Total 65 lead buyer job vacancies in Legal / Public / Security category in Singapore

Job Responsibilities:

• Assist in the formulation of ICT security strategy and work plan, in alignment with strategic plans.
• Assist in providing security governance, enforcing cyber security risk assessment and risk acceptance from stakeholders.
• Establish and implement Company-wide information security policies, strategies, plans and architecture
• Develop and manage a security governance program
• Protect & secure Company’s information and assets
• Perform day-to-day security operations
• Review safety measures and processes
• Enhance and configure corporate systems to continually improve their security
• Recommend changes to security policies and standards in response to changing conditions
• Any other adhoc duties as assigned.

Job Requirement:

• Preferably ‘Certified Information Systems Security Professional’ (CISSP), ‘Certified Information Systems Auditor’ (CISA) or ‘Certified Information Security Manager’ (CISM).
• 5 years of experience related to information security and working knowledge of ICT operations, security policies and procedures.
• Good interpersonal and communication skills to provide support to end users.
• Possess a strong sense of responsibility, initiative and resourcefulness as well as a keen interest in problem-solving.
• Experience in cybersecurity in government and non-profit organisations is preferred.

Interested applicants, please Email , and look for

Jensen Fang Lifa

Recruit Express Pte Ltd

EA License No. 99C4599

EA Personnel Registration Number: R2197080

We regret that only shortlisted candidates will be contacted.

We’re searching for a Lead Consultant, IT Security to be part of our diverse team of talents here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

• Manage team of cyber day 2 engineering resources within Identity and Access Management & PKI track providing guidance, mentorship, performance evaluations.
• Involve in project work to deliver security service which require deeper level of expertise and to drive resolution of operational issue which are escalated to ensure satisfactory closure.
• Responsible for tracking the progress of building within Identity and Access Management & PKI technical competencies, develop training and growth plans within specialization track.
• Involve in the hiring process for cyber day 2 to expand the existing portfolio of services (e.g. network security, endpoint security, security analytics etc).
• Involve in the presale activities for cyber day 2, including defining the scope of cyber day 2 services, sizing the effort to support the security technologies deployed in client environment, determine what can be supported internally and what can be delivered via partnership with other parties in NCS or with sub-contractors and process standardization & improvement.
• Assist in improving the quality of service for cyber day 2 team.
• To be one of the Subject Matter Expert (or trusted technical advisor) in Identity and Access Management & PKI cyber technologies during presale and day 2 phases.
• Mentoring engineers or interns to ensure they can assist the team in executing operational tasks for projects.
• Accountable for various tasks above and provide regular update to the Practice Lead

We’re searching for a Lead Consultant, IT Security to be part of our diverse team of talents here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

• Manage team of cyber day 2 engineering resources within specialization track providing guidance, mentorship, performance evaluations.
• Involve in project work to deliver security service which require deeper level of expertise and to drive resolution of operational issue which are escalated to ensure satisfactory closure.
• Responsible for tracking the progress of building technical competencies, develop training and growth plans within specialization track.
• Involve in the hiring process for cyber day 2 to expand the existing portfolio of services (e.g. network security, endpoint security, security analytics etc).
• Involve in the presale activities for cyber day 2, including defining the scope of cyber day 2 services, sizing the effort to support the security technologies deployed in client environment, determine what can be supported internally and what can be delivered via partnership with other parties in NCS or with sub-contractors and process standardization & improvement.
• Assist in improving the quality of service for cyber day 2 team.
• To be one of the Subject Matter Expert (or trusted technical advisor) in cyber technologies during presale and day 2 phases.
• Mentoring engineers or interns to ensure they can assist the team in executing operational tasks for projects.
• Accountable for various tasks above and provide regular update to the Practice Lead

Responsibilities:

• Experience in leading and delivering multiple security projects and solutions across one or more IT Security domains (Cyber Program Management, Cyber Threat Management, Identity & Access Management, Data Protection, Privacy, Cyber Analytics). This experience should include both advisory, implementation and operation experiences.
• Design and develop a customized security architecture, evaluate and select the best security system in one or more of the above security domains.
• Provide high-level input and security consultation in a project-based environment and ensure adequate security controls in all Business IT solutions.
• Responsible for project planning, execution and managing scope due to any new information and/or changes to initial assumptions, including implications for project time, cost, quality and risk
• Ensure the security enhancements / new security project delivery is done in line with stakeholder’s requirements, timeline and cost.
• Develop and maintain a detailed security project plan which deliver to the cost, quality and time for enhancements
• The position will be heavily involved in IT security operations, including:Security solution delivery
  Security monitoring
  Administration for security systems (e.g. firewall, anti-malware system, IDS/IPS)
  Incident Response
  Level 2 support for IT Security operations.
  

Requirements:

• Min. Bachelor's degree in Computer Science
• Min. 6-8 years’ experience working in a large-scale IT environment; Including five (5) years of information security and risk experience within the past six (6) years; including risk analysis, endpoint, server, network and web application security
• Possess Security Industry Certifications such as CISSP, CISM, SANS, GSEC and PMP, ITIL, Microsoft, CISCO
• Having good understanding of TCP/IP protocol and OSI Seven Layer Model.
• Strong technical security skills in assessment, design, implementation architecture, and program / project delivery and work across various delivery models, (Waterfall, Agile, DevOps)
• Analyzes & prepares recommendations relating to security for existing IT infrastructures / Applications.
• Expert understanding of firewall technologies.
• Ability to plan, organize and prioritize tasks to complete within established time frames.
• Highly result oriented and can work independently.
• Ability to build relationships and interact effectively with internal and external parties.
• Strong analytical, technical, and communication (both oral and written) skills.

Company’s Profile:

Established in 1989, they are one of Singapore’s leading experts in the technology and cybersecurity sectors. They have a wide base of technical specialists to cater to their renowned clients and have provided unrivalled consultancy services to amp up their clients’ tech security. They are now looking for a IT Security Lead to value-add to their team.

Work location: Commonwealth

Working hours: Monday - Friday, 9am - 6pm

Job Responsibilities:

• Conduct gap analysis of existing on-prem data centre and cloud infrastructures, identifying and assessing gaps in the overall security posture.
• Conduct comprehensive risk assessments to identify and mitigate security risks associated with information systems and processes.
• Lead and coordinate system security acceptance testing to ensure that all security requirements are met before systems are deployed.
• Collaborate with development and engineering teams to integrate security-by-design principles into the SDLC.
• Develop and maintain security policies, standards, and guidelines to ensure compliance with industry standards and regulatory requirements.
• Provide expert advice on security architecture and design, ensuring robust protection mechanisms are implemented.
• Manage vulnerability assessments and penetration testing to identify and address security weaknesses.
• Develop and deliver security training and awareness programs for employees and stakeholders.
• Assist in the development and implementation of incident response plans and participate in security incident investigations as needed.
• Prepare detailed reports and documentation for management, highlighting security risks, mitigation strategies, and compliance status.

Requirements:

• At least 5 years of experience in information security, with a focus on risk assessment, system security acceptance testing, and security-by-design
• MUST HAVE any of these certifications: CISSP, CISM or GSEC
• Strong understanding of risk management methodologies and the ability to perform comprehensive risk assessments
• Ability to articulate security design and present security assessment in a clear manner
• Expertise in integrating security-by-design principles into the SDLC

Interested candidates may whatsapp your resume to 8494 1966. Only shortlisted applicants will be contacted.

Cassie Chan | R2197426

Recruit Now Singapore Pte Ltd | EA No: 21C0845

Company’s Profile:

Established in 1989, they are one of Singapore’s leading experts in the technology and cybersecurity sectors. They have a wide base of technical specialists to cater to their renowned clients and have provided unrivalled consultancy services to amp up their clients’ tech security. They are now looking for a IT Security Lead to value-add to their team.

