Total 86 security job vacancies in D26 Upper Thomson, Springleaf

Job Description
You will be a member of the Group Information Security Team responsible for initiating, implementing and maintaining security products and solutions to support enterprise security.

Key Responsibilities

• Subject matter expert (SME) for the security systems owned by the Information Security Team.
• Ensure security systems are utilised to their maximum capabilities.
• Plan, identify, assess, design, operationalise and maintain multiple security related software and/or hardware.
• Recommend and drive cyber security solution and initiatives to improve cyber security of the organisation.
• Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
• Provide security consultancy, technical guidance, expertise, solutioning and education.
• Advise infrastructure teams on security design that is relevant and fit for purpose.
• Identify and assess cyber risks in the IT infrastructure environment.
• Review firewall requests.
• Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.
• Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables.
• This is an individual contributor role. Deliver tasks with minimal supervision.
• Strong communication skills.

Requirements

• Degree in IT or related field, with at least 5 years in information security, especially in the application security space.
• Professional security certifications (CISSP, CSSLP, CEH etc) preferred.
• Experience in security products POC and RFQ.
• Prior experience in implementing and maintaining any of tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM etc. and/or network security. Able to review firewall requests.
• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.
• Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience preferred.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc.
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Key Responsibilities:

• Develop and implement advanced cyber security architectures and solutions.
• Analyze and evaluate system security requirements to design secure networks.
• Collaborate with cross-functional teams to integrate security practices into all facets of the business.
• Conduct risk assessments and provide recommendations for enhancing system security.
• Stay updated with the latest cyber security threats and technologies.
• Develop technical solutions and tools to help mitigate security vulnerabilities.
• Provide technical guidance and support to other team members.
• Document and maintain records of security architectures and processes.

MUST HAVE:

• Bachelor’s degree in Computer Science or Information Technology or Cyber Security, or related field.
• Minimum of 3-5 years of experience in a cyber security architect or engineering role.
• Proven experience in designing and implementing secure network architectures.
• Strong background in network security, system security, and cloud security.
• Experience with common cyber security tools, standards, and protocols.
• Familiarity with industrial control systems and operational technology (OT) security is a plus.

WE VALUE:

• Strong technical skills in network and system security.
• Knowledge of current cyber security trends and threats.
• Excellent problem-solving and analytical abilities.
• Proficient in security technologies such as firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, etc.
• Good communication and collaboration skills.
• Ability to work independently and as part of a team.

• Bachelor’s degree in Computer Science, Information Security, or related field.

• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.

• Excellent communication skills and the ability to collaborate with diverse teams.

• Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.

• Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.

• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services

• Good knowledge in security

• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.

• Proficient in security concepts related to infrastructure as code (IaC) and containerisation.

• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Job Description

You will be a member of the Group Information Security Team responsible for ensuring corporate applications, systems, networks, and digital assets are adequately protected and mitigated against cyber threats and risks. You will help drive cybersecurity and risk management efforts and user awareness and education within the Singapore Airlines Group.

Key Responsibilities include:

• Provide cyber governance and risk management oversight.
• Manage the security policy framework and relevant standards.
• Oversee applicable security, regulatory, privacy, contractual cyber requirements.
• Manage cyber risk analysis and self-assessments program for various information services, systems, processes and recognized industry standards.
• Conduct risk assessments, document results, and propose and track remediation tasks.
• Develop compliance program top routinely assess existing infrastructure, systems, and applications for compliance and vulnerabilities and propose relevant mitigating controls.
• Conduct vulnerability assessments and track remediation status of identified vulnerabilities.
• Identify and assess cyber risks and recommend and drive cyber security solution and initiatives to improve cyber security posture.
• Define controls to meet regulatory, legislative, and industry specific compliance requirements.
• Manage third party cyber risk assessment standards.
• Prepare IT security related KPI reports and management reports for compliance monitoring and reporting.
• Drive the implementation of GRC tool.
• Maintain user cyber awareness and provide security advisory on emerging security threats and vulnerabilities.
• Develop, review and continuously improve IT security training material and conduct user training to improve user awareness and incident response readiness.
• This role may be seconded to any of SIA’s subsidiary group

