Total 64 software architect job vacancies in Legal / Public / Security category in Singapore

Do you have the passion for helping customers and partners design and create robust security architectures to address their enterprise risk management requirements using cloud computing? Do you enjoy helping customers become more secure across their workloads and assisting them meet compliance accreditation? Would you like to do this using the world’s most advanced cloud computing technologies? Are you one of those rare technologists with the communications, consultative, and leadership skills to help guide major projects to success? The AWS Solutions Architecture team is hiring! Come join the team as an ASEAN Public Sector Solutions Architect – Security, within Amazon Web Services (AWS) Public Sector ASEAN team based in Singapore.

Sales, Marketing and Global Services (SMGS)
AWS Sales, Marketing, and Global Services (SMGS) is responsible for driving revenue, adoption, and growth from the largest and fastest growing small- and mid-market accounts to enterprise-level customers including public sector. The AWS Global Support team interacts with leading companies and believes that world-class support is critical to customer success. AWS Support also partners with a global list of customers that are building mission-critical applications on top of AWS services.

#aws-ags-asean

Key job responsibilities
In this role, you will deliver architecture guidance, lead proof-of-concept projects and conduct customer workshops. You will also drive collaboration with customers and partners to address security as well as compliance challenges. Your broad responsibilities will include: owning the technical engagement and ultimate success around specific implementation projects, working cross-organizationally to facilitate widespread use and adoption of the AWS platform, and developing a deep expertise in the AWS technologies as well as broad know-how around how applications and services are constructed using the AWS platform.

About the team
Diverse Experiences
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why AWS
Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.

Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud.

Inclusive Team Culture
Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness.

Mentorship and Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.

Basic qualifications

• 5+ years of Security and Compliance experience – must have strong experience and understanding of customer security/compliance requirements.
• 10+ years of experience in any other following or related to Technology Architect, Consultant, Cloud Architect, Technical Lead, Software Developers, Engineering Lead, Sales Engineer, Pre Sales Engineer or Systems Engineers, etc.
• Can create proof of concepts, demos, and/or scripts from scratch or leveraging reusable components.
• Can take the lead on a complex technical project, which may require the participation of other teams to deliver.
• Able to create technical content that is easily adopted and reusable by others.

Preferred qualifications

• AWS or other technical cloud certifications.
• Executive speaking and presentation skills – Formal presentations, white-boarding, large and small group presentations.
• Be dynamic and creative, and willing to embrace the high degree of change and uncertainty that comes with inventing and delivering things that were never thought possible.
• Have a passion for educating, training, designing, and building cloud computing systems for a diverse and challenging set of customers. Have a strong understanding of large scale cloud computing solutions.
• Have past experience working as presales. Enjoy keeping existing technical skills and developing new ones to make strong contributions to deep architecture discussions around systems and applications in the cloud.

The Senior IT AWS Cloud Security Architect will lead and manage the organization’s information security architecture ensuring the protection of critical assets and compliance with regulatory requirements. This role involves overseeing the development and implementation of security policies, procedures, and controls across all layers of the organization’s systems.

Key Responsibilities:

• Serve as the primary security expert, ensuring alignment with industry regulations and standards.
• Develop, implement and maintain comprehensive security solutions across various layers, including operating systems, applications, infrastructure and integrations.
• Establish and enforce multi-layered security controls to enhance organizational resilience.
• Conduct regular security assessments and audits to strengthen the security posture and ensure compliance.
• Lead the development and execution of the organization’s cloud security strategy, leveraging modern technologies and native services.
• Mentor and develop the Security Engineering team, fostering a culture of continuous learning and improvement.
• Collaborate with stakeholders to integrate security into business solutions and manage expectations effectively.

Requirements:

• 15+ years of experience in information security, with at least 5 years in security architecture and 3 years in a leadership role.
• Extensive experience with AWS Cloud Security Engineering and DevSecOps practices.
• Relevant security certifications such as CISSP, CISM, CCSP, CISA, or AWS Certified Security.
• Proven track record in managing complex security engineering projects and implementing solutions within the financial industry.
• In-depth knowledge of regulatory requirements and industry best practices following MAS TRM Guidelines.

Adam Davies

Partner

Technology 'recruitment & search'

Menrva Group, Singapore

Registered Agent R1326604

Company EA License 19S9808

Company Registration 201900823K
MENRVA PTE. LTD.

• Make a difference in one of the fastest-growing teams
• Become part of a premier team of Security Experts

About Our Client

This multinational tech company is known for a popular social media platform and focuses on AI-driven content solutions to enhance user experience. Its subsidiary provides businesses with tools for data analysis, content moderation, and cloud services, helping enterprises optimize operations and improve customer engagement.

Job Description

• Responsible for developing security products targeting customers in Southeast Asia region, and identifying potential business opportunities.
• Deeply understand customer requirements, develop cutting-edge solutions as a technical expert, provide consulting services to our partners.
• Works closely with internal teams (e.g. Sales and Developers) during the pre-sale process by offering technical expertise, translating business needs, and identifying potential existing or new solutions to help shape the deal and influence budget estimates.
• Position will be based in Singapore

The Successful Applicant

Join our dynamic Cloud Security Solutions team, where you'll play a pivotal role in bringing cutting-edge cloud security products to market and driving their commercial success. This is a unique opportunity to lead the business for the APAC region in a newly created role, giving you the chance to shape the future of our offerings and make a significant impact in the industry.

What's on Offer

If you're passionate about cloud security and ready to take on a leadership position that influences strategy and growth, we want to hear from you! Be part of a forward-thinking team that values innovation and collaboration, and help us redefine the landscape of cloud security. Your journey starts here!

Contact

Miao Xia Neo (Lic No: R21103441/ EA no: 18C9065)

Quote job ref

JN-112024-6580695

Phone number

+65 6416 9828

Michael Page International Pte Ltd | Registration No. 199804751N

Job Responsibilities

• Offer legal advice and guidance on a variety of issues, including contracts and agreements, negotiations, documentation, regulatory compliance, intellectual property, and litigation.
• Support the drafting, reviewing, and negotiation of legal documents.
• Provide counsel on intellectual property matters, including trademarks and copyrights, and assist with filing or defending infringement claims when necessary.
• Manage and oversee the administration of legal contracts.
• Ensure adherence to contract terms and conditions.
• Assist in resolving contract disputes and contribute to the development and implementation of compliance programs.
• Conduct compliance reviews and assessments.
• Offer guidance and representation in legal disputes, which may include preparing legal documents, performing legal research, and working with litigation attorneys.
• Help coordinate efforts with external counsel.

Job Requirements

• Degree in Law
• Minimum 5 years of experience in Contract Management & Dispute Resolution
• Experience in a tech firm or Airline industry will have added advantageous
• Minimum travelling for business needs is required

Interested candidates who wish to apply for the advertised position, please click on “Apply”. We regret that only shortlisted candidates will be notified.

EA License No.: 01C4394 (PERSOLKELLY Singapore PTE LTD)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

The Company

SUSE, a pioneer in open-source software, provides reliable, interoperable Linux, cloud infrastructure and storage solutions that give enterprises greater control and flexibility.

SUSE has over 25 years of engineering excellence. Its exceptional service and unrivalled partner ecosystem are used to power the products and support that, in turn, help SUSE’s customers to manage complexity, reduce cost, and confidently deliver mission-critical services. SUSE is also an active member of many open-source communities, such as the openSUSE Project, OpenStack, Ceph, OpenNFV, OpenHPC, and more, which all form part of a global drive to help solve some of the world’s most challenging technology issues.

The Role

SUSE Legal is seeking to engage a Legal Counsel (Commercial & Tech) to join the APAC legal commercial team covering a wide range of commercial, IP and IT matters and all types of commercial contracts. Work has typically included sales contracts, collaboration agreements, software contracts, IP licences and service and support agreements, as well as the provision of advice and support on procurement, disputes, HR and employment, data privacy and cybersecurity, export controls and regulatory compliance matters.

The role will report to the Regional General Counsel for APAC in Singapore but will be required to liaise with stakeholders at all levels across APAC.

About You

• Solicitor, around 7-10 years PQE, preferably qualified in Singapore, China or England & Wales, but other jurisdictions considered.
• Fluent in English, with additional fluency in Mandarin and/or Japanese being helpful but not a necessity.
• Strong IT/Technology background, preferably from having worked in-house at a technology/software company.
• Strong drafting, research and negotiation skills coupled with rounded IP knowledge.
• Works well under pressure and to tight deadlines with well developed prioritisation skills and an ability to multi-task/handle numerous projects simultaneously.
• Experience of working within an Enterprise Software enviroment
• Experienced in managing large complext software deals
• Strong preference for knowledge of open source subscription deals.
• A customer-focussed and detail-oriented team player with the ability to work autonomously/with minimal supervision and with the capacity to take initiatives and be proactive in addressing any challenges.
• A strong cultural awareness and ability to work with colleagues and stakeholders across different jurisdictions.
• Good sense of humour with the ability to collaborate with colleagues across teams and jurisdictions.
• Business focussed and solutions oriented with strong communication skills and an ability to explain complex matters in clear, accessible language.