Work location: Commonwealth

Working hours: Monday - Friday, 9am - 6pm

Job Responsibilities:

• Conduct gap analysis of existing on-prem data centre and cloud infrastructures, identifying and assessing gaps in the overall security posture.
• Conduct comprehensive risk assessments to identify and mitigate security risks associated with information systems and processes.
• Lead and coordinate system security acceptance testing to ensure that all security requirements are met before systems are deployed.
• Collaborate with development and engineering teams to integrate security-by-design principles into the SDLC.
• Develop and maintain security policies, standards, and guidelines to ensure compliance with industry standards and regulatory requirements.
• Provide expert advice on security architecture and design, ensuring robust protection mechanisms are implemented.
• Manage vulnerability assessments and penetration testing to identify and address security weaknesses.
• Develop and deliver security training and awareness programs for employees and stakeholders.
• Assist in the development and implementation of incident response plans and participate in security incident investigations as needed.
• Prepare detailed reports and documentation for management, highlighting security risks, mitigation strategies, and compliance status.

Requirements:

• At least 5 years of experience in information security, with a focus on risk assessment, system security acceptance testing, and security-by-design
• MUST HAVE any of these certifications: CISSP, CISM or GSEC
• Strong understanding of risk management methodologies and the ability to perform comprehensive risk assessments
• Ability to articulate security design and present security assessment in a clear manner
• Expertise in integrating security-by-design principles into the SDLC

Interested candidates may whatsapp your resume to 8494 1966. Only shortlisted applicants will be contacted.

Cassie Chan | R2197426

Recruit Now Singapore Pte Ltd | EA No: 21C0845

• Up to $9,900 Basic with Attractive Bonus and Company Benefits
• Fintech Company
• Centrally Located

Join Our Client’s Team as a Cybersecurity Engineer!

Our client, a leading fintech company, is looking for an experienced Cybersecurity Engineer to join their dynamic team.

What You'll Do:

• Manage and optimize cybersecurity tools and solutions.
• Implement and improve new cybersecurity systems.
• Assist with incident response and mitigation.
• Stay updated with the latest cybersecurity trends and tools.
• Support other cybersecurity tasks as needed.

What You'll Need:

• Degree or Diploma in Computer Science, Computer Engineering, or Information Security.
• 3+ years of experience in cybersecurity operations with hands-on experience in AWS, Azure, or Google Cloud.
• Cybersecurity certifications such as CISSP, GIAC, or GSEC are highly valued.
• Strong knowledge of Linux, Unix, and Windows.
• Programming/scripting skills (Python, PowerShell) are a plus.
• Familiarity with MAS Cyber Hygiene and Technology Risk Management Guidelines.

Interested candidates, please submit your updated resume in MS Word format by clicking the Apply Now button. Alternatively, you can email your resume to Frieda Chan at [email protected].

We regret that only short-listed candidates will be contacted.

Careerally Pte Ltd | EA Licence: 24C2215
Frieda Chan | EA Registration No: R2199193

LEAD SECURITY CONSULTANT

One of Singapore's established full-fledged IT solution provider supporting in Network Solutions, Computers and IT equipment for major brands.

Location: Central

Working Hours: 5 Days Work Week (Mon-Fri), Office Hours (9am to 6pm)

Remuneration Package:

• Basic up to S$ 10000
• Variable Bonus

Job Responsibilities:

• Conduct gap analysis of existing on-prem data centre and cloud infrastructures, identifying and assessing gaps in the overall security posture.
• Conduct comprehensive risk assessments to identify and mitigate security risks associated with information systems and processes.
• Lead and coordinate system security acceptance testing to ensure that all security requirements are met before systems are deployed.
• Collaborate with development and engineering teams to integrate security-by-design principles into the SDLC.
• Develop and maintain security policies, standards, and guidelines to ensure compliance with industry standards and regulatory requirements.
• Provide expert advice on security architecture and design, ensuring robust protection mechanisms are implemented.
• Manage vulnerability assessments and penetration testing to identify and address security weaknesses.
• Develop and deliver security training and awareness programs for employees and stakeholders.
• Stay current with emerging security threats, technologies, and trends, and provide recommendations for continuous improvement.
• Assist in the development and implementation of incident response plans and participate in security incident investigations as needed.
• Prepare detailed reports and documentation for management, highlighting security risks, mitigation strategies, and compliance status.

Requirements:

• At least 5 years of experience in information security, with a focus on risk assessment, system security acceptance testing, and security-by-design.
• Professional certifications such as CISSP , CISM, or equivalent.
• In-depth knowledge of security frameworks and standards such as ISO 27001, NIST, CIS Controls, and Cybersecurity Act of 2018.
• Strong understanding of risk management methodologies and the ability to perform comprehensive risk assessments.
• Proven experience in system security acceptance testing and validating security controls.
• Preffered familiarity with security tools and technologies such as SIEM, IDS/IPS, Firewalls, Endpoint Protection and Wazuh.
• Strong in technological architectures (infrastructure / application), both in on-premises data centres and cloud infrastructures.
• Excellent communication and interpersonal skills, with the ability to explain complex security concepts to non-technical stakeholders.
• Strong analytical and problem-solving skills, with attention to detail.
• Ability to work independently and as part of a team in a fast-paced environment.
• Experience with cloud security and working with cloud service providers such as AWS, Azure, or Google Cloud.
• Knowledge of regulatory requirements and standards relevant to the industry (e.g., PCI-DSS, HIPAA).

Please be notified that only shortlisted candidates will be notified.

Ian Fong | R22106545

Recruit Now Singapore Pte Ltd | EA No: 21C0845

Whether you’re at the start of your career or looking to discover your next adventure, your story begins here. At Citi, you’ll have the opportunity to expand your skills and make a difference at one of the world’s most global banks. We’re fully committed to supporting your growth and development from the start with extensive on-the-job training and exposure to senior leaders, as well as more traditional learning. You’ll also have the chance to give back and make a positive impact where we live and work through volunteerism.

Shape your Career with Citi

Citi’s Global Legal Affairs and Compliance (GLAC) empowers and protects Citi by providing legal, compliance, investigative, and security services to our firm. We manage compliance risk, provide legal analysis and advice, protect Citi’s people and businesses, advocate for legal and regulatory outcomes that benefit our firm and our clients, and ultimately promote behavior that is consistent with Citi’s mission and culture.

We’re currently looking for a high caliber professional to join our team as Vice President, Lead Counsel, Markets Fixed Income Asia Legal - Hybrid (Internal Job Title: Lead Counsel 2 - Product - C13) based in Singapore

Description:

Markets Legal support all of Citi's global Markets businesses as a single, unified department. Singapore, Hong Kong and Mumbai serve as hubs for various Markets legal teams for the Asia clusters. The team provides legal advisory and documentation support for fixed income, derivatives, rates, foreign exchange, commodities, futures & clearing, prime finance, equities sales and trading businesses, credit and loan trading, structured products, and solutions businesses.

As a member of the Markets Fixed Income Asia Legal team based in Singapore, the individual is to assist with legal coverage of fixed income, derivatives, rates, foreign exchange, note issuances, credit and loans trading, commercial real estate and asset financing, securitization transactions and structured loans and products, amongst others.

The person will report directly to a senior member of the Markets Fixed Income Asia Legal team and be expected to cover all the requirements of the team, including providing advice on legal and regulatory matters, litigation management and regulatory/policy interpretation. Day-to-day functions will involve transactional and advisory work, documentation, business development and participation in industry-based initiatives.

In this role, you’re expected to be:

• Assisting the businesses around product structuring for large episodic trades and advising on flow trades.
• Advising on and managing multi-jurisdictional regulatory requirements and client document negotiations.
• Managing and prioritizing key jurisdictions for the business.
• Managing and prioritizing key clients with multiple Citi touch points; crypto-currency and digital-related matters.
• Bank programs and structures incorporating environmental sustainability elements.
• Product development and structures addressing capital adequacy and risk-weighted asset requirements.
• Actively fulfilling the One-Citi ethos by identifying and overcoming boundaries and working collaboratively with other Citi members.

