Total 66 lead buyer job vacancies in Legal / Public / Security category in Singapore

• Experience in an international setting with high adaptability
• In depth understanding of China’s laws (GRC)
• People Manager role with a strong track record in leadership

about the company
Our client is a multinational company and they are a prominent player in the industry, renowned for its extensive brand portfolio, commitment to quality, and dedication to sustainability and social responsibility.

about the job

• Develop, govern and enforce cybersecurity policies, standards, and guidelines to ensure robust security practices.
• Lead evaluations of security and privacy risks, coordinating swift responses to suspected cyber incidents/events.
• Monitor cybersecurity risks and report findings to relevant technical and business executive committees.
• Manage the Information Security GRC team, focusing on all cybersecurity aspects within the designated region, domains, and tech portfolio.
• Proactively drive risk reduction initiatives within the defined scope.
• Ensure effective security measures within the scope of assigned regions, domains, and technology areas.
• Collaborate on cyber strategy and roadmap creation for long-term security goals.
• Drive compliance with internal standards and regional cybersecurity regulations, both internally and externally.

skills and experience required
Minimum of 10 years' experience in Governance, Risk, and Compliance (GRC), with a solid understanding of cybersecurity frameworks such as ISO 27001, SOC 2, MITRE ATTACK, and NIST, as well as expertise in penetration testing and security audits.

Cloud Security and consulting background would be high preferred.

Skilled in managing incident response, evaluating cybersecurity risks, and conducting vulnerability assessments.

Proven ability to lead a team, with a track record of managing at least 2-3 direct reports.

Experience working in a regional setting, with the ability to navigate diverse regulatory environments and cultural considerations.

Whats on offer
The permanent opportunity for an Information Security & Risk Governance Lead (GRC), will pay a salary range of $15,000 - $ 17,000 plus benefits. This opportunity offers hybrid working arrangement.

To apply online please use the 'apply' function, alternatively you can reach me at
https://www.linkedin.com/in/Oliviatoh-032330132/. (EA: 94C3609 / R22109942)

Role Description

This is a full-time on-site role for a SOC Team Lead located in Singapore. As a SOC Team Lead, you will be responsible to:

• Plan monthly duty roster for site team.
• Cover shift function if there are any shift resources are absent.
• Generate report dashboarding for technical analysis.
• Proficient in Microsoft excel/Power BI.
• Will run operation and work the SOP to ensure the 24X7 Security operations support services operate effectively.
• Responsible for site monthly report and documentations submissions.
• Onboarding/off boarding of manpower resources (1 month).
• Submit monthly timesheet and monthly service report as part of billing documentation timely.
• Work with Main Contractor to ensure security devices or apps are patched and firmware versions are upgraded in accordance with IM8 requirements.

Responsibilities:

• Monitoring and analyzing security events, identifying potential threats, conducting investigations, and responding to security incidents
• Work closely with the end client SOC team to ensure the timely and effective detection, containment, and mitigation of security incidents
• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure).
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits.
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to ensure compliance and regulatory requirements and industry standards.

Requirements:

• Diploma/degree in computer studies
• 2 years of experience working in a security operation, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role.
• Independent and capable of working in a high-pressure environment.
• Willing to work in rotational shift environment (including weekends and night shift).

Qualification training shall be provided as necessary to attain competency to deliver job responsibilities.

Main Job Responsibilities:

• Conduct 3rd party audits to assess organizations' Information Security Management System and related Statement of Applicability (SoA) for conformity with ISO/IEC 27001 and in strict compliance with GIC's Code of Ethics and established audit procedures
• Conduct other related Information Security, Cybersecurity, Data Protection audits – ISO/IEC 27701, ISO/IEC 27017, ISO/IEC 27018, CSA Cyber Essentials mark, CSA Cyber Trust mark, IMDA Data Protection Trust mark, GDPR Compliance audits, Second Party IT audits
• Conduct Information Security, Cybersecurity, Data Protection trainings/workshops/seminars
• Manage the entire audit process from planning, conducting, reporting, and following up on the assigned audits.
• Support in technical review of audit reports and technical advice to Sales Team and Certification Team as and when required.

Job Qualifications / Requirements:

• Possess a professional degree in Computer Science/Information Security/Cybersecurity or related fields to Information Technology
• At least two years are in a role or function relating to information security/Cybersecurity
• Successfully completed a Lead Auditor Course in ISO/IEC 2700 Information Security Management System (ISMS)
• Having completed training courses in Singapore PDPA Fundamentals/Practitioner and holding industry certifications like CISA, CIPM, CISSP will be advantageous

Joining Arup

Arup’s purpose, shared values and collaborative approach has set us apart for over 75 years, guiding how we shape a better world.

The Security Technology lead will provide direction and leadership to the specialist electronic security engineering and consultancy services (including integrated electronic security system such as video surveillance, electronic access control, intrusion detection etc.) in Singapore and South-East Asia. Arup’s Singapore Resilience Security & Risk (RSR) team is providing high end advisory services in Singapore and South-East Asia. The team currently has personnel with professional qualifications and skills in Security Risk & Strategy, Security Technology, Protective Design and Cyber Security.

The Opportunity

• Drive the overall performance and growth of the Security Technology team as part of the RSR leadership cohort.
• You will project manage a range of security projects, either direct security commissions or as part of larger multi-disciplinary projects. Here you will be responsible for the client interaction, project financial matters, quality assurance, delivery and resourcing.
• Undertake, manage and deliver the security engineering (electronic and protective) design for a range of facilities and/or for a variety of projects through all stages of design from concept, detailed and tender design to construction, and within established quality, budget and project expectations.
• Proactively approach clients, identify and develop business opportunities for RSR and other Arup disciplines. This includes planning and implementation of new market offers.
• You will develop and implement long term strategic plans to grow the RSR business in Singapore and across the region.

At Arup, you belong to an extraordinary collective – in which we encourage individuality to thrive. Our strength comes from how we respect, share and connect our diverse experiences, perspectives and ideas.
You will have the opportunity do socially useful work that has meaning – to Arup, to your career, to our members and to the clients and communities we serve.

Is this role right for you?

• Recognised relevant tertiary qualifications in electrical or electronic engineering or IT or similar area.
• At least 10 years of relevant industry experience in electronic security system design as consultant, manufacturer/distributor, end-user and/or security systems integrator.
• In depth understanding of latest security technologies (electronic and physical security).
• Membership of relevant professional institutions/professional peer bodies or significant credit towards eligibility for membership.
• Proven working knowledge of relevant legislation, regulations, codes of practice, and guidelines.

What we offer you

At Arup, we care about each member’s success, so we can grow together.
Guided by our values, we provide an attractive total reward package that recognises the contribution of each of our members to our shared success. As well as competitive, fair, and equitable pay, we offer a career in which all of our members can belong, grow and thrive – through benefits that support health and wellbeing, a wide range of learning opportunities and many possibilities to have an impact through the work they do.
We are owned in trust on behalf of our members, giving us the freedom, with personal responsibility, to set our own direction and choose work that aligns with our purpose and adds to Arup’s legacy. Our members collaborate on ambitious projects to deliver remarkable outcomes for our clients and communities. Profit Share is a key part of our reward, enabling eligible members to share in the results of our collective efforts.

