Total 5 staffing consultant job vacancies in Legal / Public / Security category in D22 Jurong, Jurong Island, Tuas

As a Senior Cloud Security Consultant, you will be responsible for strategic delivery, helping our customers securely adopt Google Cloud. As an established trusted advisor, you will span operational, tactical, and strategic levels and tasks that tackle complex problems businesses face when building and improving their security posture on Google Cloud. This is an opportunity to showcase your strong communication skills and experience in security governance, risk management, security operations, security architecture, and cyber incident response programs.

Responsibilities

• Lead the structuring, planning, and execution of critical security-related engagements with Google Cloud customers.
• Provide domain expertise in Google Cloud computing security and be a trusted advisor to customers.
• Guide on building or maturing cloud security programs and implementing tools and approaches for improving cloud security.
• Must be willing to travel up to 30% of the time in-region for meetings, technical reviews, and onsite delivery activities, as required

Requirements

• Bachelor’s degree in Computer Science, Engineering, Technology, or related technical field or equivalent practical experience
• 10+ years experience in leading projects and delivering technical solutions related to security
• Experience architecting, developing, or maintaining secure cloud solutions
• Demonstrated experience in consulting or ownership of Security during high-speed environment migration for large-scale businesses with regulatory requirements
• Strong verbal and written communication skills (English), and the ability to develop high-quality technical documentation and presentation material

Your background

• Previous information technology/security audit/assessment experience preferred.
• Ability to leverage attention to detail and analytical skills.
• Ability to multi-task and work both independently as well as part of an assessment team
• Ability to plan, execute and document assessment and remediation activities following established processes and procedures.
• Must be comfortable in delivering messages across a wide spectrum of individuals having varying degrees of technical understanding.
• Minimally, CISSP and/or CISA certifications are required as well as five to eight years of experience in information security or business continuity.
• Technical skills include the domains of information security and business continuity including:
  Information Security Controls (Cloud Security, Infrastructure Security, Access Management, Physical Security, Application Security, etc.),
  IT Compliance, SOX Compliance
  Change Management
  Enterprise Risk Management
  Solid grasp of NIST, PCI, ISO, SDLC, COBIT, and ITIL standards.
• Must be able to travel up to 25% of the time.
• Experience in Cloud technologies, OSINT and threat modeling will be advantageous.

What you can expect

The Third Party Cyber Security Assessor will conduct information security and business continuity assessments of third parties providing services to Bank of America. The assessor will examine a third party's program to determine if they meet the Bank’s requirements, identifying control gaps that may expose the Bank to risks and subsequently work with the third party on all remediation activities.

To succeed in this role, you should be highly independent, motivated and possess strong, hands-on, technical knowledge of a wide range of information security and business continuity controls and the processes used for evaluating their design and effectiveness and possess strong written and verbal communication skills including ability to communicate clearly and concisely to various levels, up to and including executive level management, and explain the need for key controls to technical and non-technical resources.

There will be opportunities to be involved in projects to improve processes & transform the assessment program. This will enable you to leverage and grow your leadership skills as you'll be expose to various internal stakeholders and industry partners.

What you will do

• Manage and execute assessments of third parties providing services to Bank of America.
• Evaluate design and effectiveness of controls implemented by third parties providing services to Bank of America
• Drive remediation of issues identified through the assessments and any subsequent risk conversations with the third parties and other internal stakeholders.
• Interface with external third parties and internal line of business stakeholders to provide consultation on information security topics and build strong working relationships with these parties.
• Partner with regional and global GIS teammates to collaborate on opportunities and to identify, analyze, and resolve complex problems or security gaps.
• Contribute to the development and transformation of the Third Party Cyber Assurance program.
• Conduct cyber risk assessment in support of technology initiatives to help identify IT related risk and determine appropriate controls to mitigate risks.
• Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions.

About Bank of America

Our purpose as a firm is to make financial lives better, through the power of every connection. Across the world, we partner with leading corporate and institutional investors through our offices in more than 35 countries. In the U.S. alone, we serve almost all of the Fortune 500 companies and approximately 67 million consumer and small-business clients. We provide a full suite of financial products and services, from banking and investments to asset and risk management. We cover a broad range of asset classes, making us a global leader in corporate and investment banking, sales and trading.

Connecting Asia Pacific to the world

Our Asia Pacific team is spread across 19 cities in 12 markets. We are focused on connecting Asia to the world and the world to Asia, using our global expertise to ensure success is shared between us, our clients and our communities. Our regional footprint covers 12 currencies, more than a dozen languages and five time zones, placing us firmly among the region’s leading financial services companies.

Summary

The Security consultant is a pivotal technical role essential for facilitating Zero Trust deployment initiatives. This role encompasses conducting thorough gap analyses, proficient project management, and delivering technical advisories. Collaboration with cross-functional regional teams across the Asia-Pacific region is integral to this role. The ideal candidate will exhibit a robust understanding of the Zero Trust framework (CISA Zero Trust Maturity Model and Microsoft Zero Trust Model), possess broad security experience, analytical acumen, and demonstrate a proactive approach to project management. This position will report to HQ.

