Total 14 lead buyer job vacancies in Legal / Public / Security category in Islandwide

Role Description

This is a full-time on-site role for a SOC Team Lead located in Singapore. As a SOC Team Lead, you will be responsible to:

• Plan monthly duty roster for site team.
• Cover shift function if there are any shift resources are absent.
• Generate report dashboarding for technical analysis.
• Proficient in Microsoft excel/Power BI.
• Will run operation and work the SOP to ensure the 24X7 Security operations support services operate effectively.
• Responsible for site monthly report and documentations submissions.
• Onboarding/off boarding of manpower resources (1 month).
• Submit monthly timesheet and monthly service report as part of billing documentation timely.
• Work with Main Contractor to ensure security devices or apps are patched and firmware versions are upgraded in accordance with IM8 requirements.

Responsibilities:

• Monitoring and analyzing security events, identifying potential threats, conducting investigations, and responding to security incidents
• Work closely with the end client SOC team to ensure the timely and effective detection, containment, and mitigation of security incidents
• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure).
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits.
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to ensure compliance and regulatory requirements and industry standards.

Requirements:

• Diploma/degree in computer studies
• 2 years of experience working in a security operation, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role.
• Independent and capable of working in a high-pressure environment.
• Willing to work in rotational shift environment (including weekends and night shift).

Role Description

This is a full-time on-site role for a SOC Team Lead located in Singapore. As a SOC Team Lead, you will be responsible to:

• Plan monthly duty roster for site team.
• Cover shift function if there are any shift resources are absent.
• Generate report dashboarding for technical analysis.
• Proficient in Microsoft excel/Power BI.
• Will run operation and work the SOP to ensure the 24X7 Security operations support services operate effectively.
• Responsible for site monthly report and documentations submissions.
• Onboarding/off boarding of manpower resources (1 month).
• Submit monthly timesheet and monthly service report as part of billing documentation timely.
• Work with Main Contractor to ensure security devices or apps are patched and firmware versions are upgraded in accordance with IM8 requirements.

Responsibilities:

• Monitoring and analyzing security events, identifying potential threats, conducting investigations, and responding to security incidents
• Work closely with the end client SOC team to ensure the timely and effective detection, containment, and mitigation of security incidents
• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure).
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits.
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to ensure compliance and regulatory requirements and industry standards.

Requirements:

• Diploma/degree in computer studies
• 2 years of experience working in a security operation, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role.
• Independent and capable of working in a high-pressure environment.
• Willing to work in rotational shift environment (including weekends and night shift).

Responsibilities:

1. Security Architecture Leadership
   Act as the security architecture expert and work with stakeholders to ensure compliance with industry standards.
2. Design & Implement Secure Systems
   Design, maintain, and troubleshoot security systems, evaluate the current security posture, recommend improvements, and implement new technologies to protect against intrusions while ensuring continuous monitoring.
3. Drive Zero Trust Security Architecture or Layered Defense strategy
4. Stay Ahead of Threats: Continuously learn about cyber threats & advancements in security.
5. Manage Risk & Compliance: Conduct security assessments, ensure compliance with regulations, and support audits.
6. Foster Collaboration: Work with teams to implement secure systems.
7. Security Subject Matter Expert: Possess deep knowledge in security engineering principles.

Requirements:

1. 10+ years of relevant working experience.
2. 5+ years of experience as Security Architect.
3. Security Engineering in Cloud experience is a must.
4. IT security certifications are highly advantageous.
5. Familiarity with MAS TRM, PCI DSS, PCI PTS, and payment card standards, advantageous
6. Degree in Computer Science or a related field.

Take on a crucial role where you'll be a key part of a high-performing team delivering secure software solutions. Make a real impact as you help shape the future of software security at one of the world's largest and most influential companies.

As a Lead Security Engineer at JPMorgan Chase within the Cybersecurity & Tech Controls, you are an integral part of team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. As a core technical contributor, you are responsible for carrying out critical technology solutions with tamper-proof, audit defensible methods across multiple technical areas within various business functions.

Job responsibilities

• Bring your cutting-edge ideas to life as part of a success-driven team that values your deep technical expertise and innovative thinking.