Please see a list of Arup’s Singapore benefits below:

• Hybrid working policy & flexible working hours
• 13th month bonus
• Birthday leave
• Purchase Additional leave of up to 20 days (permanent employees)
• Paid parental leave for birth mothers 16 weeks & new parents (excluding birth mothers) 4 weeks
• Marriage leave (3 days)
• Examination leave (2 days)
• Family care leave
• Paid Annual subscription to relevant Professional association
• Reimbursement of Professional Engineers application and examination Fees
• International mobility opportunities
• QP allowance
• Site Allowance
• Work related travel insurance
• Dental expense cover
• Bike Loans of up to SGD2000

Different people, shared values

Arup is an equal opportunity employer that actively promotes and nurtures a diverse and inclusive workforce. We are an open environment that embraces diverse experiences, perspectives, and ideas – this drives our excellence.
Guided by our values and alignment with the UN Sustainable Development Goals, we create and contribute to equitable spaces and systems, while cultivating a sense of belonging for all. Arup provide an environment where you will make a positive difference. Discover more about life at Arup at www.arup.com/careers/your-life-at-arup.
We are committed to making our recruitment process and workplaces accessible to all candidates. Please let us know if you need any assistance or reasonable adjustments throughout your application or interview process, and/or to perform the essential functions of the role. We will do everything we can to support you.

Our Application Process

Please apply directly through our applicant tracking system. Shortlisted candidates will be contacted by Talent Acquisition to discuss next steps. Stay safe online – Arup will never ask for your bank details as part of our recruitment process.

Arup does not accept unsolicited resumes from recruiters or employment agencies.

Position Objective

Cognita is a global leader in independent education. Founded in 2004, we are a growing community of 100+

schools in 16 countries - in Europe & North America, Latin America, Asia and the Middle East - serving more

than 85,000 students. Each of our schools are proudly unique, however our collective purpose is to create an environment where everyone can, ‘Thrive in a rapidly evolving world’.

As part of our global cyber security initiatives, we are seeking a Cyber Security Lead based in our Singapore

Regional office to support the Asia region. Reporting to the UK based Group Manager of Cyber Governance

Risk and Compliance, with operational reporting to our Regional IT Director for Asia, the Regional Cyber

Security Lead will ensure the effective communication, implementation, and adherence to cyber security

policies and best practices across Asia. You will lead regional incident response efforts, help regional and

local teams implement security controls, provide assurance of control implementation, and ensure

compliance with organisational policies. This role requires collaboration with diverse stakeholders,

contributing to reporting and assurance activities for both regional and global teams. There will be a travel requirement associated with this role (around 20-30%) within Asia.

Key Accountabilities

Regional Expertise and Leadership

• Develop a deep understanding of the region and its unique country-level differences, staying informed on new technologies, regulatory changes, and industry best practices as you lead and oversee cyber security initiatives for the region.

Incident Response

• Develop and implement regional incident response plans, ensuring alignment with Group Policy and best practices.
• Lead regional incident response efforts, coordinating with local IT and security teams to ensure the effective handling of security incidents.
• Act as the primary liaison between Regional Teams and Group Cyber Security during major incidents which may involve engagement with local regulators.

Implementation of Security Best Practices

• Support local IT teams in implementing security good practices based on Group policies, NIST CSF 2.0 framework, and local regulatory requirements.
• Regularly review security controls and configurations, recommending improvements to strengthen the regions security posture.

Assurance and Compliance

• Lead assurance activities to ensure compliance with security policies, standards, controls, and operational procedures, conducting regular reviews and audits.
• Assist in ensuring the region meets all regulatory requirements related to cyber security.

Reporting and Metrics

• Develop and maintain key risk and performance indicators (KRIs and KPIs) as guided by Group Cyber Security to monitor the regions security programme.
• Contribute to group-level reports, providing insights into the region’s security posture for senior leadership.
• Provide the Asia Leadership Team with regular updates on cyber security progress at the school and regional levels

The Key Accountabilities listed above are not exhaustive and may be varied from time to time as dictated by the changing needs of Cognita. In this case, any significant changes or variations will be consulted with the post holder before undertaking these responsibilities.

Security Awareness and Training

• Support and lead regional security awareness initiatives, delivering tailored training to improve security culture and readiness.
• Ensure staff are informed of emerging threats and best practices for mitigation.

Cross-Functional Collaboration

• Build strong relationships with regional IT, operations, and business teams to foster collaboration on cyber risk management.
• Work closely with Group Cyber Security to ensure alignment with global initiatives.

Remediation and Transformation

• Drive remediation efforts for identified vulnerabilities, ensuring timely and effective action.
• Support broader security transformation initiatives to improve the regions cyber maturity in line with Group strategy.

Safeguarding Responsibilities

Cognita Schools are committed to safeguarding and promoting the welfare of children and young people and expects all staff, volunteers and other third parties to share this commitment. Safer recruitment practice and pre-employment background checks will be undertaken before any appointment is confirmed.

• To comply with safeguarding policies, procedures and code of conduct
• To demonstrate a personal commitment to safeguarding and student/colleague wellbeing
• To ensure that any safeguarding concerns or incidents are reported appropriately in line with policy
• To engage in safeguarding training when required

Person Specification

Essential Skills & Experience

• Ability to implement security controls, policies, and mitigation strategies within agreed budgetary guidelines and operational constraints.
• Strong working knowledge of cyber security good practices, including incident response and risk management
• Knowledge and experience working with common security management frameworks such as NIST, CIS etc.
• Experience coordinating and communicating penetration tests
• Strong analytical skills with excellent attention to detail
• Ability to plan strategically and implement positive change that is operationally sustainable.
• Ability to prepare and deliver clear reports and presentations to senior management, including the ability to clearly articulate cyber security risk to the business.
• Proficiency in using Microsoft Office applications (Word, Excel, PowerPoint)
• Excellent communication skills in English both written and verbal
• Minimum of 7 years’ experience in a cyber security or GRC role, preferably within an international organisation.
• Proven ability to implement and support security best practices across regional and local teams
• Experience developing and tracking security metrics (KRIs and KPIs)
• Proven ability to manage and respond to cyber incidents effectively within the region.

Desirable Skills & Experience

• Familiarity with cyber security tools (e.g., SIEM, DLP, IDS/IPS)
• Experience working with Power BI
• Experience supporting internal and external audits and negotiating control improvements
• Good knowledge and understanding of the regulatory frameworks in the Asian countries where we operate.
• Experience coordinating major security incident response processes
• Experience managing security due diligence and integration for M&A activities
• Experience working within the education sector or a similar customer centric industry like Healthcare etc.
• Experience working in decentralised global or international business models.