The Role

You will be part of the APAC commercial legal team operating out of Singapore. The team supports all areas of APAC (South-East Asia, Japan, South Korea, Australia, New Zealand, India, China, Hong Kong and Taiwan) and is responsible for all legal matters with regards to customer, partner and vendor contracts as well as dealing with general legal issues covering IP and technology, procurement, disputes, employment, data privacy and cybersecurity, export controls and regulatory compliance.

The work you will undertake include the following:

• Providing advice on information technology, IP and commercial contracts, especially open-source software and licence agreements;
• Drafting, marking up, negotiating and providing advice on a broad spectrum of commercial agreements involving our customers, suppliers and strategic partners, including services and supply agreements, distribution agreements, SAAS, PAAS, cloud and more;
• Providing support and advice on the management of disputes, HR and employment issues, data privacy and cybersecurity, export controls and regulatory compliance;
• Developing and delivering training to the business and supporting functions covering matters such as contract processes, the meaning of various contractual provisions, negotiation skills, legal compliance and group policies;
• Supporting and leading legal team strategy initiatives; and
• Briefing and managing external legal counsel on a variety of matters.

Location: The role is located in Singapore and is hybrid (the team works flexibly, which includes home working and a minimum of 2 weekly days in the office).

Job Description & Requirements

We are looking for a highly driven and self-motivated Cyber Security Consultant to join our team! As a member at our company, you will have the opportunity to work on new and exciting projects and develop your career.

JOB SUMMARY

You will participate in a variety of engagements, focusing on targets that may include network equipment, servers, applications, APIs, wireless infrastructures, mobile devices, and other information systems. Using a variety of tools and techniques that may include red teaming, you will have the opportunity to combine technical expertise with your imagination to discover innovative methods with the goal of ensuring customers remain one step ahead of its adversaries.

Hands on Responsibilities:

·Support the sales by attending security sales meeting (if necessary), effort estimation and provide security testing project timeline

·Develop the security acceptance test plan

·Provide expert technical support during the security testing activities

·Security test preparation, setting-up of testing environment, configuration and installation of the security testing tools

·Perform manual or automated security testing using commercial security testing tools

· Conduct Greybox Testing (Authenticated) and/or Blackbox Testing (Unauthenticated) Penetration Tests

· Conduct Whitebox Testing and Secure Code Review

· Conduct Network and Infrastructure Vulnerability Assessment and Penetration Testing

· Conduct Web, Mobile and Desktop Application Vulnerability Assessment and Penetration Testing

· Find and pinpoint the vulnerabilities of the assess target system / application

· Document and Report the vulnerabilities found in the system

· Provide professional recommendations / advice to mitigate and resolve the vulnerabilities

· Present the security testing results to the relevant stakeholders

·Provide weekly status reporting on the security testing activity progress

Requirements:

· Bachelor's degree, preferably in computer science or information systems, or equivalent work experience

· Minimum 3 - 5 years security experience in a security analyst, engineer, architect, consultant, or a similar role

· Minimum 3 years’ professional experience in conducting vulnerability assessment and penetration testing

· Required Certifications: Any of the followings

o CREST Registered Penetration Tester (CREST CRT)

o Offensive Security Certified Professional (OSCP)

· Knowledge in conducting security testing with the following guidelines and standards

o Open Web Application Security Project (OWASP Top 10 Frameworks)

o Common Vulnerability Scoring System (CVSS)

o Common Vulnerabilities and Exposures (CVE)

o Common Weakness Enumeration (CWE) / SANS Top 25 Software Errors

· High proficiency in manual and automated techniques for penetration testing (network equipment, servers, web applications, APIs, wireless, mobile, databases, and other information systems), as well as executing vulnerability assessments (injection, privilege escalation, fuzzing, buffer overflows, etc.)

· Tools – Proxies, Port Scanners, Vulnerability Scanners, Exploit Frameworks (ex: Burp, Nessus, Nmap, Metasploit)

· Strong oral and written communication skills, including a demonstrated ability to prepare quality documentation and presentations for technical and non-technical audiences

Job Description & Requirements

Responsibilities

•Work closely with the senior IT Services stakeholders to ensure that appropriate security guidance is provided to support project delivery;

•Input in to the design and implementation of standards, policies, guidelines and appropriate architectural principles to ensure the firm’s cyber security goals continue to be met;

•Provide risk based direction in conjunction with IT Services for future system enhancements in line with the overall firm’s strategy;

•Recognize potential opportunities for enhancing the firm’s security, ensuring minimal impact to practitioners;

•Provide subject matter expertise to support business relationship management functions.

•Take ownership and ensure Governance, Policy and Procedures in relation to Management of Information

Security meets agreed standards and Technology Risk Assurance

•Develop a culture of in-depth understanding as to why security testing is required at both business and internal team level;

•Analysis of information protection technologies and processes to identify technology security weaknesses;

•Lead ongoing risk assessments of data processing systems to confirm the design of logical controls are effective and meet regulatory and legal requirements; and

•Provide quality reports to summarize test activities, including objectives, planning, methodology, results, analysis and recommendations to both technical and non-technical audiences. From the output of the reports provide suggested approaches to enhance further.

•Provide oversight and guidance during security incidents and investigations, ensure RCA is undertaken and input suggested approaches to deal with lessons identified

•Assist in the enhancement of delivery and management of key technology security platforms.

•Provide continuous improvement to the Technology Security function;

•Collaborate with IT Services to develop and maintain secure technology solutions; and

•Actively contribute to the overall Ogier risk management framework reporting to the Head of Risk & Compliance ensuring consistency in the advice we provide to the business.

•Prepare Monthly reports

•Provide Internal and External Audit Support.

• Experience on Windows Server and Networking

• Knowledge on Azure SAAS

Essential Requirements (Skills Requirements)

· A Bachelor’s degree in Information Technology, Information Systems Security, Cyber Security related or IT related equivalent. Years of Experience

· Minimum 6 to 8 years of IT & Security Experience

· Preferred industry qualifications - CISSP / CISA / CRISC / or equivalent

· Broad knowledge of a wide range of Information Technology systems and a deep understanding of the inherent security risks associated with these technologies;

· Understanding of information security principles and best practice (e.g., ISO27001 and ISF Standards of Good Practice for Information Security);

Technical / Professional Skills

· VAPT

· Infrastructure Security (Nessus, Qualys)

· Risk assessment

· Application security

· Security Audit

Non-Technical / Soft Skills

· Ability to understand and assess technology systems and applications from both a technical and business

· function perspective;

· Ability to communicate business and technical risk to all levels of audience;

· Excellent interpersonal skills with the ability to build and influence teams; and self-motivated

· Strong technical abilities, combined with business acumen;

· Ability to present security topics to a non-technical audience and presenting the business value of security;

GOOD TO HAVE

· Understand IT security and infrastructure technology

· Understand IT service management

· A good understanding of IT networking and access management concepts

· Prior experiences in leading an end-to-end IT Audit with COBIT framework and ITIL practices.

Skills (Key Words)

VAPT,Infra security, Security architecture review, Application Security

Job Description & Requirements

Responsibilities

•Work closely with the senior IT Services stakeholders to ensure that appropriate security guidance is provided to support project delivery;

•Input in to the design and implementation of standards, policies, guidelines and appropriate architectural principles to ensure the firm’s cyber security goals continue to be met;

•Provide risk based direction in conjunction with IT Services for future system enhancements in line with the overall firm’s strategy;

•Recognize potential opportunities for enhancing the firm’s security, ensuring minimal impact to practitioners;

•Provide subject matter expertise to support business relationship management functions.

•Take ownership and ensure Governance, Policy and Procedures in relation to Management of Information

Security meets agreed standards and Technology Risk Assurance

•Develop a culture of in-depth understanding as to why security testing is required at both business and internal team level;

•Analysis of information protection technologies and processes to identify technology security weaknesses;

•Lead ongoing risk assessments of data processing systems to confirm the design of logical controls are effective and meet regulatory and legal requirements; and

•Provide quality reports to summarize test activities, including objectives, planning, methodology, results, analysis and recommendations to both technical and non-technical audiences. From the output of the reports provide suggested approaches to enhance further.