As a successful candidate, you’d ideally have the following skills and exposure:

• 4 to 8 years of relevant work experience
• Relevant experience in a law firm or financial institution
• Rates, Markets Treasury, Foreign Exchange and Credit Derivatives and financial regulatory experience (in particular, familiarity with Singapore, Hong Kong, China and/or India regulatory requirements) would be an advantage.
• Strong communication, interpersonal and organizational skills
• Ability to engage with and manage senior business management representatives.
• A strong team player who is confident, possesses initiative and the ability to prioritize, multi-task and work under pressure.
• An eye for broader franchise issues and the ability to assess issues and their risks against the wider regulatory and compliance framework that Citi operates within
• Ability to work independently and interact with people of all levels and across regions
• Education Level: LLB or JD

Working at Citi is far more than just a job. A career with us means joining a family of more than 230,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Take the next step in your career, apply for this role at Citi today

https://jobs.citi.com/dei

The Lead of the SRAP APAC legal entity analytics will support the Head of APAC Business Servicing & Analytics in delivering all SRAP APAC entity planning and analysis, including quarterly financial analysis, closing/reporting, financial planning and forecasting, expense analysis, as well as ad hoc business analysis for senior management. The role is required to focus on SRAP entity level analysis (i.e. the analysis of full P&L and B/S under local reporting framework) to allow a wholistic assessment on dividend and capital repatriations to Group.

In addition, the role has a key component to further develop and enhance the Apac entity planning and analysis tool as the business in Asia Pacific grows. Key deliverable to enhance the efficiency of the tools and database supporting the overall consolidation of entity actuals and plan financials.

There is a specific requirement of this role to be a strong communicator to all stakeholders, including but not limited to entity CEOs and CFOs, regional finance teams with Asia Pacific and Head office, and senior management.

Key duties and responsibilities

1. Entity-level quarterly financial reporting and analytics

• Perform the quarterly financial reporting process for IFRS 17 P&L B/S under local reporting framework, including detail variance analysis (actual vs plan, actual vs prior year) and the underlying business/technical drivers
• Perform the entiy-level closing process in collaboration with Business Performance, Valuation and Technical Accounting teams to identify the early developments for the quarter and timely communication of key impacts; this will need to include a holistic assessment of net results on dividend and capital to Group
• Establish a holistic bridging analysis across all reporting bases (i.e., group reporting standard, local GAAP, market view, entity view)
• Provide effective and timely communication of entity level results to management team, including local entity CEOs and CFOs.
• Streamline the quarterly financial reporting process and requirements

2. Entity-level operating planning and forecast

• Perform the production process of local entity IFRS 17 Operational Planning for the APAC to ensure timely submission, good data quality and documentation of key drives/risks to plan
• Support the production process of local GAAP income statement and balance sheet for the SRAP APAC entities in collaboration with Valuation and Finance teams
• Support Capital Management Team to provide Operating Planning to allow for capital forecast
• Provide effective communication of local entity plan progression for each iterations of operating plans and the corresponding plan assumptions / key risks to plan

Required experience & competencies

• At least 7 years of relevant working experiences in fields related to insurance/reinsurance/accounting, preferably with at least 5 years in actuarial, accounting, reporting matters and data analysis or insurance audit
• Ideally a Qualified Actuary with very strong Actuarial or Accounting and IFRS knowledge, with insurance context
• Solid data management skills
• Strong experience on communication of complex financials to multiple stakeholders
• Strong analytical and conceptual competence
• Able to handle issues from macro perspective and delve into details when needed
• A strong multi-tasker and preferably have good project management experiences
• Innovative, versatile & committed
• Excellent Excel skills, preferably VBA, macros usage
• Possess good project management skills set
• Excellent analytical skills
• Great communication and interpersonal skills
• Self-motivated and reliable individual
• Leadership experience would be helpful, but not a must

Overview

With over 18,000 employees worldwide, the Microsoft Customer Experience & Success (CE&S) organization is responsible for the strategy, design, and implementation of Microsoft’s end-to-end customer experience. Come join CE&S and help us build a future where customers come to us not only because we provide industry-leading products and services, but also because we provide a differentiated and connected customer experience.

Join our Security Customer Success Unit at Microsoft, a dynamic team dedicated to ensuring the security and success of our customers. As a Security CSA (Cloud Solution Architect) Lead, you will play a pivotal role in shaping our field execution strategies and driving customer success in a rapidly evolving cybersecurity landscape.

The Customer Success team will drive change management and adoption activities with key business decision makers and IT decision makers, helping reduce implementation risk, driving usage of existing solutions, and identifying opportunities to accelerate the path for customers to realize business value from their investments.

Responsibilities

Customer Centricity

• Drive positive Customer Satisfaction & become a trusted advisor. Provide feedback & insights from customers/partners. Be the Voice of Customer to share insights and best practices, connect with Global Security teams at Microsoft, Engineering and Product teams to remove blockers and influence the solution roadmap.
• Experience in the implementation (end to end) of Data Security projects with Data Security Platforms, preferably experience with Microsoft Purview (Information Protection, Data Loss Prevention, Information Risk Management)
• Guides other team members to focus on customer/partner experience through efficient delivery and ensuring a seamless and connected customer experience. Supports definition of customer/partner conditions of success. Anticipates customer/partner dissatisfaction and unmet needs and executes strategies to improve experience, value realization, and acceleration of customer transformation.
• Lead and execute Field Usage and Consumption Strategy projects, providing structure and guidance to ensure successful outcomes.

Business Impact

• Position and deliver solutions that drive Security product usage and develop opportunities to drive Customer Success business results & help Customers get value from their Microsoft investments. Identify resolutions to Customer blockers by leveraging SA subject matter expertise.
• Deliver according to MS best practices & using repeatable IP. Accelerate Business Value of overall Security adoption by improving security posture and ensuring that the solution exhibits “Secure by Design” framework, such as high-performance levels, security, scalability, maintainability, appropriate reusability, and reliability upon
• Collaborate and orchestrate with other CSAs and MS stakeholders including FastTrack, partner, and Microsoft Consulting in developing complex end-to-end Enterprise solutions with the Microsoft Security platform.
• Drives consumption and usage rigor and discipline by developing and leading inclusive and regular rhythm of business (ROB) processes for a large subsidiary. Delivers on business commitments, collect performance data, report performance to Global Lead and Strategy Team, and informs future plans and decisions (e.g., forecasting, anticipated barriers). Leads a coaching rhythm in alignment to Microsoft's coaching framework and worldwide rhythym framework practices, integrated both locally and with Corporate.
• Creates culture to drive operational and pipeline excellence, with particular focus on the key performance indicators (KPIs) covering operating model metrics (e.g., growth, velocity, efficiency, resource allocation) to ensure consistent execution against strategy. Escalates to ensure removal of blockers related to the customer business and/or internal processes to deliver technical and operational excellence in Customer Success teams and accelerate customer adoption. Leads area-level/global-level rhythm of business (ROB) and instills a sense of urgency for strategic agility through other leaders. Identifies widespread or global patterns in blockers and develops strategies to resolve and prevent them in the future. Assesses and prioritizes high-impact technical blockers, and coaches team to enable resolution. Leverages systems for identifying leading and lagging indicators of success across customer success pipeline at the area/regional level (as appropriate). Drives area/regional accountability (as appropriate) to identify gaps in execution leading to optimizing customer success delivery for value realization.

