Total 945 Strategy Specialist job vacancies in Legal / Public / Security category in Malaysia

Position

Data Security Specialist- Data Security and Endpoint Security

Data Security Specialist is a technical Specialist role within the Data Security Services team and will be responsible for managing, administration and supporting the Data Security and Endpoint Security technologies for the bank.

Person will be the technical point of contact for the Run team and the related activities to data security and will be the last level of escalation for the Security specialists in the team. He/She is also responsible for the technical transition and validation of Security services from other regions to Singapore. He/She will be involved in projects and POC’s that may involve security services. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Specialist on the technologies within data security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France and UK) and Asia remotely from Singapore. France infrastructure represents approximately 80% of the worldwide production activities of CA-CIB in Singapore.

Team works in Europe time zones and this role will be aligned primarily to Paris working hours. Flexible rotations are followed based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect,
• Encryption Solutions: Disk Encryption, File and Folder encryption,
• Database Audit Monitoring solutions
• Email and Web Phishing Prevention solutions.
• Vulnerability Management

Detailed Job Responsibilities

The Specialist has a wide spectrum of responsibilities and actions. Person will be responsible for following (but not limited to) responsibilities in day-to-day work:

As the Specialist of the team, he/she:

• act as the last level of escalation for the team members
• own Incident, Problem and change management process for the team
• assigns technical tasks and manages delegation
• animates the team to encourage collaboration and sharing of practices
• participates to recruitment process for the team

As the Specialist of his/her scope of activity, he/she:

• is actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management
• Is the final technical approver for any changes into Data Security systems and is accountable for any technical changes in the environment from a RUN/BAU perspective
• Is involved in projects like End of Life, New Builds, migrations and technical upgrades of the solution managed by the team
• Participates in global Infra events (like Power down and DR Tests)
• ensures activity is performed in compliance with norms, standards, processes and procedures
• gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting
• ensures documentation is up to date and relevant for use
• lead the continuous improvement initiatives
• responsible to drive and deliver root cause for any high severity issues
• Focus on automation and optimum use of the team to improve efficiency
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

• Work schedule is mainly focused to support Asia and EMEA (Paris) time zone; however, may have to support during non-offce hours for critical incidents or escalation as per the assigned on-call support requirements;
• Rotational Shift schedule is followed;
• Work Hours: 2 PM – 11 PM SGT (with 1 week of General shift 9 AM – 6 PM SGT).

Qualifications and Profile

Functional

• 8 - 10 years of IT Security experience in administration and management of IT Security technologies primarily Symantec Data Loss Prevention, Symantec Endpoint Protection, Email Security, Data Classification and other endpoint & data security solutions;
• Should be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;
• Knowledge of different domains of IT Security;
• Working & hands-on experience in administering the IT Security Solutions;
• Must have experience in working in similar Production setup in Run (Operations) mode;
• Ability to apply risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;
• Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;
• Excellent in analytical, communication and documentation skills;
• Ability to organize work and be able to priories work as per the needs of Production Operation’s needs;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Ability to work independently and as well as a part of team and is able to work under minimal supervision;
• Should have time management skills and able to manage work in fast moving environment;

Technical

• Hands-on experience on Symantec Data Loss Prevention (DLP);
• Highly proficient in data leakage prevention (DLP) technologies - troubleshooting and configuration management;
• Deployment, integration and administration experience of various components of Symantec DLP:

- Symantec Endpoint Protect

- Symantec Web Prevent

- Symantec Email Prevent

- Symantec Enforce

• Must have experience in defining, designing and configuring DLP Policies as per the business requirements;
• Deploy, upgrade and troubleshooting knowledge on Symantec DLP solution;
• Scripting knowledge (Phyton, Regular Expression, Powershell) is desirable;
• Professional Certifications:

- CISSP certified is highly preferred

- Symantec Certified Specialist: Administration of Data Loss Prevention (any version) is highly preferred.

Interested applicants, please email your resume to Shaun Quek Yew Meng

Email: shaunquek@recruitexpress.com.sg

CEI Reg No: R1660732

EA Licence No: 99C4599

Budget between $5k - $7k.

Location will be at Buona Vista

• Builds and maintains strong relationships with key media publications and journalists
• Manages all media pitches and engagement activities, including organising of press briefings, interviews for senior management and development of press materials
• Tracks, measures and monitors mainstream and social media sentiments to understand stakeholders’ perspectives and refine key messages/ narratives
• Acts as a trusted advisor to HR, business heads and other colleagues to ensure alignment of messages and tonality. This also includes being part of a bigger Crisis Comms team to develop crisis management plans in consultation with other business units and stakeholders outside of the organisation
• Develops comms plans in support of organised or other sectoral-level events to raise the visibility of the brand and secure coverage for senior leadership.
• Proactively seeks out opportunities for stakeholder engagements or partnerships that can foster positive brand association and maximise brand exposure for the organisation
• Works effectively within the division to harmonise plans and ensure alignment of key messages and publicity outcomes for other campaigns that runs.

