criminology, security, emergency response, crisis management.

• Minimum 3 years of experience in relevant or transferable fields such as those related to security intelligence or operations, incident management, crisis or emergency response.

• Strong knowledge and interest in security and geo-political developments across APAC with the initiative to rapidly assess emerging themes, events and incidents for the potential to impact business, client and third-party locations and business travelers across region.

• Ability to work effectively under pressure in a fast-paced environment while consistently producing error-free work and meeting deadlines. Strong analytical, interpersonal skills and comprehensive computer skills (good understanding of all Microsoft applications).

Preferred qualifications, capabilities, and skills:

• Bachelor’s degree or post-graduate level qualification, particularly in relevant fields such as security studies, international relations, social sciences or the humanities is a plus

To apply for this position, please use the following URL:

https://ars2.equest.com/?response_id=6412f6efbe864fdd2adb62c1e3651498

Allegis Global Solutions is the exclusive Contingent HR services provider for one of the world’s leading banks.

At Allegis Global Solutions we’re proud to be the leader in global talent solutions. We draw upon decades of industry expertise to develop innovative tools, products, processes and strategies focused on outcome. Moreover, we’re incredibly proud to have built a culture that empowers our people to make their mark while making deep connections that will last a lifetime. With our passion and culture for talent, we are truly transforming the way the World acquires talent.

Our Client is one of the world's most international banks with over 1,100 branches, offices and outlets in 67 countries. They operate in some of the world's most dynamic markets and have been for over 150 years. More than 90 per cent of their income and profits are derived from Asia, Africa and the Middle East. Their brand promise, Here for good, underlines their distinctive approach.

Litigation/Disputes

• Advising on and managing employment litigation/disputes
• Liaising with external legal counsel regarding the strategic approach to employment law disputes, critically assessing advice received and tailoring this to the business/organisation
• Co-ordinating disclosure process during employment litigation, liaising with internal and external stakeholders to ensure that disclosure obligations are complied with
• Co-ordinating witness statement aspect of employment litigation, ensuring statements are tailored to the business/organisation
• Collaborating with the corporate communications team to manage reputational risk
• Identifying and analysing opportunities for settlement and advising Human Resources (HR), Employee Relations (ER) and/or business stakeholders on settlement strategy
• Preparing and negotiating settlement terms

Advisory

• Advising on and managing employment issues, including investigations, accountability reviews, material disciplinary and grievance matters, performance management, redundancies, restructures and contentious exits
• Managing relevant stakeholders and providing accurate and timely updates regarding the status of disputes or issues
• Advice and best practice guidance on regulatory issues affecting staff, particularly relating to remuneration and assisting with drafting and/or reviewing of contentious regulated references
• Advising on employment law aspects of HR policy or strategy projects, and co-ordinating advice from other members of the Employment Law team or external counsel
• Advising on and participating in consultation on internal policies and procedures
• Advising on Group-wide diversity and inclusion initiatives and/or comms
• Supporting the HR/ER team and other relevant stakeholders through legal and best practice updates
• Occasional support for M&A integration, including advice on staff consultation obligations and restructuring

Processes

• Providing relevant stakeholders with accurate and timely information regarding the status of HR disputes and ER issues
• Reviewing internal policies and procedures
• Advising on employment contracts and maintaining global templates
• Advising and best practice guidance on regulatory issues affecting staff, particularly relating to remuneration
• Participating in global and local HR projects
• Collaborating with the eDiscovery & Data Advisory team to improve the Bank’s approach to data subject access requests
• Providing occasional support for M&A integration, including advice on staff consultation obligations and restructuring
• Reviewing external counsel/supplier quotes and costs and ensure payment of invoices

Requirements

• Good organisational skills in order to manage multiple matters and stakeholders at the same time. Being able to pivot as priorities change is essential.
• Strong analytical skills to review background facts and identify the key legal issues raised by the employment dispute or issue. You will often be advising in real time as matters are unfolding so must be comfortable with ambiguity and confident taking a pragmatic approach as more information becomes available.
• Excellent communication skills and succinct written style, with the ability to match your tone and level of detail to your audience.
• Strategic mindset, recognising the wider organisational, commercial or regulatory impact that a matter may have beyond the immediate set of facts.
• Disciplined approach towards timelines and tracking all steps required in order to manage matters and implement a strategic approach while keeping stakeholders updated.

Qualifications

• University degree in law or other university degree plus law conversion from an accredited law school
• Relevant practising certificate
• Ideally at least 3+ years PQE experience
• Microsoft Outlook and Microsoft Teams proficient

Experience in:

• Employment litigation
• Drafting and advising on employment contracts and policies
• Advising on employee relations issues such as disciplinaries, grievances, redundancy/restructure and termination of employment
• Employee data privacy issues (preferred)
• Regulatory issues affecting staff, particularly remuneration (preferred)

Technical Competency

Employment Law

• Knowledge of domestic and international laws governing employment, and the ability to interpret and take action on aspects of employment laws that impact the business

Litigation

• Knowledge of domestic and international laws, regulations and court rulings; ability to use tools, techniques and processes to take action on aspects of litigation that impact the business.