•Provide oversight and guidance during security incidents and investigations, ensure RCA is undertaken and input suggested approaches to deal with lessons identified

•Assist in the enhancement of delivery and management of key technology security platforms.

•Provide continuous improvement to the Technology Security function;

•Collaborate with IT Services to develop and maintain secure technology solutions; and

•Actively contribute to the overall Ogier risk management framework reporting to the Head of Risk & Compliance ensuring consistency in the advice we provide to the business.

•Prepare Monthly reports

•Provide Internal and External Audit Support.

• Experience on Windows Server and Networking

• Knowledge on Azure SAAS

Essential Requirements (Skills Requirements)

· A Bachelor’s degree in Information Technology, Information Systems Security, Cyber Security related or IT related equivalent. Years of Experience

· Minimum 6 to 8 years of IT & Security Experience

· Preferred industry qualifications - CISSP / CISA / CRISC / or equivalent

· Broad knowledge of a wide range of Information Technology systems and a deep understanding of the inherent security risks associated with these technologies;

· Understanding of information security principles and best practice (e.g., ISO27001 and ISF Standards of Good Practice for Information Security);

Technical / Professional Skills

· VAPT

· Infrastructure Security (Nessus, Qualys)

· Risk assessment

· Application security

· Security Audit

Non-Technical / Soft Skills

· Ability to understand and assess technology systems and applications from both a technical and business

· function perspective;

· Ability to communicate business and technical risk to all levels of audience;

· Excellent interpersonal skills with the ability to build and influence teams; and self-motivated

· Strong technical abilities, combined with business acumen;

· Ability to present security topics to a non-technical audience and presenting the business value of security;

GOOD TO HAVE

· Understand IT security and infrastructure technology

· Understand IT service management

· A good understanding of IT networking and access management concepts

· Prior experiences in leading an end-to-end IT Audit with COBIT framework and ITIL practices.

Skills (Key Words)

VAPT,Infra security, Security architecture review, Application Security

The Security Architect Head will shape and manage security architecture across all layers of the organization’s systems, protecting critical assets and ensuring regulatory compliance.

Key Responsibilities:

• Act as the security architecture expert, ensuring alignment with regulations.
• Design, implement, and maintain robust security solutions across various layers, including OS, applications, infrastructure, and integrations.
• Establish multi-layered security controls to build resilience.
• Conduct reviews to strengthen the security posture and ensure regulatory compliance.
• Develop and oversee the organization’s cloud security strategy using modern technologies and native services.
• Mentor and develop the Security Engineering team, fostering a learning culture.
• Engage with stakeholders to integrate security into business solutions and manage expectations.
  

Requirements:

• Degree in Computer Science, Computer Engineering, or Information Security.
• 12+ years of experience, with 5+ years in security architecture and 3+ years in team leadership.
• Proficient in AWS Cloud Security Engineering and DevSecOps SDLC.
• Security certifications like CISSP, CISM, CCSP, CISA, or AWS Certified Security are preferred
• Hands-on experience in managing complex security engineering and solution implementation in the FI industry is an advantage
• Knowledge of regulatory requirements and industry practices (e.g. MAS TRM Guidelines, MAS Cyber Hygiene etc.)

Interested candidates, please submit your updated resume in MS format by using the Apply Now Button. Alternatively, you may also email your resume to [email protected]

We regret that only short-listed candidates will be contacted shortly.

Careerally Pte Ltd | EA Licence: 24C2215
Frieda Chan | EA Registration No: R2199193

Key Responsibilities:

· Lead the design and implementation of the security architecture for projects within the GovTech scope.

· Perform comprehensive risk assessments and implement security controls for cloud and on-premises solutions.

· Collaborate with internal teams and stakeholders to ensure security by design is embedded in all solutions.

· Develop secure architectural frameworks based on best practices, ensuring alignment with business requirements and compliance regulations.

· Conduct security assessments of infrastructure, systems, and applications to identify vulnerabilities and develop remediation strategies.

· Stay up-to-date with emerging security threats, technologies, and best practices to continuously improve the security posture of the organization’s systems.

Qualifications:

The ideal candidate must possess internationally recognized professional security certifications related to risk assessment and security design services, such as:

· ISACA Certified Information Security Manager (CISM)

· Cybersecurity Practitioner (CSX-P)

· Certified Information Systems Security Professional (CISSP)

· CISSP-Information Systems Security Architecture Professional (CISSP-ISSAP)

· Certified Cloud Security Professional (CCSP)

· AWS Certified Solutions Architect (Professional, Associate)

· AWS Certified Security

· Azure Solution Architect or Security Engineer

· Google Cloud Certified Professional Cloud Architect

· Cisco Certified Architect (CCAr)

Additional Skills:

· Strong understanding of security frameworks such as NIST, ISO 27001, and CIS controls.

· Experience with cloud platforms such as AWS, Azure, and Google Cloud in a security architecture capacity.

· Excellent problem-solving and analytical skills.

· Strong written and verbal communication skills, with the ability to clearly articulate complex security concepts to technical and non-technical stakeholders.

· Proven ability to manage multiple projects and meet deadlines under pressure.

Experience:

· Minimum 5-10 years of experience in security architecture and design, preferably in a government or highly regulated environment.

· Demonstrated experience in working with cloud security, network security, and application security.

Application Process:

Interested candidates who meet the qualifications and experience requirements are encouraged to apply with a resume and cover letter detailing their relevant certifications and experience in security architecture.

Responsibilities

· Handling of Court Orders (not limited to Bankruptcy, Winding-Up, Garnishee Orders, Injunction Orders) and Deceased matters

· Processing & monitoring of all deposit accounts relating to the above processes to ensure compliance

· Liaise with legal, lawyers, official assignees, public trustee on legal issues

· Liaise with relevant internal stakeholders for timely dissemination

· General ad-hoc administrative duties as assigned

· Maintain, review and update workflow and database

· Participate in ad-hoc projects as assigned by team leader

· Contribute and/or lead process improvements initiatives

Requirements

· A degree holder with at least 1 year of banking experience and demonstrates basic understanding of legal requirements

· Sound knowledge of the bank’s core operating systems and control standards is an added advantage

· Proficient in MS Office applications

· Good interpersonal and communication skills

· Focused and meticulous, with a keen eye for detail

· A team player and demonstrates strong ability to deliver under tight deadlines and under pressure with minimum supervision

“This is in partnership with the Employment and Employability Institute Pte Ltd (“e2i”).

e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance and skills upgrading services, and partnering employers to address their manpower needs through recruitment, training, and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation-wide manpower and skills upgrading initiatives. By applying for this role, you consent to A-IT Software Services Pte Ltd’s PDPA and e2i PDPA.

About ST Engineering

ST Engineering is a global technology, defence, and engineering group with offices across Asia, Europe, the Middle East, and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives through its diverse portfolio of businesses across the aerospace, smart city, defence, and public security segments. Headquartered in Singapore, ST Engineering ranks among the largest companies listed on the Singapore Exchange.

Our history spans more than 50 years, and our strategy is underpinned by our core values – Integrity, Value Creation, Courage, Commitment and Compassion. These 5 core values guide every aspect of our business and are embedded in our ST Engineering culture – from the people we hire, to working with each other, to our partners and customers.

About our Line of Business – Mission Software & Services

Our Mission Software & Services business provides leading-edge mission critical command, control, and communications (C3) systems with secured IT infrastructure and managed services. We support our client’s innovation journey through design thinking, analytics, and AI-enabled decision support with our full suite of cloud computing solutions. We provide intelligent, actionable insights and sustainable solutions to our valued partners in diverse industries including defence, government, and commercial sectors.

Together, We Can Make A Significant Impact

The Security Engineer will participate in the development and implementation of secure system architectures. He/ She understands security principles in carrying out the assigned tasks to mitigate the risks posed by new technologies and business practices. He/ She contributes to the development of artefacts, spanning design, development and implementation, into enterprise systems that describe security principles and how they relate to the overall enterprise system architecture. He/ She performs routine activities related to the periodic review and audit activities of infrastructure security systems and maintains documentation of security standards and procedures.

Be Part of Our Success

• Collaborate in the design of security controls and systems in alignment with security guidelines
• Assist in the testing and evaluation of new security technologies and controls
• Document the design, operation, use, and expected outputs of new systems
• Participate in the Implementation of new enterprise security architecture, technologies and enhancements
• Resolve issues that arise in implementation of new security systems
• Monitor security systems for strengths and weaknesses and propose improvements to address weaknesses
• Involve in the maintenance of security systems, platforms and associated software
• Collaborate in the development and implementation of custom disaster recovery drills and simulation tests on existing systems
• Assist in the resolution of identified problems and incidents

Qualities We Value

• Familiar with modern security architectures and cloud architecture design best practices
• Knowledge of Python is an advantage
• A good team player who can contribute and work effectively in a collaborative team environment.
• Candidates with critical thinking, analytical and creative problem-solving skills is highly desired.
• Attention to detail and quality is a desired attribute.