Requirements

• Degree in IT or related fields, with 4-5 years relevant information security working experience, especially in the application security space.
• Professional security certifications (CISSP, CISA, CEH etc) preferred.
• Experience with Governance, Risk and Compliance (GRC) activities.
• Familiar with PCI, PDPA, GDPR requirements
• Experience in security technologies, practices, application/network/systems architecture and design, tests tools and processes.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Key Responsibilities:

• Develop and implement advanced cyber security architectures and solutions.
• Analyze and evaluate system security requirements to design secure networks.
• Collaborate with cross-functional teams to integrate security practices into all facets of the business.
• Conduct risk assessments and provide recommendations for enhancing system security.
• Stay updated with the latest cyber security threats and technologies.
• Develop technical solutions and tools to help mitigate security vulnerabilities.
• Provide technical guidance and support to other team members.
• Document and maintain records of security architectures and processes.

MUST HAVE:

• Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or related field.
• Advanced degrees (Master’s, PhD) or professional certifications (CISSP, CISM, CEH, etc.) in cyber security are highly desirable. Minimum of 3-5 years of experience in a cyber security architect or engineering role.
• Proven experience in designing and implementing secure network architectures.
• Strong background in network security, system security, and cloud security.
• Experience with common cyber security tools, standards, and protocols.
• Familiarity with industrial control systems and operational technology (OT) security is a plus.

WE VALUE:

• Strong technical skills in network and system security.
• Knowledge of current cyber security trends and threats.
• Excellent problem-solving and analytical abilities.
• Proficient in security technologies such as firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, etc.
• Good communication and collaboration skills.
• Ability to work independently and as part of a team.

Be part of an amazing team at PAN PACIFIC ORCHARD, SINGAPORE to redefine the city's landscape.

As a Head of Department reporting to the Hotel Manager, the Security & Safety Manager is responsible for the protection and safety of Hotel Guests, Associates and all Assets, both tangible and intangible. He is expected to design and implement a comprehensive security programme consistent with identified risks and putting Guests and Associates’ safety as utmost priority. He is also the appointed Fire Safety Manager of the Hotel.