How to Apply: send your resume and indicate role(s) you want to apply to: jocelynchan@recruitexpress.com.sg

Jocelyn Chan| Consultant | Recruit Express Pte Ltd (Healthcare & Lifescience) Company EA Licence number : 99C4599 Personnel EA License: R1331820

ICT Security Systems Engineer and Analytics Specialist - RFQ-ASD-52-2024 - SOW 1 - Original Due to the nature of clients we work with here at Kinexus and the projects these roles will be based on, an Australian Government Top Secret Positive Vetting (TSPV) clearance is essential. These opportunities do not have the ability to obtain sponsorship for a security clearance (including applicants who currently hold a security clearance seeking to upgrade). ABOUT THIS ROLE Experienced Security Systems Engineer and Analytics Specialist required to develop and enhance ASD ICT security systems. The service provider will be responsible for engineering activities and tasks relating to requirements development, system definition, design and development, integration, verification and validation. This role will include responsibility for implementation of major analytic-driven activities to meet required business outcomes. The Specified Person will be expected to demonstrate attributes of SFIA Level of Responsibility 5. Current Top-Secret Positive Vetting (TSPV) security clearance is strongly preferred,…

Click here to view more detail / apply for ICT Security Systems Engineer and Analytics Specialist

The Cloud Security Specialist role is within the Cyber security department of KPMG. The Cloud Security Specialist will help KPMG’s clients to define systems security architectures using various cloud security technologies with a focus on AWS, MS, GCP suite of products.

The Cloud Security Specialist will be required to support business initiatives around cloud security through development in sales and/or technical pre-sales capacity, and providing specialist support to cyber security engagements where required.

The tasks include:

• Support client partners with identifying Cloud Security opportunities.
• Perform the role of sales and/or pre-sales lead for taking KPMG Cloud Security offerings to clients, manage client discussions and preparing commercial proposals.
• Build and manage technology alliance partners to drive new business opportunities and have a good understanding of alliance partner programs available for leverage.
• Drive client outreach initiatives/events for lead generation and build top-of-brand awareness.
• Connect with KPMG ASPAC Cyber network to drive new business opportunities with KPMG SG as Centre of Excellence for Cloud Security.
• Drive training enablement for technology alliance.
• Manage opportunity pipeline, risk management process and engagement contracting.
• Deliver sales commitments to be discussed and agreed with line partner
• Collecting security and functional requirements from clients and turning those into a solution architecture – high level design and low-level design.
• Act as subject matter expert on cloud security technologies, particularly on MS, AWS, GCP and 3rd party tools.
• Implement - configure cloud security technologies.
• Provide specialist support to cyber security engagements where required.

Job Requirements:

• Minimum 10 years of experience in supporting sales and/or technical pre-sales for Cloud Security
• Strong IT background in systems architecture, systems security, systems management and systems administration (minimum 8 years of relevant working experience in related industry)
• Experience in designing target system security architectures for cloud and hybrid systems
• Intermediate and/or advance certifications relating to MS, AWS and GCP
• Strong client and project management abilities coupled with excellent communication, written, analytical, organisational and problem-solving skills

Wipro Limited is a leading global information technology, consulting and business process services company. We harness the power of cognitive computing, hyper-automation, robotics, cloud, analytics and emerging technologies to help our clients adapt to the digital world and make them successful.

A company recognized globally for its comprehensive portfolio of services, strong commitment to sustainability and good corporate citizenship, we have over 220,000 dedicated employees serving clients across six continents. Together, we discover ideas and connect the dots to build a better and a bold new future.

IT Security Specialist - Symantec DLP

Responsibilities

• Manage the different IT Security platforms seamlessly.
• Handle first point escalation for all technical and process issues.
• Provide technical subject matter expertise wherever required.
• Ensure proper communication and quick resolution as a crisis manager.
• Plan and schedule Changes, Coordinating with different stakeholders.
• Escalate issues to the next level and management in a timely manner.
• Perform RCA for Major Incidents related to his / her tower Follow quality / security process defined for the engagement.
• Perform Trend analysis, identify top few incidents and work with respective teams/individuals to minimize the incidents, hardware/software troubleshooting.
• Participate in business meetings with various stake holders on a need basis.
• Take corrective actions based on the analysis performed or issues identified.
• Liaise with different vendors to clarify questions or to resolve issues.
• Liaise with different teams in different geographical zones.
• Work on the service improvements.
• Effort estimation/reviews on need basis for new projects.
• Train/mentor team members.
• Work on knowledge acquisition and update related documents.
• Work on projects related to endpoint security and data security.
• Adhere to different policies set out by the organization and the customer.
• Educate team members and other teams or customers on different security policies.
• Prepare and provide different reports (weekly/monthly/ad-hoc) to the lead or manager as necessary.
• Participate in rotational on-call rota for data security platforms.
• Perform changes or work on incidents during weekends as necessary.