Business Acumen

• Knowledge, insight, and understanding of business concepts, tools, and processes that are needed for making sound decisions in the context of the company's business; ability to apply this knowledge appropriately to diverse situations.

Responsibilities:

1. Administer day-to-day IT Infrastructure security operations in alignment with established security frameworks and requirements.

2. Implement security controls, conduct patching, and enforce hardening measures for infrastructure components.

3. Assess the business and operational impact of security remediation activities before making changes to the IT Infrastructure environment.

4. Document and escalate security findings that require attention beyond standard remediation procedures.

5. Continuously evaluate Azure and AWS cloud resources for security vulnerabilities, prioritize responses, and implement necessary measures.

6. Apply Azure and AWS cloud hardening practices following industry benchmarks and company security frameworks.

7. Monitor and optimize the patching status of the entire IT Infrastructure, ensuring timely application of patches.

8. Remediate infrastructure vulnerabilities based on severity and internal risk assessments.

9. Take corrective actions based on insights from Azure Defender, AWS Security Hub, and vulnerability assessment tools.

10. Perform Azure Active Directory administration, including managing access control policies and whitelisting/blacklisting.

11. Administer email filtering processes, analyze spam and phishing attempts, and conduct investigations as needed.

12. Integrate IT assets into SIEM security dashboards, addressing any gaps in asset discovery.

13. Collaborate with IT security officers, managers, and support teams to analyze and investigate SIEM events.

14. Serve as a subject matter expert in IT Infrastructure security, actively participating in IT infrastructure and operations meetings.

15. Attend weekly IT security meetings and respond to ad hoc IT security inquiries.

Qualifications:

a. Proven experience in IT Infrastructure security administration.

b. Familiarity with Azure and AWS cloud environments.

c. Strong understanding of security frameworks and best practices.

d. Ability to assess and prioritize security risks.

e. Proficiency in applying security measures to cloud resources.

f. Experience with vulnerability assessment tools.

g. Knowledge of Azure Active Directory and email filtering.

h. Familiarity with SIEM security dashboards.

i. Excellent collaboration and communication skills.

Responsible for maintaining the overall security posture of the IT infra. ITSO will be the single point of contact for all security related tasks which includes reporting, managing security tools, assist in handling security incidents, Security Governance, Compliance and Auditing.

• Be the point of contact for HSA IT security matters for 24hrs x 7 days.
• Provide IT security consultancy and advisory to Agency.
• To assist agency to consolidate, track and report the status of security advisory received from GITSIR, CSA, NCSC etc.
• Follow up with respective Facilities Management Team on the implementation of the remediation against the security advisory received, IOC scanning and reporting, patching of the system and vulnerability for systems in HQ DC.
• Provide ad hoc, monthly report for Privilege Access Manager, Early Detection and Response solution, Database Activities Monitoring, log review, account review etc.
• Review of logs capture in the syslog server from all the systems in HSA HQ and GDC.
• Support HSA in the IT security audit, compliance audit, and security related matters.
• Work on quarterly Vulnerability scanning and remediation with ATFM and provide reporting and track the status.
• ITSO resources will be full time dedicated to HSA to support all related IT security requirement.
• ITSO shall work with IT security engineer to Conduct Quarterly or OnDemand VA Scan all system and follow up with IT Facility Management on the remediation to meet IM8 timeline.
• Share domain and technical expertise, providing technical mentorship and cross-training to other peers and team members.

Requirements

• 5+ years IT security experience required.
• Experience with Networks, Servers (Windows and UNIX), Database.
• Experience in IT security auditing, security assessments.
• Understand protocols, traffic flows, ability to analyze logs from various sources.
• Knowledge of Active Directory, Endpoint protection solutions, Early Detection and Response solution, Database Activities Monitoring tools, SIEM etc.
• Excellent written and verbal communication, presentation skills.
• Proficiency in Microsoft Excel.
• Flexible, team player, “get-it-done” personality.
• Ability to organize and plan work independently.
• Ability to work in a rapidly changing environment.
• Ability to multi-task and context-switch effectively between different activities and teams
• CISSP certification preferred, CISM, Security+, IT security tools certifications (Imperva, Carbon Black) is a plus.

