Total 490 Logistic Analyst job vacancies in Legal / Public / Security category in Malaysia

Contract Duration: 12 months
Working Hour: Normal Office Hour
Working Location: AMK
Remarks: SINGAPOREAN Only

Requirements
• 5+ years IT security experience required.
• CISSP certification is a Must, CISM, Security+, IT security tools certifications (Imperva, Carbon Black) is a plus
• Experience with Networks, Servers (Windows and UNIX), Database.
• Experience in IT security auditing, security assessments.
• Understand protocols, traffic flows, ability to analyse logs from various sources.
• Knowledge of Active Directory, Endpoint protection solutions, Early Detection and Response solution, Database Activities Monitoring tools, SIEM etc.
• Excellent written and verbal communication, presentation skills.
• Proficiency in Microsoft Excel.
• Flexible, team player, “get-it-done” personality.
• Ability to organize and plan work independently.
• Ability to work in a rapidly changing environment.
• Ability to multi-task and context-switch effectively between different activities and teams

Responsibilities
• Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis.
• Establish compliance with these policies / procedures through ongoing security reviews and audits, not limited to log analysis and security assessment of customer ICT systems
• Conduct security risk management exercise
• Conduct table-top exercises
• Conduct vulnerability assessment, coordinate penetration tests activities
• Conduct information security awareness training
• Responsible for the development and management of customer’s security incident response plan.
• Lead and support customer in the matters of security incident resolution and response.
• Be the point-of-contact/customer liaison to assist and advise customer for ICT security related matters
• Project managed the activities and deliverables during the implementation phase.

Interested candidates, please click "APPLY" to begin your job search journey and submit your CV directly through the official PERSOLKELLY job application platform - GO Mobile.

We regret to inform you that only shortlisted candidates will be notified.

This is in partnership with Employment and Employability Institute Pte Ltd (“e2i”). e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance, and skills upgrading services, and partnering with employers to address their manpower needs through recruitment, training, and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nationwide manpower and skills upgrading initiatives. By applying for this role, you consent to e2i’s PDPA.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use, and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Gelangre Reyanelle Gelario | REG No : R1870995

PERSOLKELLY SINGAPORE PTE LTD | EA License No : 01C4394

My client, an Asian bank is looking to hire an AVP, Senior SOC Analyst to be part of their IT team. In this dynamic role, you'll lead the charge in actively hunting and analyzing potential threats, leveraging your expertise to support SOC investigations and prevent attacks before they occur.

As a Senior SOC Analyst (Tier-2) and dedicated threat hunter, you'll be actively searching for vulnerabilities and identifying stealthy attackers. Your duties will include conducting thorough vulnerability assessments and managing the results. Moreover, you'll be responsible for addressing significant incidents escalated by Security Analysts (Tier-1), evaluating their impact, determining the affected systems' scope, and gathering data for further analysis.

It's a full time and a permanent position, office is located at Changi Business Park (East)

Role

Key Responsibilities:

• Lead the Hunt: Spearhead proactive threat detection & analysis, sifting through data (alerts, logs, etc.) and conducting reverse engineering when needed.
• Deep Dive & Solve: Dive deep into security incidents, uncovering trends and root causes. Create and maintain processes to ensure future preparedness.
• Stay Ahead of the Curve: Conduct in-depth research on threats, vulnerabilities, and attack vectors. Collaborate with diverse teams to refine prevention and detection methods.
• The Go-To Guru: Become the trusted expert for SOC-related topics and guide incident response.
• Process Pro: Develop and document SOC procedures based on industry best practices and internal requirements.
• Continuous Improvement Champion: Lead or support projects to enhance SOC effectiveness, keeping us ahead of ever-evolving threats.
• Collaborate & Conquer: Work seamlessly with incident response, threat intelligence, and the overall security strategy teams.

