Total 57 Director/C-Level computer security job vacancies in Singapore

Are you ready to unleash your potential?

At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve.

We believe we have a responsibility to be a force for good, and WorldImpact is our portfolio of initiatives focused on making a tangible impact on society’s biggest challenges and creating a better future. We strive to advise clients on how to deliver purpose-led growth and embed more equitable, inclusive as well as sustainable business practices.

Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals.

We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognized for their contributions.

Ready to unleash your potential with us? Join the winning team now!

What you will do

As a Director in Cloud Security, you will lead the strategic vision and execution of cloud security initiatives, ensuring they align with client objectives and regulatory standards. You will oversee the development and implementation of comprehensive cloud security strategies, driving innovation and excellence in data protection, compliance, and risk mitigation. Your role will involve high-level engagement with stakeholders to demonstrate the value of cloud security initiatives, solidifying Deloitte’s position as a trusted leader in cloud security solutions.

You will

• Develop and drive the strategic vision for cloud security services across Southeast Asia.
• Lead and inspire cross-functional teams to deliver exceptional client outcomes.
• Oversee the setup, integration, deployment, and maintenance of Microsoft 365 and Purview security solutions.
• Identify, evaluate, and mitigate business and technology risks.
• Enhance internal controls and identify opportunities for continuous improvement.
• Build and nurture strong client relationships, providing strategic insights and recommendations.
• Manage project scope, schedule, status, and documentation, ensuring timely and within-budget delivery.
• Mentor and develop junior staff, promoting knowledge sharing and skills development.
• Identify and capitalize on opportunities to improve engagement profitability and drive business growth.

Your role as a leader

At Deloitte, we believe in the importance of empowering our people to be leaders at all levels. We expect our people to embrace and live our purpose and shared values, challenging themselves every day to identify issues that are most important to our clients, our people and the communities, and to make an impact that matters. In addition to living our purpose, Directors across our Firm are expected to:

• Lead from the front, acting as an exemplary role model of integrity for leaders at all levels; promote a strong sense of loyalty and followership as well as to energise others to perform at the highest level
• Build a high-performance culture by cultivating individual and team strengths; drive outstanding service, quality and stakeholder value, often through a mix of large cross-business and/or cross-border teams
• Anticipate market and competitor trends to develop and deliver bold and innovative solutions that differentiates Deloitte from others.
• Build and maintain trust-based relationships with senior stakeholders and influencers, using highly developed influencing skills to drive positive impact in complex situations.
• Set and communicate strategic direction, excite people around the vision and align diverse, cross-business as well as cross-border teams to achieve success.
• Manage the development of a strong pipeline of diverse talent for current/ future success; own and drive a talent experience that differentiates Deloitte from others.
• Anticipate market and competitor trends to develop and deliver bold and innovative solutions that differentiates Deloitte.

Enough about us, let's talk about you.

• 15+ years in cloud security, particularly in developing, implementing, or architecting Microsoft M365 security solutions.
• Hands-on experience with Entra ID (Azure Active Directory), Microsoft Intune, Microsoft Defender solutions, and Microsoft DLP, including their configuration, deployment, and management.
• Proven experience managing end-to-end projects involving Microsoft cloud security implementations.
• Relevant certifications such as Microsoft 365 Administrator, Microsoft Identity and Access Administrator, Microsoft Information Protection Administrator, with CISSP / CCSP being highly desirable.
• Bachelor’s degree in Computer Science, Information Security, or a related field; Master’s degree preferred.
• Ability to travel 25-50%, depending on the work and clients served.
• Excellent problem-solving skills and proven ability to lead a team of engineers.
• Strong communication skills to effectively advocate key security requirements to senior stakeholders.
• Strong critical-thinking and problem-solving abilities with clear communication.

Due to volume of applications, we regret that only shortlisted candidates will be notified.

Please note that Deloitte will never reach out to you directly via messaging platforms to offer you employment opportunities or request for money or your personal information.

Summary

The Regional Director Security Operations (RDSO) is responsible for leading a multi-disciplinary team that executes a global security operations program for a multi-national IT organization. Services provided include security operations, safety, budget and financial execution, logistics, and employee recruitment, onboarding and training. The security operations program is comprised of regional security man-guarding functions, a security operations center, development and management of security operations metrics, branch liaison, personnel management and driving key security operations projects and initiatives for datacenters on a multi $100M global Client account. Direct reports may include field based Regional Security Managers, as well as shared services/program management resources to include Regional Operations Coordinator, Security Design PMOs and other Security Operations personnel. The RDSO is accountable for datacenter security operations service delivery, enhancing safety culture, driving innovation and process change across the program and staff engagement and development. The RDSO is expected to advance operational security and business relevancy while collaborating with the client, fellow RDSOs, Securitas business divisions, associate contractors, global business partners, and other supporting teams. This position reports directly to the Global Director of Operations.

Essential Functions

1. Strategically aligns a multi-disciplinary team into a singular, cohesive group; prioritized to meet the client’s data center security operations requirements.
2. Anticipates, develops, drives, and operationalizes the business’ most strategic priorities to meet service requirements, exceed quality targets and optimize field security operations effectiveness.
3. Acts as a trusted advisor to the Global Director of Operations and Client directors while also facilitating a healthy rhythm of team and business operations forums.
4. Proactively manages the region’s multi-disciplinary team to effectively execute and communicate (inward and outward) the security operations scope, strategic goals and deliverables.
5. Create strong internal and external networks, ensuring alignment between the regional operations teams, the shared services platform, and the Client.
6. Nurture Client relationships and internal relationships across all pillars.
7. Ensures the multi-disciplinary regional team is functioning effectively and efficiently, with security operation non- negotiables, process enhancement and scalability at the forefront of decision-making.
8. Holds team members accountable for their commitments, removes roadblocks to their work, and leverages organizational resources to improve delivery.
9. Provides regular reports that communicate team performance, project delivery, progress to milestones, and impacts to service delivery, meeting required client SLAs and KPIs.
10. Acts as the Datacenter subject matter expert on Operations Standard Operating Procedures (SOP); evaluates effectiveness and adherence to the Operations SOP and provides recommendations for improvement.
11. Actively seeks and creates opportunities for collaboration across customers, partners, and internal groups to drive long- term solutions.
12. Leads program-wide projects and initiatives that encourage process improvement and innovation and the use of tools that support the program across teams.
13. Drives an effective and holistic approach to project completion and consistent communication and messaging.
14. Facilitates teamutilization of data analytics; leads development and execution of strategic, analytical frameworks and high- quality complex models and forecasts to guide operational decisions.
15. Create and deliver executive level presentations and dashboards on business strategy, insights, and execution to client senior management.

Performs additional functions, duties and specific tasks of a similar nature and scope as necessary to achieve assigned business objectives.

• The functions listed describe the business purpose of this job. Specific duties or tasks may vary and be documented separately. The employee might not be required to perform all functions listed. Additional duties may be assigned, and functions may be modified, according to business necessity.
• All assigned duties or tasks are deemed to be part of the essential functions, unless such duties or tasks are unrelated to the functions listed, in which case they are deemed to be other (non-essential) functions.
• Employees are held accountable for successful job performance. Job performance standards may be documented separately, and may include functions, objectives, duties or tasks not specifically listed herein.
• In performing functions, duties or tasks, employees are required to know and follow safe work practices, and to be aware of company policies and procedures related to job safety, including safety rules and regulations. Employees are required to notify superiors upon becoming aware of unsafe working conditions.
• All functions, duties or tasks are to be carried out in an honest, ethical and professional manner, and to be performed in conformance with applicable company policies and procedures. In the event of uncertainty or lack of knowledge of company policies and procedures, employees are required to request clarification or explanations from superiors or authorized company representatives.

Minimum Hiring Standards

Additional qualifications may be specified and receive preference, depending upon the nature of the position.

• Must have a reliable means of communication, such as cell phone.
• Must have a reliable means of transportation (public or private).
• Must hold or be able to obtain a valid driver’s license or equivalent.
• Must have the legal right to work in the country where the position is located.
• Must have the ability to speak, read, and write English proficiently.
• Must have a high school diploma, secondary education equivalent, or GED.
• Must be willing to participate in the Company’s pre-employment screening process, including drug screen and background investigation.

Education/Experience

• Bachelor’s degree in business, management or related field and 10-15 years of progressive management roles in physical security, contract security, or account management, or an equivalent combination of education and experience sufficient to perform the essential functions of the job, as determined by the company.
• 3-5 years of experience in a director level position.
• Datacenter experience a plus.

Special Requirements

• Able to travel (international or domestic, as required) approximately 25% of the time or more, occasionally with limited notice.
• Able to work evening or weekend hours when required, such as during an emergency event or crisis.

