Total 14 Manager Management job vacancies in Legal / Public / Security category in Malaysia

About Us

At Dyson, we demand the highest standard of performance from the technologies we engineer. Our people expect the same from the technology that supports them. We are a community that appreciates and advocates better engineering. A community of pioneers.

Dyson IT is mid-transformation. Our aim, to create robust IT architecture, to manage data effectively and efficiently and continue to grow our world-class team. A team who is strategic, enabling business acceleration, growth and success.

Our Cybersecurity team

It’s no secret that our intellectual property is massively critical to our success. But did you realise that Dyson owners are all over the world trusting us to keep their data safe too? So how do we protect the valued owners of Dyson products, our suppliers, our staff, and our partners? Dyson’s Global Cyber Security department provides round the clock protection with teams of dedicated security professionals together with advanced products that we continue to iterate on to ensure contiguous coverage in every aspect of our business.

Cybersecurity at Dyson follows a product model, where we have public services that all of our stakeholders consume and adhere to. This ensures that all those we work with know what to expect from us, and how to work effectively with cybersecurity at the centre of their activities. This is a continuing area of development that the whole cybersecurity team is focused on creating. We are working hard to leverage curtting-edge technology, including LLMs and AI to automate processes so that our team can focus on getting good data and ensuring that we have clear visibility of everything that is happening through the entire value chain and can react at a moments notice anywhere in the world.

Our cybersecurity team is a geographically diverse group with one clear mission, Keep Dyson’s secrets, secret. That means we have a world-class cyber defence capability, including a global SOC, dedicated engineering teams that work hand-in-glove with IT to ensure comprehensive coverage of every system, every project from inception, celebrating go-live, and strong lifecycle engagement so that we can meet our internal and external responsibilities.

About Us

At Dyson, we demand the highest standard of performance from the technologies we engineer. Our people expect the same from the technology that supports them. We are a community that appreciates and advocates better engineering. A community of pioneers.

Dyson IT is mid-transformation. Our aim, to create robust IT architecture, to manage data effectively and efficiently and continue to grow our world-class team. A team who is strategic, enabling business acceleration, growth and success.

Our Cybersecurity team

It’s no secret that our intellectual property is massively critical to our success. But did you realise that Dyson owners are all over the world trusting us to keep their data safe too? So how do we protect the valued owners of Dyson products, our suppliers, our staff, and our partners? Dyson’s Global Cyber Security department provides round the clock protection with teams of dedicated security professionals together with advanced products that we continue to iterate on to ensure contiguous coverage in every aspect of our business.

Cybersecurity at Dyson follows a product model, where we have public services that all of our stakeholders consume and adhere to. This ensures that all those we work with know what to expect from us, and how to work effectively with cybersecurity at the centre of their activities. This is a continuing area of development that the whole cybersecurity team is focused on creating. We are working hard to leverage curtting-edge technology, including LLMs and AI to automate processes so that our team can focus on getting good data and ensuring that we have clear visibility of everything that is happening through the entire value chain and can react at a moments notice anywhere in the world.

Our cybersecurity team is a geographically diverse group with one clear mission, Keep Dyson’s secrets, secret. That means we have a world-class cyber defence capability, including a global SOC, dedicated engineering teams that work hand-in-glove with IT to ensure comprehensive coverage of every system, every project from inception, celebrating go-live, and strong lifecycle engagement so that we can meet our internal and external responsibilities.

About the role

The Cyber Security Head of Product Management is focused on standardising our internal cybersecurity capabilities and providing them as easy-to-consume services to the wider business. They will ensure that our services meet and exceed expectations to the business and external and internal stakeholders. It is suited for an experienced technology delivery expert with a keen focus on realising transformational business outcomes. They have direct line management of a team of product managers, and program management staff who are accountable for the entire lifecycle of our cybersecurity services and platforms from product ideation, requirement definition, engineering backlog, through to operational targets, and retirement. The Head of Product Management is expected to bring together product management and the programme delivery office within Cybersecurity to take on direct management of large Cyber transformation programmes (including global Cyber Fusion Centre, SOC, shift lead transition, etc) for both globally, including coordination and collaboration with other IT pillars for delivering joint success outcomes.

In addition to ongoing execution in a rapidly changing environment, the Head of Product Management is responsible for the Dyson Cybersecurity PMO setting up and maintaining a high quality project management methodology (both Agile and Waterfall - depending on project). They also ensure all aspects of change (both business and technical) are managed and implemented through the lifecycle each project working with other IT teams and business functions as necessary.

