Total 14 process improvement manager job vacancies in Legal / Public / Security category in d05 clementi new town hong leong garden pasir panjang

Key Responsibilities:

Provide legal advice to ensure that company operations and transactions comply with local and international laws and regulations.

Draft, review, and amend legal documents, including contracts, agreements, and other legal paperwork.

Manage the company's intellectual property, including trademarks and copyrights.

Represent the company in legal disputes and litigation.

Collaborate with external law firms to handle complex legal issues.

Qualifications:

Bachelor's degree in Law or a related field, with legal practice qualification.

Minimum of 5 years of relevant experience, preferably in the fintech or virtual banking industry.

Familiarity with commercial law, contract law, and international law.

Excellent negotiation and problem-solving skills.

Good organizational abilities and attention to detail.

Job Summary:

The SOC Manager will oversee the day-to-day operations of the Security Operations Center. This role is responsible for managing and coordinating the monitoring, detection, and response to cybersecurity incidents. The SOC Manager will lead a team of cybersecurity analysts and engineers, ensuring that all security incidents are addressed promptly and effectively.

Responsibilities

• Lead and manage the SOC team, including recruitment, training, and performance evaluation of security analysts and engineers.
• Develop and implement SOC policies, procedures, and processes to ensure effective and efficient security operations.
• Monitor the security landscape and ensure that the SOC team is equipped with the latest threat intelligence, tools, and technologies.
• Coordinate and respond to security incidents, ensuring proper incident management and response protocols are followed.
• Conduct regular security assessments, vulnerability scans, and penetration tests to identify potential security risks.
• Collaborate with other departments to ensure the organization's security posture is maintained and improved.
• Develop and maintain key metrics and reports to measure the effectiveness of the SOC operations.
• Provide advisory to clients for compliance with relevant regulatory requirements and industry standards.
• Stay updated on the latest security threats, trends, and technologies to continuously improve the SOC's capabilities.

Requirements

• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 5 years of experience in information security, with at least 3 years in a SOC or incident response role.
• Advantageous to have managed and led a team of security professionals.
• In depth understanding of Cyberkill Chain and Mitre Att&ck framework
• In-depth knowledge of security technologies and tools such as SIEM, IDS/IPS, firewalls, and endpoint protection.
• Experience with incident response methodologies and best practices.
• Strong understanding of network protocols, system architecture, and cybersecurity threats.
• Proficiency in scripting and automation tools is a plus.
• In-depth understanding of ITIL Framework
• Strong understanding of cybersecurity frameworks and standards (e.g. ISO 27001, CIS Controls & NIST)
• Advantageous to possess relevant industry certifications such as CISSP, CISM, GIAC, or equivalent.

Interested applicants are invited to apply directly at the NUS Career Portal

Your application will be processed only if you apply via NUS Career Portal

We regret that only shortlisted candidates will be notified.

Job Description

1. Policy implementation: Review and update policy on research security and collaborate with research units to implement related procedures and protocols.
2. Risk Assessment: Conduct regular risk assessments of research projects and facilities to identify potential security vulnerabilities and develop mitigation strategies through review of research agreements and related documents.
3. Training and Awareness: Develop awareness/training program for faculty, staff, and students on research security best practices, compliance requirements, and incident reporting procedures.
4. Point of Contact: Serve as the primary point of contact for internal and external stakeholders for research security matters. Work closely with various departments, including IT, compliance, legal, and research units to promote a culture of security and compliance in research activities.
5. Monitoring and Reporting: Monitor compliance with research security policy, perform related analysis and prepare reports for senior management on related activities. Support scheduled compliance audit/inspection on research security readiness and mitigation measures compliance and recommend improvements and follow up actions.

Qualifications

• Recognised degree in science or engineering discipline preferred;
• At least 5 years’ working experience in research management/administration or similar roles in compliance;
• Experience in research related functions in higher education sector, or research contracts management will be an advantage;
• Knowledge or experience in reviewing and developing policies and procedures;
• Excellent communication, analytical, and organizational skills and ability to work collaboratively in a diverse environment; strong problem-solving capabilities;
• Meticulous, independent and organised individual with the ability to maintain confidentiality and discretion as may be necessary in the job function.

