Total 3 recruitment consultant job vacancies in Legal / Public / Security category in D11 Novena, Thomson, Watten Estate

Responsibilities

• Evaluate an organization’s security measures, including firewalls, encryption, and authentication protocols.
• Conduct regular system tests to identify any vulnerabilities that could be exploited by cyber attackers.
• Create comprehensive plans to secure computing networks and systems.
• Oversee the implementation of security solutions to ensure they meet the needs of the organization.
• Continuously monitor security systems and networks for irregular activities.
• Lead the response to security breaches or incidents, including providing post-event analyses.
• Conduct staff training sessions on security best practices and awareness.
• Keep abreast of the latest cyber security threats and trends.
• Ensure all cyber security practices comply with regulatory standards.
• Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.

Requirements

• Min Bachelor’s degree in Computer Science, Cyber Security, or a related field.
• At least 3 years of experience in a cyber security role.
• Required certifications: CREST Registered Penetration Tester (CREST CRT) & Offensive Security Certified Professional (OSCP)
• Strong understanding of firewalls, VPNs, Data Loss Prevention, IDS/IPS, Web-Proxy, and Security Audits.
• Ability to identify and mitigate network vulnerabilities and explain complex security issues to non-technical stakeholders

Nafisah

R2096014

As Lead/Senior Security Consultant, you will play a crucial role in helping over 4 million members save for their retirement, healthcare, and housing needs as well as helping them cope with life’s uncertainties. With a fulfilling career, career growth, and development opportunities, you will be part of a big family of dedicated professionals. Join us and champion the importance of cybersecurity in CPF systems and protect the CPF balances of Singaporeans.

What you will be working on

The jobholder is to keep the Board’s computer information systems secure, develop security programs and implement them across the Board and most importantly to build a resilient and safe cyber environment for the Board.

We are seeking for interested candidates who wish to pursue a career in Cybersecurity Governance and Assurance to join our dynamic team and contribute to the robust security posture of the Board in the following areas:

• Develop and implement cybersecurity governance frameworks, policies, and procedures to ensure compliance with industry standards and regulations.
• Conduct regular risk assessments and vulnerability assessments to identify potential security threats and weaknesses in systems and processes.
• Collaborate with cross-functional teams to design and implement effective security controls, monitoring mechanisms, and incident response plans.
• Evaluate and enhance existing cybersecurity programs to align with emerging threats and industry best practices.
• Lead and participate in internal and external cybersecurity audits, ensuring adherence to regulatory requirements and organizational policies.
• Provide expertise in evaluating and selecting security technologies, tools, and solutions to enhance the overall cybersecurity infrastructure.
• Stay abreast of industry trends, emerging threats, and advancements in cybersecurity to continuously improve the organization's security posture.
• Work closely with stakeholders to communicate cybersecurity risks, recommendations, and mitigation strategies effectively.

What we are looking for

• Minimally 4 years of relevant information security work experience
• Relevant information security work experience
• Good knowledge of information security concepts and technologies (risk assessment, legal and regulatory requirements, threats, vulnerabilities)
• Strong understanding of industry standards, regulations, and frameworks e.g., National Institute of Standards and Technology (NIST), ISO 27001, Government’s Instruction Manuals, Center for Internet Security (CIS), Cyber Security Agency of Singapore’s Cybersecurity Act, Codes of Practice
• Hands-on experience with vulnerability management, risk assessment methodologies and security assessment tools such as exposure management and security validation, External Attack Surface Management (EASM)
• Specialised skills in one or more of the following i.e. malware analysis, penetration testing (application, systems and network), ethical hacking and computer forensics, end point detection, Web Application Firewall (WAF), SIEM and Database Activity Monitoring (DAM) will be an advantage
• Flexible in work assignment and willing to gain experiential learning by working in diverse functions where opportunities avail.
• Seniority of appointment will be commensurate with relevant work experience.

What you can expect

• A challenging and rewarding career.
• A variety of formal and informal training where you can hone your skills in the evolving technology landscape.
• Promotion opportunities through your capability and on the job performance
• A friendly work environment to collaborate and co-create with like-minded colleagues.
• A hybrid work model where you can work remotely up to 50% of the time.
• A productive yet growth-oriented workplace with flexible dress code where you are empowered to decide your appropriate outfit for the day.
• Comprehensive rewards package.
• Annual leave and pro-family leave.
• Medical and dental benefits.
• Access to recreational activities.
• Position is on 2-year full-time contract directly under the payroll of CPF Board with potential for emplacement into permanent position.

Immediate 1 Year Project assignment for Singapore Citizen to join as Security Engineer

Mon to Fri Office hours

24*7 Standby Support if required.

CAT 2A Clearance required in this project

Attractive Basic Salary + HP Claim S$50 Monthly + up to 1 month performance bonus upon completion

Job Scope:

· Point of contact to assist and advise client for any ICT security related

· Lead and support customer in the matter of security incident response and resolution

· Manage, configure and upgrade a wide variety of security technologies (e.g. FW, UTM, IDS/IPS, SWG/SEG, VPN, EPP, DLP, ATP, 2FA, PAM, etc.)

· Respond managed security technologies fault alerts and/or customer escalation

· Use strong fundamental knowledge (e.g. TCP/IP) and product-specific knowledge to perform troubleshooting on common technical issues on the managed security technologies

· Perform escalation to internal product domain experts and/or external product vendors

· Work with internal experts/external vendors to resolve technical issues

· Prepare Incident Reports on high severity incidents

· Respond to inbound Change Requests (CRs), Service Requests (SRs), Queries on managed security technologies, in a timely manner (within stipulated SLA).

· Perform regular configuration backups on managed security technologies

· Plan and coordinate Maintenance Windows with customer on necessary software patching and version upgrades.

· Create and update technical documentations on managed security technologies

· Generate monthly reports according to service scope requirements

· Adhere to policies, procedures and security best practices

· Resolve problems independently and understand escalation procedure

Job Requirements:

· A Bachelor degree / Polytechnic Diploma in Computer Science, Information Technology or Information System

· At least 5 years’ working experience in IT Infrastructure Operation and/or Support

· Sound fundamental knowledge on IP networking (e.g. TCP/IP, routing, etc.) and operation systems (e.g. Windows, Linux, etc.)

· Strong critical thinking and problem-solving skills and a passion for information security

Technical Skills & Expertise:

· Professional certification and/or practical working expertise on some/most the below security technologies:

o RSA / SafeNet (2FA)

o Cisco ASA / CheckPoint /Fortinet / Palo Alto / SonicWall / AlgoSec (Firewall)

o Trend Micro / McAfee (NIPS / HIDS / NSM)

o CyberArk / BeyondTrust (PAM)

o Symantec BlueCoat / McAfee Web Proxy

o DSM (AV, HIPS, Host FW, etc)

o Container Security

o Imperva Securesphere

o Tripwire Enterprise

o AWS / MS Azure (Cloud)