Total 635 security analyst job vacancies in Legal / Public / Security category in 8 MARINA VIEW SINGAPORE

• Bachelor Degree or Advanced Diploma in Computer Science, Information Technology,

• Cybersecurity from a recognized university or related field (or equivalent experience)

• At least 3 years in a cybersecurity role, with hands-on experience in SIEM content management, network security, threat monitoring, or incident response.

• Strong knowledge of cybersecurity principles, practices, and technologies.

• Expertise in SIEM tools and content management, including rule creation, alert tuning, and report customization.

• Proficiency with security tools like firewalls, IDPS, antivirus, and vulnerability scanners.

• Knowledge of scripting (Python, PowerShell) for automation within the SIEM environment is a plus.

• Ability to analyze and interpret security data to identify vulnerabilities and potential threats.

• Excellent communication skills, with the ability to explain complex security concepts to nontechnical stakeholders.

• Strong analytical skills and attention to detail.

• Ability to work on-call or off-hours as needed to respond to security incidents.

• May require occasional travel for training or workshop.

• Experience in the application of threat modelling or other risk identification techniques.

• Detailed knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits

• Breadth of knowledge in information security space with emphasis on TCP/IP network security, operating system security, common attack patterns and exploitation techniques

• Relevant certifications (e.g., CompTIA Security+, Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), GIAC Security Essentials (GSEC)) are a plus

• Effective leadership skills and a team player.

What you'll do:

As a Junior Cyber Security Analyst, your primary role will be to ensure the security and integrity of our client's digital assets. You will intake cybersecurity related requests from internal and external entities that require triage, remediation or escalation. Your excellent problem-solving skills will be put to use as you collaborate with your team members to resolve complex issues. Your commitment to accurate documentation will contribute significantly to record-keeping and analysis.

* Answer incoming calls to assist with information security inquiries or issues.
* Document all interactions accurately for record-keeping and analysis.
* Follow established processes and guidelines to handle common issues.
* Collaborate with team members to resolve more complex problems or escalate as necessary.
* Monitor your assigned queues and work cases in an efficient and effective manner.

What you bring:

The ideal candidate for the Junior Cyber Security Analyst role is someone who has a strong understanding of Cyber Security and Information Technology. Your effective typing skills will enable you to document all interactions accurately, while your strong problem-solving and critical thinking skills will be crucial in handling common issues. Your effective communication and interpersonal skills will allow you to collaborate effectively with team members.

* Effective typing skills
* Familiarity with Cyber Security and Information Technology
* Strong problem-solving and critical thinking skills
* Effective communication and interpersonal skills

What sets this company apart:

Our client is a leading global organisation that values collaboration, commitment, and growth. They offer an inclusive work environment where every employee is valued for their unique contributions. They believe in providing opportunities for learning and development, making it an ideal place for individuals who are eager to grow their careers.

What's next:

Ready to take the first step towards a rewarding career in cybersecurity? Don't hesitate!

Apply today by clicking on the link!

Do note that we will only be in touch if your application is shortlisted. Robert Walters (Singapore) Pte Ltd ROC No.: 199706961E | EA Licence No.: 03C5451 EA Registration No.: R24123088 Josue Hoyos Pardavell

Details of the Division and Team:

Everyday DB observes thousands of cyber security intrusion attempts. Deutsche Bank’s COO Chief Security Office (CSO) integrates both Corporate Security (CS) and Information Security (CISO) as both teams are responsible for mitigating these risks.

The CSO team enables the business of Deutsche Bank by providing agile security operational capabilities.

With their expertise in Threat Intelligence, Data Leakage Protection, Cyber Threat Analytics, Malware Response & Research, Security Monitoring, Incident Response, Forensics and Vulnerability Management, they provide global services from key locations in Frankfurt, Jacksonville and Singapore while leveraging offshore capabilities in Pune and Bucharest.

What we will offer you:

A healthy, engaged and well-supported workforce are better equipped to do their best work and, more importantly, enjoy their lives inside and outside the workplace. That’s why we are committed to providing an environment with your development and wellbeing at its center.

You can expect:

• Flexible benefits plan including virtual doctor consultation services.
• Comprehensive leave benefits
• Gender Neutral Parental Leave
• Flexible working arrangements
• 21 days of annual paid leave, plus public holiday & Flexible Working Arrangement

Your key responsibilities:

The Deutsche Bank Chief Security Office is looking for an experienced DLP Information Security Analyst.

Adhering to internal and external policies, the role is required to work in a global team to identify and assess technical and personnel security breaches within a heterogeneous business and technical landscape. This will include working with a variety of technologies and business groups to detect, assess and document the escalation of security alerts and consequence management.

Additionally, the role will require collaboration with control functions as well as businesses to identify information that needs to be protected and controls that are best suited to address these requirements.

The work will also involve utilizing vendor solutions, bespoke control applications and supporting the development of team tasks, such as the continual assessment of preventive and detective controls.

• Continuously monitor DLP systems for alerts and act as a subject matter expert for all data leakage investigations globally across all regions where the bank has a footprint.
• Manage DLP incidents, ensuring coordinated response and timely escalations.
• Document all incidents, actions taken, and outcomes. Prepare detailed reports for management and compliance purposes.
• The incumbent also assumes responsibility for overseeing and coordinating all facets of incident management like initial evaluation, stakeholder management, technical triage, and incident resolution.
• Ensure DLP tools and technologies are maintained, optimized, and regularly evaluated through established cyber risk frameworks.
• Cooperate with control functions to understand regulatory requirements and applicable laws.
• Ability to methodically analyze complex data and requirements and provide accountable SME opinion.
• Design and implement new DLP monitoring use cases. Collaborate with business and control functions to identify sensitive information that needs to be protected.
• Propose ways to improve existing process to achieve better operational excellence via automation.

Your skills and experience:

• Minimum 3 years of working experience in either Data Loss Prevention (DLP) or Security Operations Center, with at least 1 year working in an enterprise-grade Operations Center.
• A Bachelor's degree in Information Technology, Computer Science, or a related field is required.
• Working experience with Data Loss related applications such as Symantec DLP, Digital Guardian; and SIEM tools such as Splunk, Sentinel.
• Working knowledge in IT Fundamentals such as networking, hardware/software.
• Analytical and critical thinking with an inquisitive mindset, collaboration, and conflict management with good communication skills.
• Mentor new team members and provide guidance and directions when required.
• Ability to work in fast paced environment and within tight deadlines.
• Certifications such as Symantec DLP certified specialist, CompTIA Security+, CISSP, Microsoft Information Protection, Certified Data Protection Officer etc.

Role is required to be performed on-site at One Raffles Quay office. Relevant vaccination requirements may apply.

How we’ll support you:

• Flexible working to assist you balance your personal priorities
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs
• Training and development to help you excel in your career

About us and our teams:

Deutsche Bank is the leading German bank with strong European roots and a global network. Click click here to see what we do.

Deutsche Bank & Diversity

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

Role Overview:

The role involves safeguarding systems, applications, and infrastructure through proactive vulnerability management, the application of security controls, secure development practices, incident response, and continuous threat monitoring. You will collaborate with both internal teams and external service providers to enhance the cybersecurity posture and align with best practices and industry standards.

Key Responsibilities:

Vulnerability Management & Assessment:

• Evaluate the cybersecurity aspects of design proposals across various systems, applications, and infrastructure.
• Source, manage, and oversee external vendors conducting annual vulnerability assessments and penetration tests.
• Review assessment reports and recommend remediation actions for identified weaknesses.

Implementation of Security Controls:

• Recommend and implement security controls based on industry best practices, standards, and guidelines (e.g., OWASP Top 10, NIST, CIS).
• Contribute to the development and maintenance of security policies, procedures, configurations, and standards aligned with ISO 27001.
• Participate in internal audits and reviews to ensure the effectiveness of the ISMS and security controls.