• Work closely with diverse Engineering, Operations, and Support teams within Enterprise Technology and other Lines of Business (LoBs) to understand target platforms and their engineering and deployment processes.

• Enable the Cyber Security Operations Center (SOC) and Attack Analysis teams to detect and prevent sophisticated malicious and suspicious activities on the firm's digital assets.

• Assist Cyber Security Vulnerability Management Ops teams in assessing the impact of new and zero-day vulnerabilities on the firm's assets.

• Collaborate with Cyber Security Threat Intel teams to correlate advanced threat intel with security controls on endpoints, facilitating threat-based prioritization of remediating vulnerabilities and weaknesses.

• Enable Digital Forensics Incident Response teams in performing forensics on digital assets in response to cyber incidents by providing crucial logs/telemetry data, asset containment as well as automated and orchestrated response actions at scale through the EDR platforms.

• Work closely with Windows, Linux, Mac, and Public and Private Cloud platform engineering teams to integrate EDR solutions into base images.

• Providing SME consultancy and RFI support in regional audit and regulatory RFI responses.

• Conduct thorough investigations requiring deep technical understanding of the product and the environment it is deployed to, working with Platform Operate and Support teams, as well as vendor tech support teams, to identify and resolve complex issues on target endpoints.

• Engage in Proof of Concepts (PoCs) to evaluate additional capabilities, complementing the continuous expansion and evolution of the Endpoint Detection & Response strategy.

• Contribute to a team culture of diversity, equity, inclusion, and respect. Mentor and guide junior team members, helping them develop their technical skills and grow in their careers.

Required qualifications, capabilities, and skills

• Bachelor's Degree in Computer Science or equivalent

• Formal training or certification on Security Engineering concepts and at least 5+ years applied experience

• Provide technical expertise throughout the software lifecycle, including design, implementation, and delivery.

• Strong understanding and experience in orchestration and deployment automation platforms such as SCCM, Ansible, Chef, Puppet, or similar. Experience in enterprise deployment platforms and deploying at scale to Windows, Linux, or macOS environments is an advantage.

• Strong understanding and experience in cybersecurity endpoint security and vulnerability management domains. Experience with products such as CrowdStrike Falcon Platform and Palo Alto Cortex XDR is a strong advantage.

• Strong understanding and experience in one or more of the following - public cloud platforms such as Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure compute, network, storage, monitoring, automation, orchestration services, virtualization technologies, containerization technologies such as Kubernetes and VMware Tanzu, or serverless technologies such as AWS Step Functions and Lambda.

• Software development experience in general-purpose programming languages such as Python, PowerShell, bash, or Go, APIs.

• Understanding and experience in Agile and Lean methodologies.

• Strong critical-thinking and problem-solving skills with clear and inclusive communication style.

• Ability to collaborate with different roles and personas across lines of businesses to achieve common goals.

Preferred qualifications, capabilities, and skills

• Experience effectively communicating with senior business leaders

To apply for this position, please use the following URL:

https://ars2.equest.com/?response_id=177a166a052e5ccb1433c4016d8fc7ac

• Up to $9,900 Basic with Attractive Bonus and Company Benefits
• Fintech Company
• Centrally Located

Join Our Client’s Team as a Cybersecurity Engineer!

Our client, a leading fintech company, is looking for an experienced Cybersecurity Engineer to join their dynamic team.

What You'll Do:

• Manage and optimize cybersecurity tools and solutions.
• Implement and improve new cybersecurity systems.
• Assist with incident response and mitigation.
• Stay updated with the latest cybersecurity trends and tools.
• Support other cybersecurity tasks as needed.

What You'll Need:

• Degree or Diploma in Computer Science, Computer Engineering, or Information Security.
• 3+ years of experience in cybersecurity operations with hands-on experience in AWS, Azure, or Google Cloud.
• Cybersecurity certifications such as CISSP, GIAC, or GSEC are highly valued.
• Strong knowledge of Linux, Unix, and Windows.
• Programming/scripting skills (Python, PowerShell) are a plus.
• Familiarity with MAS Cyber Hygiene and Technology Risk Management Guidelines.

