Total 131 Legal / Public / Security job vacancies in Loyang, North East

Job Summary

Seeking IT Security professional with a keen interest in Information Technology (IT) Governance, Risk and Compliance to enable cyber resilience and information security for mission critical systems.
The individual will be responsible to conduct cyber risk assessment in support of technology initiatives to help identify IT related risk and determines appropriate controls to mitigate risks.

Mandatory Skill-set

• Degree in Computer Science, Information Security or Information Systems;
• At least 2-3 years of experience in IT security space with a strong experience in IT GRC ( Governance, Risk and Compliance ) related functions;
• Deep knowledge and understanding of internal controls, security frameworks, risk management and IT governance, auditing techniques and methodologies;
• Good knowledge of enterprise IT systems and components (applications, operating systems, databases, networks, cloud, DevOps;
• Knowledgeable in using various cyber security monitoring and analysis tools and techniques depending on the organization's needs and requirements;
• Familiar with cyber security standards, protocols and frameworks such as NIST CSF, CIS, PDPA;
• Strong in analytical thinking with attention to detail;
• Excellent communication and inter personal skills.

Responsibilities

• Act as a Subject Matter Expert on IT Governance, Risk management and Compliance (GRC) and related policies and procedures;
• Responsible for documenting methodologies and tools to mitigate information security or cyber risk;
• Prepare reports for information security or cyber risk related reporting, threat awareness and security awareness reports;
• Conduct compliance assessments and tracking the overall compliance health in relation to IT governance standards and procedures in compliance with regulatory requirements;
• Recommend corrective actions or appropriate security controls to mitigate technical risk;
• Continuously identify GRC Key risk indicators (KRI) and maintain IT Risk Register;
• Assist in the development of policies for conducting cyber security risk assessments and compliance audits;
• Formulate governance procedures for documenting and updating security policy, standards, guidelines and procedures;
• Perform information security or cyber risk assessment activities and assess third party security controls and internal security systems;
• Establish scope of risk analysis for new technology initiatives;
• Keep abreast of the dynamic cyber threat landscape and identify opportunities for enhancement of IT risk processes;
• Provide regular updates on the overall health of compliance, criticality assessment, audit findings, remediation and action plans.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

Job Description :

• Coordinate all related construction matters with the Subcontractor/ Consultant/ Client.
• Resolve technical problems at site by developing solutions to problems with the application of engineering concepts, practices, and techniques.
• Plan and schedule work progress for construction operations & develop micro schedule.
• Coordinate with consultants on the day-to-day inspection on-site and resolve discrepancies and other detailing problems in the construction works with the consultants and superiors.
• Assist project manager to prepare daily/weekly and monthly site reports and submit to the planning department.
• Prepare all method statements, drawings, and risk assessments for the client to review.
• Review and verify all Civil and Structural related engineering works are complying with the requirement.

Job Requirements:

• Degree in Civil/ Structural Engineering.
• At least 2 years working experience in civil engineering/infrastructure projects.
• Working location at Jurong East
• 5.5 days work week

Duties and Responsibilities:

• Handle public complaints and feedback related to project site.
• Prepare letters and notices to communicate with community and residents regarding development of project.
• Implement public relationship programme.
• Arrange and attend meetings on public relation matters with project team where necessary.
• Prepare a monthly report to update on the feedbacks and complaints.
• Maintain good relationship with clients and residents.
• Assist other general administrative support to the project teams.
• Perform other duties as assigned.

Job Specification:

• Diploma or Degree in any field.
• Minimum 3 years’ relevant experience working in a public-facing role.
• Willing to work at site office environment.
• Good communication skills.
• MRT working experience would be an added advantage.
• Independent, possess excellent interpersonal and communication skills and emotional maturity.
• Working Location: Tampines

- To answer occasional phone calls from public

- Station on Site to attend to feedbacks

- Attend monthly site meeting and prepare minutes of meeting

- Need to do site administration work:

Purchase orders, compilation of Delivery oders, Workers attendance and Work pass and safety course attendance

- Minimum 2 Years experience in public relations service or hospitalities and tourism field

- 5-Day work week

Site Office Location:

Ang Mo Kio Industrial Park 2

50 metres walking distance from Ang Mo Kio Ave 1

Bus Stop No: 54101

Job Descriptions

• Work closely with Technical Engineer to translate customers' requirements into detailed drawings for tender submission, projects, etc.
• Ensure drawings meet relevant code and compliance requirements
• Rectify and update latest drawings accordance to changes
• Maintain good document control - ensuring drafting list record is always up to date
• On site measurement if required

​ Job Requirements :-

• Min. 3 years of experiences in Aluminium / Construction / Architectural or relevant industry
• ITE / Diploma in Civil Engineering / Structural / any other relevance qualification
• Proficient in AutoCAD
• Strong sense of accountability and ability to quickly prioritize tasks based on urgency in a fast paced environment
• Excellence analytical, communication, organizing and interpersonal skills
• Independent but also a team player

• Supporting a range of Cyber Security tools including Exabeam, CarbonBlack, Tripwire, CyberArk, TrendMicro AV, Splunk, DAM, Tenable and RSA.

• Managing designated vendors for the specified Security tools.

• Driving the scheduling of security-related projects and remediation timelines.

• Maintaining, troubleshooting, patching, and updating various security tools and scanners used in MAS.

• Recommending process re-engineering and streamlining to enhance workflows and efficiencies.

• Delivering management reporting and dashboarding to stakeholders, including data and trend analysis, and recommending next steps.

• Following up on remediation actions, security and risk assessments with respective stakeholders and applications teams.

• Conducting daily health check and validating system availability through various monitoring/checks.

• Implementing of the service requests, change requests and support of incident management.

• Fine tuning of rules, updating of contents packs to suit the different use cases in

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions are developed and designed with security inbuilt.

Key Responsibilities

• Provide security consultancy, technical guidance, expertise, solutions, and education for the enterprise.

• Advise IT application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

• Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

• Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

• Advise and review security by design concepts in Cloud platforms such as GCP, AWS or Azure Cloud.

• Advise and review the compliance of integrating security tools and processes into the DevOps pipelines.

• Advice and review the adherence to security requirements for low code platforms.

• Perform threat modeling on security-critical applications. Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews, and audits to ensure security assurance is achieved.

• Manage individual project priorities, deadlines, and deliverables. Any relevant ad-hoc duties.

• Review RFP proposal compliance with security requirements.

• This is an individual contributor role. Strong communication skills are required.

• Note: You could be posted to any subsidiary in the SIA Group.

Requirements

• Degree in IT or related fields, with at least 7 years in information security, especially in the application security space.

• Professional security certifications (CISSP, CSSLP, CEH, CCSP, etc.) preferred.

• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

• Strong in-depth working knowledge of secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), and Software Composition Analysis (SCA).

• Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud platforms, such as AWS and GCP. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

• Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods, etc. Any prior vulnerability management experience is preferred.

• Strong understanding of technologies such as WAF, Anti Bot Protection

• Prior experience in application development and knowledge of the DevOps platform is desired.

• Strong oral, written, presentation and interpersonal skills.

• Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

• Able to work independently and in a team-oriented, collaborative environment.

Job description

• Troubleshooting security and network problems.
• Perform vulnerability assessment using automated tools and recommend actionable follow up to remediate the vulnerabilities and/or threats uncovered.
• Provide maintenance support for security systems and tools, including firewalls and other security technologies, as per the maintenance contract requirements.
• Perform system upgrades, patches, and backups to ensure the security systems are up-to-date and running efficiently.
• Provide incident response support, troubleshoot security incidents, and work closely with end users to resolve issues in a timely resolution.
• Proactivity monitoring, support and troubleshoot network bandwidth capacity and network performance to ensure uninterrupted services.
• Manage and maintain Cisco ISE for network access control and policy enforcement.
• Coordinate and manage local and regional ISP on maintenance, changes, and implementation of WAN (SD_WAN).
• Report network operational status by gathering and prioritizing information and managing network projects.