What You Bring:

• Bachelor's in IT (or equivalent) and 5+ years of experience
• Deep understanding of networking, major internet protocols, and security concepts.
• 3+ years of experience in cyber incident response and/or enterprise SOC operations.
• 2+ years using standard security tools (SIEM, EDR, etc.).
• Relevant experience in Imperva Secure Sphere
• 2+ years of operational experience with Splunk or similar platforms.
• Expert investigative skills for uncovering incident impact and root cause.
• Strong foundation in security threats and countermeasures.
• Analytical, problem-solving, and multitasking skills for a fast-paced environment.
• Hands-on experience with SIEM, intrusion detection, and application layer protocols.
• Security experience, especially in incident detection and threat intelligence.
• Bonus points for expertise in various operating systems, web technologies, and professional security certifications.
• Experience in multiple IT/Information Security domains like IAM, IT infrastructure, etc.
• Meticulous, team-oriented, flexible, proactive, and positive attitude.
• Strong sense of responsibility, initiative, and communication skills.

We regret to inform that only shortlisted candidates would be notified.
Chiam Lee Ping Dayna
Consultant
Reg. No: R1764404
Stellar- Link Partners Pte Ltd (EA License: 21S0698)

Responsibilities：

• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure)
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to to ensure compliance and regulatory requirements and industry standards

Requirements;

• Diploma/degree in computer studies
• 2 years of experience working in a security operations, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role
• Willing to work in rotational shift environment (including weekends and night shift).

This role is based in Penang, and we apply Hybrid work mode. 

 

We are looking for a SAP Security and GRC consultant with 6 plus years of experience to join our team and help us deliver high-quality solutions to our clients. You will be responsible for designing, implementing, and maintaining SAP security and governance, risk, and compliance (GRC) solutions across various SAP modules and platforms. You will also work closely with other SAP consultants, business analysts, and project managers to ensure that the security and GRC requirements are met and aligned with the business objectives and best practices.

 

Your New Roles:

• Design, configure, and test SAP security roles and authorizations for various SAP modules and platforms, such as S/4HANA, Fiori, BODS, GTS, PO, CHARM, etc.
• Implement and support SAP GRC solutions, such as Access Control, Process Control, Risk Management, and Audit Management, and ensure compliance with internal and external policies and regulations.
• Perform SAP security and GRC audits, assessments, and remediation activities, and provide recommendations for improvement and mitigation.
• Provide SAP security and GRC support and troubleshooting for issues, incidents, and requests, and ensure timely resolution and documentation.
• Develop and maintain SAP security and GRC documentation, such as policies, procedures, guidelines, reports, and training materials.
• Collaborate with other SAP consultants, business analysts, and project managers to understand the business requirements and deliver the optimal security and GRC solutions.
• Stay updated with the latest SAP security and GRC trends, technologies, and best practices, and share the knowledge and insights with the team and the clients.

 

Full time Experienced (relevant combo of work and education) Bachelor of Computer Science 0% As the world works and lives faster, FIS is leading the way. Our fintech solutions touch nearly every market, company and person on the planet. Our teams are inclusive and diverse. Our colleagues work together and celebrate together. If you want to advance the world of fintech, we’d like to ask you: Are you FIS? About the team: It’s an amazing opportunity to join a Talented team of innovative and committed folks doing interesting work at the world’s largest global provider dedicatedto financial technology solutions! What you will be doing: Develop policy and standards for API security. Experience and knowledge in Application Programming Interface (API), static application security testing (SAST) and related tools like Veracode / Checkmarx / Fortiy. Experience and knowledge in Burp Suite tool for dynamic testing (DAST). Primarily responsible for API application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management) What you bring: At least 2 years of working experience in application security that includes API, SAST and DAST along with Checkmarx, Veracode Experience and knowledge in static application security testing (SAST) and related tools like Veracode / Checkmarx / Fortiy. Experience and knowledge in Burp Suite tool for dynamic testing (DAST). Primarily responsible for application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management). Knowledge of security technologies (encryption, data protection, design, privilege access, etc.) Proficiency in time management, communications, decision making, presentation and organizational skills Proficiency in planning, reporting, establishing goals and objectives, standards, priorities and schedules Excellent decision-making, analytical and problem solving skills Excellent verbal and written communication skills to technical and non-technical audiences of various levels in the organization Experience establishing and maintaining effective working relationships with employees and/or clients Strong knowledge of development and application security Hands-on experience performing application API security assessment, static and dynamic security assessments with tools such as: Burpsuite, OWASP ZAP, AppScan, WebInspect, Fortify, Veracode, Checkmarx, etc. Knowledge of OWASP Top 10/ SANS Top 25, identify vulnerabilities via manual and automated testing methods and how to effectively remediate vulnerabilities associated with each Expert knowledge of information security principles, web applications, and intermediate familiarity with malicious code and common hacking techniques used by malicious actors Experience conducting risk assessments and performing threat modeling of applications Ability to collaborate with teams remotely What we offer you: A career at FIS is more than just a job. It’s the change to shape the future of fintech. At FIS, we offer you: A voice in the future of fintech Always-on learning and development Collaborative work environment Opportunities to give back Competitive salary and benefits Privacy Statement FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice. Sourcing Model Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company. #pridepass