Interested candidates, please submit your updated resume in MS Word format by clicking the Apply Now button. Alternatively, you can email your resume to Frieda Chan at [email protected].

We regret that only short-listed candidates will be contacted.

Careerally Pte Ltd | EA Licence: 24C2215
Frieda Chan | EA Registration No: R2199193

Job Summary

We are seeking a highly motivated and experienced Cloud Security Hands-On Engineer to join SCB. The Cloud Security Hands-on Engineer will be responsible for designing, developing, implementing, and maintaining information systems. This will include developing a deep understanding of our cloud architecture, identifying and mitigating potential security threats and vulnerabilities, and collaborating with other teams to ensure our security measures are effective.

· 8+ years of Information Security or engineering experience.

· 2+ years of direct experience in at least one Public Cloud (AWS or Azure).

· Work closely with Product Security, Engineering, Operations, and Corporate Security to define security strategy and execute on it. Implementing automation to enable developers to easily consume security services.

· Improve the accessibility of security through automation, continuous integration pipelines, and other means. Designing a secure application-release automation process to make security an integral part of the CI/CD pipelines.

· Enforce standard methodologies, processes and tools and ensure compliance to enterprise architecture, global information security policies and engineering strategy.

· Validate adherence to AWS and Azure governance standards for policy definitions, role-based access controls, ARM Templates, resource groups and Azure Blueprints.

· Identify security tools and lead operationalization of solutions from POC to Production, e.g. API Threat Protection, Container Security, etc. Streamline POC

Key Responsibilities

Processes.

· Work with SRE and Engineering to implement a chaos-testing methodology and toolkit. Integrating security tools issue tracking with Jira.

· Implement automation to investigation and response workflows for Automated Incident Response.

· Interview, hire, and create on-boarding plans for new or transferred employees.

· Encourage others to seek opportunities for different and innovative approaches to addressing problems; facilitate the implementation and acceptance of change.

· Produce and streamline audit evidence.

· Stay current on threats, vulnerabilities, and controls.

· Familiarity with SecOps processes i.e., detection, monitoring, alerting and threat intelligence.

· Hands-On Proficiency in scripting and coding using Bash, Python, IaC (Terraform, Cloud formation, Azure ARM).

· Participate in the entire lifecycle of software development, including requirements analysis, design, development, testing, deployment, and maintenance. (Tools like Junit, Postman, Burp, Terratest, Sentinel, Misconfig test, OPA,etc.,)

· Hands on experience in infrastructure provisioning, configuration of provisioned infrastructure. deployment of application and Plugins such as TFLint, Checkov, Docker Linter, docker-vulnerability-extension, Security Scan, Contrast Security, etc.,

· Extensive knowledge in analyzing the contents and the build process of a container image in order to detect security issues, vulnerabilities or potential risks. Open-source tools such as Dagda, Clair, Trivy, Anchore, etc., can be leveraged for container image analysis.

· Familiar with Open-source tools such as Jenkins, etc., can be leveraged to build the CI/CD pipelines, and DefectDojo and OWASP Glue can help in tying the checks together and visualizing the check results in a single dashboard.

· Hands-On experience in Open-source tools such as truffleHog, git-secrets, GitGuardian and similar can be utilized to detect such vulnerable management of secrets.

· Expert knowledge with integrating crucial security tasks into CI/CD pipelines.

· Strong knowledge of software development methodologies and the software development lifecycle.

· Strong knowledge of container security and secrets management.

· Working experience with configuration management.

· Experience with Azure technologies in general, such as Service Fabric, Application Service Environment, Azure Kubernetes Service, Azure DevOps, Azure Monitor, Azure Sentinel, Azure Defender Suite, Azure SQL, Cosmos, Azure APIM, Azure AD, Azure OMS/Application Insights, Global Traffic Manager, etc.

· Experience with AWS technologies, such as CodePipeline, CodeBuild, CodeDeploy, CodeStar, Guardrails, Amazon ECS, AWS Lambda, etc.

Our Ideal Candidate

· 8+ years of Information Security or engineering experience.

· 2+ years of direct experience in at least one Public Cloud (AWS or Azure).