Responsibilities:

• Lead the IT Security team to manage and all IT security-related matters that support business objectives and strategies
• Develop and carry out IT security policies and plans
• Conduct security review of existing systems on their ability to provide adequate defence against the latest security threats.
• Conduct vulnerability assessments and penetration tests for all critical IT systems
• Drive and conduct IT Security awareness and training like security talks, phishing simulation and incident response exercises
• Manage and investigate all cyber security alerts and notifications from cyber surveillance and threat intelligence to identify root cause and impact for effective containment, mitigation and future improvements
• Manage and investigate all IT Security incidents to identify root cause and impact for effective containment, mitigation and future improvements
• Engage IT project teams throughout the SDLC to identify and prioritize applicable security controls and provide guidance on how to implement these controls
• Jointly perform, monitor, track and review with IT Governance team and other IT teams on all information systems and infrastructure and security
• Maintain and enhance the Information Security risk assessment methodology
• Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit
• Act as Subject Matter Expert (SME) in security technologies, and provide knowledge sharing and technical assistance to other team members
• Define security configuration standards for platforms and technologies
• Detailed reporting on IT security initiatives, scans, incidents to management and statutory reporting
• Any other ad hoc duties as assigned.

Requirements:

• Bachelor's degree in Computer Science, of Information Technology or equivalent, with minimum 5-7 years' experience in Information and Cyber Security
• Good knowledge and experience with cloud security of Amazon Web Services (AWS), Microsoft Azure and SaaS solutions, security standards and frameworks like NIST, ISO27001, MTCS, CSA Security-by-Design (SBD) and Personal Data Protection Act (PDPA) is preferred.
• Other relevant certifications such as CISSP/CISA/CISM, CREST, CEH, CHFI would be advantageous
• Demonstrated leadership and adaptability, with willingness to readily and voluntarily take ownership of highly challenging tasks and problems, even beyond initial scope of responsibility.
• Ability to handle multiple tasks concurrently and meet deadlines, while maintaining focus despite conflicting demands.

Interested applicants, please Email , and look for

Jensen Fang Lifa

Recruit Express Pte Ltd

EA License No. 99C4599

EA Personnel Registration Number: R2197080

We regret that only shortlisted candidates will be contacted.

Responsible for maintaining the overall security posture of the IT infra. ITSO will be the single point of contact for all security related tasks which includes reporting, managing security tools, assist in handling security incidents, Security Governance, Compliance and Auditing.

• Be the point of contact for HSA IT security matters for 24hrs x 7 days.
• Provide IT security consultancy and advisory to Agency.
• To assist agency to consolidate, track and report the status of security advisory received from GITSIR, CSA, NCSC etc.
• Follow up with respective Facilities Management Team on the implementation of the remediation against the security advisory received, IOC scanning and reporting, patching of the system and vulnerability for systems in HQ DC.
• Provide ad hoc, monthly report for Privilege Access Manager, Early Detection and Response solution, Database Activities Monitoring, log review, account review etc.
• Review of logs capture in the syslog server from all the systems in HSA HQ and GDC.
• Support HSA in the IT security audit, compliance audit, and security related matters.
• Work on quarterly Vulnerability scanning and remediation with ATFM and provide reporting and track the status.
• ITSO resources will be full time dedicated to HSA to support all related IT security requirement.
• ITSO shall work with IT security engineer to Conduct Quarterly or OnDemand VA Scan all system and follow up with IT Facility Management on the remediation to meet IM8 timeline.
• Share domain and technical expertise, providing technical mentorship and cross-training to other peers and team members.

Requirements

• 5+ years IT security experience required.
• Experience with Networks, Servers (Windows and UNIX), Database.
• Experience in IT security auditing, security assessments.
• Understand protocols, traffic flows, ability to analyze logs from various sources.
• Knowledge of Active Directory, Endpoint protection solutions, Early Detection and Response solution, Database Activities Monitoring tools, SIEM etc.
• Excellent written and verbal communication, presentation skills.
• Proficiency in Microsoft Excel.
• Flexible, team player, “get-it-done” personality.
• Ability to organize and plan work independently.
• Ability to work in a rapidly changing environment.
• Ability to multi-task and context-switch effectively between different activities and teams
• CISSP certification preferred, CISM, Security+, IT security tools certifications (Imperva, Carbon Black) is a plus.

Aramco Asia is a group of Asian wholly owned subsidiaries of Saudi Aramco Asia Company, and they share a key mission in serving Saudi Aramco’s corporate strategic initiatives in the Asia-Pacific region. We are in the search for a Public Affairs Specialist to join the team.

Principal Duties:

• Assist or lead to plan and manage PR events, exhibits and projects as requested by management or local business units
• Develop, write and edit corporate communication material, such as speeches, presentations, press releases brochures, advertising copy, to ensure compliance with corporate identity and policies
• Assist or lead the preparation of publicity for special events, when directed by the Management, including press kit in local language and English
• Serve as the Company's main point of contact for local media as required, contact key editors, collect their views, opinions and attitude toward Aramco, and provide findings to the Department Head
• Asist visit plan by local media to Aramco by helping to make arrangements/preparation for interviews with designate Saudi Aramco executives or other representatives
• Conduct media monitoring locally for any items on Aramco directly or indirectly and reports to management
• Assist Management-sponsored conferences, company's CSR activities, and website maintenance
• Assist implement the information aspects of crisis management or disaster control policies if required
• Assist to perform special projects, long-range studies, and related activities, which are complex in nature
• Represent the company as required at conferences, seminars, and other professional gathering
• Perform other miscellaneous duties as directed by line manager

