Total 81 computer security job vacancies in Bedok, South East

Job Description:

• Assistant to Project Lead to manage and coordinate with CSIS vendors or Citi business stakeholders inclusive of attending/ initiating meetings and all to ensure we meet the scheduled timeline, stakeholders’ expectations, facilitate on the testing programs for the newly installed security systems
• Conduct site inspections and assesses the condition of the facility as well as propose the necessary requirements per Citi Security Standards
• Coordinate and facilitate our Citi Business stakeholders and provide guidance on the access card submissions and approvals etc.
• Conduct inventory checks for all completed projects, reviewing of floorplan system plotting diagram and updates. Supporting role function on finance administration mainly on project expense tracking
• Leading the execution works onsite, supervising the vendors and may also be the overall lead for small independent project works

Requirement:

• Minimum of at least 1 year working experience
• Minimum High School/ Diploma in any faculty
• Security certifications will be desirable
• Good communication, coordination skills both spoken and written. Able to command and manage vendors/ suppliers
• Must be able to work under a fast-paced environment, aggressive culture, and timeline
• Basic knowledge on security systems i.e. access control, CCTV, IDS
• Fundamentals of physical security and security system installation

We are hiring for Business Information Security Officer who will be responsible for driving information security efforts within the business unit or functional area.

Mandatory Skill Set:

• Serve as a point of contact for BISOs. providing guidance and support to various BUs;
• Ability to prioritize and provide necessary support on the security tasks for designated BUs;
• Offer regular updates or flag outstanding important issues to relevant stakeholders;
• Standardize information security process across BUS/countries. driving the adoption of best practices;
• Bridge gap between local technology or business team with GIS. able to articulate security risks to local teams and contribute back any feedback to GIS;
• Drive the learning culture within the information security team to accelerate skills and knowledge of the information security community.

Desired Skill Set:

• Possess at least one of the following certification CISSP. CCSP. CRISC. or CISM;
• Understand Cloud Infrastructure.

Responsibilities:

• Facilitate the investigation and management of security incidents for designated BUs and communicate to relevant stakeholders;
• Ensure clear documentation of the business justifications, risks, the existing mitigation controls (if any) and relevant approvals are in place;
• Support security assessment for technology solutions for designated BUs;
• Offer expertise to BUs with the help of Group Information Security (GIS) Subject Matter Expert (SME);
• Collaborate with enterprise risk management to conduct risk assessments and support the development of risk treatment plans for the BUs;
• Facilitate the local implementation of group information security initiative for the designated BUs;
• Assist with the security awareness programs for designated BUs to enforce security culture and understand the information security solutions in BUs;
• Help to develop the Business Information Security Officer (BISO) framework / handbook outlining BISOs roles and responsibilities. This standardizes practice across the organization;
• Establish and maintain BISO community to share insights or discussion of findings from audits, incidents, or latest security trend with each BUs to facilitate cross-learning and capture lessons teamed;
• Gather input or recommendations with regards to Group Information Security (GIS) functions and programs from BISOs across various countries/markets. Compile the feedback and contribute to GIS for continuous improvement of the Security Operation Model;
• Collaborate with security teams to develop and implement tailored security awareness programs for business units and devise a structured professional development pathway for BISOs.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE's website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

Overall Responsibilities:

As the senior security and client engagement officer, you will play a crucial role in execution of security plans and exercises within the premises. you will spearhead the implementation and enforcement of rigorous security protocols, ensuring the safety and well-being of our premises and occupants. Your pivotal role involves meticulous management of access control systems, diligent surveillance, and proactive incident handling.

Duties and Responsibilities:

• Ensure strict adherence to security plans, protocols, and SOPs.
• Conduct rigorous access control measures.
• Manage pass exchanges and oversee access card management.
• Implement comprehensive security surveillance within the work compound.
• Conduct vigilant patrols and monitor CCTV systems.
• Verify the authorization of all personnel present on the premises.
• Effectively manage incidents and promptly report them in the designated Group Chat.
• Assist in maintaining the overall cleanliness of the compound and coordinate janitorial support as needed.
• Report any malfunction or breakdown of facilities or machinery items (e.g., turnstiles, ceiling lights) to the SCC.
• Collaborate in Fire Safety Management during both drills and actual fire incidents.
• Undertake additional duties as assigned.
• Extend a professional welcome to and greet arriving tenants/guests.
• Assist with both phone and walk-in inquiries in a courteous manner.
• Deliver high-quality service to tenants/guests by responding promptly, efficiently, and courteously to their requests.
• Handle complaints and suggestions from tenants/guests with professionalism and courtesy.
• Acquire and maintain a comprehensive working knowledge to provide tenants/guests with information regarding directions, available services, and facilities when required.

Requirements:

• Able to commit to Shift Work
• Proven experience in security supervision.
• Knowledge of security protocols and emergency response procedures.
• Strong communication and interpersonal skills.
• Ability to handle incidents professionally and efficiently.
• Attention to detail in access control and surveillance.
• Customer service orientation.
• Problem-solving skills and ability to handle complaints.
• Flexibility to perform various duties as assigned.

Employee Benefits:

• Uniforms provided
• Leave entitlement as per MOM regulations
• Performance-based bonuses
• Health and medical insurance coverage

Summary

The Regional Director Security Operations (RDSO) is responsible for leading a multi-disciplinary team that executes a global security operations program for a multi-national IT organization. Services provided include security operations, safety, budget and financial execution, logistics, and employee recruitment, onboarding and training. The security operations program is comprised of regional security man-guarding functions, a security operations center, development and management of security operations metrics, branch liaison, personnel management and driving key security operations projects and initiatives for datacenters on a multi $100M global Client account. Direct reports may include field based Regional Security Managers, as well as shared services/program management resources to include Regional Operations Coordinator, Security Design PMOs and other Security Operations personnel. The RDSO is accountable for datacenter security operations service delivery, enhancing safety culture, driving innovation and process change across the program and staff engagement and development. The RDSO is expected to advance operational security and business relevancy while collaborating with the client, fellow RDSOs, Securitas business divisions, associate contractors, global business partners, and other supporting teams. This position reports directly to the Global Director of Operations.