· Experience with scripting and orchestration including Terraform

· Experience with Python, Go, Java, or Ruby

· Experience working with DevOps tools, for ex. Bitbucket, Jenkins and Artifactory

· Experience in DevSecOps pipeline security tools, for ex. OPA, Sentinel

· Experience with Public Cloud platforms, for ex. AWS, Azure or GCP

· Experience in API layer like security, custom analytics, throttling, caching, logging, monetization, request and response modifications etc.

· Experience with Container platforms, for ex. Kubernetes, OpenShift, EKS, AKS or GKE

· Experience in Security automation using Cloud services, like AWS Lambda or Step Function

· Experience creating Splunk use cases (SIEM) and Splunk query language

· Cloud or Container Certifications like CKA, AWS SA, AZ-500, TF Associate

· Cyber Security Certification like CISSP, CCSP, CCSK

· Good understanding of software development methodologies, such as Agile and running Scrum

· Critical thinking and problem-solving skills

· Communication skills and Decision-making

Role Specific Technical Competencies

· Public Cloud Engineering and Architecture

· API Frameworks

· IAM (RBAC, ABAC) and Secrets Management

· Threat Modeling Framework STRIDE, MITRE

· Azure / AWS Public Cloud Threat Modeling (Manual / Automation)

· Python, Go Lang, Java / .NET

· Infrastructure as Code

· PowerShell, Azure CLI

· DevSecOps Capabilities (SAST, DAST, SCA, CodeSign)

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.

Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.

Together we:

· Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do

· Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well

· Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

What we offer

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

· Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.

· Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.

· Flexible working options based around home and office locations, with flexible working patterns.

· Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits

· A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.

· Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.

Recruitment Assessments

Some of our roles use assessments to help us understand how suitable you are for the role you've applied to. If you are invited to take an assessment, this is great news. It means your application has progressed to an important stage of our recruitment process.

Visit our careers website www.sc.com/careers

JOB SUMMARY

· The Cyber Security Assessment (CSA) is an integral part of Cyber Security with an aligned goal to ensure secure by design as relates to any software we build or buy or connect to in the Bank. To that end the CSA needs to ensure all security controls related to security threats are being adhered to by projects and application development teams. As part of CSS, we work effortlessly in ensuring the Bank soundly meets its commitments to internal and external stakeholders and maintains an appropriate cyber security defence posture through as part of our 'Secure by Design' initiatives.

· The role is expected to be a chapter lead for Cloud and Container policy and control governance and implementation in the tools and services that we own and embed as part of the build pipeline and platform. The incumbent will provide direction to Security champions in ICS as well as federated security champions on which controls are most appropriate for Cloud and containers as well as define how best to initiate the control checks in the pipeline and platform. The role requires the ability to communicate and build relationships with technology product owners and support teams across geographies mainly ADO, AWS, Azure, SKE, CIO domains and other ICS control leads related to secure by design.

· The Lead, Principal Cyber Security Consultant needs to be a DevOps, Cloud and Container SME with institutional and industry knowledge. Ability to drive product development, security as policy coding requirements as well as influence security champions to #doTheRghtThing in their reviews. Coding capability is essential

RESPONSIBILITIES

Strategy

· Develop and implement a comprehensive strategy for security as code and policy as code practices, aligning with the overall ICS objectives

· Lead the adoption of automated security and compliance solutions across the development lifecycle

· Drive innovation in integrating security into CI/CD pipelines, facilitating a shift-left approach to security

Business

· Collaborate with key business stakeholders to understand business objectives, providing insights on how security as code can support these goals

· Translate business requirements into secure, scalable, and reliable security practices

· Foster a culture of security awareness and ensure security best practices are incorporated into business operations

Processes

· Establish and refine processes for integrating security tools and practices into the software development and deployment processes

· Develop and maintain policy-as-code frameworks to enforce security policies automatically within the infrastructure

· Ensure continuous improvement of security processes through regular review and incorporation of feedback mechanisms

People & Talent

· Conduct comprehensive risk assessments and enforce risk management policies to identify and mitigate potential security threats

· Develop metrics and reporting frameworks to monitor the effectiveness of security measures

· Liaise with the risk management team to integrate cybersecurity risk into the organizations overall risk profile

