Total 16 service operations manager job vacancies in Legal / Public / Security category in Changi, South East

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;

Strong knowledge of ISO 27001:2022 standards and requirements;

Experience in developing and maintaining comprehensive project plans, including timelines and milestones;

Experience in managing ISO 27001-related risks and conducting internal/external audits;

Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;

PMP, CISSP, CISM, or similar certifications are a plus;

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE's website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

Position Overview

The IT Security Operations Analyst role’s is to safeguard the organization’s IT systems and data. This role requires the candidate's active participation in the implementation of security policies and procedures, the monitoring and analysis of security events and the maintenance of security tools. Other responsibilities are to identify, investigate and resolve any security threats, vulnerabilities and incidents. The candidate must keep up to date with the latest security trends, have excellent communication and problem-solving skills and have a deep understanding of security principles and technologies. The individual will have a functional role in mentoring other team members and share the off-hour support responsibilities.

Responsibilities

1. Monitor, maintain, and analyze network and computers for unusual activity or suspicious behavior by reviewing information security logs.
2. Manage and resolve security Level 2 support tickets per defined SLAs
3. Investigate and analyze security incidents to determine root cause and impact.
4. Report compliance failures to management for immediate remediation.
5. Responsible for the effective management of the organization’s Crowdstrike Falcon Admin Console.

• Deploy Crowdstrike Falcon EDR detection agent on all corporate devices.
• Ensure coverage of malware detection for all managed EDR Agent capable devices.
• Migrate existing server agents from alert-only mode to blocking mode.
• Provide EDR escalation support for agents already installed

1. Assist and collaborate with the Information Security Group and coordinate with IT Infrastructure on the following:

• IT Threats and Vulnerabilities Assessments, Protection, and Remediation
• IT security patch management follow-up and reporting
• Firewall rule documentation, review, and approval
• Promote within IT Infrastructure the proper Security controls aligned with the IT Security Program
• Validate and maintain operational security documentation.

1. Continuously assess the current Security Posture and provide recommendations for remediation and prevention of security incidents.
2. Collaborate with cross-functional teams to implement security solutions and technologies.
3. Stay up to date with industry trends and emerging security threats to proactively address potential risks.
4. Assist in the deployment of new security systems.
5. Participate in security audits and assessments to ensure compliance with regulations and standards.
6. Understand the dark and deep web ecosystem.
7. Manage and support the following applications:

• Palo Alto/Firewall
• Network security (Micro-segmentation)

1. Perform other duties as required

Qualifications and Experience

• Bachelor’s degree in Cybersecurity Engineering or Computer Sciences
• Strong professional experience in information security with a focus on security operations and technical support
• Strong Experience with Palo Alto and Crowdstrike platform
• Experience with VPN, SSL and other encryption technologies
• Good knowledge of server, workstation, and Active Directory technologies that impact security controls
• Deep understanding of TCP/IP, DNS and common network services
• Experience with security frameworks and compliance requirements such as GDPR, ISO 27001, NIST 800 and PCI DSS.

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s Degree in Computer Science/Information Technology or equivalent.
• At least 5 years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:

- CompTIA Security+

- Certified Information Systems Security Professional (CISSP)

- Certified Information Systems Auditor (CISA)

- Certified Information Security Manager (CISM)

About the role

The Legal division is made up of team members from Legal, Corporate Security, Compliance, Risk Management & Insurance, Privacy and Corporate Secretarial (“Legal”). The Group General Counsel (“GGC”) is the Head of Legal numbering more than 50 employees comprising legal counsels and respective teams based in Singapore and globally.

Reporting into the Group General Counsel, the duties include supporting the legal department technological tools including its Teams instances, litigation reporting tool (“Mitigate”), contractual risk management tool (“sAIgon”), corporate secretarial administrative support including management of Viewpoint.

Key responsibilities

Legal Department Operations Administrator

• Assist the Group General Counsel and Group Company Secretary and full legal team by managing team technology implementation.
• Administer and maintain databases of legal documents
• Office management support work include document management and procurement follow up with vendors.
• To maintain records and files (online and hard copy filing systems) in a systematic manner for easy access and retrieval using technology management
• To support and drive assignments / initiatives / projects related to compliance or legal matters as and when required.
• Assist GGC’s executive assistant in arranging meetings, seminars, trainings and events in support of technology initiatives.
• Assist with the preparation and formatting of presentations, reports, and communications materials.
• Support on legal and compliance reporting and documentation for the team.
• Liaise with other company departments, overseas counterparts, and external parties where necessary
• Ensure corporate messages are reiterated within the legal team
• Maintain and update Legal Department Teams instances and ensure efficient utilization and training of legal team.
• Maintain Mitigate and ensure efficient utilization by legal team including training.
• Maintain sAIgon and ensure efficient utilization by legal team including training.