Requirements

• Diploma or Degree in IT or Computer Science
• Min 4 years of relevant experience in IT Infrastructure and Operations Automation Experience
• Knowledge of regulatory requirements and security compliance standards relevant to network infrastructure.
• Professional Certification and at least 4 years’ hands on experience in routing & switching - good to have CCNP.
• Professional Certification and at least 4 years’ hands on experience in network security - good to have PCNSE (Palo Alto).
• Professional Certifications and at least 2 years hands on experience in Cyber security and optional CEH, SSCP, ISC2, Microsoft Security Fundamentals (good to have)
• Any relevant Microsoft cloud security certifications (AZ-500, MS-101, MS-500)
• Good Understanding of network and security fundamentals (Concepts, Protocols. Troubleshoots).
• Experience with Windows Defender Advanced Threat Protection and latest Microsoft E5 Security Product set
• Experience in testing and evaluating Security products in a Lab environment.
• Ability to manage multiple priorities and work independently.
• Positive and professional working attitude, ability to work as a team or individual under stress with minimum supervision and deliver on tight deadlines in fast-paced environment.
• Hands on experience in one or more of the following technologies as below:
• Routing/Switching – Cisco, Meraki
• Network Security – Cisco ISE
• Firewalls/Proxy – Palo Alto, Cisco, Zscaler
• WAN – VeloCloud
• Cloud - Azure

• Ensure materials purchased are according with companies SOP.
• Raise daily PO to Admin Manager for approval.
• Responsible for requisition process for new product, from sourcing, negotiating quotations, renew and discontinue contract with supplier.
• Perform checks on suppliers, DO are received and return to Accounts Department.
• Evaluate supplier core competencies and competitiveness to meet business objectives and achieve sustainable relationships with suppliers.
• Keep all the internal forms and suppliers documents (Vendor File) up to date.
• Daily inventory check.
• Issue PO.
• Update price in system and record to price list file (excel).
• Assist with any ad-hoc duties related to admin & purchasing.

Play a part in safeguarding the security of Singapore’s air and sea gateways with SATS Auxiliary Police Force!

As a Auxiliary Police Officer (APO), you will provide security services to airlines towards the protection of its fleet and passengers, as well as for other vital installations in Singapore towards the protection of its assets. Deployment sites include Changi Airport, Marina Bay Cruise Centre, SATS premises and other installations.

**Joining Bonus up to $40,000** Terms & Conditions apply

Requirements:

• Minimum 3 'N' level credits (diploma holders may be considered for Sergeant rank)

• Physically fit (APO role has IPPT requirements)

• Normal color vision

• Able to work 3 rotating shift hours

• Position available for Armed officers.

Senior Manager, Or Manager - Cyber Security & IT Governance

Responsible for the assessment, development, implementation and maintenance of enterprise-wide cyber security and IT Governance programmes to preserve the confidentiality, integrity, and availability of information resources. As part of the IT leadership team, this individual will be expected to provide technical leadership and consultation across the organisation. S/he will also work with external experts to implement security solutions, detect, and contain cyber security incidents.

Responsibilities

Cyber Security:

Assess and review environment and cybersecurity measures to ensure security and operational effectiveness, for e.g. network, system, application, endpoint security, physical and logical access security, etc.

Review and develop security framework, information security policies, processes, procedures, and guidelines.

Conduct cybersecurity risk assessments, penetration tests, and IT controls tests.

Identify security gaps and propose mitigating measures and escalate security incidents and non-compliances on a timely basis.

Evaluate, deploy, and maintain cybersecurity infrastructure to improve cybersecurity posture. Design, implement and maintain security incident response and escalation procedures.

Monitor, analyze and correlate events to determine the best course of action, to mitigate and contain threats when detected.

improve cybersecurity awareness of staff, for e.g. by conducting awareness training. Automate security controls, data, and processes.

IT Governance:

Review and enhance IT policies, standards, guidelines, and best practices regularly to ensure that these are aligned to organization objectives and industry best practices.

Develop and implement effective change management plans (such as communication plans and training programs) to drive adoption and compliance.

Participate in audit planning meetings with internal/external auditors, collate/provide the required materials on a timely basis, validate audit findings, provide remediation solutions, and implement the agreed solutions on a timely basis.

Drive security access and activity log reviews on regular basis.

Promote IT risk management, governance, and compliance culture across the organization.

IT Management:

Contribute to IT strategic planning and budgeting. Ensure IT vendors meet contractual obligations.

Maintain up-to-date knowledge on cybersecurity technologies and standards.

Attend to any other reasonable duties as assigned by Director, Information Technology.