Competencies

• Ability to influence without authority and identify shared goals to achieve business objectives.
• Ability to provide positive direction and motivate performance.
• Ability to build relationships quickly and work collaboratively across multiple teams.
• Excellent oral and written communication skills required for preparing clear, concise, and grammatically correct materials and communicating information effectively to others.
• Experience communicating with the C-Level employee down to the entry-level employee
• Able to conduct presentations and facilitate group meetings, both in person and online.
• Ability to track and maintain scheduled assignments.
• Ability to maintain professional composure when dealing with unusual and stressful circumstances.
• Knowledge of business operations management and human resources administration.
• Demonstrates leadership skills, including planning, organizing delegating, problem solving, training, coaching, and praising or disciplining staff in a positive manner.
• Strong customer service and service delivery orientation.
• Ability to adapt to change in the external environment and organization.
• Ability to multi-task and complete assignments concurrently in a fast-paced environment.
• Experience communicating and presenting to an executive level audience.
• Knowledge of security operations and procedures applicable to a 24-hour facility.
• Knowledge of supervisory practices and procedures.

Working Conditions and Physical/Mental Demands

With or without reasonable accommodation, it requires the physical and mental capacity to effectively perform all essential functions. In addition to other demands, the demands of the job include:

• Required ability to manage multiple tasks concurrently.
• Computer usage, which may include prolonged periods of data analysis.
• Handling and being exposed to sensitive and confidential information.
• Regular talking and hearing.
• May be required to use vehicle in the performance of duties.
• Frequent lifting and/or moving up to 10 pounds, and occasionally up to 25 pounds.
• Close vision, distance vision, and ability to adjust focus.

Control Risks is seeking an Associate Director to play a key role in growing the crisis and security consulting practice across Southeast Asia (SEA). This position will focus on developing deep and profitable client relationships, driving the growth of the crisis and security consulting practice in SEA, and ensuring quality service delivery across our range of consulting engagements, including crisis management, crisis response, business continuity, and security risk management issues.

Building and maintaining successful relationships with existing Control Risks clients will be important for this role and identifying and pursuing new clients and business development opportunities to expand the crisis management, business continuity and security risk management opportunities in the region is crucial.

Role tasks and responsibilities:

• Cultivate, grow and deepen Control Risks’ relationships with security and risk buyers in our Client organisations, being seen as their “go to” person within Control Risks.
• Identify, nurture and help win new business development opportunities.
• Actively lead on business continuity and crisis management projects from first client enquiry to proposal development, task servicing, quality assurance and project closure
• Project manage and, utilising a regional team of consultants and experts, deliver the full range of security consulting and services engagements in Southeast Asia and across Asia broadly, when required.
• Deliver consultancy services to clients by developing innovative solutions to complex risks. You will be responsible for scoping and delivering across a broad range of business risk activities, including crisis management and business continuity workshops, audits, gap analyses and risk assessments
• Provide mentorship to junior staff, maximising use of resources. Ensure continuous skills transfer, coaching and planning is provided.
• Work collaboratively with country management, marketing teams and other practises to develop a consistent, credible and highly visible brand.
• Represent Control Risks as a thought leader through market engagement via channels such as social media, professional organizations and industry events.
• Seek innovative ways to improve services we offer to clients.
• Ensure that practices, polices, strategy and services represent the client best interest.

Essential:

• Experience in a corporate/consulting environment working with multinational companies in Singapore specifically, and across SEA generally
• Strong commercial expertise, analytical (financial management, legal and contractual skills), leadership
• Ability to build relationships with senior-level clients and other consultants globally
• Experience in a multi-cultural environment and demonstrated cross-cultural awareness
• In depth knowledge of commercial/operational conditions across South Asia

Preferred:

• Experience in one or more of the following: business continuity, crisis management, risk assessment following recognized international standards, security planning and framework development
• Experience working in multi-disciplinary teams
• Experience managing crises and/or complex problems
• Demonstrable experience in applying risk management methodology such as (ISO 22301, ISO31000, SOC 2, ISO 27001, etc.)

Qualifications and specialist skills:

• Educated Bachelor’s degree or equivalent
• Strong commercial expertise, analytical (financial management, legal and contractual skills), leadership
• Good client (internal and external) management and consulting skills
• Effective decision making and judgement
• Excellent planning and organizational skills
• Assertiveness and drive with strong influencing skills
• Strong interpersonal skills-building trust and rapport
• Excellent communication skills – written and oral (informal and presentation)
• IT literacy – MS office packages, advanced Excel
• Strong management and communication skills (including concise and accurate written skills)
• Project management skills

• Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarised in the full job offer.
• We operate a discretionary global bonus scheme that incentivises, and rewards individuals based on company and individual performance.
• Control Risks supports hybrid working arrangements, wherever possible, that emphasise the value of in-person time together - in the office and with our clients - while continuing to support flexible and remote working.
• As an equal opportunities employer, we encourage suitably qualified applicants from a wide range of backgrounds to apply and join us and are fully committed to equal treatment, free from discrimination, of all candidates throughout our recruitment process.

The Senior Director IT is responsible for establishing and maintaining the information security program to ensure that information assets and associated technology, applications, systems, infrastructure and processes are adequately protected in the digital ecosystem in which we operate. The individual is responsible for identifying, evaluating and reporting on legal and regulatory, compliance, IT and cybersecurity risk to information assets, while supporting and advancing business objectives.

Description

Establish Governance and Build Knowledge

• Facilitate an information security governance structure through the implementation of a hierarchical governance program, including the formation of an information security steering committee or advisory board.
• Provide regular reporting on the current status of the information security program to enterprise risk teams and senior business leaders
• Work with the vendor management office to ensure that information security requirements are included in contracts by liaising with vendor management and procurement organizations.
• Create and manage a targeted information security awareness training program for all employees, contractors and approved system users, and establish metrics to measure the effectiveness of this security training program for the different audiences.
• Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems and services, including privacy, risk management, compliance and business continuity management.
• Provide clear risk mitigating directives for projects with components in IT, including the mandatory application of controls.

Develop the Frameworks

• Develop and enhance an up-to-date information security management framework based on one of the following: International Organization for Standardization (ISO) 2700X, ITIL, ENISA, ISA-62443, COBIT/Risk IT and National Institute of Standards and Technology (NIST) Cybersecurity Framework.
• Create and manage a unified and flexible control framework to integrate and normalize the wide variety and ever-changing requirements resulting from global laws, standards and regulations.
• Develop and maintain a document framework of continuously up-to-date information security policies, standards and guidelines. Oversee the approval and publication of these information security policies and practices.
• Create a framework for roles and responsibilities with regard to information ownership, classification, accountability and protection of information assets.
• Facilitate a metrics and reporting framework to measure the efficiency and effectiveness of the program, facilitate appropriate resource allocation, and increase the maturity of the information security, and review it with stakeholders at the executive and board levels.

Architecture/Engineering Support

• Work with IT staff to ensure that security is factored into the evaluation, selection, installation and configuration of hardware, applications and software.
• Recommend and coordinate the implementation of technical controls to support and enforce defined security policies.
• Research, evaluate, design, test, recommend or plan the implementation of new or updated information security hardware or software, and analyze its impact on the existing environment; provide technical and managerial expertise for the administration of security tools.
• Work with the enterprise architecture team to ensure that there is a convergence of business, technical and security requirements; liaise with IT management to align existing technical installed base and skills with future architectural requirements.

Operational Execution

• Coordinate, measure and report on the technical aspects of security management.
• Manage outsourced vendors that provide information security functions for compliance with contracted service-level agreements.
• Manage and coordinate operational components of incident management, including detection, response and reporting.
• Maintain a knowledgebase comprising a technical reference library, security advisories and alerts, information on security trends and practices, and laws and regulations.
• Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend treatment plans and communicate information about residual risk.
• Manage security projects and provide expert guidance on security matters for other IT projects.
• Assist and guide the disaster recovery planning team in the selection of recovery strategies and the development, testing and maintenance of disaster recovery plans.
• Ensure audit trails, system logs and other monitoring data sources are reviewed periodically and are in compliance with policies and audit requirements.
• Design, coordinate and oversee security testing procedures to verify the security of systems, networks and applications, and manage the remediation of identified risks.

Qualifications

• Bachelor’s Degree in Engineering, Computer Science, Information Systems, or related discipline required.
• Master’s Degree in a related field is preferred.
• Professional security management certification is desirable, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials

Experiences

• A minimum of ten years of IT experience, with seven years in an information security role and at least five years in a managerial capacity is required.
• Experience working with legal, audit and compliance staff is preferred.
• Experience developing and maintaining policies, procedures, standards and guidelines is required.
• Familiarity with applicable legal and regulatory requirements, including, but not limited to, the U.S. Sarbanes-Oxley Act, the U.S. Health Insurance Portability and Accountability Act (HIPAA), the European Union Privacy Directive, and the Japanese Financial Instruments and Exchange Law ("J-SOX").