Technical Leadership

• Leverages credibility and expertise to act as executive-level technical sponsor and leader for customers and partner ecosystem to continuously evolve and grow through the digital transformation journey (e.g., increase usage/consumption to drive customer expansion, upsell and renewal recapture rates). Provides area/global thought leadership for technical integration and innovation with the area leadership team. Creates culture of technical community engagement with customers and partners to influence actions and results at senior and executive levels of their organizations. Drives technical executive sponsorship with the customer and partner and influences strategy for regional scale. Leads critical engagements with customer and partner senior leadership, providing executive support for the Customer Success Unit (CSU) team to align operational plans with the organization's strategies to drive customer and partner obsession.
• Advocates to drive customer technical requirements with corporate product and engineering teams. Creates an internal feedback loop to drive broad, systemic continuous improvement for customers across Microsoft (e.g., security, product support). Leverages and creates customer and employee forums for open feedback and collaboration across teams. Invests in building and maintaining a strong network with corporate engineers to quickly meet customer and partner needs.
• Serves as an expert/spokesperson, as appropriate around key technical, operational and customer success topics (e.g., product/service lifecycle, customer perspective) to influence and drive recognition for Microsoft solutions and brands by speaking at events, having an active presence on social media platforms, and encouraging organizational participation. Leverages subject matter expertise to be and influencial voice in the area/globally, clarifying technical and operational questions and technology position. Supports Customer Success Unit (CSU) community-building internally and externally by providing community thought leadership and orchestrating with professional network to promote learning.

Qualifications

Required/Minimum Qualifications

• Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, or related field AND 4+ years experience in cloud/infrastructure technologies, information technology (IT) consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, and/or consulting
• OR equivalent experience
• 4+ years of experience and understanding of large-scale security deployments in enterprise-wide environments.

Additional or Preferred Qualification

Desired Microsoft Technology & Industry Equivalent. Certification in one or more of the following areas:

• Programming experiences, using Microsoft Information Protection SDK (e.g. PowerShell, C#, Python)
• Technical Certification in Microsoft SC-400 – Microsoft Information Protection Administrator)

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Overview

In SMC and Digital Sales, we have set out with the purpose to empower our customers through the unique value of the Microsoft cloud by building a globally led, digital-first scale organization aligned with partners. Dedicated to one of the fastest growing customer segments, the Small, Medium, Corporate (SMC) and Digital Sales organization is on pace to be Microsoft’s next $100 billion-dollar business - this is where you come in. As part of local subsidiaries or Digital Sales centers around the world, you will support a dedicated set of customers in identifying and achieving their business objectives through best-in-class digital engagement and partner co-selling. You will also have an opportunity to work cross-collaboratively while living our shared SMC and Digital Sales Culture priorities: Diversity and Inclusivity, Wellbeing, Sustainability, and Learning.

This opportunity will allow you to lead at the forefront of technology by growing the Security business across Asia with unique responsibilities for accelerated business growth.

This role is flexible, requires travel across the region and allows flexible work from home.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities

• The Security Solution Sales- Asia role is a senior role with responsibility for accelerating the growth of the Security solution area across the Asia region which includes the following Areas: Australia, New Zealand, ASEAN, Greater China, India, Japan & Korea.
• Work with the Security sales teams and partners to accelerate the growth of Security revenue and to take market share from our competitors.
• Collaborate with GPS to build a strong and capable Security partner ecosystem that can win against the competition.
• Drive joint territory planning and co-sell with key partners and work with GPS to build a consistent ROB cadence.
• Collaborate effectively with Security SE&O to enable our sellers and drive brand awareness for Microsoft Security with our customers and partners.
• Drive Solution Area performance excellence by working with Security Sales Excellence to implement T-13M sales execution rigor across the teams to drive healthy pipeline, Security revenue and partner performance and IAP metrics.
• Coach managers and sellers so they build strong Security specialization.
• Joint responsibility for Area Correction of Error plans.
• Provide sales and technical expertise and thought leadership to connect solutions with business impact.

Qualifications

• Bachelor’s degree in business, engineering AND 12+ years relevant work experience (e.g., Strategic Account Management, consulting, Technology Sales, corporate strategy, sales, business development, product management, project management, or related field) OR equivalent experience.
• Experience in Security Solutions is required.

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

LEAD SECURITY CONSULTANT

One of Singapore's established full-fledged IT solution provider supporting in Network Solutions, Computers and IT equipment for major brands.

Location: Central

Working Hours: 5 Days Work Week (Mon-Fri), Office Hours (9am to 6pm)

Remuneration Package:

• Basic up to S$ 10000
• Variable Bonus

Job Responsibilities:

• Conduct gap analysis of existing on-prem data centre and cloud infrastructures, identifying and assessing gaps in the overall security posture.
• Conduct comprehensive risk assessments to identify and mitigate security risks associated with information systems and processes.
• Lead and coordinate system security acceptance testing to ensure that all security requirements are met before systems are deployed.
• Collaborate with development and engineering teams to integrate security-by-design principles into the SDLC.
• Develop and maintain security policies, standards, and guidelines to ensure compliance with industry standards and regulatory requirements.
• Provide expert advice on security architecture and design, ensuring robust protection mechanisms are implemented.
• Manage vulnerability assessments and penetration testing to identify and address security weaknesses.
• Develop and deliver security training and awareness programs for employees and stakeholders.
• Stay current with emerging security threats, technologies, and trends, and provide recommendations for continuous improvement.
• Assist in the development and implementation of incident response plans and participate in security incident investigations as needed.
• Prepare detailed reports and documentation for management, highlighting security risks, mitigation strategies, and compliance status.

Requirements:

• At least 5 years of experience in information security, with a focus on risk assessment, system security acceptance testing, and security-by-design.
• Professional certifications such as CISSP , CISM, or equivalent.
• In-depth knowledge of security frameworks and standards such as ISO 27001, NIST, CIS Controls, and Cybersecurity Act of 2018.
• Strong understanding of risk management methodologies and the ability to perform comprehensive risk assessments.
• Proven experience in system security acceptance testing and validating security controls.
• Preffered familiarity with security tools and technologies such as SIEM, IDS/IPS, Firewalls, Endpoint Protection and Wazuh.
• Strong in technological architectures (infrastructure / application), both in on-premises data centres and cloud infrastructures.
• Excellent communication and interpersonal skills, with the ability to explain complex security concepts to non-technical stakeholders.
• Strong analytical and problem-solving skills, with attention to detail.
• Ability to work independently and as part of a team in a fast-paced environment.
• Experience with cloud security and working with cloud service providers such as AWS, Azure, or Google Cloud.
• Knowledge of regulatory requirements and standards relevant to the industry (e.g., PCI-DSS, HIPAA).

Please be notified that only shortlisted candidates will be notified.

Ian Fong | R22106545

Recruit Now Singapore Pte Ltd | EA No: 21C0845

LEAD SECURITY CONSULTANT

One of Singapore's established full-fledged IT solution provider supporting in Network Solutions, Computers and IT equipment for major brands.

Location: Central

Working Hours: 5 Days Work Week (Mon-Fri), Office Hours (9am to 6pm)

Remuneration Package:

• Basic up to S$ 10000
• Variable Bonus

Job Responsibilities:

• Conduct gap analysis of existing on-prem data centre and cloud infrastructures, identifying and assessing gaps in the overall security posture.
• Conduct comprehensive risk assessments to identify and mitigate security risks associated with information systems and processes.
• Lead and coordinate system security acceptance testing to ensure that all security requirements are met before systems are deployed.
• Collaborate with development and engineering teams to integrate security-by-design principles into the SDLC.
• Develop and maintain security policies, standards, and guidelines to ensure compliance with industry standards and regulatory requirements.
• Provide expert advice on security architecture and design, ensuring robust protection mechanisms are implemented.
• Manage vulnerability assessments and penetration testing to identify and address security weaknesses.
• Develop and deliver security training and awareness programs for employees and stakeholders.
• Stay current with emerging security threats, technologies, and trends, and provide recommendations for continuous improvement.
• Assist in the development and implementation of incident response plans and participate in security incident investigations as needed.
• Prepare detailed reports and documentation for management, highlighting security risks, mitigation strategies, and compliance status.