Qualifications

• Relevant degree or diploma in Information Security, IT, or a related field and or;
• Relevant certifications related to information security or GRC (e.g., CISA, CISSP, CRISC)

Terms of Employment

• Based in Singapore Regional Office with hybrid work arrangement
• Official work hours: Mondays to Fridays from 9am to 6pm
• Flexibility for extended work hours to accommodate Global team based in UK as required

At Cognita how we achieve our goals is as important as what we do. Behaving in line with our values is essential to performing effectively at Cognita.

• Excellence: We aspire to achieve excellence in everything we do, no matter how big or small.
• Collaboration: Together, we are more aligned and more effective.
• Respect: We treat all with fairness, compassion and respect.
• Integrity: We do what we say we will do.

Accountability: We have a clear sense of what is expected of us, and we do our utmost to deliver, taking our responsibilities as educators seriously.

Ability to travel up to 30% in the first year (to embed security policies and practices), and also at short notice when required (to assist with local cyber incidents)

Key Stakeholders

Internal - Group IT Director, Regional IT Director, Heads of Schools, Asia Executive Team members, Regional Colleagues, Managing Directors of Operations, Group IT Senior Leadership Team, Cyber Security Teams, Other Group IT Teams, Regional and School based IT Teams, Legal.

External - Cyber Security Vendors, Partners & Third Parties, Regulators.

For interested applicants, please submit your applications to https://cognitapeople.csod.com/ux/ats/careersite/1/home/requisition/480?c=cognitapeople&source=MyCareersFuture

Role Description

This is a full-time on-site role for a SOC Team Lead located in Singapore. As a SOC Team Lead, you will be responsible to:

• Plan monthly duty roster for site team.
• Cover shift function if there are any shift resources are absent.
• Generate report dashboarding for technical analysis.
• Proficient in Microsoft excel/Power BI.
• Will run operation and work the SOP to ensure the 24X7 Security operations support services operate effectively.
• Responsible for site monthly report and documentations submissions.
• Onboarding/off boarding of manpower resources (1 month).
• Submit monthly timesheet and monthly service report as part of billing documentation timely.
• Work with Main Contractor to ensure security devices or apps are patched and firmware versions are upgraded in accordance with IM8 requirements.

Responsibilities:

• Monitoring and analyzing security events, identifying potential threats, conducting investigations, and responding to security incidents
• Work closely with the end client SOC team to ensure the timely and effective detection, containment, and mitigation of security incidents
• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure).
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits.
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to ensure compliance and regulatory requirements and industry standards.

Requirements:

• Diploma/degree in computer studies
• 2 years of experience working in a security operation, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role.
• Independent and capable of working in a high-pressure environment.
• Willing to work in rotational shift environment (including weekends and night shift).

Qualification training shall be provided as necessary to attain competency to deliver job responsibilities.

Main Job Responsibilities:

• Conduct 3rd party audits to assess organizations' Information Security Management System and related Statement of Applicability (SoA) for conformity with ISO/IEC 27001 and in strict compliance with GIC's Code of Ethics and established audit procedures
• Conduct other related Information Security, Cybersecurity, Data Protection audits – ISO/IEC 27701, ISO/IEC 27017, ISO/IEC 27018, CSA Cyber Essentials mark, CSA Cyber Trust mark, IMDA Data Protection Trust mark, GDPR Compliance audits, Second Party IT audits
• Conduct Information Security, Cybersecurity, Data Protection trainings/workshops/seminars
• Manage the entire audit process from planning, conducting, reporting, and following up on the assigned audits.
• Support in technical review of audit reports and technical advice to Sales Team and Certification Team as and when required.

Job Qualifications / Requirements:

• Possess a professional degree in Computer Science/Information Security/Cybersecurity or related fields to Information Technology
• At least two years are in a role or function relating to information security/Cybersecurity
• Successfully completed a Lead Auditor Course in ISO/IEC 2700 Information Security Management System (ISMS)
• Having completed training courses in Singapore PDPA Fundamentals/Practitioner and holding industry certifications like CISA, CIPM, CISSP will be advantageous

Job Description:

The jobholder will be providing support and project delivery for the SSO and Identity Management platforms in the following topics

Architecture

Project Delivery

Platform Support and Maintenance

Incident and Problem Management

Change Management

The candidate should be well versed with cryptographic notions such as RSA, symmetric and asymmetric encryption, certificates and digital signatures etc.

Architecture

To provide architectural expertise thereby driving change and improvement in technology and process.

To contribute to the development of the SSO and LDAP technology roadmaps.

To liaise with CIB architecture teams in undertaking architectural reviews.

Project Delivery

To take responsibility for the delivery of key projects around SSO and LDAP which are aligned to drive significant change within the platform.

To work with the Application Production Support project managers in defining, designing, documenting and implanting new functionality for existing and new applications.

To liaise with the Application Developers in low-level diagnosis of on-going issues.

Platform Support and Maintenance

Pro-actively monitor, manage and improve availability and performance of the production environments

(from presentation and application layers to Infrastructure layers)

Pro-actively manage the capacity of production applications

Incident and Problem Management

To work with partner teams to conduct analysis of major and critical incidents.

To identify tactical or strategic improvements that can be introduced to help reduce the number of on- going incidents within the SSO and LDAP area.

Change Management

To work within the change management framework adopted to ensure that all changes to

the production environment are planned and executed in a controlled manner.

To take responsibility for the quality of changes within the SSO and IDM environments, ensuring that

changes raised are of sufficient standard in terms of technical and planning detail.

Requirements

Technical Skills essential for the role include minimum 15 plus years of experience into

CA Siteminder Web SSO

SOA security - SAML / WS-Security

Autoprovisionning tools such as BMC ControlSA, Sailpoint, or Forgerock

LDAP

Kerberos / SSL/TLS / PKI / GSS-API / SPNEGO

Auth2, OpenIDConnect

IIS/WCF/WIF, WAS security models

Infrastructure standards for network load balancers, servers, networks and storage

Automation mind-set with experience in using tools like Ansible

Scripting skills using Python/JS or shell

Application Server : Good exposure in configuring and supporting web technologies such as Tomcat,

Apache, nginx, IIS

Proven logical and methodical problem analysis and troubleshooting skills

Working with an industry recognised service desk and project management toolset

ITIL certification

Shift

On Site Services: From 8:00 to 19:00 schedule to cover in weekly shifts of 8 working hours/day

On Call Services: Out of regular schedule, we provide On Call services (out of business hours) to be covered in weekly shifts by team members.

Public Holidays: Team members must cover all public holidays except 1 st January and 25 th December (2 persons only in shifts)

Interested candidates may apply through the application system or send it to [email protected]. Shortlisted candidates will be notified.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan Mckinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.morganmckinley.com/sg/privacy-policy. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Morgan McKinley Pte Ltd
Dinu Dinesh

EA License No: 11C5502

EAP Registration No: R22110286

“To be the most loved everyday food and groceries destination!” - that’s our mission at foodpanda (small ‘f’).

foodpanda is the largest food and grocery delivery platform in Asia, outside of China. Operating in more than 400 cities across 11 markets, we continue to expand and grow in our core food delivery business, as well as in new verticals like grocery deliveries, with a strong tech infrastructure at our core. From our restaurants-partners, cloud kitchens and cloud grocery stores — foodpanda is just one tap away, getting everything you need into your hands quickly and conveniently!