Skill Sets

• Excellent analytical skills, the ability to manage multiple projects under strict timelines, as well as the ability to work well in a demanding, dynamic environment and meet overall objectives
• Project management skills: financial/budget management, scheduling and resource management
• Ability to lead and motivate the information security team to achieve tactical and strategic goals, even when only "dotted line" reporting lines exist
• A master of influencing entities and decisions in situations where no formal reporting structures exist, but achieving the desirable outcome is vital
• Excellent communication, interpersonal and collaborative skills. Experience working with a multi-continent technical team preferred
• High degree of initiative, dependability and ability to work with little supervision while being resilient to change

Technical Competencies

• Experience with common information security management frameworks, such as International Standards Organization (ISO) 2700x, the IT Infrastructure Library (ITIL) and Control Objectives for Information and Related Technology (COBIT) frameworks
• An understanding of operating system internals and network protocols.
• Familiarity with the principles of cryptography and cryptanalysis.
• Experience in application technology security testing (white box, black box and code review).
• Experience in system technology security testing (vulnerability scanning and penetration testing).

As a Business Information Security Officer, you will play a key role in proactively managing the information security and Data privacy landscape within the organization. Your expertise will help guide strategic decision-making on technology risk and security matters, ensuring robust IT security architecture, practices, and compliance across the organization.

Key Responsibilities:

• Lead proactive management of InfoSec & privacy.
• Provide thought leadership on technology risk and security.
• Drive the development and implementation of IT security policies and solutions.
• Ensure secure software development practices and change management processes.
• Plan and manage security incident responses and investigations.
• Oversee global adoption of cybersecurity and privacy controls.
• Act as the main point of contact for InfoSec and privacy matters.
• Collaborate with external auditors and regulators for compliance.

Required Skills and Qualifications:

• Extensive experience in IT security architecture, policy, and procedure development.
• Demonstrated leadership with strong decision-making abilities.
• Knowledge of software development life cycle security and asset management.
• Proven track record in incident response management and cybersecurity investigations.
• Excellent communication skills for non-technical stakeholders.
• Proficiency in current and emerging security trends.
• Familiarity with Singapore regulatory IT security requirements (e.g., MAS TRM, Cyber Hygiene notice).
• Bachelor's degree in IT/Computer Science or related field.
• Preferred certifications: CISSP, CISA, CISM, GIAC.

Personal Attributes:

• Team-oriented and able to work collaboratively.
• Strong communication skills for engaging senior stakeholders.
• Analytical problem-solver with a creative mindset.
• Independent and hands-on approach with strong attention to detail.

Application Process:
If you are interested in this role, please send your resume to [email protected]

Interested applicants are invited to apply directly at the NUS Career Portal

Your application will be processed only if you apply via NUS Career Portal

We regret that only shortlisted candidates will be notified.

Job Description

1. Policy implementation: Review and update policy on research security and collaborate with research units to implement related procedures and protocols.
2. Risk Assessment: Conduct regular risk assessments of research projects and facilities to identify potential security vulnerabilities and develop mitigation strategies through review of research agreements and related documents.
3. Training and Awareness: Develop awareness/training program for faculty, staff, and students on research security best practices, compliance requirements, and incident reporting procedures.
4. Point of Contact: Serve as the primary point of contact for internal and external stakeholders for research security matters. Work closely with various departments, including IT, compliance, legal, and research units to promote a culture of security and compliance in research activities.
5. Monitoring and Reporting: Monitor compliance with research security policy, perform related analysis and prepare reports for senior management on related activities. Support scheduled compliance audit/inspection on research security readiness and mitigation measures compliance and recommend improvements and follow up actions.

Qualifications

• Recognised degree in science or engineering discipline preferred;
• At least 5 years’ working experience in research management/administration or similar roles in compliance;
• Experience in research related functions in higher education sector, or research contracts management will be an advantage;
• Knowledge or experience in reviewing and developing policies and procedures;
• Excellent communication, analytical, and organizational skills and ability to work collaboratively in a diverse environment; strong problem-solving capabilities;
• Meticulous, independent and organised individual with the ability to maintain confidentiality and discretion as may be necessary in the job function.

At KPMG, your long-term future is every bit as important to us as it is to you. That’s why our aim is to give you experiences that will stay with you for a lifetime. Whether it’s great training and development, working across functional sectors, mobility opportunities or corporate responsibility volunteering activities – you’ll gain a wealth of experiences on which to build a rewarding career. We’re proud of our culture – it’s one that recognises hard work, encourages new ways of thinking and embraces diversity and inclusion. We have an innovative spirit which inspires what we do and how we do it – striving to be better lies at the heart of who we are.

KPMG Cybersecurity professionals assist clients to address their concerns around Confidentiality, Integrity, and Availability of their technology, business systems, and information assets. Using a holistic view of how Technology and Business integrate, the Cyber team performs technology-risk focused assessments, technology compliance, IT/operational process reviews, and design of information risk & cyber security solutions.

Cyber team members regularly interact with C-Suite clients, such as Chief Executive Officer (CEO), Chief Information Security Officer (CISO), Chief Information Officer (CIO), Chief Operating Officer (COO), Chief Risk Officer (CRO) and their direct reports. Hence, a client centric mind-set, understanding of IT within a Business context, and well-developed communication skills are essential.

The role involves:

As a director within the Cyber Defence team, you will lead red team activities, improve the team's capabilities, interact with organizations and advise them on their security programs. You will mature and improve the outcomes of the red team and other ethical hacking services as well as coaching and leading team members on their assignments, developing them and growing the team’s capability.

• Engage with clients to identify business opportunities for red teaming, penetration testing and other technical assurance activities, and working with clients to scope and deliver those services.
• Being a spokes person for KPMG being able to represent KPMG and our Cyber team to a broad range of clients and other stakeholders.
• Fulfilling a leadership role within the Cyber Defence team, taking responsibility for driving enchantments of our services, processes, knowledge and skills.
• Leading complex red teaming and other technical engagements, as the primary contact taking responsibility for delivery on time and to budget.
• Horizon scanning looking for opportunities to develop new techniques for use in our work and opportunities to enhance our services and develop new services.
• Working with team members, you will develop services new services for delivery to clients and take responsibility for maintenance of existing services.
• You will act as a technical leader to the team, providing formal training and mentoring to the team.
• Being comfortable with associated disciplines of Security Policy and Governance

The ideal candidate should possess:

• Bachelor’s degree in computer science, Computer/Electrical Engineering, Information Technology or equivalent.
• A highly motivated individual in information security and excellent communicator with strong analytical and good problem-solving skills.
• Minimum 8 years of relevant experience in ethical hacking and red teaming.
• In depth knowledge of ethical hacking tactics, techniques, and procedures (TTPs) used by a threat actors to develop threats and engage in cyberattacks and the ability to emulate these TTPs as part of red teaming and ethical hacking engagements.
• Proven technical knowledge gained through demonstratable experience, training and professional qualifications, as a minimum OSCP and preferably high qualifications such as CCSAM, CTL, OSEP and OSED.

As a Commercial Project Director specializing in Security Access Control Systems, You will be leading project management teams across four distinct sub-lines: Operations Technology (OT) and Information Technology (IT) Projects.

Job Description:

• Direct and oversee project management teams within the security access control business.
• Develop and implement project management strategies, processes, and methodologies to achieve operational excellence and meet business objectives.
• Monitor project progress to identify risks, mitigate issues proactively, and ensure adherence to project timelines, budgets, and legal requirements.
• Collaborate with stakeholders including clients, senior management, legal teams, and cross-functional teams to define project scope, objectives, and deliverables.
• Provide leadership and guidance to project managers and teams, fostering a collaborative and high-performance work environment.
• Manage project budgets, resources, and timelines effectively to optimize project profitability an customer satisfaction.
• Ensure strong customer management throughout project lifecycles, maintaining positive relationships and effectively managing expectations.
• Conduct project reviews and audits to assess project health, identify areas for improvement, and implement corrective actions as necessary.
• Stay abreast of industry trends, technological advancements, and legal developments in security access control systems

Requirements:

• Bachelor’s degree in Engineering, Computer Science, Business Administration, or related field
• 10-15 years of experience in project management related to security access control systems
• Proven track record of successfully managing and delivering projects
• Strong leadership and management skills
• Experience in financial management, resource allocation, and risk management within project environments.