Corporate Secretarial

• Prepare and coordinate with corporate secretarial team on documents for signing in original and despatch which includes ensuring that documents are in order and signers’ availability, or via electronic signing eg via DocuSign and collation of signed documents for statutory and other records
• Manage notarization and legalization requirements for corporate documentation including to communicate with the notary and courier despatch to arrange documents in good order for use in various countries
• Arrange translation and other administrative requirements upon team request
• Support accurate filing of physical corporate statutory records as applicable and accurate upload of statutory records with clear naming convention to corporate secretarial records online library
• Assist corporate secretarial team to update corporate information in software database and retrieval of corporate information or reports upon request from the corporate secretarial team or Legal team members
• Provide strong administrative support to Group Company Secretary including to communicate with the corporate secretarial team to provide organisation changes updates to circulate quarterly organisation charts and to draft customised chart extracts and related documents, entities’ list of addresses and all assigned jobs
• Support administration of Corp pass authorisation system to manage digital service access of employees for various functions to perform corporate transactions for Singapore companies. [there are more than 200 government digital services available at current time]
• Assist with basic provision of corporate information to Legal team to meet their requirements
• Assist on corporate secretarial actions for projects such as printing and binding of project bibles and upload to corporate secretarial records online library

About you

• Minimum 3 years relevant working experience with prior project management skills
• Good administrative and organizational skills
• Collaborative, proactive and resourceful
• Demonstrates the ability to multi-task and problem-solving skills
• Possess strong interpersonal and communication skills

Job Objectives:

Tasked with aiding the Security Manager in safeguarding properties and ensuring the well-being of guests, employees, and the hotel. Supervise all activities of security staff to ensure compliance and proper application of department regulations and hotel policies. Documents all action in the department, including: emergencies, loss, theft, or accident.

Primary Responsibilities

• Manages the Security Department, alongside with Security Manager.
• Oversees the security department and their day to day operations.
• Trains all security personnel in their areas of responsibilities.
• Reviews policies, procedures, and instructions on a regular basis.
• Evaluates possible hazards or threats to security.
• Promotes a safety attitude amongst all employees.
• Ensures safety of persons in the hotel and property assets.
• Reports irregularity in employee or guest behavior.
• Handles loss, damage and accidents.
• Handles, documents, and follows up with necessary persons any accidents occurring in the hotel premises.
• Investigates theft as reported by guest or employee.
• Documents all action in the department, including: emergencies, loss, theft, or accident.
• Participates in weekly department heads meeting in absence of Security Manager - Rooms Division Meeting and any others if requested.
• Secondary liaison for interacting with government officials, ministries, and law enforcement agencies.
• Reviews emergency procedures regularly.
• Delivers security training and promotes awareness within the hotel.
• Performs other duties as assigned by Security Manager.

Job Requirements

• Minimum education of High Vocational diploma in any discipline. Bachelor degree holder have an advantage.
• At least 3 years’ experience in a similar position in security & safety operations.
• Basic knowledge of local laws, investigative methods and fire safety.
• Criminal-free record
• Have good English communication skills both in written and spoken
• Possess professional disposition with good communication and interpersonal skills

The successful candidate will be either:

• a specialist personal data privacy lawyer; or
• a general corporate or commercial litigation lawyer with data privacy law experience or qualifications, e.g. Certified Information Privacy Professional qualifications.

The successful candidate will undertake legal and regulatory compliance work for the Singapore Airlines Limited (“SIA”) group of companies, especially with respect to the Singapore Personal Data Protection Act and global privacy laws.