Our Commitment That Goes Beyond the Norm

• An environment where you will be working on cutting-edge technologies and architectures.
• Safe space where diverse perspectives are valued, and everyone’s unique contributions are celebrated.
• Meaningful work and projects that make a difference in people’s lives.
• A fun, passionate and collaborative workplace.
• Competitive remuneration and comprehensive benefits.

Job Summary

The cyber Security Architect is a senior-level position responsible for planning, designing, testing, implementing and maintaining our organization’s network security infrastructure. He also evaluates the security of the organization's systems for vulnerabilities. He participates to penetration tests, risk analyses on LANs, WANs, and VPNs. He also determines the efficacy and efficiency of routers, firewalls, and comparable systems, they also evaluate these systems.

Responsibilities

• Production Level 3 support for Network and Security infrastructure.
• Design, develop, and implement secure system architectures.
• Embed security principles into the design of system architectures to mitigate the risks posed by new technologies and business practices.
• Design artefacts, spanning design, development, and implementation, into enterprise systems that describe security principles and how they relate to the overall enterprise system architecture.
• Perform routine activities related to the periodic review and audit activities of infrastructure security systems and maintains documentation of security standards and procedures.
• Gaining a total understanding of the organization’s technology and information systems
• Planning, researching, and designing reliable, powerful, and flexible security architectures for all IT projects
• Defining, creating, implementing, and maintaining all needed corporate security policies and procedures, making sure that all employees abide by them
• Developing requirements for all IT assets including routers, firewalls, local area networks (LANs), wide-area networks (WANs), virtual private networks (VPNs), and any other related network devices
• Reviewing and approving the installation of all firewalls, VPN, routers, servers, and IDS scanning technologies
• Preparing cost estimates for all cybersecurity measures and identifying any potential integration issues
• Providing technical guidance and supervision for security teams
• Taking charge of any security awareness programs and educational efforts to better prepare non-IT personnel
• Responding immediately to any security-related incidents (e.g., data breaches, viruses, phishing scams)
• Updating and upgrading the organization’s security systems as needed

Legal and Regulatory responsibilities:

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer/Compliance Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• Minimum 8 years of experience in managing IT systems environment with about 5 years of experience in financial institutes.
• Subject matter expert on Systems , Network and Security.
• Knowledge and/or hands on working experience with emerging technologies.
• Excellent communication, interpersonal and logical skills.
• Customer service oriented and a strong team player.
• Ability to work under pressure and a commitment to solving issues.

Technology / Product Experience:

• Cisco: ACI, Nexus, Catalyst, DNAC, ISE , iOS, NXOS
• Arista: Switches, EOS
• Fortinet: Firewall, IPS
• F5: LTM, ASM, APM , TMOS
• Infoblox; DNS, DHCP
• Skyhigh: Proxy
• Ivanti: Remote access
• Checkpoint: Firewall, MDS
• Trendmicro: IPS/IDS

Technology / Product Experience:

• Programming: Python/Bash/Ansible
• Tools: Wireshark/Tshark/Netflow

Work Schedule

• Required to work on Paris and/or New York and/or Asia time zone*, i.e. 2pm to 11pm/4pm to 1am (summer season) or 3pm to 12am/ 5pm to 2am (winter season), or in accordance to the planned time schedule as required. If necessary, you may also be required to start work earlier or to extend working hours.
• May be required to be available for on-call support during non-business hours and/or on weekends. Allowance is claimable for such hours.

Education Requirements

At least a Bachelor’s degree in any of these faculties:

• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Job Summary

The cyber Security Architect is a senior-level position responsible for planning, designing, testing, implementing and maintaining our organization’s network security infrastructure. He also evaluates the security of the organization's systems for vulnerabilities. He participates to penetration tests, risk analyses on LANs, WANs, and VPNs. He also determines the efficacy and efficiency of routers, firewalls, and comparable systems, they also evaluate these systems.

Responsibilities

• Production Level 3 support for Network and Security infrastructure.
• Design, develop, and implement secure system architectures.
• Embed security principles into the design of system architectures to mitigate the risks posed by new technologies and business practices.
• Design artefacts, spanning design, development, and implementation, into enterprise systems that describe security principles and how they relate to the overall enterprise system architecture.
• Perform routine activities related to the periodic review and audit activities of infrastructure security systems and maintains documentation of security standards and procedures.
• Gaining a total understanding of the organization’s technology and information systems
• Planning, researching, and designing reliable, powerful, and flexible security architectures for all IT projects
• Defining, creating, implementing, and maintaining all needed corporate security policies and procedures, making sure that all employees abide by them
• Developing requirements for all IT assets including routers, firewalls, local area networks (LANs), wide-area networks (WANs), virtual private networks (VPNs), and any other related network devices
• Reviewing and approving the installation of all firewalls, VPN, routers, servers, and IDS scanning technologies
• Preparing cost estimates for all cybersecurity measures and identifying any potential integration issues
• Providing technical guidance and supervision for security teams
• Taking charge of any security awareness programs and educational efforts to better prepare non-IT personnel
• Responding immediately to any security-related incidents (e.g., data breaches, viruses, phishing scams)
• Updating and upgrading the organization’s security systems as needed

Legal and Regulatory responsibilities:

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer/Compliance Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• Minimum 8 years of experience in managing IT systems environment with about 5 years of experience in financial institutes.
• Subject matter expert on Systems , Network and Security.
• Knowledge and/or hands on working experience with emerging technologies.
• Excellent communication, interpersonal and logical skills.
• Customer service oriented and a strong team player.
• Ability to work under pressure and a commitment to solving issues.

Technology / Product Experience:

• Cisco: ACI, Nexus, Catalyst, DNAC, ISE , iOS, NXOS
• Arista: Switches, EOS
• Fortinet: Firewall, IPS
• F5: LTM, ASM, APM , TMOS
• Infoblox: DNS, DHCP
• Skyhigh: Proxy
• Ivanti: Remote access
• Checkpoint: Firewall, MDS
• Trendmicro: IPS/IDS

Technology / Product Experience:

• Programming: Python/Bash/Ansible
• Tools: Wireshark/Tshark/Netflow

Work Schedule

• Required to work on Paris and/or New York and/or Asia time zone*, i.e. 2pm to 11pm/4pm to 1am (summer season) or 3pm to 12am/ 5pm to 2am (winter season), or in accordance to the planned time schedule as required. If necessary, you may also be required to start work earlier or to extend working hours.
• May be required to be available for on-call support during non-business hours and/or on weekends. Allowance is claimable for such hours.

Education Requirements

At least a Bachelor’s degree in any of these faculties:

• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Next Step

Prepare your updated resume and expected package.

Simply click on 'Apply here' or email to [email protected] to drop your resume

All shortlisted candidates will be contacted.

Prasant Sirohi

EA License Number: 91C2918

Registration Number: R22106307

About ByteDance

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

As part of the Security Engineering team, we are responsible for supporting the company's construction of security capabilities and platform services, combining other teams to create efficient and high-quality service docking capabilities, enhancing interactive experience, and lowering the user's barriers to understanding and using security services.

Responsibilities

We are looking for Security Software Engineers to join our Security Engineering team in building the next-generation of ByteDance's product security & privacy infrastructure that furthers our system security and user data privacy protection level, which will impact all ByteDance's products globally. In addition, you will also have opportunities to work closely with product teams across the world. Together we will identify opportunities, define innovative ways to build our users a safe and trustworthy environment, and help us shape the future of ByteDance.

- Research, design, develop, test, maintain and continuously improve ByteDance's product security & privacy Infrastructure and softwares.

- Analyse user needs and security & privacy objectives, develop software solutions, applying principles and techniques of computer science, engineering, and mathematical analysis.

- Update Software, enhances existing software capabilities. Develop and direct software testing and validation procedures to optimize reliability, availability and performance of globally distributed systems.

- Work with multiple cross-functional global teams to integrate hardware and software systems and develop specifications and performance requirements, to deliver high-quality work in rapid product development.

- Deploy, troubleshot and operate large distributed systems.

- Manage individual project priorities, deadlines and deliverables

Minimum Qualifications

- Bachelor's degree and or above in Computer Science, Computer Engineering or other relevant majors.