Product area

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

Job description

Google's infrastructure needs go far beyond server computers. As Google's products and services scale the globe, the Strategic Negotiation team works behind the scenes to secure infrastructure for Google's future -- everything from underwater cables to physical data center space. As a Strategic Negotiator, you combine your deep market knowledge of a given sector with tech industry savvy to negotiate cost-effective solutions to support Google's infrastructure growth. You'll work with specific project teams on negotiating deals, managing vendor and partner relationships and presenting deal recommendations to our Tech leadership. Your successful negotiations have the potential to save Google millions of dollars in operating costs and impact every part of the business.

Additional job description

The Public Affairs team focuses on telling our story to decision-makers, opinion formers, and data center communities. We are focused on creating inclusive, strategic, and scalable solutions that have authentic and universal impact.

As the Public Affairs Manager for APAC, you will advise on how to shape our data center initiatives in a way that is aligned to state and local government priorities. You will lead the maximization of partner opportunities to partner with state and local institutions and tell the story of our data center commitment.

Qualifications

Job responsibilities

• Provide public policy through leadership, assist in building our workforce development pipeline, and build relationships within Google and externally by networking.
• Manage our economic, sustainability, and social contributions to create connections between technology and modern life.
• Provide region specific business advisory support for economic development agreements, including commercial review of terms, tax implications and infrastructure funding.
• Assist with various economic development and market advocacy team projects including data analytics and data hygiene.
• Collaborate with cross-functional partners including, but not limited to, tax, finance, legal, policy, and communications on a variety of economic development matters.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 10 years of experience working with public policy teams and cross-functional stakeholders.
• Experience with economic development issues such as direct or indirect taxes, tax policy, or infrastructure development.

Preferred qualifications

• Experience in indirect taxes, economic development policy, infrastructure development, agreement drafting, and presentation development. Experience with data center real estate markets.
• Experience developing and executing strategies to deliver exceptional solutions.
• Excellent attention to detail and political/communication skills.
• Ability to identify opportunities and areas for improvement, and operate in a fast-paced environment.
• Ability to think outside the box and propose commercially and technically creative solutions.
• Ability to comfortably work in ambiguous, collaborative, and fast-paced environments.

Implement security operations strategy

• Contribute to the definition of the overall security strategy

• Align security operations functions with the organisation’s overall business objectives

• Advise senior leaders on critical issues that may affect corporate security objectives

• Advise the design and implementation of security policy and controls

• Provide expertise on security technologies and innovative security concepts

• Provide technical and operational oversight for security tool deployment and implementation

Operate/Monitor security systems

• Develop plans for operating/monitoring security systems (e.g. endpoint security tools, firewalls, etc)

• Guide the identification and measurement of critical security operations metrics

• Develop detection and alerting rules

• Review/approve firewall rules

• Review/approve changes on AV systems

• Monitor levels of service of the security operations

• Present periodic status reports to management

Security planning, review & compliance

• Coordinate ongoing reviews of existing security programs/protocols and planned upgrades

• Monitor compliance to security policies, regulations, rules and norms

• Participate in reviews/gap analysis of posture and compliance and follow-up with proposed treatment plan

• Authorised/Unauthorised software installation reviews

• Drive continuous improvement of security operations

Respond to security incidents

• Set internal guidelines for effective processing and escalation of incidents

• Review reports on incidents and breaches

• Develop contingency and disaster recovery plans for specific security incidents

• Coordinate prioritisation of alarms and resources for incident responses

• Oversee the development of emergency protocols

• Recommend systems and procedures for the prevention, detection, containment and correction of security breaches

• At least 15 years' of experience in IT Security

• Strong knowledge and experience in End User Computing, Server, Network and Security spaces

• Strong experience in supporting Windows, Linux, Vulnerability scanning tools, Firewalls and WAF

• Preferable experience in cloud-native security platforms and offerings from AWS or Azure

• Knowledge of patch management for OS and security products (Firewalls, Windows, Linux)

• Strong knowledge of endpoint security tools

• Preferred Knowledge of vulnerability assessment tools and techniques

• Preferred knowledge in conducting risk assessments

• Preferred Security/ITIL/Vendor certifications including but not limited to: (Fortinet NSE4, CISSP, CCSP, CEH, ITIL, CCNA-Security)

Test Engineering Services (TES) at Synapxe is embarking on a journey to constantly transform its services by exploiting state-of-the-art technologies and tools to enhance TES’ ability to offer specialized testing services to its stakeholders. TES is passionate about making an impact with lasting change and we aim to provide our stakeholders with automated and optimized testing solutions to not only help them speed-up testing but produce accurate, reliable, and repeatable results.