As part of the Legal, Compliance & Secretariat Department (“LCS”) in the Corporate Planning Division of SIA, the successful candidate’s responsibilities will include the following:
Personal Data Protection Work

• Advise business units on personal data protection matters (including legal risks and/or implications of business decisions), and offer appropriate solutions, if possible;
• Draft, review and negotiate personal data protection clauses, data processing agreements/templates, privacy notices, etc;
• Work with business units to evaluate, implement and monitor internal personal data protection compliance policies, procedures, controls and/or remediation measures, as may be needed from time to time;
• Prepare personal data protection compliance reports periodically;
• Provide personal data protection training to relevant employees; and
• Promote and update the personal data protection compliance programme periodically.

Legal Work

• Draft, review and negotiate agreements and other legal documentation to support commercial transactions; and
• Provide legal advice.

Requirements

The candidate should have:

• a law degree from a reputable university in Singapore or a Commonwealth jurisdiction,
• at least three (3) years of legal experience and/or personal data protection law experience gained in a reputable law firm or in-house, and
• excellent contract drafting skills.
• Experience in the following areas is an added advantage:
• 1. cybersecurity,
• 2. cross-border transactional experience, and/or
• 3. intellectual property.
• Admission to the Singapore Bar is not required.
• The candidate should be able to:
• 1. work independently and as a team player, and
• 2. communicate with people effectively in a dynamic environment in SIA and its unlisted subsidiaries.

The successful candidate should have a positive attitude to learn with an enthusiasm to excel.

We thank all candidates for your interest in Singapore Airlines, and regret that only shortlisted candidates will be notified.

VP - ICT Security Operations Analyst

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and, in our clients’, best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do. We keep the bank safe and provide the technical tools our workers need to be successful. We design our digital architecture and ensure our platforms provide a first-class customer experience. Our operations teams manage risk, resources, and program management. We focus on enterprise resiliency and business continuity. We develop, coordinate, and execute strategic operational plans. Essentially, Enterprise Operations & Technology re-engineers client and partner processes to deliver excellence through secure, reliable, and controlled services.

Trust is part of our DNA at Citi. As such, we take safeguarding our customer data very seriously. The Chief Information Security Office (CISO) is made up of deeply dedicated and talented colleagues who work together to ensure the safety of Citi’s and our clients’ assets and information. We manage information security as an end-to-end program – one with a clear mandate and accountability. Our mission is to continually execute and enhance a global security program that is fully anchored to modern control and security frameworks, fully aligned with the technology of the firm, threat-focused and data-driven, and deeply integrated across all Citi businesses globally.

Being talent-driven, we are focused on attracting, developing, and retaining diverse and inclusive talent with a high technical skill level. As a member of our team we will provide you with career development opportunities at all stages of your career. Our employees model a passion for protecting Citi and our clients and believe in treating others with dignity and respect.

The Chief Information Security Office (CISO) is home to deeply talented colleagues that work to ensure the safety of Citi's clients' and our proprietary data. We manage information security as one end-to-end program – one with a clear mandate and accountability. Our mission is a program that is fully anchored to modern control and architectural frameworks, is fully aligned with the enterprise architecture of the firm and is deeply integrated into the sectors and functions.

CISO’s Cyber Security Engineering and Architecture is responsible for delivering integrated risk reduction capabilities and services aligned to the architectural goals and priorities associated with leading ‘Change the Bank’ (CTB) and ‘Run the Bank’ (RTB) initiatives. This role entails leading and coordinating the execution of SASE Services, across the network security domain. The successful candidate will have demonstrated success and be highly adept at: leading global programs and engineering change efforts; managing risk and execution of global programs by aligning resources and tactical/strategic decisions; and driving transformation across a complex enterprise to support cybersecurity goals. The candidate needs to have the ability to work on defining highly scalable and integrated security architectures, and influence roadmaps across a variety of product portfolios. The candidate needs to have the ability to define and drive interoperability with security components of a complex end to end network and cloud security ecosystem, focusing on client experience. Strong experience across cybersecurity, Technology Infrastructure, large enterprises will assist in delivering aspects of this service.

Our commitment to diversity includes a workforce that represents the clients we serve globally from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.

Responsibilities:

• Working with Transformation Program Directors, Senior Architects, Steering Committees, CISO and CTI partners in delivering the transformational Programs related to SASE. Onboarding of users on Zscalar and ensuring smooth transition.
• Troubleshooting issues and work on finding RCA.
• Zscaler Internet Access design and migration methods from legacy Internet Access solutions to SASE based architecture.
• Interface and support Citi’s Security Architecture Council and Working Groups building strong rapport across teams.
• Firewall rules Management (creation/ modification/ deletion) by following Change management process and via automation.
• Participate in migration activities and provide troubleshooting support from Infrastructure defense standpoint. Identify issues, provide support for isolating problems, finding RCA.
• Willing to work on weekends for migration activities off business hours.
• Completing additional tasks in connection with the role but not detailed in the current job description, charged by the direct manager, supervisor, or the functional head.