Key accountabilities

Product, Programme, project portfolio management and delivery

• Work together with the Cyber Security Leadership Team and Internal customers including R&D, IT, and markets, to build a "service led” cybersecurity capability and maintain detailed programme plan to deliver all Cyber projects with up to a 3 year horizon.
• Create a robust “virtuous cycle” of operational challenges, new capability introduction, internal customer demand, and global compliance requirements to ensure that a product roadmap is continuously maintained providing a clear picture of the cybersecurity posture and future to all stakeholders
• Set up and maintenance of a standard project management methodology
• Ensure Cyber programmes and projects are structured ,well planned and executed
• Manage the key interdependencies within the Cyber and Group IT roadmap BAU releases and those external to Group IT
• Works with Global IT Head of Programme Management to manage changes in road map direction, scope,costs, resources and timing
• Provide direction for all project risks and issues ensuring effective mitigations and resolutions are in place escalating in project governance where necessary.
• Manage supplier relationships to ensure cost effective and high quality delivery across all projects

Governance and stakeholder management

• Ensure all projects are clearly defined with assumptions and success criteria agreed with stakeholders in the setup.
• Define pragmatic but robust project governance across the portfolio
• Provide direction for all programmes and large projects including escalation path for all risks and issues.
• Oversee Programme Manager to ensure programmes have the appropriate level of Stakeholder sponsorship and engagement
• Ensuring IT Governance and Cross Pillar Support is maintained throughout Programme lifecycle.
• Ensure quality of business cases created for projects in close partnership with Business Stakeholders.
• Oversee the Capex & OPEX budget for Cyber BAU services and projects, and report monthly to Group Finance and Global IT Head of Programme Management.

Team Leadership

• Line management of a team of Product Managers.
• Line management of a team of Project Managers practicing DSDM/AgilePM and PRINCE2 waterfall delivery.
• Take personal accountability for quality and accuracy of Cyber project management performance and deliverables. Do not accept ‘average’ or ‘Ok’, only excellence is acceptable
• Use predefined template to map out development goals with each member of the team in addition to their yearly objectives. Ensure these are tracked closely with regular structured 1:1s providing coaching and supervised work activities where appropriate.

About you

• Strong strategic background with an ability to synthesize large programs of work into a product strategy
• Change Management experience with strong cross-org communication skills
• Good knowledge of programme and project management methods including DSDM/Agile PM and PRINCE2.
• A proven record in IT/Cyber transformation programme delivery. Ideally gained in strategic complex projects for large organisations.
• In depth knowledge and experience of all stages of the project and programme lifecycle, including development of business cases, mobilisation of programmes.
• Ability to develop a strong programme team, potentially across multiple organisations and locations.
• Budget management and financial reporting.
• Business case development and benefit realisation.
• Experience in leading complex and large value tender/vendor selections.
• Strong interpersonal and communication skills(both verbal and written).
• Ideally, you are Six Sigma trained and certified
• Ideally, you have both a technical degree and a business degree

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Internal Security Risk Management & Governance team is responsible for managing and mitigating information security risks posed within the organisation. To ensure that the company's risk management and governance strategies are up to date and aligned across the organisation, this team is responsible for regular industry benchmarking and working with stakeholders from cross-functional teams to perform regular risk assessments and align risk mitigation strategies. This team is also responsible for managing the optimization, operation, training, and data analysis of the internal threat platform and UEBA (User and Entity Behavior Analytics) platform within the company.

Responsibilities

- Develop and maintain the organization's insider risk security governance framework, including policies, procedures, and standards that align with industry best practices and regulatory requirements.

- Conduct regular security risk assessments to identify vulnerabilities and risks, and work with relevant departments to develop mitigation strategies.

- Provide guidance and support for compliance with data protection laws, regulations, and standards (e.g., GDPR, ISO 27001, SOC 2).

- Coordinate with IT and business units to ensure insider threat security measures are integrated into technology projects and business processes.

- Translate business and technology requirements into relevant insider threat rules for operational teams to implement

- Monitor and report on the effectiveness of security controls and the status of security risks to senior management.

- Develop and lead security awareness training programs to educate employees on security best practices and emerging threats.

- Stay abreast of the latest security trends, threats, and technologies to continuously improve the organization's insider threat security posture.

Minimum Qualifications

- Bachelor's or master's degree in Information Security, Computer Science, Information Technology, or a related field.

- Professional certifications such as CISSP, CISM, CRISC, or CGEIT are highly desirable.

- A minimum of 5 years of experience in information security, risk management, or IT governance, with at least 2 years in a leadership role.

- Strong knowledge of information security principles, frameworks (e.g., NIST, ISO 27001), and regulations (e.g., GDPR, CCPA).

- Experience with security risk assessment methodologies and tools.

- Familiarity with data analysis tools and software to support risk analysis and reporting efforts, ensuring data-driven decision-making in the risk management process.

- Skilled in creating and maintaining risk registers, developing risk treatment plans, and effectively communicating risk posture to stakeholders at all levels of the organization.

- Excellent communication and interpersonal skills, with the ability to engage and influence stakeholders at all levels.

- Strong analytical and problem-solving skills.

- Proven ability to manage and prioritize multiple projects and tasks.

Preferred Qualifications

- Experience with designing, implementation and operation of commercial or in-house UBA/UEBA solutions (e.g., Splunk, Exabeam) are highly desirable

- Experience with threat modeling methodologies (e.g., STRIDE, PASTA) to analyze and assess security threats within software applications, systems, and networks.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Company: Nissan Motor (Thailand) Co., Ltd.