TES is planning to implement and roll out a Dynamic/Interactive Application Security Testing (D/IAST) solution. This will act as a control measure proposed for implementation in response to Secured-by-Design Framework v1.0 as recommended by CSA’s Cybersecurity Code of Practice (CCoP).

As an Application Security Testing Specialist, you will be responsible for:
• Leading the request for proposal from a technical perspective to procure a D/IAST solution.
• Defining and documenting technical product requirements and specifications for a D/IAST solutions, evaluating the solution proposals to perform fit/gap analysis, determining the detailed evaluation criteria and producing recommendations to prevent, detect and analyse security threats and weaknesses in the running application.
• Leading the implementation and roll out of the identified D/IAST solution; work with the senior manager and product vendor to plan, set-up, on-board, test and deploy the D/IAST solution.
• Automated application security using the D/IAST tool to perform application security testing, gather and understand reports, assess potential security vulnerabilities, work closely with the application developers/vendors to resolve any vulnerabilities, and present the risks to the business for acceptance or mitigation.
• Removing false positives from the reports and working closely with the development/test teams to automate test and embed security testing in the CI/CD pipe line.
• Developing comprehensive and accurate reports and presentations for both technical and management audiences and effectively communicating the findings and remediation strategies.
• Recognising and safely utilising attacker tools, tactics, and procedures
• Maintaining and performing routine maintenance on D/IAST monitoring servers, reports repository, agents, etc.

• 8 years of experience with SAST/DAST/IAST/RASP methodologies and technologies to catch security flaws in the software?
• Hands-on experience with a wide-range of security tools such as MF Fortify, WebInspect, Contrast Security Assess and Protect, IBM AppScan, Checkmarx, MS Threat Modeling, BurpSuite, etc.
• Eager to collectively learn, share and solve problems within the area of application security testing in the area of healthcare domain?
• Consistent attention to details and work under pressure to achieve agreed targets/goals
• Work with intra-teams, and building rapport with the stakeholders and be able to manage difficult people
• Think out of the box and carries the courage to try and implement unconventional approach to deliver solutions

Job Responsibilities

・Support HQ designated project and business from legal perspective

in collaboration with legal members global wide

・Implement process for global distribution of Uvance offerings

・Support global and local deals including M&A projects

・Support Fujitsu’s business in alignment with HQ legal and other

local/global functions in an effective and timely manner

Job Requirements

・At least 10 years’ of working experience

・Experience in corporate/commercial law and contract negotiations

・Have working experience in a law firm or in-house legal and

compliance counsel

・Experience in overseeing legal, compliance, risk management and

intellectual property in a regional role

・Experience working in a Japanese company and liaising with Japanese

HQ counterparts

・Degree or above with a major in law from a reputable law school

Responsibilities:

• Actively develop new business and participate in new business pitches
• Develop and execute communications strategy and tactics for clients
• Set up framework for monitoring and measuring performance for clients
• Develop materials required for clients including but not limited to: briefing books, press releases, media pitches, thought leadership articles
• Act as point of contact for clients; cultivate and maintain cordial client relationships, and ensure high level of client satisfaction
• Manage client accounts independently with little guidance from directors
• Cultivate and maintain strong media relationships not limited to target markets
• Manage account budgets and ensure account profitability
• Manage and mentor SAEs, AEs and interns
• Be able to troubleshoot bottlenecks in processes and workflow, and provide solutions to make internal improvements
• Actively build firm visibility through networking opportunities, develop and execute internal PR strategy

Requirements:

• 3 or more years of public relations/integrated communications experience in an agency with proven track record in securing new business and accounts management
• Able to manage given budgets independently
• Strong organisational, project management and leadership abilities
• Experience in managing one or more account executives and/or intern
• Solution-minded with an open mind to embrace new ideas and methodologies
• Strategic thinker
• Detail-oriented
• An interest in emerging markets such as technology and esports
• Able to embrace the startup culture and willingness to be hands-on to grow with the agency
• Uphold professional conduct and DIFY’s core values
• Web 3 knowledge preferred
• Gaming knowledge preferred
• Meltwater certified preferred
• Team management skills

Bonus:

Knowledge in Technology/Fintech/Blockchain/Web3

Only shortlisted candidates will be notified

Responsibilities:

• Provide daily counseling on employment, contingent workforce, and HR compliance issues across APAC, especially in South East Asia.
• Address areas including recruiting and hiring, employee management, CWF management, terminations, leaves and benefits, wage and hour compliance, and internal HR operations.
• Review, revise, and update employment-related agreements and HR policies, and guide HR and business teams on their implementation.
• Manage arbitration related to employee equity compensation and advise on equity compensation matters, including plan design, establishment, administration, and management.
• Offer training to internal stakeholders on employment and Employee Stock Ownership Plan (ESOP) issues.