Skills/Qualifications:

• At least 5+ years of experience in the cybersecurity industry.

• Consulting experience in Cyber domain.

• Proven experience in security engineering, with a focus on Zero Trust deployment.

• Consultation capability in related technology and or related service to customer.

• Great communication and interpersonal skills

• Bilingual (English / Japanese) preferred but not required (proficient English is a requirement)

• Proactive approach to problem-solving and project management, with a strong commitment to achieving objectives and deadlines.

• Project management experience.

Technology Proficiency:

• Core expertise in Microsoft technologies.

• Azure Active Directory (AAD), identity management and MFA

• Microsoft Endpoint Manager

• Network Security, Azure Virtual Network and Azure Firewall

• Data Protection, Microsoft Information Protection (MIP) classifying, labelling, and protecting sensitive data.

Main Responsibilities:

• Overall Security Posture: Support and maintain APAC’s information security strategy and ensure it is aligned with Global security strategy based on Zero Trust

• Zero Trust Deployment Support: Lead and support Zero Trust deployment initiatives, ensuring alignment with organizational objectives and security best practices, Possess a strong background in security with a focus on general high-level knowledge.

• Gap Analysis: Conduct comprehensive gap analyses to identify vulnerabilities and areas for improvement within existing security frameworks in APAC region. Perform APAC’s Information Security Risk Assessment in accordance with the Risk Register Policy and support information security risk assessments for APAC to determine the gaps to reach Zero Trust.

• Project Management: Effectively manage Zero Trust deployment projects, including planning, research, monitoring, and reporting.

• Technical Advisory: Provide expert technical guidance and advisory services to stakeholders, facilitating informed decision-making regarding Zero Trust implementation, although not responsible for implementation, must comprehend the technical aspects of security technology and planning.

• Cross-Functional Collaboration: Collaborate closely with cross-functional teams across the APAC region to ensure seamless integration and alignment of Zero Trust initiatives with broader organizational objectives.

• Documentation: Maintain accurate documentation of Zero Trust deployment processes, procedures, and best practices for reference and future optimization.

Additional General Responsibilities:

• Promote the use of ‘right-sized’ solutions for APAC, including Global Shared Information Security Services, to drive increased standardization and effective use of security resources.

• Promote an information security-conscious culture.

• Collaboratively work with APAC to develop and implement processes that meet Global information policy and standards.

• Support information security activities across APAC (align activities where possible, foster joint plans, etc.).

• Collaborate with APAC’s legal and compliance to ensure APAC is compliant with local information security laws and regulations.

• Support the efforts of APAC’s Security delivery resources to execute to expectations.

• Encourage the development of innovative ideas that solve root causes of identified problems.

• Build and develop cross functional relationships within APAC to engender support of security projects.

• Coordinate technical input and recommendations from GISS to APAC

• Work on global initiatives as part of working groups (e.g.: standards refresh, new technology discussion, etc.)

Summary

The Security consultant is a pivotal technical role essential for facilitating Zero Trust deployment initiatives. This role encompasses conducting thorough gap analyses, proficient project management, and delivering technical advisories. Collaboration with cross-functional regional teams across the Asia-Pacific region is integral to this role. The ideal candidate will exhibit a robust understanding of the Zero Trust framework (CISA Zero Trust Maturity Model and Microsoft Zero Trust Model), possess broad security experience, analytical acumen, and demonstrate a proactive approach to project management. This position will report to HQ.

Skills/Qualifications:

• At least 5+ years of experience in the cybersecurity industry.

• Consulting experience in Cyber domain.

• Proven experience in security engineering, with a focus on Zero Trust deployment.

• Consultation capability in related technology and or related service to customer.

• Great communication and interpersonal skills

• Bilingual (English / Japanese) preferred but not required (proficient English is a requirement)

• Proactive approach to problem-solving and project management, with a strong commitment to achieving objectives and deadlines.

• Project management experience.

Technology Proficiency:

• Core expertise in Microsoft technologies.

• Azure Active Directory (AAD), identity management and MFA

• Microsoft Endpoint Manager

• Network Security, Azure Virtual Network and Azure Firewall

• Data Protection, Microsoft Information Protection (MIP) classifying, labelling, and protecting sensitive data.

Main Responsibilities:

• Overall Security Posture: Support and maintain APAC’s information security strategy and ensure it is aligned with Global security strategy based on Zero Trust

• Zero Trust Deployment Support: Lead and support Zero Trust deployment initiatives, ensuring alignment with organizational objectives and security best practices, Possess a strong background in security with a focus on general high-level knowledge.

• Gap Analysis: Conduct comprehensive gap analyses to identify vulnerabilities and areas for improvement within existing security frameworks in APAC region. Perform APAC’s Information Security Risk Assessment in accordance with the Risk Register Policy and support information security risk assessments for APAC to determine the gaps to reach Zero Trust.