Essential Functions

1. Strategically aligns a multi-disciplinary team into a singular, cohesive group; prioritized to meet the client’s data center security operations requirements.
2. Anticipates, develops, drives, and operationalizes the business’ most strategic priorities to meet service requirements, exceed quality targets and optimize field security operations effectiveness.
3. Acts as a trusted advisor to the Global Director of Operations and Client directors while also facilitating a healthy rhythm of team and business operations forums.
4. Proactively manages the region’s multi-disciplinary team to effectively execute and communicate (inward and outward) the security operations scope, strategic goals and deliverables.
5. Create strong internal and external networks, ensuring alignment between the regional operations teams, the shared services platform, and the Client.
6. Nurture Client relationships and internal relationships across all pillars.
7. Ensures the multi-disciplinary regional team is functioning effectively and efficiently, with security operation non- negotiables, process enhancement and scalability at the forefront of decision-making.
8. Holds team members accountable for their commitments, removes roadblocks to their work, and leverages organizational resources to improve delivery.
9. Provides regular reports that communicate team performance, project delivery, progress to milestones, and impacts to service delivery, meeting required client SLAs and KPIs.
10. Acts as the Datacenter subject matter expert on Operations Standard Operating Procedures (SOP); evaluates effectiveness and adherence to the Operations SOP and provides recommendations for improvement.
11. Actively seeks and creates opportunities for collaboration across customers, partners, and internal groups to drive long- term solutions.
12. Leads program-wide projects and initiatives that encourage process improvement and innovation and the use of tools that support the program across teams.
13. Drives an effective and holistic approach to project completion and consistent communication and messaging.
14. Facilitates teamutilization of data analytics; leads development and execution of strategic, analytical frameworks and high- quality complex models and forecasts to guide operational decisions.
15. Create and deliver executive level presentations and dashboards on business strategy, insights, and execution to client senior management.

Performs additional functions, duties and specific tasks of a similar nature and scope as necessary to achieve assigned business objectives.

• The functions listed describe the business purpose of this job. Specific duties or tasks may vary and be documented separately. The employee might not be required to perform all functions listed. Additional duties may be assigned, and functions may be modified, according to business necessity.
• All assigned duties or tasks are deemed to be part of the essential functions, unless such duties or tasks are unrelated to the functions listed, in which case they are deemed to be other (non-essential) functions.
• Employees are held accountable for successful job performance. Job performance standards may be documented separately, and may include functions, objectives, duties or tasks not specifically listed herein.
• In performing functions, duties or tasks, employees are required to know and follow safe work practices, and to be aware of company policies and procedures related to job safety, including safety rules and regulations. Employees are required to notify superiors upon becoming aware of unsafe working conditions.
• All functions, duties or tasks are to be carried out in an honest, ethical and professional manner, and to be performed in conformance with applicable company policies and procedures. In the event of uncertainty or lack of knowledge of company policies and procedures, employees are required to request clarification or explanations from superiors or authorized company representatives.

Minimum Hiring Standards

Additional qualifications may be specified and receive preference, depending upon the nature of the position.

• Must have a reliable means of communication, such as cell phone.
• Must have a reliable means of transportation (public or private).
• Must hold or be able to obtain a valid driver’s license or equivalent.
• Must have the legal right to work in the country where the position is located.
• Must have the ability to speak, read, and write English proficiently.
• Must have a high school diploma, secondary education equivalent, or GED.
• Must be willing to participate in the Company’s pre-employment screening process, including drug screen and background investigation.

Education/Experience

• Bachelor’s degree in business, management or related field and 10-15 years of progressive management roles in physical security, contract security, or account management, or an equivalent combination of education and experience sufficient to perform the essential functions of the job, as determined by the company.
• 3-5 years of experience in a director level position.
• Datacenter experience a plus.

Special Requirements

• Able to travel (international or domestic, as required) approximately 25% of the time or more, occasionally with limited notice.
• Able to work evening or weekend hours when required, such as during an emergency event or crisis.

Competencies

• Ability to influence without authority and identify shared goals to achieve business objectives.
• Ability to provide positive direction and motivate performance.
• Ability to build relationships quickly and work collaboratively across multiple teams.
• Excellent oral and written communication skills required for preparing clear, concise, and grammatically correct materials and communicating information effectively to others.
• Experience communicating with the C-Level employee down to the entry-level employee
• Able to conduct presentations and facilitate group meetings, both in person and online.
• Ability to track and maintain scheduled assignments.
• Ability to maintain professional composure when dealing with unusual and stressful circumstances.
• Knowledge of business operations management and human resources administration.
• Demonstrates leadership skills, including planning, organizing delegating, problem solving, training, coaching, and praising or disciplining staff in a positive manner.
• Strong customer service and service delivery orientation.
• Ability to adapt to change in the external environment and organization.
• Ability to multi-task and complete assignments concurrently in a fast-paced environment.
• Experience communicating and presenting to an executive level audience.
• Knowledge of security operations and procedures applicable to a 24-hour facility.
• Knowledge of supervisory practices and procedures.

Working Conditions and Physical/Mental Demands

With or without reasonable accommodation, it requires the physical and mental capacity to effectively perform all essential functions. In addition to other demands, the demands of the job include:

• Required ability to manage multiple tasks concurrently.
• Computer usage, which may include prolonged periods of data analysis.
• Handling and being exposed to sensitive and confidential information.
• Regular talking and hearing.
• May be required to use vehicle in the performance of duties.
• Frequent lifting and/or moving up to 10 pounds, and occasionally up to 25 pounds.
• Close vision, distance vision, and ability to adjust focus.