Requirements:

• At least 5 years of experience in information security, with a focus on risk assessment, system security acceptance testing, and security-by-design.
• Professional certifications such as CISSP , CISM, or equivalent.
• In-depth knowledge of security frameworks and standards such as ISO 27001, NIST, CIS Controls, and Cybersecurity Act of 2018.
• Strong understanding of risk management methodologies and the ability to perform comprehensive risk assessments.
• Proven experience in system security acceptance testing and validating security controls.
• Preffered familiarity with security tools and technologies such as SIEM, IDS/IPS, Firewalls, Endpoint Protection and Wazuh.
• Strong in technological architectures (infrastructure / application), both in on-premises data centres and cloud infrastructures.
• Excellent communication and interpersonal skills, with the ability to explain complex security concepts to non-technical stakeholders.
• Strong analytical and problem-solving skills, with attention to detail.
• Ability to work independently and as part of a team in a fast-paced environment.
• Experience with cloud security and working with cloud service providers such as AWS, Azure, or Google Cloud.
• Knowledge of regulatory requirements and standards relevant to the industry (e.g., PCI-DSS, HIPAA).

Please be notified that only shortlisted candidates will be notified.

Ian Fong | R22106545

Recruit Now Singapore Pte Ltd | EA No: 21C0845

Job Responsibilities:

• Assist in the formulation of ICT security strategy and work plan, in alignment with strategic plans.
• Assist in providing security governance, enforcing cyber security risk assessment and risk acceptance from stakeholders.
• Establish and implement Company-wide information security policies, strategies, plans and architecture
• Develop and manage a security governance program
• Protect & secure Company’s information and assets
• Perform day-to-day security operations
• Review safety measures and processes
• Enhance and configure corporate systems to continually improve their security
• Recommend changes to security policies and standards in response to changing conditions
• Any other adhoc duties as assigned.

Job Requirement:

• Preferably ‘Certified Information Systems Security Professional’ (CISSP), ‘Certified Information Systems Auditor’ (CISA) or ‘Certified Information Security Manager’ (CISM).
• 5 years of experience related to information security and working knowledge of ICT operations, security policies and procedures.
• Good interpersonal and communication skills to provide support to end users.
• Possess a strong sense of responsibility, initiative and resourcefulness as well as a keen interest in problem-solving.
• Experience in cybersecurity in government and non-profit organisations is preferred.

Interested applicants, please Email , and look for

Jensen Fang Lifa

Recruit Express Pte Ltd

EA License No. 99C4599

EA Personnel Registration Number: R2197080

We regret that only shortlisted candidates will be contacted.

We are assisting our client, an established IT Solutions Provider providing digital transformation solutions to enterprises, to hire a Senior/Lead Security Consultant.

Responsibilities:

• Conduct gap analysis of existing on-prem data center and cloud infrastructures, identifying and assessing gaps in the overall security posture.
• Conduct comprehensive risk assessments to identify and mitigate security risks associated with information systems and processes.
• Lead and coordinate system security acceptance testing to ensure that all security requirements are met before systems are deployed.
• Collaborate with development and engineering teams to integrate security-by-design principles into the SDLC.
• Develop and maintain security policies, standards, and guidelines to ensure compliance with industry standards and regulatory requirements.
• Provide expert advice on security architecture and design, ensuring robust protection mechanisms are implemented.
• Manage vulnerability assessments and penetration testing to identify and address security weaknesses.
• Develop and deliver security training and awareness programs for employees and stakeholders.
• Stay current with emerging security threats, technologies, and trends, and provide recommendations for continuous improvement.
• Assist in the development and implementation of incident response plans and participate in security incident investigations as needed.
• Prepare detailed reports and documentation for management, highlighting security risks, mitigation strategies, and compliance status.

Requirements:

• 5 years of experience in information security, with a focus on risk assessment, system security acceptance testing, and security-by-design.
• Professional certifications such as CISSP, CISM, or equivalent.
• In-depth knowledge of security frameworks and standards such as ISO 27001, NIST, CIS Controls, and Cybersecurity Act of 2018.
• Strong understanding of risk management methodologies and the ability to perform comprehensive risk assessments.
• Proven experience in system security acceptance testing and validating security controls.
• Expertise in integrating security-by-design principles into the SDLC.
• Familiarity with security tools and technologies such as SIEM, IDS/IPS, Firewalls, Endpoint Protection, and Wazuh.
• Strong in technological architectures (infrastructure/application), both in on-premises data centers and cloud infrastructures.
• Excellent communication and interpersonal skills, with the ability to explain complex security concepts to non-technical stakeholders.
• Strong analytical and problem-solving skills, with attention to detail.
• Ability to work independently and as part of a team in a fast-paced environment.
• Experience with cloud security and working with cloud service providers such as AWS, Azure, or Google Cloud.

Job Summary:

The Cyber Security Asset Management Services Lead will be responsible for partnering with sales teams and relevant teams to win new business by leading asset discovery engagements and help identify white space opportunity. This person will lead asset management services engagements across a portfolio of customers and will also help shape the strategic direction of the Cyber Security Asset Management (CSAM) practice, building the business and becoming a strategic advisor to our customers and focus on PANW solutions pull- through. The candidate should have prior experience of structuring and selling software Enterprise license agreements (ELAs) and Software as a Service (SaaS) deals leveraging asset base and white space information; enabling sales teams with pipeline generation and value proposition to drive incremental revenues and margins. The ideal candidate should have both a business background that enables them to engage at the CXO level, and technology background that enables them to easily interact with customer’s technology and security teams.  

Key Responsibilities: 

• Partner with Sales, Technical and Services teams to plan and conduct CSAM engagements and contribute to customer relationships

• Provide hands-on, expert level proactive CSAM assessment service to customers and deliver gap analysis and findings to CxO and key stakeholders 

• Assist customers in developing and implementing CSAM strategies, policies, and procedures aligned with best practices and regulatory compliance requirements

• Identify and execute strategies for CSAM service development, enablement and process that result in the identification of white space opportunity and pull through of PANW’s solutions

• Leveraging gap analysis and asset information, collaborate with Sales teams to investigate further use cases in order to identify incremental PANW solution requirements and assist to shape ELA and SaaS value propositions

• Amplify PANW’s ELA buying program offering with customers to help simplify and consolidate their spend across multiple point security solutions and deliver flexibility and agility around software usage

• Understand customer challenges. Pricing and financial modeling to support customer use cases

• Market analysis, requirements development, business case, collateral, strategy, and positioning

• Interact with customers, partners, and sales engineering teams in different forums to gather feedback and evangelize the offerings

• Collaborate with product marketing, technical marketing, sales engineering, and technical support teams to train the field teams, gather feedback

• Drive thought leadership and participate with leading ecosystem and alliance partners to create and offer CSAM services and increase market share. 

Responsibilities:

• Lead the IT Security team to manage and all IT security-related matters that support business objectives and strategies
• Develop and carry out IT security policies and plans
• Conduct security review of existing systems on their ability to provide adequate defence against the latest security threats.
• Conduct vulnerability assessments and penetration tests for all critical IT systems
• Drive and conduct IT Security awareness and training like security talks, phishing simulation and incident response exercises
• Manage and investigate all cyber security alerts and notifications from cyber surveillance and threat intelligence to identify root cause and impact for effective containment, mitigation and future improvements
• Manage and investigate all IT Security incidents to identify root cause and impact for effective containment, mitigation and future improvements
• Engage IT project teams throughout the SDLC to identify and prioritize applicable security controls and provide guidance on how to implement these controls
• Jointly perform, monitor, track and review with IT Governance team and other IT teams on all information systems and infrastructure and security
• Maintain and enhance the Information Security risk assessment methodology
• Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit
• Act as Subject Matter Expert (SME) in security technologies, and provide knowledge sharing and technical assistance to other team members
• Define security configuration standards for platforms and technologies
• Detailed reporting on IT security initiatives, scans, incidents to management and statutory reporting
• Any other ad hoc duties as assigned.