If you love working with technology to create solutions and are not afraid to roll up your sleeves to get things done, you will find your tribe here at foodpanda. foodpanda comprises of people from more than 60 nationalities, and we believe in winning through diversity.
foodpanda is part of the Delivery Hero Group, the world’s leading local delivery platform operating in 70+ countries worldwide

Job Description
We are looking for a highly-driven and motivated Lead, Public Affairs to join our Singapore team to drive foodpanda’s public affairs objectives.

Responsibilities:

• Lead foodpanda Singapore’s public policy and advocacy strategy in partnership with foodpanda business verticals, industry associations and other stakeholders
• Represent foodpanda Singapore in engagements with government regulators and other stakeholders, including but not limited to academia, NGOs, business associations
• Drive collaboration opportunities in sustainability topics of relevance to the business
• Develop supporting materials for advocacy and engagements in collaboration with the regional and global teams
• Track and evaluate regulatory issues that may have an impact on foodpanda’s business objectives and verticals. Where appropriate, proactively shape the regulatory landscape on critical issues
• Build thought leadership with government agencies, key opinion leaders or credible organisations
• Be a strong partner for foodpanda Singapore’s senior leadership and internal teams, such as PR, legal, operations, marketing, and commercial

Qualifications

• 8 to 12 years of demonstrated experience managing public policy and/or government relations and advocacy work
• Experience working and engaging with policymakers, civil society and non-governmental organisations and other stakeholders
• Knowledge of Singapore’s political system, environment and institutions
• Ability to exercise strong judgment and problem-solving skills, creativity, and ability to work in a dynamic, cross-functional, multi-cultural environment
• Experience in policy work for a multinational corporation or government preferred

What we offer:

• A dynamic and challenging working environment with a steep learning curve
• Responsibility from day one in the leading food delivery company in the world
• The opportunity to be part of a happy, high functioning and smart team
• Periodic fun, engaging company events & team activities
• A company committed to developing you personally and professionally.
• A vibrant and international team with diverse backgrounds from all over the world
• A culture that empowers you to take full ownership of your work and career

Our parent company, Delivery Hero, is a global leader in the food delivery industry processing over 3 million orders every day and operating in 40+ markets in the world, with 18,000 employees and approximately 500,000+ restaurant partners.

Please apply directly via the link here: https://smrtr.io/nZrN3

• Driving innovation and shaping the future with cutting-edge projects
• Personal growth and collaboration.

About Our Client

Client is a global technology firm known for its innovative approach to content creation and distribution. It operates a range of platforms that combine artificial intelligence and machine learning to deliver personalized experiences to users. The company's products span entertainment, social networking, and e-commerce, with a strong focus on fostering creativity and community engagement. It has a diverse and rapidly growing global presence, continuously pushing the boundaries of digital media and technology.

Job Description

• Communicate technical and non-technical concepts effectively to the business side.
• Coordinate security assessments with product teams.
• Conduct cyber risk assessments and technical security reviews to identify IT risks for new products and features, and recommend controls.
• Collaborate with security and business teams to design defense-in-depth controls and improve security posture.
• Fulfill business security requirements like red teaming, fraud detection, and penetration tests, while enhancing security maturity.
• Monitor and manage risk mitigations, exceptions, and ensure adequate monitoring is in place.
• Track emerging cyber threats, vulnerabilities, and exploits affecting infrastructure and products.

The Successful Applicant

A successful candidate will have a strong technical background in cybersecurity, with the ability to communicate effectively between technical teams and business stakeholders. They should be skilled in risk assessments, vulnerability management, and implementing security controls. Proactive, collaborative, and able to manage security requirements like red teaming and penetration testing, they will stay ahead of emerging threats and continuously improve security posture across the organization.

What's on Offer

A chance to work on impactful security initiatives in an innovative environment, collaborate with cross-functional teams, and grow your career. You'll receive a competitive package, opportunities for professional development, and the chance to work with cutting-edge technologies.

Contact

Miao Xia Neo (Lic No: R21103441/ EA no: 18C9065)

Quote job ref

JN-112024-6583081

Phone number

+65 6416 9828

Michael Page International Pte Ltd | Registration No. 199804751N

We are looking for a highly-driven and motivated Lead, Public Affairs to join our Singapore team to drive foodpanda’s public affairs objectives.

Responsibilities:

• Lead foodpanda Singapore’s public policy and advocacy strategy in partnership with foodpanda business verticals, industry associations and other stakeholders
• Represent foodpanda Singapore in engagements with government regulators and other stakeholders, including but not limited to academia, NGOs, business associations
• Drive collaboration opportunities in sustainability topics of relevance to the business
• Develop supporting materials for advocacy and engagements in collaboration with the regional and global teams
• Track and evaluate regulatory issues that may have an impact on foodpanda’s business objectives and verticals. Where appropriate, proactively shape the regulatory landscape on critical issues
• Build thought leadership  with government agencies, key opinion leaders or credible organisations 
• Be a strong partner for foodpanda Singapore’s senior leadership and internal teams, such as PR, legal, operations, marketing, and commercial

• Make a difference in one of the fastest-growing teams
• Become part of a premier team of Security Experts

About Our Client

This multinational tech company is known for a popular social media platform and focuses on AI-driven content solutions to enhance user experience. Its subsidiary provides businesses with tools for data analysis, content moderation, and cloud services, helping enterprises optimize operations and improve customer engagement.

Job Description

• Responsible for developing security products targeting customers in Southeast Asia region, and identifying potential business opportunities.
• Deeply understand customer requirements, develop cutting-edge solutions as a technical expert, provide consulting services to our partners.
• Works closely with internal teams (e.g. Sales and Developers) during the pre-sale process by offering technical expertise, translating business needs, and identifying potential existing or new solutions to help shape the deal and influence budget estimates.
• Position will be based in Singapore

The Successful Applicant

Join our dynamic Cloud Security Solutions team, where you'll play a pivotal role in bringing cutting-edge cloud security products to market and driving their commercial success. This is a unique opportunity to lead the business for the APAC region in a newly created role, giving you the chance to shape the future of our offerings and make a significant impact in the industry.

What's on Offer

If you're passionate about cloud security and ready to take on a leadership position that influences strategy and growth, we want to hear from you! Be part of a forward-thinking team that values innovation and collaboration, and help us redefine the landscape of cloud security. Your journey starts here!

Contact

Miao Xia Neo (Lic No: R21103441/ EA no: 18C9065)

Quote job ref

JN-112024-6580695

Phone number

+65 6416 9828

Michael Page International Pte Ltd | Registration No. 199804751N

• GRC Lead for APAC regions, including China and India
• People Manager role with a strong track record in leadership
• Reporting line to headquarters in France

About the company

Our client is a multinational company that has a rich history spanning nearly 200 years, a testament to their enduring success in the business world. Headquartered in Paris, France, the company has grown to become one of the world's leading wine and spirits producers. They are a prominent player in the global alcoholic beverage industry, renowned for its extensive brand portfolio, commitment to quality, and dedication to sustainability and social responsibility.