Requirements

Degree in engineering, science or information technology, or equivalent education.

8-10 years of related work experience in cybersecurity management and security governance.

Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.

Strong understanding of cybersecurity standards.

Hands-on experience with cybersecurity tools such as Next Generation Firewalls, SASE, Endpoint Protection, Data Loss Protection, Email Security, etc.

To apply:

Please email Resume in Microsoft Word format

Please state your Position/ positions applied on the “on TOP” of your resume.

Please state Available Commencement Date or notice period

Please state current and last SALARY and Expected Salary in your resume.

Please state Reasons for leaving current & previous Employment.

Cyber Security, Associate Engineer

Salary: up to $4000+

Responsible in maintaining and improving the organization’s cybersecurity posture on an ongoing basis. S/he will work with external experts to implement security solutions, and work with vendors to monitor, detect and contain cybersecurity incidents to minimize impact to the organization.

Responsibilities

• Assist in the development of information security policies, processes / procedures and guidelines on an ongoing basis.

• Work with vendor to conduct security assessments and penetration tests.

• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.

• Standardize and refine security incident response and escalation processes.

• Mitigate and contain threats when detected.

• Escalate security incidents and non-compliances on a timely basis.

• Work with IT infrastructure team to evaluate, implement and enhance the network perimeter security, endpoint security, SIEM.

• Monitor information security alerts triage, mitigate, and escalate issues as needed.

• Conduct information security awareness training.

• Provide security advisory to end users on regular basis.

• IT Security Management of various aspects, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.

• Keep abreast of industrial IT security advancements and introduce appropriate security enhancements to IT infrastructure and systems.

• To perform daily monitoring of logs and review of security notifications and alerts, and assist on the assessment and reporting weekly trends, incidents and security events. Abnormalities found in the review of security events must be reported to the Cyber Security Manager.

• To provide daily technical support in terms of Cyber Security operations for Sophos Endpoint Protection, Cisco FTD Firewall, Advanced Email Threat Protection, Web Application Firewall, Cisco Email Security, DG DLP, Tenable SCCV, Splunk, Cisco Umbrella, etc.

• Attend to any other reasonable duties as assigned by the Senior Cyber Security & IT Governance Manager and IT Director.

Requirements

• Degree/ Diploma with min 2 years related work experience in cybersecurity management in Singapore.

• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.

• Good command of written and spoken English.

• Excellent interpersonal and communication skills.

• Pro-active, independent, resourceful, able to work in a team environment and work independently with minimal supervision.

To apply:

Please email Resume in Microsoft Word format

Please state your Position/ positions applied on the “on TOP” of your resume.

Please state Available Commencement Date or notice period

Please state current and last SALARY and Expected Salary in your resume.

Please state Reasons for leaving current & previous Employment.

JOB DESCRIPTION

• Administrative support to the Corporate Secretarial department
• Ensuring due diligence and compliance is performed
• Generation of reports, maintenance and upkeep of documents and records
• Sending of filing deadline reminders to clients
• Prepare billings and monitor debt recovery
• Answering of phone calls, arrangement of courier service
• Other ad-hoc services when required

REQUIREMENTS

• Degree or Diploma holder
• Completed or pursuing SAICSA or relevant post graduate/ professional qualifications will be of advantage
• Experience in administrative support for accounting, corporate secretarial firms or legal firms will be advantageous
• Good working knowledge of the Companies Act 1967
• High professional integrity
• Meticulous attention to fine detail
• Computer proficiency in Microsoft Office
• Proficiency in written and spoken English
• Must be able to work independently and interpedently
• Team player
• Able to work under pressure and tight deadline

Job Description
You will be a member of the Group Information Security Team responsible for initiating, implementing and maintaining security products and solutions to support enterprise security.

Key Responsibilities

• Subject matter expert (SME) for the security systems owned by the Information Security Team.
• Ensure security systems are utilised to their maximum capabilities.
• Plan, identify, assess, design, operationalise and maintain multiple security related software and/or hardware.
• Recommend and drive cyber security solution and initiatives to improve cyber security of the organisation.
• Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
• Provide security consultancy, technical guidance, expertise, solutioning and education.
• Advise infrastructure teams on security design that is relevant and fit for purpose.
• Identify and assess cyber risks in the IT infrastructure environment.
• Review firewall requests.
• Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.
• Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables.
• This is an individual contributor role. Deliver tasks with minimal supervision.
• Strong communication skills.

