Total 562 quality assurance manager job vacancies in Legal / Public / Security category in Singapore

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Security Assurance Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation.

Responsibilities

- Responsible for analysis, investigation and traceability of underground/blackmarket industry cases.

- Perform real-time analysis and trending of security log data from various security devices and systems, leveraging on in-depth analysis of understand industry exploitation chains and knowledge of most underground sources in non-China areas.

- Respond to user incident reports and evaluates the type and severity of security events.

- Maintain data sources feeding the log monitoring system, develop and maintain detection and alerting rules

- Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.

- Constantly keep up with the latest attacks in the underground industry, identify business logic risks and independently conduct traceability or investigation.

- In-depth understanding of various business risks such as eCommerce/Payment/Advertisment business with the ability to lead discovery, data analysis, investigation, evidence collection, traceability analysis and communication with business teams.

Minimum Qualifications

- More than 3 years of security or anti-fraud work experience with high learning ability.

- Familiar with the various attack methods of the underground industry, experience in penetration testing and data analysis is preferred.

- Good data analysis skills and observation, able to accurately describe and identify attack patterns, and understand key points from large datasets.

- Good communication and coordination skills, strong analytical skills, process management skills, experience in cross-team cooperation, strong execution.

Preferred Requirements

- Automatic data gathering and analysis tools development and scripting skills are preferred.

- Reversing engineering is preferred.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About ByteDance

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Security Assurance Team at ByteDance

The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team, you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.

Responsibilities

- Continuously design and conduct penetration testing to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards in the staging/production environment.

- Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

- Certify infrastructure components, systems and applications that meet security standards.

- To identify risks and actively take ownership to resolve any potential project issues.

- Conduct technical security reviews for any new products and feature requirements.

- Provide security engineering support to product teams to help identify potential security flaws in the early stages of SDLC.

- Collaborate closely with other parts of the security team and product teams to design defense-in-depth controls that limit attackers' ability and improve our security postures.

- Continuously conduct security research and strive to innovate.

Minimum Qualifications

- Background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines.

- Strong knowledge in some of these various disciplines: web application security, mobile app security, cloud security and thick client security.

- Solid experience in writing and reviewing code in at least one of the following programming languages: JavaScript (Node JS), Go, Python, Java, C++, Rust.

- Good project management skills and focused teamwork.

Preferred Requirements

- CTF players, live competitions and hacking events experience.

- CVEs (excluding vulnerabilities such as XSS, CSRF in random CMS) are preferred.

- BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Security Assurance Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation.

Job Responsibilities

1. Responsible for the security construction of ByteDance's overseas cloud products and infrastructure.

2. Continuously mitigate operational, configuration, and exposure risks for overseas cloud products and infrastructure, systematically enhancing the security level of business lines.

3. Liaise with overseas business lines to manage security risk assessments, incident response, security training, and more.

Minimum Qualifications

1. Familiarity with common risks, including their principles, attack and defense strategies, and systematic governance and construction approaches.

2. Proficiency in at least one of the following programming languages: Golang, Python, Java, or NodeJS, with the ability to conduct code review and development.

3. Knowledge of cloud-native and infrastructure technologies, such as network access, large models, big data, storage, cloud computing, microservices, and zero trust.

4. Strong communication and collaboration skills, a good sense of professional ethics, keen risk awareness, and a results-oriented mindset with a desire for long-term development in this field.

Preferred Qualifications

1. Candidates who have reported high-impact vulnerabilities or won major security competitions are preferred.

2. Experience in leading or participating in large-scale project governance, architecture, or design is preferred.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Job opportunity:

• Opportunity to join a well-known multinational corporation in the telco sector. The Legal Contracts Manager is required to work closely with Group Networks Procurement as well as the internal stakeholders to draft, review and negotiate a wide variety of contracts.
• Salary up to $7k (subject to experience)
• Mon - Fri: Office hours
• Location: Central East
• 6 months contract

The Talent:

• Law degree with 5 years of Post Qualification Experience (PQE) acquired in a reputable local law firm or in-house in a telecommunication and/or IT related organisation. Prior in-house experience of at least 1 year is an added advantage.
• Excellent knowledge of local laws and regulations
• Ability to work in a fast paced and dynamic environment to meet aggressive deadlines
• Excellent written and verbal skills with an eye for detail
• A team player with excellent inter-personal skills and ability to communicate and influence effectively at all levels
• Willing to explore and learn new skillsets
• Must be able to work independently
• Experience in a supervisory role is beneficial

Job Description

• Draft and review a wide variety of contracts
• Advise internal clients on implications of contract terms
• Lead or support contractual negotiations with suppliers
• Where required, provide sound legal advice within a fast paced and dynamic working environment to business units
• Liaise and work collaboratively with internal and external stakeholders to obtain and address feedback on commercial contracts and operational issues
• Work with other internal stakeholders both in Singapore and Australia to ensure internal policies and corporate governance is strictly adhered to
• Provide legal education and trainings to business units from time to time; and manage compliance programs and policies/procedures
• Manage disputes matters.
• Regular tracking and reporting on contracts reviewed
• Drive user experience improvement initiatives related to the contracting process

Next Step

• Prepare your updated resume (please include your current salary package with full breakdown such as base, incentives, annual wage supplement, etc.) and expected package
• Simply click on 'Apply here' or email to [email protected] to drop your resume
• All shortlisted candidates will be contacted

Amelia Lau An Qi

Direct Line: +65 6697 7987
EA License No: 91C2918
Personnel Registration Number: R1987023

The Mercedes-Benz AG Group CISO heads Mercedes-Benz’s Global Cyber Security Department (based in Stuttgart, Germany). We are looking for a Cyber Security SIEM Use-Case Engineer to join our Cyber Intelligence and Response Centre (CIRC). This role is crucial for the engineering, development, and continuous improvement of threat detection use-cases within our SIEM . You will also be involved in the engineering and development of custom rules to detect potential threats swiftly and creating transparency to map existing detection capabilities to the MITRE ATT&CK framework.