About the job

• Develop, govern and enforce cybersecurity policies, standards, and guidelines to ensure robust security practices.
• Lead evaluations of security and privacy risks, coordinating swift responses to suspected cyber incidents/events.
• Monitor cybersecurity risks and report findings to relevant technical and business executive committees.
• Manage the Information Security GRC team, focusing on all cybersecurity aspects within the designated region, domains, and tech portfolio.
• Proactively drive risk reduction initiatives within the defined scope.
• Ensure effective security measures within the scope of assigned regions, domains, and technology areas.
• Collaborate on cyber strategy and roadmap creation for long-term security goals.
• Drive compliance with internal standards and regional cybersecurity regulations, both internally and externally.

successful candidate

Minimum of 10 years' experience in Governance, Risk, and Compliance (GRC), with a solid understanding of cybersecurity frameworks such as ISO 27001, SOC 2, MITRE ATT&CK, and NIST, as well as expertise in penetration testing and security audits.

Skilled in managing incident response, evaluating cybersecurity risks, and conducting vulnerability assessments.

Proven ability to lead a team, with a track record of managing 2-3 direct reports.

Experience working in a regional setting, with the ability to navigate diverse regulatory environments and cultural considerations.

Whats on offer
The permanent opportunity for a Information Security & Risk Governance Lead (GRC), will pay a salary range of $13,000 - $ 15,000 plus benefits. This opportunity offers hybrid working arrangement.

To apply online please use the 'apply' function, alternatively you can reach me at
https://www.linkedin.com/in/Oliviatoh-032330132/. (EA: 94C3609 / R22109942)

Qualification training shall be provided as necessary to attain competency to deliver job responsibilities.

Main Job Responsibilities:

• Conduct 3rd party audits to assess organizations' Information Security Management System and related Statement of Applicability (SoA) for conformity with ISO/IEC 27001 and in strict compliance with GIC's Code of Ethics and established audit procedures
• Conduct other related Information Security, Cybersecurity, Data Protection audits – ISO/IEC 27701, ISO/IEC 27017, ISO/IEC 27018, CSA Cyber Essentials mark, CSA Cyber Trust mark, IMDA Data Protection Trust mark, GDPR Compliance audits, Second Party IT audits
• Conduct Information Security, Cybersecurity, Data Protection trainings/workshops/seminars
• Manage the entire audit process from planning, conducting, reporting, and following up on the assigned audits.
• Support in technical review of audit reports and technical advice to Sales Team and Certification Team as and when required.

Job Qualifications / Requirements:

• Possess a professional degree in Computer Science/Information Security/Cybersecurity or related fields to Information Technology
• At least two years are in a role or function relating to information security/Cybersecurity
• Successfully completed a Lead Auditor Course in ISO/IEC 2700 Information Security Management System (ISMS)
• Having completed training courses in Singapore PDPA Fundamentals/Practitioner and holding industry certifications like CISA, CIPM, CISSP will be advantageous

About the Team

We are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.

We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.

Get to know the Role (Lead Security Engineer):

• We are seeking a lead security engineer who can drive security strategy and initiatives from 0 to 1. This could be across a wide range of domains covering identity, application security, cloud, DevSecOps, or detection engineering. We are open to security engineers with deep skills in one or more of these domains.
• You will have excellent stakeholder management skills, and are able to operate and influence across the business.
• You should be excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.
• You will work with public cloud, terraform, commercial cloud posture security management tools, open-source and build tools that automate our security posture.

The day-to-day activities:

• Work with the wider security engineering team to take security requirements and build scalable applications and solutions that automate security and reduce the risk of the bank.
• Own the strategy for assigned security domains, consisting of tactical initiatives and strategic multi-year decisions.
• Partner with teams across the bank including SRE, Data Engineering, GenAI and Product to identify areas of security posture improvement, create the plan and execute.
• Maintain standards and procedures inline with regulatory and internal policy requirements.
• Lead engagements with internal and external audits that are applicable to first line technology.
• Mentor junior engineers to uplift their ability across security domains, increasing the teams knowledge and standard operating procedures.

The must-haves:

• Should have relevant experience of 8+ years within information security
• Experience with scripting/programming security automation.
• Knowledge of cloud platforms (AWS, Serverless, managed services, containers, etc)
• Excellent soft skills - able to handle pressure in a fast-paced environment. Open-minded, creative and innovative.
• Relevant certifications such as CISSP, CISM, CEH, or equivalent.
• In-depth knowledge of security frameworks, standards, and best practices.
• Proficiency in security technologies (e.g., SIEM, IDS/IPS, firewalls, endpoint protection).
• Strong understanding of network protocols, operating systems, and application security.
• Excellent problem-solving, analytical, and decision-making skills.
• Strong leadership, communication, and collaboration abilities.
• Ability to manage multiple projects and priorities in a fast-paced environment.

About the company

CGS International Securities Pte. Ltd. (CGS International) is an award-winning and market leading integrated financial services provider, ranked among the top securities houses in Asia.

CGS International taps on our wealth of global and ASEAN insights to offer equities trading, leveraged products, wealth management, investment banking, equities research, Shariah-compliant financing, fixed income, currency and commodities, structured products and prime brokerage services in over 15 countries and regions.

Along with its parent organisation China Galaxy Securities, a leading securities house in China, CGS International is trusted by more than 15 million customers globally.

Job Responsibilities

1. Conducting security testing such as vulnerability assessments, penetration tests, application security test (code level), red teaming, simulation exercises/tests (process level)
2. Tracking and ensuring prompt completion of remediation and mitigations
3. Recommending, building and maintaining security testing platforms, tools, technologies
4. Formulating security testing policies, standards, guidelines
5. Establishing security testing processes
6. Measuring and improving maturity of security testing
7. Managing development and performance of team member(s)
8. Mentoring and guiding junior team member(s)
9. Staying up to date with business, regulatory and IT requirements
10. Ensuring the secure testing program enables business, addresses regulations, aligns with IT strategies

Job Requirements

• Bachelor degree in computer science, computing
• At least 1 years of experience building and managing security team.
• At least 3 years of IT security testing experience covering areas such as vulnerability assessments, penetration tests, application security test, simulation exercises/tests
• Able to speak both English and Chinese to liaise with our Chinese counterparts
• Frequent and regular communications and sharing with senior management, technical personnel and business users
• Experience working with cross-geographical teams in various time zones
• CISSP, CEH, CREST, OSCP or other related information security certifications
• A good communicator
• Able to lead by example
• Keen to share and collaborate
• Able to influence to garner buy-in

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

As part of ByteDance's Security Department, Security BP team is not only responsible for the security and risk management of the Monetization business, but also plays an important role in connecting and building trust between the business and security team. Leveraging on various capabilities provided by the Security Department, we ensure the business and customer data are secured by providing high-quality services to the Monetization business, such as platform security, product security, business security and compliance governance.

