Total 4 Director/C-Level computer security job vacancies in d04 harbourfronttelok blangah sentosa island

ST Engineering is a global technology, defence and engineering group with offices across Asia, Europe, the Middle East and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives through its diverse portfolio of businesses across the aerospace, smart city, defence and public security segments. Headquartered in Singapore, ST Engineering ranks among the largest companies listed on the Singapore Exchange.

Join our Cyber Team

We are an industry leader in cybersecurity with over two decades of experience, we deliver a holistic suite of trusted cybersecurity solutions to empower cyber resilience for government and ministries, critical infrastructure, and commercial enterprises. Backed by our indigenous capabilities and deep domain expertise, we offer robust cyber-secure products and services in cryptography, cybersecurity engineering, digital authentication, SCADA protection, audit and compliance. We specialise in the design and build of security operations centres for cybersecurity professionals and provide managed security services to strengthen the cybersecurity posture of our government and enterprise customers.

We are seeking a People Manager to guide and mentor a team of technical professionals, fostering a collaborative and high-performance work environment.

Responsibilities

•Provide technical leadership for our cybersecurity product capabilities development and sustenance.

•Technology Subject Matter Expert who understands security landscape and solution credibly with ability to work with cross-functional team including solution architecting, pre- and post-sales engagements, project management to deliver cybersecurity product solutions.

•Set strategic direction in alignment with business objectives, keeping abreast of industry best practices.

Requirements

1. At least 10 years of software development experience of which at least 5 years are in a technical leadership role in cybersecurity

2. Relevant Industry Certifications such as CISSP, CSSLP, PMP or equivalent

3. Technical knowledge in following is a must:

i. Cloud Architecture: Planning and implementing the applications & data to the cloud and ensure organization’s technical and business requirements are met.

ii. Networking Knowledge: Demonstrate expertise in networking concepts, protocols, and technologies, with the ability to design and implement complex network infrastructures.

iii. DevOps: Drive the adoption of DevOps practices within the organization, including continuous integration, automated testing, and continuous delivery.

iv. Software Version Control: Implement and manage software version control systems to track changes, facilitate collaboration, and ensure code quality.

4. Previous experience working on government projects specifically in cybersecurity environment and governance, risk management and compliance is an added advantage.

5. Effective communication and presentation skills with ability to transpose complex security concepts into business terms/impacts.

6. Experience with deployment orchestration, automation and security configuration management

7. Ability to work easily with diverse and dynamic teams

Work location: Jurong East

Find out more: https://www.stengg.com/cybersecurity

ST Engineering believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

JOB SUMMARY

Lead and manage security architecture and engineering in APEC. Performs security accreditation and evaluates the implementation of those controls in order to grant Approval to Operate for a release of new infrastructure, services, applications and processes into Marriott’s Production Environments in regional level.

Leverages existing Security Engagement processes and documentation, in conjunction with security compliance tools, to determine control implementation status. Will routinely process ITSM Release and Security Engagement Tasks to document justification for all approvals. Will routinely collaborate with multiple teams, including, but not limited to, Business Release Sponsors, Project Managers, Security Architects, Security Architecture Analysts, and

Change Management teams to ensure the Security Processes are followed and completed in order to accredit the engagement or release.

Will routinely manage and communicate the status of the tasks assigned in ITSM to thoroughly document the accreditation resulting in granting of Approval to Operate. Understand, communicate, interpret and enforce MI Policies and Security Standards throughout the Certification and Accreditation process. Understand and communicate control objectives in terms of both MI Policy and Standards and Security Best Practice Frameworks, including, but not limited to, NIST RMF, NIST CSF, PCI DSS, GDPR, MPLS, EU Privacy, ISO, as referenced in Marriott’s Common Controls Framework. Will periodically provide status and metrics for the assigned C&A Engagements in order to provide visibility and transparency to GIS Senior Leadership

CANDIDATE PROFILE

Education and Experience

Required:

• Bachelor’s degree in Information Systems, Computer Science or related field or equivalent experience/certification
• 8+ years’ experience in Information Security with:3+ years in process-oriented Security Audit/Assurance/Technical Assessment role
  2+ years’ team management experience with security technical team members
  1-2 years’ experience/exposure to Common Controls Framework
  Exposure/functional understanding of NIST RMF
  
• Current and relevant information security certifications such as: CISSP (Certified Information Systems Security Professional), (ISC)2 CGRC certification, ISACA, PCI QSA/ISA, ITIL, IS Certification & Accreditation Professional - ISCAP, GIAC Information Security Professional (GISP),

