Total 37 Senior Executive information technology job vacancies in Legal / Public / Security category in Malaysia

Responsibilities: 

1. Draft and / or review legal documents / contracts related to the businesses of the Company, including agreements, correspondences and any other documents in relation to conveyancing, litigation, corporate and commercial transactions;
2. Conduct legal research and to keep abreast of new laws and regulations applicable to the Company and its businesses and advise the management on any potential legal issues / risks arising there from;
3. Review, recommend and/or develop policies, procedures or guidelines for the Company and/or its respective business unit s to ensure compliance with the new laws and regulations;
4. Liaise with external legal counsels/ consultants;
5. Act as the custodian of all legal documents and ensure proper filing of these legal documents;
6. Provide prompt updates and reports as may be requested by the HOD / management;
7. Ad-hoc assignments as may be assigned by the HOD/ management.
 

Specific Skills and Attributes:

1. Minimum 3 years of working experience in a legal firm and / or as in-house counsel for the post of assistant manager OR minimum 3 years of working experience for the post of senior executive.
2. Excellent interpersonal, communication and management skills with high level of integrity and confidentiality.
3. Analytical, meticulous and able to meet tight deadlines with a strong sense of responsibility and urgency.
4. Excellent command of verbal and written English and Bahasa Malaysia.
5. Able to work independently and as a team player.

Perks & Benefits

• Employee equity
• Commission and bonus
• Allowance (travel stipends, transportation, etc.)
• Nearby public transport
• Central location
• Flexible working hours
• Medical insurance
• Personal leave

Business Function

Group Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibilities

We need a technology specialist to join our in-house Information Security Services team in a long term position. The successful candidate will design, develop, test, operate and support security technologies to enhance the security strength of our organization.

We are looking for a responsive and highly productive technology professional who is passionate in solving security challenges and embracing new technologies.

• Evaluate, design, build, test, operate and support security solutions for protecting the Bank’s information assets hosted in data centers and public clouds (e.g. AWS, GCP, Azure)
• Design and develop highly resilient and secure systems
• Integrate, manage, and operate hardware security modules
• Integrate with other application/platforms to deliver security services
• Build, integrate, test, and deliver solutions using a CI/CD pipeline
• Support other applications teams in the integration with security services
• Perform production monitoring and support, as well as responding to incidents
• Continuously enhance security systems and automate processes to increase resiliency and productivity

Requirements

• Working experience developing applications or managing infrastructure services for public cloud such as AWS and GCP
• Programming skills in at least Java and one other programming language: Python, JavaScript (NodeJS), GO
• Working experience as a software developer (in full stack development, cryptography, APIs) or systems implementor/integrator (implementing Identity and Access Management software, data protection solutions) and preferably in the information security domain
• Experienced in performing requirements gathering, system analysis and design, application development, application testing (functional, performance), deployment using CI/CD pipeline, and production support
• Bachelor’s degree in Computer Science or equivalent
• Able to travel on a need to basis
• Functional / Technical Competencies
• Possess knowledge of information security principles, secure coding practices, and cryptography
• Possess strong technical knowledge in operation systems, networking, databases, Internet technologies, public cloud, private cloud and containers
• Possess knowledge about designing and developing highly resilient applications
• Working knowledge of Linux and shell scripting
• Working knowledge of using a CI/CD pipeline

Apply Now

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognizes your achievements.

Senior Information Security Compliance Specialist for a leading Global Law Firm!

• Leading Global Law Firm
• Opportunity to drive Information Security compliance and ensure data protection and governance
• Regional exposure and opportunity to travel to regional and global offices

Our client is a leading global law firm with presence in 29 countries wordwide. With a distinguished reputation spanning decades, they are recognised for their unparalleled legal advice and innovative solutions to complex business challenges. The firm operates across major financial centres worldwide, serving a diverse clientele of multinational corporations, financial institutions, and governments with a commitment to excellence, integrity, and client satisfaction.