Requirements

• Degree in IT or related field, with at least 5 years in information security, especially in the application security space.
• Professional security certifications (CISSP, CSSLP, CEH etc) preferred.
• Experience in security products POC and RFQ.
• Prior experience in implementing and maintaining any of tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM etc. and/or network security. Able to review firewall requests.
• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.
• Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience preferred.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc.
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions (both applications and infrastructure) are developed and designed with security inbuilt.

Key Responsibilities

•Provide security consultancy, technical guidance, expertise, solutioning and education for en-terprise.

•Advise application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

•Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

•Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

•Perform threat modelling on security critical applications. Keep up to date on emerging secu-rity threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews and audits to ensure security assurance is achieved.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables. This is an individual contributor role. Strong communication skills.

Requirements

•Degree in IT or related fields, with at least 5 years in information security, especially in the application security space.

•Professional security certifications (CISSP, CSSLP, CEH, CCSP etc) preferred.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.

•Strong in-depth working knowledge in secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), Software Compo-sition Analysis (SCA).

•Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud technolo-gies. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

•Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc. Any prior vulnerability management experience preferred.

•Strong oral, written, presentation and inter-personal skills.

•Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

Civil Engineer (indoor office-based job)

Salary up to $5200

• To take charge of the Ducts and Manholes Implementation and Maintenance Works.

• To coordinate underground ducts and manholes implementation works with external parties.

• To support Plant Maintenance and Operation on Civil & Structural (C&S) matter

• C&S engineering SME

Responsibilities:

• New Development and Diversion of Services:

- Take charge and coordinate Service laying with main project team (Developer, Main Contractor) and authorities, including deconflicting with others for new build and diversion.

- Project Manage the implementation of underground ducts and Manholes within new development and service diversion.

- Review method statement and coordination drawings and other relevant construction documents.

• Review 3rd party submission on matters related to Netlink Underground Services

• Support Facilities and Maintenance team on Civil & Structural related issues.

• Participate in tender, contract administration

Requirements:

• Civil Engineering Degree with 3-year engineering/construction experience

• Diploma holders in Civil Engineering with extensive relevant experience will be considered

• Experience in infrastructure (Road works) projcts and its geotechnical aspects.

• Exposure in Service coordination with Authorities and Service providers

• Good understanding of Specifications, contracts and ability to read and interpret engineering drawings and engineering reports.

• Ablity to review Method statement. Ability to generate method statements is preferred.

To apply:

Please email Resume in Microsoft Word format

Please state your Position/ positions applied on the “on TOP” of your resume.

Please state Available Commencement Date or notice period

Please state current and last SALARY and Expected Salary in your resume.

Please state Reasons for leaving current & previous Employment.

A. Overall Purpose of The Job

The primary role of the Infrastructure Security Engineer is to support our security technologies to ensure smooth daily operation and its maintenance. This includes project delivery and subsequent refresh program for all the in-scope security devices.

B. Key Responsibilities

● Provide expert guidance and oversight in the day-to-day administration of various security tools, including Crowdstrike EDR, Netskope SWG, CyberArk PIM/PAM, and others.

● Take a sme role in building, implementing, and maintaining the CyberArk PIM/PAM solution within the Organization environment, ensuring the smooth operation of CyberArk PAM/PIM activities on a daily basis.

● Proactively identify issues and suggest potential solutions in operations.

● Manage and execute maintenance tasks, system upgrades, and the implementation of service packs, patches, hot fixes, and security configurations.

● Lead in-depth investigations into complex technical issues, collaborating closely with vendors until resolutions are achieved, and delivering comprehensive Root Cause Analyses (RCAs).

● Collaborate effectively with Server/Network/DB/App teams to efficiently onboard and configure devices and privileged identities.

● Demonstrate expertise in creating customized reports and dashboards within security tools, tailored to meet specific requirements.

● Maintain and update Standard Operating Procedures (SOPs), security standards, and procedures, ensuring they reflect best practices and the latest security protocols.