Requirement

Primary Skills:

• Expert Knowledge on Symantec Data Loss Prevention

Secondary Skills:

• Trend Micro Deep Discovery Email Inspector (or experience in any other Sand boxing based Security solution e.g. FireEye, McAfee Advance Threat Detection, Symantec Advance Threat Protection)
  Imperva Secure sphere (Database Audit Monitoring)
• Excellent in analytical skills
• Strong people, project/task management and communication skills
• Experience in defining, implementing, and enforcing enterprise-level security policies and business processes
• Knowledge and working experience in Financial Organizations is desirable
• Knowledge & working experience in IT Security
• In-depth understanding of endpoint and data security solutions
• Symantec Certified Specialist certification is a must: - Administration of Symantec Endpoint Protection
• CISSP certification is preferred.
• Excellent written and oral English communication skills
• Knowledge of French language is preferred

Other Infomation

• Rotational Shift ( 9 Hours / Shift), Work is mainly focused on Asia and Paris time zone; however may have to support in nights and weekend as per on call requirements

We thank all applicants for your interest but regret to inform that only shortlisted candidates would be notified.

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, caste, creed, religion, gender, marital status, age, ethnic and national origin, gender identity, gender expression, sexual orientation, political orientation, disability status, protected veteran status, or any other characteristic protected by law.

The energy of a newsroom, the pace of a trading floor, the buzz of a recent tech breakthrough; we work hard, and we work fast - while keeping up the quality and accuracy we're known for. It's what keeps us inventing and reinventing, all the time. Our culture is wide open like our spaces. We bring out the best in each other through collaboration. Through our countless volunteer projects, we also help network with the communities around us, too. You can do amazing work here. Work you couldn't do anywhere else. It's up to you to make it happen.

What’s The Role:

Bloomberg’s Legal & Compliance Department plays a critical role in supporting our businesses and operations around the world. We move quickly and thoughtfully to help address a variety of complex legal issues that arise across the Company’s various businesses. Our team is made up of talented and hardworking professionals who think creatively and work collaboratively in an open environment to deliver results, drive innovation, and solve difficult problems. We also recognize the value of diversity and inclusion in cultivating a supportive workplace and the importance of giving back to our communities as evidenced by our award-winning pro bono program.

The Legal Negotiations team has frontline responsibility for negotiating the legal terms and conditions of our customer contracts worldwide. Our colleagues depend on us to gain deep product and commercial contract knowledge in order to support them in closing the deal, while protecting our businesses from undue legal risk.

Based in Singapore, you will be an integral part of the Legal Department, working closely and supported by your Negotiations colleagues and In-house Counsel. You will be responsible for negotiating licensing agreements with Bloomberg's customers which range from major financial institutions to government entities across a wide range of fin-tech products and services that are dynamic and often cutting-edge. We'll rely on you to build internal partnerships and balance both the needs and drive of Bloomberg Sales and our customers in a time-sensitive environment.

We'll Trust You To:

• Respond to contract inquiries and negotiate legal terms and conditions with our customers
• Multitask 30+ contract negotiations and projects at a time
• Develop strong partnerships with Legal Counsel, Sales, Product, Contracts and Accounting teams
• Operate in an open and communicative way with our colleagues during all phases of the negotiation
• Be a quick learner who thrives in an increasingly regulated and fast paced environment
• Stay abreast of business sales and product strategies
• Be an active participant in identifying and supporting projects that continuously improve our own operations as well as those that streamline processes between us and our business partners.
• Speak, read, and write fluently in English and Japanese since you will be responsible for covering Japan among other countries throughout APAC. Additional Mandarin language skills a plus

You’ll Need To Have:

• A bachelor's or Law degree or equivalent
• A minimum of 5 years of demonstrated contract experience negotiating legal and commercial terms & conditions with customers or suppliers
• Experience partnering closely with legal counsel
• Strong attention to detail and risk
• Superb work ethic and judgment
• Excellent organization and time management skills
• Superb written and oral communication skills
• Ability to quickly learn and navigate Bloomberg’s proprietary technology, which is an integral part of the contract process workflow
• Adaptable to the changing needs of our business partners and external customers
• A self-starter who is proactive, independent and solution driven
• An enthusiastic teammate, who is reliable, has a positive can-do attitude and is receptive to and actions feedback
• Someone who enjoys an innovative, challenging and ever-changing environment
• Flexibility to work some evening hours to hold conference calls with colleagues in New York

