Total 7 service operations manager job vacancies in Legal / Public / Security category in Singapore

Seize the opportunity to enhance cybersecurity, utilizing your skills in threat analysis and incident response to protect vital data and systems.

As a Security Operations Senior Associate in Cybersecurity & Tech Controls, you will play an important role in safeguarding the organization's digital assets and infrastructure by proactively detecting, assessing, and responding to threats, vulnerabilities, and security incidents. Drawing on your knowledge of security principles, practices, and theories, you will collaborate with cross-functional teams to develop a coordinated approach to security and educate employees on best practices, policies, and procedures. Your work will have a direct impact on departmental outcomes, as you plan and ensure progress, identify gaps in information, and conduct analyses to solve complex cybersecurity problems. By utilizing your advanced analytical, technical, and problem-solving skills, you will contribute to the continuous improvement of our cybersecurity posture and help maintain the integrity, confidentiality, and availability of sensitive data and systems.

Job responsibilities

• Investigate anomalous network traffic pattern events

• Develop, maintain, and test DoS and web application firewall policies to protect the Firm, exercising a disciplined approach that minimizes operational risk, maximizes security posture, and ensures the effectiveness and applicability of policy rules/signatures.

• Identify, document, and mitigate risk and exposure to emerging threats identified by peer organizations, while meticulously documenting new procedures and proactively suggesting process improvements to enhance operational efficiency and effectiveness.

• Profile current and new applications and map to appropriate perimeter security policy

• Deliver Incident Response Support for DoS, DDoS, and related application attacks

• Provide activity and progress reporting to Cyber Operations management

• Be on standby or "on call" for one weekend per month, totaling 16 hours, and ensure prompt response within the agreed Service Level Agreements (SLAs).

Required qualifications, capabilities, and skills

• Bachelor’s Degree in Computer Science, Engineering, Mathematics or other related disciplines

• 3 or more years of relevant cybersecurity operations and security system operations management

• Network performance management such as troubleshooting slow server response times and network routing issues

• Web Application Firewall (WAF) administration including custom signature authoring, managing governance of signature deployment, patching, etc., signature efficacy evaluation/tuning, authoring of policy testing regimen

• Web application developer/administration including troubleshooting of web server engines (e.g. connection monitoring, resource utilization, slow response, etc.), web application stacks (e.g. connections from an application to a database server, authentication flows, etc.), elements supporting web applications such as containers, operating systems, micro-service hosting platforms, and impacts of application errors related to data validation or malformed API calls

• TCP/IP network administration / optimization / troubleshooting

• Incident response experience for inbound application attacks with experience working in a structured, formal “Security Operations Center” (SOC) environment and proficiency in identifying internet sources and distinguishing suspicious from benign.

• Demonstrate a strong understanding of key web security concepts, including the identification and mitigation of web application vulnerabilities, and implement strategies to secure web applications effectively.

Preferred qualifications, capabilities, and skills

• SIEM including complex search compilation in tools such as Splunk.

• Application development such as text manipulation/handling via scripting in Python or Java and regular expressions, creating proof of concepts to exploit zero day vulnerabilities

• Ability to create automations and develop solutions to improve team efficiency and reduce repetitive tasks, thereby optimizing workflow.

• Previous 24x7 operations experience

• 1 or more years of cybersecurity operations related experience, including threat and risk assessment documentation.

To apply for this position, please use the following URL:

https://ars2.equest.com/?response_id=9fcb0a93f2c8ef5aa70daa87bb0c42ac

Role Description

This is a full-time on-site role for a SOC Team Lead located in Singapore. As a SOC Team Lead, you will be responsible to:

• Plan monthly duty roster for site team.
• Cover shift function if there are any shift resources are absent.
• Generate report dashboarding for technical analysis.
• Proficient in Microsoft excel/Power BI.
• Will run operation and work the SOP to ensure the 24X7 Security operations support services operate effectively.
• Responsible for site monthly report and documentations submissions.
• Onboarding/off boarding of manpower resources (1 month).
• Submit monthly timesheet and monthly service report as part of billing documentation timely.
• Work with Main Contractor to ensure security devices or apps are patched and firmware versions are upgraded in accordance with IM8 requirements.