Requirements:

• Bachelor's degree in Computer Science, of Information Technology or equivalent, with minimum 5-7 years' experience in Information and Cyber Security
• Good knowledge and experience with cloud security of Amazon Web Services (AWS), Microsoft Azure and SaaS solutions, security standards and frameworks like NIST, ISO27001, MTCS, CSA Security-by-Design (SBD) and Personal Data Protection Act (PDPA) is preferred.
• Other relevant certifications such as CISSP/CISA/CISM, CREST, CEH, CHFI would be advantageous
• Demonstrated leadership and adaptability, with willingness to readily and voluntarily take ownership of highly challenging tasks and problems, even beyond initial scope of responsibility.
• Ability to handle multiple tasks concurrently and meet deadlines, while maintaining focus despite conflicting demands.

Interested applicants, please Email , and look for

Jensen Fang Lifa

Recruit Express Pte Ltd

EA License No. 99C4599

EA Personnel Registration Number: R2197080

We regret that only shortlisted candidates will be contacted.

Job Summary

We are seeking a highly motivated and experienced Cloud Security Hands-On Engineer to join SCB. The Cloud Security Hands-on Engineer will be responsible for designing, developing, implementing, and maintaining information systems. This will include developing a deep understanding of our cloud architecture, identifying and mitigating potential security threats and vulnerabilities, and collaborating with other teams to ensure our security measures are effective.

· 8+ years of Information Security or engineering experience.

· 2+ years of direct experience in at least one Public Cloud (AWS or Azure).

· Work closely with Product Security, Engineering, Operations, and Corporate Security to define security strategy and execute on it. Implementing automation to enable developers to easily consume security services.

· Improve the accessibility of security through automation, continuous integration pipelines, and other means. Designing a secure application-release automation process to make security an integral part of the CI/CD pipelines.

· Enforce standard methodologies, processes and tools and ensure compliance to enterprise architecture, global information security policies and engineering strategy.

· Validate adherence to AWS and Azure governance standards for policy definitions, role-based access controls, ARM Templates, resource groups and Azure Blueprints.

· Identify security tools and lead operationalization of solutions from POC to Production, e.g. API Threat Protection, Container Security, etc. Streamline POC

Key Responsibilities

Processes.

· Work with SRE and Engineering to implement a chaos-testing methodology and toolkit. Integrating security tools issue tracking with Jira.

· Implement automation to investigation and response workflows for Automated Incident Response.

· Interview, hire, and create on-boarding plans for new or transferred employees.

· Encourage others to seek opportunities for different and innovative approaches to addressing problems; facilitate the implementation and acceptance of change.

· Produce and streamline audit evidence.

· Stay current on threats, vulnerabilities, and controls.

· Familiarity with SecOps processes i.e., detection, monitoring, alerting and threat intelligence.

· Hands-On Proficiency in scripting and coding using Bash, Python, IaC (Terraform, Cloud formation, Azure ARM).

· Participate in the entire lifecycle of software development, including requirements analysis, design, development, testing, deployment, and maintenance. (Tools like Junit, Postman, Burp, Terratest, Sentinel, Misconfig test, OPA,etc.,)

· Hands on experience in infrastructure provisioning, configuration of provisioned infrastructure. deployment of application and Plugins such as TFLint, Checkov, Docker Linter, docker-vulnerability-extension, Security Scan, Contrast Security, etc.,

· Extensive knowledge in analyzing the contents and the build process of a container image in order to detect security issues, vulnerabilities or potential risks. Open-source tools such as Dagda, Clair, Trivy, Anchore, etc., can be leveraged for container image analysis.

· Familiar with Open-source tools such as Jenkins, etc., can be leveraged to build the CI/CD pipelines, and DefectDojo and OWASP Glue can help in tying the checks together and visualizing the check results in a single dashboard.

· Hands-On experience in Open-source tools such as truffleHog, git-secrets, GitGuardian and similar can be utilized to detect such vulnerable management of secrets.

· Expert knowledge with integrating crucial security tasks into CI/CD pipelines.

· Strong knowledge of software development methodologies and the software development lifecycle.

· Strong knowledge of container security and secrets management.

· Working experience with configuration management.

· Experience with Azure technologies in general, such as Service Fabric, Application Service Environment, Azure Kubernetes Service, Azure DevOps, Azure Monitor, Azure Sentinel, Azure Defender Suite, Azure SQL, Cosmos, Azure APIM, Azure AD, Azure OMS/Application Insights, Global Traffic Manager, etc.

· Experience with AWS technologies, such as CodePipeline, CodeBuild, CodeDeploy, CodeStar, Guardrails, Amazon ECS, AWS Lambda, etc.

Our Ideal Candidate

· 8+ years of Information Security or engineering experience.

· 2+ years of direct experience in at least one Public Cloud (AWS or Azure).

· Experience with scripting and orchestration including Terraform

· Experience with Python, Go, Java, or Ruby

· Experience working with DevOps tools, for ex. Bitbucket, Jenkins and Artifactory

· Experience in DevSecOps pipeline security tools, for ex. OPA, Sentinel

· Experience with Public Cloud platforms, for ex. AWS, Azure or GCP

· Experience in API layer like security, custom analytics, throttling, caching, logging, monetization, request and response modifications etc.

· Experience with Container platforms, for ex. Kubernetes, OpenShift, EKS, AKS or GKE

· Experience in Security automation using Cloud services, like AWS Lambda or Step Function

· Experience creating Splunk use cases (SIEM) and Splunk query language

· Cloud or Container Certifications like CKA, AWS SA, AZ-500, TF Associate

· Cyber Security Certification like CISSP, CCSP, CCSK

· Good understanding of software development methodologies, such as Agile and running Scrum

· Critical thinking and problem-solving skills

· Communication skills and Decision-making

Role Specific Technical Competencies

· Public Cloud Engineering and Architecture

· API Frameworks

· IAM (RBAC, ABAC) and Secrets Management

· Threat Modeling Framework STRIDE, MITRE

· Azure / AWS Public Cloud Threat Modeling (Manual / Automation)

· Python, Go Lang, Java / .NET

· Infrastructure as Code

· PowerShell, Azure CLI

· DevSecOps Capabilities (SAST, DAST, SCA, CodeSign)

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.

Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.

Together we:

· Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do

· Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well

· Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

What we offer

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

· Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.

· Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.

· Flexible working options based around home and office locations, with flexible working patterns.

· Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits

· A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.

· Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.

Recruitment Assessments

Some of our roles use assessments to help us understand how suitable you are for the role you've applied to. If you are invited to take an assessment, this is great news. It means your application has progressed to an important stage of our recruitment process.

Visit our careers website www.sc.com/careers

Responsibilities:

• Lead the IT Security team to manage and all IT security-related matters that support business objectives and strategies
• Develop and carry out IT security policies and plans
• Conduct security review of existing systems on their ability to provide adequate defence against the latest security threats.
• Conduct vulnerability assessments and penetration tests for all critical IT systems
• Drive and conduct IT Security awareness and training like security talks, phishing simulation and incident response exercises
• Manage and investigate all cyber security alerts and notifications from cyber surveillance and threat intelligence to identify root cause and impact for effective containment, mitigation and future improvements
• Manage and investigate all IT Security incidents to identify root cause and impact for effective containment, mitigation and future improvements
• Engage IT project teams throughout the SDLC to identify and prioritize applicable security controls and provide guidance on how to implement these controls
• Jointly perform, monitor, track and review with IT Governance team and other IT teams on all information systems and infrastructure and security
• Maintain and enhance the Information Security risk assessment methodology
• Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit
• Act as Subject Matter Expert (SME) in security technologies, and provide knowledge sharing and technical assistance to other team members
• Define security configuration standards for platforms and technologies
• Detailed reporting on IT security initiatives, scans, incidents to management and statutory reporting
• Any other ad hoc duties as assigned.