Responsibilities

- Ability to communicate technical and non-technical concepts to the business side.

- To coordinate and make arrangements for security assessments with various product teams.

- To identify risks and actively take ownership to resolve any potential project issues.

- Conduct cyber risk assessment/technical security reviews in support of technologies initiatives to help identify IT related risk fr any new products and feature requirements, as well as determine appropriate controls to mitigate risks.

- Collaborate closely with other parts of the security team and business teams to design defense-in-depth controls that limit attackers' ability and improve our security posture.

- Fulfil business side security requirements such as red teaming, fraud detection and penetration tests. Organise resources and improve security maturity for the Monetization team.

- Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions.

- Monitor and analyze emerging cyber threats, vulnerabilities, and exploits relevant to the Monetization infrastructure and products.

Minimum Qualifications

- Minimum Bachelor's Degree in Computer Science, Computer Engineering, Information Systems or other STEM disciplines. Preferred candidates with experience in communicating with the business side on security requirements.

- Proven track record in managing a high-performing team for at least 2 years with excellent leadership skills.

- Good project management skills and focused teamwork.

- Works well under pressure and within time/budget constraints to solve problems or meet objectives.

- Demonstrated teamwork and collaboration skills, in particular in leading or contributing to global and multi-functional teams

- Good knowledge/interest in some of these various disciplines: web application security, mobile app security, network security, operating system internals and hardening, applied cryptography, cloud computing.

Preferred Qualifications

- Passionate about self-studying cutting edge technologies and staying relevant.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Cyber Security Roles in Singapore
Job Posting by Belle Lim, Section Manager at Hays Singapore
[email protected]

Cloud Security Lead

Cyber Security jobs in Singapore
ACTIVELY HIRING NOW

Hi Everyone,

An established leading technology software company with strong APAC presence is looking for a Cloud Security Lead to join them. This is brand new headcount as part of the business’s expansion plan. This individual will get the autonomy to build from scratch. This position focuses on engineering secure methods of utilizing cloud infrastructure services and software to improve the overall security posture and enhance the security of cloud-based environment.

Your new role

· Lead the development and implementation of cloud security strategies and roadmaps.

· Design and implement secure cloud architectures and solutions.

· Develop and manage IAM strategies and solutions to ensure secure and compliant access to cloud resources.

· Develop, enforce, and monitor cloud security policies and procedures.

· Work closely with DevOps, IT, and development teams to ensure security is integrated into all stages of the software development lifecycle (SSDLC).

What you’ll need to succeed

· At least 5 years of experience in AWS Cloud Security, Security Hub, Guard Duty, Inspector etc

· Hands-on experience with AWS, Kubernetes, and web application security

· Strong understanding of SSDLC and security frameworks.

· Strong understanding of cloud security architectures, frameworks, and best practices.

· In-depth knowledge of security technologies and tools such as IAM, encryption, SIEM, IDS/IPS, and vulnerability management.

· Experience with security compliance and regulatory frameworks (e.g., ISO 27001, SOC 2).

· Experience in IAM, secrets management, encryption technologies, SaaS services hardening, Kubernetes and container security.

What you’ll get in return

· Attractive Career Development / Growth – Leadership Opportunity

· Attractive Remuneration Package

What you need to do now
If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV to [email protected]. If this job isn't quite right for you but you are looking for a new position, please contact me for a confidential discussion on your career.

Apply now or refer a friend (Get rewarded with $200 CapitaStar Gift voucher upon a successful friend referral!)

At Hays, we value diversity and are passionate about placing people in a role where they can flourish and succeed. We actively encourage people from diverse backgrounds to apply.

EA License Number: 07C3924 l Registration Number: R21100438 l Company Registration ID No.: 200609504D

Responsibilities

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible. Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day. To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always. At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve. Join us.

Team Introduction

The Global Security Organization provides industry-leading cybersecurity and business protection services to TikTok globally. Our organization employs four principles that guide our strategic and tactical operations. Firstly, we champion Transparency & Trust by leading the charge in organizational transparency, prioritizing customer trust, and placing user needs first. Secondly, we aim to maintain Best in Class Global Security by proactively identifying and reducing risks while enabling innovative product development. We constantly work towards a sustainable world-class security capability. Thirdly, we strive to be a Business Catalyst & Enabler by embodying the DNA of technical innovation and ensuring our Global Security operations are fast and agile. Finally, we Drive Empowered & Risk-Informed Decision Making by providing our leaders with the necessary information to make agile decisions based on risk.

Responsibilities

- Lead a research team focusing on monitoring and analyzing emerging cyber threats, vulnerabilities, and exploits relevant to our infrastructure and products.

- Conduct research and analysis to stay up to date with current vulnerabilities, provide detailed risk analysis and potential impact

- Analyze, assess, compile, and prioritize vulnerabilities to document and communicate mitigation recommendations

- Attract and retain great people, invest in their growth

- Collaborate with cross-functional software engineering teams in developing products and services for delivering security assurance.

- Identify and assess emerging risks, including analysis of deep and dark web data

Qualifications

Minimum Qualifications:

- Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or other relevant majors.

- Passion and extremely self-motivated about security research, especially to discover real-world security problems, and addressing in-the-wild security threats. Deep understanding of vulnerability analysis and discovery as well as exploitation process and techniques.

- Knowledge of Common Vulnerabilities and Exposures (CVEs), cyber threats, and vulnerability mitigation strategies. - Experience with Vulnerability Research

- Research experience in two or more of the following: threat intelligence, IAM, key management systems, data security, application security, web application and browser security, security protocols, operating system internals and hardening (e.g., Windows, Linux, OS X, Android), network security, vulnerability management, penetration testing, or applied cryptographic concepts.

Preferred Qualifications

- Bachelor's degree in Cybersecurity, Computer Science, or a technical field (or equivalent work experience in related field

- Professional certifications in Cybersecurity (OSCP, GCIH, GREM, GNFA or other relevant certifications)

- Experience in working and investigating incidents in Cloud environments (e.g. AWS, GCP)

- Familiarity with container technologies such as Docker and Kubernetes

- Familiarity with OSINT tools such as Liferaft, Skopenow, Flashpoint, TLOxp, LexisNexus, etc

- Experience working with strategic, tactical, technical, and operational threat intelligence

- A strong background in data science, AI, machine learning, and deep learning. Experience in applying AI technology to security domain is highly preferred.

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Responsibilities:

1. Security Architecture Leadership
   Act as the security architecture expert and work with stakeholders to ensure compliance with industry standards.
2. Design & Implement Secure Systems
   Design, maintain, and troubleshoot security systems, evaluate the current security posture, recommend improvements, and implement new technologies to protect against intrusions while ensuring continuous monitoring.
3. Drive Zero Trust Security Architecture or Layered Defense strategy
4. Stay Ahead of Threats: Continuously learn about cyber threats & advancements in security.
5. Manage Risk & Compliance: Conduct security assessments, ensure compliance with regulations, and support audits.
6. Foster Collaboration: Work with teams to implement secure systems.
7. Security Subject Matter Expert: Possess deep knowledge in security engineering principles.