Risk Management

· Conduct comprehensive risk assessments and enforce risk management policies to identify and mitigate potential security threats

· Develop metrics and reporting frameworks to monitor the effectiveness of security measures

· Liaise with the risk management team to integrate cybersecurity risk into the organizations overall risk profile

Governance

· Ensure compliance with relevant ICS policies and, regulations and standards related to cyber security and data protection

· Establish governance frameworks for policy as code to ensure consistent application and enforcement of security policies across all assets being built on the central devops pipeline

Regulatory & Business Conduct

· Display exemplary conduct and live by the Group’s Values and Code of Conduct.

· Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.

· Lead the DevSecOps Automation Cloud and Container Policy checks to achieve the outcomes set out in the Bank’s Conduct Principles

· Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.

Key Stakeholders

· ICS Control owners

· Cloud Platform

· ADO Engineering

· Security Architecture

· CIO Domains

Other Responsibilities

· Embed Here for good and Group’s brand and values in ICS-CS; Perform other responsibilities assigned under Group, Country, Business or Functional policies and procedures; Multiple functions (double hats);

Our Ideal Candidate

· 5+ years of experience in Information security, preferably in Banking and Financial services sector.

· 5+ years of hands-on experience on application/ infrastructure risk assessments, Along with 3 years of experience in implementation or management of security tools/ projects.

· Proven experience in leading security initiatives

· Subject matter expert in DevOps, AWS, Azure and Kubernetes especially EKS and AKS

· Familiar with policy as code

· Self-starter, capable of working without direction and able to deliver projects from scratch

· Full Software Development Lifecycle experience in a mature Continuous Integration and Continuous Delivery environment, probably as a developer

· Strong DevOps toolchain experience: ADO, Artifactory, Sonaqube, Nexus, Aqua

· Configuration and deployment tools experience – Ansible or Puppet

· Strong scripting skills – Python, Ruby, or similar; Perl .

· Breadth of knowledge – operating systems, networking, distributed computing

· Cloud deployment and systems management experience – AWS, Azure

· Container orchestration expertise – EKS, AKS

· Strong knowledge of UNIX and TCP/IP – understand strace and tcpdump output

· Bachelor’s Degree in engineering, Computer Science/Information Technology or its equivalent.

· CSPM, CISSP, nice to have

Role Specific Technical Competencies

· DevOps

· Cloud

· Containers

· Security

· Policy as Code

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 160 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents. And we can't wait to see the talents you can bring us.
Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion. Together we:

· Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do

· Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well

· Be better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

· Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations

· Time-off including annual, parental/maternity (20 weeks), sabbatical (12 weeks maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum

· Flexible working options based around home and office locations, with flexible working patterns

· Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits

· A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning

· Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.

· Recruitment assessments - some of our roles use assessments to help us understand how suitable you are for the role you've applied to. If you are invited to take an assessment, this is great news. It means your application has progressed to an important stage of our recruitment process.

Visit our careers website www.sc.com/careers

Responsibilities

• Understand the current system security measures and implement security enhancements in line with organizations goals and objectives

• Conduct regular system tests and audits by validating and verifying technical controls in minimizing the risk

• Good understanding of business requirements, identify key security requirements and articulate it to business effectively and efficiently in terms of actual risk and safeguards, risk management

• Good understanding of guidelines such as MAS TRM, ISO and NIST standards or equivalent

• Good knowledge on Security Incident Response and run book preparation for emerging and new threats, applying safeguards where possible to minimize the threat.

• Sound understanding on Ransomware, XSS, Injection and other similar attacks

• Participate in various business meetings to understand the entire data flow and recommend security solutions to mitigate the concerns/risks

• Good knowledge and understanding of encryption technologies (both symmetric and asymmetric algorithms) and its applications

• Participates in various compliance programs, audits the report and recommend to reflect the accurate security posture to make business decisions

• Establish and oversee a formal vulnerability and testing program.

• Oversee the patch cycle and ensure that patches are performed at regular intervals

• Participate in Account Recertification programs and be a key player to take ownership and sign appropriate forms necessary as security exceptions

• Liaise with Internal Audit, Corporate Compliance, Office of General Counsel and Risk.