We'd Love To See:

• Strong interpersonal skills and confidence along with excellent customer service
• Experience negotiating software licensing/financial data/technology contracts
• Experience working with demanding Sales partners and customers
• An independent and strategic thinker who is service oriented, forward-thinking, and eager to learn
• Experience working or studying in Japan
• Demonstrated continuous career growth within an organisation

If this sounds like you:

Apply if you think we're a good match. We'll get in touch to let you know what the next steps are, but in the meantime feel free to have a look at: https://www.bloomberg.com/company/what-we-do/

Why Bloomberg?

We’re individuals with diverse backgrounds, talents, and experiences who take on big challenges and create even bigger impact through our work. We’re interested in what makes you you, and how we can create opportunities for you to channel your unique, personal energy and grow to your fullest potential.

Learn more about our office and benefits:

Singapore | www.bloomberg.com/singapore

Bloomberg is an equal opportunity employer and we value diversity at our company. We do not discriminate on the basis of age, ancestry, color, gender identity or expression, genetic predisposition or carrier status, marital status, national or ethnic origin, race, religion or belief, sex, sexual orientation, sexual and other reproductive health decisions, parental or caring status, physical or mental disability, pregnancy or maternity/parental leave, protected veteran status, status as a victim of domestic violence, or any other classification protected by applicable law.

Bloomberg provides reasonable adjustment/accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable adjustment/accommodation to apply for a job or to perform your job. Examples of reasonable adjustment/accommodation include but are not limited to making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you would prefer to discuss this confidentially, please email AMER_recruit@bloomberg.net (Americas), EMEA_recruit@bloomberg.net (Europe, the Middle East and Africa), or APAC_recruit@bloomberg.net (Asia-Pacific), based on the region you are submitting an application for.

Job Description:

• Builds and maintains strong relationships with key media publications and journalists
• Manages all media pitches and engagement activities, including organising of press briefings, interviews for senior management and development of press materials
• Tracks, measures and monitors mainstream and social media sentiments to understand stakeholders’
• perspectives and refine key messages/ narratives
• Acts as a trusted advisor to HR, business heads and other colleagues to ensure alignment of messages and tonality.
• Develops comms plans in support of other sectoral-level events to raise the visibility of the brand and secure coverage for senior leadership.
• Proactively seeks out opportunities for stakeholder engagements or partnerships that can foster positive brand association and maximise brand exposure for the organisation
• Works effectively within the division to harmonise plans and ensure alignment of key messages and publicity outcomes for other campaigns.

Job Requirements

• At least 8-10 years of proven experience in PR and communications in an agency or in-house setting.
• Related healthcare sector experience is a bonus
• Experience working with senior management team and able to translate and deploy management goals into actions
• Excellent interpersonal skills in managing different stakeholders with diverse opinions and backgrounds

Interested candidates can write in to Ann at pharma@recruitexpress.com.sg

Ann Goh Xin Ting
R1875289

Recruit Express Pte Ltd
E.A License: 99C4599

Our Client is a world renowned carrier company with ongoing IT projects and is looking to expand their IT team. They are seeking a highly motivated and experienced Cyber Security Solutions Specialist / Consultant to join our vibrant Information Security Team. As a key contributor, you will play a critical role in implementing, optimizing, and maintaining cutting-edge security solutions that protect our organization from ever-evolving threats.

Working location: Changi, East

Your Impact:

• Become the go-to expert (SME) for our security systems: Leverage your deep understanding to unlock their full potential and ensure maximum protection.
• Architect and execute comprehensive security strategies: Plan, assess, design, and deploy the latest security software and hardware solutions.
• Champion innovative security initiatives: Identify and recommend solutions that strengthen our security posture and stay ahead of emerging threats.
• Guide and educate: Provide expert consultancy, technical guidance, and training to empower other teams.
• Collaborate with stakeholders: Partner with infrastructure teams to design secure solutions and advise on firewall requests.
• Stay vigilant: Continuously research emerging threats and vulnerabilities, proposing effective mitigation strategies.
• Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
• Deliver with excellence: Manage project priorities, deadlines, and deliverables independently with minimal supervision.