They are looking for a Senior Information Security Compliance Specialist to join the Global Information Security team. You will be involved in ensuring timely completion of client compliance questionnaires and providing support for information security aspects of client and regulatory audits. You will be involved in reviewing client engagement terms, drafting new policies and updating existing ones. You will also support external security audits, certifications, and third party reviews to maintain robust information security controls and compliance standards.

To qualify, you must have the following:

• At least a bachelor's degree in Information Security or other related fields of study. CISSP or CISA certifications are highly desirable.
• Over 5 years of working experience in Information Security or IT Audit with at least 1 year in a similar compliance role.
• Familiarity with standards and guidelines such as ISO27001, PDPA, GDPR etc.
• Skilled in efficiently analysing extensive datasets to pinpoint crucial details and detect potential issues.
• Proficient in handling multiple tasks simultaneously and adapting to shifting priorities.
• Able to effectively navigate ambiguity.
• Demonstrates meticulousness and attention to detail.
• Excellent communication and interpersonal skills to engage with various stakeholders.
• Open to occasional travel or flexible hours to attend global meetings.

If you have what it takes, please send your resume to syafiqah@ambition.com.sg or click APPLY NOW. For more information, please visit www.ambition.com.sg.

Data provided is for recruitment purposes only. Regrettably, only shortlisted candidates will be notified. Business Reg No : 200611680D | Licence No : 10C5117 | EA Reg No : R2199023

Job Description

• Conduct risk assessment of the infrastructure to help identify security risks, and determine appropriate controls to mitigate risks.
• Monitor and manage security incident response activities and detection alerts, and remediate security vulnerabilities. This includes conducting in-depth root cause analysis by identifying and investigating issues, collaborating with other teams to assess their impact on the business, and implementing appropriate remediation and mitigation measures.
• Develop and implement initiatives that enhance the information security team to effectively address and mitigate security incidents.
• Continuously improve the internal security detection system by actively analyzing internal incidents and threat intelligence data.
• Provide comprehensive support for special security or regulatory driven projects throughout the lifecycle.

Requirements

• Bachelor’s degree or higher in Computer Science, Information Technology, Programming & Systems Analysis, Engineering, or other related fields
• Minimum 3 years of work experience in roles related to security operations, incident response, or malware
• Experience with and the ability to autonomously lead incident investigations
• Extensive expertise in the analysis of event and system logs, conducting packet and forensic analysis to support intrusion investigations
• Proficient knowledge of security best practices and key security technologies such as SIEM, IDS, etc
• Experience with Linux and Windows administration, including system authentication, patch deployment, system configuration and security controls
• Hands-on experience with security automation, including the creation and execution of alert response runbooks will be advantageous
• Proficient in scripting languages such as Python, PowerShell scripts, and bash for various security-related tasks is a plus
• Experience with regulatory compliance is a plus

Responsibilities:

• Enforces company rules and regulation and requirements of the Port Facility Security Plan
• Drafts and maintains company procedures and risk assessment, ensuring company procedures, risk assessments and instructions are followed and updated when necessary
• Oversees and troubleshoots Security systems under the security department such as CCTV system, access control gantries, barriers, etc
• Retrieves and stores CCTV footages required for investigation cases
• Maintains inventory of Security IT/OT devices and the status of each device
• Oversees the repairs and maintenance of Security IT/OT devices. This includes discussing with network and IT teams on activities that may affect regular security operations and coordinating steps to resolve vulnerability issues such as patch updates and others.
• Logs, reports and addresses Security IT/OT hardware and software faults to the correct party and follow up on each case under the issue has been resolved
• Assists Security Manager to review and update technology data risk assessment
• Collates and organizes information collated from Security Department Records such as Security Daily Reports, Cases Statistics, Patrol Findings & Detection Records, Leading & Lagging Statistics, Visitor Entry/Exit Logs, Outward Permit Records, etc.
• Develops and manages databases of Security related information
• Identifies and interprets trends or patterns that could lead to potential security exploits through data analysis
• Creates management dashboards to assist in tracking of departmental activity progress and quick generation of reports
• Performs other assignments as assigned by Security Manager