Develop policy and standards for API security.

• Location: Singapore / Hong Kong / Dubai
• Relocation support provided if you are interested in relocating to Dubai
• SGD 11-14K / HKD 62-81K / AED 29-38K
• Passionate in security risk and security audit in Web3 / Fin-tech / Wallets / Crypto / Blockchain Technologies
• Bilingual capabilities in English and Chinese (Mandarin) will be a plus as you will liaise with English and Chinese speaking stakeholders.

Responsibilities:

• Conduct thorough security audits for web3 wallets, focusing primarily on Java code, to identify potential risks related to business requirements and technology implementation schemes. Provide actionable solutions and facilitate their implementation.
• Analyze the characteristics of new blockchain networks, gaining deep insights into potential risks during the integration process and advocating for risk mitigation strategies within code implementation.
• Actively contribute to the research and development efforts of the entire Product R&D team, ensuring the adherence to Secure Development Lifecycle (SDL) practices.

Requirements:

• Proficient in relevant application security and blockchain security concepts, with a comprehensive understanding of common security vulnerabilities, including their internal principles, exploitation methods, and mitigation strategies.
• Experience in security auditing, with a strong emphasis on Java or other programming languages. Experience in leading or participating in SDL implementation is preferred.
• Thorough understanding of the blockchain industry and its technologies, including common security risks and the operational principles of mainstream chains such as BTC and ETH.
• Familiarity with widely-used encryption, decryption, and signature algorithms, particularly those employed in web3 wallets (e.g., ECDSA, ED25519, RSA, AES, SSS).
• Background in penetration testing and proficiency in mainstream attack methodologies.
• Demonstrated passion for emerging blockchain technology, with a proactive attitude towards self-driven learning and understanding.
• Bilingual capabilities in English and Chinese (Mandarin) will be a plus as you will liaise with English and Chinese speaking stakeholders.

If you are interested in the above position or other cyber / information security position, please kindly send your updated CV to Shannagh Wu at Shannagh.Wu@ethosbc.com
*Due to high volume of applications, only shortlisted applicants will be contacted.*

Reg No.R23112660
BeathChapman Pte Ltd
Licence no. 16S8112

Job Description

We are seeking a highly motivated and experienced IT Security Analyst to join our team and play a pivotal role in safeguarding our organization's IT infrastructure and data. You will be responsible for identifying, assessing, and mitigating IT risks, ensuring compliance with relevant regulations/best practice, and supporting our IT security operations.

Risk Management:

• Conduct regular threat, risks and vulnerability assessments.
• Assess technologies and solutions against cyber security standard.
• Identify, analyse, and prioritize IT security risks.
• Develop and oversees implementation of risk mitigation strategies and controls.
• Maintain and update the organization's risk register.

Compliance:

• Stay up-to-date on relevant IT security regulations and standards (e.g., PCI-DSS, ITRM, IM8, etc).
• Develop and implement security policies and procedures.
• Monitor and audit compliance activities.
• Report on compliance status to relevant stakeholders.
• Establish compliance initiatives to ensure conformance with security requirements

Security Operations:

• Monitor security logs and events for suspicious activity.
• Monitor and mitigate potential data loss events, and investigate suspected incidents.
• Investigate security incidents and implement appropriate response measures.
• Participate in incident response exercises and simulations.
• Assist with the deployment and maintenance of security tools and technologies.