Secure Development Practices:

• Integrate secure coding practices and OWASP Top 10 recommendations throughout the software development lifecycle (SDLC).
• Collaborate with developers to identify and address security vulnerabilities during design and coding phases.

Incident Response & Recovery:

• Monitor logs for signs of malicious activity and potential data breaches.
• Coordinate with contractors, security vendors, and internal teams to manage incidents, identify root causes, and implement recovery procedures.

Continuous Learning & Threat Awareness:

• Stay informed on the latest cybersecurity threats, vulnerabilities, mitigation techniques, and emerging technologies.
• Attend training, read industry publications, and participate in conferences as needed to maintain up-to-date knowledge.

Collaboration & Security Awareness:

• Work closely with security professionals and the governance team to educate colleagues on security best practices and raise awareness about potential threats.

Qualifications:

Educational Background:

• Degree in Information Systems/Technology, Computer Engineering, Computer Science, Information and Communications Technology (ICT), or a related field.

Certifications:

• Preferred certifications: CISSP, CISA, CISM, CompTIA Security+, or equivalent.

Experience & Skills:

• Strong understanding of cybersecurity principles and best practices, with at least 5 years of relevant experience managing contractors and designing cybersecurity solutions.
• Experience in drafting tender specifications for vulnerability assessments, penetration testing, and creating SOPs for incident response.
• Proficiency with security tools, log extraction techniques, and related technologies.

Interested candidate who wish to apply for the advertised position, please click on “Apply Now”. We regret that only shortlisted candidates will be notified.

EA License NO.: 01C4394

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its overseas subsidiaries and affiliates collecting, using and disclosing your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services and such other purposes stated in our privacy policy. Our full privacy policy is available at www.persolkelly.com.sg. If you wish to withdraw your consent, please drop us an email to let us know

• Position: Aviation Security Officer
• Shift pattern will be 4 working days with 2 days off / 5 days work with 1 day off
• 12 hours permanent shift
• Salary Package

i. Gross salary: up to $2,850

ii. Bonus of $2,500

Job Description

* Screening of passengers at designated zones

* Manual bag checks

* Usage of security screening equipment for screening purposes

* X-ray screening of checked in luggages

* Any other security related roles at Airport

Requirements:

* 1 N Levels / 1 O Level / WPLN 3 x Level 4

https://wa.me/6596420989

WhatsApp: +65 9642 0989 (Han)

Email: [email protected]

Chaw Chiaw Han, Reg No：R22106723

The Supreme HR Advisory Pte Ltd, EA No：14c7279

We are seeking an experienced AWS Security Engineer to design, evaluate, and enhance the security of our cloud infrastructure. The ideal candidate will be well-versed in AWS services, with a focus on securing containerized architectures (ECS, EKS) and cloud-based services (EC2, S3, IAM).

Responsibilities:

• Develop and implement security strategies and best practices for AWS services, including ECS, EKS, and EC2.
• Configure and maintain IAM roles and policies with a principle of least privilege.
• Regularly audit and evaluate AWS account security, including S3 encryption, network access controls, and logging.
• Ensure the security of containers (Docker) and orchestration platforms (ECS, EKS).
• Implement container image scanning to identify and remediate vulnerabilities.
• Manage and optimize runtime security configurations for containerized environments.
• Configure and maintain AWS native security services such as GuardDuty, Inspector, and Security Hub.
• Design and implement real-time intrusion detection and incident response processes.
• Investigate and mitigate security incidents, providing post-incident analysis and recommendations.
• Design secure VPC architectures, including subnet isolation, security groups, and NACL configurations.
• Configure Web Application Firewalls (WAF) to protect against common attacks such as SQL injection and XSS.
• Optimize AWS Shield and other DDoS protection mechanisms.
• Conduct regular security audits and generate reports to assist with third-party assessments.
• Develop and maintain automation scripts (Python, Shell) to streamline security tasks.
• Integrate security checks into CI/CD pipelines.

Requirements:

• Degree in IT/Computer Science/Engineering or equivalent.
• Expertise in AWS cloud security, Proficiency in Docker and container orchestration security.
• Familiarity with vulnerability scanning, penetration testing, and compliance tools.

As a Cloud Security Engineer, you will provide excellent technical guidance to customers adopting Google Cloud services. You will provide best practices on secure foundational cloud implementations, automated provisioning of infrastructure and applications, cloud-ready application architectures, and more. You will provide prescriptive guidance in ensuring customers receive the best of what Google Cloud Platform (GCP) can offer and you will ensure that customers have the best experience in migrating, building, modernizing, and maintaining applications in Google Cloud. Additionally, you will work closely with Product Management and Product Engineering to drive excellence in Google Cloud products and features.

Responsibilities

• We are looking for passionate and experienced security professionals to work with our strategic customers to help guide their vision, address risks and implement their security and compliance strategies on customer.
• The role will provide thought leadership and operate with a high degree of autonomy and visibility as part of our worldwide PSO specialist team. 
• Provide deep domain expertise in cloud security and be a trusted technical advisor to customers and solve complex cloud security & compliance challenges. 
• Work with customers to design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Cloud environment. 
• Create and deliver best practices recommendations, tutorials, blog articles, sample code, and technical presentations adapting to different levels of key business and technical stakeholders.  Communicate effectively via video conferencing for meetings, technical reviews and onsite delivery activities. 
• Manage disparate senior stakeholders within customer environments to deliver consensus and drive positive customer outcomes on the Cloud platform. 
• Stay connected with the latest security trends throughout various industry verticals
• Travel regularly (up to 30%, although we also frequently use video conferencing) in-region for meetings, technical reviews, and onsite delivery activities

Minimum Qualifications (MQs) 

• Bachelor’s degree in Computer Science, Engineering or related technical field or equivalent practical experience. 
• Coding experience in one or more general purpose languages. 
• Experience managing customer projects to completion, working with engineering teams, sales and partners. 
• Experience architecting, developing, or maintaining secure cloud solutions. 
• Strong verbal and written communication skills (English and Mandarin Chinese), and the ability to develop high-quality technical documentation and presentation materials.

Preferred Qualifications 

• At least 10+ Year work experience of security architecture and/or security engineering experience  Hands on and deep knowledge of security principles. 
• Demonstrated experience in Cloud Security delivered within the context of customer facing roles. Experience understanding attacks and mitigation methods, in two or more of the following: Network protocols and secure network design; Operating system internals and hardening; Web application security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks. 
• Strong practical experience securing Kubernetes and containerized workloads.

Joining Arup

Arup’s purpose, shared values and collaborative approach has set us apart for over 75 years, guiding how we shape a better world.

The Security Technology lead will provide direction and leadership to the specialist electronic security engineering and consultancy services (including integrated electronic security system such as video surveillance, electronic access control, intrusion detection etc.) in Singapore and South-East Asia. Arup’s Singapore Resilience Security & Risk (RSR) team is providing high end advisory services in Singapore and South-East Asia. The team currently has personnel with professional qualifications and skills in Security Risk & Strategy, Security Technology, Protective Design and Cyber Security.

The Opportunity

• Drive the overall performance and growth of the Security Technology team as part of the RSR leadership cohort.
• You will project manage a range of security projects, either direct security commissions or as part of larger multi-disciplinary projects. Here you will be responsible for the client interaction, project financial matters, quality assurance, delivery and resourcing.
• Undertake, manage and deliver the security engineering (electronic and protective) design for a range of facilities and/or for a variety of projects through all stages of design from concept, detailed and tender design to construction, and within established quality, budget and project expectations.
• Proactively approach clients, identify and develop business opportunities for RSR and other Arup disciplines. This includes planning and implementation of new market offers.
• You will develop and implement long term strategic plans to grow the RSR business in Singapore and across the region.