- Strong knowledge of data structures and algorithms

- Proficiency in at least one server library / framework like Express, Koa, Gin, Kite, Django, etc and at least one kind of database like MySQL, Redis, MongoDB, Hive, ClickHouse, ES, etc and at least one kind of message queue like Kafka, RocketMQ, etc

- Understanding of load-balance, container virtualization, familiarity with NGINX, Docker, K8s, Serverless, etc

- Proficiency in TypeScript, CSS and various layouts, at least one kind of general purpose programming language like Node.js etc

- Understanding of component-based development ideas, familiarity with React.js, Vue.js, or any other equivalent library / framework

- Excellent programming, debugging, and optimization skills in general purpose programming languages

- Ability to think critically and to formulate solutions to problems in a clear, concise and timely manner

Preferred Qualifications

- Experience in cloud-native security services and infrastructure such as Key Management System (KMS), or Public Key Infrastructure (PKI) to serve as a foundation for production infrastructure security. Experience in securing software supply chains to ensure source and build integrity at any stage of the software lifecycle.

- Experience with two or more general purpose programming languages including but not limited to: Go, Node.js, Java, or Python. Preferred familiarity in Rust.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

• Exciting opportunity with a leading IT services company
• Opportunity to learn and grow

About Our Client

Our client is a leading multinational technology corporation with operations in over 171 countries and one of the world's largest employers.

Job Description

Key Responsibilities:

1. Provide technical analysis and inputs to the project team to ensure system meets security requirements.
2. Provide subject matter advice to address any issues or contentions that may arise during the project and work with the project team to balance tradeoffs between security, operational and functional considerations.
3. Oversee and advise on security best practices on system design and implementation plan.
4. Develop comprehensive work plan with cross-functional teams to deliver security solutions
5. Identify and breakdown problems and able to methodologically work through and find appropriate solutions.

The Successful Applicant

1. Atleast 5 years of IT experience in deploying and managing complex IT security systems and services including design, development, implementation and/or management of enterprise IT security solution/architecture.
2. Experience in delivering medium to large-scale enterprise, designing, integrating and managing complex infrastructure solutions.
3. Hands on experience in managing and maintaining security platform operations in a medium to large-scale organisation
4. Extensive domain knowledge across a variety of security solutions such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc
5. Familiar with Agile/Scrum.
6. Good knowledge in security operation centre (SOC) management and monitoring processes and governance.

What's on Offer

You will be part of an organisation who sees value in investing in their employees. The remuneration for this role will be competitive and in line with the market.

Contact

Tanvi Krishna (Lic No: R22110311/ EA no: 18C9065)

Quote job ref

JN-092024-6534641

Phone number

+65 6541 9979

Michael Page International Pte Ltd | Registration No. 199804751N

Department Overview

ISAP IT Production Centre is an offshore delivery center managing IT Operations (RUN) for Paris, London and Asia. With over 250 people, it constitutes one of two main hubs forthe company's IT production teams. This setup is operated in partnership with a Service Provider, who provides most resources on site.

ISAP IT Production Centre is split in 4 departments covering the following aspects:

• INFRA: core infrastructure- systems and network services
• APS: application technical support
• Middleware: Data services and Middleware services
• End-user & Transverse: End-user Services and Transversal activities, including Control Tower, Global Operations Center and Data Security Services.

Job Summary

The cyber Security Architect is a senior-level position responsible for planning, designing, testing, implementing and maintaining our organization’s network security infrastructure. He also evaluates the security of the organization's systems for vulnerabilities. He participates to penetration tests, risk analyses on LANs, WANs, and VPNs. He also determines the efficacy and efficiency of routers, firewalls, and comparable systems, they also evaluate these systems.

Responsibilities

• Production Level 3 support for Network and Security infrastructure.
• Design, develop, and implement secure system architectures.
• Embed security principles into the design of system architectures to mitigate the risks posed by new technologies and business practices.
• Design artefacts, spanning design, development, and implementation, into enterprise systems that describe security principles and how they relate to the overall enterprise system architecture.
• Perform routine activities related to the periodic review and audit activities of infrastructure security systems and maintains documentation of security standards and procedures.
• Gaining a total understanding of the organization’s technology and information systems
• Planning, researching, and designing reliable, powerful, and flexible security architectures for all IT projects
• Defining, creating, implementing, and maintaining all needed corporate security policies and procedures, making sure that all employees abide by them
• Developing requirements for all IT assets including routers, firewalls, local area networks (LANs), wide-area networks (WANs), virtual private networks (VPNs), and any other related network devices
• Reviewing and approving the installation of all firewalls, VPN, routers, servers, and IDS scanning technologies
• Preparing cost estimates for all cybersecurity measures and identifying any potential integration issues
• Providing technical guidance and supervision for security teams
• Taking charge of any security awareness programs and educational efforts to better prepare non-IT personnel
• Responding immediately to any security-related incidents (e.g., data breaches, viruses, phishing scams)
• Updating and upgrading the organization’s security systems as needed

Legal and Regulatory responsibilities:

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer/Compliance Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• Minimum 8 years of experience in managing IT systems environment with about 5 years of experience in financial institutes.
• Subject matter expert on Systems , Network and Security.
• Knowledge and/or hands on working experience with emerging technologies.
• Excellent communication, interpersonal and logical skills.
• Customer service oriented and a strong team player.
• Ability to work under pressure and a commitment to solving issues.

Technology / Product Experience:

• Cisco: ACI, Nexus, Catalyst, DNAC, ISE , iOS, NXOS
• Arista: Switches, EOS
• Fortinet: Firewall, IPS
• F5: LTM, ASM, APM , TMOS
• Infoblox: DNS, DHCP
• Skyhigh: Proxy
• Ivanti: Remote access
• Checkpoint: Firewall, MDS
• Trendmicro: IPS/IDS

Technology / Product Experience:

• Programming: Python/Bash/Ansible
• Tools: Wireshark/Tshark/Netflow

Work Schedule

• Required to work on Paris and/or New York and/or Asia time zone*, i.e. 2pm to 11pm/4pm to 1am (summer season) or 3pm to 12am/ 5pm to 2am (winter season), or in accordance to the planned time schedule as required. If necessary, you may also be required to start work earlier or to extend working hours.
• May be required to be available for on-call support during non-business hours and/or on weekends. Allowance is claimable for such hours.

Education Requirements

At least a Bachelor’s degree in any of these faculties:

• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Next Step

Prepare your updated resume and expected package.

Simply click on 'Apply here' or email to [email protected] to drop your resume

All shortlisted candidates will be contacted.

Prasant Sirohi

EA License Number: 91C2918

Registration Number: R22106307

Department Overview

ISAP IT Production Centre is an offshore delivery center managing IT Operations (RUN) for Paris, London and Asia. With over 250 people, it constitutes one of two main hubs for the company's IT production teams. This setup is operated in partnership with a Service Provider, who provides most resources on site.

ISAP IT Production Centre is split in 4 departments covering the following aspects:

• INFRA: core infrastructure- systems and network services
• APS: application technical support
• Middleware: Data services and Middleware services
• End-user & Transverse: End-user Services and Transversal activities, including Control Tower, Global Operations Center and Data Security Services.

Job Summary

The cyber Security Architect is a senior-level position responsible for planning, designing, testing, implementing and maintaining our organization’s network security infrastructure. He also evaluates the security of the organization's systems for vulnerabilities. He participates to penetration tests, risk analyses on LANs, WANs, and VPNs. He also determines the efficacy and efficiency of routers, firewalls, and comparable systems, they also evaluate these systems.

Responsibilities

• Production Level 3 support for Network and Security infrastructure.
• Design, develop, and implement secure system architectures.
• Embed security principles into the design of system architectures to mitigate the risks posed by new technologies and business practices.
• Design artefacts, spanning design, development, and implementation, into enterprise systems that describe security principles and how they relate to the overall enterprise system architecture.
• Perform routine activities related to the periodic review and audit activities of infrastructure security systems and maintains documentation of security standards and procedures.
• Gaining a total understanding of the organization’s technology and information systems
• Planning, researching, and designing reliable, powerful, and flexible security architectures for all IT projects
• Defining, creating, implementing, and maintaining all needed corporate security policies and procedures, making sure that all employees abide by them
• Developing requirements for all IT assets including routers, firewalls, local area networks (LANs), wide-area networks (WANs), virtual private networks (VPNs), and any other related network devices
• Reviewing and approving the installation of all firewalls, VPN, routers, servers, and IDS scanning technologies
• Preparing cost estimates for all cybersecurity measures and identifying any potential integration issues
• Providing technical guidance and supervision for security teams
• Taking charge of any security awareness programs and educational efforts to better prepare non-IT personnel
• Responding immediately to any security-related incidents (e.g., data breaches, viruses, phishing scams)
• Updating and upgrading the organization’s security systems as needed

Legal and Regulatory responsibilities:

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer/Compliance Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• Minimum 8 years of experience in managing IT systems environment with about 5 years of experience in financial institutes.
• Subject matter expert on Systems , Network and Security.
• Knowledge and/or hands on working experience with emerging technologies.
• Excellent communication, interpersonal and logical skills.
• Customer service oriented and a strong team player.
• Ability to work under pressure and a commitment to solving issues.