Collaboration:

• Work closely with IT operations, development, and other business units to promote security awareness and best practices.
• Provide guidance and training to employees on security policies and procedures.
• Collaborate with external auditors and regulators.
• Prepare regular management reports on overall IT security posture.

Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, or related field (or equivalent experience).
• Minimum of 3-5 years of experience in IT security, risk management, and compliance.
• Strong understanding of IT security concepts, frameworks, and methodologies.
• Working knowledge of relevant IT security regulations and standards.
• Experience with security tools and technologies (e.g., vulnerability scanners, SIEM, IDS/IPS).
• CISA / CISM / CISSP certifications will be an added advantage
• Knowledge in PHP, C++ and Java programming will be an advantage
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.
• Self-driven and independent, with good attention to detail and quality
• • Ability to work independently and as part of a team

This is a 12 months contract assigned to our client

Work Location: To be confirmed (during interview)

Salary Range : $5,000-$7,500

Job Description

Top Mandatory skills

1. Azure native security

2. Security Incident response

3. Familiar with at least 2 of below security tooling upkeeping:

SIEM, Endpoint Detect and Response, Endpoint Anti-virus, Next Gen Firewall, VA Scanner

Skills which are good to have / optional

1. Hardening CIS benchmark

2. Impact analysis report drafting, testing of patches

3. Government compliance standards familiarity

4. Knowledge on Cloud Application Architecture

Contract Duration: 1st July 2024- Dec 2024

Location: Asai Square Tower

Key Responsibilities:

Restructure our key complex Acts and Regulations in the RI. We propose to break down each key complex Act / Reg into themes and maintain each theme as a Publication of the specific key complex Act / Reg in the RI.

Key Activities include:

• Analysis and structuring of the major Singapore Acts and Regulations (Banking Act, Securities and Futures Act, Financial Advisers Act and associated regulations etc);

• RI enrichment at both publication and obligation levels; and

• Manual mapping of publications and obligations (if required).

Requirements

• Bachelor’s degree; legal experience, and expert in compliance or other control-related function in the financial services firm, regulatory organization, or legal/consulting firm, or a combination thereof; previous experience in Compliance/ Legal, strong working knowledge of function/business/product supported and the related operations and financial requirements
• Expertise in laws, rules, regulations, risks and typologies for Singapore regulations
• Paralegal experience and/or versed in legal analysis, interpretation and its documentation
• Capable to conduct analysis of laws, rules, Regulations, conduct interpretation and understand potential applicability to financial services’ entities
• Understanding of control and compliance risk management
• Ability to articulate complex problems and solutions through concise and clear messaging
• Understanding of the regulatory framework of the country /segments of coverage
• Understanding of financial services and products of the countries of coverage
• Fluent in English
• Proficient in MS Office applications (Excel, Word, PowerPoint)

Interested candidates please share your resuem to shashi@justrecruit.com.sg with all details like current salary, expected salary and notice period

Regards

Shashi (R23112213)

Just Recruit Singapore Pte Ltd (EA12C6295)

IT Cyber Security Analyst & Team Leader - CISSP or CySA+ or MSc Information Security

Weymouth, Dorset, or London, South East UK or Stoke on Trent, Staffordshire

£50,000pa + Hybrid & Flexi-Working & Training & Certifications Available

Weymouth, Dorset, or London, South East UK, or Staffordshire + Hybrid and Flexible Working as Standard

The Client: Are a well-known High St and Online retailer who are seeking a Senior IT Cyber Security Analyst who specialises in Microsoft / Wintel Servers and Virtualisation supporting a UK wide infrastructure.

Objective: You will Lead 2 x Cyber Security Analysts, giving support to the Head of Cyber Security in delivering the Information Security service to the global business.

You will lead all Cyber Security Operations function and be the first point of contact for technical information security related matters.