At Arup, you belong to an extraordinary collective – in which we encourage individuality to thrive. Our strength comes from how we respect, share and connect our diverse experiences, perspectives and ideas.
You will have the opportunity do socially useful work that has meaning – to Arup, to your career, to our members and to the clients and communities we serve.

Is this role right for you?

• Recognised relevant tertiary qualifications in electrical or electronic engineering or IT or similar area.
• At least 10 years of relevant industry experience in electronic security system design as consultant, manufacturer/distributor, end-user and/or security systems integrator.
• In depth understanding of latest security technologies (electronic and physical security).
• Membership of relevant professional institutions/professional peer bodies or significant credit towards eligibility for membership.
• Proven working knowledge of relevant legislation, regulations, codes of practice, and guidelines.

What we offer you

At Arup, we care about each member’s success, so we can grow together.
Guided by our values, we provide an attractive total reward package that recognises the contribution of each of our members to our shared success. As well as competitive, fair, and equitable pay, we offer a career in which all of our members can belong, grow and thrive – through benefits that support health and wellbeing, a wide range of learning opportunities and many possibilities to have an impact through the work they do.
We are owned in trust on behalf of our members, giving us the freedom, with personal responsibility, to set our own direction and choose work that aligns with our purpose and adds to Arup’s legacy. Our members collaborate on ambitious projects to deliver remarkable outcomes for our clients and communities. Profit Share is a key part of our reward, enabling eligible members to share in the results of our collective efforts.

Please see a list of Arup’s Singapore benefits below:

• Hybrid working policy & flexible working hours
• 13th month bonus
• Birthday leave
• Purchase Additional leave of up to 20 days (permanent employees)
• Paid parental leave for birth mothers 16 weeks & new parents (excluding birth mothers) 4 weeks
• Marriage leave (3 days)
• Examination leave (2 days)
• Family care leave
• Paid Annual subscription to relevant Professional association
• Reimbursement of Professional Engineers application and examination Fees
• International mobility opportunities
• QP allowance
• Site Allowance
• Work related travel insurance
• Dental expense cover
• Bike Loans of up to SGD2000

Different people, shared values

Arup is an equal opportunity employer that actively promotes and nurtures a diverse and inclusive workforce. We are an open environment that embraces diverse experiences, perspectives, and ideas – this drives our excellence.
Guided by our values and alignment with the UN Sustainable Development Goals, we create and contribute to equitable spaces and systems, while cultivating a sense of belonging for all. Arup provide an environment where you will make a positive difference. Discover more about life at Arup at www.arup.com/careers/your-life-at-arup.
We are committed to making our recruitment process and workplaces accessible to all candidates. Please let us know if you need any assistance or reasonable adjustments throughout your application or interview process, and/or to perform the essential functions of the role. We will do everything we can to support you.

Our Application Process

Please apply directly through our applicant tracking system. Shortlisted candidates will be contacted by Talent Acquisition to discuss next steps. Stay safe online – Arup will never ask for your bank details as part of our recruitment process.

Arup does not accept unsolicited resumes from recruiters or employment agencies.

Job Description Summary

We are seeking an experienced Senior Information Security Engineer SME with specialization in anti-malware/anti-virus solutions, Endpoint Detect and Response and Network Intrusion Detection Systems, with log analysis using SIEM tools such as Splunk. The ideal candidate should also have strong experience with standing up solutions selected by the business while providing operational guidance, architecture design, integrations including SSO, SIEM, monitoring and other platform integrations, cyber security expertise, incident response collaboration experience, proficiency in vulnerability detection solutions, File Integrity Monitoring (FIM) control and policy configuration experience, operational acumen, and a solid understanding of TCP/IP networking. This role involves architecting, implementing, and maintaining security solutions to protect our infrastructure and end user computing environments, leveraging platforms such as CrowdStrike Falcon, Microsoft Defender for Endpoint, Skyhigh Web Gateway, Trellix Endpoint Security for Storage, and Cisco Firepower Intrusion Detection Systems. The ideal candidate should also have extensive experience in configuring policy, integrations and providing platform support for multiple SaaS based security tools to act as the internal L3 escalation point for tool users and as a liaison between the users and vendor contacts for tools such as Cisco Umbrella, ThreatConnect and Palo Alto Cortex Xpanse.

Key Responsibilities:

Security Solutions Implementation and Management:

• Anti-malware/Anti-virus/Endpoint Detect and Response: Deploy, configure, and manage endpoint protection solutions to defend users and endpoints from malicious content.
• AV/EDR Policy Configuration: Implement and maintain platforms such as CrowdStrike Falcon, Microsoft Defender for Endpoint to protect against common threats. Configure policies to provide a balance between security and user/endpoint operational impact.

Log Analysis and Monitoring:

• SIEM Utilization: Analyze logs using Security Information and Event Management (SIEM) tools such as Splunk and Datadog to identify and respond to security incidents. Implement and manage log aggregation and monitoring solutions.
• Incident Response: Lead incident response efforts, providing root cause analysis, forensics, and remediation.

Deployment and Onboarding:

• Software Package Deployment: Manage the creation of endpoint security software packages for deployment via software distribution tools such as SCCM, JAMF, Puppet to ensure coverage to all endpoints in the environment.

Vulnerability Detection:

• Endpoint Vulnerability Detection: Manage and operationalize the vulnerability detection capabilities of endpoint security software tools for distribution and ingestion via aggregation platforms for consumption by the vulnerability management teams via platform integrations.

Cyber Security:

• Threat Analysis: Conduct thorough cyber security threat analysis and implement mitigation strategies to protect the organization’s assets.
• Policy Development: Develop and enforce cyber security policies, standards, and best practices to ensure a secure operating environment.
• Risk Management: Perform regular cyber security risk assessments and develop comprehensive risk management strategies.

Cloud Security:

• Cloud Platforms: Leverage cloud security best practices to protect services hosted on AWS, Azure, and GCP. Ensure secure configurations, access controls, and monitoring are in place.
• IAM: Manage identity and access management (IAM) policies to enforce least privilege and secure access to cloud resources.

Networking Expertise:

• TCP/IP Networking: Apply a solid understanding of TCP/IP networking principles to design, implement, and troubleshoot secure network configurations and protocols.

Collaboration and Compliance:

• Team Collaboration: Work closely with development, operations, network, and security teams to ensure cohesive and comprehensive security measures.
• Communication Channels: Utilize various communication channels effectively, including meetings, emails, Slack, and MS Teams, to collaborate efficiently with team members and other stakeholders.
• Compliance: Ensure alignment with industry standards and regulatory requirements such as GDPR, SOX, and PCI-DSS. Participate in compliance audits and risk assessments.

Training and Mentorship:

• Education: Provide guidance and training to junior team members and other stakeholders on best practices for edge and cloud security, including the use and management of WAF, DDoS protection, and bot management products.

Preferred Qualifications:

• Experience: 8+ years of experience in a Information Security Engineer role with a strong focus on endpoint AV/EDR, infrastructure based anti-malware solutions and network IDS products (Crowdstrike Falcon, Microsoft Defender for Endpoint, SkyHigh Web Gateway, Trellix Endpoint Security for Storage, and Cisco Firepower Intrusion Detection Systems.)
• Technical Skills:Strong experience with performing solution stand-up including architectural design and implementation.
  Strong experience with modern antimalware and endpoint detect and response solutions (CrowdStrike Falcon and Microsoft Defender for Endpoint)
  Experience with infrastructure focused antimalware solutions providing secure ICAP server services (Skyhigh Web Gateway)
  Experience with infrastructure focused antimalware solutions providing enterprise storage (NetApp) Antivirus services. (Trellix Endpoint Security for Storage)
  Experience in providing integrations with platforms such as SSO and SIEM tools.
  Expertise in log analysis and monitoring using SIEM tools like Splunk.
  Solid understanding of TCP/IP networking, network security principles, firewalls, IDS/IPS, and secure communication protocols
  Familiarity with cloud security best practices and secure configurations on AWS, Azure, and GCP.
  Knowledge of software deployment solutions and providing packages for deployment tools (SCCM, JAMF, Puppet)
  

Soft Skills:

• Problem-Solving: Excellent analytical and problem-solving skills.
• Communication: Strong communication and collaboration abilities.
• Leadership: Proven leadership and mentorship capabilities.
• Team Player: Strong ability to work effectively within a team environment and collaborate across various teams.
• Adaptability: Ability to work independently and handle multiple, complex priorities in a fast-paced environment.