Qualifications:

• 8-12 years of extensive Security Experience with Checkpoint Firewalls, Juniper Networks Firewalls, Palo Alto Network Firewalls, Bluecoat Proxy, IPS/IDS, Illumio, Crowdstrike and EDR tools.
• Extensive knowledge on SASE Zscalar user onboarding and operational support experience.
• Strong troubleshooting skills over the Firewalls, Proxy and network infrastructure.
• Extensive Data Networking knowledge and an understanding of network security standards such as Firewall Rules, Security Zones, Multicast Data Feeds, Ultra Low Latency Network Architectures & Platforms.
• Hands-on experience in Zscaler Internet Access, Zscaler Private Access and Zscaler Digital Experience
• Proven influencing and relationship management skills.
• Exhibiting a high degree of flexibility and ability to multi-task, seeking guidance where necessary
• Strong communication skills, including verbal and written skills.
• Ability to work as part of a team with remote colleagues in other countries.
• Strong knowledge of Proxy functionality and Proxy features
• Consistently demonstrates clear and concise written and oral communication as well as strong presentation skills to both technical and non-technical audiences.
• Advanced analytical and problem-solving skills
• Demonstrated ability to take ownership and work with cross functional teams to manage multiple projects simultaneously under pressure.
• Thorough understanding of industry and corporate technology standards for Cyber Security services

Critical Competencies:

• Firewalls, Proxy and network infrastructure
• Zscaler Internet Access, Zscaler Private Access

Senior Manager, Or Manager - Cyber Security & IT Governance

Responsible for the assessment, development, implementation and maintenance of enterprise-wide cyber security and IT Governance programmes to preserve the confidentiality, integrity, and availability of information resources. As part of the IT leadership team, this individual will be expected to provide technical leadership and consultation across the organisation. S/he will also work with external experts to implement security solutions, detect, and contain cyber security incidents.

Responsibilities

Cyber Security:

Assess and review environment and cybersecurity measures to ensure security and operational effectiveness, for e.g. network, system, application, endpoint security, physical and logical access security, etc.

Review and develop security framework, information security policies, processes, procedures, and guidelines.

Conduct cybersecurity risk assessments, penetration tests, and IT controls tests.

Identify security gaps and propose mitigating measures and escalate security incidents and non-compliances on a timely basis.

Evaluate, deploy, and maintain cybersecurity infrastructure to improve cybersecurity posture. Design, implement and maintain security incident response and escalation procedures.

Monitor, analyze and correlate events to determine the best course of action, to mitigate and contain threats when detected.

improve cybersecurity awareness of staff, for e.g. by conducting awareness training. Automate security controls, data, and processes.

IT Governance:

Review and enhance IT policies, standards, guidelines, and best practices regularly to ensure that these are aligned to organization objectives and industry best practices.

Develop and implement effective change management plans (such as communication plans and training programs) to drive adoption and compliance.

Participate in audit planning meetings with internal/external auditors, collate/provide the required materials on a timely basis, validate audit findings, provide remediation solutions, and implement the agreed solutions on a timely basis.

Drive security access and activity log reviews on regular basis.

Promote IT risk management, governance, and compliance culture across the organization.

IT Management:

Contribute to IT strategic planning and budgeting. Ensure IT vendors meet contractual obligations.

Maintain up-to-date knowledge on cybersecurity technologies and standards.

Attend to any other reasonable duties as assigned by Director, Information Technology.

Requirements

Degree in engineering, science or information technology, or equivalent education.

8-10 years of related work experience in cybersecurity management and security governance.

Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.

Strong understanding of cybersecurity standards.

Hands-on experience with cybersecurity tools such as Next Generation Firewalls, SASE, Endpoint Protection, Data Loss Protection, Email Security, etc.

To apply:

Please email Resume in Microsoft Word format

Please state your Position/ positions applied on the “on TOP” of your resume.

Please state Available Commencement Date or notice period

Please state current and last SALARY and Expected Salary in your resume.