What you bring:

• Proven track record: Minimum of 5 years in information security, preferably with application security expertise.
• Certified expertise: Holding recognized certifications like CISSP, CSSLP, or CEH is a plus.
• Proven implementation experience: Demonstrated knowledge of conducting security product POCs and RFQs.
• Hands-on experience: Familiarity with implementing and maintaining tools like EDR, XDR, SOAR, SIEM, UEBA, PAM, AM, and network security solutions.
• Technical prowess: Deep understanding of at least one security area like network design, zero trust, IoT, or cryptography.
• Security-minded: Keen awareness of common web/mobile application vulnerabilities and the ability to mitigate them.
• Communication maestro: Possess strong verbal, written, presentation, and interpersonal skills.
• Positive and proactive: Exhibit drive, initiative, enthusiasm, and a sense of urgency when tackling critical issues.
• Team player: Thrive in both independent and collaborative work environments.

APPLY NOW! Interviews are ongoing! Email to dayna.chiam@stellar-link.com

We regret to inform that only shortlisted candidates would be notified.

Chiam Lee Ping Dayna

Consultant

Reg. No: R1764404

Stellar- Link Partners Pte Ltd (EA License: 21S0698)

Main Responsibilities

Person will be responsible for following responsibilities in day-to-day work:

• Focal Point of contact for Technical management of Menlo Web Isolation Platform (“Menlo”). Person will primarily be responsible for managing the Menlo setup and ensuring the service is available, functional, and up-to-date;
• Propose, plan and execute timely upgrades to ensure that the Menlo setup remains current;
• Propose, plan and deploy the various security related policies by leveraging different features available in product;
• Active coordination with product support vendors for any product related issues or bugs;
• Propose, plan and execute actions to ensure that web traffic requests for identified users are routed through Menlo solution;
• Work with end-users where there are issues reported for external website accessibility and/or functionalities;
• Ensure policy exclusions are challenged, reviewed, validated and deployed as per approved plan;
• Periodical review of policy exclusions and ensure that they are relevant to the current context;
• Collaboratively work with network and other infrastructure teams globally for related issues;
• Propose, plan and execute Service improvements initiatives in order to elevate the current state, including identifying the activities to automate, improve and fine-tune the policies
• Handling RFCs, Incidents and Problem tickets under ownerships- and manage related day-to-day operations;
• Maintaining and Reporting the various KPI indicators pertaining to the technologies under administration scope and leading the report actions;
• Vulnerability Scanning and Remediation of the technologies under management scope
• Planning the periodical Technology Upgrades- testing and implementation;
• Identify Risks under respective technology under ownership, maintain Risk Register and work towards closure of risks and issues;
• Escalate- discuss and consult- technical issues, Incidents, RFC roadmaps and Problem tickets as required to next levels and Management in timely manner;
• Provide technical subject matter expertise on the solutions under technical ownerships;
• Perform Root Cause Analysis for Major Incidents and provide report in timely manner and maintain proactive follow-ups to close the actions;
• Perform Trend analysis, identify top few incidents and work with respective teams/individuals to minimize the incidents, hardware/software troubleshooting;
• Participate in meetings with various stake holders as per the schedules;
• Liaise with different vendors to ensure product issues are resolved as per operational and functional needs;
• Liaise with different teams in different geographical zones;
• Adhere to different policies set out by the organization;
• Prepare and provide different reports (weekly/monthly/ad-hoc) as necessary for Operations;
• Perform changes or work on incidents during weekends as necessary;
• Participate in periodical Disaster Recovery and Business Continuity exercises as per the plan;
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role;
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.
• To take up additional responsibilities as per Operational needs for the scope under the team.

Work Schedule

• Work schedule is mainly focused to support Asia and EMEA (Paris) time zone;
• Work Hours: 2 PM – 11 PM SGT (with 1 week of General shift 9 AM – 6 PM SGT as per rotation).
• Rotational Shift schedule is followed between general and afternoon hours;
• Candidate have to be standby to support critical issues reported outside of business hours and on weekends. This will be based on On-call Schedule roster which is pre-defined.

Qualification Requirements

• 8 -10 years of IT experience with minimum 5 years of hands-on experience in network security managing web traffic proxies or web phishing prevention/web isolation platforms e.g. Menlo Web Isolation Platform
• Should be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;
• Working & hands-on experience in administering the Menlo Web Isolation Platform and any of the Web Proxies solutions;
• Experience in managing Production setup in Run (Operations) mode;
• Ability to apply Risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;
• Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;
• Excellent in analytical, communication and documentation skills;
• Ability to organize work and be able to priories work as per the needs of Production Operation’s needs;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Ability to work independently and as well as a part of team and is able to work under minimal supervision;
• Should have time management skills and able to manage work in a fast-paced environment.