About ByteDance

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

As part of the Security Engineering team, we are responsible for supporting the company's construction of security capabilities and platform services, combining other teams to create efficient and high-quality service docking capabilities, enhancing interactive experience, and lowering the user's barriers to understanding and using security services.

Responsibilities

We are looking for Security Software Engineers to join our Security Engineering team in building the next-generation of ByteDance's product security & privacy infrastructure that furthers our system security and user data privacy protection level, which will impact all ByteDance's products globally. In addition, you will also have opportunities to work closely with product teams across the world. Together we will identify opportunities, define innovative ways to build our users a safe and trustworthy environment, and help us shape the future of ByteDance.

- Research, design, develop, test, maintain and continuously improve ByteDance's product security & privacy Infrastructure and softwares.

- Analyse user needs and security & privacy objectives, develop software solutions, applying principles and techniques of computer science, engineering, and mathematical analysis.

- Update Software, enhances existing software capabilities. Develop and direct software testing and validation procedures to optimize reliability, availability and performance of globally distributed systems.

- Work with multiple cross-functional global teams to integrate hardware and software systems and develop specifications and performance requirements, to deliver high-quality work in rapid product development.

- Deploy, troubleshot and operate large distributed systems.

- Manage individual project priorities, deadlines and deliverables

Minimum Qualifications

- Bachelor's degree and or above in Computer Science, Computer Engineering or other relevant majors.

- Strong knowledge of data structures and algorithms

- Proficiency in at least one server library / framework like Express, Koa, Gin, Kite, Django, etc and at least one kind of database like MySQL, Redis, MongoDB, Hive, ClickHouse, ES, etc and at least one kind of message queue like Kafka, RocketMQ, etc

- Understanding of load-balance, container virtualization, familiarity with NGINX, Docker, K8s, Serverless, etc

- Proficiency in TypeScript, CSS and various layouts, at least one kind of general purpose programming language like Node.js etc

- Understanding of component-based development ideas, familiarity with React.js, Vue.js, or any other equivalent library / framework

- Excellent programming, debugging, and optimization skills in general purpose programming languages

- Ability to think critically and to formulate solutions to problems in a clear, concise and timely manner

Preferred Qualifications

- Experience in cloud-native security services and infrastructure such as Key Management System (KMS), or Public Key Infrastructure (PKI) to serve as a foundation for production infrastructure security. Experience in securing software supply chains to ensure source and build integrity at any stage of the software lifecycle.

- Experience with two or more general purpose programming languages including but not limited to: Go, Node.js, Java, or Python. Preferred familiarity in Rust.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Cloud Security team owns security for all services offered by Volcano Engine & BytePlus which is a cloud service provider owned by ByteDance, including IaaS, PaaS and SaaS. Join our forward-thinking security team dedicated to securing our cloud infrastructure with cutting-edge technologies and best practices. You will have the opportunity to design and implement robust security solutions for our cloud environments, ensuring the protection of sensitive data and the resilience of our systems.

Job Responsibility

1. Design, implement, and oversee cloud security architecture, encompassing physical hardware, operating system, cloud-native application, data security and privacy protection, insider threats and generative AI.

2. Develop and enforce cloud security policies, standards, and procedures in alignment with industry regulations and best practices.

3. Conduct security risk assessments, security training, and vulnerability assessments to identify and address security gaps proactively.

4. Collaborate with cross-functional teams to integrate security controls into cloud products and underlying infrastructure.

5. Stay abreast of emerging cloud security trends, technologies, and threats, providing guidance on security strategies and solutions.

Minimum Qualifications

1. Familiar with the principles of common risks, attack and defense strategies; Understand how to systematically lead security architecture and risk governance.

2. Familiar with cloud-native and infrastructure technologies such as network access, LLM, big data, storage, cloud computing, microservices, zero trust, etc.

3. Familiarity with container security technologies (e.g., Docker, Kubernetes) and serverless security best practices.

4. Proficient in at least one language in Golang, Python, Java, or NodeJS, capable of doing code auditing/reviews and development.

5. Knowledge of security frameworks and standards (e.g., CIS Benchmarks, GDPR, HIPAA).

6. Strong communication and excellent teamwork skills. With professional working ethics, and have a keen risk awareness. Results orientated, aiming for long-term growth in this field.

Preferred Qualifications

1. Experience of discovering major impactful vulnerabilities domestically or internationally / winning large-scale security competitions is a plus.

2. Priority given to those who have led or participated in large-scale governance, architecture, and design projects.

3. Strong understanding of cloud computing platforms (e.g., AWS, Azure, Google Cloud) and cloud security best practices.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Responsible to ensure accurate and rapid response to security events. • Analyze security logs, SIEM alerts, and incident reports to identify and mitigate risks. • Respond to and investigate security incidents, including breaches, malware outbreaks, and phishing attacks. Monitor networks and systems for security breaches, alerts, and anomalous activity. • Conduct root-cause analysis to prevent future incidents and develop incident response procedures. • Provide analysis and trending of security log data from various security devices • Configure and maintain SIEM tools to align with the organization’s security objectives and threat landscape. • Create custom SIEM dashboards and reports for different stakeholders to visualize critical security metrics and incident data. • Develop and optimize SIEM content, including rules, alerts, and correlation logic, to improve threat detection and response. • Regularly review and tune SIEM rules to reduce false positives, enhance event correlation, and maintain relevance to evolving threats. • Document and update SIEM processes and configurations, ensuring a high level of data accuracy and availability. • Perform regular vulnerability scans and assist in patch management processes. Work with IT teams to prioritize and remediate them. • Recommend solutions to mitigate risks in any activity that may potentially impact security of existing IT and information management • Ensure compliance with industry regulations (e.g. GDPR, ISO 27001) and company policies. • Assist in the development, implementation, and maintenance of security policies, standards, and guidelines. • Assist in training staff on security best practices, including phishing awareness and data protection. • Help develop educational materials and conduct periodic security awareness training.

Requirements:

Bachelor Degree or Advanced Diploma in Computer Science, Information Technology,
• Cybersecurity from a recognized university or related field (or equivalent experience)
• At least 1-3 years in a cybersecurity role, with hands-on experience in SIEM content
management, network security, threat monitoring, or incident response.
• Strong knowledge of cybersecurity principles, practices, and technologies.
• Expertise in SIEM tools and content management, including rule creation, alert tuning, and report
customization.
• Proficiency with security tools like firewalls, IDPS, antivirus, and vulnerability scanners.
• Knowledge of scripting (Python, PowerShell) for automation within the SIEM environment is a
plus.
• Ability to analyze and interpret security data to identify vulnerabilities and potential threats.
• Excellent communication skills, with the ability to explain complex security concepts to nontechnical stakeholders.
• Strong analytical skills and attention to detail.
• Ability to work on-call or off-hours as needed to respond to security incidents.
• May require occasional travel for training or workshop.
• Experience in the application of threat modelling or other risk identification techniques.
• Detailed knowledge of system security vulnerabilities and remediation techniques, including
penetration testing and the development of exploits
• Breadth of knowledge in information security space with emphasis on TCP/IP network security,
operating system security, common attack patterns and exploitation techniques
• Relevant certifications (e.g., CompTIA Security+, Certified Information Systems Security
Professional (CISSP), Certified Ethical Hacker (CEH), GIAC Security Essentials (GSEC)) are a plus
• Effective leadership skills and a team player.
• Strong sense of ownership and driv

Overview

Mayer Brown is a leading global law firm with offices in 26 key business centres across the Americas, Asia, Europe and the Middle East. With approximately 200 lawyers in each of the world’s three largest financial centres — New York, London and Hong Kong — we are uniquely positioned to advise leading companies and financial institutions on their most complex legal needs. We have deep experience in high-stakes litigation and complex transactions across industry sectors, including our signature strength, the global financial services industry.