Working Location: Nissan Security Office , Bangna-Trad KM.21, Samut Prakarn, Thailand

Hiring Condition: Permanent

Job Description

• Manage both the strategic and operational teams of the security department in Thailand.
• Identify and evaluate risks and critical factors within the organization and business units, develop and implement a comprehensive security protocol and process.
• Align security measures with Business Continuity Management/Plan (BCM/P) to ensure business resilience, especially during crises.
• Manage and control the Information Security Process and System, conduct Information Security Risk Assessments to identify potential threats, implement and maintain systems and methods to protect business secrets and intellectual property.
• Manage business plan with budget to ensure budgetary allocations align with the strategic goals and priorities of the security program.
• Oversee the security guard contract to ensure the safety of individuals, company assets, and buildings, with a focus on crisis management.
• Lead and coach the security team to facilitate personal growth and development.
• Follow and collect security threat intelligence, develop plans and implement preventative measures based on gathered intelligence.
• Stay updated with new technologies and emerging security trends, plan and implement security measures in accordance with the latest industry standards and company policy.
• Coordinate and communicate with relevant government agencies.
• Ensure compliance with regulatory requirements and leverage government resources for enhanced security measures.

Qualification

• Bachelor's degree or higher in any related field.
• A minimum of 7 years of experience in Security Management, Business Continuity Management/Plan (BCM/BCP), or Risk Management.
• At least 3 years of experience in a supervisory or people leader role.
• Proven experience working with a Global company, Large manufacturing, or in an oversea assignment capacity.
• Strong investigative skills, risk mitigation expertise, and the ability to respond effectively to emergencies.
• Demonstrated ability to collaborate with authorities on security matters.
• Possession of a valid driving license and the ability to drive a car.

If you are interested in this job role, please prepare your updated resume or LinkedIn profile for the application process through the Nissan Job Portal.

“Only shortlisted candidate will be contacted for an interview”

For more information about Nissan's products, services, and commitment to sustainable mobility, visit nissan-global.com. You can also follow us on Facebook, Instagram, Twitter and LinkedIn and see all our latest videos on YouTube.

Why Nissan?
You will definitely get the right answers why you should join us through watching the video on YouTube.

Company :

Job Description : 

JOB SUMMARY

This job provides Information Security and Risk Management services for the Organization. Works with peers within security, HM Health Solutions customers and application teams to ensure alignment with current and future security needs. Manages activities of various Information Security personnel. Makes decisions on personnel actions (promotions, hiring, terminations, etc.). Develops talent, addresses resource management, cultivates capabilities of staff, planning and coordination of work, and managing performance. Conducts the oversight of security technology products for network, systems, and data. Controls expenses within the operating unit and is responsible for meeting budget goals. Actively contributes to the Information Security ans Risk Management (ISRM) strategic planning process by working with the Directors to develop and implement department strategic plans and action steps that support the corporate strategic objectives. Actively involved in the coordination, implementation, problem solving, communication, and training of new technologies and processes, as they are developed and moved into the environment. Develops and presents Information Security awareness and training programs.

ESSENTIAL RESPONSIBILITIES

• Perform management responsibilities including, but not limited to: involved in hiring and termination decisions; coaching and development; rewards and recognition; performance management and staff productivity.
• Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.
• Provide oversight of all aspects of project management to ensure continuous improvement of processes: negotiate and collaborate with leadership and staff to develop security solutions and options; develop and adhere to internal standards and strategies; ensure adherence to approved methodologies; coordinate resources, time, contingency plans and risk management.
• Provide leadership to the department: lead and champion organizational change; encourage participation in activities that support relationship development; champion information security innovation; encourage and enforce proper training in regards to security issues.
• Ensure compliance to Corporate and Information Security policies, standards and  procedures.
• Communicate effectively with all levels of the organization: facilitate meetings; plan, design and provide presentations; represent HM Health Solutions with outside entities; prepare divisional procedures, policies, reports and correspondence;  spread awareness of new and existing security threats; provide oversight regarding metrics, funding, budgets and resources. 
• Other duties as assigned or requested.

EDUCATION

Required

• Bachelor’s Degree in Information Security, Information Systems,  Information Assurance, Computer Science or related field

Substitutions 

• 6 years of relevant experience substitution for a Bachelor's Degree

Preferred

• Master’s Degree in Computer Science, Information Security or related field

EXPERIENCE

Required

• 7 - 10 years in Information Security and/or Information Risk Management and/or Information Technology
• 7 - 10 years in developing, communicating and presenting Information Security and Risk Management concepts to varying audiences                  
• 1 - 3 years in mentoring others in a leadership role                            
• 1 - 3 years in Staff Management  
• 1 - 3 years in developing and executing strategic plans to realize business objectives

Preferred

• 10 - 15 years in Information Security and/or Information Risk Management and/or Information Technology
• Experience managing an information security function using the HITRUST Common Security Framework (HITRUST CSF), or the NIST 800-83 cyber security framework                  
• Experience supporting SSAE 16 or SOC 2 Security Trust Principle audits                           
• Experience establishing budgets and meeting fiduciary goals
• Security industry organization participation/leadership (HITRUST, ISACA, InfraGard, ISC2, ISSA, etc.)