Responsibilities:

• Monitoring and analyzing security events, identifying potential threats, conducting investigations, and responding to security incidents
• Work closely with the end client SOC team to ensure the timely and effective detection, containment, and mitigation of security incidents
• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure).
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits.
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to ensure compliance and regulatory requirements and industry standards.

Requirements:

• Diploma/degree in computer studies
• 2 years of experience working in a security operation, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role.
• Independent and capable of working in a high-pressure environment.
• Willing to work in rotational shift environment (including weekends and night shift).

Overview

Mayer Brown is a leading global law firm with offices in 26 key business centres across the Americas, Asia, Europe and the Middle East. With approximately 200 lawyers in each of the world’s three largest financial centres — New York, London and Hong Kong — we are uniquely positioned to advise leading companies and financial institutions on their most complex legal needs. We have deep experience in high-stakes litigation and complex transactions across industry sectors, including our signature strength, the global financial services industry.

We are a collegial, collaborative and diverse firm where highly motivated individuals with an unwavering commitment to excellence receive the opportunity, support and development they need to grow, thrive and realise their greatest potential. We also encourage all our people to use their skills to support the wider community through our pro bono and community volunteering programmes. At Mayer Brown the principles of mutual respect, dignity and understanding are central to the way we work and help to provide an environment where diversity and inclusion are embraced.

Operating as Mayer Brown PK Wong & Nair in Singapore we have been working in a Joint Legal Venture since 1 January 2023. Singapore is one of our fastest growing offices in the region and it is an exciting time to join the firm as we transform.

Responsibilities

The Regional Security Manager (Asia) will be responsible for providing technical leadership for strategic projects and initiatives on the security roadmap, as well as participating in more general network security and architectural efforts. The person will collaborate with other managers, engineers and departments to apply and support best practices for security, server building, change management, account management, documentation, and user experience management.

Responsibilities:

• Encourage team to provide continuous feedback to one another and upper management of the Global Security team and the Chief Information Security Officer.
• Monitor and maintain the security status of the Firm’s network and the intellectual assets held, in accordance with the Firm’s security policies.
• Help the Global Information Security Manager and Global Director of Information Security/CISO as a liaison to the regional General Counsel and Risk Management.
• Perform e-discovery related matters, executing searches and producing output as required by the Firm.
• Ensure that Mayer Brown has a secure architecture for authorization and authentication internally, as well as business to business.
• Ensure that all security risks are managed, mitigated and communicated clearly and effectively.
• Ensure that objectives are achieved by working closely with all members of the IT organization and byparticipating with the Global Security Team within the security model.
• Ensure that change controls are adhered to and communicated to the partners and staff.
• Assist the Global Information Security Manager and Global Director of Information Security/CISO in leading the team past any internal and external barriers that affect the Firm’s security.
• Keep abreast of all specific security issues and communicate to the Global Manager of Information Security.
• Assist in development and maintenance of all documentation related to Global Security Team operations and functions.
• Classifying Information and Data – setting classification standards and defining security roles.
• Manage security projects and initiatives.
• Control access to the firm’s Information Systems and related security configurations.
• Secure hardware, peripherals and other equipment logically and physically.
• Develop, implement, and maintain in-house software security and hardware.
• Assist HR regarding personnel issues relating to security.
• Assist the Global Information Security Manager and Global Director of Information Security/CISO in mitigation of threats intelligence from external sources such as Government agencies, LS-ISAO community, and local law enforcement.
• Detect and respond to incidents of a security nature within the Mayer Brown environment.
• Address all Asia based tickets sent to security and assist other regions.
• Ensure monitoring and alert notifications are implemented in accordance with the business needs.
• Assist in the preparation, approval, implementation and adherence of the Information Security Policy within the firm.
• Assist in the development and authorization process of all new IT policies introduced, ensuring that the necessary security audits and tests are carried out prior to being introduced into production.
• Assist the Global Information Security Manager with client audits and questionnaires including .
• Ensure that third party providers of Mayer Brown are audited in relation to our security guidelines to protect the Firm’s data and assets.
• Regularly monitor the Firm’s compliance with the security policies and report on concerns.
• Regularly work with members of the global security team to monitor the firm’s client requirements in relation to security processes, policies, and guidelines.
• Identify and communicate to upper management the cause of all security incidents, making recommendations as to how the specific incidents can be mitigated in the future.
• Assist in ensuring that Mayer Brown’s employees appreciate the benefits of security to the organisation, themselves and their working environment.
• Review new builds periodically to verify all security standards are being met and applied.
• Ensure the IT Security site on Global Net stays updated with current material.
• Ensure whenever possible that undesirable use of IT facilities is prevented/minimised at all times.
• Perform digital forensics on technology as requested by Human Resources, Information Technology or General Counsel.
• Willing to travel 25% domestically / internationally as needed.
• Function where feasible in relation to security duties, in a variety of roles including technology expert and vendor coordinator including identifying viable technologies, gathering requirements and providing recommendations on specific solutions and firm policy modernization relating to Mobility.
• Assist the Global Information Security Manager in monitoring and controlling IT security expenses in Asia.
• Manage security vendors in relation to Asia matters.