Please state Reasons for leaving current & previous Employment.

Job Objectives:

Tasked with aiding the Security Manager in safeguarding properties and ensuring the well-being of guests, employees, and the hotel. Supervise all activities of security staff to ensure compliance and proper application of department regulations and hotel policies. Documents all action in the department, including: emergencies, loss, theft, or accident.

Primary Responsibilities

• Manages the Security Department, alongside with Security Manager.
• Oversees the security department and their day to day operations.
• Trains all security personnel in their areas of responsibilities.
• Reviews policies, procedures, and instructions on a regular basis.
• Evaluates possible hazards or threats to security.
• Promotes a safety attitude amongst all employees.
• Ensures safety of persons in the hotel and property assets.
• Reports irregularity in employee or guest behavior.
• Handles loss, damage and accidents.
• Handles, documents, and follows up with necessary persons any accidents occurring in the hotel premises.
• Investigates theft as reported by guest or employee.
• Documents all action in the department, including: emergencies, loss, theft, or accident.
• Participates in weekly department heads meeting in absence of Security Manager - Rooms Division Meeting and any others if requested.
• Secondary liaison for interacting with government officials, ministries, and law enforcement agencies.
• Reviews emergency procedures regularly.
• Delivers security training and promotes awareness within the hotel.
• Performs other duties as assigned by Security Manager.

Job Requirements

• Minimum education of High Vocational diploma in any discipline. Bachelor degree holder have an advantage.
• At least 3 years’ experience in a similar position in security & safety operations.
• Basic knowledge of local laws, investigative methods and fire safety.
• Criminal-free record
• Have good English communication skills both in written and spoken
• Possess professional disposition with good communication and interpersonal skills

The Legal Manager will be based in Singapore and responsible for providing legal support for a variety of issues in customer contract negotiations, researching and enabling the launch of new products and services as well as regulatory and trade compliance support. The incumbent will be reporting to the Legal Director, Asia Pacific. He/she is expected to take on a broad and interesting range of legal matters and thus, a strong foundation in either a local or international law firm will be looked upon favorably.

Roles & Responsibilities:

• Reviewing and providing legal support for customer contracts throughout the Asia Pacific region
• Resolving disputes arising from customer contracts
• Advising on international trade and regulatory compliance matters
• Conducting legal research to enable the launch of new products and services
• Drafting and review legal commercial contracts and document
• Supervising outside law firms used by UPS
• Supervising junior Legal Department staff

Job Requirements:

• Possess a recognized Law Degree i.e. LLM or JD
• Minimum 4 years of relevant legal experience in law firm and/or in corporate legal department
• Candidates who possess relevant experience without Asia Pacific exposure will be considered as well.
• Possess advanced drafting skills in corporate and/or litigation matters.
• Ability to manage projects independently within minimal supervision in matrix company organization.
• Possess good planning, organizational and time management skills.
• Excellent communication and interpersonal skills and able to interact with different levels of people.
• Matured personality with strong professionalism and long-term view towards career development
• Fluent in English and preferably one other Asian language i.e. Mandarin, Japanese, Korean or etc.
• Business traveling opportunities will be available.

InfoCepts stands as a global leader in comprehensive data and analytics solutions, boasting nearly two decades of expertise. Recognized as Gartner's Customers' Choice for Data & Analytics providers in 2020, 2021, and 2022, we've sustained impressive year-over-year growth, now employing over 1,000 professionals globally. Committed to our mission since our inception in 2004, we aim to assist our clients in staying modern, enabling informed, data-driven decisions.

As part of our expansion, we seek dedicated professionals who share our passion for leveraging data's transformative power to contribute to a better world.

We are seeking a highly skilled and experienced IT Security and Infrastructure Manager to join our team. The ideal candidate will have a minimum of three (3) years of proven work experience in the IT security field, with a focus on enterprise systems, network, and cloud infrastructure.