Requirements:

• Legal qualification from Singapore or an international jurisdiction.
• Minimum 10 years of post-qualification experience in employment or equity compensation law, ideally with experience in a large law firm or in-house legal department.
• Significant experience in APAC employment laws is preferred.
• Experience in employment litigation/arbitration is a plus; experience with equity compensation-related litigation/arbitration is highly advantageous.
• Willingness to travel internationally to APAC countries.

If you are interested, kindly apply through mycareersfuture.

I regret to share that only shortlisted candidates will be notified.

www.dadaconsultants.com

EA Registration Number: R21100604

Data provided is for recruitment purposes only

Business Registration Number: 201735941W.

Licence Number: 18S9037

JOB DESCRIPTION

Google's infrastructure needs go far beyond server computers. As Google's products and services scale the globe, the Strategic Negotiation team works behind the scenes to secure infrastructure for Google's future -- everything from underwater cables to physical data center space. As a Strategic Negotiator, you combine your deep market knowledge of a given sector with tech industry savvy to negotiate cost-effective solutions to support Google's infrastructure growth. You'll work with specific project teams on negotiating deals, managing vendor and partner relationships and presenting deal recommendations to our Tech leadership. Your successful negotiations have the potential to save Google millions of dollars in operating costs and impact every part of the business.

ADDITIONAL JOB DESCRIPTION

The Public Affairs team focuses on telling our story to decision-makers, opinion formers, and data center communities. We are focused on creating inclusive, strategic, and scalable solutions that have authentic and universal impact.

As a Public Affairs Manager for APAC and India, you will advise on how to shape our data center initiatives in a way that is aligned to state and local government priorities. You will lead the maximization of partner opportunities to partner with state and local institutions and tell the story of our data center commitment.

Qualifications

JOB RESPONSIBILITIES

• Enhance and safeguard the data center lifecycle.
• Manage our economic, sustainability, and social contributions to create connections between technology and modern life.
• Execute our community grants programs while building our public policy and community engagement activities in an organized way.
• Provide public policy through leadership, assist in building our workforce development pipeline, and build relationships within Google and externally by networking.

MINIMUM QUALIFICATIONS

• Bachelor's degree or equivalent practical experience.
• 6 years of experience negotiating and structuring agreements or leading business development.
• At least 6 years of experience working on political communications or technology policy issues within government, think tanks, public interest groups, private sector, or relevant industry associations.
• Ability to communicate in Hindi fluently to drive discussions with key stakeholders and local communities.

PREFERRED QUALIFICATIONS

• Experience working with public policy teams and cross-functional stakeholders.
• Experience developing and executing strategies to deliver exceptional solutions.
• Experience executing cross-functional projects.
• Ability to identify opportunities and areas for improvement, and operate in a fast-paced environment.
• Excellent attention to detail and political/communication skills.

PRODUCT AREA

At Google we work hard to earn our users’ trust every day. Trust & Safety is Google’s team of abuse fighting and user trust experts working daily to make the internet a safer place. We partner with teams across Google to deliver bold solutions in abuse areas such as malware, spam and account hijacking. A diverse team of Analysts, Policy Specialists, Engineers, and Program Managers, we work to reduce risk and fight abuse across all of Google’s products, protecting our users, advertisers, and publishers across the globe in over 40 languages.

JOB DESCRIPTION

Fast-paced, dynamic, and proactive, YouTube’s Trust & Safety team is dedicated to making YouTube a safe place for users, viewers, and content creators around the world to belong, create, and express themselves. Whether understanding and solving their online content concerns, navigating within global legal frameworks, or writing and enforcing worldwide policy, the Trust & Safety team is on the frontlines of enhancing the YouTube experience, building internet safety, and protecting free speech in our ever-evolving digital world.

ADDITIONAL JOB DESCRIPTION

As a Policy Enforcement Manager, you will be responsible for working with global teams to prevent violative content from appearing on the site, and build a safer online experience for all users around the world. You will ensure that we improve our understanding of trends and risks to content safety on YouTube, including understanding the abusive patterns of bad actors to help prevent and remove offensive content as quickly as possible.

In this role, you will evaluate abuse trends and quality with the vendor operations teams, and you will develop creative solutions to address quality, workflows, and processes. You will also review decisions about the appropriateness of different content, including considerations of cultural and political sensitivities. You will turn learning into a succinct, actionable story that often bridges the gap between technical and non-technical teams. You will work non-standard working hours, including on-call rotation work hours.