• Conduct security campaigns to organization such as Phishing, Data Leakage, etc.

• Management to remediate new and outstanding issues; track security-related issues in the GRC system.

• Participate in design activities and provide various solutions to ensure security is not compromised at various phases of the program lifecycle

• Recommend and provide templates where possible for end users to assist in minimizing the security risks

• Train other staff and external clients as necessary.

• Manage, coach, lead and develop a small/mid staff of GRC personnel.

• Directly responsible for procedures and controls to assure compliance with applicable regulatory and legal requirements as well as good business practices.

• Establish and oversee formal risk analysis and self-assessments program for various Information Services systems and processes.

Requirements

• Degree/Degree in IT / Computer Science / related discipline with 12-15+ years of relevant experience in Cyber Security.

• Should have played Security Lead Role in Transformation and Operate program.

• Experience in industry frameworks such as ABS, SSAE, SOC2 etc.

• Good understanding of the following :

• Infrastructure and Network security, Cloud Security, Identity and Access Management, Privileged Management (CyberArk), Compliance with Banking Regularity compliance (BFSI), HIPAA, PCI and the NC Identity Theft law., Firewall security, IDS/IPS placement, SIEM tools, Wireless Security, End point security, Data Loss Prevention, Web Application Security, Threat Hunting/Threat Intel

• Familiarity with industry compliance and security standards including MAS TRM, HKMA, PCI DSS, ISO 27001 and NIST

• Working experience in Cyber Security SecOps

• Customer focused with strong communication, Strong written and verbal communication skills

• Able to multi-task and prioritize incidents & requests accordingly.

• Strong analytically with a natural ability to solve complex issues.

• Industry and Technology certifications such as CRISC, CISA, CISSP, CISM, CEH

• Excellent customer interfacing skills.

Licence No: 12C6060

Lead Associate, Cyber Security Engineer with a prominent financial company. This role will focus on cybersecurity operations in the AWS environment.

Requirements:

• At least 2 years of technical hands-on experience in AWS cybersecurity operations
• Experience in AWS projects in both build and run phases
• Hands-on experience operating & managing of at least one of the following products: Vulnerability Assessment Solutions, PAM Solutions, NGFW
• Relevant AWS certifications is a plus
• Effective communication, problem-solving skills, and a degree or diploma in Computer Science or related fields are required.

Business Reg No : 200611680D | Licence No : 10C5117 | EA Reg No : R2199023

About EPAM

EPAM is a leading global provider of digital platform enginering and development services. EPAM has been expanding in Singapore since 2013 and delivering the best solutions to our customers. As a recognized leader, EPAM Singapore achieved Great Place to Work® Certification in 2023 and is committed to providing our team with inspiring careers.

You will have the opportunity to work with fellow talented technologists and accelerate your career by participating in our numerous upskilling, training, and certification programs. That is why EPAM Singapore was awarded Gold for Best In-House Certification Programmes in the Employee Experience Awards 2023 and Silver in the SkillsFuture Employers Awards 2022 for our efforts in championing employees' skills development and building a lifelong learning culture at the workplace. You can also look forward to developing holistically with the multiracial festivals and various wellness and cultural activities organized by our passionate colleagues here.

Why EPAM?

• By choosing EPAM, you're getting a job at one of the most loved workplaces according to Newsweek 2022 & 2023.
• Employee ideas are the main driver of our business. We have a very supportive environment where your voice matters.
• You will be challenged while working side-by-side with the best talent globally. We work with top-notch technologies, constantly seeking new industry trends and best practices.
• We offer a transparent career path and an individual roadmap to engineer your future & accelerate your journey.
• At EPAM, you can find vast opportunities for self-development: online courses and libraries, mentoring programs, partial grants of certification, and experience exchange with colleagues around the world. You will learn, contribute, and grow with us.

