Total 6 quality assurance manager job vacancies in Legal / Public / Security category in D26 Upper Thomson, Springleaf

The Job

Specific (85%)

• Oversee and manage IT security, audits, and compliance, ensuring the implementation of robust security measures, adherence to regulatory requirements, and the effective management of risks, data protection, and business continuity planning. Recommend and implement innovative tools and solutions to improve the organisation's cybersecurity posture.
• Security Implementation: Implement and review IT security systems, tools, system patches, upgrades and solutions to safeguard application, system and infrastructure.
• System and Audit Compliance: Ensure continuous improvement and compliance of on-premises and cloud-based systems with applicable security and regulatory standards (e.g., ISO 27001, PDPA). Work with CISO, internal teams, cyber insurance, vendors and external auditors to meet compliance requirements with security policies.
• Security Operations: Manage, monitor, and establish security operations procedures, including incident response workflows, tabletop exercise and drill.
• Risk Management: Conduct regular assessments to identify IT risks and vulnerabilities. Plan and implement mitigation strategies to minimise security risks.
• Cybersecurity Awareness: Plan and conduct training programs to promote cybersecurity awareness among employees. Educate staff on best practices for secure system use and data protection.
• Data Governance & Protection: With closely with DPO to implement data security controls and ensure compliance with data governance frameworks and PDPA.
• Business Continuity Planning (BCP): Plan and put in place effective BCP plan for operational continuity with key stakeholders. Organise cybersecurity assessments and tabletop exercises to test and refine plans.
• Disaster Recovery Plan (DRP): Plan and put in place disaster recovery strategies and procedures for IT systems and data. Coordinate with application and infrastructure teams to ensure recovery objectives are met through regular testing and updates.
• Incident Response: Lead and coordinate incident response efforts, ensuring swift resolution of cybersecurity breaches. Establish and maintain post-incident reporting and root cause analysis processes.
• Assist Head of IT in the planning of annual IT budgets and projects planning.

General (15%)

• Work closely with the infrastructure and network team to ensure maximum system stability and uptime.
• Any other duties, tasks and non-IT related events as assigned by Head of information Technology.

Job Summary

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

Mandatory Skill-set

• 5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;
• Strong knowledge of ISO 27001:2022 standards and requirements;
• Experience in developing and maintaining comprehensive project plans, including timelines and milestones;
• Experience in managing ISO 27001-related risks and conducting internal/external audits;
• Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

Desired Skill-set

• ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;
• PMP, CISSP, CISM, or similar certifications are a plus;

Responsibilities

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;

Strong knowledge of ISO 27001:2022 standards and requirements;

Experience in developing and maintaining comprehensive project plans, including timelines and milestones;

Experience in managing ISO 27001-related risks and conducting internal/external audits;

Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;

PMP, CISSP, CISM, or similar certifications are a plus;

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE's website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

Job Description & Requirements

We are seeking an experienced fundraising, public relations and volunteer management manager with excellent leadership and networking abilities. The incumbent shall supervise and coordinate all operations that cultivate public and private resources (revenue and volunteers) to support and sustain programmes for our visually impaired beneficiaries.

The incumbent shall lead a team that builds good relationships with prospective donors and volunteers and facilitates effective communication with general public. The team also conducts workshops and programs to raise public and volunteer awareness of visually impairment and how to engage persons with visual impairment.

The incumbent should be familiar with both online and offline fund raising and marketing strategies. Apart from being approachable and culturally sensitive, the incumbent should also be proactive, able to inspire others and able to execute well-planned and ad hoc activities. Candidates with good public speaking skills and experienced in delivering presentations to different audiences are preferred.

Responsibilities:

· Develop and implement organisation fund raising & volunteer management strategies

· Align and implement organisation public relations strategy to annual workplan

· Prepare quarterly operations budget and reports for internal reporting

· Lead and develop collaborations with partners (schools, corporates etc) to support with fundraising and volunteers

· Organise public awareness talks (in collaboration with White Cane Club & Braille Production Unit) to general public, volunteers and corporate partners

· Manage and maintain database of donors and volunteers

· Engage existing donors and attract new donors to support organisation

· Conduct annual reviews of best practices for fundraising, volunteer management and public relations

· Perform liaison function with NCSS and external agencies for all fund raising, volunteer management and public relations related activities

Experience and Qualifications:

· Degree in Business Administration, Marketing, Communications or any related field.

· At least 5 years of relevant work experience (fundraising, marketing, communications)

· At least 3 years’ experience in leading a team.

· Previous experience in sales or marketing also acceptable.

· Interest to work in a non-profit / charity organisation

· Excellent written, verbal, and telephonic communication skills.

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s Degree in Computer Science/Information Technology or equivalent.
• At least 5 years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:

- CompTIA Security+

- Certified Information Systems Security Professional (CISSP)

- Certified Information Systems Auditor (CISA)

- Certified Information Security Manager (CISM)

JOB ID: 673056

Working hours: Mon-Fri 8.30am - 6pm

Responsibilities

• Ensure compliance with all relevant legislation/regulations, including Companies Act, Business Trust Act, SGX Listing Rules, Code of Corporate Governance, etc.
• Prepare and coordinate all corporate secretarial / board / board committee matters, including Board / Board Committee meetings and schedules, etc.
• Prepare and co-ordinate AGM/EGM matters.
• Filing with relevant authorities, upkeep and update all records and books as required.
• Assist in ad hoc duties/assignments as & when required

Requirements

• Candidate must Possess at least a degree with Corporate Secretarial qualifications or equivalent
• Candidate must have at least 8 years PQE or relevant working experience. In-house experience in companies/business trusts/REITs.
• Candidate must have Report/minutes writing skills.

To Apply, please kindly email your updated resume to cv_ray(a)goodjobcreations.com.sg

Please kindly refer to the Privacy Policy of Good Job Creations for your reference:

https://goodjobcreations.com.sg/en/privacy-policy/

We regret that only shortlisted candidates will be notified. However, rest assured that all applications will be updated to our resume bank for future opportunities

EA Personnel Name: Ray Loh Run Ting

EA Personnel Reg. no.: R1550214

EA License no.: 07C5771