Key Responsibilities:

• Proactively create, test, and tune new detection use-cases in the SIEM
• Review and enhance existing detection use-cases using Machine Learning or User & Entity Behaviour Analytics (UEBA).
• Map detection use-cases to the MITRE ATT&CK framework to assess SIEM monitoring coverage.
• Perform regularly updates to threat detection engineering playbooks, processes, and documentation.
• Collaborate closely with the SOC to challenge and improve detection and prevention capabilities.
• Identify and implement SIEM use-cases to address blind spots.
• Coordinate with the log onboarding team and SIEM architect to validate new log sources for compliance and improve SIEM backend performance.
• Collaboration with Service Operations team to address challenges, process fulfillment, documentations, and improvement of Service Operations Quality.
• Provide governance on topic which related to operational stability.

Join us to play a pivotal role in enhancing our cyber security measures and protecting our global operations.

QUALIFICATIONS

Specific Knowledge

• Intense knowledge in using Splunk Enterprise Security (ES)
• Intense knowledge in developing and tuning detection use-cases (Correlation Searches) in Splunk based on Data Models
• Experience in Machine Learning and Risk Based Monitoring in Splunk is an advantage
• Ability to analyse and interpret security logs and events to identify potential threats and attack patterns
• Experience in validating data source compliant using the common interface model (CIM)
• Experience of setting up and utilize data models in Splunk
• Deep understanding of cyber security concepts to create detection use-cases targeting various phases of attack lifecycle
• Understanding of MITRE ATT&CK framework and detections of various tactics and techniques
• Experience and capable of creating interactive dashboards, alerts, reports in Splunk

Experience

• Degree from a reputable university or significant course work in Computer Science, Networking, engineering or other computer-related fields of study.
• At least 3 years of experience with demonstrable skillsets in SIEM use-case engineering, with over 5 years of experience
  in cybersecurity
• Previous relevant experience working in a security operational role, ideally within a Corporate, Military, or Police environment; engaging with and responding to a diverse array of internal stakeholders, including senior management
• Have good emotional intelligence and is a proven team player
• Rational and calm under pressure
• Fluency in the English language
• Effective oral and written communication skills
• Good timekeeping ability to cope with a tight deadline and achieve operational objectives
• Self-motivated with the ability to carry out assigned tasks with minimum supervision

This position is based in location Singapore. A valid and approved work visa is required for employment in Singapore in accordance to local labour law regulations. We regret to inform you that only shortlisted candidates will be notified.

The Legal Contracts Manager is required to work closely with Group Networks Procurement as well as the internal stakeholders to draft, review and negotiate a wide variety of telco/IT procurement contracts.

Responsibilities:

• Draft and review a wide variety of contracts, mainly, telco infrastructure related.
• Advise internal clients on implications of contract termsLead or support contractual negotiations with suppliers
• Where required, provide sound legal advice within a fast paced and dynamic working environment to business units
• Liaise and work collaboratively with internal and external stakeholders to obtain and address feedback on commercial contracts and operational issues
• Work with other internal stakeholders both in Singapore and Australia to ensure internal policies and corporate governance is strictly adhered to
• Provide legal education and trainings to business units from time to time; and manage compliance programs and policies/procedures
• Manage disputes matters.
• Regular tracking and reporting on contracts reviewed
• Drive user experience improvement initiatives related to the contracting process

Requirements

• Law degree with 5 years of Post Qualification Experience (PQE) acquired in a reputable local law firm or in-house in a telecommunication and/or IT related organisation. Prior in-house experience of at least 1 year is an added advantage.
• Excellent knowledge of local laws and regulations
• Ability to work in a fast paced and dynamic environment to meet aggressive deadlines
• A team player with excellent inter-personal skills and ability to communicate and influence effectively at all levels
• Willing to explore and learn new skillsets
• Must be able to work independently
• Experience in a supervisory role is beneficial

COMPANY BACKGROUND

Haier is the number one brand of Major Appliances in the world with 16.3 percent of global market share. Headquartered in Qingdao, Haier has over 80,000 employees across 30 countries in the world.

Haier Singapore is the International HQ of Haier Group and is the main platform to provide procurement, trading, R&D and big data and cybersecurity supports to over 80 countries in Asia, Europe, Africa and North America markets.

As the continuous demands from global businesses, we are looking for passionate Information Security Professional to join our Global Information Security team.

KEY RESPONSIBILITIES

Based in Singapore, you will be part of the Global Information Security team, providing Cybersecurity and IT support to Haier businesses in the world.

• Responsible for the construction of Haier's overseas regional information security system, identify issues and risks in security construction and continuously optimize them;
• Establish information security capabilities in various overseas regions, such as endpoint security, data security, application security, vulnerability management, OT security, security operation, etc;
• Responsible for emergency response to information security incidents in overseas regions, quickly resolving problems;
• Responsible for enhancing the information security awareness of employees in overseas regions and developing security training plans;
• Responsible for overseas compliance construction, such as data security compliance, personal privacy compliance, etc., and developing an annual information security audit plan.

KEY REQUIREMENTS

The ideal candidate should be a seasoned information security manager with:

• Degree in Computer Science or its equivalent.
• With minimum of 10 years of work experience and at least of 3 years’ experience in team management.
• Establishment of the ISO27001/NIST/ information security system.
• Proficient in security technologies in various fields, such as endpoint security, vulnerability management, application security, etc.
• Certification in the Information security, risk management, preferably.
• Fluent in Mandarin and English.