● Operate within the established configuration and change management policies to ensure that all changes made to security devices are well-documented, approved, and ultimately successful.

● Play a crucial role in the implementation of new infrastructure security technologies and products at Organization. This includes selecting the most suitable product vendor, conducting Proof of Concepts (POCs), and overseeing the product's implementation in collaboration with a preferred Systems Integrator (SI) partner.

C. Job Profile

Required Skills and Knowledge

● 7-8 years of valid experience in Infrastructure Security operations and projects

● 5-6 years of hands on experience in CyberArk PIM/PAM

● 3-4 years of hands on experience in any Endpoint Detection & Response and Secure Web Gateway technologies preferably Crowdstrike and Netskope

● Good understanding of Network Technologies, Systems, and Database

● Good understanding of security concepts (e.g., encryption, least privilege, need to know basis access, unauthorised access)

● Strong verbal and written communication skills and ability to work with all levels of management

● Firm understanding of IT Service Management processes and project management (i.e., ITIL and Agile)

● Team player and self-motivated

Required Qualifications

● Certifications in CyberArk Certified Delivery Engineer is preferred

● Cybersecurity certification such as CompTIA Security+ or CEH is an advantage

● University degree in Computer Science or a related field is preferred

- To answer occasional phone calls from public

- Station on Site to attend to feedbacks

- Attend monthly site meeting and prepare minutes of meeting

- Need to do site administration work:

Purchase orders, compilation of Delivery oders, Workers attendance and Work pass and safety course attendance

- Minimum 2 Years experience in public relations service or hospitalities and tourism field

- 5-Day work week

Site Office Location:

Ang Mo Kio Industrial Park 2

50 metres walking distance from Ang Mo Kio Ave 1

Bus Stop No: 54101

Job Objectives:

Tasked with aiding the Security Manager in safeguarding properties and ensuring the well-being of guests, employees, and the hotel. Supervise all activities of security staff to ensure compliance and proper application of department regulations and hotel policies. Documents all action in the department, including: emergencies, loss, theft, or accident.

Primary Responsibilities

• Manages the Security Department, alongside with Security Manager.
• Oversees the security department and their day to day operations.
• Trains all security personnel in their areas of responsibilities.
• Reviews policies, procedures, and instructions on a regular basis.
• Evaluates possible hazards or threats to security.
• Promotes a safety attitude amongst all employees.
• Ensures safety of persons in the hotel and property assets.
• Reports irregularity in employee or guest behavior.
• Handles loss, damage and accidents.
• Handles, documents, and follows up with necessary persons any accidents occurring in the hotel premises.
• Investigates theft as reported by guest or employee.
• Documents all action in the department, including: emergencies, loss, theft, or accident.
• Participates in weekly department heads meeting in absence of Security Manager - Rooms Division Meeting and any others if requested.
• Secondary liaison for interacting with government officials, ministries, and law enforcement agencies.
• Reviews emergency procedures regularly.
• Delivers security training and promotes awareness within the hotel.
• Performs other duties as assigned by Security Manager.

Job Requirements

• Minimum education of High Vocational diploma in any discipline. Bachelor degree holder have an advantage.
• At least 3 years’ experience in a similar position in security & safety operations.
• Basic knowledge of local laws, investigative methods and fire safety.
• Criminal-free record
• Have good English communication skills both in written and spoken
• Possess professional disposition with good communication and interpersonal skills

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions are developed and designed with security inbuilt.

Key Responsibilities

• Provide security consultancy, technical guidance, expertise, solutions, and education for the enterprise.

• Advise IT application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

• Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

• Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

• Advise and review security by design concepts in Cloud platforms such as GCP, AWS or Azure Cloud.

• Advise and review the compliance of integrating security tools and processes into the DevOps pipelines.

• Advice and review the adherence to security requirements for low code platforms.

• Perform threat modeling on security-critical applications. Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews, and audits to ensure security assurance is achieved.

• Manage individual project priorities, deadlines, and deliverables. Any relevant ad-hoc duties.

• Review RFP proposal compliance with security requirements.

• This is an individual contributor role. Strong communication skills are required.

• Note: You could be posted to any subsidiary in the SIA Group.

Requirements

• Degree in IT or related fields, with at least 7 years in information security, especially in the application security space.