• Project Management: Effectively manage Zero Trust deployment projects, including planning, research, monitoring, and reporting.

• Technical Advisory: Provide expert technical guidance and advisory services to stakeholders, facilitating informed decision-making regarding Zero Trust implementation, although not responsible for implementation, must comprehend the technical aspects of security technology and planning.

• Cross-Functional Collaboration: Collaborate closely with cross-functional teams across the APAC region to ensure seamless integration and alignment of Zero Trust initiatives with broader organizational objectives.

• Documentation: Maintain accurate documentation of Zero Trust deployment processes, procedures, and best practices for reference and future optimization.

Additional General Responsibilities:

• Promote the use of ‘right-sized’ solutions for APAC, including Global Shared Information Security Services, to drive increased standardization and effective use of security resources.

• Promote an information security-conscious culture.

• Collaboratively work with APAC to develop and implement processes that meet Global information policy and standards.

• Support information security activities across APAC (align activities where possible, foster joint plans, etc.).

• Collaborate with APAC’s legal and compliance to ensure APAC is compliant with local information security laws and regulations.

• Support the efforts of APAC’s Security delivery resources to execute to expectations.

• Encourage the development of innovative ideas that solve root causes of identified problems.

• Build and develop cross functional relationships within APAC to engender support of security projects.

• Coordinate technical input and recommendations from GISS to APAC

• Work on global initiatives as part of working groups (e.g.: standards refresh, new technology discussion, etc.)

Summary

The Security consultant is a pivotal technical role essential for facilitating Zero Trust deployment initiatives. This role encompasses conducting thorough gap analyses, proficient project management, and delivering technical advisories. Collaboration with cross-functional regional teams across the Asia-Pacific region is integral to this role. The ideal candidate will exhibit a robust understanding of the Zero Trust framework (CISA Zero Trust Maturity Model and Microsoft Zero Trust Model), possess broad security experience, analytical acumen, and demonstrate a proactive approach to project management. This position will report to HQ.

Skills/Qualifications:

• At least 5+ years of experience in the cybersecurity industry.

• Consulting experience in Cyber domain.

• Proven experience in security engineering, with a focus on Zero Trust deployment.

• Consultation capability in related technology and or related service to customer.

• Great communication and interpersonal skills

• Bilingual (English / Japanese) preferred but not required (proficient English is a requirement)

• Proactive approach to problem-solving and project management, with a strong commitment to achieving objectives and deadlines.

• Project management experience.

Technology Proficiency:

• Core expertise in Microsoft technologies.

• Azure Active Directory (AAD), identity management and MFA

• Microsoft Endpoint Manager

• Network Security, Azure Virtual Network and Azure Firewall

• Data Protection, Microsoft Information Protection (MIP) classifying, labelling, and protecting sensitive data.

Main Responsibilities:

• Overall Security Posture: Support and maintain APAC’s information security strategy and ensure it is aligned with Global security strategy based on Zero Trust

• Zero Trust Deployment Support: Lead and support Zero Trust deployment initiatives, ensuring alignment with organizational objectives and security best practices, Possess a strong background in security with a focus on general high-level knowledge.

• Gap Analysis: Conduct comprehensive gap analyses to identify vulnerabilities and areas for improvement within existing security frameworks in APAC region. Perform APAC’s Information Security Risk Assessment in accordance with the Risk Register Policy and support information security risk assessments for APAC to determine the gaps to reach Zero Trust.

• Project Management: Effectively manage Zero Trust deployment projects, including planning, research, monitoring, and reporting.

• Technical Advisory: Provide expert technical guidance and advisory services to stakeholders, facilitating informed decision-making regarding Zero Trust implementation, although not responsible for implementation, must comprehend the technical aspects of security technology and planning.

• Cross-Functional Collaboration: Collaborate closely with cross-functional teams across the APAC region to ensure seamless integration and alignment of Zero Trust initiatives with broader organizational objectives.

• Documentation: Maintain accurate documentation of Zero Trust deployment processes, procedures, and best practices for reference and future optimization.

Additional General Responsibilities:

• Promote the use of ‘right-sized’ solutions for APAC, including Global Shared Information Security Services, to drive increased standardization and effective use of security resources.

• Promote an information security-conscious culture.

• Collaboratively work with APAC to develop and implement processes that meet Global information policy and standards.

• Support information security activities across APAC (align activities where possible, foster joint plans, etc.).

• Collaborate with APAC’s legal and compliance to ensure APAC is compliant with local information security laws and regulations.

• Support the efforts of APAC’s Security delivery resources to execute to expectations.

• Encourage the development of innovative ideas that solve root causes of identified problems.

• Build and develop cross functional relationships within APAC to engender support of security projects.

• Coordinate technical input and recommendations from GISS to APAC

• Work on global initiatives as part of working groups (e.g.: standards refresh, new technology discussion, etc.)