Cyber Security Roles in Singapore
Job Posting by Belle Lim, Section Manager at Hays Singapore
[email protected]

Cyber Governance GRC – Manager / Senior Manager

Cyber Security jobs in Singapore
ACTIVELY HIRING NOW

Hi Everyone,

An established leading major Infocomm sector is looking for a Cyber Governance and Assurance candidate to join the team. Cyber Security experience and technical knowledge is needed to plan, manage and execute governance and assurance initiatives for the organization.

Your new role

· Lead the development, review and implementation of cybersecurity policies, standards and guidelines.

· Oversee and manage compliance audits, enforcement actions and continual improvement

· Demonstrate value through leading initiatives including post-incident reviews and risk assessments.

· Engage and collaborate with internal and external stakeholders on risk management initiatives.

· Assess, evaluate and make recommendations to management regarding the adequacy of cybersecurity controls

What you’ll need to succeed

· At least 5 years of relevant Cyber GRC experience. Candidates with more years of experience can be considered for a Senior Manager Role.

· Candidates who have experience with Telecommunications industry is highly preferred / Consulting candidates with experience in Telco and CII sectors are welcome to apply.

· Knowledge of cybersecurity best practices and security principles for Identify, Protect, Detect, Respond and Recover (IPDRR) functions etc.

· Good knowledge of cybersecurity risk management frameworks and standards (e.g. NIST SP 800-53, ISO 27002 etc.).

· Professional certifications such as CISSP, CISM, or CISA are highly desirable.

What you’ll get in return

· Attractive Career Development / Growth

· Attractive Remuneration Package

What you need to do now
If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV to [email protected]. If this job isn't quite right for you but you are looking for a new position, please contact me for a confidential discussion on your career.

Apply now or refer a friend (Get rewarded with $200 CapitaStar Gift voucher upon a successful friend referral!)

At Hays, we value diversity and are passionate about placing people in a role where they can flourish and succeed. We actively encourage people from diverse backgrounds to apply.

EA License Number: 07C3924 l Registration Number: R21100438 l Company Registration ID No.: 200609504D

Job Description

• Industry/ Organization Type: Manufacturing/Electronic Components and Boards
• Position Title: IT Security Manager (Regional)
• Working Location: Bedok (Company pick-up provided at Bedok MRT)
• Working Hours: 5 Days, Mon – Fri (8:15 am – 5:15 pm)
• Salary: Basic up to $12,000 + Variable Bonus
• Duration: Permanent

Key Responsibilities

• Analyze and prioritize vulnerabilities based on severity, potential impact, and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention, and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques, and incident response strategies.

APPLY NOW!!!

• Bachelor’s Degree in Computer Science, IT, or equivalent experience.
• Has 5+ years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Professional information security certification preferred (e.g. CompTIA Security+, CISSP, CISA, CISM).

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job(at)anradus.com.sg. Kindly indicate #67372 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it’s likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

Roles & Responsibilities:

• Legal support services within the companies which may include drafting, reviewing and negotiating of various types of commercial contracts including contracts involving the sale and purchase of oil products, charter-party agreements, storage leases, corporate guarantees, letters of intent, multi-party settlement agreements, financing documents, supply agreement and logistics agreements, insurance contracts;
• Legal support to associated companies: Review of all legal documents, board resolutions, shareholders' resolutions, and by-law amendments;
• Projects Investment-related: Assist in the review of investment-related transactional documents which may include the review and negotiation of non-disclosure agreements, terms of engagement of professional advisers, legal due diligence reports, joint venture agreement, long-term storage agreement, land leases and other related documents, liaise with external legal counsels or other professional advisers and coordinate with other parties involved in the project;
• Disputes Resolution: Manage legal disputes including any demurrage-related disputes, and assist with drafting of relevant reports to the Management and providing updates and progress on the disputes， where necessary;
• Others: Plan, organise and coordinate legal knowledge/information sharing sessions for all personnel of the Company. Assist in the drafting and/or updating of contract templates;
• Other ad-hoc duties as assigned by the Head of Legal and Compliance.

Requirements:

• Recognised degree in law, preferably admitted to the Singapore Bar or a common law jurisdiction;
• At least 3 years post-qualifying experience in an established law firm or general corporate and commercial work in a corporation, preferably as a legal counsel in an in-house environment in the energy industry;
• Excellent people skills and communication skills;
• Strong attention to details and effective analytical skills with ability to understand complex information and apply logical reasoning and assessment;

Job Description:

1. Lead, manage and provide cybersecurity governance and related support activities such as: -

• Conducting comprehensive risk assessments on IT assets and vulnerabilities, including logs analysis and security assessments;

• Ensuring all penetration and vulnerability assessment findings, gap analyses, deviations and threat analyses is properly tracked, managed, and resolved in a timely manner;

• Planning and executing cybersecurity initiatives to protect against emerging threats;

• Working with Group of IT to implement and ensure compliance for the company and its Overseas Business Units on the following: -

1. • Group Cyber Security Master Plan (CSMP)
2. • Group IT Security Standards (GITSS)
3. • Group Operational Technology Security Standards (GOTSS)
4. • Cybersecurity Capability Maturity Model (C2M2)

• Conducting monthly phishing exercises, information security awareness training;

• Organising Business Continuity Planning (BCP) and Table-Top exercise with internal stakeholders annually;

• Providing monthly updates to Group IT on cybersecurity activities and compliance status;

• Contributing to the development, maintenance, and reporting of ongoing monthly Key Risk Indicators;

• Developing and maintaining cybersecurity documentation, including policies, procedures, and incident reports;

• Keeping abreast of industrial IT security advancements and recommending appropriate security enhancements to IT infrastructure and systems;

• Communicating security risks and incidents to senior management and stakeholders.