Qualifications

JOB RESPONSIBILITIES

• Track and monitor performance against key metrics, turning data into digestible and actionable stories for cross-functional teams.
• Manage content escalations, providing data and content-driven insights and implementing solutions. Review graphic, controversial, and offensive content in-line with YouTube’s community guidelines.
• Research and stay up-to-date on key trends and suspicious patterns across policy areas. Ensure effective implementation of policy by drafting guidelines for reviewers.
• Oversee enforcement quality across policy areas, including calibrations with vendor teams. Work cross-functionally, think strategically, and keep the users safe while protecting free speech.
• Provide operational and policy expertise to our Product, Engineering, and User Experience teams. Support the development of automated enforcement solutions.

MINIMUM QUALIFICATIONS

• Bachelor's degree or equivalent practical experience.
• 2 years of experience in data analytics, cybersecurity, technology research, anti-abuse, policy, or related fields.

PREFERRED QUALIFICATIONS

• Experience with SQL and/or spreadsheet software, including using data to drive strategy and business action.
• Experience with identifying abuse trends or working in news or policy.
• Experience working in fields related to suicide prevention and mental health (e.g., researcher, clinician, social worker, non-profit).
• Experience with project management, working with internal or external partners.
• Ability to build relationships with cross-functional stakeholders to drive consensus across geographies.
• Excellent business acumen, influencing, and communication skills.

We are JTI, Japan Tobacco International, and we are present in 130 countries. We have spent years innovating, creating new and better products for the consumers to choose from. This is our business. But not only. Our business is our people. Their talent. Their potential. We believe that when they are free to be themselves, and they are given the opportunity to grow, travel and develop, amazing things can happen.

That’s why our employees, from around the world, choose to be a part of JTI. It is why 80% of employees feel happy working at JTI. And why we’ve been awarded Global Top Employer status, ten years running.

So when you’re ready to choose a career you’ll love, in a company you’ll love, feel free to #JoinTheIdea.

Learn more: jti.com

Global Travel Retail (GTR) is among the largest volume markets in JTI, operating in 160+ countries with 37 brands. We sell JTI products to international travelers in various channels (airports, border shops, ferries, diplomatic shops, etc.) and aspire to become the No.1 Tobacco Company in Travel Retail.

GTR is a highly culturally diverse market with employees from 37 nationalities working across the globe, with the market HQ based in Geneva and several Regional Hubs around the world.

What this position is about – Purpose

The GTR Legal Manager will be responsible for providing legal advice to the GTR business on all legal matters affecting its operations. The aim is to achieve corporate and commercial objectives in a manner that ensures compliance with the law and appropriate monitoring and management of legal risk.

The Legal Manager will be responsible for all legal matters (marketing activities, products regulation, contracts, etc.) for the ASIA and MENEAT Hubs and act as 1st point of contact for the business teams. Active participation in business meetings as well as collaboration with Market and HQ Lawyers and other Legal and Regulatory Affairs functions are key.

What will you do – Responsibilities:

• Performs legal advice on Tobacco regulations to the business teams in the ASIA and MENEAT hubs and to GTR central functions. Performs complex research and analysis of local laws in GTR markets with a focus on product regulation and marketing activities.
• Works in close collaboration with Market Lawyers.
• Analyzes the potential impact of anticipated regulations and actively supports the Corporate Affairs Department in its advocacy efforts
• Responsible for the review, drafting, and legal negotiation of GTR agreements in the Regional hubs he/she is responsible for (e.g. sales and distribution agreements and on Smoking Lounges agreements).
• Supports the development of the GTR Route to Market strategy in these markets
• Works closely with the Legal Director on a variety of topics, such as the implementation and monitoring of JTI's Competition law Policy and International Economic Sanctions. Responsible for the preparation of training materials for these matters, including delivering the necessary training to GTR colleagues
• Closely cooperates with external counsels and ensures the quality of outsourced legal advice as well as cost control/follow-up

Whom are we looking for – Requirements:

• University Degree in Law
• Minimum 8 years of work experience in a law firm and/or multinational corporation
• Capacity to work autonomously and make effective decisions quickly, capacity to prioritize a diverse workload.
• Strong negotiation and excellent communications skills, cultural sensitivity, business and results oriented.
• Demonstrated competence as a practicing lawyer in international business transactions, contracts, distribution, and competition/antitrust areas as well as regulatory issues.
• Experience in the Travel Retail Industry is not required
• Fluency in the English language both written and verbal
• Fluency in Mandarin is an advantage.