To Apply or find out more information on this role, please email us or send in your updated resume to: [email protected]

Shelly Tan Bee Leng (Reg. No. R2199458)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

· Lead day-to-day operations

· Develop budgets and financial plans to achieve profitability goals

· Holds overall responsibility for the operations department including the administration functions of the department to ensure the operations activities run smoothly and efficiently

· Responsible for the management and development of the operations team, including performance management, training compensation and resourcing matters

· Collaborate with marketing teams to promote company’s services and products

· Translates company's strategic plans into operational plans

· Defines KPI to monitor operational success

· Key interface with clients for the operations team and ensures clients requirements are met in a timely manner

· Develops and manages budget planning to minimise operations expenditure

· Stays up to date to technological changes within the industry

· Develops leadership training programs to increase operational effectiveness

· Develops operations planning and projects schedules for the operations team daily routing to ensure quality service delivery of clients projects

· Works closely with other departments

· Ensure team members to have clear defined roles, responsibilities, goals and objectives that will deliver measurable results to the company

· Assists top management in setting goals

ST Engineering is a global technology, defence and engineering group with offices across Asia, Europe, the Middle East and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives through its diverse portfolio of businesses across the aerospace, smart city, defence and public security segments. Headquartered in Singapore, ST Engineering ranks among the largest companies listed on the Singapore Exchange.

Join our Cyber Team

We are an industry leader in cybersecurity with over two decades of experience, we deliver a holistic suite of trusted cybersecurity solutions to empower cyber resilience for government and ministries, critical infrastructure, and commercial enterprises. Backed by our indigenous capabilities and deep domain expertise, we offer robust cyber-secure products and services in cryptography, cybersecurity engineering, digital authentication, SCADA protection, audit and compliance. We specialise in the design and build of security operations centres for cybersecurity professionals and provide managed security services to strengthen the cybersecurity posture of our government and enterprise customers.

We are seeking a People Manager to guide and mentor a team of technical professionals, fostering a collaborative and high-performance work environment.

Responsibilities

•Provide technical leadership for our cybersecurity product capabilities development and sustenance.

•Technology Subject Matter Expert who understands security landscape and solution credibly with ability to work with cross-functional team including solution architecting, pre- and post-sales engagements, project management to deliver cybersecurity product solutions.

•Set strategic direction in alignment with business objectives, keeping abreast of industry best practices.

Requirements

1. At least 10 years of software development experience of which at least 5 years are in a technical leadership role in cybersecurity

2. Relevant Industry Certifications such as CISSP, CSSLP, PMP or equivalent

3. Technical knowledge in following is a must:

i. Cloud Architecture: Planning and implementing the applications & data to the cloud and ensure organization’s technical and business requirements are met.

ii. Networking Knowledge: Demonstrate expertise in networking concepts, protocols, and technologies, with the ability to design and implement complex network infrastructures.

iii. DevOps: Drive the adoption of DevOps practices within the organization, including continuous integration, automated testing, and continuous delivery.

iv. Software Version Control: Implement and manage software version control systems to track changes, facilitate collaboration, and ensure code quality.

4. Previous experience working on government projects specifically in cybersecurity environment and governance, risk management and compliance is an added advantage.

5. Effective communication and presentation skills with ability to transpose complex security concepts into business terms/impacts.

6. Experience with deployment orchestration, automation and security configuration management

7. Ability to work easily with diverse and dynamic teams

Work location: Jurong East

Find out more: https://www.stengg.com/cybersecurity

ST Engineering believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

As a Commercial Project Director specializing in Security Access Control Systems, You will be leading project management teams across four distinct sub-lines: Operations Technology (OT) and Information Technology (IT) Projects.

Job Description:

• Direct and oversee project management teams within the security access control business.
• Develop and implement project management strategies, processes, and methodologies to achieve operational excellence and meet business objectives.
• Monitor project progress to identify risks, mitigate issues proactively, and ensure adherence to project timelines, budgets, and legal requirements.
• Collaborate with stakeholders including clients, senior management, legal teams, and cross-functional teams to define project scope, objectives, and deliverables.
• Provide leadership and guidance to project managers and teams, fostering a collaborative and high-performance work environment.
• Manage project budgets, resources, and timelines effectively to optimize project profitability an customer satisfaction.
• Ensure strong customer management throughout project lifecycles, maintaining positive relationships and effectively managing expectations.
• Conduct project reviews and audits to assess project health, identify areas for improvement, and implement corrective actions as necessary.
• Stay abreast of industry trends, technological advancements, and legal developments in security access control systems

Requirements:

• Bachelor’s degree in Engineering, Computer Science, Business Administration, or related field
• 10-15 years of experience in project management related to security access control systems
• Proven track record of successfully managing and delivering projects
• Strong leadership and management skills
• Experience in financial management, resource allocation, and risk management within project environments.

To Apply or find out more information on this role, please email us or send in your updated resume to: [email protected]

Shelly Tan Bee Leng (Reg. No. R2199458)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

IT Project Director (Security Access Control)

Job Description & Requirements

Our esteem client is looking for a IT Project Director (Security Access Control).

The IT Project Director (Security Access Control) must be trained and certified.

He/ She must be able to deliver IT Enterprise Projects. The incumbent must be good in managing Security Access Control Projects involving physical security and information security). The ability to provide professional consultation to stakeholders and clients is required.

Responsibilities:

• Involved in managing large scale Projects in Security Access Control (physical security and information security)
• Demonstrated large scale IT Project Mapping, Design, Planning and Implementation.
• Experience in handling Project Budgeting, Delivery, Scheduling and Management.
• Good in Client, Vendor and Stakeholder Management.
• Highly responsible in driving the Security Access Projects and managing large complex Projects.

Requirements:

• Strong in handling Security Access Control (Infrastructure, Hardware, Software)
• Good in handling Security Access Control in both Physical Security and Information Security.
• Strong knowledge of Security Access Regulations and Policies.
• Demonstrated large complex Project Management pertaining to Security Access Control experience.
• Knowledge of Security Access Policy and Regulations.
• Good in handling Projects Scheduling, Budgeting, Delivery and Management.
• Experience in handling large complex Project Management experience.
• Demonstrated Service Delivery Management and Project Management Life Cycle.
• Demonstrated experience in handling Project Waterfall Methodology
• Min. 12 years of IT Project Management (Security Access Control System) experience.
• Possess CITPM or PMP certification (a MUST)
• Demonstrated capability to drive the Security Access Control System (Infrastructure, Software, Policies & Regulations) Projects.
• Demonstrated large Team Management experience (20-30 Members)
• Strong Stakeholders/ Client Management experience.
• Possess knowledge of Waterfall Methodology.
• Possess strong Commercial Project Management experience.
• Good Degree in Computer Science/Computer Engineering.

We respect your privacy and all communication will be treated with confidentiality.

If you have meet the job requirements that we are looking for or wish to find out more on this role, please contact us or apply in-confidence to us with you updated MS Word Resume to : [email protected]

We regret only shortlisted candidate would be contacted.

Yong Jeline (Reg. No. R1101621)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

IT Project Director (Security Access Control)

Job Description & Requirements

Our esteem client is looking for a IT Project Director (Security Access Control).

The IT Project Director (Security Access Control) must be trained and certified.

He/ She must be able to deliver IT Enterprise Projects. The incumbent must be good in managing Security Access Control Projects involving physical security and information security). The ability to provide professional consultation to stakeholders and clients is required.

Responsibilities:

• Involved in managing large scale Projects in Security Access Control (physical security and information security)
• Demonstrated large scale IT Project Mapping, Design, Planning and Implementation.
• Experience in handling Project Budgeting, Delivery, Scheduling and Management.
• Good in Client, Vendor and Stakeholder Management.
• Highly responsible in driving the Security Access Projects and managing large complex Projects.

Requirements:

• Strong in handling Security Access Control (Infrastructure, Hardware, Software)
• Good in handling Security Access Control in both Physical Security and Information Security.
• Strong knowledge of Security Access Regulations and Policies.
• Demonstrated large complex Project Management pertaining to Security Access Control experience.
• Knowledge of Security Access Policy and Regulations.
• Good in handling Projects Scheduling, Budgeting, Delivery and Management.
• Experience in handling large complex Project Management experience.
• Demonstrated Service Delivery Management and Project Management Life Cycle.
• Demonstrated experience in handling Project Waterfall Methodology
• Min. 12 years of IT Project Management (Security Access Control System) experience.
• Possess CITPM or PMP certification (a MUST)
• Demonstrated capability to drive the Security Access Control System (Infrastructure, Software, Policies & Regulations) Projects.
• Demonstrated large Team Management experience (20-30 Members)
• Strong Stakeholders/ Client Management experience.
• Possess knowledge of Waterfall Methodology.
• Possess strong Commercial Project Management experience.
• Good Degree in Computer Science/Computer Engineering.

We respect your privacy and all communication will be treated with confidentiality.

If you have meet the job requirements that we are looking for or wish to find out more on this role, please contact us or apply in-confidence to us with you updated MS Word Resume to : [email protected]

We regret only shortlisted candidate would be contacted.