Role Responsibilities:

• You will Lead 2 x Cyber Security Analysts, giving support to the Head of Cyber Security
• Act as the first point of action or escalation for the identification of security incidents and their investigation.
• Be responsible for the managed Security Operations Centre (SOC), Network Monitoring and Managed Detection and Response services and associated vendor relationships.
• Offer mentoring, advice and guidance to those in your Team
• Be the subject matter expert for technical security related queries, providing the Security Architect, IT Service and Delivery teams and business stakeholders with authoritative advice and defined security requirements.
• Be responsible for the Security Education and Awareness scheme.
• Ensure Cyber Security campaigns are conducted, and improvements implemented and ensure colleague queries around policies and requirements are appropriately answered in a timely manner.
• Be responsible for the Vulnerability Management process.
• Act on vulnerability information and conduct Cyber Security risk assessments and work with suppliers, partners, and internal teams to ensure security vulnerabilities are identified, assessed, and remediated in good time.

Key Requirements you will need:

• In depth knowledge of Information Security concepts and principles, including cloud security capabilities.
• Experience with configuring and utilising security tooling, including SIEM, EDR, vulnerability scanners, CASB, network scanning, DLP.
• Hands-on IT experience with proven expertise in a previous Information Security role.
• Vendor management experience.
• A relevant intermediate or advanced Information Security based qualification (e.g. CISSP, CySA+, MSc Information Security)
• Ability to critically analyse information and make decisions based on judgement, knowledge, and experience.

Business Knowledge:

• Knowledge of Retail and eCommerce is of great advantage but is not essential.
• Working knowledge of the Information Security elements of Data Protection regulations (e.g. GDPR, The Data Protection Act 2018) is essential.
• Knowledge of the NIST Cyber Security Framework is of advantage.
• Awareness of regulations that affect Retail, such as PCI DSS, is of great advantage but experience of maintaining compliance is not essential.

CISSP or CySA+ or MSc Information Security Certifications will be advantageous.

Call 0121 712 8715 today!

1. Experience – Paralegal/ Legal analysis (Banking & Finance Law)
2. Location : Centre
3. Contract : Till end of Dec 2024

Key Responsibilities:

• Analysis and structuring of the major Singapore Acts and Regulations (Banking Act, Securities and Futures Act, Financial Advisers Act and associated regulations etc);
• Regulatory Inventory (RI)enrichment at both publication and obligation levels; and
• Manual mapping of publications and obligations (if required).

Requirements:

• Bachelor's degree in Legal with relevant legal experience, and expert in compliance or other control-related function in the financial services firm, legal/consulting firm
• Expertise in laws, rules, regulations, risks and typologies for Singapore regulations
• Paralegal experience and/or versed in legal analysis, interpretation and its documentation
• Understanding of control and compliance risk management
• Ability to articulate complex problems and solutions through concise and clear messaging
• Understanding of the regulatory framework of the country /segments of coverage
• Understanding of financial services and products of the countries of coverage
• Proficient in MS Office applications (Excel, Word, PowerPoint)
• Analytical skill and result driven

Send your Cv to linda@forteemp.com.sg

Business Function

Group Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibilities

• Administration and management (technical operations) of firewall infrastructure
• Evaluate and upgrade firewall hardware and/or firmware
• Coordinate with vendor, deploy, configure and manage Firewall devices according to system engineering design
• Coordinate with information security governance team to align IT infrastructure with established standards
• Ensures system compliance with all established information security policies
• Perform period health check and tuning of firewall devices
• Performs technical assessment of any non-well defined or complex firewall change requests prior to implementation
• Performs regular review of firewall rulebases and recommend necessary optimization actions
• Assists Level 1 Support Engineers during problem determination and resolution whenever necessary.
• Planning and recommending overall improvements in firewall management
• Device Access management
• Advanced troubleshooting production problems with RCA and fault diagnosis
• Performance and historical trend analysis
• Implements changes to firewall infrastructure hardware in order to correct errors or enhance functionality
• Develops processes for improving operational efficiencies, as well as identifies/implements automation tools for existing manual processes.
• Prepares technical reports, memoranda, and instructional manuals as documentation of network design and operational requirements.
• Management of network daily activities; incident and problem management
• Responsible to work with respective team members on the review of network architecture and design
• Responsible to work with the respective server and application team's members
• Responsible to work with the respective network vendor's teams for the trouble-shooting, identification and resolution of network problems
• Responsible for network devices, as well as appliances, vulnerability review and assessment.
• Responsible for network devices, as well as appliances, change implementation review and assessment
• Responsible to conduct pre / post implementation plan review
• Responsible to conduct and train Level 1 engineers, i.e. to empower and equipped the L1 engineers with the knowledge to run and maintain Data center network
• Coordinate with information security governance team to align IT infrastructure with established standards
• Change requests prior to implementation
• Advanced troubleshooting production problems with RCA and fault diagnosis
• Design and monitor operations metrics on a monthly basis to keep track of key operation metrics
• Ready to work in shifts including public holidays
• Ready to be on call for 24x7 support during shifts