Key Responsibilities:
∙Coordinate with external vendors and collaborate with customers and SaaS providers to conduct IT Security Risk Assessments. Identify security threats, assess risks, and propose mitigation strategies for approval by the customer.
∙Coordinate the handling of security incidents, ensuring a timely response and resolution. Maintain a robust incident response process and documentation.
∙Manage and coordinate regular security audits, vulnerability scans, and penetration tests. Consolidate findings, ensure proper remediation, and provide feedback to stakeholders on risk mitigation efforts.
∙Maintain and update all security-related documentation, including policies, procedures, standards, and best practices. Ensure compliance with security frameworks such as ISO/IEC 27001, ISO/IEC 27018, SOC 2 Type 2, and CSA-STAR (Level 2).
∙Continuously monitor the security posture of the SaaS solution and related ICT systems. Provide regular reports on security risks and mitigation actions to stakeholders and customers.
∙Oversee the remediation of security vulnerabilities identified during security assessments, ensuring that appropriate actions are taken to address risks in a timely manner.
∙Provide clear, concise security reports and recommendations to customers, ensuring they understand the security posture of the SaaS solution and any risks or issues that need attention.
∙Take on ad-hoc security tasks as required to address emerging risks or assist with specific security projects or initiatives.

Qualifications:
∙Minimum of 3 years of experience in IT security, particularly in enterprise systems, cloud infrastructure, or SaaS environments.
∙A current professional information security certification (such as CISSP, CISM, CRISC, CGEIT, GSE) or equivalent is highly desirable.
∙In-depth knowledge of IT security management and governance, risk assessment, incident response, vulnerability assessments, penetration testing, and security audits.
∙Familiarity with international security standards and frameworks such as ISO/IEC 27001, ISO/IEC 27018, CSA-STAR, SOC 2 Type 2, NIST, and CIS.
∙Strong interpersonal, written, and verbal communication skills, with the ability to explain complex security concepts to non-technical stakeholders.
∙The position requires the candidate to be based locally.
∙Strong problem-solving skills and the ability to make decisions under pressure.
∙Proven ability to work effectively with cross-functional teams and external vendors.
∙Attention to detail and a commitment to maintaining the highest standards of security.

The AVP - Perimeter Security Build Engineer seats within the Perimeter Security Services Team, focusing on maintaining next generation, large scale perimeter security solutions for the enterprise globally. The purpose is to ensure the overall health and integrity of Citi’s network and perimeter defence.

In this role you will be responsible to work on various large scale security initiatives, establish and utilize processes for perimeter security lifecycle management, influence stakeholders and drive the general security posture along with various peer groups and organizations.

As an Perimeter Security Build Engineer you will

• Configure, deploy and integrate firewall and remote access infrastructure for Citi environment
• Work with aligned technology teams to ensure deployment and decommissioning of devices happen according to approved Citi standard build baselines
• Perform troubleshooting related to project rollouts
• Create and maintain documentation and reports for the configuration procedures & support checklists
• Perform process review, reengineering and standardization to ensure risk-free efficiency
• Work with perimeter security engineering and vendors on understanding and utilizing standard builds
• Participate in new product/solution testing and rollout

Ideal background

• 3+ years of experience with multiple security disciplines and understanding of perimeter security solutions and concepts
• Experience with Check Point, Juniper SSL and Palo Alto firewall solutions
• Unix / linux experience
• Advanced written and verbal English communications skills
• Stakeholder management skills, with ability to communicate with stakeholders of varying seniority across business and technical functions.
• University degree or certifications in a relevant cyber security / networking area

Benefits

• exposure to a broad range of investment technology businesses and products
• access to our world-class testing lab with physical hands on using hundreds of devices in the IT security ecosystem
• competitive compensation package
• access to Citi’s huge training database and subscription to external online trainings
• a socially active team and communities with diverse networking opportunities

Education:

• Bachelor’s degree/University degree or equivalent experience

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

Job Description

You will be a member of the Group Information Security Team responsible for initiating, implementing, and maintaining security products and solutions to support enterprise security.

Key Responsibilities:

•Subject matter expert (SME) for the security systems owned by the Information Security Team.

•Ensure security systems are utilized to their maximum capabilities.

•Plan, identify, assess, design, operationalize, and maintain multiple security-related software and/or hardware.

•Recommend and drive cyber security solutions and initiatives to improve the cyber security of the organization.

•Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.

•Provide security consultancy, technical guidance, expertise, solutions, and education.

•Advise infrastructure teams on security design that is relevant and fit for purpose.

•Identify and assess cyber risks in the IT infrastructure environment.

•Review firewall requests.

•Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines, and deliverables.

•This is an individual contributor role. Deliver tasks with minimal supervision.

•Provide AUDIT support such as PCI-DSS, and Cyber Maturity Assessment.

•Strong communication skills.

•Coordinate and Deploy SIA Group/GIT cybersecurity initiatives in Scoot.

Requirements:

•Degree in IT or related field, with at least 5 years in information security, especially in the cybersecurity space.

•Professional security certifications (SANS, CISSP, CEH, OSCP, CISA, etc) preferred.

•Experience in security products POC and RFQ.

•Prior experience in implementing and maintaining any of the tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM, etc., and/or network security. Able to review firewall requests.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

•Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience is preferred.

•Knowledge of cyber security threats, vulnerabilities, hacking, exploit methods, etc.

•Strong oral, written, presentation, and inter-personal skills.

•Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions (both applications and infrastructure) are developed and designed with security inbuilt.