We are a collegial, collaborative and diverse firm where highly motivated individuals with an unwavering commitment to excellence receive the opportunity, support and development they need to grow, thrive and realise their greatest potential. We also encourage all our people to use their skills to support the wider community through our pro bono and community volunteering programmes. At Mayer Brown the principles of mutual respect, dignity and understanding are central to the way we work and help to provide an environment where diversity and inclusion are embraced.

Operating as Mayer Brown PK Wong & Nair in Singapore we have been working in a Joint Legal Venture since 1 January 2023. Singapore is one of our fastest growing offices in the region and it is an exciting time to join the firm as we transform.

Responsibilities

The Regional Security Manager (Asia) will be responsible for providing technical leadership for strategic projects and initiatives on the security roadmap, as well as participating in more general network security and architectural efforts. The person will collaborate with other managers, engineers and departments to apply and support best practices for security, server building, change management, account management, documentation, and user experience management.

Responsibilities:

• Encourage team to provide continuous feedback to one another and upper management of the Global Security team and the Chief Information Security Officer.
• Monitor and maintain the security status of the Firm’s network and the intellectual assets held, in accordance with the Firm’s security policies.
• Help the Global Information Security Manager and Global Director of Information Security/CISO as a liaison to the regional General Counsel and Risk Management.
• Perform e-discovery related matters, executing searches and producing output as required by the Firm.
• Ensure that Mayer Brown has a secure architecture for authorization and authentication internally, as well as business to business.
• Ensure that all security risks are managed, mitigated and communicated clearly and effectively.
• Ensure that objectives are achieved by working closely with all members of the IT organization and byparticipating with the Global Security Team within the security model.
• Ensure that change controls are adhered to and communicated to the partners and staff.
• Assist the Global Information Security Manager and Global Director of Information Security/CISO in leading the team past any internal and external barriers that affect the Firm’s security.
• Keep abreast of all specific security issues and communicate to the Global Manager of Information Security.
• Assist in development and maintenance of all documentation related to Global Security Team operations and functions.
• Classifying Information and Data – setting classification standards and defining security roles.
• Manage security projects and initiatives.
• Control access to the firm’s Information Systems and related security configurations.
• Secure hardware, peripherals and other equipment logically and physically.
• Develop, implement, and maintain in-house software security and hardware.
• Assist HR regarding personnel issues relating to security.
• Assist the Global Information Security Manager and Global Director of Information Security/CISO in mitigation of threats intelligence from external sources such as Government agencies, LS-ISAO community, and local law enforcement.
• Detect and respond to incidents of a security nature within the Mayer Brown environment.
• Address all Asia based tickets sent to security and assist other regions.
• Ensure monitoring and alert notifications are implemented in accordance with the business needs.
• Assist in the preparation, approval, implementation and adherence of the Information Security Policy within the firm.
• Assist in the development and authorization process of all new IT policies introduced, ensuring that the necessary security audits and tests are carried out prior to being introduced into production.
• Assist the Global Information Security Manager with client audits and questionnaires including .
• Ensure that third party providers of Mayer Brown are audited in relation to our security guidelines to protect the Firm’s data and assets.
• Regularly monitor the Firm’s compliance with the security policies and report on concerns.
• Regularly work with members of the global security team to monitor the firm’s client requirements in relation to security processes, policies, and guidelines.
• Identify and communicate to upper management the cause of all security incidents, making recommendations as to how the specific incidents can be mitigated in the future.
• Assist in ensuring that Mayer Brown’s employees appreciate the benefits of security to the organisation, themselves and their working environment.
• Review new builds periodically to verify all security standards are being met and applied.
• Ensure the IT Security site on Global Net stays updated with current material.
• Ensure whenever possible that undesirable use of IT facilities is prevented/minimised at all times.
• Perform digital forensics on technology as requested by Human Resources, Information Technology or General Counsel.
• Willing to travel 25% domestically / internationally as needed.
• Function where feasible in relation to security duties, in a variety of roles including technology expert and vendor coordinator including identifying viable technologies, gathering requirements and providing recommendations on specific solutions and firm policy modernization relating to Mobility.
• Assist the Global Information Security Manager in monitoring and controlling IT security expenses in Asia.
• Manage security vendors in relation to Asia matters.

Qualifications and Experience:

Education

• 4 year degree or relevant work experience.

Certification

• CISSP, CEH, or relevant work experience regarding security and networks.

Computer Skills

• 7 years of experience in an Information Security department.
• Excellent working knowledge of CISSP, CEH and CISM.
• Excellent knowledge of the ISO 27001 security standards.
• Good working knowledge of networking.
• Excellent knowledge of security standards.
• Ability to effectively work with and communicate with the Firm’s clients
• Good documentation experience.
• Excellent knowledge of a Microsoft Exchange email environment.
• Good knowledge of Disaster Recovery.
• Good knowledge of authentication methods.
• Technical knowledge of cloud environments such as Azure and O365.

Performance Traits:

• Must work well with others and contribute to the success of the team, communicating openly with teammates. Willingly asks questions where appropriate and guides others whenever possible.
• Personable and approachable.
• Able to work on own without direct supervision.
• Adaptable and flexible.
• Customer-service focussed.
• Excellent telephone manner.
• Ability to work under pressure and meet strict deadlines.
• Uses own initiative.
• Ability to weigh business needs against security concerns and articulate issues to customers and senior management.
• Willingness to challenge the status quo.
• Ability to be on call and respond as necessary.

The above is a general description of the essential duties associated with this position and does not represent an exhaustive or comprehensive list of all duties.

We are no accepting applications from Recruitment Agencies for this vacancy.

A renowned Energy and utility solutions firm is looking for a Senior Manager, Security Governance in Singapore. The incumbent will be responsible for aligning the standards and excellence of security policies across all operational facilities/sites. This role will be parked under the HSSE Division (Group Health, Safety, Security and Environment).

Responsibilities:

• Develop and maintain group-level asset security across all regional sites
• Oversee data security and governance
• Provide guidance and support to all sites to ensur operational excellance in security practices which includes Security Strategy, Incident Response and Investigation, Security Training, and Group Reporting etc.
• Conduct regular assessments and audits to identify areas for improvement and ensure compliance with security standards.
• Handle projects to build policies on risk impact, buildings, properties and facilities.

Requirements:

• Bachelor's Degree in Security Management or any relevant disciplines
• 10+ years of experience in security policies and governance
• Familiar with regional and group-level operational security exellence
• Experienced in security asessment and audits
• Strong communication and interpersonal skills
• Individual contributor position
• 1-2 monthly travels per month
• Full onsite arrangement

If you are interested, please apply with your updated CV. Only shortlisted candidates will be contacted.

Position: Aviation Security Officer

• 12 hours permanent shift
• Location: Changi
• Salary Package
  i. Gross salary: up to $2,850
  ii. Bonus of $2,500

Interested applicants can also send your resume to WA: +65 8827 8712 (Ms Lynne) and allow our Consultant to match you with our Clients. No Charges will be incurred by Candidates for any service rendered.