2. Play the role of Data Governance and Data Protection Officer: -

• Ensuring the company’s compliance according to data protection policies, including company's Data Governance policy and Singapore's Personal Data Protection Act (PDPA);

• Reviewing, identifying, tracking, and resolving gaps and deviations identified from the data protection policies.

3. Lead and coordinate with internal and external auditors: -

• during annual audits, focusing on areas of Cybersecurity, PDPA and ISO27001;

• ensuring audit readiness and successful audit outcomes.

The successful candidate should preferably possess the following:-

• A degree in Computer Science, Information Technology, Cybersecurity or equivalent

• At least 5 years of professional experience in security governance, security audits, security systems management, protection of classified and sensitive information, and compliance management.

• Professional certifications in Certified Information Systems Security Professional (“CISSP”) OR

• GIAC Certified Incident Handler (GCIH) certifications in cybersecurity is essential.

• Prior experience in conducting risk assessments and gap analyses is essential.

• Prior experience in developing and implementing cybersecurity and data protection policies, procedures, and standards is essential.

• Prior experience in at least 2 of the below is essential: -

• IT infrastructure support / applications development / project management / team management

• Strong understanding in cloud security, application security, network security, and data protection is preferred.

• Understanding of international security standards such as ISO27001, ISO27002, NIST Cybersecurity Framework and OWASP is preferred.

• Ability to muti-task; manage multiple projects and priorities simultaneously.

• Excellent written, effective communication and proven leadership skills

Interested applicants please send your resume to [email protected]

Venessa Goh Wee Ni
R24124686
Recruit Express Pte Ltd
EA License No: 99C4599
RCB No.: 199601303W

• Monday to Friday; office hours
• Accessible location; Walkable distance from MRT Station in the central location
• Competitive Salary & Benefits
• 2 years Contract (Possibility of conversion/ renewal)

Our client, our established government-linked agency in the healthcare sector, is seeking for suitable candidates to join the growing team!

Job Responsibilities:

• Support the Chief Information Security Officer and Team lead with engaging the Community health sector on Cyber Security Initiatives
• Provide outreach to the relevant sectors on Security best practices
• Drive the compliance program and outreach to the sector
• Support the sector and digitization team engagement with sector on cyber security
• Spearhead and drive the Cyber Essential+ certification and Trust Mark certification program

Job Requirements:

• Minimum Degree in Information Technology or equivalent
• Minimum 10 years of relevant work experience in Cyber Security, preferably from both vendor and end user environment
• Candidates with professional certification in CISM, CRISM, CGEIT will be preferred
• Good understanding of Cyber Security best practices and standards (NIST, ISO27000, Cyber Kill Chain, MITRE)
• Knowledge on Cyber Security Governance and Assurance is preferred
• Good past track record in stakeholder management

Interested and suitable candidates, please email your CV in MS Word to

[email protected]

Ammerline Lam Sze Yi

Division Manager

CEI Reg. No.: R1104463

Personal Data Protection

“By submitting your curriculum vitae or disclosing your personal information in connection with your job application, you are deemed to have read and agreed to the terms of our Privacy Policy, and consented to the collection, use and disclosure of your personal data by us, in accordance with our Privacy Policy. Please access our website at www.celecti.com.sg for a copy of our Privacy Policy.”

We’re searching for a Senior/Manager, Client Information Security (Infra) to be part of our diverse team of talent here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

• Drive the implementation of NCS cybersecurity, data protection, and privacy policies, standards and processes within the practice. You will work to continually improve the security posture of projects through proactive risk management and the establishment of a broad range of cybersecurity controls
• Provide direct support to colleagues to ensure cybersecurity is addressed throughout the engagement delivery lifecycle, from infrastructure and security tooling choices to the secure storage, processing and deletion of client data.
• Act as a single point of contact and escalation for the SOC, Threat Intel and Crisis Response teams for practice-related cybersecurity incidents, ensuring timely identification, remediation and lessons learned.
• Manage the security SLA governance and provide practice-level cybersecurity reporting, metrics and forecasting to leadership.
• Responsible for information security, data protection, privacy, GRC, and audit requests for the practice, acting as single point of contact on relevant client security assessment and audits execution. Eg. independent third-party attestations of industry cybersecurity standards and certifications, such as ISO 27001, SOC 2 for practice-specific solutions and products
• Contribute to the definition of the client specific security baseline. Consult and advise internal and external clients about security topics and support the opportunity management process by providing subject matter expertise and support
• Help win client business by providing cybersecurity assurance to RFIs, RFPs, proposals, contract drafting, security questionnaires, workshops and other client due diligence processes

Are you ready to unleash your potential?

At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve.

We believe we have a responsibility to be a force for good, and WorldImpact is our portfolio of initiatives focused on making a tangible impact on society’s biggest challenges and creating a better future. We strive to advise clients on how to deliver purpose-led growth and embed more equitable, inclusive as well as sustainable business practices.

Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals.

We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognized for their contributions.

Ready to unleash your potential with us? Join the winning team now!

What you will do

As a Senior Manager in Cloud Security, you will play a pivotal role in assessing client needs and designing customized cloud security solutions that enhance data protection, compliance, and risk mitigation. We are seeking experienced Senior Managers with a robust background in Microsoft technologies, particularly Microsoft 365 (M365) and Microsoft Purview security solutions.