Minimum Requirements

• Bachelor degree, preferably in public relations, journalism, or related field
• 13 years ' work experience, preferable with 7 years' oil and gas industry experience
• Experience as writer, editor, or external affairs-related will be a plus
• Must be able to communicate, comprehend and write accurately, clearly and concisely in English & local language at a level required to perform the job
• Thorough knowledge of company policy and operations, with clear perception and understanding of handling confidential matters
• Excellent project management and interpersonal skills preferred
• Ability to identify and analyze PR/communications issues, trends and objectives locally, regionally and globally will be a plus
• Adequate background in cultures, traditions will be a plus
• Be personable, professional and displays a high degree of tact at all times due to the role he/she is required to perform despite not an official company spokesperson
• Fairly good software skill to develop presentations

This is a 2-year contract role with subject to extension depending on business needs.

Job Description & Requirements

• Manage, configure and upgrade a wide variety of security technologies
• Respond to managed security technologies fault alerts and/or customer escalation
• Troubleshoot product-specific technical issues within SLA and work with internal teams/external vendors to resolve technical issues
• Prepare and submit Incident Reports on high severity incidents
• Perform regular configuration backups on managed security products
• Create and update technical documentations on managed security technologies
• Generate monthly reports according to service scope requirements
• Adhere to organization and project security policies, procedures and security best practices
• Certifications is advantage: CISA / CISM

• Manage, configure and upgrade a wide variety of security technologies
• Respond to managed security technologies fault alerts and/or customer escalation
• Troubleshoot product-specific technical issues within SLA and work with internal teams/external vendors to resolve technical issues
• Prepare and submit Incident Reports on high severity incidents
• Perform regular configuration backups on managed security products
• Create and update technical documentations on managed security technologies
• Generate monthly reports according to service scope requirements
• Adhere to organization and project security policies, procedures and security best practices
• Certifications is advantage: CISA / CISM

You will be part of a well-established international team in Information Security focused on Cloud Security Architecture, Security Tooling Engineering and Automation.  

Your role will contribute to the success of the team and the Company. 

Your key tasks

• Support Cloud & Infrastructure Organization by reviewing and analysing Network, Systems, and Application architectures to enforce and validate Security requirements.
• Leads Threat Model exercises for new services/major changes.
• Actively Collaborate with your team members to support them on daily operations, including: 
  • Review of IT infrastructure solution designs to ensure compliance with policies and standards. 
  • Operational implementation, Automation, and ownership of Security Tools 
  • Assist in deploying automation of operational processes and procedures, identify weaknesses, propose, plan, and deploy improvements to address and enhance the infrastructure design. 
• Support and maintain the APAC’s Information Security Management System (ISMS) to assure continuous compliance with regulations, laws, and contractual obligations by adopting and deploying industry and market standards and accepted best practices.
• Be on routine standby to support the team.

· Be clear of customer's security framework, such as information security policies, processes/procedures, guidelines and etc.

· Ensure compliance with customer's cybersecurity policies.

· Perform activities necessary to ensure customer's data systems and networks are secure, sure activities are not limited to log analysis and security assessment of customer ICT systems.

· To manage/conduct vulnerability assessment and coordinate penetration tests activities.

· To conduct information security awareness training

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R22111604

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R22111604

About the Client

Our client is a reputed bank.

Responsibilities

· Actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user-initiated problem calls/tickets) and request management.

· Final technical approver for any changes into IT Security systems and is accountable for any technical changes in the environment from a RUN/BAU perspective.

· Involved in projects like End of Life, New Builds, migrations, and technical upgrades of the solution managed by the team.

· Participates in global Infra events (like Power down and DR Tests)

· Ensures activity is performed in compliance with norms, standards, processes, and procedures.

· Gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting.

· Ensures documentation is up to date and relevant for use.

Skills/Requirement

· Min 8 years of IT Security experience in administration and management of IT Security technologies.

· Experience in Symantec Data Loss Prevention, Symantec Endpoint Protection, Data Classification, and other endpoint & data security solutions.

· Knowledge of different domains of IT Security.

· Working & hands-on experience in administering the IT Security Solutions.

· Must have experience in working in similar Production setup in Run (Operations) mode.

· Ability to apply risk-based approach while working on assigned responsibilities.

· Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions.

· Must have working experience in managing endpoint security solution for a large enterprise level environment, working experience in financial organization is preferred.

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected]

We regret to inform that only shortlisted candidates will be contacted.

PERSOLKELLY Singapore Pte Ltd EA License No. 01C4394 EA Reg No: R23118975 (ABDUL RAHMAN ANSARI RAJA)

**********************************

This is in partnership with Employment and Employability Institute Pte Ltd (“e2i”). e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance and skills upgrading services, and partnering employers to address their manpower needs through recruitment, training, and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation-wide manpower and skills upgrading initiatives. By applying for this role, you consent to e2i’s PDPA.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

**********************************

Our client, a leading legal firm, is looking for an M365 Specialist to join their team to focus on managing, improving, and monitoring their Microsoft Infrastructure. The successful candidate will work with cross-functional global teams within a flat and open culture.