Yong Jeline (Reg. No. R1101621)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

As a Commercial Project Director specializing in Security Access Control Systems, You will be leading project management teams across four distinct sub-lines: Operations Technology (OT) and Information Technology (IT) Projects.

Job Description:

• Direct and oversee project management teams within the security access control business.
• Develop and implement project management strategies, processes, and methodologies to achieve operational excellence and meet business objectives.
• Monitor project progress to identify risks, mitigate issues proactively, and ensure adherence to project timelines, budgets, and legal requirements.
• Collaborate with stakeholders including clients, senior management, legal teams, and cross-functional teams to define project scope, objectives, and deliverables.
• Provide leadership and guidance to project managers and teams, fostering a collaborative and high-performance work environment.
• Manage project budgets, resources, and timelines effectively to optimize project profitability an customer satisfaction.
• Ensure strong customer management throughout project lifecycles, maintaining positive relationships and effectively managing expectations.
• Conduct project reviews and audits to assess project health, identify areas for improvement, and implement corrective actions as necessary.
• Stay abreast of industry trends, technological advancements, and legal developments in security access control systems

Requirements:

• Bachelor’s degree in Engineering, Computer Science, Business Administration, or related field
• 10-15 years of experience in project management related to security access control systems
• Proven track record of successfully managing and delivering projects
• Strong leadership and management skills
• Experience in financial management, resource allocation, and risk management within project environments.

To Apply or find out more information on this role, please email us or send in your updated resume to: [email protected]

Shelly Tan Bee Leng (Reg. No. R2199458)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

Associate Director Regional Security, AP

• Based in Singapore, the regional hub for Asia Pacific (AP) and top-ranked biopharmaceutical company on the Straits Times and Statista’s list of Best Employers in Singapore for two consecutive years (2020, 2021).
• Join the premier biopharmaceutical company that has been in Singapore for more than 25 years and in AP for over 60 years.

Reporting to the Regional Security Director, the Associate Director Regional Security (ADRS), AP is responsible for providing security support across a wide range of services in AP region for people and assets and operations, which include sales and marketing; manufacturing; and research. Incumbents are also responsible for providing lawful, objective and thorough support for internal and external investigations.

Responsibilities

• Provide tactical & strategic security support to AP (assigned markets) operations.
• Establish and maintain seamless interface with AP management and operations.
• Support the analysis of security exposures and implement cost effective passive, reactive, and proactive programs to address these exposures.
• As directed by Regional Security Director, conduct/support internal and external investigations within AP. Will be required to travel extensively.
• Maintain close liaison with government, industry, security, and intelligence professionals within AP.
• Provide guidance and support to site operations within AP ensuring that worldwide standards, policies and procedures are implemented and maintained.
• Provide support as directed in the areas of Executive Protection, Crisis Management, Site Security Surveys, and Risk Assessment / Risk Analysis.

Experience Required

• Security professional with 5-10 years’ experience in corporate security and/or 5-10 years’ experience in law enforcement within AP.
• Strong background in investigations.
• Ability to identify security issues and customize & implement solutions.
• Proven ability to work in varying situations, from committee work in which a “team player” approach is essential to situations in which considerable independence and self-motivation is required.
• Demonstrated ability to perform under pressure and respond rapidly to breaking situations. Sound, proven judgment is a must.
• Fluent English skills and fluency in Korean/Chinese/ Japanese advantageous
• Bachelor’s Degree (minimum) or equivalent.

We are proud to be a company that embraces the value of bringing diverse, talented, and committed people together. The fastest way to breakthrough innovation is when diverse ideas come together in an inclusive environment. We encourage our colleagues to respectfully challenge one another’s thinking and approach problems collectively. We are an equal opportunity employer, committed to fostering an inclusive and diverse workplace

As a Commercial Project Director specializing in Security Access Control Systems, You will be leading project management teams across four distinct sub-lines: Operations Technology (OT) and Information Technology (IT) Projects.

Job Description:

• Direct and oversee project management teams within the security access control business.
• Develop and implement project management strategies, processes, and methodologies to achieve operational excellence and meet business objectives.
• Monitor project progress to identify risks, mitigate issues proactively, and ensure adherence to project timelines, budgets, and legal requirements.
• Collaborate with stakeholders including clients, senior management, legal teams, and cross-functional teams to define project scope, objectives, and deliverables.
• Provide leadership and guidance to project managers and teams, fostering a collaborative and high-performance work environment.
• Manage project budgets, resources, and timelines effectively to optimize project profitability an customer satisfaction.
• Ensure strong customer management throughout project lifecycles, maintaining positive relationships and effectively managing expectations.
• Conduct project reviews and audits to assess project health, identify areas for improvement, and implement corrective actions as necessary.
• Stay abreast of industry trends, technological advancements, and legal developments in security access control systems

Requirements:

• Bachelor’s degree in Engineering, Computer Science, Business Administration, or related field
• 10-15 years of experience in project management related to security access control systems
• Proven track record of successfully managing and delivering projects
• Strong leadership and management skills
• Experience in financial management, resource allocation, and risk management within project environments.

To Apply or find out more information on this role, please email us or send in your updated resume to: [email protected]

Shelly Tan Bee Leng (Reg. No. R2199458)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

Associate Director, Regional Security

• Based in Singapore, the regional hub for Asia Pacific (AP) and top-ranked biopharmaceutical company on the Straits Times and Statista’s list of Best Employers in Singapore for two consecutive years (2020, 2021).
• Join the premier biopharmaceutical company that has been in Singapore for more than 25 years and in AP for over 60 years.

Reporting to the Regional Security Director, the Associate Director Regional Security (ADRS), AP is responsible for providing security support across a wide range of services in AP region for people and assets and operations, which include sales and marketing; manufacturing; and research. Incumbents are also responsible for providing lawful, objective, and thorough support for internal and external investigations.

Responsibilities

· Provide tactical & strategic security support to AP (assigned markets) operations.

· Establish and maintain seamless interface with AP management and operations.

· Support the analysis of security exposures and implement cost effective passive, reactive, and proactive programs to address these exposures.

· As directed by Regional Security Director, conduct/support internal and external investigations within AP. Will be required to travel extensively.

· Maintain close liaison with government, industry, security, and intelligence professionals within AP.

· Provide guidance and support to site operations within AP ensuring that worldwide standards, policies, and procedures are implemented and maintained.

· Provide support as directed in the areas of Executive Protection, Crisis Management, Site Security Surveys, and Risk Assessment / Risk Analysis.

Experience Required

· Security professional with 5-10 years’ experience in corporate security and/or 5-10 years’ experience in law enforcement within AP.

· Strong background in investigations.

· Ability to identify security issues and customize & implement solutions.

· Proven ability to work in varying situations, from committee work in which a “team player” approach is essential to situations in which considerable independence and self-motivation is required.

· Demonstrated ability to perform under pressure and respond rapidly to breaking situations. Sound, proven judgment is a must.

· Fluent English skills and fluency in Korean/Chinese/ Japanese advantageous

· Bachelor’s Degree (minimum) or equivalent.

We are proud to be a company that embraces the value of bringing diverse, talented, and committed people together. The fastest way to breakthrough innovation is when diverse ideas come together in an inclusive environment. We encourage our colleagues to respectfully challenge one another’s thinking and approach problems collectively. We are an equal opportunity employer, committed to fostering an inclusive and diverse workplace.

We are seeking a talented, dedicated, and highly motivated attorney to lead Meta’s APAC Security Legal team as Director & Associate General Counsel. This is a unique opportunity to have regional and global impact while working on cutting edge and novel issues in an exciting, fast-paced environment across a range of complex regulatory, safety, security, and user data issues. The role requires the ability to manage and lead a team of senior attorneys as well as an individual who can effectively influence and work seamlessly with large multi-stakeholder teams. We require an individual with a strong work-ethic who is proactive, flexible, collaborative, and has demonstrated excellent legal and analytical skills. Strategic thinking, solid communications skills, and a keen interest in learning and working with new technologies and laws across jurisdictions and timezones are a must.