TAN LEE XIAN Reg No: R24123487

The Supreme HR Advisory Pte Ltd EA No: 14C7279

Job Description

• Screening of passengers at designated zones
• Manual bag checks
• X-ray screening of checked in luggages

Requirements:

• 1 N Levels / 1 O Level / WPLN 3 x Level 4

Position: Enforcement Officers

• Able to commit 12 hours duty
• Location: islandwide
• Salary Package : $2,700 to $3,000 ( Bonus $3500)

Job Scope:

• Patrolling and carry out enforcement duties such as illegal parking on public roads or public health
• Attend to public feedback

Requirements:

• Possess minimum class 2B license
• Secondary education

Position: Security Officers

• 12 hours permanent shift
• Location: islandwide
• Salary Package: $2,650 to $3,500

Job Description:

• Incident Response, Manage Security & Safety Systems
• Prevent unauthorised entry
• Monitor CCTV
• Patrolling and clocking

Requirements:

• Secondary education

Position Overview:
We are seeking a skilled and motivated IT Security Specialist to join our team. The ideal candidate will play a pivotal role in implementing and managing security architecture, ensuring compliance with security standards, and mitigating risks through effective vulnerability management. This position demands expertise in IT security tools and methodologies, a proactive approach to incident detection and resolution, and familiarity with operational security processes.

Key Responsibilities:

• Security Architecture Implementation:Develop and implement a security architecture blueprint encompassing DevSecOps, application, infrastructure, and operational security.
  Define processes, provisioning, and interfaces for secure application interaction.
  Provide expert recommendations on security practices and improvements.
  
• Access Management and Control:Manage and optimize access control processes and tools.
  Oversee access management systems, ensuring secure and compliant operations.
  
• Vulnerability Management:Execute security vulnerability scanning activities, including HCR/NVA, Pen Testing, SAST, and DAST.
  Analyze and resolve findings from security assessments and audits.
  
• Operational Security Management:Oversee OS and application-level patching, operational housekeeping, and archival processes.
  Implement server and application hardening procedures, following IM8 policies and vulnerability assessment standards.
  Handle security incident detection, reporting, and SSL certificate renewals.
  
• Audit Facilitation:Support and facilitate external auditing processes to ensure compliance with security frameworks.
  

Technologies & Skills Required:

• OS Administration (Linux/Windows).
• Expertise in security tools, including:IBM Security Verify Access
  IBM QRadar
  Thales HSM
  OpenSSL
  Tenable Nessus
  Burp Suite Enterprise
  

Requirements:

• Minimum 2+ years of experience in IT Security.
• Professional certifications such as CISSP, CCSP, CCSK, or equivalent are preferred.
• Proficiency in 1-2 Cyber Security domains, such as Identity Access Management, Security and Risk Management, Application/Network Security, or Vulnerability Management, with a broad understanding of other areas.

EA License number: 11C4879

Position Objective

Cognita is a global leader in independent education. Founded in 2004, we are a growing community of 100+

schools in 16 countries - in Europe & North America, Latin America, Asia and the Middle East - serving more

than 85,000 students. Each of our schools are proudly unique, however our collective purpose is to create an environment where everyone can, ‘Thrive in a rapidly evolving world’.

As part of our global cyber security initiatives, we are seeking a Cyber Security Lead based in our Singapore

Regional office to support the Asia region. Reporting to the UK based Group Manager of Cyber Governance

Risk and Compliance, with operational reporting to our Regional IT Director for Asia, the Regional Cyber

Security Lead will ensure the effective communication, implementation, and adherence to cyber security

policies and best practices across Asia. You will lead regional incident response efforts, help regional and

local teams implement security controls, provide assurance of control implementation, and ensure

compliance with organisational policies. This role requires collaboration with diverse stakeholders,

contributing to reporting and assurance activities for both regional and global teams. There will be a travel requirement associated with this role (around 20-30%) within Asia.

Key Accountabilities

Regional Expertise and Leadership

• Develop a deep understanding of the region and its unique country-level differences, staying informed on new technologies, regulatory changes, and industry best practices as you lead and oversee cyber security initiatives for the region.

Incident Response

• Develop and implement regional incident response plans, ensuring alignment with Group Policy and best practices.
• Lead regional incident response efforts, coordinating with local IT and security teams to ensure the effective handling of security incidents.
• Act as the primary liaison between Regional Teams and Group Cyber Security during major incidents which may involve engagement with local regulators.

Implementation of Security Best Practices

• Support local IT teams in implementing security good practices based on Group policies, NIST CSF 2.0 framework, and local regulatory requirements.
• Regularly review security controls and configurations, recommending improvements to strengthen the regions security posture.

Assurance and Compliance

• Lead assurance activities to ensure compliance with security policies, standards, controls, and operational procedures, conducting regular reviews and audits.
• Assist in ensuring the region meets all regulatory requirements related to cyber security.

Reporting and Metrics

• Develop and maintain key risk and performance indicators (KRIs and KPIs) as guided by Group Cyber Security to monitor the regions security programme.
• Contribute to group-level reports, providing insights into the region’s security posture for senior leadership.
• Provide the Asia Leadership Team with regular updates on cyber security progress at the school and regional levels

The Key Accountabilities listed above are not exhaustive and may be varied from time to time as dictated by the changing needs of Cognita. In this case, any significant changes or variations will be consulted with the post holder before undertaking these responsibilities.

Security Awareness and Training

• Support and lead regional security awareness initiatives, delivering tailored training to improve security culture and readiness.
• Ensure staff are informed of emerging threats and best practices for mitigation.

Cross-Functional Collaboration

• Build strong relationships with regional IT, operations, and business teams to foster collaboration on cyber risk management.
• Work closely with Group Cyber Security to ensure alignment with global initiatives.

Remediation and Transformation

• Drive remediation efforts for identified vulnerabilities, ensuring timely and effective action.
• Support broader security transformation initiatives to improve the regions cyber maturity in line with Group strategy.

Safeguarding Responsibilities

Cognita Schools are committed to safeguarding and promoting the welfare of children and young people and expects all staff, volunteers and other third parties to share this commitment. Safer recruitment practice and pre-employment background checks will be undertaken before any appointment is confirmed.

• To comply with safeguarding policies, procedures and code of conduct
• To demonstrate a personal commitment to safeguarding and student/colleague wellbeing
• To ensure that any safeguarding concerns or incidents are reported appropriately in line with policy
• To engage in safeguarding training when required

Person Specification

Essential Skills & Experience

• Ability to implement security controls, policies, and mitigation strategies within agreed budgetary guidelines and operational constraints.
• Strong working knowledge of cyber security good practices, including incident response and risk management
• Knowledge and experience working with common security management frameworks such as NIST, CIS etc.
• Experience coordinating and communicating penetration tests
• Strong analytical skills with excellent attention to detail
• Ability to plan strategically and implement positive change that is operationally sustainable.
• Ability to prepare and deliver clear reports and presentations to senior management, including the ability to clearly articulate cyber security risk to the business.
• Proficiency in using Microsoft Office applications (Word, Excel, PowerPoint)
• Excellent communication skills in English both written and verbal
• Minimum of 7 years’ experience in a cyber security or GRC role, preferably within an international organisation.
• Proven ability to implement and support security best practices across regional and local teams
• Experience developing and tracking security metrics (KRIs and KPIs)
• Proven ability to manage and respond to cyber incidents effectively within the region.

Desirable Skills & Experience

• Familiarity with cyber security tools (e.g., SIEM, DLP, IDS/IPS)
• Experience working with Power BI
• Experience supporting internal and external audits and negotiating control improvements
• Good knowledge and understanding of the regulatory frameworks in the Asian countries where we operate.
• Experience coordinating major security incident response processes
• Experience managing security due diligence and integration for M&A activities
• Experience working within the education sector or a similar customer centric industry like Healthcare etc.
• Experience working in decentralised global or international business models.

