Total 12 Manager management job vacancies in Legal / Public / Security category in Singapore

Job Description & Requirements

We are seeking an experienced fundraising, public relations and volunteer management manager with excellent leadership and networking abilities. The incumbent shall supervise and coordinate all operations that cultivate public and private resources (revenue and volunteers) to support and sustain programmes for our visually impaired beneficiaries.

The incumbent shall lead a team that builds good relationships with prospective donors and volunteers and facilitates effective communication with general public. The team also conducts workshops and programs to raise public and volunteer awareness of visually impairment and how to engage persons with visual impairment.

The incumbent should be familiar with both online and offline fund raising and marketing strategies. Apart from being approachable and culturally sensitive, the incumbent should also be proactive, able to inspire others and able to execute well-planned and ad hoc activities. Candidates with good public speaking skills and experienced in delivering presentations to different audiences are preferred.

Responsibilities:

· Develop and implement organisation fund raising & volunteer management strategies

· Align and implement organisation public relations strategy to annual workplan

· Prepare quarterly operations budget and reports for internal reporting

· Lead and develop collaborations with partners (schools, corporates etc) to support with fundraising and volunteers

· Organise public awareness talks (in collaboration with White Cane Club & Braille Production Unit) to general public, volunteers and corporate partners

· Manage and maintain database of donors and volunteers

· Engage existing donors and attract new donors to support organisation

· Conduct annual reviews of best practices for fundraising, volunteer management and public relations

· Perform liaison function with NCSS and external agencies for all fund raising, volunteer management and public relations related activities

Experience and Qualifications:

· Degree in Business Administration, Marketing, Communications or any related field.

· At least 5 years of relevant work experience (fundraising, marketing, communications)

· At least 3 years’ experience in leading a team.

· Previous experience in sales or marketing also acceptable.

· Interest to work in a non-profit / charity organisation

· Excellent written, verbal, and telephonic communication skills.

Job Responsibilities:

Security Management

• Oversee and manage the security executives, technicians, and outsourced security service providers.
• Oversee and manage the security and carpark systems in FCC.
• Monitor and analyse reported and detected security breaches and recommend remedial procedures / measures to management.
• Plan, implement and review effective security measures to enhance security operations effectiveness using Threat, Vulnerability and Risk Assessment (TVRA) approach.
• Liaise with stakeholders and coordinate with Securityvendor on manpower arrangement to support events, ad-hoc requests and non-performance on daily operation.
• Represent to liaise with relevant authorities e.g., Singapore Police Force, SCDF, NEA etc.
• Propose internal communication plans on security policies, awareness programs, road shows / seminars.

Security Policy

• Review security standard operation procedures (SOP) and procedures aligning with authority’s standards and changes in security operations / threats to enhance security operation effectiveness.
• Review the securitydeployment schedule and card/device clocking plan.
• Review the SecurityManagement System (SMS) and propose improvement plan if necessary.

Others

• Attend progress meeting at intervals of not more than one month to update Office of Estate on the status of securityoperation. The Contractor’s Manager or Supervisor shall always be present in the meeting.
• Ensure that all documentations including meeting minutes, statistic reports are updated in departmental repository.
• Undertake any other related duties stipulated by S.O;

Requirements:

• Degree holder in any discipline with 7 years of relevant experience supervising security personnel; OR
• Diploma holder in any discipline with 10 years of relevant experience supervising security personnel; AND
• Good knowledge of security, especially design and implementation of physical security plans
• Technical knowledge of security systems/equipment such as IDS, CCTVs, access control systems etc. and their integration

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Internal Security Risk Management & Governance team is responsible for managing and mitigating information security risks posed within the organisation. To ensure that the company's risk management and governance strategies are up to date and aligned across the organisation, this team is responsible for regular industry benchmarking and working with stakeholders from cross-functional teams to perform regular risk assessments and align risk mitigation strategies. This team is also responsible for managing the optimization, operation, training, and data analysis of the internal threat platform and UEBA (User and Entity Behavior Analytics) platform within the company.