Professional Certifications:

• Security Certifications: Comptia Security+, CISSP is highly preferred

Interested applicants, please email your resume to Shaun Quek Yew Meng

Email: shaunquek@recruitexpress.com.sg

CEI Reg No: R1660732

EA Licence No: 99C4599

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Responsibilities
• Plan, implement, manage, monitor, and upgrade IT security solutions.
• Support projects by delivering project deliverables and completing milestones.
• Develop and maintain technical, operational, and configuration documentation necessary for project implementation.
• Coordinate and manage vendors for product implementation and troubleshooting.
• Evaluate security products and conduct Proof of Concept (POC) to verify the effectiveness of security measures, ensuring their continued efficacy post-implementation.
• Provide technical support and incident response for IT security infrastructure components to the maintenance team.

Requirements:
• Proficient in Endpoint Security solutions, including Anti-Malware, Host Firewall, Application & Change Control, Disk Encryption, and EDR.
• Knowledgeable in Identity & Access Control solutions, such as PKI solutioning, Hardware Security Module (HSM), Privileged Access Management, 2FA, and OS Hardening Policies.
• Implement Endpoint or Identity & Access Control Security tools.
• Familiarity with various operating systems like Windows or Linux.

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Interested Applicants
Please WA Bryan Tay @ 97559161
Shortlisted Candidates will be notified

Bryan Tay Reg No. R23112463
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

We are seeking a highly skilled and motivated Cloud Security Specialist to join our dynamic team and play a pivotal role in ensuring the security, integrity, and compliance of our cloud-based systems and applications. As a Cloud Security Specialist, you will work collaboratively with cross-functional teams to design, implement, and maintain robust security measures that protect our organisation's assets and data in cloud environments.

• Cloud Security Strategy: Develop, implement, and maintain an effective cloud security strategy and architectures that adhere to best practices, industry standards, and regulatory requirements.

• Security Architecture: Collaborate with engineering teams to design and implement common cloud security architectures, ensuring principles of least privilege, zero trust, defense in depth, and security by design.

• Infrastructure Security: Implement and manage security controls for cloud infrastructure components, including networks, virtual machines, containers, and serverless services. Apply security groups, network segmentation, and encryption to safeguard data in transit and at rest.

• Identity and Access Management (IAM): Design and enforce robust IAM policies to manage user access, authentication, authorisation, and privilege escalation within cloud environments.

• Security Monitoring and Incident Response: Set up and manage continuous security monitoring, threat detection, and incident response processes for cloud environments. Respond to security incidents, perform root cause analysis, and implement preventive measures.

• Vulnerability Management: Conduct regular vulnerability assessments to identify and remediate security weaknesses. Know how to apply patches and updates in a timely manner.

• Security Compliance: Ensure and assess cloud environments adhere to relevant government ICT/SS compliance frameworks and regulations.

• Security Automation: Build and maintain security automation scripts and tools to streamline security processes such as provisioning, configuration management, and incident response.

You will be a Great Fit if you:

• Have experience (2+ years) in designing, implementing, and managing security solutions in cloud environments (AWS, Azure, Google Cloud, etc.).

• Understand cloud security principles, including network security, encryption, identity and access management, and security monitoring.

• Are proficient in security tools such as intrusion detection/prevention systems, SIEM, vulnerability scanners, network firewalls, and web application firewalls.

• Have implemented security best practices within Infrastructure-as-Code frameworks (e.g. Terraform, CloudFormation, Ansible) to ensure secure infrastructure provisioning and configuration management.

Good to Have:

• Relevant professional certifications such as Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, or equivalent.

• Proficiency in scripting or programming languages (e.g., Python, PowerShell) for security automation and orchestration.

• Experience in using containerisation technologies, such as Docker, Kubernetes, AWS ECS, and knowledge in securing containers.

• Proficiency in implementing DevSecOps and CI/CD pipelines, with experience in relevant CI technologies such as Git, Gitlab, and Jenkins. Hands-on experience with security testing tools (e.g., SAST, DAST, SCA) and vulnerability management.

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14542063/2fc68717-fd53-1ede-bce4-a1fb0cb9b29f

About Us!

The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

You will be part of the Security Operations Centre (SOC) Team who will be responsible for the following areas Tier 2 SOC Analyst responsible for investigating alerts and incidents escalated by Tier 1 Analysts, Develop and enhance SOC processes and procedures, ensuring effective operations, Coordinate with stakeholders to address, follow up and resolve security alerts. Operate and maintain security monitoring tools such SIEM, EDR and SOAR. Gather and analyse Cyber intel. Conduct Threat hunting. Lead the adoption of new technological advances and best practices in cybersecurity monitoring and response.