PRODUCT AREA

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats.

ADDITIONAL JOB DESCRIPTION

As a Strategic Services Function Manager, you will blend risk assessment, strategic planning, and client collaboration. You will manage a team of cyber security consultants. You'll conduct in-depth cyber maturity assessments, develop forward-thinking strategies, and lead realistic simulations that help clients prepare for and respond to cyber threats.

In this role, you will identify vulnerabilities and develop actionable mitigation plans. You'll empower clients with data-driven insights, enhancing their security posture.

Qualifications

JOB RESPONSIBILITIES

• Manage and inspire a highly skilled team towards surpassing our goals by driving performance and outcomes, while managing workload, scheduling resources, and ensuring the quality of their output.
• Foster expansion in the APAC region for our Strategic Services Practice through the identification and advancement of opportunities, aiding in the creation and development of Statements of Work, and participating in responses to RFPs/RFIs/RFQs. Promote a culture of continuous learning and development within the cyber security practice.
• Perform in-depth assessments to identify and analyse cyber vulnerabilities and threats. Prioritize risks based on their potential impact.
• Craft cyber risk mitigation strategies, ensuring alignment with regulations (e.g., GDPR, ISO 27001, NIST/CIS Controls).
• Collaborate with clients to tailor cyber security solutions. Generate clear reports and presentations explaining risks and mitigation plans. Scope and propose solutions to clients.

MINIMUM QUALIFICATIONS

• Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent practical experience.
• 10 years of experience in cyber security with a risk assessment focus.

PREFERRED QUALIFICATIONS

• Master's degree in a relevant field.
• Professional certifications in cyber security (e.g., CISSP, CISM, CRISC)
• Consulting and/or project management experience, and experience leading cyber security assessments, including Table-Top Exercises (TTX).
• Knowledge of security frameworks (e.g., ISO 27000, NIST CSF).
• Ability to present complex security concepts to varied audiences (e.g., technical and executive).
• Excellent communication and problem solving skills.

Job description

Primary Objectives of Position

Manage information security operation to ensure the safe use of information systems and assets as well as protect information assets against cybersecurity threats.

Manage various stages of projects in conception and initiation, planning, execution, performance/ monitoring, and project closure.

Job Responsibilities

• Establish, implement, and maintain a sustainable information security framework that effectively addresses evolving and diverse cybersecurity threats.

• Perform risk assessments on IT systems, network and applications for vulnerabilities and implement security controls to reduce identified risks to an acceptable level.

• Perform information security audits to determine security violations and inefficiencies and recommend effective security controls.

• Hold management review and lessons learned meetings to help improve information security measures and incident handling process.

• Monitor security alerts/ logs from IT systems, network and applications against baselines and gather publicly available information to identify precursors or indicators of cybersecurity attacks.

• Contain and eradicate cybersecurity incident effectively to prevent recurrence and restore systems and recover normal operations as quickly as possible.

• Publish security advisories, conduct security workshops, and share lessons learned to improve users’ awareness regarding information security matters.

• Oversee information security investigations with internal team, funders, and local authorities and/ or 3rd party providers.

• Participate in various meetings and share compliance/ performance reports and audit findings to Management teams.

• Liaise with internal and external stakeholders in implementing information security related measures or projects.

The above activities are no means exhaustive and are subjected to amendment whenever is needed.

Job Requirements

Minimum Education / Qualifications

• Degree in Information systems or equivalent.

Minimum Years of Relevant Experience

• 2 years’ experiences in setting up and managing information security operations.

Knowledge/Skills

• Experiences in ISO27001 ISMS, CIS, and/ or NIST frameworks.

• Experiences in managing threat, vulnerability and incident, and understanding in digital forensic investigation, tools, and processes.

• Knowledge in security protections, practices, or solutions like Firewall, IDS/ IPS, network segmentation, DLP, WAF, NAC, WiFi security, cryptography, endpoint protection, OWASP, etc.

• Certifications in CISA, CISM, CISSP and/ or PMP will be an advantage.

• Knowledgeable in Microsoft Office and other Windows and web applications.

Attributes (functional or leadership competencies)

• Meticulous and hands on.

• Excellent communication and written skills.

• Strong analytical and problem-solving skills.

• Team player with excellent interpersonal skills and multi-tasker.

• Customer-centric and proactive.