Key Responsibilities

•Provide security consultancy, technical guidance, expertise, solutioning and education for en-terprise.

•Advise application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

•Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

•Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

•Perform threat modelling on security critical applications. Keep up to date on emerging secu-rity threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews and audits to ensure security assurance is achieved.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables. This is an individual contributor role. Strong communication skills.

Requirements

•Degree in IT or related fields, with at least 5 years in information security, especially in the application security space.

•Professional security certifications (CISSP, CSSLP, CEH, CCSP etc) preferred.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.

•Strong in-depth working knowledge in secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), Software Compo-sition Analysis (SCA).

•Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud technolo-gies. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

•Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc. Any prior vulnerability management experience preferred.

•Strong oral, written, presentation and inter-personal skills.

•Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;

Strong knowledge of ISO 27001:2022 standards and requirements;

Experience in developing and maintaining comprehensive project plans, including timelines and milestones;

Experience in managing ISO 27001-related risks and conducting internal/external audits;

Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;

PMP, CISSP, CISM, or similar certifications are a plus;

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE's website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

Job Description
You will be a member of the Group Information Security Team responsible for initiating, implementing and maintaining security products and solutions to support enterprise security.

Key Responsibilities

• Subject matter expert (SME) for the security systems owned by the Information Security Team.
• Ensure security systems are utilised to their maximum capabilities.
• Plan, identify, assess, design, operationalise and maintain multiple security related software and/or hardware.
• Recommend and drive cyber security solution and initiatives to improve cyber security of the organisation.
• Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
• Provide security consultancy, technical guidance, expertise, solutioning and education.
• Advise infrastructure teams on security design that is relevant and fit for purpose.
• Identify and assess cyber risks in the IT infrastructure environment.
• Review firewall requests.
• Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.
• Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables.
• This is an individual contributor role. Deliver tasks with minimal supervision.
• Strong communication skills.

Requirements

• Degree in IT or related field, with at least 5 years in information security, especially in the application security space.
• Professional security certifications (CISSP, CSSLP, CEH etc) preferred.
• Experience in security products POC and RFQ.
• Prior experience in implementing and maintaining any of tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM etc. and/or network security. Able to review firewall requests.
• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.
• Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience preferred.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc.
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

The computer vision / image processing engineer is responsible for developing and implementing algorithms and software tools to process and analyse images for various object detection applications from multiple real-time mission-critical image sources, such as electro-optical, thermal imaging sensors and other sensors.

The job scope includes:

• Research various imaging systems and validate them.
• Using optical metrology techniques, calculate and calibrate cameras for outdoor real-time mission-critical applications
• Designing and testing image processing systems and components, such as filters, edge detectors, feature extractors, classifiers, etc
• Optimising the performance and accuracy of image processing algorithms using techniques such as parallel computing, machine learning, deep learning, etc
• Collaborating with other data scientists, engineers, researchers, and clients to understand the requirements and specifications of image-processing projects
• Document and present the results and findings of image processing experiments and analyses

Requirements:

• A bachelor's degree or higher in computer science, physics, mathematics or a related field
• Experience in image processing and/or computer vision, preferably outdoor systems
• Deep understanding of the imaging systems' sensor characteristics, optical metrology techniques and image signal processing
• Hands-on experience in the image processing pipeline. (Zoom and focus, auto white balance, camera colour conversion, colour space and colour management, etc.)
• Expertise in identifying diverse colour issues within intricate ISP systems and in precision tuning of parameters to achieve optimal image quality
• Knowledge of mathematical modelling, statistical analysis and image processing techniques. (Kalman filtering etc.)
• Proficiency in Python, C++, MATLAB or other programming languages
• Familiarity with popular frameworks and libraries for image processing and machine learning, such as OpenCV, TensorFlow, PyTorch, scikit-image or PIL
• Ability to work independently and as part of a team
• Excellent communication and problem-solving skills

Job Descriptions

• Work closely with Technical Engineer to translate customers' requirements into detailed drawings for tender submission, projects, etc.
• Ensure drawings meet relevant code and compliance requirements
• Rectify and update latest drawings accordance to changes
• Maintain good document control - ensuring drafting list record is always up to date
• On site measurement if required

​ Job Requirements :-

• Min. 3 years of experiences in Aluminium / Construction / Architectural or relevant industry
• ITE / Diploma in Civil Engineering / Structural / any other relevance qualification
• Proficient in AutoCAD
• Strong sense of accountability and ability to quickly prioritize tasks based on urgency in a fast paced environment
• Excellence analytical, communication, organizing and interpersonal skills
• Independent but also a team player

What you will be doing:

• Ensure compliance of all Company's IT policies, standard and
• procedures with relevant agency
• Handle any company's IT policy procedures and standards related questions from staff covered by policies
• Review all company' IT policy procedures and standards on a regular basis
• Respond promptly to company IT service issues and requests
• Arrange IT security/cyber trainings and awareness to company staff
• Responsible to ensure compliance of PDPA
• Provide data protection and handle company staff training an awareness to staff
• Work with other staff when required to ensure any publicity initiative abide by data protection
• Handle data protection related questions from staff and anyone else covered by date
• protection policy
• Provide administrative support to the company IT department

You are:

• Minimally NITEC in IT or any other relevant discipline
• Minimum 1 year of relevant experience in IT
• Meticulous, to ensure all policy procedures and standards are align
• Able to communicate well with difference stakeholders

Why join Cushman & Wakefield?

As one of the leading global real estate services firms transforming the way people work, shop and live working at Cushman & Wakefield means you will benefit from;

• Career development and a promote from within culture
• An organisation committed to Diversity and Inclusion

We have a vision of the future, where people simply belong.