Qualifications and Experience:

Education

• 4 year degree or relevant work experience.

Certification

• CISSP, CEH, or relevant work experience regarding security and networks.

Computer Skills

• 7 years of experience in an Information Security department.
• Excellent working knowledge of CISSP, CEH and CISM.
• Excellent knowledge of the ISO 27001 security standards.
• Good working knowledge of networking.
• Excellent knowledge of security standards.
• Ability to effectively work with and communicate with the Firm’s clients
• Good documentation experience.
• Excellent knowledge of a Microsoft Exchange email environment.
• Good knowledge of Disaster Recovery.
• Good knowledge of authentication methods.
• Technical knowledge of cloud environments such as Azure and O365.

Performance Traits:

• Must work well with others and contribute to the success of the team, communicating openly with teammates. Willingly asks questions where appropriate and guides others whenever possible.
• Personable and approachable.
• Able to work on own without direct supervision.
• Adaptable and flexible.
• Customer-service focussed.
• Excellent telephone manner.
• Ability to work under pressure and meet strict deadlines.
• Uses own initiative.
• Ability to weigh business needs against security concerns and articulate issues to customers and senior management.
• Willingness to challenge the status quo.
• Ability to be on call and respond as necessary.

The above is a general description of the essential duties associated with this position and does not represent an exhaustive or comprehensive list of all duties.

We are no accepting applications from Recruitment Agencies for this vacancy.

WHO ARE WE?

Suntory is a global leader in consumer-packaged goods, renowned for producing and distributing a uniquely diverse portfolio of beverages, premium spirits, beer, wine, and wellness products throughout the world.

With a history dating back to 1899, we are driven by a profound purpose: To inspire the brilliance of life, by creating rich experiences for people, in harmony with nature.

At Suntory Beverage and Food, we boldly move forward together to realize the dreams of becoming a world-leading next-generation global beverage company, always together with Seikatsusha – you are an important part of this and here’s how your role helps us win.

Suntory Beverage & Food International (SBFI) is step changing its digital platforms and moving to the cloud aggressively. As we transform digitally, we would like to step change our cyber security program to be more robust and consistently executed across all our markets.

You will be responsible for driving compliance to cyber security standards across all markets in Asia Pacific, Europe and the US. You will also work with the Suntory CISO in the Japan HQ to continue to evolve the company cyber security standards to meet the evolving threat landscape. The role is more technically oriented and requires strong hands-on skills on cyber security technologies and is less about governance & risk management. The role requires strong bias to action and the ability to challenge status quo and execute changes rapidly.