LICENSES AND CERTIFICATIONS

Required

• None

Preferred

• Certified Information Systems Security Professional (CISSP) OR
• Certified Information Security Manager (CISM) OR
• Certified in Risk and Information Systems Controls (CRISC) OR
• Information Technology Infrastructure Library (ITIL)

SKILLS

• Knowledge of regulatory requirements such as Health Insurance Portability and Accountability Act (HIPPA), Payment Card Industry Data Security Standards (PCI DSS), and FIPS-140
• Strong teamwork and interpersonal skills                              
• Experience in leading process improvement initiatives                      
• Ability to motivate high performance, multi-discipline teams                            
• Demonstrated competency in project execution
• Demonstrated abilities in relationship management

Languages (Other than English)

None

Travel Requirement
0% - 25%

PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS

Position Type

Office-Based

Teaches/Trains others regularly

Frequently

Travels regularly from the office to various work sites or from site-to-site

Occasionally

Works primarily out-of-the office selling products/services (Sales employees)

Does Not Apply

Physical Work Site Required

Yes

Lifting: up to 10 pounds

Does Not Apply

Lifting: 10 to 25 pounds

Does Not Apply

Lifting: 25 to 50 pounds

Does Not Apply

Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.

Compliance Requirement: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.

As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times.  In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company’s Handbook of Privacy Policies and Practices and Information Security Policy. 

Furthermore, it is every employee’s responsibility to comply with the company’s Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements.

Pay Range Minimum:

Pay Range Maximum:

Base pay is determined by a variety of factors including a candidate’s qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations.  The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets.

Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, age, religion, sex, national origin, sexual orientation/gender identity or any other category protected by applicable federal, state or local law. Highmark Health and its affiliates take affirmative action to employ and advance in employment individuals without regard to race, color, age, religion, sex, national origin, sexual orientation/gender identity, protected veteran status or disability. 

EEO is The Law

Equal Opportunity Employer Minorities/Women/Protected Veterans/Disabled/Sexual Orientation/Gender Identity (https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf)

We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact number below.

For accommodation requests, please contact HR Services Online at HRServices@highmarkhealth.org

California Consumer Privacy Act Employees, Contractors, and Applicants Notice

Overview

We are a leading executive search firm representing a prestigious global banking institution. Currently, we are seeking a seasoned and dynamic professional to lead the Consumer Wealth Banking team, focusing on the Non-Resident Indian (NRI) Wealth Management segment. This leadership role, based in Singapore, is an excellent opportunity for an individual with a deep understanding of wealth management and a proven track record in team leadership within a multinational banking environment.

Key Responsibilities

• Strategic Leadership: Craft and execute strategic plans to enhance the NRI Wealth Management segment, ensuring alignment with broader financial objectives.
• Team Management: Lead and inspire a team of wealth management professionals to achieve excellence, fostering an environment of innovation and growth.
• Client Relations: Oversee high-value NRI client portfolios, delivering bespoke financial advice and solutions that meet their unique needs.
• Business Development: Identify and pursue new business opportunities within the NRI community, aiming to expand the institution's wealth management services.
• Risk Management: Uphold strict regulatory and compliance standards, effectively managing risks to safeguard client and institutional interests.
• Performance Monitoring: Assess team performance against targets, taking action to ensure success and drive segment growth.

Requirements

Qualifications

• Experience: Minimum of 10 years in wealth management, with a focus on NRI clients preferred. At least 2 years of leadership experience in a multinational banking context is essential.
• Education: Bachelor’s degree in Finance, Business Administration, or a related field. Additional qualifications in wealth management or financial planning are advantageous.
• Skills: Outstanding leadership and managerial abilities, strategic mindset, and in-depth knowledge of wealth management products and services. Excellent communication, negotiation, and client relationship skills are critical.
• Other: Must be eligible to work in Singapore.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Internal Security Risk Management & Governance team is responsible for managing and mitigating information security risks posed within the organisation. To ensure that the company's risk management and governance strategies are up to date and aligned across the organisation, this team is responsible for regular industry benchmarking and working with stakeholders from cross-functional teams to perform regular risk assessments and align risk mitigation strategies. This team is also responsible for managing the optimization, operation, training, and data analysis of the internal threat platform and UEBA (User and Entity Behavior Analytics) platform within the company.

Responsibilities

The Internal Security Risk Management & Governance Manager will research industry best practices and technologies, then work with stakeholders from various cross-functional teams to develop strategies to mitigate the potential impact of risk materialisation. Based on formulated strategies, the manager will develop and implement policies, procedures, and controls to prevent, detect, and respond to various risks that could impact the confidentiality, integrity, and availability of the organization's systems, data, and other critical assets.

- Perform risk assessment based on Internal Security risks; Identify and assess potential information security risks posed within the organization and the existing policies/procedures/controls mitigating such risks.

- Assess and develop overall mitigation strategies across the company to minimize the impact of relevant incidents.

- Research industry best practices and technologies, perform industry benchmarking and gap analyses.

- Develop and implement internal security risk management programs (e.g. comprehensive audit loggings, insider threat detections, privileged access management & governance), procedures, and controls to prevent, detect, and respond to relevant incidents.

- Operate insider threat detection programs and manage business stakeholders to design programs based on business understanding and risk scenarios.