Responsibilities

- Develop and maintain the organization's insider risk security governance framework, including policies, procedures, and standards that align with industry best practices and regulatory requirements.

- Conduct regular security risk assessments to identify vulnerabilities and risks, and work with relevant departments to develop mitigation strategies.

- Provide guidance and support for compliance with data protection laws, regulations, and standards (e.g., GDPR, ISO 27001, SOC 2).

- Coordinate with IT and business units to ensure insider threat security measures are integrated into technology projects and business processes.

- Translate business and technology requirements into relevant insider threat rules for operational teams to implement

- Monitor and report on the effectiveness of security controls and the status of security risks to senior management.

- Develop and lead security awareness training programs to educate employees on security best practices and emerging threats.

- Stay abreast of the latest security trends, threats, and technologies to continuously improve the organization's insider threat security posture.

Minimum Qualifications

- Bachelor's or master's degree in Information Security, Computer Science, Information Technology, or a related field.

- Professional certifications such as CISSP, CISM, CRISC, or CGEIT are highly desirable.

- A minimum of 5 years of experience in information security, risk management, or IT governance, with at least 2 years in a leadership role.

- Strong knowledge of information security principles, frameworks (e.g., NIST, ISO 27001), and regulations (e.g., GDPR, CCPA).

- Experience with security risk assessment methodologies and tools.

- Familiarity with data analysis tools and software to support risk analysis and reporting efforts, ensuring data-driven decision-making in the risk management process.

- Skilled in creating and maintaining risk registers, developing risk treatment plans, and effectively communicating risk posture to stakeholders at all levels of the organization.

- Excellent communication and interpersonal skills, with the ability to engage and influence stakeholders at all levels.

- Strong analytical and problem-solving skills.

- Proven ability to manage and prioritize multiple projects and tasks.

Preferred Qualifications

- Experience with designing, implementation and operation of commercial or in-house UBA/UEBA solutions (e.g., Splunk, Exabeam) are highly desirable

- Experience with threat modeling methodologies (e.g., STRIDE, PASTA) to analyze and assess security threats within software applications, systems, and networks.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Responsibilities:

• Provide legal support and advice for financings, private equity and venture capital investments in Singapore and overseas.
• Assist business units in mitigating legal risk, managing early stage disputes and developing proposals for resolution.
• Provide legal support and advice for operational matters, such as drafting/reviewing commercial contracts for purchase/supply of goods and services, providing legal advice for tenancy, customer, employment etc issues.
• Draft contract templates and plan legal training for business units.

Requirements:

• Bachelor’s degree in law with at least 5 years’ PQE in private practice or as an in-house counsel.
• Strong analytical skills and business acumen.
• Ability to provide pragmatic and strategic legal advice.
• Strong interpersonal and communication skills.

Responsibilities :

● Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.

● Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.

● Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.

● Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.

● Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.

● Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.

● Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.

● Developing and implementing security policies and procedures that ensure the organization’s data

and systems are protected against cyber threats.

● Conduct regular vulnerability assessments and penetration testing to identify potential security

weaknesses and risks to make improvements in the organization’s security.

● Report all security incidents to the home office and work with corporate IT on response and resolution strategy.

● Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.

● Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

● Bachelor’s degree in computer science, information technology, or equivalent experience.

● 5+ Years of experience in a cyber or information security management role.

● Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).

● Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.

● Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.

● Demonstrated understanding of business processes, IT risk management, and related standards.

● Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.

● Excellent problem-solving skills and the ability to think critically under pressure.

● Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.

● Proven track record of staying current with evolving cybersecurity threats and best practices.

● Exceptional planning and organizational skills, and excellent written and oral communication.

● Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.