WHAT YOU WILL BE DOING...

• Take the lead in day-to-day monitoring for unusual activities, implement defensive protocols, and handle incidents and report
• Drive compliance to global cyber security standards incl. Understand the current state of each business unit (BU), understand gaps & barriers to adopt the standards and develop an action plan with the BU to change
• Work with external vendors to drive pen testing & red team testing to identify and rectify vulnerabilities across different markets
• Work with the global CISO’s team to improve & enhance the standards and cyber hygiene for the company
• Work with other functions to strengthen end user training and incident preparedness

ARE YOU THE ONE?

• 10+ years of experience in IT infrastructure with at least 5 years in cyber security/information security
• Deliver instant professional credibility with knowledge-based leadership, in the space of cyber security
• Hands-on technology skills on cyber security solutions e.g. EDR etc.
• Thorough understanding of core IT infrastructure including hardware, networks, data centres among others
• Thorough understanding of Identity & access management, VPNs, etc.
• Strong experience in managing large-scaled vendor partners – familiar with governance frameworks and models to manage SLAs and contracts
• Ability to operate in a fast-paced environment with comfort
• Calm under pressure especially during crisis management situations
• Excellent Thinking & problem-solving skills
• Entrepreneurial & able to operate without rigid organization structures.
• Excellent collaborator and communicator to be able to bridge across multiple diverse BUs with good multi-cultural awareness
• Strong influencing skills and management of senior stake holders in multiple functions

A renowned Energy and utility solutions firm is looking for a Senior Manager, Security Governance in Singapore. The incumbent will be responsible for aligning the standards and excellence of security policies across all operational facilities/sites. This role will be parked under the HSSE Division (Group Health, Safety, Security and Environment).

Responsibilities:

• Develop and maintain group-level asset security across all regional sites
• Oversee data security and governance
• Provide guidance and support to all sites to ensur operational excellance in security practices which includes Security Strategy, Incident Response and Investigation, Security Training, and Group Reporting etc.
• Conduct regular assessments and audits to identify areas for improvement and ensure compliance with security standards.
• Handle projects to build policies on risk impact, buildings, properties and facilities.

Requirements:

• Bachelor's Degree in Security Management or any relevant disciplines
• 10+ years of experience in security policies and governance
• Familiar with regional and group-level operational security exellence
• Experienced in security asessment and audits
• Strong communication and interpersonal skills
• Individual contributor position
• 1-2 monthly travels per month
• Full onsite arrangement

If you are interested, please apply with your updated CV. Only shortlisted candidates will be contacted.

Job Description

• Industry/ Organization Type: Manufacturing/Electronic Components and Boards
• Position Title: IT Security Manager (Regional)
• Working Location: Bedok (Company pick-up provided at Bedok MRT)
• Working Hours: 5 Days, Mon – Fri (8:15 am – 5:15 pm)
• Salary: Basic up to $12,000 + Variable Bonus
• Duration: Permanent

Key Responsibilities

• Analyze and prioritize vulnerabilities based on severity, potential impact, and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention, and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques, and incident response strategies.

APPLY NOW!!!

• Bachelor’s Degree in Computer Science, IT, or equivalent experience.
• Has 5+ years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Professional information security certification preferred (e.g. CompTIA Security+, CISSP, CISA, CISM).

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job(at)anradus.com.sg. Kindly indicate #67372 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it’s likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

The Job:

• Network security management
• Web security management
• End point security management
• Messaging security management
• Security & vulnerability management
• Automation of management tasks

What You’ll Need:

• Degree/Diploma in Computer-related disciplines
• At least 5 years of experience that covers management of enterprise security solution

Interested applicants can send their detailed resumes to [email protected]or call JANE @ 6735 1955.

JANE LUI JIE'EN

CEI: R1104482

Company Reg. No. 199601303W || EA Licence No. 99C4599