Total 3 Senior Executive quality assurance manager job vacancies in Legal / Public / Security category in Singapore

Job Description

The successful candidate will be part of the Safety, Security and Quality (SSQ) Development department. He/ She will manage SSQ’s systems, provide user support for systems and IT related matters, and work collaboratively with users to enhance existing systems and on development of new systems. Additionally, the incumbent will also be responsible for coordinating the annual finance and IT budgeting exercise for SSQ and for budget tracking and reporting as required.

Key Responsibilities

1) IT Project Planning & Budgeting

• Prepare, track and manage the IT project plan and budget for SSQ
• Co-ordinate, track and manage the SSQ Finance annual budget and reporting

2) IT & Systems Support

• Provide support for SSQ’s systems
• Access management for SSQ’s systems
• Maintain documentation on SSQ’s system processes
• Act as a liaison between users and ITD/ vendors for system related matters
• Co-ordinate IT asset and user ID recertification exercises
• Secretariat for divisional IT meetings

3) Systems Development & Project Management

• Work with users on business process re-engineering to streamline SSQ’s processes
• Work with SSQ users and other business units on business requirements and solutions for new or existing systems.
• Conduct user acceptance testing (UAT) to ensure the system/ enhancements meet the specified requirements.
• Change management and system implementation

4) Technology Awareness

• Keep abreast of key and emerging technologies to leverage on digital
• Engage sections within SSQ to discover opportunities where technology can be exploited

Requirements

• IT related university degree. Fresh graduates are welcome to apply.
• Experience in business requirements analysis, systems support & development, and project management
• Knowledge of Tableau and/ or Python would be advantageous but not compulsory
• Strong inter-personal and communication (verbal & written) skills
• Good planning and analytical skills
• Critical Thinker and Problem Solver
• Technologically Savvy
• Possess initiative, self-driven and able to work independently

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Security Assurance Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation.

Job Responsibilities

1. Responsible for the security construction of ByteDance's overseas cloud products and infrastructure.

2. Continuously mitigate operational, configuration, and exposure risks for overseas cloud products and infrastructure, systematically enhancing the security level of business lines.

3. Liaise with overseas business lines to manage security risk assessments, incident response, security training, and more.

Minimum Qualifications

1. Familiarity with common risks, including their principles, attack and defense strategies, and systematic governance and construction approaches.

2. Proficiency in at least one of the following programming languages: Golang, Python, Java, or NodeJS, with the ability to conduct code review and development.

3. Knowledge of cloud-native and infrastructure technologies, such as network access, large models, big data, storage, cloud computing, microservices, and zero trust.

4. Strong communication and collaboration skills, a good sense of professional ethics, keen risk awareness, and a results-oriented mindset with a desire for long-term development in this field.

Preferred Qualifications

1. Candidates who have reported high-impact vulnerabilities or won major security competitions are preferred.

2. Experience in leading or participating in large-scale project governance, architecture, or design is preferred.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

As Lead/Senior Security Consultant, you will play a crucial role in helping over 4 million members save for their retirement, healthcare, and housing needs as well as helping them cope with life’s uncertainties. With a fulfilling career, career growth, and development opportunities, you will be part of a big family of dedicated professionals. Join us and champion the importance of cybersecurity in CPF systems and protect the CPF balances of Singaporeans.

What you will be working on

The jobholder is to keep the Board’s computer information systems secure, develop security programs and implement them across the Board and most importantly to build a resilient and safe cyber environment for the Board.

We are seeking for interested candidates who wish to pursue a career in Cybersecurity Governance and Assurance to join our dynamic team and contribute to the robust security posture of the Board in the following areas:

• Develop and implement cybersecurity governance frameworks, policies, and procedures to ensure compliance with industry standards and regulations.
• Conduct regular risk assessments and vulnerability assessments to identify potential security threats and weaknesses in systems and processes.
• Collaborate with cross-functional teams to design and implement effective security controls, monitoring mechanisms, and incident response plans.
• Evaluate and enhance existing cybersecurity programs to align with emerging threats and industry best practices.
• Lead and participate in internal and external cybersecurity audits, ensuring adherence to regulatory requirements and organizational policies.
• Provide expertise in evaluating and selecting security technologies, tools, and solutions to enhance the overall cybersecurity infrastructure.
• Stay abreast of industry trends, emerging threats, and advancements in cybersecurity to continuously improve the organization's security posture.
• Work closely with stakeholders to communicate cybersecurity risks, recommendations, and mitigation strategies effectively.

What we are looking for

• Minimally 4 years of relevant information security work experience
• Relevant information security work experience
• Good knowledge of information security concepts and technologies (risk assessment, legal and regulatory requirements, threats, vulnerabilities)
• Strong understanding of industry standards, regulations, and frameworks e.g., National Institute of Standards and Technology (NIST), ISO 27001, Government’s Instruction Manuals, Center for Internet Security (CIS), Cyber Security Agency of Singapore’s Cybersecurity Act, Codes of Practice
• Hands-on experience with vulnerability management, risk assessment methodologies and security assessment tools such as exposure management and security validation, External Attack Surface Management (EASM)
• Specialised skills in one or more of the following i.e. malware analysis, penetration testing (application, systems and network), ethical hacking and computer forensics, end point detection, Web Application Firewall (WAF), SIEM and Database Activity Monitoring (DAM) will be an advantage
• Flexible in work assignment and willing to gain experiential learning by working in diverse functions where opportunities avail.
• Seniority of appointment will be commensurate with relevant work experience.

What you can expect

• A challenging and rewarding career.
• A variety of formal and informal training where you can hone your skills in the evolving technology landscape.
• Promotion opportunities through your capability and on the job performance
• A friendly work environment to collaborate and co-create with like-minded colleagues.
• A hybrid work model where you can work remotely up to 50% of the time.
• A productive yet growth-oriented workplace with flexible dress code where you are empowered to decide your appropriate outfit for the day.
• Comprehensive rewards package.
• Annual leave and pro-family leave.
• Medical and dental benefits.
• Access to recreational activities.
• Position is on 2-year full-time contract directly under the payroll of CPF Board with potential for emplacement into permanent position.