● Professional information security certification preferred, such as:

○ CompTIA Security+

○ Certified Information Systems Security Professional (CISSP)

○ Certified Information Systems Auditor (CISA)

○ Certified Information Security Manager (CISM)

Location: East area

HOW TO APPLY :

Interested candidates, please submit your resume by clicking on “Apply Now” or aliceyap(a)hkmsvs.com

All applications will be treated in the strictest confidence and only shortlisted candidates will be notified

Yap Lay Choo

EA Licence No. 03C5391 | Registration No. R1987101

Overview

We are a leading executive search firm representing a prestigious global banking institution. Currently, we are seeking a seasoned and dynamic professional to lead the Consumer Wealth Banking team, focusing on the Non-Resident Indian (NRI) Wealth Management segment. This leadership role, based in Singapore, is an excellent opportunity for an individual with a deep understanding of wealth management and a proven track record in team leadership within a multinational banking environment.

Key Responsibilities

• Strategic Leadership: Craft and execute strategic plans to enhance the NRI Wealth Management segment, ensuring alignment with broader financial objectives.
• Team Management: Lead and inspire a team of wealth management professionals to achieve excellence, fostering an environment of innovation and growth.
• Client Relations: Oversee high-value NRI client portfolios, delivering bespoke financial advice and solutions that meet their unique needs.
• Business Development: Identify and pursue new business opportunities within the NRI community, aiming to expand the institution's wealth management services.
• Risk Management: Uphold strict regulatory and compliance standards, effectively managing risks to safeguard client and institutional interests.
• Performance Monitoring: Assess team performance against targets, taking action to ensure success and drive segment growth.

Requirements

Qualifications

• Experience: Minimum of 10 years in wealth management, with a focus on NRI clients preferred. At least 2 years of leadership experience in a multinational banking context is essential.
• Education: Bachelor’s degree in Finance, Business Administration, or a related field. Additional qualifications in wealth management or financial planning are advantageous.
• Skills: Outstanding leadership and managerial abilities, strategic mindset, and in-depth knowledge of wealth management products and services. Excellent communication, negotiation, and client relationship skills are critical.
• Other: Must be eligible to work in Singapore.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Internal Security Risk Management & Governance team is responsible for managing and mitigating information security risks posed within the organisation. To ensure that the company's risk management and governance strategies are up to date and aligned across the organisation, this team is responsible for regular industry benchmarking and working with stakeholders from cross-functional teams to perform regular risk assessments and align risk mitigation strategies. This team is also responsible for managing the optimization, operation, training, and data analysis of the internal threat platform and UEBA (User and Entity Behavior Analytics) platform within the company.

Responsibilities

The Internal Security Risk Management & Governance Manager will research industry best practices and technologies, then work with stakeholders from various cross-functional teams to develop strategies to mitigate the potential impact of risk materialisation. Based on formulated strategies, the manager will develop and implement policies, procedures, and controls to prevent, detect, and respond to various risks that could impact the confidentiality, integrity, and availability of the organization's systems, data, and other critical assets.

- Perform risk assessment based on Internal Security risks; Identify and assess potential information security risks posed within the organization and the existing policies/procedures/controls mitigating such risks.

- Assess and develop overall mitigation strategies across the company to minimize the impact of relevant incidents.

- Research industry best practices and technologies, perform industry benchmarking and gap analyses.

- Develop and implement internal security risk management programs (e.g. comprehensive audit loggings, insider threat detections, privileged access management & governance), procedures, and controls to prevent, detect, and respond to relevant incidents.

- Operate insider threat detection programs and manage business stakeholders to design programs based on business understanding and risk scenarios.

- Work with stakeholders from engineering, SecOps, IT, legal, HR, Ethics to ensure that all aspects of internal information security risk are addressed.

- Develop and maintain relationships with internal and external partners to stay current on industry best practices related to information security risk management, making recommendations for action for senior management.

- Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions.

Qualifications

- Bachelor's degree in a relevant field, such as information security, risk management, or business administration.