Responsibilities:

• Collaborate within the team to deliver, maintain, and support SharePoint and MS Teams services in a high-availability and fast-paced environment.
• Work closely with stakeholders, internal teams, and third-party suppliers to ensure that the services meet customer needs.
• Assist with Cyber Essentials compliance, including general server patching, CU installations, and reporting.
• Compile monthly usage statistics and manage ServiceNow Tickets.
• Conduct general housekeeping tasks and manage critical systems globally.
• Automate the process of compiling monthly usage statistics.
• Improve monitoring of SharePoint and MS Teams, including data feeds.

Requirements:

• Fluency in spoken and written English
• Good analytical skills with the ability to identify and resolve problems.
• Demonstrated experience working in a 3rd line support role with SharePoint applications, on-prem, hybrid, and in the cloud, and MS Teams / Teams Telephony.
• Proficiency in technologies such as MS Teams, SharePoint Online and On-Premises, IIS, .NET web applications, Microsoft Azure, Windows Operating Systems, Azure DevOps Release Pipelines, F5 Load balancing, SAML Single Sign-On, PowerShell and scripting, TCP/IP and basic networking concepts, diagnostic tools like Wireshark or Fiddler, SCOM, and Active Directory.
• Previous experience working in a global organization and an understanding of the core business activities of legal or professional services firms.
• Strong commercial awareness and a continual drive to maximize delivery of business value.
• Excellent verbal and written communication skills with the ability to present complex technical information clearly and concisely.
• Self-learner with a passion for learning modern technologies and trying new concepts and approaches.
• Pragmatic and results-oriented individual with a good sense of humor.
• Self-starter who can work with minimal supervision and handle potentially complex issues.
• Ability to work effectively within a large, globally located team.

With well over a decade of a solid and enviable track record behind us, headquartered in Hong Kong, Pinpoint Asia Infotech Pte Ltd (EA License: 16C8291) is the go-to IT Search Firm for several top Investment Banks and Financial Institutions.

If you are interested in the above position, please send your CV to Charlie Kim @ [email protected] (EA Registration number: R22104834)

• Professional Development + Travel Opportunities
• Excellent Compensation Package

About Our Client

Our client is an established firm, looking to hire an Information Security GRC Specialist to their team. This is an exciting role that offers career progression.

Job Description

As the Information Security GRC Specialist, your responsibilities include:

• Implementing and upholding the IT Technology Governance framework, policies, and procedures, taking into account relevant regulations and internal guidelines
• Developing the organization's cyber risk strategy and posture, encompassing data risk, cyber risk management, frameworks and policies, as well as measures, methods, and reporting
• Devising and enacting strategies for information security along with corresponding IT security policies throughout the organization
• Continuous assessment of IT security protocols and measures to boost the company's security position.

The Successful Applicant

As a successful candidate, you will have the following:

• Bachelor's Degree in Computer Science or a relevant field
• At least 5 years of experience in IT Risk, Compliance, Audit and/or InfoSec (preferably from regulated industry)
• Excellent communication skills, with the ability to effectively present, liaise with stakeholders
• Comprehensive understanding of MAS TRM

What's on Offer

• Reputable and Stable Firm
• Excellent culture and work environment

Contact

Isha Hussain (Lic No: R2197976/ EA no:18S9099)

Quote job ref

JN-042024-6405514

Phone number

+65 6416 9850

Michael Page International Pte Ltd | Registration No. 199804751N

Job Summary

Seeking IT Security professional with a keen interest in Information Technology (IT) Governance, Risk and Compliance to enable cyber resilience and information security for mission critical systems.
The individual will be responsible to conduct cyber risk assessment in support of technology initiatives to help identify IT related risk and determines appropriate controls to mitigate risks.

Mandatory Skill-set

• Degree in Computer Science, Information Security or Information Systems;
• At least 2-3 years of experience in IT security space with a strong experience in IT GRC ( Governance, Risk and Compliance ) related functions;
• Deep knowledge and understanding of internal controls, security frameworks, risk management and IT governance, auditing techniques and methodologies;
• Good knowledge of enterprise IT systems and components (applications, operating systems, databases, networks, cloud, DevOps;
• Knowledgeable in using various cyber security monitoring and analysis tools and techniques depending on the organization's needs and requirements;
• Familiar with cyber security standards, protocols and frameworks such as NIST CSF, CIS, PDPA;
• Strong in analytical thinking with attention to detail;
• Excellent communication and inter personal skills.