Qualifications

• Relevant degree or diploma in Information Security, IT, or a related field and or;
• Relevant certifications related to information security or GRC (e.g., CISA, CISSP, CRISC)

Terms of Employment

• Based in Singapore Regional Office with hybrid work arrangement
• Official work hours: Mondays to Fridays from 9am to 6pm
• Flexibility for extended work hours to accommodate Global team based in UK as required

At Cognita how we achieve our goals is as important as what we do. Behaving in line with our values is essential to performing effectively at Cognita.

• Excellence: We aspire to achieve excellence in everything we do, no matter how big or small.
• Collaboration: Together, we are more aligned and more effective.
• Respect: We treat all with fairness, compassion and respect.
• Integrity: We do what we say we will do.

Accountability: We have a clear sense of what is expected of us, and we do our utmost to deliver, taking our responsibilities as educators seriously.

Ability to travel up to 30% in the first year (to embed security policies and practices), and also at short notice when required (to assist with local cyber incidents)

Key Stakeholders

Internal - Group IT Director, Regional IT Director, Heads of Schools, Asia Executive Team members, Regional Colleagues, Managing Directors of Operations, Group IT Senior Leadership Team, Cyber Security Teams, Other Group IT Teams, Regional and School based IT Teams, Legal.

External - Cyber Security Vendors, Partners & Third Parties, Regulators.

For interested applicants, please submit your applications to https://cognitapeople.csod.com/ux/ats/careersite/1/home/requisition/480?c=cognitapeople&source=MyCareersFuture

Are you ready to unleash your potential?

At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve.

We believe we have a responsibility to be a force for good, and WorldImpact is our portfolio of initiatives focused on making a tangible impact on society’s biggest challenges and creating a better future. We strive to advise clients on how to deliver purpose-led growth and embed more equitable, inclusive as well as sustainable business practices.

Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals.

We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognized for their contributions.

Ready to unleash your potential with us? Join the winning team now!

What you will do

As a Director in Cloud Security, you will lead the strategic vision and execution of cloud security initiatives, ensuring they align with client objectives and regulatory standards. You will oversee the development and implementation of comprehensive cloud security strategies, driving innovation and excellence in data protection, compliance, and risk mitigation. Your role will involve high-level engagement with stakeholders to demonstrate the value of cloud security initiatives, solidifying Deloitte’s position as a trusted leader in cloud security solutions.

You will

• Develop and drive the strategic vision for cloud security services across Southeast Asia.
• Lead and inspire cross-functional teams to deliver exceptional client outcomes.
• Oversee the setup, integration, deployment, and maintenance of Microsoft 365 and Purview security solutions.
• Identify, evaluate, and mitigate business and technology risks.
• Enhance internal controls and identify opportunities for continuous improvement.
• Build and nurture strong client relationships, providing strategic insights and recommendations.
• Manage project scope, schedule, status, and documentation, ensuring timely and within-budget delivery.
• Mentor and develop junior staff, promoting knowledge sharing and skills development.
• Identify and capitalize on opportunities to improve engagement profitability and drive business growth.

Your role as a leader

At Deloitte, we believe in the importance of empowering our people to be leaders at all levels. We expect our people to embrace and live our purpose and shared values, challenging themselves every day to identify issues that are most important to our clients, our people and the communities, and to make an impact that matters. In addition to living our purpose, Directors across our Firm are expected to:

• Lead from the front, acting as an exemplary role model of integrity for leaders at all levels; promote a strong sense of loyalty and followership as well as to energise others to perform at the highest level
• Build a high-performance culture by cultivating individual and team strengths; drive outstanding service, quality and stakeholder value, often through a mix of large cross-business and/or cross-border teams
• Anticipate market and competitor trends to develop and deliver bold and innovative solutions that differentiates Deloitte from others.
• Build and maintain trust-based relationships with senior stakeholders and influencers, using highly developed influencing skills to drive positive impact in complex situations.
• Set and communicate strategic direction, excite people around the vision and align diverse, cross-business as well as cross-border teams to achieve success.
• Manage the development of a strong pipeline of diverse talent for current/ future success; own and drive a talent experience that differentiates Deloitte from others.
• Anticipate market and competitor trends to develop and deliver bold and innovative solutions that differentiates Deloitte.

Enough about us, let's talk about you.

• 15+ years in cloud security, particularly in developing, implementing, or architecting Microsoft M365 security solutions.
• Hands-on experience with Entra ID (Azure Active Directory), Microsoft Intune, Microsoft Defender solutions, and Microsoft DLP, including their configuration, deployment, and management.
• Proven experience managing end-to-end projects involving Microsoft cloud security implementations.
• Relevant certifications such as Microsoft 365 Administrator, Microsoft Identity and Access Administrator, Microsoft Information Protection Administrator, with CISSP / CCSP being highly desirable.
• Bachelor’s degree in Computer Science, Information Security, or a related field; Master’s degree preferred.
• Ability to travel 25-50%, depending on the work and clients served.
• Excellent problem-solving skills and proven ability to lead a team of engineers.
• Strong communication skills to effectively advocate key security requirements to senior stakeholders.
• Strong critical-thinking and problem-solving abilities with clear communication.

Due to volume of applications, we regret that only shortlisted candidates will be notified.

Please note that Deloitte will never reach out to you directly via messaging platforms to offer you employment opportunities or request for money or your personal information.

About the company

CGS International Securities Pte. Ltd. (CGS International) is an award-winning and market leading integrated financial services provider, ranked among the top securities houses in Asia.

CGS International taps on our wealth of global and ASEAN insights to offer equities trading, leveraged products, wealth management, investment banking, equities research, Shariah-compliant financing, fixed income, currency and commodities, structured products and prime brokerage services in over 15 countries and regions.

Along with its parent organisation China Galaxy Securities, a leading securities house in China, CGS International is trusted by more than 15 million customers globally.

Job Description

1) Threat Detection:

- Use of tools to scan/ detect/ analyze/ correlate threats

- Manually review to detect/ analyze/ correlate threats

- Participate in design of infrastructure and process of threat detection

- Perform triage of security alerts to filter false positives, classify alerts and determine response type

2) Threat Hunting:

- Collect and analyze data to identify patterns and anomalies that indicate presence of a hidden threat

- Investigate potential threats to determine if they pose a real threat

3) Threat Intelligence:

- Keep up to date of threats reported by reliable internal and external sources

- Maintain samples, logs and records, compromised information that help understanding of attacks

4) Incident Response:

- Inform relevant members and departments of threats and advise of remediation and mitigation

- Coordinate and follow up with all relevant members and departments to collect data and evidences, to ensure completion of remediation and mitgation

- Document all security incidents with records of assessment, investigation, remediation and mitigation

- Maintain playbooks and guide other departments on contributing to them

- Lead and participate actively in security incident response effort

- Lead and participate actively in post-incident reviews to evaluate response effectiveness and recommend improvements

- Conduct, coordinate and debrief simulated exercises on security incident management across departments

5) Requirements Review:

- Insurance coverage of incident response management

- Third party agreement coverage of security monitoring and incident response management

Corporate policies, standards and procedures in security monitoring and incident response management

Job Requirements

• Strong knowledge of information security principles, incident response methodologies, network protocols, logging/detection/response tools (e.g. SIEM, EDR, XDR)
• Proficient in network communications, log analysis, scripting
• Good problem-solving, analytical and communication skills
• Preferably has experience working with cross-geographical teams
• 1-3 years of experience as a Security Operations Analyst or similar role
• Diploma or Bachelor degree in Computing or related field
• Preferably has relevant certifications (e.g. GCIH, GCIA)
• Proactive and independent
• Keen to learn
• Has an eye for detail
• Willing to share and collaborate as a team player

• Monthly Salary: $2,000
• Working Location: Tanjong Pagar
• Working Days & Hours: 4 Days (7-7 AM & PM Rotating)

Responsibilities:

• Maintain peace and order within the Hotel premise and to provide safety and security to Hotel guests, patrons, employees and their belongings, and the Hotel's properties.
• Ensure no break-in and intrusion in secured and protected areas.
• Perform patrolling round in all areas of the Hotel’s premise.
• Conduct investigations on incidents involving disturbance, accidents, losses, thefts, etc. occurring in the Hotel.
• Report all matters that are harmful to the Hotel business
• Be familiar with the fire emergency plan.
• Take necessary action whenever the fire alarm is activated.
• Keep proper and updated records/entries in relevant security logs and records.