Requirements:

• 3 years of relevant working experience performing technology-related work
• Familiar with Microsoft Office suite of applications such as Word, Excel, PowerPoint, Forms, Power Automate, PowerApps, etc
• Good technical knowledge of computers, access control systems & devices, CCTV hardware and software and other common security, IT and OT equipment
• Has experience managing security IT/OT systems such as CCTV hardware / software, access control, biometric or card door and gantry systems, cark park barrier systems, Patrol Clocking devices, etc
• Self-motivated and able to work with minimal supervision
• Physically fit to perform checks and inspection on tools, equipment and systems in yard operational areas, building and perimeter
• Able to single handedly resolve and converse with relevant IT departments or suppliers on physical security system issues

Our Addresses and Working Hours:

Seatrium Limited

(Pioneer Yard)

50 Gul Road, Singapore 629353

(Islandwide transport provided)

Mon - Thu: 8:00am - 5:15pm

Fri: 8:00am - 4:30pm

Interested candidates are invited to send us an updated resume with your current and expected salary and earliest availability.

We regret that only shortlisted candidates will be notified.

Please note that your personal data disclosed to Seatrium Limited and our group of companies, shall be used for the purposes of evaluation, and processing in accordance with our recruitment processes and policies. By providing your personal data, you have consented to the aforesaid purpose under the provisions of the Personal Data Protection Act 2012.

• Leading regional financial institution
• Focus in Information Security Compliance, Policy & Control
• Open to IT professionals with passion in InfoSec Control and Risk Management

Reporting to Head of Information Security & IT GRC, here are your responsibilities:

• Collaborate with the cybersecurity team to develop and execute the annual information security action plan.
• Establish and maintain an efficient incident reporting and tracking system, overseeing corrective and improvement measures.
• Monitor and provide guidance on the effectiveness of information security workflows and controls.
• Lead information security projects and automation initiatives in Asia.
• Manage outsourcing matters across BUs in Asia and oversee outsourcing requirements
• Conduct annual on-site reviews of BUs in Asia.
• Support compliance efforts under Singapore’s PDPA, including policy communication, query management, and liaison with regulatory authorities.
• Report to the Board and management on adherence to laws, regulations, and information security policies.
• Review and update regional information security and outsourcing policies to ensure compliance.
• Develop training materials to enhance information security awareness.
• Design, develop, and maintain automated compliance and information security workflow management systems.
• Manage regional reporting tools and consolidate results.
• Prepare reports and documents for internal committee meetings.
• Collaborate with the Compliance team on various compliance-related initiatives.

Requirements:

• Bachelor's degree in computer science or related disciplines
• Preferred certifications: CISM and/or CISSP.
• 3+ years of experience in information security or IT risk management
• Strong understanding of information security risks, controls, processes, and trends.
• Experience in project management.
• Familiarity with regional information security regulations and the insurance sector.
• Understanding of Asian cultural and business dynamics.

If you are interested in the above job or related information security opportunities, please kindly send your updated CV to Shannagh.Wu@ethosbc.com