That's why we support and celebrate inclusive causes, not just on days of recognition throughout the year, but every day. We embrace diversity across race, colour, religion, gender, national origin, sexual orientation, gender identity or persons with disabilities or protected veteran status. We ensure DEI is part of our DNA as a global community - it means we go way beyond than just talking about it - we live it. If you want to live it too, join us

Job Description

You will be a member of the Group Information Security Team responsible for responding to threats and incidents to the corporate networks, systems (on-prem and cloud), and digital assets.

Key Responsibilities:

•Perform security monitoring and incident response activities across the scoot networks, leveraging a variety of tools and techniques.

•Manage Security Operations center.

•Detect incidents through proactive “hunting” across security-relevant data sets.

•Ability to correlate multiple events from different devices to identify abnormal behaviour

•Document incident response analysis activities thoroughly

•Develop new, repeatable methods for finding malicious activities

•Provide recommendations to enhance detection and protection capabilities.

•Effectively present technical topics to both technical and non-technical audiences

•Develop and follow detailed operational processes and procedures to appropriately analyze, escalate, and assist in the remediation of information security incidents

•Prioritize multiple high-priority tasks and formulate responses/recommendations in a fast-paced environment

•Prepare documentation for security technical standards, standard operational procedures, and hardening standards.

•Analyse endpoint, network, and application logs

•Assist other IT teams in security-related issues

•Engage with vendors and parent company SIA team members for security reviews.

Requirements:

•Degree in Computer Engineering, Computer Science, Information Systems, or equivalent qualification.

•At least 5-6 years of experience in Cybersecurity Incident and Security Operations.

•Demonstrate experience in Information Security with a focus on Cyber Security Operations, Incident Response and Detection.

•Experience working in the Security Operations Centre and/or Computer Incident Response Team.

•Excellent problem-solving skills combined with hands-on experience doing root cause analysis and post-incident reviews.

•Solid knowledge of computer networks and common protocols

•Knowledge of prominent cyber threat actors and APT groups.

•Experience with Threat Intelligence Platforms.

•Experience with SIEM (especially Splunk).

•Professional security related qualifications (i.e. GCIA, CISSP etc) will be an advantage

•Preferred certifications: CISSP, CISM, CISA, ISMS, TOGAF, SABS

•Good interpersonal skills

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s Degree in Computer Science/Information Technology or equivalent.
• At least 5 years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:

- CompTIA Security+

- Certified Information Systems Security Professional (CISSP)

- Certified Information Systems Auditor (CISA)

- Certified Information Security Manager (CISM)

Position Overview

The IT Security Operations Analyst role’s is to safeguard the organization’s IT systems and data. This role requires the candidate's active participation in the implementation of security policies and procedures, the monitoring and analysis of security events and the maintenance of security tools. Other responsibilities are to identify, investigate and resolve any security threats, vulnerabilities and incidents. The candidate must keep up to date with the latest security trends, have excellent communication and problem-solving skills and have a deep understanding of security principles and technologies. The individual will have a functional role in mentoring other team members and share the off-hour support responsibilities.

Responsibilities

1. Monitor, maintain, and analyze network and computers for unusual activity or suspicious behavior by reviewing information security logs.
2. Manage and resolve security Level 2 support tickets per defined SLAs
3. Investigate and analyze security incidents to determine root cause and impact.
4. Report compliance failures to management for immediate remediation.
5. Responsible for the effective management of the organization’s Crowdstrike Falcon Admin Console.

• Deploy Crowdstrike Falcon EDR detection agent on all corporate devices.
• Ensure coverage of malware detection for all managed EDR Agent capable devices.
• Migrate existing server agents from alert-only mode to blocking mode.
• Provide EDR escalation support for agents already installed

1. Assist and collaborate with the Information Security Group and coordinate with IT Infrastructure on the following:

• IT Threats and Vulnerabilities Assessments, Protection, and Remediation
• IT security patch management follow-up and reporting
• Firewall rule documentation, review, and approval
• Promote within IT Infrastructure the proper Security controls aligned with the IT Security Program
• Validate and maintain operational security documentation.

1. Continuously assess the current Security Posture and provide recommendations for remediation and prevention of security incidents.
2. Collaborate with cross-functional teams to implement security solutions and technologies.
3. Stay up to date with industry trends and emerging security threats to proactively address potential risks.
4. Assist in the deployment of new security systems.
5. Participate in security audits and assessments to ensure compliance with regulations and standards.
6. Understand the dark and deep web ecosystem.
7. Manage and support the following applications:

• Palo Alto/Firewall
• Network security (Micro-segmentation)

1. Perform other duties as required

Qualifications and Experience

• Bachelor’s degree in Cybersecurity Engineering or Computer Sciences
• Strong professional experience in information security with a focus on security operations and technical support
• Strong Experience with Palo Alto and Crowdstrike platform
• Experience with VPN, SSL and other encryption technologies
• Good knowledge of server, workstation, and Active Directory technologies that impact security controls
• Deep understanding of TCP/IP, DNS and common network services
• Experience with security frameworks and compliance requirements such as GDPR, ISO 27001, NIST 800 and PCI DSS.

Job Description

The successful candidate will join the Information Technology Division, System Technology department and will be responsible for managing Content Delivery Network (CDN) which includes Cyber Security, as well as administering Monitoring and Log Management Tools.

Key Responsibilities include:

• Work closely with CDN providers and application teams to ensure internet websites/mobile apps are healthy in terms of availability, response time and security posture.

• Conduct regular security reviews and finetune WAF and BOT rules to mitigate any cyber threats.

• Administer various monitoring and logging tools, which includes application onboarding and advanced configuration.

• Perform system administration activities such as troubleshooting, root cause analysis and implement corrective/preventive actions during and after an incident.

• Support audit and infrastructure/network security scans, disaster recovery and security related drills and operate within assigned fiscal budget.