- Work with stakeholders from engineering, SecOps, IT, legal, HR, Ethics to ensure that all aspects of internal information security risk are addressed.

- Develop and maintain relationships with internal and external partners to stay current on industry best practices related to information security risk management, making recommendations for action for senior management.

- Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions.

Qualifications

- Bachelor's degree in a relevant field, such as information security, risk management, or business administration.

- At least 5 years of experience in a similar role, with a proven track record of managing internal security risk and consultancy experience is a bonus.

- Experience developing and implementing internal security risk management policies, procedures, and controls. Knowledge of risk assessment methodologies and tools.

- Calm and composed personality, a strong inclination towards learning, and a team-oriented mindset.

- Team builder, strong written/verbal communication and excellent teamwork skills with the ability to interact effectively with stakeholders at all levels of the organization; strong analytical and problem-solving skills.

- Self-driven and results-oriented, enjoys challenging tasks, demonstrates enthusiasm for work, and can handle job pressures.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Internal Security Risk Management & Governance team is responsible for managing and mitigating information security risks posed within the organisation. To ensure that the company's risk management and governance strategies are up to date and aligned across the organisation, this team is responsible for regular industry benchmarking and working with stakeholders from cross-functional teams to perform regular risk assessments and align risk mitigation strategies. This team is also responsible for managing the optimization, operation, training, and data analysis of the internal threat platform and UEBA (User and Entity Behavior Analytics) platform within the company.

Responsibilities

- Develop and maintain the organization's insider risk security governance framework, including policies, procedures, and standards that align with industry best practices and regulatory requirements.

- Conduct regular security risk assessments to identify vulnerabilities and risks, and work with relevant departments to develop mitigation strategies.

- Provide guidance and support for compliance with data protection laws, regulations, and standards (e.g., GDPR, ISO 27001, SOC 2).

- Coordinate with IT and business units to ensure insider threat security measures are integrated into technology projects and business processes.

- Translate business and technology requirements into relevant insider threat rules for operational teams to implement

- Monitor and report on the effectiveness of security controls and the status of security risks to senior management.

- Develop and lead security awareness training programs to educate employees on security best practices and emerging threats.

- Stay abreast of the latest security trends, threats, and technologies to continuously improve the organization's insider threat security posture.

Minimum Qualifications

- Bachelor's or master's degree in Information Security, Computer Science, Information Technology, or a related field.

- Professional certifications such as CISSP, CISM, CRISC, or CGEIT are highly desirable.

- A minimum of 5 years of experience in information security, risk management, or IT governance, with at least 2 years in a leadership role.

- Strong knowledge of information security principles, frameworks (e.g., NIST, ISO 27001), and regulations (e.g., GDPR, CCPA).

- Experience with security risk assessment methodologies and tools.

- Familiarity with data analysis tools and software to support risk analysis and reporting efforts, ensuring data-driven decision-making in the risk management process.

- Skilled in creating and maintaining risk registers, developing risk treatment plans, and effectively communicating risk posture to stakeholders at all levels of the organization.

- Excellent communication and interpersonal skills, with the ability to engage and influence stakeholders at all levels.

- Strong analytical and problem-solving skills.

- Proven ability to manage and prioritize multiple projects and tasks.

Preferred Qualifications

- Experience with designing, implementation and operation of commercial or in-house UBA/UEBA solutions (e.g., Splunk, Exabeam) are highly desirable

- Experience with threat modeling methodologies (e.g., STRIDE, PASTA) to analyze and assess security threats within software applications, systems, and networks.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

As the leading European Union bank, and one of the world’s largest financial institutions with an uninterrupted presence in the region since 1860, BNP Paribas offers a wide range of financial services for corporate, institutional and private investors spanning corporate and institutional banking, wealth management, asset management and insurance.

We passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued and encourage applicants of all backgrounds, including diversity of origin, age, gender, sexual orientation, gender identity, religion applicants who may be living with a disability. We have a number of internal employee networks in place to empower our staff to act and challenge the status quo.

• BNP Paribas PRIDE is highly active in favour of the LGBTQIA+ community
• BNP Paribas MixCity which fosters better representation of women at all levels of the organization
• Ability, the mutual aid network for employees with a disability or a disabling or chronic illness
• BNP Paribas CulturAll which celebrates diverse backgrounds

BNP is committed to financing a carbon-neutral economy by 2050. The Group is a founding member of the Net-Zero Banking Alliance and has set up its own Low Carbon Transition Group to support its clients through their energy transitions.

https://careers.apac.bnpparibas/

More information
BNP Paribas - Diversity & Inclusion Journey
BNP Paribas - The Bank Of Green Changes

Award Obtained
BNPP has won Top employer Europe award in a 10th consecutive year

Main Scope
Role of Wealth Management APAC Chief Information Systems Security Officer, being understood this role includes delegations from WM CISO for the team located in Asia Pacific territory and fully participates in overall WMIS Cybersecurity and IT Risk objectives.