Responsibilities

• Lead a regional team of experienced lawyers in complex legal environments
• Drive strategy and provide advice on matters relating to user data disclosures in response to criminal, civil, and regulatory legal process
• Develop and implement effective policies for processing legal requests and protecting user data
• Coordinate with the global Law Enforcement Legal team on regional advice on product developments and infrastructure projects
• Develop strategic approaches to managing regulatory, criminal and policy legal risks and resolving disputes in APAC
• Work closely with the company’s safety and security teams to protect the people who use our service from abuse
• Support legal and public policy teams’ engagement with regulators and legislators on safety and security policies
• Collaborate with members of Public Policy, Legal, Community Operations, Product, Engineering and others on safety and security matters

Minimum Qualifications

• 15+ years of relevant experience as in-house or outside counsel advising on regulatory, safety and security, investigations and enforcement, policy matters
• APAC regional experience strategically managing and handling contentious regulatory issues and/or criminal matters
• Experience leading teams, characterized by a culture of inclusion and a growth mindset
• Ability to effectively influence and communicate cross-functionally with a strong focus on collaboration
• Ability to think strategically to solve legal challenges with attention to detail
• Experience delivering advice under pressure and experience operating within ambiguity and prioritizing work

Preferred Qualifications

• Experience regionally on issues pertaining to data protection and analogous international laws
• Regional experience engaging with regulators and legislators on regulatory, safety and security matters preferred
• Experience providing guidance to providers in responding to law enforcement requests or criminal matters
• Experience advising technology or telecommunications companies
• Experience with criminal litigation
• Experience with Mutual Legal Assistance Treaty requests, Letters Rogatory, or other forms of international cooperation
• Experience with U.S. law, including the Stored Communications Act, Wiretap Act, Pen Register/Trap and Trace Statute

Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today—beyond the constraints of screens, the limits of distance, and even the rules of physics.

As a Commercial Project Director specializing in Security Access Control Systems, You will be leading project management teams across four distinct sub-lines: Operations Technology (OT) and Information Technology (IT) Projects. This role requires strong leadership in directing project teams to ensure all projects are delivered on time, within budget, and in compliance with legal and customer requirements.

Job Description:

• Direct and oversee project management teams within the security access control business.
• Develop and implement project management strategies, processes, and methodologies to achieve operational excellence and meet business objectives.
• Monitor project progress to identify risks, mitigate issues proactively, and ensure adherence to project timelines, budgets, and legal requirements.
• Collaborate with stakeholders including clients, senior management, legal teams, and cross-functional teams to define project scope, objectives, and deliverables.
• Provide strategic leadership and guidance to project managers and teams, fostering a collaborative and high-performance work environment.
• Manage project budgets, resources, and timelines effectively to optimize project profitability an customer satisfaction.
• Ensure strong customer management throughout project lifecycles, maintaining positive relationships and effectively managing expectations.
• Conduct project reviews and audits to assess project health, identify areas for improvement, and implement corrective actions as necessary.
• Serve as a key point of contact for escalated project issues and legal matters, ensuring compliance with contractual obligations and regulatory requirements.
• Stay abreast of industry trends, technological advancements, and legal developments in security access control systems, integrating insights to enhance project delivery capabilities.

Requirements:

• Bachelor’s degree in Engineering, Computer Science, Business Administration, or related field
• 10-15 years of experience in project management within the security access control systems industry.
• Proven track record of successfully managing and delivering complex projects on time, within budget, and in compliance with legal requirements.
• Strong leadership and management skills, with the ability to inspire and motivate cross-functional teams.
• Excellent communication and interpersonal skills, with the ability to effectively interact with stakeholders at all levels, including legal teams and clients.
• Experience in financial management, resource allocation, and risk management within project environments.

IT Project Director (Security Access Control)

Job Description & Requirements

Our esteem client is looking for a IT Project Director (Security Access Control).

The IT Project Director (Security Access Control) must be trained and certified.

He/ She must be able to deliver IT Enterprise Projects. The incumbent must be good in managing Security Access Control Projects involving physical security and information security). The ability to provide professional consultation to stakeholders and clients is required.

Responsibilities:

• Involved in managing large scale Projects in Security Access Control (physical security and information security)
• Demonstrated large scale IT Project Mapping, Design, Planning and Implementation.
• Experience in handling Project Budgeting, Delivery, Scheduling and Management.
• Good in Client, Vendor and Stakeholder Management.
• Highly responsible in driving the Security Access Projects and managing large complex Projects.

Requirements:

• Strong in handling Security Access Control (Infrastructure, Hardware, Software)
• Good in handling Security Access Control in both Physical Security and Information Security.
• Strong knowledge of Security Access Regulations and Policies.
• Demonstrated large complex Project Management pertaining to Security Access Control experience.
• Knowledge of Security Access Policy and Regulations.
• Good in handling Projects Scheduling, Budgeting, Delivery and Management.
• Experience in handling large complex Project Management experience.
• Demonstrated Service Delivery Management and Project Management Life Cycle.
• Demonstrated experience in handling Project Waterfall Methodology
• Min. 12 years of IT Project Management (Security Access Control System) experience.
• Possess CITPM or PMP certification (a MUST)
• Demonstrated capability to drive the Security Access Control System (Infrastructure, Software, Policies & Regulations) Projects.
• Demonstrated large Team Management experience (20-30 Members)
• Strong Stakeholders/ Client Management experience.
• Possess knowledge of Waterfall Methodology.
• Possess strong Commercial Project Management experience.
• Good Degree in Computer Science/Computer Engineering.

We respect your privacy and all communication will be treated with confidentiality.

If you have meet the job requirements that we are looking for or wish to find out more on this role, please contact us or apply in-confidence to us with you updated MS Word Resume to : [email protected]

We regret only shortlisted candidate would be contacted.

Yong Jeline (Reg. No. R1101621)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

We are seeking an experienced senior manager to lead our information security team, combining strong hands-on technical expertise as well as people management experience in the information security domain. They will lead a team to design and/or review application security including but not limited to penetration test, source code review, Cloud Security and various inter-connected application and infrastructures, especially in the area of authentication, authorization, information protection, and cryptographic controls for both on-premise and cloud environment. The role also has supervision of the AIA-SG IAM and Threat Intelligence Manager and their team.

This role is responsible for providing leadership in application security review for the strategic digital solutions across technology to ensure secure solutions for business growth. The person should have solid written and verbal communication skills.

WHAT YOU’LL BE DOING:

VAPT

Manage the AIA-SG Vulnerability Assessment and Penetration Testing team responsible for delivering the following services to AIA-SG, including Security Architecture:

Application Security

• Design and/or review application security architecture proposal for various security-driven initiatives or business-driven initiatives for on-premise and cloud environment.
• Manage external third-party for application penetration testing engagements.

Infrastructure Security

• Manage end-to-end infrastructure security activities, such as vulnerability management, servers’ security monitoring & hardening, infrastructure as a code, etc.
• Design and/or review infrastructure security architecture proposal for various security-driven initiatives for on-premise and cloud environment.

Cloud Security

• Manage compliancy level of AIA SG cloud security assets based on ongoing regular scanning according to the defined threshold.
• Evaluate the security aspect of new cloud-based solutions proposed by application development team, infrastructure team, or business users.
• Manage various cloud security BAU activities, such as assets provisioning, deprovisioning, hardening, etc.

Penetration Testing

• Manage end-to-end application security activities, including application penetration testing, authentication / authorization design / review, and DevSecOps design & roll out.
• Manage Third Party relationships with industry vendors who undertake security assessment services.
• Oversight of annual Pen testing schedule.

Information Security Architecture

• Lead a team to design and/or review application security architecture proposal for various security-driven initiatives or business-driven initiatives for on-premise and cloud environment.
• Design and/or review authentication and authorization flow of the applications, whether it is aligned with security best practices and organization's IT security technology policy & procedure in terms of the strength of access controls, session management, cache management, cookie management, token management, cryptographic algorithm, and information/data protection.
• Assess the security aspect of new proposed application tools / platforms from application team, and relevance/consequences to existing security architecture.
• Work closely with application development and infrastructure team to proactively stay on top of latest secure application design to deliver thorough security recommendation aligned with organization's IT security technology policy & procedure.

Identity and Access Management

• Supervise the AIA-SG IAM Manager and their team performing IAM Governance functions for the Business Unit.

Cyber Security & Security Incident Handling

• Work with Security Operation Centre (SOC) Team to ensure secure protection of AIA SG environment.
• Deploy new cyber security initiatives and roll out the platform together with SOC Team.
• Point of contact for security incident handling and investigation, starting from incident is identified, handled, and resolved.

Security Advisory

• Provide feasible security recommendations or guidance based on queries / changes initiated by application development team, infrastructure team, or business users.
• Facilitate challenging security conversations and provide acceptable solutions where IT standards are contradicting with business demands to achieve acceptable business solutions without sacrificing security and compliance aspects.

Managerial Responsibilities

• Lead promotion of activities to increase information security within your teams to embed and continuously improve adherence to good practice.
• Drive a continues Learning and Development program for staff training. (with inhouse and external training programs).