• Build automation wherever possible to improve development team’s agility and reduce human errors.

• Explore, learn and deploy new technologies and provide training to the IT community within the company.

• This position requires periodic system administration outside normal business hours.

Requirements:

• Possess a degree in Information Technology or related fields.

• Minimum of 3 years of IT Infrastructure experience with at least 1 year of hands-on experience in managing the infrastructure of an eCommerce website.

• Experience with Akamai or equivalent CDN providers preferred.

• Demonstrate strong knowledge in infrastructure areas such as Content Delivery Network (CDN), Cyber Security (WAF and Bot Mitigation), internet protocols, DNS, virtual server technologies, networking (LAN, WAN, SDN), Integration and Messaging Platform, scripting and monitoring tools.

• Administrator experience with Application Performance Monitoring (APM) tools such as Dynatrace and Log Management System (LMS) such as Splunk.

• Conversant with infrastructure definition tools such as Cloud Formation and Terraform, and with YAML/JSON deployment templates.

• Strong analytical, project management, communications and interpersonal skills.

We thank all candidates for your interest in Singapore Airlines, and regret that only shortlisted candidates will be notified.

This position is a contract position from Jan 2025 to July 2025 and is responsible for supporting the sales team in the preparation of sales quotations and tender preparations, and other sales support activities.

Responsibilities include supporting the project administrator when required, with project documentation and other project activities

Job Responsibilities

• Supporting Sales Team on preparing Sales quotations, Sales/Maintenace tender, catalogues and other document required for submissions, etc.
• The Sales Administrator is responsible for the following specific responsibilities:
  - To support all the sales functions of the department.
  - Regularly review tender portals, industry publications, and network contacts for upcoming opportunities relevant to our business.
  - Registration of site/tender brief and provide timely feedback to Sales Personnel of any change of schedule.
  - Evaluate, document, record, highlight, and track/monitor critical/important clauses and deadlines for tender and quotation submission including entering key details such as submission dates, requirements and scope of work for each opportunity.
  - Assist the sales team promptly and efficiently with the timely submission of comprehensive tender bids and quotations.
  - Keeping standard tender and quotation submission documents for reference and easy retrieval including maintaining the formal for tender and quotation submission documents for quick access and reference.
  - Organize the storage of all sales inquiries and quotations in a tidy and easily retrievable system. This include managing the filling of all related sales inquiries and quotations in SharePoint to be in a traceable and organised manner.
  - Generate monthly sales reports.

Job Requirements

• Diploma in Administration or its equivalent
• With 2 to 3 years’ relevant experience in related industry
• Excellent organization skills and ability to multi-task
• Meticulous and pay great attention to detail
• Good communication and interpersonal skills
• A team player and work independently with minimum supervision
• Ability to interact and work with people of all levels
• Ability to work under pressure and meet tight deadlines.
• Proficient in MS Project and MS Office software

If you are keen to be part of our team and possess the above pre-requisites, kindly submit your detailed resume stating your current & expected salary via the button "APPLY NOW" to:

HR Department

Securitas Electronic Security Singapore Pte Ltd

To know more about us, please visit us at www.securitas-singapore.com.

(*we regret that only shortlisted candidates will be notified.)

JOB DESCRIPTION

• Conduct investigations and gather evidence related to theft/fraud or lost items, noise complaints, assault complaints, food poisoning complaints, and other guest complaints and incidents.
• Conduct interviews with relevant parties in order to obtain statements and information related to incidents.
• Assist with and notify manager/supervisor, local police, or other appropriate individuals in the event of accidents, attacks, or other incidents.
• Complete incident reports to document all Security/Loss Prevention related incidents such as theft, accidents, physical hazards, and fire alarms.
• Handle business interruptions and complaints, such as suspicious individuals, civil disturbances or demonstrations, noise complaints, intoxicated individuals, etc.
• Escort any unwelcome persons from the property without interrupting the orderly flow of property operation.
• Defuse guest or employee disturbances/altercations, including summoning appropriate authorities if necessary, and documenting incident.
• Follow all company and safety and security policies and procedures; report accidents, injuries, and unsafe work conditions to manage.
• Maintain confidentiality of proprietary information; protect company assets.
• Welcome and acknowledge all guests according to company standards; anticipate and address guests’ service needs.
• Speak with others using clear and professional language; prepare and review written documents accurately and completely.
• Develop and maintain positive working relationships with others; support team to reach common goals; listen and respond appropriately to the concerns of other employees.
• Ensure adherence to quality expectations and standards.
• In addition, some states may have additional licensing/registration requirements to be considered for this position.
• Move, lift, carry, push, pull, and place objects weighing less than or equal to 10 pounds without assistance. Perform other reasonable job duties as requested by Supervisors, manager.

JOB REQUIREMENTS

• Minimum education of GCE "O" or "N" Level certificate
• At least 1 year working experience in a similar position in security & safety operations
• Possesses a valid security licence
• Applicants who have taken RTT will be prioritised
• First Aid and CPR+AED certified
• WSQ Respond to Fire and Hazmat Emergency certified
• 12 hour shift / Work 4 days

BENEFITS

• Company Transport Pick-up/Drop-off Provided
• Uniform Provided, Duty Meals, F&B Discount, Dental, and Medical
• Employee Room Rate, Learning & Development Opportunities, Staff Recognition Award

The purpose of the Palo Alto Strategic Leader and Cloud Security Sales at IBM is to drive net new pipeline development and sales progression of IBM Consulting Cybersecurity Services (CSS) client opportunities that incorporate Palo Alto Networks (PANW)’s technology in the broader solution offered by IBM Consulting (IBMC). These opportunities may be part of an even more comprehensive opportunity that an IBMC Lead Client Partner (LCP) is pursuing with or delivering to the client.