Requirements:

• Bachelor's degree in Computer Science, of Information Technology or equivalent, with minimum 5-7 years' experience in Information and Cyber Security
• Good knowledge and experience with cloud security of Amazon Web Services (AWS), Microsoft Azure and SaaS solutions, security standards and frameworks like NIST, ISO27001, MTCS, CSA Security-by-Design (SBD) and Personal Data Protection Act (PDPA) is preferred.
• Other relevant certifications such as CISSP/CISA/CISM, CREST, CEH, CHFI would be advantageous
• Demonstrated leadership and adaptability, with willingness to readily and voluntarily take ownership of highly challenging tasks and problems, even beyond initial scope of responsibility.
• Ability to handle multiple tasks concurrently and meet deadlines, while maintaining focus despite conflicting demands.

Interested applicants, please Email , and look for

Jensen Fang Lifa

Recruit Express Pte Ltd

EA License No. 99C4599

EA Personnel Registration Number: R2197080

We regret that only shortlisted candidates will be contacted.

Job Summary:

We are currently looking for a Cyber Security Lead Engineer who will support the School by managing and maintaining the Cyber Security, Azure Infrastructure and Microsoft 365. The appointee works with the Director of Technology & Senior Cyber Security Manager to ensure the IT requirements of the end user are met.

The role reports to the Senior Cyber Security Manager.

Requirements:

· Minimum Degree in Computer Science, Engineering or equivalent

· Minimum relevant experience of 3 years and above

· Excellent knowledge of Cyber Security, Azure and Microsoft 365

· Experience in Microsoft Intune, Microsoft Defenders and Microsoft Sentinel

· Experience in managing Azure Identities and MDM

· Able to work independently as well as a good team player with good initiative

· A positive approach to working with people

· Will accept late hours and weekend work for maintenance and patching

The school is committed to safeguarding and promoting the welfare of children and young people and expects all staff and volunteers to share this commitment. We will conduct thorough background checks on all successful applicants.

Please refer to “Careers” on our website at www.tts.edu.sg for a detailed job description.

5-day week – working hours are from 7.30 am to 4.30 pm (41.25 nett hours per week). Interested applicants, please submit an application letter and detailed resume, stating your current and expected salary, date of availability and contact number via the online system at https://careers.tts.edu.sg/careerportal/main.aspx. In your application, please provide the names and addresses of three people from whom confidential references may be obtained. Please indicate their professional relationship to you.

(Only shortlisted applicants will be notified)

CPE Registration No.: 196100114C | Period of Registration: 7 June 2023 to 6 June 2029

We are looking for an experienced Auditor/Assessor to join our IT Audit team. The ideal candidate should have proven track record in Information Security/Data Privacy related audit experience and able to provide practical recommendations to strengthen the organization’s Information Technology security posture and data privacy regime.

Shortlisted applicants will be considered for the role of Information Security Auditor / Data Privacy Assessor / IT Auditor / Lead Auditor

Key Responsibilities:

​

Execution of the Information Security and Data Privacy related audit/assessment process

Exhibits appropriate judgment regarding issue notification, prepares draft findings in accordance with relevant systems standards and drafts final audit reports for review by the Technical or Audit Manager.

Demonstrates depth and breadth of knowledge of Audit methodologies and objectives.

Demonstrates professionalism with good communication skills.

Presents audit/assessment results in an objective and unbiased manner.

Writes opinions reflecting relevant facts that lead to logical conclusions.

Ensure compliance with ISOCert's policy & procedures

Perform administrative duties according to plan and organize audits.

Perform audit on client’s existing processes and Information Security and Data Privacy systems.

Investigate client’s business process controls, application controls and IT controls and benchmark them according to regulations and industry standards.

Pre-requisites:

Degree or Diploma in IT / Computing / Information Security or equivalent qualifications

Minimum 3 years of relevant working experience for Degree holders / 5 years of related working experiences for Diploma holders (preferably specializing in IT / IT Security field).

Candidates with knowledge and experience in ISO 27001, ISO 27701, DPTM and other management system related standards are preferred.

Preferably with Lead Auditor Training Certification in ISO 27001:2013 / Certified Information Security Auditor – CISA and PDPA related training.

Those with auditing experience will be an added advantage.

Good report writing skills

Excellent communication and presentation skills.

JOB SUMMARY

· The Cyber Security Assessment (CSA) is an integral part of Cyber Security with an aligned goal to ensure secure by design as relates to any software we build or buy or connect to in the Bank. To that end the CSA needs to ensure all security controls related to security threats are being adhered to by projects and application development teams. As part of CSS, we work effortlessly in ensuring the Bank soundly meets its commitments to internal and external stakeholders and maintains an appropriate cyber security defence posture through as part of our 'Secure by Design' initiatives.

· The role is expected to be a chapter lead for Cloud and Container policy and control governance and implementation in the tools and services that we own and embed as part of the build pipeline and platform. The incumbent will provide direction to Security champions in ICS as well as federated security champions on which controls are most appropriate for Cloud and containers as well as define how best to initiate the control checks in the pipeline and platform. The role requires the ability to communicate and build relationships with technology product owners and support teams across geographies mainly ADO, AWS, Azure, SKE, CIO domains and other ICS control leads related to secure by design.

· The Lead, Principal Cyber Security Consultant needs to be a DevOps, Cloud and Container SME with institutional and industry knowledge. Ability to drive product development, security as policy coding requirements as well as influence security champions to #doTheRghtThing in their reviews. Coding capability is essential

RESPONSIBILITIES

Strategy

· Develop and implement a comprehensive strategy for security as code and policy as code practices, aligning with the overall ICS objectives

· Lead the adoption of automated security and compliance solutions across the development lifecycle

· Drive innovation in integrating security into CI/CD pipelines, facilitating a shift-left approach to security

Business

· Collaborate with key business stakeholders to understand business objectives, providing insights on how security as code can support these goals

· Translate business requirements into secure, scalable, and reliable security practices

· Foster a culture of security awareness and ensure security best practices are incorporated into business operations

Processes

· Establish and refine processes for integrating security tools and practices into the software development and deployment processes

· Develop and maintain policy-as-code frameworks to enforce security policies automatically within the infrastructure

· Ensure continuous improvement of security processes through regular review and incorporation of feedback mechanisms

People & Talent

· Conduct comprehensive risk assessments and enforce risk management policies to identify and mitigate potential security threats

· Develop metrics and reporting frameworks to monitor the effectiveness of security measures

· Liaise with the risk management team to integrate cybersecurity risk into the organizations overall risk profile

Risk Management

· Conduct comprehensive risk assessments and enforce risk management policies to identify and mitigate potential security threats

· Develop metrics and reporting frameworks to monitor the effectiveness of security measures

· Liaise with the risk management team to integrate cybersecurity risk into the organizations overall risk profile

Governance

· Ensure compliance with relevant ICS policies and, regulations and standards related to cyber security and data protection

· Establish governance frameworks for policy as code to ensure consistent application and enforcement of security policies across all assets being built on the central devops pipeline

Regulatory & Business Conduct

· Display exemplary conduct and live by the Group’s Values and Code of Conduct.

· Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.

· Lead the DevSecOps Automation Cloud and Container Policy checks to achieve the outcomes set out in the Bank’s Conduct Principles

· Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.

Key Stakeholders

· ICS Control owners

· Cloud Platform

· ADO Engineering

· Security Architecture

· CIO Domains

Other Responsibilities

· Embed Here for good and Group’s brand and values in ICS-CS; Perform other responsibilities assigned under Group, Country, Business or Functional policies and procedures; Multiple functions (double hats);

Our Ideal Candidate

· 5+ years of experience in Information security, preferably in Banking and Financial services sector.

· 5+ years of hands-on experience on application/ infrastructure risk assessments, Along with 3 years of experience in implementation or management of security tools/ projects.

· Proven experience in leading security initiatives

· Subject matter expert in DevOps, AWS, Azure and Kubernetes especially EKS and AKS

· Familiar with policy as code

· Self-starter, capable of working without direction and able to deliver projects from scratch

· Full Software Development Lifecycle experience in a mature Continuous Integration and Continuous Delivery environment, probably as a developer

· Strong DevOps toolchain experience: ADO, Artifactory, Sonaqube, Nexus, Aqua

· Configuration and deployment tools experience – Ansible or Puppet

· Strong scripting skills – Python, Ruby, or similar; Perl .