WHAT WE ARE LOOKING FOR:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).
• Minimum 15 years of experiences of information security domain, especially in Application Security, Infrastructure Security and Cloud Security.
• Preferable to have application development or infrastructure operation background with hands-on experiences of designing and/or reviewing application security or infrastructure security.
• Hands-on information security experience in the Multiple Cloud Environment (SaaS, PaaS and IaaS) and Cyber Incident management.
• Certifications related to security architecture or Cloud Security is preferable, such as CCSP, Azure DevOps certification, Azure Solutions Architect certification, etc.
• Preferably a holder of one or more of the following information security and audit qualifications: CISSP, CISA, CRISC, CCSP.
• Good knowledge of latest security technologies and cyber landscape in a highly regulated industry.
• Good interpersonal and communication skill.
• Strong leadership with a high integrity, proactive mindset, and strong ownership.
• Working experiences in insurance / banking / IT industry is preferred.
• Leading DevSecOps tool experience such as Snyk, Veracode, SonarQube
• Infrastructure Security: Windows, Linux, AS400.
• Application framework and Security: NodeJS, ReactJS, .NET
• Security Advisory and Assessment.
• Security Incident Management.
• CI/CD pipelines: Azure DevOps, Bamboo, Jenkins, GitHub, Bitbucket.

IT Project Director (Security Access Control)

Job Description & Requirements

Our esteem client is looking for a IT Project Director (Security Access Control).

The IT Project Director (Security Access Control) must be trained and certified.

He/ She must be able to deliver IT Enterprise Projects. The incumbent must be good in managing Security Access Control Projects involving physical security and information security). The ability to provide professional consultation to stakeholders and clients is required.

Responsibilities:

• Involved in managing large scale Projects in Security Access Control (physical security and information security)
• Demonstrated large scale IT Project Mapping, Design, Planning and Implementation.
• Experience in handling Project Budgeting, Delivery, Scheduling and Management.
• Good in Client, Vendor and Stakeholder Management.
• Highly responsible in driving the Security Access Projects and managing large complex Projects.

Requirements:

• Strong in handling Security Access Control (Infrastructure, Hardware, Software)
• Good in handling Security Access Control in both Physical Security and Information Security.
• Strong knowledge of Security Access Regulations and Policies.
• Demonstrated large complex Project Management pertaining to Security Access Control experience.
• Knowledge of Security Access Policy and Regulations.
• Good in handling Projects Scheduling, Budgeting, Delivery and Management.
• Experience in handling large complex Project Management experience.
• Demonstrated Service Delivery Management and Project Management Life Cycle.
• Demonstrated experience in handling Project Waterfall Methodology
• Min. 12 years of IT Project Management (Security Access Control System) experience.
• Possess CITPM or PMP certification (a MUST)
• Demonstrated capability to drive the Security Access Control System (Infrastructure, Software, Policies & Regulations) Projects.
• Demonstrated large Team Management experience (20-30 Members)
• Strong Stakeholders/ Client Management experience.
• Possess knowledge of Waterfall Methodology.
• Possess strong Commercial Project Management experience.
• Good Degree in Computer Science/Computer Engineering.

We respect your privacy and all communication will be treated with confidentiality.

If you have meet the job requirements that we are looking for or wish to find out more on this role, please contact us or apply in-confidence to us with you updated MS Word Resume to : [email protected]

We regret only shortlisted candidate would be contacted.

Yong Jeline (Reg. No. R1101621)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

We are seeking an experienced senior manager to lead our information security team, combining strong hands-on technical expertise as well as people management experience in the information security domain. They will lead a team to design and/or review application security including but not limited to penetration test, source code review, Cloud Security and various inter-connected application and infrastructures, especially in the area of authentication, authorization, information protection, and cryptographic controls for both on-premise and cloud environment. The role also has supervision of the AIA-SG IAM and Threat Intelligence Manager and their team.

This role is responsible for providing leadership in application security review for the strategic digital solutions across technology to ensure secure solutions for business growth. The person should have solid written and verbal communication skills.

WHAT YOU’LL BE DOING:

VAPT

Manage the AIA-SG Vulnerability Assessment and Penetration Testing team responsible for delivering the following services to AIA-SG, including Security Architecture:

Application Security

• Design and/or review application security architecture proposal for various security-driven initiatives or business-driven initiatives for on-premise and cloud environment.
• Manage external third-party for application penetration testing engagements.

Infrastructure Security

• Manage end-to-end infrastructure security activities, such as vulnerability management, servers’ security monitoring & hardening, infrastructure as a code, etc.
• Design and/or review infrastructure security architecture proposal for various security-driven initiatives for on-premise and cloud environment.

Cloud Security

• Manage compliancy level of AIA SG cloud security assets based on ongoing regular scanning according to the defined threshold.
• Evaluate the security aspect of new cloud-based solutions proposed by application development team, infrastructure team, or business users.
• Manage various cloud security BAU activities, such as assets provisioning, deprovisioning, hardening, etc.

Penetration Testing

• Manage end-to-end application security activities, including application penetration testing, authentication / authorization design / review, and DevSecOps design & roll out.
• Manage Third Party relationships with industry vendors who undertake security assessment services.
• Oversight of annual Pen testing schedule.

Information Security Architecture

• Lead a team to design and/or review application security architecture proposal for various security-driven initiatives or business-driven initiatives for on-premise and cloud environment.
• Design and/or review authentication and authorization flow of the applications, whether it is aligned with security best practices and organization's IT security technology policy & procedure in terms of the strength of access controls, session management, cache management, cookie management, token management, cryptographic algorithm, and information/data protection.
• Assess the security aspect of new proposed application tools / platforms from application team, and relevance/consequences to existing security architecture.
• Work closely with application development and infrastructure team to proactively stay on top of latest secure application design to deliver thorough security recommendation aligned with organization's IT security technology policy & procedure.

Identity and Access Management

• Supervise the AIA-SG IAM Manager and their team performing IAM Governance functions for the Business Unit.

Cyber Security & Security Incident Handling

• Work with Security Operation Centre (SOC) Team to ensure secure protection of AIA SG environment.
• Deploy new cyber security initiatives and roll out the platform together with SOC Team.
• Point of contact for security incident handling and investigation, starting from incident is identified, handled, and resolved.

Security Advisory

• Provide feasible security recommendations or guidance based on queries / changes initiated by application development team, infrastructure team, or business users.
• Facilitate challenging security conversations and provide acceptable solutions where IT standards are contradicting with business demands to achieve acceptable business solutions without sacrificing security and compliance aspects.

Managerial Responsibilities

• Lead promotion of activities to increase information security within your teams to embed and continuously improve adherence to good practice.
• Drive a continues Learning and Development program for staff training. (with inhouse and external training programs).

WHAT WE ARE LOOKING FOR:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).
• Minimum 15 years of experiences of information security domain, especially in Application Security, Infrastructure Security and Cloud Security.
• Preferable to have application development or infrastructure operation background with hands-on experiences of designing and/or reviewing application security or infrastructure security.
• Hands-on information security experience in the Multiple Cloud Environment (SaaS, PaaS and IaaS) and Cyber Incident management.
• Certifications related to security architecture or Cloud Security is preferable, such as CCSP, Azure DevOps certification, Azure Solutions Architect certification, etc.
• Preferably a holder of one or more of the following information security and audit qualifications: CISSP, CISA, CRISC, CCSP.
• Good knowledge of latest security technologies and cyber landscape in a highly regulated industry.
• Good interpersonal and communication skill.
• Strong leadership with a high integrity, proactive mindset, and strong ownership.
• Working experiences in insurance / banking / IT industry is preferred.
• Leading DevSecOps tool experience such as Snyk, Veracode, SonarQube
• Infrastructure Security: Windows, Linux, AS400.
• Application framework and Security: NodeJS, ReactJS, .NET
• Security Advisory and Assessment.
• Security Incident Management.
• CI/CD pipelines: Azure DevOps, Bamboo, Jenkins, GitHub, Bitbucket.

We protect Bloomberg.

There's no such thing as a "safe system" - only safer systems. Our security teams work to build and maintain the safest operating environment for Bloomberg’s users. The security analysts within the Cyber Security Operations Center are the main defenders of the company. The Cyber Security Analyst - Triage's function, within the CSOC, is considered to be a key pillar in Bloomberg’s security, as they are the initial responders to security events. Are you a motivated technical professional, who has a passion towards cyber security? And are accomplished in a systems- or applications-support role, or already have cyber security experience? In this security role, Bloomberg will provide you the opportunity to apply your current skills, while you rapidly develop new ones that are required in the cyber security field.

The Bloomberg CSOC is responsible for the detection of cyber threats, and when detected, responsible for the rapid response, across both the diverse lines of business and the global network. The CSOC is an open and collaborative environment, where members work together to identify and address the latest cyber security threats facing the company. The CSOC is staffed 24 x 7 x 365, with varying shifts, and multiple tiers of support, ranging from first response teams to the Computer Incident Response Team. Furthermore, there is opportunity to work with these more experienced members on some of the latest cyber security defense technologies.