You will

• Project Leadership: Lead and manage cloud security projects focused on Microsoft 365 (Entra ID, Intune, Defender solutions) and Microsoft Purview across Southeast Asia.
• Client Collaboration: Work with clients to assess cloud security risks and provide tailored recommendations for implementing M365 and Purview capabilities, including Entra ID, Intune, Defender solutions, DLP, Information Protection, and Compliance solutions.
• Subject Matter Expertise: Offer deep knowledge on Microsoft 365 security capabilities such as identity management (Entra ID), endpoint management (Intune), advanced threat protection (Microsoft Defender), and Microsoft Purview components (e.g., Information Protection, DLP, Insider Risk Management).
• Configuration and Deployment: Manage the setup and deployment of M365 security solutions, ensuring seamless integration with client environments.
• Project Delivery: Ensure successful delivery of cloud security solutions through strong project management and leadership.
• Business Development: Assist in proposal creation and identify opportunities to expand cloud security service offerings.
• Client Relationships: Build and nurture positive working relationships with clients, aiming to exceed their expectations.
• Profitability Improvement: Identify opportunities to enhance engagement profitability.
• Mentorship: Mentor and develop junior staff, promoting knowledge sharing and skills development within the team.

Your role as a leader

At Deloitte, we believe in the importance of empowering our people to be leaders at all levels. We expect our people to embrace and live our purpose and shared values, challenging themselves every day to identify issues that are most important to our clients, our people and the communities, and to make an impact that matters. In addition to living our purpose, Senior Managers across our Firm are expected to:

• Establish a strong leadership brand by inspiring others through passion, integrity, and appreciation.
• Create opportunities to drive impact by leveraging each person’s strengths to build high performing teams.
• Apply deep knowledge of trends and activity to drive continuous improvement and build lasting relationships across a diverse network.
• Translate and communicate broader strategy into a convincing team vision and goals, in order to align the team and sets priorities to achieve objectives.
• Actively contribute to building the talent pipeline by championing a talent experience that attracts, develops and retains top talent and high performing teams.

Enough about us, let's talk about you.

• 5+ years in cloud security, particularly in developing, implementing, or architecting Microsoft M365 security solutions.
• 3+ years of hands-on experience with Entra ID (Azure Active Directory), Microsoft Intune, Microsoft Defender solutions, and Microsoft DLP, including their configuration, deployment, and management.
• Proven experience managing 5+ end-to-end projects involving Microsoft cloud security implementations.
• Relevant certifications such as Microsoft 365 Administrator, Microsoft Identity and Access Administrator, Microsoft Information Protection Administrator, with CISSP / CCSP being highly desirable.
• Bachelor’s degree in Computer Science, Information Security, or a related field; Master’s degree preferred.
• Ability to travel 25-50%, depending on the work and clients served.
• Excellent problem-solving skills and proven ability to lead a team of engineers.
• Strong communication skills to effectively advocate key security requirements to senior stakeholders.
• Strong critical-thinking and problem-solving abilities with clear communication.

Due to volume of applications, we regret that only shortlisted candidates will be notified.

Please note that Deloitte will never reach out to you directly via messaging platforms to offer you employment opportunities or request for money or your personal information.

Are you ready to unleash your potential?

At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve.

We believe we have a responsibility to be a force for good, and WorldImpact is our portfolio of initiatives focused on making a tangible impact on society’s biggest challenges and creating a better future. We strive to advise clients on how to deliver purpose-led growth and embed more equitable, inclusive as well as sustainable business practices.

Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals.

We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognized for their contributions.

Ready to unleash your potential with us? Join the winning team now!

What you will do

As a Manager in Cloud Security, you will play a pivotal role in assessing client needs and designing customized cloud security solutions that enhance data protection, compliance, and risk mitigation. We are seeking experienced Senior Managers with a robust background in Microsoft technologies, particularly Microsoft 365 (M365) and Microsoft Purview security solutions.

You will

• Project Leadership: Lead and manage cloud security projects focused on Microsoft 365 (Entra ID, Intune, Defender solutions) and Microsoft Purview across Southeast Asia.
• Client Collaboration: Work with clients to assess cloud security risks and provide tailored recommendations for implementing M365 and Purview capabilities, including Entra ID, Intune, Defender solutions, DLP, Information Protection, and Compliance solutions.
• Subject Matter Expertise: Offer deep knowledge on Microsoft 365 security capabilities such as identity management (Entra ID), endpoint management (Intune), advanced threat protection (Microsoft Defender), and Microsoft Purview components (e.g., Information Protection, DLP, Insider Risk Management).
• Configuration and Deployment: Manage the setup and deployment of M365 security solutions, ensuring seamless integration with client environments.
• Project Delivery: Ensure successful delivery of cloud security solutions through strong project management and leadership.
• Business Development: Assist in proposal creation and identify opportunities to expand cloud security service offerings.
• Client Relationships: Build and nurture positive working relationships with clients, aiming to exceed their expectations.
• Profitability Improvement: Identify opportunities to enhance engagement profitability.
• Mentorship: Mentor and develop junior staff, promoting knowledge sharing and skills development within the team.

Your role as a leader

At Deloitte, we believe in the importance of empowering our people to be leaders at all levels. We expect our people to embrace and live our purpose and shared values, challenging themselves every day to identify issues that are most important to our clients, our people and the communities, and to make an impact that matters. In addition to living our purpose, Managers across our Firm are expected to:

• Develop diverse, high-performing people and teams through new and meaningful development opportunities.
• Collaborate effectively to build productive relationships and networks.
• Understand and lead the execution of key objectives and priorities for internal as well as external stakeholders.
• Influence stakeholders, teams, and individuals positively – leading by example and providing equal opportunities for our people to grow, develop and succeed.
• Deliver superior value and high-quality results to stakeholders while driving high performance from people across Deloitte.
• Apply their understanding of disruptive trends and competitor activity to recommend changes, in line with leading practices.

Enough about us, let's talk about you.