- At least 5 years of experience in a similar role, with a proven track record of managing internal security risk and consultancy experience is a bonus.

- Experience developing and implementing internal security risk management policies, procedures, and controls. Knowledge of risk assessment methodologies and tools.

- Calm and composed personality, a strong inclination towards learning, and a team-oriented mindset.

- Team builder, strong written/verbal communication and excellent teamwork skills with the ability to interact effectively with stakeholders at all levels of the organization; strong analytical and problem-solving skills.

- Self-driven and results-oriented, enjoys challenging tasks, demonstrates enthusiasm for work, and can handle job pressures.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Internal Security Risk Management & Governance team is responsible for managing and mitigating information security risks posed within the organisation. To ensure that the company's risk management and governance strategies are up to date and aligned across the organisation, this team is responsible for regular industry benchmarking and working with stakeholders from cross-functional teams to perform regular risk assessments and align risk mitigation strategies. This team is also responsible for managing the optimization, operation, training, and data analysis of the internal threat platform and UEBA (User and Entity Behavior Analytics) platform within the company.

Responsibilities

- Develop and maintain the organization's insider risk security governance framework, including policies, procedures, and standards that align with industry best practices and regulatory requirements.

- Conduct regular security risk assessments to identify vulnerabilities and risks, and work with relevant departments to develop mitigation strategies.

- Provide guidance and support for compliance with data protection laws, regulations, and standards (e.g., GDPR, ISO 27001, SOC 2).

- Coordinate with IT and business units to ensure insider threat security measures are integrated into technology projects and business processes.

- Translate business and technology requirements into relevant insider threat rules for operational teams to implement

- Monitor and report on the effectiveness of security controls and the status of security risks to senior management.

- Develop and lead security awareness training programs to educate employees on security best practices and emerging threats.

- Stay abreast of the latest security trends, threats, and technologies to continuously improve the organization's insider threat security posture.

Minimum Qualifications

- Bachelor's or master's degree in Information Security, Computer Science, Information Technology, or a related field.

- Professional certifications such as CISSP, CISM, CRISC, or CGEIT are highly desirable.

- A minimum of 5 years of experience in information security, risk management, or IT governance, with at least 2 years in a leadership role.

- Strong knowledge of information security principles, frameworks (e.g., NIST, ISO 27001), and regulations (e.g., GDPR, CCPA).

- Experience with security risk assessment methodologies and tools.

- Familiarity with data analysis tools and software to support risk analysis and reporting efforts, ensuring data-driven decision-making in the risk management process.

- Skilled in creating and maintaining risk registers, developing risk treatment plans, and effectively communicating risk posture to stakeholders at all levels of the organization.

- Excellent communication and interpersonal skills, with the ability to engage and influence stakeholders at all levels.

- Strong analytical and problem-solving skills.

- Proven ability to manage and prioritize multiple projects and tasks.

Preferred Qualifications

- Experience with designing, implementation and operation of commercial or in-house UBA/UEBA solutions (e.g., Splunk, Exabeam) are highly desirable

- Experience with threat modeling methodologies (e.g., STRIDE, PASTA) to analyze and assess security threats within software applications, systems, and networks.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

As the leading European Union bank, and one of the world’s largest financial institutions with an uninterrupted presence in the region since 1860, BNP Paribas offers a wide range of financial services for corporate, institutional and private investors spanning corporate and institutional banking, wealth management, asset management and insurance.

We passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued and encourage applicants of all backgrounds, including diversity of origin, age, gender, sexual orientation, gender identity, religion applicants who may be living with a disability. We have a number of internal employee networks in place to empower our staff to act and challenge the status quo.