In this role, we'll trust you to:

• Work within a dedicated shift, 8AM - 6PM, Wednesday through Sunday, to support the 24x7x365 Cyber Security Operations Center (some holiday coverage may be required)
• Demonstrate passion and good judgement as a network defender
• Identify, and act as the initial responder, to all security events
• Learn and understand the broader security of Bloomberg’s environment
• Monitor for events that match predefined criteria, and respond accordingly to standard operating procedures, as well as use good judgement for matters where a procedure doesn’t exist
• Bring to closure a significant majority of events without the involvement of other teams
• Share robust case notes when raising issues in order to help the next team member
• Remain up-to-date with cyber security threats and trends
• Deliver on relevant cyber security metrics and measurements for the role and area of responsibility
• Collaborate directly with colleagues across the firm to resolve security matters while furthering the program’s brand with a constructive and thoughtful approach
• Respond to varying seniority levels of employees and contractors throughout Bloomberg to address cyber security concerns
• Ensure appropriate coverage for the assigned shift and provide ample awareness to changes to commitments
• Produce and maintain documentation and standard operating procedures
• Generate ideas for continued improvement, including conceptual design of new threat scenarios

You'll need to have:

• A diploma or a degree in cyber security or a related technical field
• Minimum 1+ years of experience in a cyber security related role (e.g., Cyber Security Operations Center)
• Experience dealing with non-physical Security Operations, Incident Analysis, and/or Network and Host Log Analysis)
• Deep understanding in logs from a variety of sources, their log events, and Splunk
• Knowledge of enterprise network and host security controls
• Ability to be autonomous but proactive in reaching out for support
• Good familiarity with operating systems (Windows, Linux and MAC)
• Deep understanding of cyber security trends and potential threats
• Knowledge of client-server applications, multi-tier web applications, relational databases, firewalls, VPNs and enterprise antivirus products
• Good communication and interpersonal skills and the ability to take initiative
• Dedication to role and ability to collaborate with team members
• Excellent written and verbal communication skill in English
• Demonstrated continuous career growth within an organisation

We'd love to see:

• Knowledge of AWS, Azure, and GCP cloud platforms
• Previous experience working with a Security Information and Event Management (SIEM) platform
• Certifications in the information security space (CompTIA Security+, SSCP, CEH)
• Familiarity with programming / scripting

If this sounds like you:

Apply! If we think you are a good match we'll get in touch to let you know the next steps.

To learn more, visit our YouTube channel "Inside Bloomberg" www.youtube.com/InsideBloomberg

JOB SUMMARY

Lead and manage security architecture and engineering in APEC. Performs security accreditation and evaluates the implementation of those controls in order to grant Approval to Operate for a release of new infrastructure, services, applications and processes into Marriott’s Production Environments in regional level.

Leverages existing Security Engagement processes and documentation, in conjunction with security compliance tools, to determine control implementation status. Will routinely process ITSM Release and Security Engagement Tasks to document justification for all approvals. Will routinely collaborate with multiple teams, including, but not limited to, Business Release Sponsors, Project Managers, Security Architects, Security Architecture Analysts, and

Change Management teams to ensure the Security Processes are followed and completed in order to accredit the engagement or release.

Will routinely manage and communicate the status of the tasks assigned in ITSM to thoroughly document the accreditation resulting in granting of Approval to Operate. Understand, communicate, interpret and enforce MI Policies and Security Standards throughout the Certification and Accreditation process. Understand and communicate control objectives in terms of both MI Policy and Standards and Security Best Practice Frameworks, including, but not limited to, NIST RMF, NIST CSF, PCI DSS, GDPR, MPLS, EU Privacy, ISO, as referenced in Marriott’s Common Controls Framework. Will periodically provide status and metrics for the assigned C&A Engagements in order to provide visibility and transparency to GIS Senior Leadership

CANDIDATE PROFILE

Education and Experience

Required:

• Bachelor’s degree in Information Systems, Computer Science or related field or equivalent experience/certification
• 8+ years’ experience in Information Security with:3+ years in process-oriented Security Audit/Assurance/Technical Assessment role
  2+ years’ team management experience with security technical team members
  1-2 years’ experience/exposure to Common Controls Framework
  Exposure/functional understanding of NIST RMF
  
• Current and relevant information security certifications such as: CISSP (Certified Information Systems Security Professional), (ISC)2 CGRC certification, ISACA, PCI QSA/ISA, ITIL, IS Certification & Accreditation Professional - ISCAP, GIAC Information Security Professional (GISP),

Preferred Skills & Attributes

• Strong oral and written communication skills and comfortable with speaking in large groups virtually and in person.
• Ability to conduct independent security research.
• Strong understanding of common OWASP flagship projects, Top 10, Cheat Sheets…etc.
• Strong understanding of cryptography concepts: hashing, signing, encryption, decryption, tokenization
• Strong understanding of SDLC and security integration points
• Functional understanding of microservice application architecture
• Functional understanding of common application security controls such as WAF, RASP, Intercepting Proxies
• Comfortable with the following tools and technologies: GitHub Advanced Security, Postman, Fortify SCA, Jenkins, Artifactory, SonarQube, Docker, JIRA, Confluence, Aqua CSP, Nessus Pro or Tenable.io
• Comfortable with technical report writing and crafting security requirements.
• Basic understanding of network security concepts: DOS, DNS Spoofing, ARP Poisoning, Firewalls, Intrusion Detection, Segmentation
• Basic understanding of Vulnerability and Patch Management practices
• Basic understanding of endpoint security controls: EDR, Vulnerability Scanning Agents, HIDS, FIM
• Basic understanding of Agile Software Development Practices & DevOps
• Master’s degree in Computer Science or Software Engineering
• Mid-level cloud computing certification, AWS Solutions Architect Associate, Azure Administrator Associate, Google Associate Cloud Engineer
• Functional knowledge software engineering concepts: GOF software design patterns, SOLID design principles (SRP, OSP, LSP, ISP, and DIP) and design methods (Scrum, XP, Lean, Waterfall)
• Functional understanding of common cryptographic algorithms and libraries
• Functional foundational understanding of Cloud Computing

CORE WORK ACTIVITIES

Security Accreditation

• Works with development teams to review application source code for security and operational risks.
• Perform manual code reviews of applications that are not compatible with automated SAST tools.
• Provide detailed security documentation to developers, software engineers and technical personnel when necessary.
• Provide guidance and recommendation to software architects and engineers on how to correct code related security flaws.

Managing Work, Projects, and Policies

• Manage security architecture and engineering team in APEC.
• Participate in peer reviews of security assessments created by other team members.
• Manage tickets and SLAs associated with security testing efforts.
• Maintain and contribute to the enterprise SSDLC standard.
• Coordinates and implements work and projects as assigned.
• Generates and provides accurate and timely results in the form of reports, presentations, etc.
• Analyzes information and evaluates results to choose the best solution and solve problems.
• Develops specific goals and plans to prioritize, organize, and accomplish work.
• Sets and tracks goal progress for self and others.
• Monitors the work of others to ensure it is completed on time and meets expectations.
• Provides direction and assistance to other organizational units’ policies and procedures, and efficient control and utilization of resources.

Leading Team

• Creates a team environment that encourages accountability, high standards, and innovation.
• Leads specific team while assisting with meeting or exceeding department goals.
• Makes sure others understand performance expectations.
• Ensures that goals are being translated to the team as they relate to tracking and productivity.
• Creates and nurtures an environment that emphasizes motivation, empowerment, teamwork, continuous improvement and a passion for providing service.
• Understands employee and develops plans to address need areas and expand on the strengths.
• Provides the team with the capabilities needed to meet or exceed expectations.
• Leads by example demonstrating self-confidence, energy and enthusiasm.

Conducting Human Resources Activities

• Acts proactively when dealing with employee concerns.
• Extends professionalism and courtesy to employees at all times.
• Communicates/updates all goals and results with employees.
• Meets semiannually with staff on a one-to-one basis.
• Establishes and maintains open, collaborative relationships with employees.
• Solicits employee feedback.
• Interviews job candidates and assists in making hiring decisions.
• Receives hiring recommendations from team supervisors.
• Ensures orientations for new team members are thorough and completed in a timely fashion.
• Observes behaviors of employees and provides feedback to individuals.

Additional Responsibilities

• Provides information to supervisors, co-workers, and subordinates by telephone, in written form, e-mail, or in person in a timely manner.
• Manages group or interpersonal conflict.
• Informs and/or updates executives, peers, and subordinates on relevant information in a timely manner.
• Manages time effectively and conducts activities in an organized manner.
• Presents ideas, expectations and information in a concise, organized manner.
• Uses problem solving methodology for decision making and follow up.
• Performs other reasonable duties as assigned by manager.

Marriott International is an equal opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered under applicable law.