• 3+ years in cloud security, particularly in developing, implementing, or architecting Microsoft M365 security solutions.
• Hands-on experience with Entra ID (Azure Active Directory), Microsoft Intune, Microsoft Defender solutions, and Microsoft DLP, including their configuration, deployment, and management.
• Proven experience managing end-to-end projects involving Microsoft cloud security implementations.
• Relevant certifications such as Microsoft 365 Administrator, Microsoft Identity and Access Administrator, Microsoft Information Protection Administrator, with CISSP / CCSP being highly desirable.
• Bachelor’s degree in Computer Science, Information Security, or a related field; Master’s degree preferred.
• Ability to travel 25-50%, depending on the work and clients served.
• Excellent problem-solving skills and proven ability to lead a team of engineers.
• Strong communication skills to effectively advocate key security requirements to senior stakeholders.
• Strong critical-thinking and problem-solving abilities with clear communication.

Due to volume of applications, we regret that only shortlisted candidates will be notified.

Please note that Deloitte will never reach out to you directly via messaging platforms to offer you employment opportunities or request for money or your personal information.

• Industry: Govt Sector
• Employment Type: 11-month contract
• Leave and Medical benefits provided

The Role

• Design and develop content & collaterals for internal communication (e.g. eDMs, intranet banners, TikTok-style videos, staff photos) and keep internal communications platforms updated.
• Support staff engagement activities, including planning and executing events and workshops.
• Assist in sourcing and liaising with vendors for required goods and services.
• Produce and manage pre/post-event artefacts (e.g. photos, videos, soundbites).
• Collect and report data insights to support engagement efforts.
• Support Workday administration such as course registration and follow-up for training enrolments, where required.
• Oversee and manage corporate collateral inventory, including tracking stock levels and coordinating replenishment.

What are we looking for?

• Minimally a Degree in Mass Comms/Marketing/HR/Events Management or a related field
• Proficiency in Excel (VLOOKUP etc), content creation tools (Canva, CapCut etc.) and event management

Interested candidate may apply via email to [email protected]. All job applications will be processed with strict confidence and only shortlisted candidate will be contacted.

Lim Peiling (Serene) | R1654066

ScienTec Consulting Pte Ltd | 11C5781

Job Description

• Industry/ Organization Type: Manufacturing/Electronic Components and Boards
• Position Title: IT Security Manager (Regional)
• Working Location: Bedok (Company pick-up provided at Bedok MRT)
• Working Hours: 5 Days, Mon – Fri (8:15 am – 5:15 pm)
• Salary: Basic up to $12,000 + Variable Bonus
• Duration: Permanent

Key Responsibilities

• Analyze and prioritize vulnerabilities based on severity, potential impact, and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention, and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques, and incident response strategies.

APPLY NOW!!!

• Bachelor’s Degree in Computer Science, IT, or equivalent experience.
• Has 5+ years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Professional information security certification preferred (e.g. CompTIA Security+, CISSP, CISA, CISM).

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job(at)anradus.com.sg. Kindly indicate #67372 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it’s likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

JOB ID: 673056

Working hours: Mon-Fri 8.30am - 6pm

Responsibilities

• Ensure compliance with all relevant legislation/regulations, including Companies Act, Business Trust Act, SGX Listing Rules, Code of Corporate Governance, etc.
• Prepare and coordinate all corporate secretarial / board / board committee matters, including Board / Board Committee meetings and schedules, etc.
• Prepare and co-ordinate AGM/EGM matters.
• Filing with relevant authorities, upkeep and update all records and books as required.
• Assist in ad hoc duties/assignments as & when required

Requirements

• Candidate must Possess at least a degree with Corporate Secretarial qualifications or equivalent
• Candidate must have at least 8 years PQE or relevant working experience. In-house experience in companies/business trusts/REITs.
• Candidate must have Report/minutes writing skills.

To Apply, please kindly email your updated resume to cv_ray(a)goodjobcreations.com.sg

Please kindly refer to the Privacy Policy of Good Job Creations for your reference:

https://goodjobcreations.com.sg/en/privacy-policy/

We regret that only shortlisted candidates will be notified. However, rest assured that all applications will be updated to our resume bank for future opportunities

EA Personnel Name: Ray Loh Run Ting

EA Personnel Reg. no.: R1550214

EA License no.: 07C5771

Job Summary:
The Area Security Manager (ASM) will work on-site with one of Pinkerton's most prominent global clients. In this role, the Manager is a valued member of the client's Corporate Security team that manages all aspects of physical security at corporate locations and serves as a subject matter expert in security management, policy, and industry best practices. The ASM is responsible for all elements of the Corporate Security program, including security standards, assessments, consultancy, mitigation, guarding and access programs, and incident and crisis management programs at the Singapore and Bangkok locations. Candidates are encouraged to apply directly at: https://pinkerton.com/job/PINKERTONR5398/area-security-manager

Essential Functions:

1. Represent Pinkerton's core values of integrity, vigilance, and excellence.
2. Serve as a trusted security advisor and subject matter expert.
3. Build trusted internal stakeholder relationships by providing best-in-class services through safety and security enhancements.
4. Plan, develop, and implement security plans, policies, and programs.
5. Support security design and operations at new facilities.
6. Conduct comprehensive site security assessments.
7. Monitor security situations and take measures to minimize security risks/threats to the business commensurate to the dynamic security environment.
8. Develop and deliver plans to close any potential gaps in the security controls.
9. Drive Business Impact Analysis (BIAs), mock drills. and table-top exercises.
10. Successfully align corporate security metrics, goals, and strategic direction across functional area to support overall team mission.
11. Develop performance metrics to track an improve individual, team, system, and site performance.
12. Establish and implement effective, predictable, and measurable procedures or processes to be communicated clearly among client stakeholders.
13. Triage and collaborate with specialist teams on corporate investigations and occasionally conduct and manage corporate security investigations.
14. Provide oversight for guarding operations, managing large budgets, and performing service delivery functions.
15. Create goal setting, performance management, and retention strategies across multiple teams.
16. Manage cross functional projects and drive teams/partners to meet program and/or product goals.
17. Build collaborative relationships and coordinate with internal and external security partners.
18. Oversee security operations and logistics for large scale corporate events and high-profile visits.
19. All other duties, as assigned.