• Anticipate, identify and put in place plans that helps reduce to manageable proportions all security, safety and health risks, threats and hazards
• Conduct continuing Risk Assessments; identifying all risks affecting the Hotel and recommend interventions, responses and corrective actions and plans
• Liaise with government authorities and agencies including the Singapore Police Force and the Singapore Civil Defence Force on matters pertaining to safety and security issues of concern to the property and its occupants
• Keep abreast of latest trends and news on safety and security and recommend improvements to manage security threats and safety concerns that may directly/indirectly affect the business
• Intelligence gathering, best practice benchmarking and share such information across the Hotel to raise Safety and Security awareness (e.g. compile crime statistics; close liaison with neighbouring Hotels, local police, Consultants etc)
• Responsible for overall carpark management, ensuring efficient and smooth traffic flow. Identity any bottlenecks for improvements
• Carry out investigations of thefts or losses in the hotel premises and submit recommendations of findings. Ensure security intercept and challenge unidentified persons found in restricted areas (e.g. person’s not wearing permits in the HOH areas)
• Continuous monitoring of Hotel activity and premises, ensuring prompt responses to anomalies; suspicious situations and disorder. Strategically control and deploy security associate to cover all critical areas, which may also include conduct of exit bag / parcel searches of contractors; suppliers; casual associates etc
• Review, update and adapt corporate security policies (fire, earthquakes, bomb threats, civil disorder etc) to ensure relevance and compliance
• Work with departments to draw up and operationalise a Crisis Response Plan & Business Continuity Plan. Define organisation and function of the Crisis and Emergency Response Team (CERT), set up a continuing training program and simulation exercises for the members. Direct and supervise ERT response to various crisis situations.
• Conduct regular safety system tests and practice fire drills; evacuation drills, bomb threat drills etc, including table top exercises and relevant training to ensure preparedness.
• Develop and work closely with all departments to drive the Workplace Health & Safety program.
• Develop / enforce effective policy and procedures governing key secure storage, key movements and accountabilities, lock duplication, lockset replacement and Master key allocations
• Ensure adequate and fully functional security systems coverage of all critical areas, eg CCTV, panic alarms, hold-up alarms, fire exit door alarms at all times
• Ensure all incidents/allegations are reported, investigated and documented in a timely manner, making sure of scene preservation: restricting entry into and prohibiting interference with items, objects, marks etc found within the identified scene boundary; with proper recording and gathering
• Supervise interviews / fact finding of suspects, victims and witnesses and ensuring all statements are duly recorded in a timely manner.
• Generate and submit a concise and comprehensive incident report with probable cause and recommendations for prevention of recurrence.
• Coordinate with police authorities when necessary and appropriate for any incidences in the Hotel
• Studies loss events, establishes possible patterns and trends (e.g. crime trends) and provide management appropriate counter-measures and recommendations of preventive measures
• Deliver superior security service for special events and VIP visits (eg Heads of state visits; celebrity functions etc).
• Meet clients / security representatives from Corporate /Government / State organisations etc - identify and address special security and safety needs / concerns.
• Maintain regular monthly dialogue meetings with all security personnel to ensure timely and open communication at all times; resolve all work issues, working relationship concerns and operational difficulties. Guide and coach security personnel.
• Regular training of all Associates, including casuals and contractors on safety and security and the role they play in keeping the Hotel a safe and secured place of work.
• Incorporate guest service into all elements of the security operation. Proactive support of other Departments involving delivery of guest service.

As Lead/Senior Security Consultant, you will play a crucial role in helping over 4 million members save for their retirement, healthcare, and housing needs as well as helping them cope with life’s uncertainties. With a fulfilling career, career growth, and development opportunities, you will be part of a big family of dedicated professionals. Join us and champion the importance of cybersecurity in CPF systems and protect the CPF balances of Singaporeans.

What you will be working on

The jobholder is to keep the Board’s computer information systems secure, develop security programs and implement them across the Board and most importantly to build a resilient and safe cyber environment for the Board.

We are seeking for interested candidates who wish to pursue a career in Cybersecurity Governance and Assurance to join our dynamic team and contribute to the robust security posture of the Board in the following areas:

• Develop and implement cybersecurity governance frameworks, policies, and procedures to ensure compliance with industry standards and regulations.
• Conduct regular risk assessments and vulnerability assessments to identify potential security threats and weaknesses in systems and processes.
• Collaborate with cross-functional teams to design and implement effective security controls, monitoring mechanisms, and incident response plans.
• Evaluate and enhance existing cybersecurity programs to align with emerging threats and industry best practices.
• Lead and participate in internal and external cybersecurity audits, ensuring adherence to regulatory requirements and organizational policies.
• Provide expertise in evaluating and selecting security technologies, tools, and solutions to enhance the overall cybersecurity infrastructure.
• Stay abreast of industry trends, emerging threats, and advancements in cybersecurity to continuously improve the organization's security posture.
• Work closely with stakeholders to communicate cybersecurity risks, recommendations, and mitigation strategies effectively.