You will be a Great Fit if you:

- Demonstrable experience and in-depth knowledge in cyber security operations, cyber intelligence gathering, incident response and investigations.

- Have strong experience in various cyber security technologies such as IDS/IPS, firewalls, SIEM, APT, email security, web security, endpoint security, malware analysis, etc

- Have experience in threat hunting / red teaming will be preferred.

- Have at least 2 years of experience as a Tier 2 analyst in a SOC.

- Have professional certifications would be added advantage: CISSP, GIAC Certified Incident Handler, EC-Council CEH and CSA, or any other relevant qualifications

Good to Have:

- High attention to detail and quality.

- Be able to work under pressure and meet deadlines.

- Must be highly reliable, trustworthy, honest, and commitment oriented.

- Strong written and verbal communication skills

- Autonomous

- Take ownership

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14542075/2fc68717-fd53-1ede-bce4-ab8bfed8329f

Our Client is a world renowned carrier company with ongoing IT projects and is looking to expand their IT team. They are seeking a highly motivated and experienced Cyber Security Solutions Specialist / Consultant to join our vibrant Information Security Team. As a key contributor, you will play a critical role in implementing, optimizing, and maintaining cutting-edge security solutions that protect our organization from ever-evolving threats.

Working location: Changi, East

Your Impact:

• Become the go-to expert (SME) for our security systems: Leverage your deep understanding to unlock their full potential and ensure maximum protection.
• Architect and execute comprehensive security strategies: Plan, assess, design, and deploy the latest security software and hardware solutions.
• Champion innovative security initiatives: Identify and recommend solutions that strengthen our security posture and stay ahead of emerging threats.
• Guide and educate: Provide expert consultancy, technical guidance, and training to empower other teams.
• Collaborate with stakeholders: Partner with infrastructure teams to design secure solutions and advise on firewall requests.
• Stay vigilant: Continuously research emerging threats and vulnerabilities, proposing effective mitigation strategies.
• Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
• Deliver with excellence: Manage project priorities, deadlines, and deliverables independently with minimal supervision.

What you bring:

• Proven track record: Minimum of 5 years in information security, preferably with application security expertise.
• Certified expertise: Holding recognized certifications like CISSP, CSSLP, or CEH is a plus.
• Proven implementation experience: Demonstrated knowledge of conducting security product POCs and RFQs.
• Hands-on experience: Familiarity with implementing and maintaining tools like EDR, XDR, SOAR, SIEM, UEBA, PAM, AM, and network security solutions.
• Technical prowess: Deep understanding of at least one security area like network design, zero trust, IoT, or cryptography.
• Security-minded: Keen awareness of common web/mobile application vulnerabilities and the ability to mitigate them.
• Communication maestro: Possess strong verbal, written, presentation, and interpersonal skills.
• Positive and proactive: Exhibit drive, initiative, enthusiasm, and a sense of urgency when tackling critical issues.
• Team player: Thrive in both independent and collaborative work environments.

APPLY NOW! Interviews are ongoing! Email to dayna.chiam@stellar-link.com

We regret to inform that only shortlisted candidates would be notified.

Chiam Lee Ping Dayna

Consultant

Reg. No: R1764404

Stellar- Link Partners Pte Ltd (EA License: 21S0698)

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

• Develop, maintain, and operationalise a Threat Risk Assessment framework for HDB to identify and mitigate the threats and risks in its IT systems and programmes.

• Work with key stakeholders to ensure high cybersecurity posture of application systems through activities such as the following:
i. Promote secure coding practices.
ii. Review of Vulnerability Assessment and Penetration Testing (VAPT) Cases
iii. Facilitate remediation of vulnerabilities arising from application security testing
iv. Setup DevSecOps through CI/CD pipeline
v. Securing Cloud Workloads
vi. Procure & Maintain Security testing Tools/services to support source code review and VAPT.

• Related works include Threat Risk Assessment, project specific cybersecurity specification, cybersecurity proposals evaluation, cybersecurity design review, System Security Acceptance Test and review, Vulnerability Assessment and Penetration Test.

• Manage and promote IT security awareness and outreach programme.

• Keep abreast of the latest industry ICT security practices and technologies as well as emerging threats and vulnerabilities and recommend appropriate controls for implementation to improve the enterprise security posture.

• lead and/or participate in the adoption of new technological advances and best practices in infrastructure security systems to mitigate security risks.

You will be a Great Fit if you:

• You should possess a strong background in ICT Security, Information Security, Information Technology, Computer Science, Cybersecurity or equivalent.

• At least 2 years of experience in ICT works involving the setup, development, and management of web-based systems, with at least 2years of relevant ICT security work experience.