Preferred Skills & Attributes

• Strong oral and written communication skills and comfortable with speaking in large groups virtually and in person.
• Ability to conduct independent security research.
• Strong understanding of common OWASP flagship projects, Top 10, Cheat Sheets…etc.
• Strong understanding of cryptography concepts: hashing, signing, encryption, decryption, tokenization
• Strong understanding of SDLC and security integration points
• Functional understanding of microservice application architecture
• Functional understanding of common application security controls such as WAF, RASP, Intercepting Proxies
• Comfortable with the following tools and technologies: GitHub Advanced Security, Postman, Fortify SCA, Jenkins, Artifactory, SonarQube, Docker, JIRA, Confluence, Aqua CSP, Nessus Pro or Tenable.io
• Comfortable with technical report writing and crafting security requirements.
• Basic understanding of network security concepts: DOS, DNS Spoofing, ARP Poisoning, Firewalls, Intrusion Detection, Segmentation
• Basic understanding of Vulnerability and Patch Management practices
• Basic understanding of endpoint security controls: EDR, Vulnerability Scanning Agents, HIDS, FIM
• Basic understanding of Agile Software Development Practices & DevOps
• Master’s degree in Computer Science or Software Engineering
• Mid-level cloud computing certification, AWS Solutions Architect Associate, Azure Administrator Associate, Google Associate Cloud Engineer
• Functional knowledge software engineering concepts: GOF software design patterns, SOLID design principles (SRP, OSP, LSP, ISP, and DIP) and design methods (Scrum, XP, Lean, Waterfall)
• Functional understanding of common cryptographic algorithms and libraries
• Functional foundational understanding of Cloud Computing

CORE WORK ACTIVITIES

Security Accreditation

• Works with development teams to review application source code for security and operational risks.
• Perform manual code reviews of applications that are not compatible with automated SAST tools.
• Provide detailed security documentation to developers, software engineers and technical personnel when necessary.
• Provide guidance and recommendation to software architects and engineers on how to correct code related security flaws.

Managing Work, Projects, and Policies

• Manage security architecture and engineering team in APEC.
• Participate in peer reviews of security assessments created by other team members.
• Manage tickets and SLAs associated with security testing efforts.
• Maintain and contribute to the enterprise SSDLC standard.
• Coordinates and implements work and projects as assigned.
• Generates and provides accurate and timely results in the form of reports, presentations, etc.
• Analyzes information and evaluates results to choose the best solution and solve problems.
• Develops specific goals and plans to prioritize, organize, and accomplish work.
• Sets and tracks goal progress for self and others.
• Monitors the work of others to ensure it is completed on time and meets expectations.
• Provides direction and assistance to other organizational units’ policies and procedures, and efficient control and utilization of resources.

Leading Team

• Creates a team environment that encourages accountability, high standards, and innovation.
• Leads specific team while assisting with meeting or exceeding department goals.
• Makes sure others understand performance expectations.
• Ensures that goals are being translated to the team as they relate to tracking and productivity.
• Creates and nurtures an environment that emphasizes motivation, empowerment, teamwork, continuous improvement and a passion for providing service.
• Understands employee and develops plans to address need areas and expand on the strengths.
• Provides the team with the capabilities needed to meet or exceed expectations.
• Leads by example demonstrating self-confidence, energy and enthusiasm.

Conducting Human Resources Activities

• Acts proactively when dealing with employee concerns.
• Extends professionalism and courtesy to employees at all times.
• Communicates/updates all goals and results with employees.
• Meets semiannually with staff on a one-to-one basis.
• Establishes and maintains open, collaborative relationships with employees.
• Solicits employee feedback.
• Interviews job candidates and assists in making hiring decisions.
• Receives hiring recommendations from team supervisors.
• Ensures orientations for new team members are thorough and completed in a timely fashion.
• Observes behaviors of employees and provides feedback to individuals.

Additional Responsibilities

• Provides information to supervisors, co-workers, and subordinates by telephone, in written form, e-mail, or in person in a timely manner.
• Manages group or interpersonal conflict.
• Informs and/or updates executives, peers, and subordinates on relevant information in a timely manner.
• Manages time effectively and conducts activities in an organized manner.
• Presents ideas, expectations and information in a concise, organized manner.
• Uses problem solving methodology for decision making and follow up.
• Performs other reasonable duties as assigned by manager.

Marriott International is an equal opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered under applicable law.