What You’ll Do

• Design, implement, and manage security measures for cloud environments
• Conduct regular security assessments and audits of cloud infrastructure
• Collaborate with cross-functional teams to integrate security best practices into cloud-based applications and services
• Monitor and respond to security incidents, ensuring timely resolution
• Implement and maintain access controls, encryption, and other security features
• Stay up to date with industry trends and emerging threats to proactively address potential vulnerabilities
• Develop and document security policies, procedures, and guidelines for cloud environments

What Will Make You Shine

• Bachelor’s degree in computer science, Information Security, or related field
• Relevant certifications such as AWS Certified Security
• Excellent communication skills and the ability to collaborate with diverse teams
• Minimum 5 years of relevant IT experience in designing, deploying and managing both applications and services on the cloud
• Proven experience as a cloud security engineer or similar role, especially on AWS cloud services
• Proficient in security concepts related to infrastructure as code (IaC) and containerization
• Experience with security tools and technologies

How We Hire

Here, we summarize the typical journey to finding a job within EPAM:

• Apply and tell us about yourself
• Go through some standard interviews:

1. General interview with a recruiter
2. Technical interview with our technology experts
3. Manager interview or Offer interview with a hiring manager

• Get ready to join the team

Not sure if you meet all the requirements? No problem. Let’s talk anyway and find out more.

It takes 1 min of application to start the journey with us. Apply now!

As a Lead IT Consultant, you will play a pivotal role in ensuring the security and governance of our organization's IT landscape. Reporting to the Deputy Director, you will lead the IT Security team in developing and executing comprehensive security strategies. Key responsibilities include:

• Leading the IT Security team to manage all security-related matters aligned with business objectives.
• Developing and implementing robust IT security policies and plans.
• Conducting thorough security reviews of existing systems to defend against evolving threats.
• Performing vulnerability assessments and penetration tests for critical IT systems.
• Driving IT Security awareness and training initiatives, including security talks and incident response exercises.
• Managing and investigating cyber security alerts and incidents, ensuring effective containment and mitigation.
• Collaborating with IT project teams throughout the SDLC to prioritize and implement applicable security controls.
• Monitoring and reviewing information systems and infrastructure security in coordination with the IT Governance team.
• Enhancing the Information Security risk assessment methodology and proposing risk treatment options.
• Acting as a Subject Matter Expert (SME) in security technologies, providing guidance and knowledge sharing.
• Defining security configuration standards for various platforms and technologies.
• Providing detailed reporting on IT security initiatives, scans, and incidents to management and statutory bodies.
• Researching and implementing new security technologies, addressing emerging threats and vulnerabilities.

Requirements:

• Bachelor’s degree in computer science, Information Technology, or equivalent, with 8-10 years' experience in Information and Cyber Security.
• Proficiency in cloud security (AWS, Microsoft Azure) and familiarity with security standards (NIST, ISO27001, MTCS, CSA Security-by-Design, PDPA).
• Certifications such as CISSP, CISA, CISM, CREST, CEH, CHFI are advantageous.
• Demonstrated leadership, adaptability, and a proactive approach to tackling challenging tasks.
• Ability to manage multiple tasks concurrently, meet deadlines, and maintain focus amid conflicting demands.

Interested candidate who wish to apply for the advertised position, please click on “Apply Now”. We regret that only shortlisted candidates will be notified.

Job Code: PEIF
EA License No. 01C4394

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and it’s overseas subsidiaries and affiliates collecting, using and disclosing your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services and such other purposes stated in our privacy policy. Our full privacy policy is available at www.persolkelly.com.sg. If you wish to withdraw your consent, please drop us an email to let us know. Please feel free to contact us if you have any queries.

Take on a crucial role where you'll be a key part of a high-performing team delivering secure software solutions. Make a real impact as you help shape the future of software security at one of the world's largest and most influential companies.

As a Lead Security Engineer at JPMorgan Chase within the Cyber Security and Technology Controls you are an integral part of team that works to deliver solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. As a core technical contributor, you are responsible for carrying out critical technology solutions with tamper-proof, audit defensible methods across multiple technical areas within various business functions.

Job responsibilities

• Executes creative security solutions, design, development, and technical troubleshooting with the ability to think beyond routine or conventional approaches to build solutions and break down technical problems

• Develop, configure, test and deploy a multitude of components of the firm’s SIEM platforms, leading with a site reliability engineering mindset

• Collaborate closely with multiple stakeholders to ensure timely and accurate ingestion of critical security operations data into the platform

• Work closely with SaaS vendor products to monitor and manage feature enhancements, system stability and performance.