• BNP Paribas PRIDE is highly active in favour of the LGBTQIA+ community
• BNP Paribas MixCity which fosters better representation of women at all levels of the organization
• Ability, the mutual aid network for employees with a disability or a disabling or chronic illness
• BNP Paribas CulturAll which celebrates diverse backgrounds

BNP is committed to financing a carbon-neutral economy by 2050. The Group is a founding member of the Net-Zero Banking Alliance and has set up its own Low Carbon Transition Group to support its clients through their energy transitions.

https://careers.apac.bnpparibas/

More information
BNP Paribas - Diversity & Inclusion Journey
BNP Paribas - The Bank Of Green Changes

Award Obtained
BNPP has won Top employer Europe award in a 10th consecutive year

Main Scope
Role of Wealth Management APAC Chief Information Systems Security Officer, being understood this role includes delegations from WM CISO for the team located in Asia Pacific territory and fully participates in overall WMIS Cybersecurity and IT Risk objectives.

Main Responsibilities

WM APAC CISO

• Manage the WM IT Risk and Security local team in APAC by managing the recruitment, performances review as well as training and career-path development
• Coordinate with APAC WM security actors, including India-based resources
• Coordinate with APAC WM IT teams on risk and security topics, while promoting a secure development and deployment culture
• Assist for a Risk Treatment for any APAC WM issue, based on the WM GAIM generic process
• Contribute to the IT Risk and Cybersecurity Governance including procedural framework, Cybersecurity awareness and communication for the APAC scope.
• Periodic reporting of security status to WM Global CISO as well as APAC Management

IT security compliance

• Ensure the alignment with the Group and WM GAIM security policies, for IT production assets including the security hardening, vulnerability and patch management.
• Ensure the protection of WM business data with an adequate security level of WM assets, based on project assessment and production review processes
• Ensure the compliance with regulatory bodies requirements, including for APAC (HKMA, MAS), EU (GDPR), Switzerland (FINMA)
• Leveraging on a deep knowledge of Security standards such as NIST, CIS,ISO2700x , ensure the compliance with the IT security requirements
• Identify the process gaps and provide solutions

Production Security oversight (delegation on WM APAC scope)

• Identify the production security requirements and ensure a smooth integration of WM assets within APAC IT Production, including network security such as flow opening and Application Zoning compliance
• Identify the compliance level of the production environment and contribute to remediation actions definition while keeping the oversight on actions progress
• Keep an overview and ensure the adequate Vulnerability Management at the server and middleware level leveraging on production scans and liaising with relevant production stakeholders
• Contribute to the management of Cybersecurity incidents

Application Security Testing Factory

• Ensure the effective implementation of Secure SDL including the DevSecOps platform and Threat modelling practices.
• Identify and implement the latest security standards for internet facing and internal assets
• Improve the Vulnerability Management at the application level by managing the platforms or services with providers (including Static Acceptance Security Testing – SAST, Dynamic Acceptance Security Testing – DAST and Software Composition Analysis – SCA).
• Perform Security risk assessments and reviews to be presented to respective committees
• Ensure the adequate security level for all WM GAIM applications, whatever the IT project manager’s location and hosting provider

CyberSecurity Program (delegation on WM APAC scope)

• Contribute to the security initiatives expected by the WM Cybersecurity Program

Coordination with IT Security actors

• Reporting line to the WM GAIM Global CISO: alignment on the objectives and means, contribution to the different global reporting (WM Cybersecurity Committee, Wholesale Application Security Dashboard…)
• Coordination and control of security activities performed by APAC CIB Business Information Security and Production Security teams, including project assessment from production point of view, production security review, user security awareness for the WM scope.
• Coordination with the Swiss Security team concerning integration of WM assets within Swiss IT production
• Keeping abreast of initiatives by the IT Security community within the Group and other IT Security stakeholders within the Group

Qualifications

Essential Banking Knowledge

Banking Knowledge and understanding of Wealth Management specificities

General Knowledge

International and APAC banking regulations

Deep Knowledge

Essential Technical Knowledge

Program/Project Management

Deep Knowledge

Knowhow of ASIA regulatory requirements

Deep Knowledge

Knowledge of standard IT Security concepts and methodologies

Deep Knowledge

Deep understanding of cybersecurity threats and remediation options

Deep Knowledge

IT Security Risk Assessment and Risk Management

Deep Knowledge

Knowledge of understanding digital transformation and mobile technologies and Cloud (Containers Docker, Kubernetes).