Requirements:

1. 10+ years of relevant working experience.
2. 5+ years of experience as Security Architect.
3. Security Engineering in Cloud experience is a must.
4. IT security certifications are highly advantageous.
5. Familiarity with MAS TRM, PCI DSS, PCI PTS, and payment card standards, advantageous
6. Degree in Computer Science or a related field.

Key Responsibilities:

• SOC Operations:Oversee daily SOC functions, ensuring prompt monitoring, detection, and response to security events.
  Manage incident response, including triage, investigation, and recovery.
  Improve SOC procedures and workflows for efficiency.
  
• Team Leadership:Guide and mentor security analysts, providing training and professional development.
  Manage shift schedules for 24/7 coverage.
  Conduct performance reviews and give feedback.
  
• Incident Management:Handle escalated security incidents, coordinating with internal and external stakeholders.
  Develop and update incident response playbooks and ensure team training.
  Collaborate with IT to resolve incidents.
  
• Threat Intelligence:Oversee threat intelligence collection and analysis to address emerging threats.
  Ensure SOC tools are current and effective.
  Adapt strategies to evolving threat landscapes.
  
• Security Tools Management:Ensure proper functioning of SOC tools and technologies.
  Implement and configure new security technologies.
  Review and improve security tool effectiveness.
  
• Compliance and Reporting:Ensure compliance with regulations and standards.
  Prepare reports on SOC performance and security trends for senior management.
  Maintain documentation related to SOC operations.
  
• Continuous Improvement:Drive SOC enhancements through automation and advanced analytics.
  Stay updated on industry trends and new technologies.
  Align SOC strategies with broader cybersecurity goals.
  
• Any other ad hoc duties as assigned by supervisor.

Qualifications:

• Education: Bachelor’s degree in Cybersecurity, IT, Computer Science, or related field.
  Relevant certifications (e.g., CISSP, CISM) are a plus.
  
• Experience in cybersecurity, with 3 years in a SOC leadership role.
  Experience in incident response and security operations management.
  
• Skills: Knowledge of cybersecurity frameworks and threat landscapes.
  Proficiency with security tools like SIEM and IDS/IPS.

Interested applicants, please email your resume to Andre Chua Jing Ming

Email: [email protected]

CEI Reg No: R1989053

EA Licence No: 99C4599

Recruit Express Pte Ltd

Take on a crucial role where you'll be a key part of a high-performing team delivering secure software solutions. Make a real impact as you help shape the future of software security at one of the world's largest and most influential companies.

As a Lead Security Engineer at JPMorgan Chase within the Cybersecurity & Tech Controls, you are an integral part of team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. As a core technical contributor, you are responsible for carrying out critical technology solutions with tamper-proof, audit defensible methods across multiple technical areas within various business functions.

Job responsibilities

• Bring your cutting-edge ideas to life as part of a success-driven team that values your deep technical expertise and innovative thinking.

• Work closely with diverse Engineering, Operations, and Support teams within Enterprise Technology and other Lines of Business (LoBs) to understand target platforms and their engineering and deployment processes.

• Enable the Cyber Security Operations Center (SOC) and Attack Analysis teams to detect and prevent sophisticated malicious and suspicious activities on the firm's digital assets.

• Assist Cyber Security Vulnerability Management Ops teams in assessing the impact of new and zero-day vulnerabilities on the firm's assets.

• Collaborate with Cyber Security Threat Intel teams to correlate advanced threat intel with security controls on endpoints, facilitating threat-based prioritization of remediating vulnerabilities and weaknesses.

• Enable Digital Forensics Incident Response teams in performing forensics on digital assets in response to cyber incidents by providing crucial logs/telemetry data, asset containment as well as automated and orchestrated response actions at scale through the EDR platforms.

• Work closely with Windows, Linux, Mac, and Public and Private Cloud platform engineering teams to integrate EDR solutions into base images.

• Providing SME consultancy and RFI support in regional audit and regulatory RFI responses.

• Conduct thorough investigations requiring deep technical understanding of the product and the environment it is deployed to, working with Platform Operate and Support teams, as well as vendor tech support teams, to identify and resolve complex issues on target endpoints.

• Engage in Proof of Concepts (PoCs) to evaluate additional capabilities, complementing the continuous expansion and evolution of the Endpoint Detection & Response strategy.

• Contribute to a team culture of diversity, equity, inclusion, and respect. Mentor and guide junior team members, helping them develop their technical skills and grow in their careers.

Required qualifications, capabilities, and skills

• Bachelor's Degree in Computer Science or equivalent

• Formal training or certification on Security Engineering concepts and at least 5+ years applied experience

• Provide technical expertise throughout the software lifecycle, including design, implementation, and delivery.

• Strong understanding and experience in orchestration and deployment automation platforms such as SCCM, Ansible, Chef, Puppet, or similar. Experience in enterprise deployment platforms and deploying at scale to Windows, Linux, or macOS environments is an advantage.

• Strong understanding and experience in cybersecurity endpoint security and vulnerability management domains. Experience with products such as CrowdStrike Falcon Platform and Palo Alto Cortex XDR is a strong advantage.

• Strong understanding and experience in one or more of the following - public cloud platforms such as Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure compute, network, storage, monitoring, automation, orchestration services, virtualization technologies, containerization technologies such as Kubernetes and VMware Tanzu, or serverless technologies such as AWS Step Functions and Lambda.

• Software development experience in general-purpose programming languages such as Python, PowerShell, bash, or Go, APIs.

• Understanding and experience in Agile and Lean methodologies.

• Strong critical-thinking and problem-solving skills with clear and inclusive communication style.

• Ability to collaborate with different roles and personas across lines of businesses to achieve common goals.

Preferred qualifications, capabilities, and skills

• Experience effectively communicating with senior business leaders

To apply for this position, please use the following URL:

https://ars2.equest.com/?response_id=177a166a052e5ccb1433c4016d8fc7ac

Job Responsibilities:

• Assist in the formulation of ICT security strategy and work plan, in alignment with strategic plans.
• Assist in providing security governance, enforcing cyber security risk assessment and risk acceptance from stakeholders.
• Establish and implement Company-wide information security policies, strategies, plans and architecture
• Develop and manage a security governance program
• Protect & secure Company’s information and assets
• Perform day-to-day security operations
• Review safety measures and processes
• Enhance and configure corporate systems to continually improve their security
• Recommend changes to security policies and standards in response to changing conditions
• Any other adhoc duties as assigned.

Job Requirement:

• Preferably ‘Certified Information Systems Security Professional’ (CISSP), ‘Certified Information Systems Auditor’ (CISA) or ‘Certified Information Security Manager’ (CISM).
• 5 years of experience related to information security and working knowledge of ICT operations, security policies and procedures.
• Good interpersonal and communication skills to provide support to end users.
• Possess a strong sense of responsibility, initiative and resourcefulness as well as a keen interest in problem-solving.
• Experience in cybersecurity in government and non-profit organisations is preferred.