Requirement

• Experience: Minimum 8 years firewall operations and/or management role
• Certification : CCSA, CCSE, JNCIA-FWV, JNCIA-SEC, JNCIS-SEC (Preferred but not mandatory CISSP, CISM, ITIL Foundation)
• Checkpoint Firewalls, Juniper Netscreen / SRX Firewalls, VPN Technologies, DNS, NTP, 2 Factor Authentication technologies.
• Ability to work independently or as a team player.
• Experience in highly complex data center network design and support
• Experience with Cisco and Arista products specially DCI technology
• Experience with Cisco and Arista Software Define network (ACI, DNAC, etc)
• Strong hands on experiences on Fabric Patch, OTV, VPC+, Vxlan, Mlag, MP-BGP
• Knowledge and experience in employing and using various networking trace tools, i.e. Sniffer, Wireshark, riverbed net profiler, NetBrain, Gigamon and etc.
• Pro-active, dynamic and with good analytical/conceptual thinking.
• Certifications such as CCIE or above level in networking is an advantage
• Python or Linux shell scripting skill is a plus

Apply Now

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognises your achievements.

My fintech client is looking to grow their IT security team. This is a full time, permanent position

Role

We are looking for a motivated IT Security Analyst to join our team and play a vital role in protecting our organization's IT infrastructure and data. Responsibilities include identifying, assessing, and mitigating IT risks, ensuring compliance with regulations, and supporting IT security operations.

Responsibilities:

• Conduct regular threat, risks, and vulnerability assessments.
• Assess technologies against cybersecurity standards.
• Identify, analyze, and prioritize IT security risks.
• Develop and implement risk mitigation strategies and controls.
• Maintain and update the organization's risk register.
• Stay updated on relevant IT security regulations and standards.
• Develop and implement security policies and procedures.
• Monitor and audit compliance activities and report on status.
• Monitor security logs for suspicious activity and investigate incidents.
• Assist with incident response and security tool deployment.
• Collaborate with IT operations, development, and other units to promote security awareness.
• Provide guidance and training on security policies and procedures.
• Collaborate with external auditors and regulators and prepare management reports on IT security posture.

Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, or related field.
• At least 2 years of experience in IT security, risk management, and compliance.
• Strong understanding of IT security concepts, frameworks, and methodologies.
• Working knowledge of relevant IT security regulations and standards.
• Experience with security tools (e.g., vulnerability scanners, SIEM, IDS/IPS).
• Certifications such as CISA, CISM, or CISSP are advantageous.
• Knowledge in PHP, C++, and Java programming is a plus.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.
• Self-driven, detail-oriented, and able to work independently or in a team.

APPLY NOW! Interviews are ongoing! Email to dayna.chiam@stellar-link.com

We regret to inform that only shortlisted candidates would be notified.

Chiam Lee Ping Dayna

Consultant

Reg. No: R1764404

Stellar- Link Partners Pte Ltd (EA License: 21S0698)

This is a 12 months contract assigned to our client

Work Location: To be confirmed (during interview)

Salary Range : $5,000-$7,500

Job Description

Top Mandatory skills

1. Azure native security

2. Security Incident response

3. Familiar with at least 2 of below security tooling upkeeping:

SIEM, Endpoint Detect and Response, Endpoint Anti-virus, Next Gen Firewall, VA Scanner

Skills which are good to have / optional

1. Hardening CIS benchmark

2. Impact analysis report drafting, testing of patches

3. Government compliance standards familiarity

4. Knowledge on Cloud Application Architecture