What we are looking for

• Minimally 4 years of relevant information security work experience
• Relevant information security work experience
• Good knowledge of information security concepts and technologies (risk assessment, legal and regulatory requirements, threats, vulnerabilities)
• Strong understanding of industry standards, regulations, and frameworks e.g., National Institute of Standards and Technology (NIST), ISO 27001, Government’s Instruction Manuals, Center for Internet Security (CIS), Cyber Security Agency of Singapore’s Cybersecurity Act, Codes of Practice
• Hands-on experience with vulnerability management, risk assessment methodologies and security assessment tools such as exposure management and security validation, External Attack Surface Management (EASM)
• Specialised skills in one or more of the following i.e. malware analysis, penetration testing (application, systems and network), ethical hacking and computer forensics, end point detection, Web Application Firewall (WAF), SIEM and Database Activity Monitoring (DAM) will be an advantage
• Flexible in work assignment and willing to gain experiential learning by working in diverse functions where opportunities avail.
• Seniority of appointment will be commensurate with relevant work experience.

What you can expect

• A challenging and rewarding career.
• A variety of formal and informal training where you can hone your skills in the evolving technology landscape.
• Promotion opportunities through your capability and on the job performance
• A friendly work environment to collaborate and co-create with like-minded colleagues.
• A hybrid work model where you can work remotely up to 50% of the time.
• A productive yet growth-oriented workplace with flexible dress code where you are empowered to decide your appropriate outfit for the day.
• Comprehensive rewards package.
• Annual leave and pro-family leave.
• Medical and dental benefits.
• Access to recreational activities.
• Position is on 2-year full-time contract directly under the payroll of CPF Board with potential for emplacement into permanent position.

As a member of Team Central Provident Fund (CPF), you will play a crucial role in helping over 4 million members save for their retirement, healthcare, and housing needs as well as helping them cope with life’s uncertainties. With a fulfilling career, career growth, and development opportunities, you will be part of a big family of dedicated professionals. Join us and champion financial security for Singaporeans while leaving a lasting legacy.

What you will be working on

You will be involved to design, implement, maintain, and support the Board’s data and network from unauthorized access, cyber threats and potential vulnerabilities. The broad area of your responsibilities include:

• Design, configure, and implement network security solutions including but not limited to firewall, intrusion detection and prevention systems, virtual private network (VPNs), etc.
• Conduct regular security assessment and vulnerability scans to identify potential weaknesses in the network infrastructure. Evaluate and remediate vulnerabilities.
• Threat intelligence.
• Implement monitoring systems to detect and respond to security breaches, unauthorized activities and anomalous behaviour in the network
• Manage network access controls, authentication mechanisms, and authorisation
• Implement encryption protocols and mechanisms to secure data transmission and storage
• Develop and enforce network security policies and procedures to ensure compliance with industry standards and regulations
• Provide technical support and troubleshooting to resolve issues
• Implement security tools, policies, and procedures to ensure security and resiliency of the network platform

What we are looking for

• Minimally 6 years of relevant work experience in network security administration, implementation, and monitoring
• Familiarity in one or more of the following

- Expertise across a variety of security products including firewalls, URL filtering, intrusion detection, information security and virus protection.

- Expertise across of network routing and switching, proxy and DNS.

- Good understanding in telecommunications infrastructure and equipment

- Good understanding of application security

- Knowledge in software-defined networking, ZTNA.

• Ability to respond to emergency situations on 24x7 basis where required
• An enthusiasm for staying up to date with the very latest updates about security threats and solutions.
• Outstanding communication skills that go beyond “tech talk” – the ability to translate complex IT matters to those without an IT background.
• Strong time management and organisational skills.
• Certifications in CISSP, CCNA, CCNP and or CCDA would be advantageous

Seniority of appointment will commensurate with relevant work experience.