Reg No.R23112660
BeathChapman Pte Ltd
Licence no. 16S8112

Business Function

Group Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibilities

• Administration and management (technical operations) of firewall infrastructure
• Evaluate and upgrade firewall hardware and/or firmware
• Coordinate with vendor, deploy, configure and manage Firewall devices according to system engineering design
• Coordinate with information security governance team to align IT infrastructure with established standards
• Ensures system compliance with all established information security policies
• Perform period health check and tuning of firewall devices
• Performs technical assessment of any non-well defined or complex firewall change requests prior to implementation
• Performs regular review of firewall rulebases and recommend necessary optimization actions
• Assists Level 1 Support Engineers during problem determination and resolution whenever necessary.
• Planning and recommending overall improvements in firewall management
• Device Access management
• Advanced troubleshooting production problems with RCA and fault diagnosis
• Performance and historical trend analysis
• Implements changes to firewall infrastructure hardware in order to correct errors or enhance functionality
• Develops processes for improving operational efficiencies, as well as identifies/implements automation tools for existing manual processes.
• Prepares technical reports, memoranda, and instructional manuals as documentation of network design and operational requirements.
• Management of network daily activities; incident and problem management
• Responsible to work with respective team members on the review of network architecture and design
• Responsible to work with the respective server and application team's members
• Responsible to work with the respective network vendor's teams for the trouble-shooting, identification and resolution of network problems
• Responsible for network devices, as well as appliances, vulnerability review and assessment.
• Responsible for network devices, as well as appliances, change implementation review and assessment
• Responsible to conduct pre / post implementation plan review
• Responsible to conduct and train Level 1 engineers, i.e. to empower and equipped the L1 engineers with the knowledge to run and maintain Data center network
• Coordinate with information security governance team to align IT infrastructure with established standards
• Change requests prior to implementation
• Advanced troubleshooting production problems with RCA and fault diagnosis
• Design and monitor operations metrics on a monthly basis to keep track of key operation metrics
• Ready to work in shifts including public holidays
• Ready to be on call for 24x7 support during shifts

Requirement

• Experience: Minimum 8 years firewall operations and/or management role
• Certification : CCSA, CCSE, JNCIA-FWV, JNCIA-SEC, JNCIS-SEC (Preferred but not mandatory CISSP, CISM, ITIL Foundation)
• Checkpoint Firewalls, Juniper Netscreen / SRX Firewalls, VPN Technologies, DNS, NTP, 2 Factor Authentication technologies.
• Ability to work independently or as a team player.
• Experience in highly complex data center network design and support
• Experience with Cisco and Arista products specially DCI technology
• Experience with Cisco and Arista Software Define network (ACI, DNAC, etc)
• Strong hands on experiences on Fabric Patch, OTV, VPC+, Vxlan, Mlag, MP-BGP
• Knowledge and experience in employing and using various networking trace tools, i.e. Sniffer, Wireshark, riverbed net profiler, NetBrain, Gigamon and etc.
• Pro-active, dynamic and with good analytical/conceptual thinking.
• Certifications such as CCIE or above level in networking is an advantage
• Python or Linux shell scripting skill is a plus

Apply Now

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognises your achievements.

About the role The Information and Technology (I&T) team is dedicated to delivering solutions that engage clients and stakeholders while meeting the diverse business requirements of the organisation. Our portfolio encompasses a wide range of responsibilities, including information technology strategy, ICT service delivery, information and knowledge management, information security, and business partnering and engagement. As a Senior Information Officer, where you'll play a pivotal role in promoting information and records management aligned with QPT's strategic direction and architecture. Your primary focus is to advocate for best practices and foster a culture of excellence in this critical domain. Leveraging your expertise in information management, you'll guide and support the organisation, empowering effective decision-making and driving digital innovation. Operating within a complex and dynamic environment, collaboration is key to success. You'll seamlessly bridge functional boundaries, fostering cross-functional cooperation to achieve organisational goals. As a Senior Information Officer, you'll perform a variety of functions across information, records, knowledge,…

Click here to view more detail / apply for Senior Information Officer, Public Trust Office

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will assist in the end to end implementation of security solutions for our clients and support our clients in their desire to protect the business.

The Opportunity

This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, advising stakeholders, providing workshops and supporting business development. If you’re flexible and ready to adapt to a constantly changing environment, there’s no better place to develop your skills. Since you’ll be working directly with clients, some travel will be required.

Your Key Responsibilities

As a Cyber Security Operations consultant, you will be part of the team to assess, design, build, implement and manage security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience.