Responsibilities

• Act as a Subject Matter Expert on IT Governance, Risk management and Compliance (GRC) and related policies and procedures;
• Responsible for documenting methodologies and tools to mitigate information security or cyber risk;
• Prepare reports for information security or cyber risk related reporting, threat awareness and security awareness reports;
• Conduct compliance assessments and tracking the overall compliance health in relation to IT governance standards and procedures in compliance with regulatory requirements;
• Recommend corrective actions or appropriate security controls to mitigate technical risk;
• Continuously identify GRC Key risk indicators (KRI) and maintain IT Risk Register;
• Assist in the development of policies for conducting cyber security risk assessments and compliance audits;
• Formulate governance procedures for documenting and updating security policy, standards, guidelines and procedures;
• Perform information security or cyber risk assessment activities and assess third party security controls and internal security systems;
• Establish scope of risk analysis for new technology initiatives;
• Keep abreast of the dynamic cyber threat landscape and identify opportunities for enhancement of IT risk processes;
• Provide regular updates on the overall health of compliance, criticality assessment, audit findings, remediation and action plans.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

What we seek to accomplish together:

• and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis.
• compliance with these policies / procedures through ongoing security reviews and audits, not limited to log analysis and security assessment of customer ICT systems
• conduct security risk management exercise
• manage vulnerability assessment
• conduct information security awareness training
• for the development and management of customer’s security response plan. To lead and support customer in the matters of security incident resolution and response.
• of contact to assist and advise customer for ICT security related matters

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Responsibilities
• Plan, implement, manage, monitor, and upgrade IT security solutions.
• Support projects by delivering project deliverables and completing milestones.
• Develop and maintain technical, operational, and configuration documentation necessary for project implementation.
• Coordinate and manage vendors for product implementation and troubleshooting.
• Evaluate security products and conduct Proof of Concept (POC) to verify the effectiveness of security measures, ensuring their continued efficacy post-implementation.
• Provide technical support and incident response for IT security infrastructure components to the maintenance team.

Requirements:
• Proficient in Endpoint Security solutions, including Anti-Malware, Host Firewall, Application & Change Control, Disk Encryption, and EDR.
• Knowledgeable in Identity & Access Control solutions, such as PKI solutioning, Hardware Security Module (HSM), Privileged Access Management, 2FA, and OS Hardening Policies.
• Implement Endpoint or Identity & Access Control Security tools.
• Familiarity with various operating systems like Windows or Linux.

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Interested Applicants
Please WA Bryan Tay @ 97559161
Shortlisted Candidates will be notified

Bryan Tay Reg No. R23112463
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

Job Description

As a Cyber Security Specialist, you are responsible to architect, design, review and implement cyber security resilient in our product and projects. You are familiar to cloud security architectures and solutions, making sure the companies can operate in a safe, secure environment. You monitor, research, and analyze security risks to mitigate threats and security attacks that may occur to or within the cloud. You will implement customized application security assessments for client-based asset risk, corporate policy compliance as well as conduct vulnerability assessment. You should have an advanced understanding of cloud, networking, data traffic flow, system administration, cloud architecture, OSI model, anti-malware, anti-virus, defense-in-depth and common security elements.

The specialist’s focus is not only limited to assessing whether vulnerabilities exist but also how those risks could be mitigated which can help provide projects/organizations with more confidence about system stability and security going forward.

Responsibilities

• Develop and build cloud security architectures and solutions
• Monitor, research, and analyze security risks to mitigate threats and security attacks
• Solution design for product to help reduce attacks on cloud service data storage, create preventative features, and implement corrective controls when breaches do occur
• Regular security and risk assessment for system solutions
• Support on audit trial for security related implementation
• Consultancy on software and hardware for security vulnerabilities and risks
• Plan VAPT, execution, result analysis and provide fix recommendation.
• Provide guideline such as coding, key management, hardening, patch management, backup management, incident management, etc.
• Familiar to IM8 requirements and CIS, NIST security benchmark.
• Familiar to cyber security tools to perform preliminary scan.
• Familiar to public cloud infrastructure such as Azure, AWS, GCP and Huawei.

Skills Required

• Strong IT skills and knowledge including cloud, network, hardware, and software
• A forensic approach to challenges
• Good coordinator and team worker
• A deep understanding of how hackers work and ability to keep up with the fast pace of change in the criminal cyber-underworld
• Ability to seek out vulnerabilities in IT infrastructures
• Meticulous attention to detail

Job Responsibilities

Insider Threat Analyst is an operational role within the Bank’s Group Security Operations Center. The incumbent will be responsible for the continuous monitoring, analyzing, and investigating of insider threats and data leakage incidents. Must have good analytical and investigative skills to recognize and detect anomalous behavior.