Education, Experience, and Certifications:
Bachelor's degree (or higher) in criminal justice, security, law enforcement, business management, or accounting with at least seven years of global corporate security experience (including writing and publishing security standards) or equivalent sized NGO or public sector. Seven or more years of experience in implementing security programs or managing enterprise business continuity solutions/programs is also necessary. Pinkerton is an inclusive employer who seeks candidates with diverse backgrounds, experiences, and perspectives.

Pinkerton is an equal opportunity employer to all applicants and positions without regard to race/ethnicity, color, national origin, ancestry, sex/gender, gender identity/expression, sexual orientation, marital/prenatal status, pregnancy/childbirth or related conditions, religion, creed, age, disability, genetic information, veteran status, or any protected status by local, state, federal or country-specific law.

about the company
We are working a large international construction and engineering solutions conglomerate looking to expand rapidly across the APAC region.

about the job
You will be an in-house lawyer with prior work experiences in the construction industry. You will be integral in advising and reviewing a wide variety of engineering procurement contracts and identifying risks in tandem with the commercial team. You will also be a key point of contact managing external legal resources and panel firms for various construction disputes. You will also be expected to travel regionally on a needs basis.

about the manager/team
You will be the sole counsel overseeing various ASEAN jurisdictions and setting up the legal department in the region. You will also work closely with the local country director in Singapore.

skills and experience required
You would need at least 8 years of legal experiences primarily in the construction, infrastructure or manufacturing sectors. Engineering procurement contracting experiences are integral to this role. Prior exposure to managing construction disputes are highly advantageous. Cross border or regional experiences are advantageous.

To apply online please use the 'apply' function.
(EA: 94C3609/ R23115352)

Work hard and make history with Amazon’s International Public Policy and Government Affairs Team. The Public Policy Manager for Southeast Asia will join a growing and dynamic team that works across Europe, Middle East, Africa, India and Asia Pacific, in support of Amazon’s global consumer and digital businesses. Like our business interests, our policy issues are broad, forward-thinking, and driven by what is best for our customers. The International Public Policy team works with a wide range of national, local, and supranational policymakers, industry organisations, and non-governmental organisations across policy issues spanning the consumer and commercial environment, including but not limited to digital technology, consumer affairs, economic development, privacy, intellectual property, logistics and tax.

Key job responsibilities
As the Public Policy Manager (Southeast Asia) you will be responsible for partnering with legislators and officials in support of our consumer-centric business model at the highest levels of government and policy-making. You will have an astute understanding of the public policy and regulatory environment as well as key stakeholders within it.

• You will coordinate across Amazon’s business, locally and globally, to develop and implement positioning and engagement strategies.
• You will lead external advocacy efforts, outreach programmes, partnerships, and initiatives in support of these business objectives.
• You will coordinate Amazon’s engagement with relevant industry associations and wider coalitions, and manage consultancy support.
• You will be able to manage and drive complex projects, and provide clear and confident guidance, including in situations of high ambiguity.
• You will be a confident leader, but are also able to operate respectfully and collaboratively within wider regional and international structures.

The position is based in Singapore. If interested, please apply directly here: https://www.amazon.jobs/en/jobs/2780574/public-policy-manager-south-east-asia-international-public-policy

We are seeking an experienced Security Technology Implementation Manager to lead the deployment and management of advanced CCTV and Video Management Systems (VMS) for commercial and industrial clients. This role requires a blend of technical expertise and project leadership, ensuring seamless execution, client training, and top-notch customer service across all projects.

Key Responsibilities:

• Conduct site surveys with clients to determine optimal installation locations for CCTV systems.
• Support pre-sales activities by demonstrating the capabilities of CCTV and Video Management Systems (VMS) to potential clients.
• Lead the deployment, installation, and configuration of CCTV and VMS solutions for commercial and indus trial clients, ensuring seamless integration.
• Provide customer training on system usage and configuration, ensuring they are equipped to operate the installed solutions.
• Manage the entire technical project lifecycle, from planning to execution, ensuring projects are completed on time and meet customer requirements.
• Act as the primary technical contact for clients, stakeholders, and partners, ensuring all solutions are aligned with technical specifications and client expectations.

Requirements:

• At least 5 years of hands-on experience with security surveillance systems.
• Proven expertise in working with Integrated Security Management Systems, Video Management Systems, and CCTV.
• Strong knowledge of IP-based CCTV systems, including network setups, camera configurations, and software integration.
• Technically proficient with both hardware and software systems related to surveillance and security solutions.
• Excellent problem-solving abilities, with strong communication and interpersonal skills.

Why Polytron.AI? Join a team where your ideas matter and your potential is limitless. Be part of a culture that celebrates innovation and rewards excellence.

Ready to Shape the Future? Apply now and embark on a journey with Polytron.AI – where extraordinary begins.

Location: East (Near Bedok MRT)

Salary: $8,000 - $12,000

Responsibilities:

• Identifying and fixing security weaknesses in the company's systems and networks.
• Leading the response to security incidents and cyberattacks.
• Developing and implementing security policies and procedures.
• Keeping up-to-date on the latest cybersecurity threats and making sure the company is protected.
• Training employees on how to stay safe online.