Technology / Product Experience:

• Cisco: ACI, Nexus, Catalyst, DNAC, ISE , iOS, NXOS
• Arista: Switches, EOS
• Fortinet: Firewall, IPS
• F5: LTM, ASM, APM , TMOS
• Infoblox: DNS, DHCP
• Skyhigh: Proxy
• Ivanti: Remote access
• Checkpoint: Firewall, MDS
• Trendmicro: IPS/IDS

Technology / Product Experience:

• Programming: Python/Bash/Ansible
• Tools: Wireshark/Tshark/Netflow

Work Schedule

• Required to work on Paris and/or New York and/or Asia time zone*, i.e. 2pm to 11pm/4pm to 1am (summer season) or 3pm to 12am/ 5pm to 2am (winter season), or in accordance to the planned time schedule as required. If necessary, you may also be required to start work earlier or to extend working hours.
• May be required to be available for on-call support during non-business hours and/or on weekends. Allowance is claimable for such hours.

Education Requirements

At least a Bachelor’s degree in any of these faculties:

• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Next Step

Prepare your updated resume and expected package.

Simply click on 'Apply here' or email to [email protected] to drop your resume

All shortlisted candidates will be contacted.

Prasant Sirohi

EA License Number: 91C2918

Registration Number: R22106307

Responsibilities:

1. Design & Implement Secure Systems: Build secure financial applications & recommend enhancements for existing systems.
2. Drive Zero Trust Security Architecture or Layered Defense strategy
3. Stay Ahead of Threats: Continuously learn about cyber threats & advancements in security.
4. Manage Risk & Compliance: Conduct security assessments, ensure compliance with regulations, and support audits.
5. Foster Collaboration: Work with teams to implement secure systems.
6. Security Subject Matter Expert: Possess deep knowledge in application & security engineering principles.

Requirements:

1. Degree in Computer Science or a related field.
2. 10+ years of relevant experience.
3. 5+ years in security engineering and architecture, with deep domain expertise.
4. Experience in cloud and cybersecurity is a must.
5. IT security certifications are highly advantageous.
6. Familiarity with MAS TRM, PCI DSS, PCI PTS, and payment card standards, advantageous.

JOB SUMMARY

Lead and manage security architecture and engineering in APEC. Performs security accreditation and evaluates the implementation of those controls in order to grant Approval to Operate for a release of new infrastructure, services, applications and processes into Marriott’s Production Environments in regional level.

Leverages existing Security Engagement processes and documentation, in conjunction with security compliance tools, to determine control implementation status. Will routinely process ITSM Release and Security Engagement Tasks to document justification for all approvals. Will routinely collaborate with multiple teams, including, but not limited to, Business Release Sponsors, Project Managers, Security Architects, Security Architecture Analysts, and

Change Management teams to ensure the Security Processes are followed and completed in order to accredit the engagement or release.

Will routinely manage and communicate the status of the tasks assigned in ITSM to thoroughly document the accreditation resulting in granting of Approval to Operate. Understand, communicate, interpret and enforce MI Policies and Security Standards throughout the Certification and Accreditation process. Understand and communicate control objectives in terms of both MI Policy and Standards and Security Best Practice Frameworks, including, but not limited to, NIST RMF, NIST CSF, PCI DSS, GDPR, MPLS, EU Privacy, ISO, as referenced in Marriott’s Common Controls Framework. Will periodically provide status and metrics for the assigned C&A Engagements in order to provide visibility and transparency to GIS Senior Leadership

CANDIDATE PROFILE

Education and Experience

Required:

• Bachelor’s degree in Information Systems, Computer Science or related field or equivalent experience/certification
• 8+ years’ experience in Information Security with:3+ years in process-oriented Security Audit/Assurance/Technical Assessment role
  2+ years’ team management experience with security technical team members
  1-2 years’ experience/exposure to Common Controls Framework
  Exposure/functional understanding of NIST RMF
  
• Current and relevant information security certifications such as: CISSP (Certified Information Systems Security Professional), (ISC)2 CGRC certification, ISACA, PCI QSA/ISA, ITIL, IS Certification & Accreditation Professional - ISCAP, GIAC Information Security Professional (GISP),

Preferred Skills & Attributes

• Strong oral and written communication skills and comfortable with speaking in large groups virtually and in person.
• Ability to conduct independent security research.
• Strong understanding of common OWASP flagship projects, Top 10, Cheat Sheets…etc.
• Strong understanding of cryptography concepts: hashing, signing, encryption, decryption, tokenization
• Strong understanding of SDLC and security integration points
• Functional understanding of microservice application architecture
• Functional understanding of common application security controls such as WAF, RASP, Intercepting Proxies
• Comfortable with the following tools and technologies: GitHub Advanced Security, Postman, Fortify SCA, Jenkins, Artifactory, SonarQube, Docker, JIRA, Confluence, Aqua CSP, Nessus Pro or Tenable.io
• Comfortable with technical report writing and crafting security requirements.
• Basic understanding of network security concepts: DOS, DNS Spoofing, ARP Poisoning, Firewalls, Intrusion Detection, Segmentation
• Basic understanding of Vulnerability and Patch Management practices
• Basic understanding of endpoint security controls: EDR, Vulnerability Scanning Agents, HIDS, FIM
• Basic understanding of Agile Software Development Practices & DevOps
• Master’s degree in Computer Science or Software Engineering
• Mid-level cloud computing certification, AWS Solutions Architect Associate, Azure Administrator Associate, Google Associate Cloud Engineer
• Functional knowledge software engineering concepts: GOF software design patterns, SOLID design principles (SRP, OSP, LSP, ISP, and DIP) and design methods (Scrum, XP, Lean, Waterfall)
• Functional understanding of common cryptographic algorithms and libraries
• Functional foundational understanding of Cloud Computing

CORE WORK ACTIVITIES

Security Accreditation

• Works with development teams to review application source code for security and operational risks.
• Perform manual code reviews of applications that are not compatible with automated SAST tools.
• Provide detailed security documentation to developers, software engineers and technical personnel when necessary.
• Provide guidance and recommendation to software architects and engineers on how to correct code related security flaws.

Managing Work, Projects, and Policies

• Manage security architecture and engineering team in APEC.
• Participate in peer reviews of security assessments created by other team members.
• Manage tickets and SLAs associated with security testing efforts.
• Maintain and contribute to the enterprise SSDLC standard.
• Coordinates and implements work and projects as assigned.
• Generates and provides accurate and timely results in the form of reports, presentations, etc.
• Analyzes information and evaluates results to choose the best solution and solve problems.
• Develops specific goals and plans to prioritize, organize, and accomplish work.
• Sets and tracks goal progress for self and others.
• Monitors the work of others to ensure it is completed on time and meets expectations.
• Provides direction and assistance to other organizational units’ policies and procedures, and efficient control and utilization of resources.

Leading Team

• Creates a team environment that encourages accountability, high standards, and innovation.
• Leads specific team while assisting with meeting or exceeding department goals.
• Makes sure others understand performance expectations.
• Ensures that goals are being translated to the team as they relate to tracking and productivity.
• Creates and nurtures an environment that emphasizes motivation, empowerment, teamwork, continuous improvement and a passion for providing service.
• Understands employee and develops plans to address need areas and expand on the strengths.
• Provides the team with the capabilities needed to meet or exceed expectations.
• Leads by example demonstrating self-confidence, energy and enthusiasm.

Conducting Human Resources Activities

• Acts proactively when dealing with employee concerns.
• Extends professionalism and courtesy to employees at all times.
• Communicates/updates all goals and results with employees.
• Meets semiannually with staff on a one-to-one basis.
• Establishes and maintains open, collaborative relationships with employees.
• Solicits employee feedback.
• Interviews job candidates and assists in making hiring decisions.
• Receives hiring recommendations from team supervisors.
• Ensures orientations for new team members are thorough and completed in a timely fashion.
• Observes behaviors of employees and provides feedback to individuals.

Additional Responsibilities

• Provides information to supervisors, co-workers, and subordinates by telephone, in written form, e-mail, or in person in a timely manner.
• Manages group or interpersonal conflict.
• Informs and/or updates executives, peers, and subordinates on relevant information in a timely manner.
• Manages time effectively and conducts activities in an organized manner.
• Presents ideas, expectations and information in a concise, organized manner.
• Uses problem solving methodology for decision making and follow up.
• Performs other reasonable duties as assigned by manager.

Marriott International is an equal opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered under applicable law.