• Professional security certifications (CISSP, CSSLP, CEH, CCSP, etc.) preferred.

• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

• Strong in-depth working knowledge of secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), and Software Composition Analysis (SCA).

• Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud platforms, such as AWS and GCP. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

• Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods, etc. Any prior vulnerability management experience is preferred.

• Strong understanding of technologies such as WAF, Anti Bot Protection

• Prior experience in application development and knowledge of the DevOps platform is desired.

• Strong oral, written, presentation and interpersonal skills.

• Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

• Able to work independently and in a team-oriented, collaborative environment.

Roles & Responsibilities:

• Responsible for projects management, planning and design works
• Meeting clients & services providers on scope of service and conduct field surveys
• Handling project evaluation, budgets, documentation, technical specification and coordination
• Conduct analysis and selection of systems; evaluate project budgets
• Complete design documents & technical specifications
• Work coordination with other disciplinary teams including architectural, mechanical and electrical
• Assist in e-Submission to authorities for utilities services and related building regulatory submissions

Requirements:

• Degree in Civil Engineering accredited by Professional Engineer Board, Singapore.
• Minimum 3 years of experience in the industry, preferably in consultancy firm
• Able to work independently with minimal supervision
• Singaporean only

Company Overview

Kiteworks’ mission is to empower organizations to effectively manage risk in every send, share, receive, and save of sensitive content. To this end, we created a platform that delivers content governance, compliance, and protection to customers. The platform unifies, tracks, controls, and secures sensitive content moving within, into, and out of their organization, significantly improving risk management and ensuring regulatory compliance on all sensitive content communication. Kiteworks is carrying its bold vision forward while maintaining strong profitability and growth. This is a perfect time to join the company as it moved into a high growth phase and there are many opportunities to make a meaningful contribution to its future.

The Role

We are looking for a highly driven, talented, and self-motivated Senior Applications Security Engineer to be part of our growing application security team. You will be part of a team that is up to date on emerging security vulnerabilities and threats, and works toward improving the security of our products and our CI/CD environment and process.

Key Responsibilities:

• Develop automation and security tools to enhance the security posture.
• Research, evaluate, and integrate new security technologies/tools within CI pipelines.
• Perform STRIDE threat modeling before each product release.
• Provide consultation in design and security reviews for new features.
• Conduct product code reviews with a security-focused lens.
• Execute white box security scans and implement system/application hardening measures.
• Document security fixes and support customer service with security advisories.
• Maintain comprehensive documentation and handle CVE filings.
• Analyze reported vulnerabilities, assess risks using CVSS methods, and determine impact.

Job Requirements:

• Bachelor’s or master’s degree in computer science or computer engineering, specializing in cybersecurity.
• at least 2 years of hands-on experience in cybersecurity roles.
• In-depth knowledge of common web application vulnerabilities and mitigation strategies.
• Proven ability to validate and implement security fixes; manage bug bounty reports effectively.

Key Skills and Experiences:

• Demonstrated expertise in integrating security measures into CI/CD pipelines using Jenkins, GitLab, etc.
• Proficiency in executing and interpreting results from SAST and DAST tools.
• Strong background in Linux system hardening and implementing CIS security standards.
• Proficiency in PHP and Python for security-related tasks.
• Hands-on experience with blue team responsibilities like DFIR and security hardening.
• Familiarity with AWS and Azure; additional experience considered advantageous.
• Security certifications (e.g., SANS) are highly valued.

Desired Attributes:

• Exceptional analytical skills coupled with a meticulous problem-solving approach.
• Excellent written and verbal communication skills.
• Proven ability to convey complex technical concepts to diverse audiences.
• Passionate about Kitework’s domain and mission.

Compensation/Perks

You will be rewarded with a competitive compensation package, including excellent benefits and stock options. Other benefits include: medical, dental, and 18-21 days annual leave

[What you will be working on]

In addition to your teaching duties, you will carry out industry or consultancy projects to help you remain relevant in your profession and to evolving changes in industry, and maintain strong linkages with industry and schools. You will also have the opportunity to have industry attachments or experience on a regular basis to update your skills, knowledge and practices of your profession.