Requirements

• A degree in computer science or IT (or similar experience).
• At least 5 years of experience in IT security management.
• Strong knowledge of cybersecurity threats and technologies.
• Experience in Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management.
• Ability to manage and configure security systems, monitor traffic and logs, conduct security assessments, and respond to incidents.
• Preferred certifications: CompTIA Security+, CISSP, CISA, or CISM.
• Excellent communication and problem-solving skills.
• The ability to work independently and as part of a team.

Interested applicants, please email your resume to [email protected]

Tan Li Lian

EA 01C3135

Reg R1100465

The Role:

Drive the implementation of the company's cybersecurity, data protection, and privacy policies, standards and processes within the practice.

Work to continually improve the security posture of projects through proactive risk management and the establishment of a broad range of cybersecurity controls.

Provide direct support to colleagues to ensure cybersecurity is addressed throughout the engagement delivery lifecycle, from infrastructure and security tooling choices to the secure storage, processing and deletion of client data.

Act as a single point of contact and escalation for the SOC, Threat Intel and Crisis Response teams for practice-related cybersecurity incidents, ensuring timely identification, remediation and lessons learned.

Manage the security SLA governance and provide practice-level cybersecurity reporting, metrics and forecasting to leadership.

Responsible for information security, data protection, privacy, GRC, and audit requests for the practice, acting as single point of contact on relevant client security assessment and audits execution. E.g. independent third-party attestations of industry cybersecurity standards and certifications, such as ISO 27001, SOC 2 for practice-specific solutions and products.

Contribute to the definition of the client specific security baseline. Consult and advise internal and external clients about security topics and support the opportunity management process by providing subject matter expertise and support.

Help win client business by providing cybersecurity assurance to RFIs, RFPs, proposals, contract drafting, security questionnaires, workshops and other client due diligence processes.

The Requirements:

Degree or Diploma or higher in Computer Science, Information Systems or its equivalent.

At least one industry recognized security certification is, such as Certified Information Security Management (CISM), Certified Information Systems Security Professional (CISSP).

Over 5 years of experience in information security management either in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence or Vulnerability Management.

Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit/log review).

Understanding of information security principles, ISO 27001 controls, Center for Internet Security (CIS) controls, Cloud Controls Matrix (CCM) controls.

Experience with application security, security technologies and tooling, e.g., vulnerability scanners, firewalls, network, application security, security technologies (system hardening, IDS/IPS, firewall).

Experience carrying out security incident response, penetration testing, vulnerabilities scanning, and security assessment.

Senior stakeholder management and working across various parts of the organization.

Team player with good interpersonal, influencing skills

To Apply:

Please send your latest CV in word file to [email protected]
Kindly indicate your availability, current and expected remuneration package.
We regret that only shortlisted candidates will be notified.

For more job opportunities, please visit our career page: http://quinnox-solutions.com/c...

Quinnox Solutions Pte Ltd (License Number: 06C3126)
Registered EA Personnel (Reg. No.:R1551322)

• SEA regional legal experience exposure
• Sit in Southeast Asia International Business leadership team

About Our Client

Our client is an international sports retail company. Now they are catalysing the Group's fast-growing and expanding Southeast Asia International Business.

Job Description

• Be the trusted advisor to the Southeast Asia International Business leadership;
• To provide legal analysis and advice to Southeast Asia International Business on various day-to-day operations, commercial initiatives, business expansion, marketing campaigns and to serve as a primary contact point for any other legal matters and further spot the issues and engage relevant stakeholders from the region to enable business growth and achieve set goals;
• Draft, review, negotiate and manage a wide variety of commercial agreements for each country/business functions within the Southeast Asia International Business, particularly upon commercial leases, distribution/wholesale or other B2B partnership, penetrating e-comm marketplaces, licensing, marketing professional service or sponsorship relationship, store development, retail operation and employment related agreements, terms and conditions, statement, or other legal documents;
• Develop, maintain and update the various templates of contracts or other legal documents for daily business operation and continue to explore the chance of improving efficiency;
• Review and advice on rules, communications or other terms and conditions of campaigns, events or communications;
• Actively manage and contribute assets to the internal legal knowledge management (such as templates, quick guides, local new laws/policies, etc.);
• Work and collaborate with Headquarter Office legal team and external counsel on managing the resolution of legal disputes; for example, data privacy management.
• Manage legal budget and external law firms;
• Monitor and provide guidance regarding applicable new and developing rules and regulations, assess and advise on other legal risks affecting the Southeast Asia International Business and advise on internal policies and procedures, and/or provide commercially driven legal solutions;
• Develop, localize and tailor training materials and conduct the training for internal business partners on relevant skills and areas of law;
• Report to and collaborate with the Headquarter Office legal team, collaborate closely with other legal apparatuses within the Group, and provide support and assistance on projects, initiatives, and matters;
• Secretarial and Co-Sec and maintenance of statutory registers and relevant submissions.
• Provide ad hoc support to the Southeast Asia International Business leadership as needed from time to time.

The Successful Applicant

• Bachelor or above in law from a reputable law school. Qualification to practise Singapore laws is preferred.
• 8-plus years' experience in reputable law firms and/or in-house environment, preferably with expertise on retail, sports products or apparel industry and/or retail franchise operations.
• Familiarity with legal issues impacting retail, real property leasing, data privacy, brand marketing, commercial contracts, franchise operation, employment and international contracts.
• Detail-oriented, able to communicate efficiently and effectively in a multi-cultural environment and able to work under pressure. Travelling within APAC may be required.

What's on Offer

SEA regional legal experience exposure

Healthy working environment

Sit in Southeast Asia International Business leadership team

Contact

Catherine Guo (Lic No:R24124549 / EA no:18S9099)

Quote job ref

JN-092024-6523889

Phone number

+6564169867

Michael Page International Pte Ltd | Registration No. 199804751N