Total 5 lead buyer job vacancies in Legal / Public / Security category in Singapore

Join a team where you can play a crucial role in shaping the future of a world-renowned company and make a direct and meaningful impact in a space designed for top performers.

As a Senior Lead Security Engineer at JPMorgan Chase within the Cybersecurity & Tech Controls, you are an integral part of an agile team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. Drive significant business impact through your capabilities and contributions and apply deep technical expertise and problem-solving methodologies to tackle a diverse array of cybersecurity challenges that span multiple technology domains.

Job responsibilities

• Executes creative security solutions, design, development, and technical troubleshooting with the ability to think beyond routine or conventional approaches to build solutions and break down technical problems

• Develops secure and high-quality production code and reviews and debugs code written by others.

• Implement complex business logic in languages such as Python and scripting languages like Bash.

• Executes on key deliverables in the security engineering space, designs and develops production deployments with the ability to think beyond routine or conventional approaches in order to deliver technology solutions for key stakeholders.

• Experienced with systems engineering, systems integrations, and systems administration.

• Has good working knowledge of Windows and Linux systems internals Defines and implements infrastructure as Code (IaC) and automation tooling to deploy third party security software in an enterprise environment.

Required qualifications, capabilities, and skills

• Bachelor’s Degree in Computer Science or related disciplines

• Formal training or certification on software engineering concepts and 5+ years applied experience.

• Commanding knowledge of a programming/scripting language such as Python and scripting languages like Bash for automation, integration, and other tasks.

• Proficient in maintaining and managing Splunk application deployed in AWS ensuring high availability, performance and security.

• Extensive experience using Terraform to deploy , manage and scale infrastructure with AWS environment.

• Proficient in all aspects of the Software Development Life Cycle.

• Advanced understanding of agile methodologies such as CI/CD, Application Resiliency, and Security.

Preferred qualifications, capabilities, and skills

• Experience effectively communicating with senior business leaders

• In-depth knowledge of the financial services industry and their IT systems

• Experience working within a large-scale or global enterprise

To apply for this position, please use the following URL:

https://ars2.equest.com/?response_id=e0d8ae6d80a0fab8d7e6aef8defbd100

We are looking for Cloud Security Lead to pioneer in developing, implementing, and managing cloud security solutions to safeguard the organization's data and infrastructure. This role entails collaborating with cross-functional teams to ensure secure cloud environments while addressing emerging security challenges.

Details

• Working location: Central
• Working hour: 9am to 6pm / 10am to 7pm (Flexible arrangement), hybrid work arrangement
• Salary package: Up to 13K + AWS + Attractive Bonus Scheme
• Others benefits: Group insurance, above industries standard leave benefits, good employee welfare, annual dinners, cruise events, overseas trip, learning & development etc.

Responsibilities:

• Develop and execute cloud security strategies and roadmaps, provide leadership and direction to the cloud security team, aligning efforts with organizational objectives.
• Promote security best practices and foster a culture of security awareness across the organization.
• Design and deploy secure cloud architectures and solutions, evaluate and recommend security tools and technologies to enhance cloud security.
• Develop and manage IAM strategies to ensure secure and compliant access to cloud resources.
• Implement and enforce IAM policies, procedures, and controls for managing identities, roles, and permissions.
• Establish, enforce, and monitor cloud security policies and procedures.
• Ensure adherence to industry standards, regulations, and best practices (e.g., GDPR, HIPAA, NIST).
• Conduct regular security audits and risk assessments to identify and mitigate potential risks.
• Lead incident response efforts for cloud security incidents.
• Conduct root cause analysis and implement corrective actions to prevent future incidents.
• Partner with DevOps, IT, and development teams to integrate security into all stages of the software development lifecycle (SDLC).
• Collaborate with external vendors and partners to ensure robust security solutions.
• Regularly analyze security logs, alerts, and reports to detect and respond to threats.
• Prepare and present security metrics and reports to senior management.

Requirements

• Min 7years of experience in cloud security, with expertise in AWS, Azure, or Google Cloud Platform and min 2years in lead position.
• Strong understanding of cloud security & cloud infrastructure architectures, frameworks, and best practices.
• Relevant certifications such as OSCP, CISSP, CCSP, or AWS Certified Security – Specialty is a plus point.
• Knowledge of container security, Kubernetes, and microservices architecture.
• Hands-on experience with cloud security tools and services (e.g., AWS Security Hub, Azure Security Center).
• Proficient in security technologies such as IAM, encryption, SIEM, IDS/IPS, and vulnerability management.
• Familiarity with regulatory and compliance frameworks (e.g., ISO 27001, SOC 2).