• Develop and implement comprehensive IT security policies, procedures, and protocols to protect the organization's information assets and infrastructure.
• Manage and oversee the organization's network infrastructure, including routers, switches, firewalls, and VPNs, ensuring optimal performance, reliability, and security.
• Lead efforts to assess and mitigate cybersecurity risks, vulnerabilities, and threats across the organization's IT infrastructure.
• Collaborate with internal teams to design, implement, and maintain secure and resilient cloud-based systems and services.
• Conduct regular security audits, vulnerability assessments, and penetration testing to identify and address security weaknesses and gaps.
• Monitor and analyze security logs and alerts to detect and respond to security incidents and breaches in a timely manner.
• Stay up-to-date with the latest trends, technologies, and best practices in IT security and infrastructure management.
• Provide guidance, training, and support to IT staff and end-users on security best practices and compliance requirements.
• Prepare and present reports, metrics, and recommendations to senior management on the organization's security posture and risk exposure.
• Liaise with external vendors, partners, and regulatory agencies on security-related matters as needed.

Requirements:

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Minimum of three (3) years of progressive experience in the IT security field, with a focus on enterprise systems, network, and cloud infrastructure.
• Professional certifications such as CISSP, CISM, or CCSP are highly desirable.
• In-depth knowledge of cybersecurity principles, practices, technologies, and frameworks.
• Hands-on experience with network security, firewalls, intrusion detection/prevention systems (IDS/IPS), and endpoint security solutions.
• Proficiency in cloud security concepts and technologies, including identity and access management (IAM), encryption, and security monitoring.
• Strong analytical and problem-solving skills, with the ability to assess complex security issues and develop effective solutions.
• Excellent communication and interpersonal skills, with the ability to effectively communicate technical information to non-technical stakeholders.
• Ability to work independently and collaboratively in a fast-paced, dynamic environment.
• Demonstrated leadership and project management skills, with the ability to prioritize tasks, meet deadlines, and deliver results.

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s Degree in Computer Science/Information Technology or equivalent.
• 5+ years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:

- CompTIA Security+

- Certified Information Systems Security Professional (CISSP)

- Certified Information Systems Auditor (CISA)

- Certified Information Security Manager (CISM)

Job Objectives:

Oversees the daily operations of the Security Department. Train all security personnel in their areas of responsibilities. Supervise all activities of security staff to ensure compliance and proper application of department regulations and hotel policy. Handles, documents, and follows up with necessary persons regarding any accidents occurring in the hotel premises. Documents all action in the department, including but not limited to: emergencies, loss, theft, or accident.

Primary Responsibilites

• Manages the Security Department.
• Advises on management of security matters.
• Trains all security personnel in their areas of responsibilities.
• Supervises all activities of security staff to ensure compliance with and proper application of department regulations and hotel policy.
• Reviews policies, procedures, and instructions on a regular basis.
• Evaluates possible hazards or threats to security.
• Promotes a safety attitude amongst all employees.
• Ensures safety of persons in the hotel and property assets.
• Reports irregularity in employee or guest behavior.
• Handles loss, damage and accidents.
• Handles, documents, and follows up with necessary persons any accidents occurring in the hotel premises.
• Investigates theft as reported by guest or employee.
• Documents all action in the department, including: emergencies, loss, theft, or accident.
• Participates in weekly department heads meeting. Rooms Division Meeting and any other if requested.
• Coordinates emergencies with local authorities. Maintains good relations.
• Reviews emergency procedures regularly.
• Performs other duties as assigned by management.

Job Requirements

• Minimum education of Bachelor degree in Social Science or relevant discipline.
• At least 5 years’ experience in similar position in security & safety management. Loss prevention experience will be advantageous.
• Strong knowledge of local laws, investigative methods and fire safety.
• Criminal-free record.
• Have good English communication skills both written and spoken.
• Possess professional disposition with excellent communication and interpersonal skills.

Are you passionate about building great products? Do you want to redefine the way travellers explore the world? Keen to be part of this growth journey with a bunch of amazing people? Then Pelago is the place for you!

We are looking for ambitious and motivated talents who are excited about staying on the cutting edge of Technology and always keen on innovating new ways to drive growth and taking our startup to new heights.

WHO ARE WE?

Pelago is a travel experiences platform created by Singapore Airlines Group. Think of us as a travel magazine that you can book - highly curated, visually inspiring, with the trust and quality of Singapore Airlines. We connect you with global, local cultures and ideas so you can expand your life.

We are a team of diverse, passionate, empowered, inclusive, authentic and open individuals who share the same values and strive towards a common goal!

WHAT CAN WE OFFER YOU?

- A unique opportunity to take end-to-end ownership of your workstream to deliver real value to users.

- Platforms to solve real user problems concerning travel planning & booking with innovative products/services.