· Breadth of knowledge – operating systems, networking, distributed computing

· Cloud deployment and systems management experience – AWS, Azure

· Container orchestration expertise – EKS, AKS

· Strong knowledge of UNIX and TCP/IP – understand strace and tcpdump output

· Bachelor’s Degree in engineering, Computer Science/Information Technology or its equivalent.

· CSPM, CISSP, nice to have

Role Specific Technical Competencies

· DevOps

· Cloud

· Containers

· Security

· Policy as Code

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 160 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents. And we can't wait to see the talents you can bring us.
Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion. Together we:

· Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do

· Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well

· Be better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

· Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations

· Time-off including annual, parental/maternity (20 weeks), sabbatical (12 weeks maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum

· Flexible working options based around home and office locations, with flexible working patterns

· Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits

· A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning

· Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.

· Recruitment assessments - some of our roles use assessments to help us understand how suitable you are for the role you've applied to. If you are invited to take an assessment, this is great news. It means your application has progressed to an important stage of our recruitment process.

Visit our careers website www.sc.com/careers

A spin-out of telecom operator MyRepublic, MyRepublic Digital is an end-to-end digital enabler and accelerator that provides companies around the world the technology, skills and expertise needed to create frictionless customer experiences and thriving businesses.

Using a product-led approach, MyRepublic Digital aims to enable, simplify and accelerate digital transformation for aspiring digital brands. Its flagship offering is Encore: a cloud-native, all-digitalplatform-as-a-service that is ready to deploy pre-built with industry best practices and BSS/OSS features.

Role and Responsibilities

The incumbent will be responsible for the systems engineering to maintain the reliability and security of systems supporting a Cloud SAAS platform and some service provider Network Functions.

● Evaluate, integrate, and deploy security tools including Zero-Trust Security, Identity and Access Management, Endpoint Detection and Response, Security Information and Event Management

● Evaluate, integrate, and deploy monitoring tools for Cloud and IT services

● Review system and security logs, create rules and automations to correlate events and incidents, build analysis reports for critical events

● Ensure internal and external compliance audits are completed and due diligence and remediation actions are carried out according to schedule Work with SRE’s and IT Support to test and deploy patches for security vulnerabilities

● Work with CREST-certified VA/PT provider to ensure all assets are scanned and vulnerabilities tracked and remediated

● Maintain Telephony, RADIUS and DNS service uptime of 99.9%

● Design and deploy engineering solutions to provide capabilities including:
○ Monitoring and Alerting
○ Security Lifecycle Management
○ Patching and Integration Testing
○ Infrastructure Orchestration
○ Systems Automation

● Incident Management

● Improve the security, design and reliability of the infrastructure

● Maintain systems documentation

● Accept and meet challenging deadlines

Qualifications

● Degree or Diploma in Computer Science or related field of study

● Experience with the following is preferred:
○ Cloud service providers: AWS /GCP
○ Compliance Standards: ISO27001 / CIS20 / SRII
○ Automation Frameworks: Ansible / Salt
○ Vulnerability Scanners: Accunetix, Tenable
○ WAF/IDS/IPS: Palo Alto / Fortinet / Wazuh
○ IAM: Okta / CyberArk / BeyondTrust
○ Collaboration tools: Slack / Jira / Confluence
○ Source Code Repositories: Gitlab / BitBucket
○ Hypervisors: ESXi / Proxmox
○ Monitoring Tools: Grafana / InfluxDB / Prometheus / Datadog / New Relic
○ Reverse Proxy: NGINX / Traefik

● Strong background in Linux is a must

● Good understanding of Networking

● Ability to write scripts in various languages such as Bash, Python, PHP

● Ability to self-learn

● Well organized, attention to details and able to multitask

● Desire to explore and learn new technologies

What we offer in return:

● Exciting opportunities to create and grow in a rapidly growing organisation that is a disruptor in the telco space.

● Amazing colleagues and culture that encourages you to do your best work while staying authentic and true to yourself.

● A work culture that puts your individual needs at the core: Remote, Hybrid or In-Office – choose a work rhythm that suits you and your team. We focus on outcomes and believe that you can deliver your best work, working anywhere, anytime.

● Wellness first. We believe that wellness goes beyond team celebrations and birthday parties. Our holistic approach to wellness gives you opportunities to recharge, connect and explore, at and outside work. In addition to the standard leave entitlements, we offer:

● 1 day of wellness leave every quarter for you to take or your health and wellbeing, and explore your personal passions.

● 20 days to work from anywhere each year, allowing you more flexibility to explore and connect with your interests while delivering work you will be proud about.

MyRepublic values and behaviour that we look for:

From being the first to launch 1Gbps broadband plans and the first network optimised broadband service for gaming in Singapore, to crafting workplace practices that put wellbeing at its core, our values guide us in everything we do at MyRepublic Digital. It’s the secret sauce that makes us tick. If you espouse the following, we know you would fit in great with us:

● Never Settle: We dream big. We are constantly curious and embrace bold ideas.

● Stronger Together: We create together. We win together, we fail together. We grow together, we celebrate together. We are at our strongest together.

● Empowered to Deliver: We deliver on our commitments. We are empowered to move fast and with confidence to get the right things done.

● We Care: We care for ourselves, one another and our customers. We value authenticity and embrace differences. We create the space to recharge, connect and explore to bring our best selves to work.

We believe that skills, knowledge, and experience can come from a diverse range of life experiences. You may not have ALL the listed requirements for this role but this should not hold back! If you believe that you have what it takes for this position, are willing to learn, and you identify with the values and mission of MyRepublic Digital, we would love to hear from you. We celebrate diversity and look forward to hearing from a diverse group of applicants. We do not discriminate on any factor in our hiring process.

Responsibilities

• Plans, organises and directs investigations into security-related cases, whistleblowing, cross functional cases, compliance and ethics cases
• Supports and advises other investigating functions globally within the company
• Leads a team of investigation officers to ensure cases are analyses, investigated and reported in a concise yet rigorous manner
• Leads the team to ensure case files are properly presented, compiled and filed
• Identifies key stakeholders; leads engagement and collaboration with them key to proactively future proof the company against crime and other security incidents
• Monitors closely the crime trend, crime patterns and collates all security-related information for dissemination to create awareness and prevent occurrence. Work with training team to refresh crime prevention awareness monthly
• Prepares and consolidates monthly reports on cases, highlighting case status and action plans for crime prevention
• Attends security incident or special assignment on board vessel when required
• Performs any other duties and responsibilities assigned by GM Security

Requirements

• Diploma or Degree in any field
• At least 8 years of relevant work experience in a managerial capacity in investigations, with focus on corporate, compliance or commercial crime will be an advantage
• Possess valid PLRD Private Investigator License
• Familiar with local prosecution procedures
• Good interview and report writing skills
• Able to command a crime scene
• Self-motivated and able to work with minimal supervision
• Able to maintain confidentiality and work independently
• Physically fit to perform checks and inspection on personnel, documents, cargo, surveillance materials and mount operations
• Possess good leadership qualities, managerial, decision-making and inter-personal skills

Our Addresses and Working Hours:

Seatrium Limited

(Pioneer Yard)

50 Gul Road, Singapore 629353

(Islandwide transport provided)

Mon - Thu: 8:00am - 5:15pm

Fri: 8:00am - 4:30pm

Interested candidates are invited to send us an updated resume with your current and expected salary and earliest availability.

We regret that only shortlisted candidates will be notified.

Please note that your personal data disclosed to Seatrium Limited and our group of companies, shall be used for the purposes of evaluation, and processing in accordance with our recruitment processes and policies. By providing your personal data, you have consented to the aforesaid purpose under the provisions of the Personal Data Protection Act 2012.