Good Knowledge

Knowledge of emerging technologies (NFT, encryption)

Good Knowledge

Essential Personal Skills

Communication skills – Ability to interact throughout oral and written communication skills

Deep Knowledge

Knowledge of emerging technologies (NFT, encryption)

Deep Knowledge

Knowhow of ASIA regulatory requirements

Deep Knowledge

Must be motivated, and able to work independently as well as part of a team

Deep Knowledge

Must demonstrate ethical responsibility, maturity, and discretion

Deep Knowledge

Qualifications and Experience

• 10 years' experience in information security evaluation and design of technical architectures
• Functional as well as technical knowledge of the applications used within BNP Paribas
• Knowledge of the Norms and Standards of the BNP Paribas Group, in particular with respect to ITRM & IT Security Norms and Policies
• Team management experience is a must
• Preferred Master level in Computer science and Information Security

Cybersecurity / Technical Value-added Competencies

ü Cybersecurity Governance: framework (NIST / CIS framework), Security incident management, Logging & Detection (SIEM – ELK products)

ü DevSecOps: CI/CD toolchain knowledge of various tools

o Source code management: sonarQuabe, bibucket, github/gitlab

o Security application scanning (e.g. Sonatype/NexusIQ, Fortify, AppSpider, Qualys, DTR scan…)

o Automation/orchestration: Ansible tower, Jenkins

Application Security: Threat modeling, Security architecture key concepts, exposure to various development framework and applicative landscape (Java/Web, Mobile applications, containerization/docker, kubernetes, API management, Cloud security)

Vulnerability management

• Nexpose, Nessus

Other Value-added Competencies

• Advanced IT security certifications may be advantageous (such as CISM, CCSP, CSK, CEH, CISSP…).
• Operational Risk and Permanent Control
• Data Analytics solutions (Tableau, PowerBI)and strong expertise in Dashboard/reporting

Responsibilities:

Legal

• Structure, draft and review legal documentation.
• Where necessary, assist in the negotiation of agreements and provide transactional legal support and guidance to the group’s Singapore business lines.
• Participating and providing support from a legal coverage and support on group-wide projects and the launch of new business lines and products.
• Liaise with and manage external counsel locally and internally to address legal needs of the group.
• Manage relationships and communication with regulatory bodies and authorities as well as industry groups.

Compliance & Risk Management

• Ensure compliance with the requirements applicable to the Asset Management licence.
• Prepare reports for Regulatory Authorities, Board of Directors and Management team.
• Ensure timely and accurate regulatory reporting for licensed entity.
• Keep abreast of applicable regulatory and statutory matters relevant to the industry to ensure that management is fully informed of current, new or proposed legislations.
• Responsible for risk assessment and risk review processes at client onboarding phase including AML/CDD/KYC/FATCA/CRS, ongoing review and administration.
• Review and maintain organisation’s Compliance and Risk Management policies and development of key risk and compliance documentation including FATCA/CRS review, BCP, Disaster Recovery Plan, Risk Assessment, Risk Management Processes and Procedures, Enterprise-Wide Risk Assessment process for the licensed entity.
• Provide training and ensure adherence with compliance and risk management policies and protocols by all staff.
• Ensure that a rigorous Operation Risk and Internal Control structure is established and implemented throughout the business and that appropriate controls are implemented.