• Provide technical guidance to the security operations team and/or lines of businesses if and when required

• Adds to team culture of diversity, equity, inclusion, and respect

Required qualifications, capabilities, and skills

• Bachelor’s Degree in Computer Science / Information Systems / Engineering or related disciplines

• Minimum 5 years of experience in the cyber security engineering field

• Skilled in planning, designing, and implementing a security analytics platform )

• Expert understanding of data management concepts in the context of a security analytics platform, including; ingestion, parsing and normalization

• Strong analytical and problem solving mindset with the ability to solve complex challenges

• Advanced in one or more programming languages or scripting languages

• Advanced understanding of agile methodologies such as Software Development Life Cycle, CI/CD, applicant resiliency, and security

Preferred qualifications, capabilities, and skills

• Experience effectively communicating with senior business leaders

• Experience leading an agile team of developer and skill in coaching developer on Agile methodology

• In-depth knowledge of the financial services industry and their IT systems

• Experience working within a large-scale or global enterprise

• Experience with both on-prem or cloud based SIEM solution

To apply for this position, please use the following URL:

https://ars2.equest.com/?response_id=0699a95f820224fc754ead3156961024

Cyber Security Lead

Job Descriptions

You will lead to design, architect, review and implement customized cyber security assessments for client-based asset risk. Be involved with corporate policy compliance, conducting vulnerability assessment and mitigating risks which can help provide projects/organizations with more confidence about system stability and security.

Responsibilities:

• Lead and guide a team of cybersecurity engineers.
• Perform Vulnerabilities Assessment and Testing in software and hardware for security vulnerabilities and risks.
• Provide Risk assessment and mitigation and actions plan are implemented.
• Incorporate Cyber security system design and implemented in compliance to IM8 or CIS standard.
• Be involved with Application security, Network security, endpoint security and cloud security.
• Evaluate cyber security tools to perform preliminary scan.

Requirements:

• Strong understanding in the different vulnerabilities in IT infrastructures.
• Strong IT skills and knowledge including hardware, software and networks.
• A diploma/degree or relevant certifications in cyber security.
• Kbowledge of cyber security standard, guidelines CIS and IM8.

We respect your privacy and all communication will be treated with confidentiality.

If you have meet the job requirements that we are looking for or wish to find out more on this role, please contact us or apply in-confidence to us with your updated resume in MS Words format to : kelvin@starcareerconsulting.com

*Only shortlisted candidate will be notified.

Lee Soo Hong (Reg. No. R1872625)

STAR CAREER CONSULTING PTE. LTD (EA License: 20C0353)

Cyber Security Lead

Job Descriptions

You will lead to design, architect, review and implement customized cyber security assessments for client-based asset risk. Be involved with corporate policy compliance, conducting vulnerability assessment and mitigating risks which can help provide projects/organizations with more confidence about system stability and security.

Responsibilities:

• Lead and guide a team of cybersecurity engineers.
• Perform Vulnerabilities Assessment and Testing in software and hardware for security vulnerabilities and risks.
• Provide Risk assessment and mitigation and actions plan are implemented.
• Incorporate Cyber security system design and implemented in compliance to IM8 or CIS standard.
• Be involved with Application security, Network security, endpoint security and cloud security.
• Evaluate cyber security tools to perform preliminary scan.

Requirements:

• Strong understanding in the different vulnerabilities in IT infrastructures.
• Strong IT skills and knowledge including hardware, software and networks.
• A diploma/degree or relevant certifications in cyber security.
• Kbowledge of cyber security standard, guidelines CIS and IM8.

We respect your privacy and all communication will be treated with confidentiality.

If you have meet the job requirements that we are looking for or wish to find out more on this role, please contact us or apply in-confidence to us with your updated resume in MS Words format to : kelvin@starcareerconsulting.com

*Only shortlisted candidate will be notified.

Lee Soo Hong (Reg. No. R1872625)

STAR CAREER CONSULTING PTE. LTD (EA License: 20C0353)