Requirements:

• Relevant experience in hospitality industry will be an added advantage
• PLRD licensed
• Willing to work rotating shifts including weekends and public holidays

If you are interested to apply, kindly WhatsApp me your updated resume in DOC file and allow our Consultant to match you with our Clients.

Whatsapp: +65 8525 2419

Email: [email protected]

Tan Man Ee Reg No: R22108289

The Supreme Hr Advisory Pte Ltd EA No: 14C7279

Do you have the passion for helping customers and partners design and create robust security architectures to address their enterprise risk management requirements using cloud computing? Do you enjoy helping customers become more secure across their workloads and assisting them meet compliance accreditation? Would you like to do this using the world’s most advanced cloud computing technologies? Are you one of those rare technologists with the communications, consultative, and leadership skills to help guide major projects to success? The AWS Solutions Architecture team is hiring! Come join the team as an ASEAN Public Sector Solutions Architect – Security, within Amazon Web Services (AWS) Public Sector ASEAN team based in Singapore.

Sales, Marketing and Global Services (SMGS)
AWS Sales, Marketing, and Global Services (SMGS) is responsible for driving revenue, adoption, and growth from the largest and fastest growing small- and mid-market accounts to enterprise-level customers including public sector. The AWS Global Support team interacts with leading companies and believes that world-class support is critical to customer success. AWS Support also partners with a global list of customers that are building mission-critical applications on top of AWS services.

#aws-ags-asean

Key job responsibilities
In this role, you will deliver architecture guidance, lead proof-of-concept projects and conduct customer workshops. You will also drive collaboration with customers and partners to address security as well as compliance challenges. Your broad responsibilities will include: owning the technical engagement and ultimate success around specific implementation projects, working cross-organizationally to facilitate widespread use and adoption of the AWS platform, and developing a deep expertise in the AWS technologies as well as broad know-how around how applications and services are constructed using the AWS platform.

About the team
Diverse Experiences
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why AWS
Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.

Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud.

Inclusive Team Culture
Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness.

Mentorship and Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.

Basic qualifications

• 5+ years of Security and Compliance experience – must have strong experience and understanding of customer security/compliance requirements.
• 10+ years of experience in any other following or related to Technology Architect, Consultant, Cloud Architect, Technical Lead, Software Developers, Engineering Lead, Sales Engineer, Pre Sales Engineer or Systems Engineers, etc.
• Can create proof of concepts, demos, and/or scripts from scratch or leveraging reusable components.
• Can take the lead on a complex technical project, which may require the participation of other teams to deliver.
• Able to create technical content that is easily adopted and reusable by others.

Preferred qualifications

• AWS or other technical cloud certifications.
• Executive speaking and presentation skills – Formal presentations, white-boarding, large and small group presentations.
• Be dynamic and creative, and willing to embrace the high degree of change and uncertainty that comes with inventing and delivering things that were never thought possible.
• Have a passion for educating, training, designing, and building cloud computing systems for a diverse and challenging set of customers. Have a strong understanding of large scale cloud computing solutions.
• Have past experience working as presales. Enjoy keeping existing technical skills and developing new ones to make strong contributions to deep architecture discussions around systems and applications in the cloud.

• Conducting maintenance service, commissioning of alarm systems
• Address to customer request on alarm and card access systems

Requirements:

• Basic Security certified
• At least 2 years of working experience
• Possess valid class 3 driving license

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gAHYjij4

• Strong support to invest in information security from the company
• Regional role with an established company

About the company

Our Client is an established company. With rapid expansion plan, they are now looking for a new Information Security Assistant Manager (GRC, ISO27001) to join their team.

About the job

Reporting to the Head of Security, you will be responsible for:

• Leading initiatives to assess the adequacy and effectiveness of IT controls and policies, ensuring that business users are compliant to the IS standards (ISO 27001, PDPA and etc).
• Planning and implementation Information Security, IT Risk Management, IT Audit and IT policy to improve the overall security posture for the organization across Asia. This includes reviewing and maintaining information security polices.
• Designing IT Security framework and roadmap to ensure the availability, integrity and confidentiality of IT system. This includes setting up the best practices and governance for Risk Control Security Assessment (RCSA). Designing processes to identify, improve and optimize IT risk management policies/practices.
• Identifying potential gaps in security control to enhance early detection capability. This is through leveraging internal security data (Performing analysis of forensic evidence, log data, compromised hosts, and network traffic) and external sources (Industry portals and etc) to identify existing gaps in security control and close the gaps.
• Overseeing the development and execution of corporate security awareness and training programs to business stakeholders to prevent and limit the impact of a potential cybersecurity event
• Monitoring compliance, keep abreast of legislative and regulatory trends to address potential impact and non-compliance/gaps.

Skills and experience required
As a successful applicant, you will have at least 5 years of experience in Information Security(ISO 27001, ISO 27701 or etc) / Governance, risk management, and compliance (GRC) Proven track record of engagement with C-level business stakeholder across Asia is required.

Whats on offer
This is an excellent opportunity to join an established company with lots of opportunity to improve the security posture of the company.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gAHYjij4 (EA: 94C3609/ R1219669)

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gM7-eVHS

• Decision making for Information Security including security strategy and roadmap for APAC
• Opportunity to implement information security with strong support from business stakeholders

About the company

Our Client is a Multi billion market leader within their industry. With rapid expansion across APAC, they are now looking for a new Manager, Information Security & GRC (Governance, Risk & Compliance) to join their team

About the job

• Reporting directly to the Head of Security based out of Asia, Your responsibility involves:
• Managing a lean team of information Security Analyst across Asia
• Developing and executing information security management framework and related IT Security policies within the organizations. This includes conducting continuous assessment of IT security practices and policies to improve the security posture of the company
• Leading initiatives to assess the adequacy and effectiveness of IT controls and policies, ensuring that business users are compliant to the IS standards (ISO 27001, PDPA and etc).
• Designing and implementing an on-going Information Security training and awareness programme for different levels of personnel. This includes monitoring the level of awareness to information security risk
• Planning and implementation Information Security, IT Risk Management, IT Audit and IT policy to improve the overall security posture for the organization across Asia. This includes reviewing and maintaining information security polices.

Skills and experience required

As a successful applicant, you will have at least 8 years of experience in IT frameworks (ISO 27001, NIST or etc) / IT control / Governance, risk management, and compliance (GRC) Proven track record of managing a team is required for this role.

Candidates with experience in cloud or SAP security will be of added advantage.

Whats on offer
This is an excellent opportunity to implement information security with strong support from business stakeholders.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gM7-eVHS (EA: 94C3609/ R1219669)

Position:Security Officers

• Able to commit 4 days work 1 day off, 3 days work 1 day off schedule.
• 12 hours permanent shift
• Location: islandwide
• Salary Package: $2,650 to $3,500 (Depends on experience)

Job Description:

• Incident Response, Manage Security & Safety Systems
• Prevent unauthorised entry into the premises
• Monitor CCTV
• Patrolling and clocking
• Access control duties

Requirements:

• Secondary education

Chew Xing Shan Reg No: R22107044

The Supreme HR Advisory Pte Ltd EA No: 14C7279

WhatsApp: +65 83592812 [Shannon]