The focus of this role will be to develop new and high value IBMC opportunities for the PANW specific CSS portfolio, which currently includes:

· Threat Management, Cyber Trust, X-Force, and Strategy

· Consulting and Systems Integration (C&SI) services and Managed Security Services (MSS)

The CSS PANW portfolio will include all PANW cybersecurity products, including and not limited to:

· Prisma Cloud

· Prisma Access

· Cortex (XSIAM, XDR, Xpanse, XSOAR)

· Strata NexGen Firewalls

The Palo Alto Strategic Leader and Cloud Security Sales role is not a technical role, but a sales role and the individuals in this role will be expected to be/become a PANW subject matter expert (SME), as it pertains how to work with and do business with PANW. To this end, this role requires the ability to articulate, educate, support and be deemed a valued team member for LCPs and CSS consultants in their assigned Geo, Market and/or Industry.

The Palo Alto Strategic Leader and Cloud Security Sales role is client facing. The Palo Alto Strategic Leader and Cloud Security Sales is expected to work with the LCP and CSS Associate Partner (AP) to understand “lay of the land” of the client, including, but not limited to current sales motions, client/industry needs/issues and priorities that are planned, budgeted or currently out of scope and may require CSS advisory services. In conjunction with the LCP and CSS AP, the Business Development Leader is also expected to seek and engage the appropriate Palo Alto individual or teams to solidify teaming and to drive the development of a comprehensive and credible joint sales plan. The Business Development Leaders are to actively participate in key client facing discussions, as well as associated internal and PANW teaming discussions with the sole purpose of aiding the joint teams to qualify, progress and close joint opportunities.

Geo, Market, or Industry specific responsibilities include:

1. Sales Activation:

a. Evangelize the value of the PANW strategic partnership and sharing best ways of working together within and across all of IBMC, including within CSS

b. Build collaborative relationships across IBMC (LCPs and CSS) to expedite teaming, opportunity identification, and deal progression

c. Build collaborative relationships across PANW sales to expedite teaming, opportunity identification, deal progression, as well as possible removal of obstacles to close

2. Sales Enablement:

a. Work with across both parties to promote and educate sellers

i. CSS on PANW products and value propositions

ii. PANW sellers on the value of working with IBMC and its GTM strategies, capabilities, and value propositions

b. Manage, market, and promote CSS offerings and PANW as part of a broader IBMC client engagement

i. Articulate CSS offerings and PANW products strengths, potential weaknesses, and roadmap

ii. Assist in RFI and RFP responses

iii. Assist PANW in understanding client c-suite (above the CISO) requirements and how that translates to project scoping and pricing needs from PANW

iv. Maintain relationships with the Palo Alto product teams

c. Participate in joint events like RSA, IBM Think, Black Hat, PANW Ignite and others

d. Gather, develop (with marketing assistance) and promote win stories to drive greater sales velocity

3. Sales Engagement:

a. Target and track joint pursuits from identification through close, including loss reporting

b. Establish and maintain relationships with PANW product sales specialists to allow for internal PANW advocacy of client needs as it pertains to new opportunities and rapid issue resolution

c. Leading joint account workshops which includes:

i. Work with PANW and internal IBMC teams to identify opportunities to team – who, what, where, why and how

ii. Share best practices and identify risks, if applicable

iii. Outline a joint sales plan with actions, owners and timeline, assigned to individuals

iv. Establish ongoing cadence for joint read-outs to maintain alignment and communicate revisions to plan

v. Engage executives, as needed

vi. Monitor progress for leadership reporting, monthly and quarterly

d. Refresh as needed, PANW knowledge and/or certifications to maintain SME knowledge of market impact and/or industry trends that drive the need and value of CSS offerings and PANW products

Sample governance activities include:

1. Preparing collateral for Geo / Market specific cadence sessions, monthly reviews, and quarterly business reviews

2. Providing color commentary, e.g.win stories, best practices, lessons learned, issues to be resolved, etc., to pipeline, forecasts, and other internal and/or joint performance reports

3. Monitoring and reporting against individual metrics, showing current assumptions, progress to date and actions needed or anticipated to ensure achievement

The successful candidate will meet the following requirements:

1. Knowledge of the relevant CSS offerings portfolio in terms of the value to the client, to IBMC and to PANW

2. Ability to present the value of the strategic partnership and the CSS offerings to clients, PANW field sellers, and LCPs

3. Knowledge of the PANW product portfolio in terms of their value propositions to the client, to IBMC and PANW

4.Maintain an understanding of competitive products and technologies and accurately position PANW products in competitive scenarios.

5. Complete required online PANW sales training

Job Objectives:

Tasked with aiding the Security Manager in safeguarding properties and ensuring the well-being of guests, employees, and the hotel. Supervise all activities of security staff to ensure compliance and proper application of department regulations and hotel policies. Documents all action in the department, including: emergencies, loss, theft, or accident.

Primary Responsibilities

• Manages the Security Department, alongside with Security Manager.
• Oversees the security department and their day to day operations.
• Trains all security personnel in their areas of responsibilities.
• Reviews policies, procedures, and instructions on a regular basis.
• Evaluates possible hazards or threats to security.
• Promotes a safety attitude amongst all employees.
• Ensures safety of persons in the hotel and property assets.
• Reports irregularity in employee or guest behavior.
• Handles loss, damage and accidents.
• Handles, documents, and follows up with necessary persons any accidents occurring in the hotel premises.
• Investigates theft as reported by guest or employee.
• Documents all action in the department, including: emergencies, loss, theft, or accident.
• Participates in weekly department heads meeting in absence of Security Manager - Rooms Division Meeting and any others if requested.
• Secondary liaison for interacting with government officials, ministries, and law enforcement agencies.
• Reviews emergency procedures regularly.
• Delivers security training and promotes awareness within the hotel.
• Performs other duties as assigned by Security Manager.

