Total 4 Legal / Public / Security job vacancies in synapse building

[What you will be working on]

As a Senior Associate, you will be expected to handle one or more of these areas of work:

• Provide clear and effective legal advice on income tax, stamp duties, GST, other taxes and corporate counsel issues that are necessary for IRAS’s functions
• Represent IRAS in tax appeals before the tax tribunals and the courts
• Provide clear and effective directions on investigations and prosecutions and prosecute tax offences in the courts
• Draft clear and effective legislative drafts to reflect policy intent.

You will report to the Chief Legal Officer and Director of the Branch you are posted to.

Advisory & Litigation Branches 1 and 2 focus on rendering tax advice to IRAS divisions and representing IRAS in tax appeals.

The Prosecution, Corporate & Legislation Branch focuses on prosecuting tax offences in the courts, corporate counsel work and drafting of tax legislation.

[What we are looking for]

- Excellent law degree and called to the Singapore Bar

- At least 3 years Post-Qualification Experience

- Experience in litigation is necessary

- Excellent writing and communication skills

- Analytical, independent and self-motivated

- Ability to consider issues from a systemic perspective

- Desire to serve in public service

[What you will be working on]

You will be responsible for the following:

• Manage and monitor surveillance technology to augment enforcement operations

• Manage vendors and contracts such as raise work orders, manage contract utilisation and upkeep of service and quality standards

• Plan and carry out enforcement operations

• Attend to related enquiries and troubleshooting issues

• Maintain and monitor quality of enforcement engagements

• Any other ad-hoc tasks as assigned

[What we are looking for]
 

Requirements:

• Enjoy thinking strategically, planning and applying analytical reasoning

• Experience in investigation and enforcement work

• Keen interest in environmental public health

• Excellent communication and interpersonal skills

• Strong leadership skills and a good team player

• Resourceful and willing to work outside office hours

• Good knowledge of Microsoft Office applications

• Basic knowledge in the application of data/video analytics and/or machine learning will be advantageous

• Able to work nights and on weekends/ public holidays, as required

Applicants will be updated on the status of their applications within 4 weeks of the closing date of this job posting.

As part of the shortlisting process for this role, you may be required to complete a medical declaration and/or undergo further assessment.

At AIA we’ve started an exciting movement to create a healthier, more sustainable future for everyone.

As pioneering innovators for over 100 years, we’re now transforming our organisation to be faster, simpler and more connected. Because we want to be even better equipped to develop digital solutions and experiences that help more people live Healthier, Longer, Better Lives.

To get there, we need people with tech/digital/analytics expertise and passion to help develop positive, sustainable change through digitally enhanced experiences that will impact the lives of millions of people and create a healthier future for everyone.

If you believe in developing a better tomorrow, read on. 

About the Role

WHAT YOU’LL BE DOING:

• Assist in delivering training programmes to maintain high levels of information security capabilities of stakeholders in the four entities in scope (i.e Board members, EXCO/Senior Management, staff, agents, Tech staff, contract personnel, agents and third party service providers).

• Establish security capabilities and awareness requirements through detailed gap analysis from various channels, such as interviews, past phishing exercise results and e-learning coverage.

• Work with global Information Security function to manage the phishing exercises for staff and apply the rewards and consequence management based on the results of each exercise.

• Drive the phishing exercises for our retail distribution force, working with Tied Distribution management to apply the rewards and consequence management based on the results of each exercise.

• Support the planning and execution of cyber security training initiatives for the Board of Directors and Senior Management.

• Work with the other ISG functions to create topical security awareness modules and training, such as for TPSA, Incident Management, Risk Registry, etc.

• Oversee the delivery of security awareness for third party service providers with critical and high risk to AIA Singapore.

• Support delivery of security campaigns to foster a high level of partnership and cyber hygiene knowledge of stakeholders such as staff and agents.

• Support delivery of regular secure coding training, with gamification approaches, to elevate the attention and skillset of our IT teams/developers in the area of application security.

• Explore in-house development or existing solutions with security competency vendors to gamify the security learning experience for all stakeholders to achieve a people-centric, people led security awareness programme.

• Collaborate harmoniously and effectively with various internal business functions and Risk teams to evolve a highly positive risk and security awareness culture across the four entities.

• Downward trend in cyber security incidents and data privacy related incidents arising from improved security capabilities amongst stakeholders

• High take up rate and good response from stakeholders for post-transformed security awareness programme, in terms of security awareness solutions delivered

• Increased proportion of staff and agents recorded as reporting the simulated phishing emails during the regular phishing/social engineering exercises

• Improved productivity from ISG BAU services through completion of process automation initiatives

WE ARE LOOKING FOR SOMEONE WITH | YOU WILL HAVE:

• Bachelor’s degree of Computer Science, Computer Engineering, or other related degrees.

• Minimum 8 years of experience with at least 3 years’ of experience driving security awareness programme in major tech firms or  regulated organization (e.g. Government, FIs).