Key Responsibilities

· To participate in the day-to-day monitoring, triaging, and investigating of potential suspected anomalous usage behavior alerts

· To work with internal teams to validate alerts within stipulated SLA

· To perform analysis on usage behavior trends to discover potentially fraudulent activities

· To perform continuous review and improvement on current monitoring operations to enhance effectiveness of monitoring

· Work with external partners to resolve issues or implement improvement to monitoring

· To gain good understanding of internal business applications to be able to analyze, recognize and identify potentially anomalous activities

· Investigate Data Loss Prevention (DLP) alerts and escalate DLP incidents in accordance to the DLP incident response and handling procedures

· Carry out DLP System Ruleset change requests in accordance to change management procedures

· Support management reporting of DLP incidents and statistics for ad-hoc and monthly reporting

· Coordinate DLP audit requests; respond to questions or reporting requirements from local authorities as required

· To work with internal cyber security teams to ensure investigations are comprehensive and complete to track and follow up on all escalated incidents to closure

Job Requirements

Education

· Diploma/Degree in Business Information Technology/Business Analytics from recognized academic institutions

Technical Skills and Experience

· Minimum 3-5 years of relevant experience as an insider fraud/threat analyst in a financial institution

· Excellent analytical and investigative skills

· Prior experience with analytical platforms

· Experienced with working with machine learning enabled platforms would be advantageous

· Experience with administration and operation of DLP Systems preferred

· Experience in development and fine tuning of DLP Ruleset preferred

· Knowledge of Cyber Security would be advantageous

· Relevant working experience in SOC environment and related processes will be added advantages

Soft Skills

· Good communication skills

· Strong analytical and problem-solving skills

· Ability to adhere to work processes and procedures

Other Requirements

· Ability to work independently

· Ability to work well with the rest of the team and department

When you’re part of the team at Thermo Fisher Scientific, you’ll do important work. Surrounded by collaborative colleagues, you’ll have the support and opportunities that only a global leader can give you. Our respected, growing organization has an outstanding strategy for the near term and beyond. Take your place on our strong team, and help us make significant contributions to the world.

The Sr Product Security Researcher, Product Security has global responsibility for the security associated with the company’s Product Security program. They will perform research, testing and validation of a product and its associated platforms, and guide integration of solutions within the overarching CIS program. This includes policy, security awareness & education, application and vulnerability assessments, technological security controls and risk evaluation. The solutioning activities must support relevant Thermo Fisher products (such as instruments, devices, equipment, and other electronic and/or connected devices) and infrastructure.

Key Responsibilities:

• Work closely with key product development leaders to ensure security is incorporated in all product offerings.
• Support efforts to inject security into all levels of the product development process.
• Drive secure development and integration of security features into all phases of product, firmware and software design and development.
• Lead programs to ensure continuous development and improvement of security integration into the product development lifecycle.
• Partner with architecture and development teams to develop shared security frameworks to enable consistent application of secure coding standard methodologies across the enterprise.
• Build working relationships with product development partners to maintain and improve product and application security processes.
• Assist to maturing process, policy, and standards guidance.
• Educate key partners on program, risks, and importance of security in our products and environment.
• Work with business units to identify, collect, call out, and close security vulnerabilities found in Thermo Fisher products and infrastructure; Leverage tools to deliver vulnerability information back to the development organization for remediation.
• Mentor others in what constitutes secure product activities.
• Perform research activities on existing and in development products and/or infrastructure to resolve security capabilities and discover unknown risks.
• Build testing approaches and perform testing activities on products and/or infrastructure to resolve vulnerabilities, validate remediation, and reduce overall risk profiles.
• Proactively ensure that applicable regulatory mandates are addressed with appropriate controls.
• Coordinate/participate in and perform design reviews, peer reviews, and code reviews.
• Ensure excellent consistency, documentation, and process across all programs.
• Coordinate with security risk assessments for new and existing products through the risk assessment team.
• Collaborate with other groups (e.g., Risk Management, Internal Audit, HR, Legal, etc.) to direct compliance issues to appropriate existing channels for investigation and resolution.
• Creation of product whitepapers throughout the product lifecycle.
• Creation of security bulletins to address new or evolving threats to products and infrastructure.
• Travel up to 25% and on-call/after hours duties may be required.
• 
  

Minimum Requirements/Qualifications:

• Deep knowledge of IoT and digital device research methods, variables and parameters including analysis, testing and documentation.
• Deep understanding of cryptography, authentication, authorization, network security protocols, and application security.
• Solid understanding of how to connect new and changing threats to IoT portfolio to build mitigating or compensating activities.
• Strong exposure to popular application security standards including OWASP TOP 10, CSC 20 etc.
• Bachelor’s Degree in Information Assurance, Information Security, Management Information Systems, Risk Management, or Computer Science (Master’s Degree a plus) or equivalent field experience.
• Relevant technical certificates a plus (OSCP, SANS, GIAC, etc).
• 5+ years of related work experience with security consulting, product security, secure software development, risk assessment, and/or vulnerability management.
• Solid interpersonal and documentation skills are a must.
• Ability to explain and promote technical concepts.
• Solid attention to detail, organizational skills.
• Strong customer service skills required.
• Excellent verbal and written communication skills and the ability to communicate professionally with a diverse group, executives, managers, and domain experts.
• The ideal candidate will have hands on experience in one or more of the following areas: Hardware System Integration, Signal and Power Integrity, RF Systems, Wi-Fi, Bluetooth, Wireless Communications, TCP/IP, Network and Application Penetration Testing.