Roles & Responsibilities

• Assist Head of Wealth Planning Competency Centre with the development and implementation of

o Legal template, standard documents

o Product Guides, Frameworks, Flowcharts

o Internal guides or policies (where applicable)

and identifying areas of improvement to legal precedents and develop new templates in line with business needs.

• Support in Complex Structures assessment / onboarding and Transactions

• Liaise with bank stakeholders (e.g. Trustee, Wealth Planning teams) and external legal and tax advisors

• Assist with trainings for RMs, WPs & Bank’s Trust Managers (TMs) through coordinating internal and external trainings conducted by external professionals

• Review, comment and analyze legal and tax opinions

• Assist with monitoring new laws and regulations, development relevant to the business and drafting updates via Wealth Planning Brief and Fact Sheet on latest development with respect to regulatory and taxation environment

• Support Head of Wealth Planning Competency Centre with Bank’s stakeholders on strategic initiatives with a Wealth Planning Focus

• Handle any other work assigned from time to time by Head of Wealth Planning Competency Centre

Job Requirements/Skills and Qualifications:

• Degree in law or accountancy / STEP qualified (preferred)

• Several years of experience working as in-house counsel or preferably with prior experience in the knowledge management division of a law firm

• Solution oriented with an eye for accuracy

“This is in partnership with the Employment and Employability Institute Pte Ltd (“e2i”).

e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance and skills upgrading services, and partnering employers to address their manpower needs through recruitment, training, and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation-wide manpower and skills upgrading initiatives. By applying for this role, you consent to A-IT Software Services Pte Ltd’s PDPA and e2i PDPA.

• Leading global cloud computing company
• Dynamic and collaborative work environment
• Opportunity to contribute to a top-tier cloud platform by integrating advanced security solutions and staying at the forefront of industry trends and innovations

Our client is a leading global cloud computing and technology solutions provider known for their innovative and scalable solutions across a wide range of industries. They are looking for an experienced Cloud Security Solution Architect to guide and support their key customers in ASEAN, helping them achieve robust security, resilience, and compliance strategies on their leading cloud platform.

In this role, you will lead high-level discussions on security, risk, and compliance, ensuring the seamless integration of advanced cloud security controls within customer frameworks. You'll work closely with internal teams to achieve strategic outcomes, tackle complex security challenges, and maintain strong customer relationships to manage and mitigate security incidents effectively. Your insights on industry trends and regulatory changes will be crucial in shaping forward-thinking security strategies and supporting product innovation.

Requirements

• Bachelor’s Degree in Computer Science or a related discipline. Relevant cybersecurity certifications will be a plus.
• At least 8 years of experience in creating and executing security strategies in large, complex enterprises across various industries.
• Profound knowledge of cloud computing and the application of innovative security solutions.
• Strong expertise in security technologies, including data encryption and protection against network attacks.
• Well-versed in global and ASEAN compliance regulations.
• Effective communication and strong stakeholder management with the ability to lead discussions with senior-level stakeholders.
• Proficiency in Mandarin is essential for collaboration with teams based in China.

If you're ready to take on a dynamic role that drives security innovation and delivers strategic results, we want to hear from you!
Please send your resume to [email protected] or click APPLY NOW.
For more information, please visit www.ambition.com.sg.

Data provided is for recruitment purposes only. Regrettably, only shortlisted candidates will be notified.
Business Reg No : 200611680D | Licence No : 10C5117 | EA Reg No : R2199023

As a Security Architect for Cybersecurity GTM in the APAC practice of NTT Data, Inc. Security business, this role will be dual reporting directly to the Cybersecurity Sales / Pre-sales leader in-country and to the APAC Cybersecurity leader. Your involvement in our pursuits and opportunities will start with the initial customer meeting and continue through the design phases of the security solution architecture and value realization. You must be a self-starter, require minimal supervision, and possess strong technical and design skills for enterprise environments. This position requires excellent communications skills (written and verbal), as well as the ability to work as part of a team.

This role would be having following key responsibilities:

· Acting as a technology security SME that understands the threat landscape, architectural models and solutions and possessing the ability to discuss and present to senior client stakeholders and technical members

· Taking customer’s technical, financial, and business requirements into consideration in order to recommend optimal security solution and also deliver presentation, proposals, included with bill of material as result

· Performing security solution workshops, solution demonstrations and Proof-of-Value engagements using our OEM partner products and our services

· Developing and/or enhancing security reference architecture for clients in key verticals such as BFSI, Public Sector, Healthcare, Manufacturing, Retail etc.

· Staying current with international security standards, best practices and in-country security regulations

· Working knowledge of security risk and control frameworks such as NIST CSF, ISO 27001, SABSA etc.

· Work closely with internal teams to increase the adoption of our cybersecurity solutions to customers through marketing campaigns, customer meetings, community building, and actively involved in executing Go-To-Market strategy for cybersecurity in-country

· Support security consulting pre-sales work (e.g. writing SoWs, proposals etc.)

· Support RFPs and large bids as a security SME working jointly with multi-BU stakeholders

· Be flexible to acquire new skills and show willingness in learning/re-learning and un-learning things as needed for the success of this role and the overall cybersecurity practice

· Demonstrate strong skills in analysing customer business processes and technical environments

· Acting as a Trusted Advisor to our clients on Cybersecurity domain

· Actively participate in knowledge sharing with all team members

Experience, Skills and Qualifications:

As the Security Consultant your skills and qualifications will include:

• Possess at least 7-10 years of working experience related to cybersecurity pre-sales and architect roles
• Hands on experience with security solutions from Tier-1 Security OEMs
• Security architect experience supporting at least 3 of the key practice domains such as Network Security & SASE, Cloud Security, App & Data Security, Workplace Security, OT/ICS Security and Security Operations
• Required degree level education, or significant experience and track record with tertiary qualifications on relevant domains, including computer science, computer engineering and information security
• Being certified in CISSP, GIAC, Security+, CCSE, CCSK, CRISC will be an added advantage
• Certified in Tier-1 Security OEMs solution/capabilities
• Ability to work in a matrix organisation
• Ability to work with diverse and dynamic teams
• Demonstrate excellent skills in structured problem-solving techniques, creativity and intelligence in the development of solutions to customer problems
• Be self-motivated and self-disciplined with a demonstrable and successful track record in delivering consultancy projects to all sizes of organizations
• Must have good presentation skills with the ability to present to audiences of both business and IT stakeholders
• Must have strong written communication, whiteboarding and writing skills

Hello. We’re Haleon. A new world-leading consumer health company. Shaped by all who join us. Together, we’re improving everyday health for billions of people. By growing and innovating our global portfolio of category-leading brands – including Sensodyne, Panadol, Advil, Voltaren, Theraflu, Otrivin, and Centrum – through a unique combination of deep human understanding and trusted science. What’s more, we’re achieving it in a company that we’re in control of. In an environment that we’re co-creating. And a culture that’s uniquely ours. Care to join us. It isn’t a question.

With category leading brands such as Sensodyne, Voltaren and Centrum, built on trusted science and human understanding, and combined with our passion, knowledge and expertise, we’re uniquely placed to do this and to grow a strong, successful business.

This is an exciting time to join us and help shape the future. It’s an opportunity to be part of something special.

About the role

The Principal OT Security Architect is a critical role in the Digital and Tech Information Security organization supporting our OT Manufacturing sites to maintain the highest level of service availability and keep our network security levels ahead of our business demands, while pushing for more standardization through automation. The Principal OT Security Architect will assess, improve, and maintain the network security of the global manufacturing Operations Technology (OT) environment, and build new processes & procedures and develop guidelines for the business to adhere to. The Principal OT Security Architect will assess, improve, and maintain the cybersecurity posture of Global Manufacturing Operational Technology (OT) environment including Industrial Control Systems (ICS), Factory Automation systems and others as needed. Additionally, will be a subject matter expert (SME) in delivering controls to mitigate both insider and external risks and security risks.