Main Responsibilities

WM APAC CISO

• Manage the WM IT Risk and Security local team in APAC by managing the recruitment, performances review as well as training and career-path development
• Coordinate with APAC WM security actors, including India-based resources
• Coordinate with APAC WM IT teams on risk and security topics, while promoting a secure development and deployment culture
• Assist for a Risk Treatment for any APAC WM issue, based on the WM GAIM generic process
• Contribute to the IT Risk and Cybersecurity Governance including procedural framework, Cybersecurity awareness and communication for the APAC scope.
• Periodic reporting of security status to WM Global CISO as well as APAC Management

IT security compliance

• Ensure the alignment with the Group and WM GAIM security policies, for IT production assets including the security hardening, vulnerability and patch management.
• Ensure the protection of WM business data with an adequate security level of WM assets, based on project assessment and production review processes
• Ensure the compliance with regulatory bodies requirements, including for APAC (HKMA, MAS), EU (GDPR), Switzerland (FINMA)
• Leveraging on a deep knowledge of Security standards such as NIST, CIS,ISO2700x , ensure the compliance with the IT security requirements
• Identify the process gaps and provide solutions

Production Security oversight (delegation on WM APAC scope)

• Identify the production security requirements and ensure a smooth integration of WM assets within APAC IT Production, including network security such as flow opening and Application Zoning compliance
• Identify the compliance level of the production environment and contribute to remediation actions definition while keeping the oversight on actions progress
• Keep an overview and ensure the adequate Vulnerability Management at the server and middleware level leveraging on production scans and liaising with relevant production stakeholders
• Contribute to the management of Cybersecurity incidents

Application Security Testing Factory

• Ensure the effective implementation of Secure SDL including the DevSecOps platform and Threat modelling practices.
• Identify and implement the latest security standards for internet facing and internal assets
• Improve the Vulnerability Management at the application level by managing the platforms or services with providers (including Static Acceptance Security Testing – SAST, Dynamic Acceptance Security Testing – DAST and Software Composition Analysis – SCA).
• Perform Security risk assessments and reviews to be presented to respective committees
• Ensure the adequate security level for all WM GAIM applications, whatever the IT project manager’s location and hosting provider

CyberSecurity Program (delegation on WM APAC scope)

• Contribute to the security initiatives expected by the WM Cybersecurity Program

Coordination with IT Security actors

• Reporting line to the WM GAIM Global CISO: alignment on the objectives and means, contribution to the different global reporting (WM Cybersecurity Committee, Wholesale Application Security Dashboard…)
• Coordination and control of security activities performed by APAC CIB Business Information Security and Production Security teams, including project assessment from production point of view, production security review, user security awareness for the WM scope.
• Coordination with the Swiss Security team concerning integration of WM assets within Swiss IT production
• Keeping abreast of initiatives by the IT Security community within the Group and other IT Security stakeholders within the Group

Qualifications

Essential Banking Knowledge

Banking Knowledge and understanding of Wealth Management specificities

General Knowledge

International and APAC banking regulations

Deep Knowledge

Essential Technical Knowledge

Program/Project Management

Deep Knowledge

Knowhow of ASIA regulatory requirements

Deep Knowledge

Knowledge of standard IT Security concepts and methodologies

Deep Knowledge

Deep understanding of cybersecurity threats and remediation options

Deep Knowledge

IT Security Risk Assessment and Risk Management

Deep Knowledge

Knowledge of understanding digital transformation and mobile technologies and Cloud (Containers Docker, Kubernetes).

Good Knowledge

Knowledge of emerging technologies (NFT, encryption)

Good Knowledge

Essential Personal Skills

Communication skills – Ability to interact throughout oral and written communication skills

Deep Knowledge

Knowledge of emerging technologies (NFT, encryption)

Deep Knowledge

Knowhow of ASIA regulatory requirements

Deep Knowledge

Must be motivated, and able to work independently as well as part of a team

Deep Knowledge

Must demonstrate ethical responsibility, maturity, and discretion

Deep Knowledge

Qualifications and Experience

• 10 years' experience in information security evaluation and design of technical architectures
• Functional as well as technical knowledge of the applications used within BNP Paribas
• Knowledge of the Norms and Standards of the BNP Paribas Group, in particular with respect to ITRM & IT Security Norms and Policies
• Team management experience is a must
• Preferred Master level in Computer science and Information Security

Cybersecurity / Technical Value-added Competencies

ü Cybersecurity Governance: framework (NIST / CIS framework), Security incident management, Logging & Detection (SIEM – ELK products)

ü DevSecOps: CI/CD toolchain knowledge of various tools

o Source code management: sonarQuabe, bibucket, github/gitlab

o Security application scanning (e.g. Sonatype/NexusIQ, Fortify, AppSpider, Qualys, DTR scan…)

o Automation/orchestration: Ansible tower, Jenkins

Application Security: Threat modeling, Security architecture key concepts, exposure to various development framework and applicative landscape (Java/Web, Mobile applications, containerization/docker, kubernetes, API management, Cloud security)

Vulnerability management

• Nexpose, Nessus

Other Value-added Competencies

• Advanced IT security certifications may be advantageous (such as CISM, CCSP, CSK, CEH, CISSP…).
• Operational Risk and Permanent Control
• Data Analytics solutions (Tableau, PowerBI)and strong expertise in Dashboard/reporting

Responsibilities:

Legal

• Structure, draft and review legal documentation.
• Where necessary, assist in the negotiation of agreements and provide transactional legal support and guidance to the group’s Singapore business lines.
• Participating and providing support from a legal coverage and support on group-wide projects and the launch of new business lines and products.
• Liaise with and manage external counsel locally and internally to address legal needs of the group.
• Manage relationships and communication with regulatory bodies and authorities as well as industry groups.