Benefits

We offer competitive remuneration, annual incentive plan bonus, healthcare, and a range of employee benefits. Thermo Fisher Scientific offers employment with an innovative, forward-thinking organization, and outstanding career and development prospects. We offer an exciting company culture that stands for integrity, intensity, involvement, and innovation!

As an Information Security Manager, you will play a crucial role in our Security Operations Center. Your responsibilities will include monitoring, detecting, investigating, analyzing, and responding to security events within our IT infrastructure, including Operational Technology (OT) systems. Your expertise in cybersecurity frameworks, risk management, and incident response protocols will help fortify our defenses. A thorough understanding of Operational Technology security principles is essential, as you will oversee the integration of security practices in both IT and OT environments to protect our critical infrastructure. You will also apply Scaled Agile Scrum methodologies to coordinate technical meetings and manage security projects efficiently.

Roles and Responsibilities

• Design and implement advanced security architectures for IT and OT environments to ensure robust protection against emerging threats.
• Lead the development and integration of custom security solutions tailored to the specific needs of our digital and physical infrastructures.
• Conduct high-level vulnerability assessments and penetration testing to evaluate the security of IT and OT systems.
• Develop and refine incident response strategies to enhance our ability to respond to and recover from security breaches swiftly and effectively.
• Collaborate with IT and OT teams to ensure seamless integration of security technologies across all platforms.
• Serve as the technical lead on projects involving cybersecurity technologies, ensuring compliance with industry standards and regulatory requirements.
• Mentor junior engineers and analysts, providing guidance on complex technical issues and fostering a culture of technical excellence and innovation.
• Stay current with the latest cybersecurity technologies and trends, applying this knowledge to continuously improve our security posture.
• Prepare and present detailed technical reports and security briefings to senior management, offering strategic recommendations based on your assessments and findings.

Requirements

• A master’s degree in Cybersecurity, Computer Science, Engineering, or a related field, along with significant professional experience in cybersecurity.
• Expertise in designing and managing security solutions for both IT and Operational Technology systems.
• Advanced certifications in cybersecurity such as CISSP, CISM, or GIAC, with specific training in areas like SCADA or ICS security.
• Strong leadership skills with experience in managing complex security projects and leading cross-functional teams.
• Deep understanding of regulatory compliance and security frameworks such as ISO 27001, NIST, SOC 2, and others relevant to IT and OT cybersecurity.

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected]

We regret to inform that only shortlisted candidates will be contacted.

Job Code: PRIT

PERSOLKELLY Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1875348 (Tewari Priyanka)

**********************************

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.**********************************

Our client, a well-known MNC company is looking for candidates for the Legal Specialist position.

Responsibilities: -

• Provide legal support for daily operation, as well as projects assigned as person in charge (such as legal research and writing, drafting, proofreading, reviewing and arranging for execution of relevant contracts, creation and update of templates and the like)
• Provide refresher training for sales members in ASEAN + India on Purchase Agreements and Non-Disclosure Agreements and any relevant contracts to improve their awareness with regards to the potential legal risks
• Proactively address legal issues with legal firms including disputes, litigation, and any regulatory matters that might affect business in ASEAN + India
• Conduct compliance trainings relating to anti-cartel, anti-corruption, anti-fraud, conflicts of interest, whistleblowing and the like, and review relevant materials as appropriate
• Management of whistleblowing system as window person and supporting investigations of reports via such system and other major misconducts by employees if any
• Review and revise internal rules related to compliance
• Look into latest information on legal matters including revisions of laws and regulations in ASEAN + India, and provide such information to our affiliates therein
• Advice and support to external audits on legal domain
• Assist in improving work efficiency to current administration structure
• Dealing with regulatory matters including correspondence with regulators and regulatory examinations of Security Export Control regulations
• Guidance and training for young legal staff through sharing of experience

Requirements:

• Degree/Diploma in legal field, international business or equivalent
• Minimum 4-7 years of legal experience working in law firms or as an in-house legal and compliance
• Experience on advising on intellectual property and information security matters
• Highly competent with MS Office (Power Point, Excel and especially Word)
• Good communication and presentation skills
• Able to multi-task and self-motivated individual under a challenging work environment
• A team player with a positive attitude, independent and pro-active individual
• Able to travel for ASEAN and India region
• Good social etiquette and writing skills
• Outstanding attention to detail and deadline-oriented

PERSOLKELLY Singapore Pte Ltd | EA License No.: 01C4394 | UEN No. 200007268E
Registration No.: R23112488 (Julian Nerchan)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates collecting, using and disclosing my personal data for the purposes set out in the Privacy Policy which is available at www.persolkelly.com.sg I also acknowledge that I have read, understood, and agree to the said Privacy Policy.

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R22111604