Skills and Attributes for Success

• Familiarity with Security Information and Event Management (SIEM) solutions.
• Experience with network security monitoring and incident response activities.
• Ability to process impacts of activities and be able to collaborate with IT operations and Cybersecurity teams on mitigations and remediations.
• Ability to apply cybersecurity and privacy principles to organizational requirements.
• Ability to create standard operating procedures and other similar documentation.

To Qualify for the role, you must have

• A recognized university degree in Computer Science, Computer/Electrical Engineering, Information Technology or equivalent
• At least 3 years of relevant experience. Preferably with a year experience in business consulting role in a leading consultancy firm
• Strong interest in the field of information security
• Creative, independent with good problem-solving skills
• Excellent communicator with strong analytical, interpersonal and writing skills

Ideally, you’ll also have

• Industry related certification preferred (e.g. CISSP, CISA, CISM, SABSA, PRINCE2, TOGAF, ITIL).
• Solution Level Certifications, OSCP, CREST, GIAC would be advantageous, as well as penetration testing experience.

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.

What we offer

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

Apply now.

Role: Penetration Tester / Pen Tester 

Location: Bangalore

Expeirence Range: 6-8 Years 

Roles & Responsibilities:

As a Pen Tester/ Information Security Consultant at Resillion, your key responsibilities include:

1. Performing manual penetration tests on IT Systems, including applications and infrastructure, by defining test procedures, executing tests, creating test reports, and following up on reported weaknesses.
2. Assessing the security status of individual applications and the infrastructure landscape.
3. Developing automatic test environments and automatic tests as needed.
4. Providing support to other Information Security functions such as Vulnerability Management (e.g., assessing vulnerabilities) and Incident Management (in a consulting capacity).
5. Delivering various engagements for customers in and the UK, contributing as a technical point of contact in meetings, advising on project scoping, and conducting peer reviews of consultants' output.
6. Representing Resillion at trade shows and events, including giving presentations based on experience.

 

Job Responsibilities:

· Drive the fortification and optimization of the wallet security system, including but not limited to security policies, patching vulnerabilities, and monitoring unusual activities.

· Responsible for the daily operational maintenance of the wallet system, including but not limited to node deployment, on-chain data synchronization, and system backup, etc.

· Provide reasonable and effective suggestions for the existing wallet system framework, assist in upgrading the security organizational framework, participate in the design and implementation of security policies, to ensure the security of the exchange wallet system.

· Design and collaborate on the development of a security framework with rational security logic.

· Enrich and optimize existing rules, participate in the emergency response to daily security incidents, as well as the maintenance of security systems.

· Continuously track the latest technologies and threats in the field of blockchain and digital asset security, providing professional advice and guidance to the team.

· Proactively identify and resolve potential system risks, improving the overall security awareness and capabilities of the team.

Qualification Requirements:

· Have a sense of infrastructure security, familiar with common security vulnerabilities and attack methods.

· Capable of independently developing, writing, and maintaining a security framework.

· Familiar with common Linux commands and tools, penetration testing processes and tools.

· Familiar with security risk management, security node upgrades.

· Familiar with WEB3 development technology, with priority given to those who have experience in Solidity smart contract development.

· Have a deep understanding of blockchain technology and digital assets, familiar with the application skills of common scenarios on the chain.

· Good communication and written expression abilities, able to effectively communicate and cooperate with colleagues in different positions.

Bonus Points:

· Experience in security framework design.

· Experience in handling security incidents & offensive and defensive real-world experiences.

· Priority given to those with practical project or tool development experience.
Senior Security Operations Engineer

· Capability to analyze the behavior of malware samples in Windows/macOS/Linux environments.