Compliance & Risk Management

• Ensure compliance with the requirements applicable to the Asset Management licence.
• Prepare reports for Regulatory Authorities, Board of Directors and Management team.
• Ensure timely and accurate regulatory reporting for licensed entity.
• Keep abreast of applicable regulatory and statutory matters relevant to the industry to ensure that management is fully informed of current, new or proposed legislations.
• Responsible for risk assessment and risk review processes at client onboarding phase including AML/CDD/KYC/FATCA/CRS, ongoing review and administration.
• Review and maintain organisation’s Compliance and Risk Management policies and development of key risk and compliance documentation including FATCA/CRS review, BCP, Disaster Recovery Plan, Risk Assessment, Risk Management Processes and Procedures, Enterprise-Wide Risk Assessment process for the licensed entity.
• Provide training and ensure adherence with compliance and risk management policies and protocols by all staff.
• Ensure that a rigorous Operation Risk and Internal Control structure is established and implemented throughout the business and that appropriate controls are implemented.

Requirements:

• Bachelor of Laws degree with ICA qualification preferred.
• Minimum of 7 years of relevant working experience in the Asset Management, Wealth Management industry.
• Experience in implementing compliance and risk management framework in the financial industry.
• Excellent communication skills and provide proactive legal guidance.
• Ability to build and maintain effective internal and external relationships.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Internal Security Risk Management & Governance team is responsible for managing and mitigating information security risks posed within the organisation. To ensure that the company's risk management and governance strategies are up to date and aligned across the organisation, this team is responsible for regular industry benchmarking and working with stakeholders from cross-functional teams to perform regular risk assessments and align risk mitigation strategies. This team is also responsible for managing the optimization, operation, training, and data analysis of the internal threat platform and UEBA (User and Entity Behavior Analytics) platform within the company.

Responsibilities

The Internal Security Risk Management & Governance Manager will research industry best practices and technologies, then work with stakeholders from various cross-functional teams to develop strategies to mitigate the potential impact of risk materialisation. Based on formulated strategies, the manager will develop and implement policies, procedures, and controls to prevent, detect, and respond to various risks that could impact the confidentiality, integrity, and availability of the organization's systems, data, and other critical assets.

- Perform risk assessment based on Internal Security risks; Identify and assess potential information security risks posed within the organization and the existing policies/procedures/controls mitigating such risks.

- Assess and develop overall mitigation strategies across the company to minimize the impact of relevant incidents.

- Research industry best practices and technologies, perform industry benchmarking and gap analyses.

- Develop and implement internal security risk management programs (e.g. comprehensive audit loggings, insider threat detections, privileged access management & governance), procedures, and controls to prevent, detect, and respond to relevant incidents.

- Operate insider threat detection programs and manage business stakeholders to design programs based on business understanding and risk scenarios.

- Work with stakeholders from engineering, SecOps, IT, legal, HR, Ethics to ensure that all aspects of internal information security risk are addressed.

- Develop and maintain relationships with internal and external partners to stay current on industry best practices related to information security risk management, making recommendations for action for senior management.

- Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions.

Qualifications

- Bachelor's degree in a relevant field, such as information security, risk management, or business administration.

- At least 5 years of experience in a similar role, with a proven track record of managing internal security risk and consultancy experience is a bonus.

- Experience developing and implementing internal security risk management policies, procedures, and controls. Knowledge of risk assessment methodologies and tools.

- Calm and composed personality, a strong inclination towards learning, and a team-oriented mindset.

- Team builder, strong written/verbal communication and excellent teamwork skills with the ability to interact effectively with stakeholders at all levels of the organization; strong analytical and problem-solving skills.

- Self-driven and results-oriented, enjoys challenging tasks, demonstrates enthusiasm for work, and can handle job pressures.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

RESPONSIBILITIES

1. Reviewing and drafting service agreements and contract documents including joint ventures, M&A deals, private equity transactions and restructurings (including cross-border transactions in Asia, Australia and Europe).

2. Monitor, coordinate & advise, cross-functional stakeholders on legal issues including IPR / risk implication on possible legal risk and provide mitigation strategies.

3. Monitor legal and risk and give guidance on the acceptable assumption of risk.

4. Keep abreast of regulatory developments within or outside of the company as well as evolving best practices in compliance control.

5. Managing legal disputes and negotiate terms with customers, partners and suppliers.

6. Develop and oversee control systems to prevent or deal with violations of legal/compliance guidelines

7. Support the Business Unit Heads to ensure that team members work effectively and proactively with business teams and industry participants to advise and assist in the management of legal, risk and compliance matters

8. Coordinate and liaise with external counsels.

Requirements :

1. Bachelor of Law Degree (LLB) or equivalent from a reputable university

2. 7 to 10 years of work experience in a law firm or in-house

3. Sound knowledge in company law, contract law, product liability law, and mergers and acquisitions.

4. Experienced in advising on complex international transactions and in organizing and managing transactions, including cross-border transactions.