Requirements:

• Bachelor of Laws degree with ICA qualification preferred.
• Minimum of 7 years of relevant working experience in the Asset Management, Wealth Management industry.
• Experience in implementing compliance and risk management framework in the financial industry.
• Excellent communication skills and provide proactive legal guidance.
• Ability to build and maintain effective internal and external relationships.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Internal Security Risk Management & Governance team is responsible for managing and mitigating information security risks posed within the organisation. To ensure that the company's risk management and governance strategies are up to date and aligned across the organisation, this team is responsible for regular industry benchmarking and working with stakeholders from cross-functional teams to perform regular risk assessments and align risk mitigation strategies. This team is also responsible for managing the optimization, operation, training, and data analysis of the internal threat platform and UEBA (User and Entity Behavior Analytics) platform within the company.

Responsibilities

The Internal Security Risk Management & Governance Manager will research industry best practices and technologies, then work with stakeholders from various cross-functional teams to develop strategies to mitigate the potential impact of risk materialisation. Based on formulated strategies, the manager will develop and implement policies, procedures, and controls to prevent, detect, and respond to various risks that could impact the confidentiality, integrity, and availability of the organization's systems, data, and other critical assets.

- Perform risk assessment based on Internal Security risks; Identify and assess potential information security risks posed within the organization and the existing policies/procedures/controls mitigating such risks.

- Assess and develop overall mitigation strategies across the company to minimize the impact of relevant incidents.

- Research industry best practices and technologies, perform industry benchmarking and gap analyses.

- Develop and implement internal security risk management programs (e.g. comprehensive audit loggings, insider threat detections, privileged access management & governance), procedures, and controls to prevent, detect, and respond to relevant incidents.

- Operate insider threat detection programs and manage business stakeholders to design programs based on business understanding and risk scenarios.

- Work with stakeholders from engineering, SecOps, IT, legal, HR, Ethics to ensure that all aspects of internal information security risk are addressed.

- Develop and maintain relationships with internal and external partners to stay current on industry best practices related to information security risk management, making recommendations for action for senior management.

- Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions.

Qualifications

- Bachelor's degree in a relevant field, such as information security, risk management, or business administration.

- At least 5 years of experience in a similar role, with a proven track record of managing internal security risk and consultancy experience is a bonus.

- Experience developing and implementing internal security risk management policies, procedures, and controls. Knowledge of risk assessment methodologies and tools.

- Calm and composed personality, a strong inclination towards learning, and a team-oriented mindset.

- Team builder, strong written/verbal communication and excellent teamwork skills with the ability to interact effectively with stakeholders at all levels of the organization; strong analytical and problem-solving skills.

- Self-driven and results-oriented, enjoys challenging tasks, demonstrates enthusiasm for work, and can handle job pressures.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

RESPONSIBILITIES

1. Reviewing and drafting service agreements and contract documents including joint ventures, M&A deals, private equity transactions and restructurings (including cross-border transactions in Asia, Australia and Europe).

2. Monitor, coordinate & advise, cross-functional stakeholders on legal issues including IPR / risk implication on possible legal risk and provide mitigation strategies.

3. Monitor legal and risk and give guidance on the acceptable assumption of risk.

4. Keep abreast of regulatory developments within or outside of the company as well as evolving best practices in compliance control.

5. Managing legal disputes and negotiate terms with customers, partners and suppliers.

6. Develop and oversee control systems to prevent or deal with violations of legal/compliance guidelines

7. Support the Business Unit Heads to ensure that team members work effectively and proactively with business teams and industry participants to advise and assist in the management of legal, risk and compliance matters

8. Coordinate and liaise with external counsels.

Requirements :

1. Bachelor of Law Degree (LLB) or equivalent from a reputable university

2. 7 to 10 years of work experience in a law firm or in-house

3. Sound knowledge in company law, contract law, product liability law, and mergers and acquisitions.

4. Experienced in advising on complex international transactions and in organizing and managing transactions, including cross-border transactions.

5. Demonstrate excellent document drafting skills. You should demonstrate strong communication and analytical skills along with a high level of commercial awareness.

6. Strong background in corporate work, probably gained from practice in a law firm or as an in-house counsel.