• Good conceptual knowledge of cybersecurity threats and processes.

• Highly driven professional passionate in the world of cyber security and keenness to share knowledge to the wider audience in this area.

• Hands-on experience in security awareness tools and solutions is a requirement.

• Candidates who had undergone successful attempts at transforming processes through automation techniques, such as RPA, scripting are welcome.

• Good to have but not mandatory - Information Systems Security professional certifications, such as CISSP, CISA, CRISC, CISM or CC.

• Excellent Communication, Coordination and Interpersonal Skills. The communication network of the incumbent is expected to be internally within Technology Department (15%) and Enterprise Risk Management, Compliance, Internal Audit (10%), Business Departments (45%), Senior Management and Sub-Committees (5%),Group Technology and Group Information Security (10%) and external with Vendors and Service Providers (15%).

• A team-player taking ownership and helping colleagues.

• Analytical skills

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.

At AIA we’ve started an exciting movement to create a healthier, more sustainable future for everyone.

As pioneering innovators for over 100 years, we’re now transforming our organisation to be faster, simpler and more connected. Because we want to be even better equipped to develop digital solutions and experiences that help more people live Healthier, Longer, Better Lives.

To get there, we need people with tech/digital/analytics expertise and passion to help develop positive, sustainable change through digitally enhanced experiences that will impact the lives of millions of people and create a healthier future for everyone.

If you believe in developing a better tomorrow, read on. 

About the Role

WHAT YOU’LL BE DOING:

• This role includes responsibilities of managing 3 team members and overseeing operations, subsidiaries, assigned POA over specific matters and/or other appointments such as Data Protection Officer

• Maintain an oversight of all the alerts from FINTECH, MASNET, Group Cyber SOC for AIASG and provide support to incident response personnel to ensure all deliverables are met within SLAs.

• Maintain an oversight of related security posture and baseline and ensure related vulnerabilities are remediated timely as per established standard to minimize risk exposures.

• Drive local security projects and group security project facilitation.

• Develop and maintain local incident response playbooks and other detection/response related standard operating procedures to ensure compliant to the MAS regulations.

• Act for the incident response action approval chain and support any incident response obligation for third parties.

• Respond to computer security incidents according to established response processes, leverages subject matter expertise where established processes do not exist.

• Acts as a subject matter expert regarding CSIRT incident response processes from local perspective.

• Provides guidance to other stakeholders during the incident response process and follow & track all the remediation actions till incident closure.

• Chair local IMT (Incident Management Team) calls and keep senior management and stakeholder updates on the progress of cyber incident management.

• Identify and manage potential and actual operational issues within the incident detection/response domain and take corrective action whenever required

• Work as a liaison between the SOC Team, other departments, and upper management for AIASG and potentially local regulators

• Manage relationships with our customers’ and third parties’ tech incident teams and frequently interact with client management for any security incident related queries.

• Work closely with the Group SOC team to manage ongoing service delivery and onboarding of local process within the SOC alignment and compliant to the local regulations.

• Level and type of budgetary or financial control of the position, responsible for budget of Information Security and Governance unit.

• Other quantitative / qualitative measures, e.g. time, quality, feedback, etc., that are tied to the objective of the area of responsibilities.

• Downward trend in cyber security incidents and less DP incidents.

• Uplift Cyber Security process, controls and maturity level for Cyber Security Incident.

• Support for the Cyber Security score in the annual MAS CRAFT report.

WE ARE LOOKING FOR SOMEONE WITH | YOU WILL HAVE:

• Bachelor’s degree of computer science, computer engineering or other relevant degrees

• Minimum 8 years of IT experience with at least 4 years’ of experience in cyber security incident handling in a regulated environment (e.g. FSI, government etc.)

• Strong knowledge of cybersecurity incident management covering identification, containment, response, recovery and reporting

• Sound knowledge of Cloud, Cyber Monitoring, Threat Hunting, and Cyber Threat Intelligence

• Natural ability to take the lead and drive the investigation of complex security issues, with strong analytical and problem-solving skills

• Self-driven professional interested in the world of cyber security

• Standby for the serious security incident during weekend or off-working hours if necessary

• Hands-on experience for the cyber security incident scenario preparation and tabletop exercise

• Technical understanding of enterprise network, various components and designs and strong understanding of Operating Systems, Applications, Databases in both on-prem and Cloud environment, how they are exploited and how to defend

• Good knowledge of conducting RCA for the incident

• Information Systems Security professional certifications, such as CISSP, CISA, CISM, CSSP or Cloud related.

• A team-player taking ownership and helping colleagues.

• Excellent Analytical, Coordination and Interpersonal Skills.

• Good communication skills and the communication network of the incumbent is expected to be internally within Technology Department (30%) and Enterprise Risk Management, Compliance, Internal Audit (15%), Business Departments (10%), Senior Management and Sub-Committees (10%),Group Technology and Group Information Security (20%) and external with Vendors and Service Providers (15%).

#LI-SC1

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.