Job Requirements

• Minimum education of High Vocational diploma in any discipline. Bachelor degree holder have an advantage.
• At least 3 years’ experience in a similar position in security & safety operations.
• Basic knowledge of local laws, investigative methods and fire safety.
• Criminal-free record
• Have good English communication skills both in written and spoken
• Possess professional disposition with good communication and interpersonal skills

Qualifications & Requirements:

• Recognised degree in Computer Science, IT or engineering with at least 5 years’ relevant experience in software development;
• Gone through at least one full software development lifecycle (SDLC) with experience in producing SDLC documentations;
• Extensive experience in analysing requirements, designing, development and delivering complex enterprise applications in Java/JEE, web programming on UNIX / LINUX and Windows environment;
• Extensive experience in web-based applications development and database application interfacing (JDBC, SQL);
• Experience in Agile development methodology and continuous integration;
• Experience in Spring Framework and Spring Boot;
• Experience in database design, development and performance tuning;
• Strong understanding of access control principles and best practices, as well as experience implementing access control mechanisms in software applications with IBM Tivoli or Microsoft Active Directory (Preferred);
• Strong understanding of Graphical User Interface (GUI) design principles and best practices, as well as experience implementing user friendly and intuitive GUIs that are optimized for managing large amounts of data;
• Proficiency in HTML, CSS, and JavaScript;
• Understanding of RESTful APIs and their integration with Java-based systems;
• Knowledge of web security best practices, including XSS and CSRF;
• Familiarity with UI debugging tools such as Chrome DevTools, Postman;
• Experience in ExtJS Javascript Framework v5 and above will be an advantage;
• Experience in Automatic Fare Collection (AFC) system will be an advantage;
• Strong analytical and problem-solving skills; and
• Good written and verbal communication skills in English.

EA License # 14C6941

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions (both applications and infrastructure) are developed and designed with security inbuilt.

Key Responsibilities

•Provide security consultancy, technical guidance, expertise, solutioning and education for en-terprise.

•Advise application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

•Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

•Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

•Perform threat modelling on security critical applications. Keep up to date on emerging secu-rity threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews and audits to ensure security assurance is achieved.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables. This is an individual contributor role. Strong communication skills.

Requirements

•Degree in IT or related fields, with at least 5 years in information security, especially in the application security space.

•Professional security certifications (CISSP, CSSLP, CEH, CCSP etc) preferred.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.

•Strong in-depth working knowledge in secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), Software Compo-sition Analysis (SCA).

•Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud technolo-gies. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

•Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc. Any prior vulnerability management experience preferred.

•Strong oral, written, presentation and inter-personal skills.

•Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

Job Description
You will be a member of the Group Information Security Team responsible for initiating, implementing and maintaining security products and solutions to support enterprise security.

Key Responsibilities

• Subject matter expert (SME) for the security systems owned by the Information Security Team.
• Ensure security systems are utilised to their maximum capabilities.
• Plan, identify, assess, design, operationalise and maintain multiple security related software and/or hardware.
• Recommend and drive cyber security solution and initiatives to improve cyber security of the organisation.
• Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
• Provide security consultancy, technical guidance, expertise, solutioning and education.
• Advise infrastructure teams on security design that is relevant and fit for purpose.
• Identify and assess cyber risks in the IT infrastructure environment.
• Review firewall requests.
• Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.
• Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables.
• This is an individual contributor role. Deliver tasks with minimal supervision.
• Strong communication skills.

Requirements

• Degree in IT or related field, with at least 5 years in information security, especially in the application security space.
• Professional security certifications (CISSP, CSSLP, CEH etc) preferred.
• Experience in security products POC and RFQ.
• Prior experience in implementing and maintaining any of tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM etc. and/or network security. Able to review firewall requests.
• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.
• Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience preferred.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc.
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Job Description

You will be a member of the Group Information Security Team responsible for ensuring corporate applications, systems, networks, and digital assets are adequately protected and mitigated against cyber threats and risks. You will help drive cybersecurity and risk management efforts and user awareness and education within the Singapore Airlines Group.

Key Responsibilities include:

• Provide cyber governance and risk management oversight.
• Manage the security policy framework and relevant standards.
• Oversee applicable security, regulatory, privacy, contractual cyber requirements.
• Manage cyber risk analysis and self-assessments program for various information services, systems, processes and recognized industry standards.
• Conduct risk assessments, document results, and propose and track remediation tasks.
• Develop compliance program top routinely assess existing infrastructure, systems, and applications for compliance and vulnerabilities and propose relevant mitigating controls.
• Conduct vulnerability assessments and track remediation status of identified vulnerabilities.
• Identify and assess cyber risks and recommend and drive cyber security solution and initiatives to improve cyber security posture.
• Define controls to meet regulatory, legislative, and industry specific compliance requirements.
• Manage third party cyber risk assessment standards.
• Prepare IT security related KPI reports and management reports for compliance monitoring and reporting.
• Drive the implementation of GRC tool.
• Maintain user cyber awareness and provide security advisory on emerging security threats and vulnerabilities.
• Develop, review and continuously improve IT security training material and conduct user training to improve user awareness and incident response readiness.
• This role may be seconded to any of SIA’s subsidiary group

Requirements

• Degree in IT or related fields, with 4-5 years relevant information security working experience, especially in the application security space.
• Professional security certifications (CISSP, CISA, CEH etc) preferred.
• Experience with Governance, Risk and Compliance (GRC) activities.
• Familiar with PCI, PDPA, GDPR requirements
• Experience in security technologies, practices, application/network/systems architecture and design, tests tools and processes.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.