Position: Chief Information Security Officer

Job Description

• Developing and implementing secure processes and systems used to prevent, detect, mitigate, and recover from cyberattacks
• Educating and managing technology risk in collaboration with business leaders
• Building and driving a cybersecurity strategy and framework, with initiatives to secure the organization's cyber and technology assets
• Continuously evaluating and managing the cyber and technology risk posture of the organization
• Implementing and managing the cyber governance, risk, and compliance (GRC) process
• Reporting to the most senior levels of the organization (the CEO and board of directors, or equivalent)
• Developing, justifying, and evaluating cybersecurity investments
• Developing and implementing ongoing security awareness training and education for users
• Leading cybersecurity operations and implementing disaster recovery protocols and business continuity plans with business resilience in mind

Requirements and qualifications

• Possess IT certifications such as the Certified Information Systems Security Professional (CISSP) from (ISC)2 or Certified Information Security Manager (CISM) designations from ISACA
• Relevent Cybersecurity licences or qualifications

Technical Skills

• In-depth knowledge of information security
• management frameworks (e.g., ISO/IEC 27001, NIST).
• Experience with security technologies and tools (e.g., firewalls, IDS/IPS, SIEM).
• Understanding of network security, application security, and data protection principles

Soft Skills

• Strong leadership and management abilities.
• Excellent communication and interpersonal skills.
• Ability to work under pressure and handle stressful situations.
• Strategic thinking and problem-solving skills.
  

The Cybersecurity Research Program Office (CRPO) is looking for a candidate to join them as a Programme Director.

Key Responsibilities:

• Strategic Leadership: Offer visionary guidance and strategic direction to the CRPO, aligning its endeavors with the overarching objectives of the centre and actively contributing to the advancement of cybersecurity technology, research, and awareness.
• Program Management: Formulate and oversee a comprehensive program agenda for the CRPO, encompassing technology translation, collaborative initiatives, research projects, and training programs. Ensure that these activities align seamlessly with the strategic objectives of the CRPO and the broader Cybersecurity Strategic Agenda (CSA).
• Industry-Academia Collaboration: Cultivate robust partnerships and collaboration among industry stakeholders, academic institutions, and government agencies to foster cybersecurity research, drive technology development, and facilitate the exchange of knowledge and expertise.
• Risk Management: Identify potential risks and challenges inherent in CRPO initiatives and proactively develop strategies to mitigate them. This includes ensuring the smooth and effective operation of the consortium, safeguarding against potential disruptions.
• Mentorship and Professional Development: Provide mentorship and guidance to team members, researchers, and participants engaged in CSC activities. Foster a culture of continuous learning and growth, nurturing the professional development of individuals within the consortium.
• Measurement of Impact: Institute key performance indicators (KPIs) and metrics to evaluate the impact and success of CRPO initiatives. Regularly assess progress toward established goals, enabling data-driven insights that contribute to the continuous improvement and refinement of consortium activities.

Job Requirements:

• PhD in a relevant field, such as Cybersecurity, Computer Science, Information Technology, Artificial Intelligence (AI), or a related discipline, is compulsory.
• More than 10 years of relevant professional experience in cybersecurity, AI, research, program management, or related fields.
• Strong technical knowledge and expertise in the fields of cybersecurity and AI.
• In-depth understanding of cybersecurity principles, best practices, and emerging trends.
• Proficiency in AI technologies, machine learning, data analytics, and related tools.
• Proven track record of successful leadership and management experience, preferably in a research, industry, or academic setting.
• Strong financial analysis including experience in assessing and modelling valuations for early-stage innovative cybersecurity companies.
• Resourcefulness and communication skills to work with stakeholders in ensuring smooth running of programs and operations.
• Strong interpersonal and communications skills, with the ability to interact with all levels of internal and external stakeholders.
• Ability to build and maintain relationships with external partners in both the private and public sectors.
• Demonstrated ability to develop and execute strategic plans, manage resources, and lead multidisciplinary teams.
• Experience in fostering collaboration and partnerships between industry, academia, and government agencies.
• Strong network of contacts within the cybersecurity and AI communities, including professionals, researchers, and policymakers.
• Experience in translating research findings and technical concepts into practical applications and solutions.
• Knowledge of technology transfer processes, start-up support, and entrepreneurship within the cybersecurity and AI domains.
• Excellent communication, presentation, and interpersonal skills to effectively engage with diverse stakeholders, including executives, researchers, policymakers, and industry leaders.
• Ability to advocate for cybersecurity policies, regulations, and initiatives that benefit the consortium's objectives.
• Proven ability to design, implement, and manage comprehensive programs, initiatives, and collaborative forums within the cybersecurity and AI fields.

We regret to inform that only shortlisted candidates will be notified.