Role Responsibilities

• Lead all aspects of architectural activities for a technology domain, or architectural practice area, or manage the development of solution architectures for projects or programs within a business area.
• Define standards and direction of architecture in the specific business or technical domain. Define and develop the logical design and information management strategies vital to store, move and manage data in a new target state.
• Create architecture patterns to suggest the most adequate utilization of technical platforms in support of the holistic solution architecture design.
• Define, build, and evolve the Architecture Governance Framework (e.g., architecture methods, practices and standards) for IT/IOT/OT.
• Define, design, apply and support security controls to OT systems in our sites and own and define the architectural security standards for OT. The candidate will lead a team of domain specialists on this matter.
• Analyzes, designs, and develops roadmaps and implementation plans based upon a current vs future state.
• Develop and implement measures, tools, and technology to monitor compliance with company security policies and procedures, laws and regulations.
• Leads the research and analysis of new security trends relating to OT security network.
• Manages relationships with engineering teams and collaborates with teams across the organization to ensure network security levels are maintained at the highest level.
• Explores raw network traffic & performs in-depth data analysis utilizing various tools.
• Create useful and creative data queries & relevant dashboards and reports to key stakeholders.
• Initiation, Prioritization, and design of R&D work based on customer needs.
• Optimize operational excellence and ensure best practices for security are followed.
• Claroty, Palo NGFW, and Zsclaler solution design, operation, and reporting.
• Serve as a key thought leader, helping to maximize the value of Information Security and IT.
• Define and monitor metrics to assess the overall value/maturity of cybersecurity investments.
• Serve on various forums (e.g., Information Security / OT Lead Teams) to analyze projects, programs, and products to ensure they are technological sound, will do no harm, and will deliver the expected outcomes.
• Recognize the value of emerging technologies and practices with intent to accelerate cybersecurity capabilities for manufacturing and lab environments.
• Develop and implement measures, tools, and technology to monitor compliance with company security policies and procedures, laws, and regulations.
• Perform testing against ICS/OT devices, networks, and security control mechanisms.
• Provides leadership, technology guidance, collaboration and mentoring of key stakeholders and teams; develops and motivates to create a positive culture and working environment

Why you?

Basic Qualifications:

• Bachelor’s degree in computer engineering, Electrical Engineering, Computer Science, or a related technical field
• 5+ years of IT and Operational Technology Security experience with a focus on working with Industrial control system cybersecurity frameworks, such as IEC62443, NIST (CSF) Cyber Security, and SANS CIS control frameworks.
• Expertise on developing OT security programs and securing OT security network architectures.
• Solid foundation in laboratory / ICS support which was build up with IT topics like network architectures, network protocols, industrial protocols, Active Directory, Backup processes, virtualization of applications and other general IT knowledge.
• Fundamental knowledge in IT-Security threat modelling, vulnerability assessments and pen-testing.
• Experienced in the use of tools for incident investigations, simulation, and forensics - GxP regulations.
• Ability to present technical design proposals and reports to customers and/or other senior engineering, management, and government groups in clear, complete, concise, and non–ambiguous terms.
• Excellent presentation, written and verbal communication skills; ability to clearly communicate and have excellent consulting skills.
• Ability to undertake and complete tasks independently, meet schedules and delivery timelines, and to move swiftly from concepts and theory to action.
• Sound knowledge on Industrial Control Systems ICS environment including design, protocols, and integration (OT 4.0 experience)
• Firewall, Next Gen Firewalls, and security network subject matter expert (SME).

Preferred Qualifications:

• CISSP, GICSP, CISM or CFSE/CFSP certification preferred.
• CCIE or CCNP certification desired
• Claroty, Zscaler, and Azure experience desired.
• Open-minded, flexible, and thrive in a highly dynamic, fast-paced, ever-changing environment.
• Exposure of onsite travelling, site audit/security audit would be plus.

Overview

With over 18,000 employees worldwide, the Microsoft Customer Experience & Success (CE&S) organization is responsible for the strategy, design, and implementation of Microsoft’s end-to-end customer experience. Come join CE&S and help us build a future where customers come to us not only because we provide industry-leading products and services, but also because we provide a differentiated and connected customer experience.

Join our Security Customer Success Unit at Microsoft, a dynamic team dedicated to ensuring the security and success of our customers. As a Security CSA (Cloud Solution Architect) Lead, you will play a pivotal role in shaping our field execution strategies and driving customer success in a rapidly evolving cybersecurity landscape.

The Customer Success team will drive change management and adoption activities with key business decision makers and IT decision makers, helping reduce implementation risk, driving usage of existing solutions, and identifying opportunities to accelerate the path for customers to realize business value from their investments.

Responsibilities

Customer Centricity

• Drive positive Customer Satisfaction & become a trusted advisor. Provide feedback & insights from customers/partners. Be the Voice of Customer to share insights and best practices, connect with Global Security teams at Microsoft, Engineering and Product teams to remove blockers and influence the solution roadmap.
• Experience in the implementation (end to end) of Data Security projects with Data Security Platforms, preferably experience with Microsoft Purview (Information Protection, Data Loss Prevention, Information Risk Management)
• Guides other team members to focus on customer/partner experience through efficient delivery and ensuring a seamless and connected customer experience. Supports definition of customer/partner conditions of success. Anticipates customer/partner dissatisfaction and unmet needs and executes strategies to improve experience, value realization, and acceleration of customer transformation.
• Lead and execute Field Usage and Consumption Strategy projects, providing structure and guidance to ensure successful outcomes.

Business Impact

• Position and deliver solutions that drive Security product usage and develop opportunities to drive Customer Success business results & help Customers get value from their Microsoft investments. Identify resolutions to Customer blockers by leveraging SA subject matter expertise.
• Deliver according to MS best practices & using repeatable IP. Accelerate Business Value of overall Security adoption by improving security posture and ensuring that the solution exhibits “Secure by Design” framework, such as high-performance levels, security, scalability, maintainability, appropriate reusability, and reliability upon
• Collaborate and orchestrate with other CSAs and MS stakeholders including FastTrack, partner, and Microsoft Consulting in developing complex end-to-end Enterprise solutions with the Microsoft Security platform.
• Drives consumption and usage rigor and discipline by developing and leading inclusive and regular rhythm of business (ROB) processes for a large subsidiary. Delivers on business commitments, collect performance data, report performance to Global Lead and Strategy Team, and informs future plans and decisions (e.g., forecasting, anticipated barriers). Leads a coaching rhythm in alignment to Microsoft's coaching framework and worldwide rhythym framework practices, integrated both locally and with Corporate.
• Creates culture to drive operational and pipeline excellence, with particular focus on the key performance indicators (KPIs) covering operating model metrics (e.g., growth, velocity, efficiency, resource allocation) to ensure consistent execution against strategy. Escalates to ensure removal of blockers related to the customer business and/or internal processes to deliver technical and operational excellence in Customer Success teams and accelerate customer adoption. Leads area-level/global-level rhythm of business (ROB) and instills a sense of urgency for strategic agility through other leaders. Identifies widespread or global patterns in blockers and develops strategies to resolve and prevent them in the future. Assesses and prioritizes high-impact technical blockers, and coaches team to enable resolution. Leverages systems for identifying leading and lagging indicators of success across customer success pipeline at the area/regional level (as appropriate). Drives area/regional accountability (as appropriate) to identify gaps in execution leading to optimizing customer success delivery for value realization.

Technical Leadership

• Leverages credibility and expertise to act as executive-level technical sponsor and leader for customers and partner ecosystem to continuously evolve and grow through the digital transformation journey (e.g., increase usage/consumption to drive customer expansion, upsell and renewal recapture rates). Provides area/global thought leadership for technical integration and innovation with the area leadership team. Creates culture of technical community engagement with customers and partners to influence actions and results at senior and executive levels of their organizations. Drives technical executive sponsorship with the customer and partner and influences strategy for regional scale. Leads critical engagements with customer and partner senior leadership, providing executive support for the Customer Success Unit (CSU) team to align operational plans with the organization's strategies to drive customer and partner obsession.
• Advocates to drive customer technical requirements with corporate product and engineering teams. Creates an internal feedback loop to drive broad, systemic continuous improvement for customers across Microsoft (e.g., security, product support). Leverages and creates customer and employee forums for open feedback and collaboration across teams. Invests in building and maintaining a strong network with corporate engineers to quickly meet customer and partner needs.
• Serves as an expert/spokesperson, as appropriate around key technical, operational and customer success topics (e.g., product/service lifecycle, customer perspective) to influence and drive recognition for Microsoft solutions and brands by speaking at events, having an active presence on social media platforms, and encouraging organizational participation. Leverages subject matter expertise to be and influencial voice in the area/globally, clarifying technical and operational questions and technology position. Supports Customer Success Unit (CSU) community-building internally and externally by providing community thought leadership and orchestrating with professional network to promote learning.

Qualifications

Required/Minimum Qualifications

• Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, or related field AND 4+ years experience in cloud/infrastructure technologies, information technology (IT) consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, and/or consulting
• OR equivalent experience
• 4+ years of experience and understanding of large-scale security deployments in enterprise-wide environments.

Additional or Preferred Qualification

Desired Microsoft Technology & Industry Equivalent. Certification in one or more of the following areas:

• Programming experiences, using Microsoft Information Protection SDK (e.g. PowerShell, C#, Python)
• Technical Certification in Microsoft SC-400 – Microsoft Information Protection Administrator)

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.