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data not required at this application stage.
• To withdraw consent, email [email protected].

All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

• Low Yong Wei (Wyman) - R1550983
• ScienTec Consulting Pte Ltd - 11C5781

• Experience in an international setting with high adaptability
• In depth understanding of China’s laws (GRC)
• People Manager role with a strong track record in leadership

about the company
Our client is a multinational company and they are a prominent player in the industry, renowned for its extensive brand portfolio, commitment to quality, and dedication to sustainability and social responsibility.

about the job

• Develop, govern and enforce cybersecurity policies, standards, and guidelines to ensure robust security practices.
• Lead evaluations of security and privacy risks, coordinating swift responses to suspected cyber incidents/events.
• Monitor cybersecurity risks and report findings to relevant technical and business executive committees.
• Manage the Information Security GRC team, focusing on all cybersecurity aspects within the designated region, domains, and tech portfolio.
• Proactively drive risk reduction initiatives within the defined scope.
• Ensure effective security measures within the scope of assigned regions, domains, and technology areas.
• Collaborate on cyber strategy and roadmap creation for long-term security goals.
• Drive compliance with internal standards and regional cybersecurity regulations, both internally and externally.

skills and experience required
Minimum of 10 years' experience in Governance, Risk, and Compliance (GRC), with a solid understanding of cybersecurity frameworks such as ISO 27001, SOC 2, MITRE ATTACK, and NIST, as well as expertise in penetration testing and security audits.

Cloud Security and consulting background would be high preferred.

Skilled in managing incident response, evaluating cybersecurity risks, and conducting vulnerability assessments.

Proven ability to lead a team, with a track record of managing at least 2-3 direct reports.

Experience working in a regional setting, with the ability to navigate diverse regulatory environments and cultural considerations.

Whats on offer
The permanent opportunity for an Information Security & Risk Governance Lead (GRC), will pay a salary range of $15,000 - $ 17,000 plus benefits. This opportunity offers hybrid working arrangement.

To apply online please use the 'apply' function, alternatively you can reach me at
https://www.linkedin.com/in/Oliviatoh-032330132/. (EA: 94C3609 / R22109942)

Role Description

This is a full-time on-site role for a SOC Team Lead located in Singapore. As a SOC Team Lead, you will be responsible to:

• Plan monthly duty roster for site team.
• Cover shift function if there are any shift resources are absent.
• Generate report dashboarding for technical analysis.
• Proficient in Microsoft excel/Power BI.
• Will run operation and work the SOP to ensure the 24X7 Security operations support services operate effectively.
• Responsible for site monthly report and documentations submissions.
• Onboarding/off boarding of manpower resources (1 month).
• Submit monthly timesheet and monthly service report as part of billing documentation timely.
• Work with Main Contractor to ensure security devices or apps are patched and firmware versions are upgraded in accordance with IM8 requirements.

Responsibilities:

• Monitoring and analyzing security events, identifying potential threats, conducting investigations, and responding to security incidents
• Work closely with the end client SOC team to ensure the timely and effective detection, containment, and mitigation of security incidents
• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure).
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits.
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to ensure compliance and regulatory requirements and industry standards.

Requirements:

• Diploma/degree in computer studies
• 2 years of experience working in a security operation, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role.
• Independent and capable of working in a high-pressure environment.
• Willing to work in rotational shift environment (including weekends and night shift).

Qualification training shall be provided as necessary to attain competency to deliver job responsibilities.

Main Job Responsibilities:

• Conduct 3rd party audits to assess organizations' Information Security Management System and related Statement of Applicability (SoA) for conformity with ISO/IEC 27001 and in strict compliance with GIC's Code of Ethics and established audit procedures
• Conduct other related Information Security, Cybersecurity, Data Protection audits – ISO/IEC 27701, ISO/IEC 27017, ISO/IEC 27018, CSA Cyber Essentials mark, CSA Cyber Trust mark, IMDA Data Protection Trust mark, GDPR Compliance audits, Second Party IT audits
• Conduct Information Security, Cybersecurity, Data Protection trainings/workshops/seminars
• Manage the entire audit process from planning, conducting, reporting, and following up on the assigned audits.
• Support in technical review of audit reports and technical advice to Sales Team and Certification Team as and when required.

Job Qualifications / Requirements:

• Possess a professional degree in Computer Science/Information Security/Cybersecurity or related fields to Information Technology
• At least two years are in a role or function relating to information security/Cybersecurity
• Successfully completed a Lead Auditor Course in ISO/IEC 2700 Information Security Management System (ISMS)
• Having completed training courses in Singapore PDPA Fundamentals/Practitioner and holding industry certifications like CISA, CIPM, CISSP will be advantageous