Interested applicants, please Email , and look for

Jensen Fang Lifa

Recruit Express Pte Ltd

EA License No. 99C4599

EA Personnel Registration Number: R2197080

We regret that only shortlisted candidates will be contacted.

Must Have

• Experience in managing Symantec Endpoint Protection at expert level,
• Expertise in MS Defender
• Knowledg in managing and supporting CrowdStrike
• Experience in managing Guradicore & McAfee endpoint encryption skills

Roles & Responsibilities

• Detect security issues, monitoring soc alerts, create customer tickets/incident and manage problems until closure.
• Symantec Endpoint Protection, MS Defender, CrowdStrike, Guradicore & McAfee endpoint encryption installation and troubleshooting.
• Maintain and manage changes in running environments.
• Symantec Endpoint Protection Manager & Microsoft Defender Configuration updates and Console management
• Centralized management of Anti-Virus Software, Maintenance and support of Symantec and Microsoft security products.
• Scheduled and On Demand scan management, SEP and MS Def agent management (within console) AV agent upgrade.
• User administration in Active Directory
• ThreatAware console management, Dashboard and Alert Monitoring, Potential Threat and Vulnerability alert escalation to the client,
• OS and Application related Policy changes and implementation and Agent deployment.
• Incident management related to Microsoft Defender product, Sep, CarbonBlack EDR, CrowdStrike and Guardicore.
• Vendor (Broadcom and Microsoft) Communication with shared responsibility.
• Reports Creation and improvements, Antivirus Compliance check and metrics reporting.
• Antivirus agent/package maintenance, Symantec and MS Defender related recommendations.
• Provide technical support, including monitoring, reporting, tool administration, this is most often done without direct interaction with the end-users.

Role Overview:

The Legal Operations and Corporate Secretary Lead will be responsible for leading and

transforming the corporate secretarial function while building and developing a brand-new legal operations function within the Legal team. The ideal candidate will have a strong corporate governance background, with the capability to drive process automation, implement legal technology solutions, and optimize legal team workflows. The role involves managing the corporate secretarial team across multiple jurisdictions and integrating the corporate secretarial work into the broader legal operations function.

This position offers a unique opportunity to shape legal operations strategy, optimize efficiency, and support the legal team in delivering impactful results.

Key Responsibilities:

1. Leadership of Corporate Secretarial Function:

• Oversee and manage the existing corporate secretarial team, ensuring seamless operations across multiple jurisdictions.

• Lead all corporate secretarial duties, including board meetings, corporate filings, resolutions, Power of Attorney issuance, authorization processes, and post-signing contract management.

• Develop and implement automation initiatives within the corporate secretarial function to

reduce manual processes, improve efficiency, and allow the team to focus on higher-value

tasks.

• Ensure compliance with corporate governance standards across the Group, including

effective stakeholder management with directors, shareholders, and external parties.

2. Building and Leading Legal Operations:

• Establish a new legal operations function that includes corporate secretarial work as a core component. The function will be responsible for optimizing the efficiency and impact of the entire legal team.

• Design and implement Standard Operating Procedures (SOPs) to track legal workstreams,

approval processes, and overall workload management.

• Utilize the corporate secretarial team’s vast data collection to identify key legal processes

that can be tracked, automated, and optimized, improving both internal workflows and

client-facing services.

• Develop a system for managing legal templates, know-hows, and playbooks to ensure

consistency in legal service standards across multiple jurisdictions.

3. Process Automation and Legal Technology:

• Work closely with in-house AI engineers to identify opportunities for automating routine

tasks, such as document management, record-keeping, and stakeholder communications.

• Implement AI-driven legal tech solutions to automate low-value and repetitive work,

enabling the legal team to focus on strategic and high-impact tasks.

• Identify, evaluate, and onboard external legal technology vendors to enhance process

efficiency, record-keeping, and data analytics.

4. Workload and Efficiency Tracking:

• Develop and implement systems to track the workload, performance, and efficiency of the

legal team, including corporate secretarial staff and paralegals.

• Suggest and implement improvements to processes, templates, and SOPs to optimize the

legal team’s productivity and impact, both qualitatively and quantitatively.

• Regularly report to senior leadership on the legal team’s work output, key metrics, and

opportunities for improvement.

5. Stakeholder and Project Management:

• Oversee internal record-keeping, filing, and project management within the legal team,

ensuring proper coordination with stakeholders and alignment with business objectives.

• Design and maintain a work dashboard for tracking incoming and outgoing legal service

requests across the team and group.

• Manage corporate secretarial services and liaise with external service providers across

multiple jurisdictions (except Indonesia), ensuring high service standards and adherence to

compliance requirements.

6. Cross-Jurisdictional Collaboration:

• Facilitate coordination between legal, corporate secretarial, and other business functions

across multiple jurisdictions to align work standards, SOPs, and service expectations.

• Ensure consistent communication and collaboration within the legal team and with external stakeholders, including directors and shareholders.

Key Qualifications:

• Bachelor’s degree in Law, Business, or a related field; legal education or legal training is

preferred.

• Minimum of 8-10 years of experience in legal, corporate secretarial work, legal operations, or related fields, with a proven track record of leadership and process improvement.

• Strong understanding of corporate governance, compliance, and regulatory frameworks,

ideally across multiple jurisdictions.

• Demonstrated experience in process automation, workflow optimization, and

implementation of legal technology solutions.

• Proven ability to manage and lead teams, with a focus on efficiency, innovation, and

delivering measurable results.

• Strong communication and stakeholder management skills, with the ability to collaborate

across functions and geographies.

• Experience with AI and legal tech solutions is a plus, as well as the ability to integrate

technology to improve legal and corporate secretarial functions.

• High level of organization and attention to detail, with the ability to manage competing

priorities in a fast-paced environment.

Key Competencies:

• Leadership & Team Management: Ability to lead a cross-jurisdictional team, build a new

legal operations function, and drive high performance.

• Process Improvement & Automation: Strong background in automating legal and

administrative processes, with a strategic vision for improving efficiency.

• Legal Technology Savvy: Experience in identifying and implementing AI and legal

technology tools to optimize workflows and document management.

• Cross-functional Collaboration: Skilled in working with legal, corporate secretarial, and

business teams across multiple jurisdictions to align processes and goals.

• Data-driven Decision Making: Ability to leverage corporate data to design effective SOPs,

track workstreams, and improve team productivity.

• Project & Stakeholder Management: Expertise in managing complex projects, tracking

workloads, and ensuring stakeholder satisfaction.

Vision for the Role:

The Legal Operations and Corporate Secretary Lead will play a critical role in transforming the way the legal and corporate secretarial teams operate, bringing a future-focused, tech-driven approach to legal services. By driving automation, streamlining workflows, and leveraging data, the candidate will enable the team to focus on strategic and high-value tasks, delivering measurable impact to the business. This role provides a unique opportunity for growth, allowing the candidate to shape the legal operations function from the ground up, while leading corporate governance across a dynamic, multi-jurisdictional organization.