- An amazing peer group to work with, and the ability to learn from the similarly great minds around you.

- An opportunity to be an integral part of shaping the company’s growth and culture with a diverse, fun, and dynamic environment with teammates from different parts of the world.

- Competitive compensation and benefits - including work flexibility, insurance, unlimited annual leave, remote working and more!

WHAT YOU WILL BE DOING?

We are seeking a highly skilled and experienced Senior Security Operations (SecOps) to join our team. The ideal candidate will have a robust foundation in information security, a comprehensive understanding of cyber threats, and a genuine commitment to implementing robust security measures. This role will involve formulating, executing, and upholding security solutions to protect our company's information systems and data across a global shipping environment.

Key Responsibilities:

Security Infrastructure Design and Implementation:

- Design, deploy, and maintain security infrastructure, including firewalls, intrusion detection/prevention systems, VPNs, and other security tools.

- Collaborate with 3rd party solution vendors, system architects, and developers to ensure security is an integral part of the system design and development process.

Security Policy Development and Compliance:

- Develop and enforce company security policies and procedures to ensure compliance with industry rules, regulations, and company requirements.

- Stay abreast of industry best practices and emerging threats to continually improve security policies.

- Handle audits and collaborate with auditors to ensure compliance with regulatory requirements.

Monitoring, Analysis, and Incident Response:

- Oversee day-to-day operations of security tools to monitor and analyze security events.

- Respond to and investigate alerts generated by security monitoring systems.

- Develop and implement incident response plans to effectively address and mitigate security incidents.

- Investigate security incidents, analyze root causes, and recommend corrective actions to prevent future occurrences.

- Perform e-discovery and forensic analysis on internal and digital threats or incidents.

Risk Assessment, Vulnerability Assessment, and Penetration Testing:

- Identify and assess potential risks and vulnerabilities in the organisation's systems, networks, and applications.

- Conduct regular vulnerability assessments and penetration tests to identify and address security weaknesses.

- Work with development and operations teams to remediate identified vulnerabilities.

Vendor Management and Collaboration:

- Collaborate with third-party vendors to analyse reports and address security issues promptly.

- Communicate effectively with vendors to ensure timely resolution of security concerns.

Security Awareness, Training, and Collaboration:

- Design and deliver security awareness training programs for staff to promote a culture of cybersecurity awareness.

- Provide guidance to staff on security best practices and their role in maintaining a secure environment.

- Collaborate with cross-functional teams to integrate security into all aspects of the business.

- Communicate security risks and recommendations to stakeholders.

Documentation, Reporting, and Compliance:

- Maintain accurate records of security measures, incidents, and responses.

- Provide regular reports to management on the state of cybersecurity within the organisation.

- Fulfil compliance and audit requirements.

WHAT EXPERTISE YOU WILL NEED TO HAVE?

- Bachelor’s Degree in Computer Science, Information Security, or related field.

- Advanced degree or relevant certifications (e.g., CISSP, CISM, CEH) are a plus.

- 3+ years of proven experience in cybersecurity engineering or related roles.

- In-depth knowledge of security concepts, protocols, best practices, and technologies.

- Strong understanding of networking, operating systems, and cloud environments.

- Experience with security tools such as AWS security architecture, cloud systems, firewalls, antivirus, IDS/IPS, SIEM, and endpoint protection.

- Excellent problem-solving and communication skills.

- If you possess the qualifications and experience required for this role and are passionate about cybersecurity, we encourage you to apply and be a part of our team.

If you’re as excited as we are in this journey, do apply directly with a copy of your full resume and portfolio (if any). We'll reach out to you as soon as we can!

Responsibilities:

· Responsible on developing and executing end-to-end public relations activities/engagement

· Strategize, develop and implement a sound Public Affairs strategy in order to project a transparent, localized and trust image to internal and external stakeholders

· Responsible on Govt and relevant communications and stakeholder engagement activities including customers PR dept, Industry and trade analysts, telecom regulators, academics, etc.