• Preferably possess one or more appropriate IT security certifications, such as CISSP, CRISC, CISM, CISA, CEH, etc

• Preferably with strong knowledge and experience in information and cybersecurity risks, controls, vulnerability assessment/penetration testing, compliance, and industry IT/cyber security best-practices.

Good to Have:

• Domain knowledge of access control; telecommunications and network security; cloud security; Cybersecurity & information security governance and risk management; software development security; cryptography; security architecture and design; operations security; security incident response and management; business continuity and disaster recovery planning; legal regulations, investigations, and compliance; physical (environmental) security

• Knowledge in IT security principles and IT controls as well as industry best practices and frameworks pertaining to IT Controls (IM8, COBIT, ISO27001/2 etc.)

• Good understanding of the current IT/Cyber Security landscape Great Attitude to bring the best out our team
• work beyond business hours including weekend when necessary.

• possess good interpersonal and communication skills.

• demonstrate a strong sense of urgency and have good troubleshooting and problem-solving skills with good attention to detail.

• conduct research on ICT and cybersecurity technologies where necessary to perform the assigned tasks.

• have good command of written and oral English

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14542118/2fc68717-fd53-1ede-bce4-ce5277e5329f

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

· ICT Security Governance:
Develop and implement enterprise-wide ICT security programmes as follows:
i. Establish the cybersecurity governance structure for HDB to ensure that the security posture is robust, resilient, and pragmatic
ii. Enhance and update the IT security policy, standards, procedures so that they are always current against the evolving cyber security landscape
iii. Manage the compliance with the GovTech ICT/SS Security Policies, Initiatives, Measures and the relevant Government Instruction Manual to further strengthen the WOG and HDB ICT security posture.
iv. Establish the governance and administer the Third-Party Management Policy and Procedure

· Cybersecurity Awareness Outreach
Manage and implement Cybersecurity Awareness Framework to promote IT security awareness and outreach programme as follows:
i. Raise HDB management and staff’s security awareness and appreciation of ICT Security to ensure HDB’s information assets are protected.
ii. Create good staff cyber security hygiene through regular ICT Security outreach programme such as annual ICT Security Awareness Talk, security advisories, conduct of Phishing exercise, road show.
iii. Keep abreast of key technology and skillset in the industry to maintain ICT Security personnel skills development.
iv. Identify various channels for the conduct of the security program such as cyber range exercises, technical certification, gamification.

· Identity & Access Management
To establish procedures and standards for the Identity and Access management in HDB as follows:
i. To administer and manage the user accounts and privileged access, so as to safeguard the confidentiality of ICT assets and systems in HDB.
j. To maintain and manage the access controls to applications on premises and on Cloud.
k. Digital Certificate Management

· Quality Audit and Security Reviews
a. To serve as an independent party to perform quality auditing and report to Management on the observations and recommendations.
b. To conduct regular security reviews on application systems and infrastructure to ensure the HDB’s systems and infrastructure are secured and reliable.
You are also to:
· keep abreast of the latest industry ICT security practices and technologies as well as emerging threats and vulnerabilities and recommend appropriate controls for implementation to improve the enterprise security posture.
· lead and/or participate in the adoption of new technological advances and best practices in infrastructure security systems to mitigate security risks

You will be a Great Fit if you:

You should possess a strong background in ICT Security, Information Security, Information Technology, Computer Science, Engineering (Computing/Telecommunication), Cybersecurity and/or Digital Forensic or equivalent.
At least 1 years of direct and relevant full-time ICT security work experience
Preferably possess one or more appropriate IT security certifications, such as CISSP, CRISC, CISM, CISA, CEH, etc
Preferably with strong knowledge and experience in information and cybersecurity risks, controls, vulnerability assessment/penetration testing, compliance, and industry IT/cyber security best-practices.

Good to Have:

Added advantage for candidates with knowledge in any of the following:
· Domain knowledge of access control; telecommunications and network security; cloud security; Cybersecurity & information security governance and risk management; software development security; cryptography; security architecture and design; operations security; security incident response and management; business continuity and disaster recovery planning; legal regulations, investigations, and compliance; physical (environmental) security
· Knowledge in IT security principles and IT controls as well as industry best practices and frameworks pertaining to IT Controls (IM8, COBIT, ISO27001/2 etc.)
· Good understanding of the current IT/Cyber Security landscape

Candidate also need to:
· to work beyond business hours including weekend when necessary
· possess good interpersonal and communication skills
· demonstrate a strong sense of urgency and have good troubleshooting and problem-solving skills with good attention to detail
· have good command of written and oral English

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14542108/2fc68717-fd53-1ede-bce4-b91408ebb29f