What you can expect

• A challenging and rewarding career
• A variety of formal and informal training where you can hone your skills in the evolving technology landscape
• Promotion opportunities through your capability and on the job performance
• A friendly work environment with like-minded colleagues to co-create and collaborate together
• A hybrid work model where you can work remotely up to 50% of the time
• A productive yet growth-oriented workplace with flexible dress code where you are empowered to decide your appropriate outfit for the day
• Comprehensive rewards package
• Annual leave and pro-family leave
• Medical and dental benefits
• Access to recreational activities
• Position is on 2-year full time contract directly under the payroll of CPF Board with potential for emplacement into permanent position

Working closely but not limited to with our Gateway (Airport) team, SATS, Airport Police Department (APD), HSSE Committee & Facilities Department, the Security Manager will assist with supply chain policy (express distribution), project management, audit, and APD compliance, as well as ensuring proper support is provided to internal partners working on security related projects.

Work location: 80/20 reporting to Gateway (airport) and in HQ in Changi. However can be deployed in any of our SF warehouses and offices island wide as needed.

Responsibilities

• Assess and develop overall mitigation strategies across the company to minimize the impact of relevant incidents.
• Research industry best practices, emerging security technologies and relevant regulations, and perform industry benchmarking and gap analyses.
• Develop and implement internal security risk management programs (e.g. comprehensive audit loggings, insider threat detections, privileged access management & governance), procedures, and controls to prevent, detect, and respond to relevant incidents.
• Develop an effective Knowledge Management System so that security policies and standard operating procedures (SOP) are in place, review regularly to update compliance requirements.
• Develop and implement security strategies, security plans, security policies, security procedures, security measures, and security systems to protect the company assets, personnel and information.
• Oversee the day-to-day security operations, including physical security measures, the high availability state of security devices (ie, access control system, surveillance systems, APD-approved X-ray machine, APD-approved Explosive Trace Detector, APD-approved Walk-Through Meral Detector and APD-approved Handheld Metal Detector) and readiness of our own staff & ground security officers (in-house and contractual).
• Operate insider threat detection programs and manage business stakeholders to design programs based on business understanding and risk scenarios.
• Work with stakeholders & relevant departments to ensure that all aspects of internal security risk are addressed.
• Plan and lead in the investigation of critical equipment failure, security breaches, loss of cargo or company assets where criminal activities are suspected including reporting to management and rectification of lapses. Assist in incident investigation as needed, follow up and case closure.
• Plan, lead and perform security risk assessment; Identify and assess potential information security risks posed within the organization and the existing policies/procedures/controls mitigating such risks.
• Develop and maintain relationships with internal and external partners to stay current on industry best practices related to information security risk management, making recommendations for action for senior management.
• Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions.
• Plan and lead in security audits, security test and security inspection and preparation of audit/test/inspection findings for management reporting, and to propose action plans.
• Oversee, plan and executes emergency response, crisis management/operations readiness plan relating to ensure the Security Posture of the organisation.
• Act as Liaison Officer between the company with the Airport Police, law enforcement and government agencies.
• Work with the Executive, Facilities & Procurement in ensuring all security equipment and devices are in good working condition and serviced punctually in accordance to the maintenance schedule.
• Work with Facilities & Procurement in the procurement of outsourced security personnel.
• Attend and participate in the monthly HSSE meeting and inspection
• Conduct Security training and toolbox meeting
• Consolidating the Security statistics together with HSSE committee
• Develop Security training material (PowerPoint slides or video)

Requirements

• Bachelor's degree in a relevant field, such as security, risk management; work-related experience is also welcomed, highly advantageous if from Logistics / Supply Chain / Express Distribution / Warehouse experience.
• At least 3 years of experience in a similar role, with a proven track record of managing internal security risk and consultancy experience is preferred.
• Experience developing and implementing internal security risk management policies, procedures, and controls. Knowledge of risk assessment methodologies and tools.
• Calm and composed personality, a strong inclination towards learning, and a team-oriented mindset.
• Team builder, strong written/verbal communication, and excellent teamwork skills with the ability to interact effectively with stakeholders at all levels of the organization, strong analytical and problem-solving skills.
• Self-driven and results-oriented, enjoys challenging tasks, demonstrates enthusiasm for work, and can handle job pressures.
• Detail-oriented, Organized with strong compliance sense.
• Able to multi-task, able to work with minimal supervision (proactive, self-starter)
• Good interpersonal and communication skills.
• Good command in written and spoken English and Chinese as to communicate effectively with our China counterpart and Chinese-speaking customer.
• Good presentation skills and can lead & manage meetings.
• Proficiency in MS office: Word, PowerPoint; Especially in Excel and Visio including Chinese word processing.