· Responsible on brand-related materials and contents targeted for internal and external stakeholders

· Crisis management

· Act as external spokesperson, when appropriate

Requirements:

· Relevant Degree with at least 8 years relevant experience in a Govt/ trade association role/Agency

· Highly hands-on individual and a creative and innovative thinker

· Good Strategic and structured thinking with interpersonal skills

· Hands on experience in Program and event management

· Excellent communication & written skills in both English & Chinese (in order to liaise with Chinese speaking customer)

· Is a self-starter; possess confidence and excellent communication skills in order to interact with people of all levels across different markets within the region

· Skilled in market research, and self-driven spirit

Working closely but not limited to with our Gateway (Airport) team, SATS, Airport Police Department (APD), HSSE Committee & Facilities Department, the Security Manager will assist with supply chain policy (express distribution), project management, audit, and APD compliance, as well as ensuring proper support is provided to internal partners working on security related projects.

Work location: 80/20 reporting to Gateway (airport) and in HQ in Changi. However can be deployed in any of our SF warehouses and offices island wide as needed.

Responsibilities

• Assess and develop overall mitigation strategies across the company to minimize the impact of relevant incidents.
• Research industry best practices, emerging security technologies and relevant regulations, and perform industry benchmarking and gap analyses.
• Develop and implement internal security risk management programs (e.g. comprehensive audit loggings, insider threat detections, privileged access management & governance), procedures, and controls to prevent, detect, and respond to relevant incidents.
• Develop an effective Knowledge Management System so that security policies and standard operating procedures (SOP) are in place, review regularly to update compliance requirements.
• Develop and implement security strategies, security plans, security policies, security procedures, security measures, and security systems to protect the company assets, personnel and information.
• Oversee the day-to-day security operations, including physical security measures, the high availability state of security devices (ie, access control system, surveillance systems, APD-approved X-ray machine, APD-approved Explosive Trace Detector, APD-approved Walk-Through Meral Detector and APD-approved Handheld Metal Detector) and readiness of our own staff & ground security officers (in-house and contractual).
• Operate insider threat detection programs and manage business stakeholders to design programs based on business understanding and risk scenarios.
• Work with stakeholders & relevant departments to ensure that all aspects of internal security risk are addressed.
• Plan and lead in the investigation of critical equipment failure, security breaches, loss of cargo or company assets where criminal activities are suspected including reporting to management and rectification of lapses. Assist in incident investigation as needed, follow up and case closure.
• Plan, lead and perform security risk assessment; Identify and assess potential information security risks posed within the organization and the existing policies/procedures/controls mitigating such risks.
• Develop and maintain relationships with internal and external partners to stay current on industry best practices related to information security risk management, making recommendations for action for senior management.
• Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions.
• Plan and lead in security audits, security test and security inspection and preparation of audit/test/inspection findings for management reporting, and to propose action plans.
• Oversee, plan and executes emergency response, crisis management/operations readiness plan relating to ensure the Security Posture of the organisation.
• Act as Liaison Officer between the company with the Airport Police, law enforcement and government agencies.
• Work with the Executive, Facilities & Procurement in ensuring all security equipment and devices are in good working condition and serviced punctually in accordance to the maintenance schedule.
• Work with Facilities & Procurement in the procurement of outsourced security personnel.
• Attend and participate in the monthly HSSE meeting and inspection
• Conduct Security training and toolbox meeting
• Consolidating the Security statistics together with HSSE committee
• Develop Security training material (PowerPoint slides or video)

Requirements

• Bachelor's degree in a relevant field, such as security, risk management; work-related experience is also welcomed, highly advantageous if from Logistics / Supply Chain / Express Distribution / Warehouse experience.
• At least 3 years of experience in a similar role, with a proven track record of managing internal security risk and consultancy experience is preferred.
• Experience developing and implementing internal security risk management policies, procedures, and controls. Knowledge of risk assessment methodologies and tools.
• Calm and composed personality, a strong inclination towards learning, and a team-oriented mindset.
• Team builder, strong written/verbal communication, and excellent teamwork skills with the ability to interact effectively with stakeholders at all levels of the organization, strong analytical and problem-solving skills.
• Self-driven and results-oriented, enjoys challenging tasks, demonstrates enthusiasm for work, and can handle job pressures.
• Detail-oriented, Organized with strong compliance sense.
• Able to multi-task, able to work with minimal supervision (proactive, self-starter)
• Good interpersonal and communication skills.
• Good command in written and spoken English and Chinese as to communicate effectively with our China counterpart and Chinese-speaking customer.
• Good presentation skills and can lead & manage meetings.
• Proficiency in MS office: Word, PowerPoint; Especially in Excel and Visio including Chinese word processing.