5. Demonstrate excellent document drafting skills. You should demonstrate strong communication and analytical skills along with a high level of commercial awareness.

6. Strong background in corporate work, probably gained from practice in a law firm or as an in-house counsel.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Internal Security Risk Management & Governance team is responsible for managing and mitigating information security risks posed within the organisation. To ensure that the company's risk management and governance strategies are up to date and aligned across the organisation, this team is responsible for regular industry benchmarking and working with stakeholders from cross-functional teams to perform regular risk assessments and align risk mitigation strategies. This team is also responsible for managing the optimization, operation, training, and data analysis of the internal threat platform and UEBA (User and Entity Behavior Analytics) platform within the company.

Responsibilities

The Internal Security Risk Management & Governance Manager will research industry best practices and technologies, then work with stakeholders from various cross-functional teams to develop strategies to mitigate the potential impact of risk materialisation. Based on formulated strategies, the manager will develop and implement policies, procedures, and controls to prevent, detect, and respond to various risks that could impact the confidentiality, integrity, and availability of the organization's systems, data, and other critical assets.

- Perform risk assessment based on Internal Security risks; Identify and assess potential information security risks posed within the organization and the existing policies/procedures/controls mitigating such risks.

- Assess and develop overall mitigation strategies across the company to minimize the impact of relevant incidents.

- Research industry best practices and technologies, perform industry benchmarking and gap analyses.

- Develop and implement internal security risk management programs (e.g. comprehensive audit loggings, insider threat detections, privileged access management & governance), procedures, and controls to prevent, detect, and respond to relevant incidents.

- Operate insider threat detection programs and manage business stakeholders to design programs based on business understanding and risk scenarios.

- Work with stakeholders from engineering, SecOps, IT, legal, HR, Ethics to ensure that all aspects of internal information security risk are addressed.

- Develop and maintain relationships with internal and external partners to stay current on industry best practices related to information security risk management, making recommendations for action for senior management.

- Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions.

Qualifications

- Bachelor's degree in a relevant field, such as information security, risk management, or business administration.

- At least 5 years of experience in a similar role, with a proven track record of managing internal security risk and consultancy experience is a bonus.

- Experience developing and implementing internal security risk management policies, procedures, and controls. Knowledge of risk assessment methodologies and tools.

- Calm and composed personality, a strong inclination towards learning, and a team-oriented mindset.

- Team builder, strong written/verbal communication and excellent teamwork skills with the ability to interact effectively with stakeholders at all levels of the organization; strong analytical and problem-solving skills.

- Self-driven and results-oriented, enjoys challenging tasks, demonstrates enthusiasm for work, and can handle job pressures.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

• Serve as a senior advisor to the CNGB.
• Subject matter expert on emergency management preparedness and security measures governing and protecting the National Guard's most sensitive information, activities, technology, and operations.
• Administer applicable portions of the Chief of Staff Security Education and Awareness program to ensure a knowledgeable work force.

Responsibilities :-

• Lead End-to-End Project Management: Plan, execute, and finalize IT security projects within scope, timeline, and budget, while ensuring all project objectives are met;
• Risk Management: Identify potential security risks and vulnerabilities in projects, potential and existing outsourcing relationships, develop mitigation strategies, and ensure adherence to industry standards and compliance regulations. Monitor and track the progress of risk mitigation plans and provide updates on the status of risk assessments to relevant parties;
• Team Collaboration: Coordinate cross-functional teams, including security analysts, engineers, developers, and stakeholders, to ensure seamless project execution and timely delivery;
• Budget and Resource Management: Define project budgets, allocate resources effectively, and monitor expenditures to ensure optimal resource utilization;
• Communication: Provide regular project updates to stakeholders, sponsors, and executives, outlining project status, risks, and achievements in a clear and concise manner;
• Documentation: Maintain accurate project documentation, including project plans, schedules, status reports, and change requests;
• Vendor Management: Collaborate with external vendors and third-party partners to evaluate, select, and manage security solutions and services;
• Continuous Improvement: Identify areas for process enhancement, implement best practices, and contribute to the evolution of the organization's security project management framework.

Requirements:

• Bachelor's degree in Information Technology, Computer Science, or a related field;
• Proven experience (5+ years) as an IT Security Project Manager, outsourcing / vendor management or similar role;
• Good knowledge of regulatory standards (e.g. MAS Technology Risk Management Guidelines, MAS Notice No. 644 and 655) and their application;
• Industry-recognized certifications such as PMP, CISSP, CCSP, CRSIC, CISM, or equivalent would be an advantage;
• Strong understanding of cybersecurity principles, protocols, and technologies;
• Proficiency in project management and risk assessment software and tools;
• Excellent analytical and problem-solving skills, with the ability to assess complex situations and make sound decisions;
• Excellent interpersonal, communication, leadership skills and stakeholders management skills;
• Ability to manage multiple projects simultaneously and adapt to changing priorities.