- Design, develop and deliver relevant course materials in On-Premise and Cloud based Networking, System Administration, IT Security, Digital Forensics, Cyber Security, Security Penetration Testing & Operations and Programming

- Facilitate e-learning, enrichment and other self-directed learning.

- Supervise students in project works, competitions, and internship.

- Handle other academic-related duties and administration.

- Be involved in student development and mentoring, outreach programmes and community works.

- Engage in relevant research activities for lifelong professional development purpose.

[What we are looking for]

You should have at least 3 years of relevant experience in Computer Science, Information Systems, or Information Security, and preferably relevant work experience in the security industry.

- Passion for teaching and student development.

- Knowledge in

• networking concepts such as router, switches, wireless access points etc.

• operating systems such as Windows Servers, Linux, Mac etc.

• security concepts such as firewall, VPN, IDS/IPS, Antivirus, SIEM, IAM, web/app security etc.

• working in virtualized environment such as Hyper-V, VMWare, VirtualBox, Xen, KVM etc.

• Knowledge in programming / scripting languages such as Java, Python, C# etc.

- Aptitude to learn new technologies in the security suite.

- Professional certifications such as CCNA/CCNP, MCSE/MCSD, CEH/CHFI, CISSP/CISA, OSCP, Cloud Certifications (AWS/Google/Azure), will be an added advantage.

Those with good and relevant experience can look forward to Senior Lecturer or equivalent positions, with career development opportunities to leadership positions in the Colleges or Headquarters.

Applicants may check their application status at the end of 8 weeks from the closing date of this job posting.

[What you will be working on]

In addition to your teaching duties, you will carry out industry or consultancy projects to help you remain relevant in your profession and to evolving changes in industry, and maintain strong linkages with industry and schools. You will also have the opportunity to have industry attachments or experience on a regular basis to update your skills, knowledge and practices of your profession.

- Design, develop and deliver relevant course materials in On-Premise and Cloud based Networking, System Administration, IT Security, Digital Forensics, Cyber Security, Security Penetration Testing & Operations and Programming

- Facilitate e-learning, enrichment and other self-directed learning.

- Supervise students in project works, competitions, and internship.

- Handle other academic-related duties and administration.

- Be involved in student development and mentoring, outreach programmes and community works.

- Engage in relevant research activities for lifelong professional development purpose.

[What we are looking for]

- You should have at least 3 years of relevant experience in Computer Science, Information Systems, or Information Security, and preferably relevant work experience in the security industry. 

- Passion for teaching and student development. 

- Knowledge in 
• networking concepts such as router, switches, wireless access points etc. 
• operating systems such as Windows Servers, Linux, Mac etc. 
• security concepts such as firewall, VPN, IDS/IPS, Antivirus, SIEM, IAM, web/app security etc. 
• working in virtualized environment such as Hyper-V, VMWare, VirtualBox, Xen, KVM etc. 
• Knowledge in programming / scripting languages such as Java, Python, C# etc. 

- Aptitude to learn new technologies in the security suite. 

- Professional certifications such as CCNA/CCNP, MCSE/MCSD, CEH/CHFI, CISSP/CISA, OSCP, Cloud Certifications (AWS/Google/Azure), will be an added advantage.

Those with good and relevant experience can look forward to Senior Lecturer or equivalent positions, with career development opportunities to leadership positions in the Colleges or Headquarters. 

Applicants may check their application status at the end of 8 weeks from the closing date of this job posting.

[What you will be working on]

In addition to your teaching duties, you will carry out industry or consultancy projects to help you remain relevant in your profession and to evolving changes in industry, and maintain strong linkages with industry and schools. You will also have the opportunity to have industry attachments or experience on a regular basis to update your skills, knowledge and practices of your profession.

[What we are looking for]

- At least 3 years relevant experience in Built Environment sector, especially in the Civil & Structural (C&S) or Mechanical & Electrical (M&E) Engineering.

- Experience in adoption of Integrated Digital Delivery (IDD), Design for Manufacturing and Assembly (DfMA), Virtual Design & Construction (VDC), or BIM to Field in modern building projects.

Those with good and relevant experience can look forward to Senior Lecturer or equivalent positions, with career development opportunities to leadership positions in the Colleges or Headquarters.

Applicants may check their application status at the end of 8 weeks from the closing date of this job posting.