Immediate 1 Year Project assignment for Singapore Citizen to join as Security Engineer

Mon to Fri Office hours

24*7 Standby Support if required.

CAT 2A Clearance required in this project

Attractive Basic Salary + HP Claim S$50 Monthly + up to 1 month performance bonus upon completion

Job Scope:

· Point of contact to assist and advise client for any ICT security related

· Lead and support customer in the matter of security incident response and resolution

· Manage, configure and upgrade a wide variety of security technologies (e.g. FW, UTM, IDS/IPS, SWG/SEG, VPN, EPP, DLP, ATP, 2FA, PAM, etc.)

· Respond managed security technologies fault alerts and/or customer escalation

· Use strong fundamental knowledge (e.g. TCP/IP) and product-specific knowledge to perform troubleshooting on common technical issues on the managed security technologies

· Perform escalation to internal product domain experts and/or external product vendors

· Work with internal experts/external vendors to resolve technical issues

· Prepare Incident Reports on high severity incidents

· Respond to inbound Change Requests (CRs), Service Requests (SRs), Queries on managed security technologies, in a timely manner (within stipulated SLA).

· Perform regular configuration backups on managed security technologies

· Plan and coordinate Maintenance Windows with customer on necessary software patching and version upgrades.

· Create and update technical documentations on managed security technologies

· Generate monthly reports according to service scope requirements

· Adhere to policies, procedures and security best practices

· Resolve problems independently and understand escalation procedure

Job Requirements:

· A Bachelor degree / Polytechnic Diploma in Computer Science, Information Technology or Information System

· At least 5 years’ working experience in IT Infrastructure Operation and/or Support

· Sound fundamental knowledge on IP networking (e.g. TCP/IP, routing, etc.) and operation systems (e.g. Windows, Linux, etc.)

· Strong critical thinking and problem-solving skills and a passion for information security

Technical Skills & Expertise:

· Professional certification and/or practical working expertise on some/most the below security technologies:

o RSA / SafeNet (2FA)

o Cisco ASA / CheckPoint /Fortinet / Palo Alto / SonicWall / AlgoSec (Firewall)

o Trend Micro / McAfee (NIPS / HIDS / NSM)

o CyberArk / BeyondTrust (PAM)

o Symantec BlueCoat / McAfee Web Proxy

o DSM (AV, HIPS, Host FW, etc)

o Container Security

o Imperva Securesphere

o Tripwire Enterprise

o AWS / MS Azure (Cloud)

Technical Knowledge and Credentials: ·

Hands-on experience in Microsoft Defender for Cloud Apps (MDCA) · Design, Build, and Test MDCA docker infrastructure in production setup · Develop and document use cases · Operationalization of MDCA processes for BAU · MDCA Policies · Creation of Shadow-IT, Threat, DLP, and Cloud protection policies · Develop advanced use cases for deep visibility into SaaS apps · Tune alerts and document response actions. · Experience with Microsoft integrations: · Azure Active Directory · MS Defender (for Office365, for Endpoint, For Identity, MDCA) · Strong understanding of Microsoft Information Protection, and data loss prevention infrastructures and techniques · Broad understanding of Data Governance and Data Protection concepts. · Knowledge of Microsoft Purview, AIP · Understanding of the business, privacy, security, and compliance challenges surrounding Data Protection.

Preferred Certifications · MS-500: Microsoft 365 Certified Security Administrator Associate · SC-300: Microsoft Identity and Access Administrator · SC-900: Microsoft Security, Compliance, and Identity Fundamentals