Information Security Risk Specialist, Senior

Key Role:

Work alongside supervisors and managers as well as alongside technical personnel such as Network Engineers and System Administrators. Participate in the development or modification of computer environment security program plans and requirements. Supervise or manage protective or corrective measures when a cybersecurity incident or vulnerability is discovered. Ensure that cybersecurity requirements are integrated into the Continuity of Operations Plan (COOP) for that system or DoD Component. Ensure that cybersecurity requirements are appropriately identified in computer environment operation procedures. Prepare, distribute, and maintain plans, instructions, guidance, and standard operating procedures concerning the security of network systems operations. Develop security requirements specific to an IT acquisition for inclusion in procurement documents. Develop security requirements for hardware, software, and services acquisitions specific to cybersecurity programs. Ensure that IA and IA-enabled software, hardware, and firmware comply with appropriate security configuration guidelines, policies, and procedures. Review cybersecurity plans and identify alternative functional cybersecurity strategies to address organizational security concerns. Ensure that cybersecurity inspections, tests, and reviews are coordinated. Evaluate the presence and adequacy of security measures proposed or provided in response to requirements contained in acquisition documents. Advise the Authorizing Official of any changes affecting any systems’ security posture.

Basic Qualifications:

• 6+ years of experience working in cybersecurity
• 2+ years of experience using Enterprise Mission Assurance Support Service (eMASS)
• Experience with authorization actions concerning software development and testing, and the interpretation of patterns of non-compliance to determine their impact on levels of risk or overall effectiveness of the enclave’s cybersecurity program
• Experience evaluating risk analysis in the decision-making process, and evaluating proposals to determine if proposed security solutions effectively address enclave requirements, as detailed in solicitation documents
• Experience reviewing cybersecurity policies
• Knowledge of the configuration management (CM) of DoD software, including source code, documentation, and fieldable products, and DoD security and program protection and declassification operations
• Knowledge of DoD 8500, AR 25-2, AR 70-1, and DA PAM 70-3 Army Acquisition Implementation
• Secret clearance
• Bachelor’s degree
• DoD 8570 or 8140, and CompTIA Security+ Certification

Additional Qualifications:

• TS/SCI clearance
• ISC2 Certified Information Systems Security Professional (CISSP) Certification
• Microsoft IT Professional (MCITP), Microsoft Certified Systems Engineer (MCSE), Microsoft Certified Professional (MCP) on Windows 2016 or 2019 Server, Windows 10 MCSE, or equivalent Operating Systems Certifications
• Linux Certifications
• Cisco Networking Certifications

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.

Create Your Career:

Grow With Us

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.

A Place Where You Belong

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time.

Support Your Well-Being

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.

Your Candidate Journey

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $81,800.00 to $186,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees. This posting will close within 90 days from the Posting Date.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

Job description

• Leading regional financial institution
• Focus in Information Security Compliance, Policy & Control
• Open to IT professionals with passion in InfoSec Control and Risk Management

Reporting to Head of Information Security & IT GRC, here are your responsibilities:

• Collaborate with the cybersecurity team to develop and execute the annual information security action plan.
• Establish and maintain an efficient incident reporting and tracking system, overseeing corrective and improvement measures.
• Monitor and provide guidance on the effectiveness of information security workflows and controls.
• Lead information security projects and automation initiatives in Asia.
• Manage outsourcing matters across BUs in Asia and oversee outsourcing requirements
• Conduct annual on-site reviews of BUs in Asia.
• Support compliance efforts under Singapore’s PDPA, including policy communication, query management, and liaison with regulatory authorities.
• Report to the Board and management on adherence to laws, regulations, and information security policies.
• Review and update regional information security and outsourcing policies to ensure compliance.
• Develop training materials to enhance information security awareness.
• Design, develop, and maintain automated compliance and information security workflow management systems.
• Manage regional reporting tools and consolidate results.
• Prepare reports and documents for internal committee meetings.
• Collaborate with the Compliance team on various compliance-related initiatives.
  

Requirements:

Bachelor's degree in computer science or related disciplines
Preferred certifications: CISM and/or CISSP.
3+ years of experience in information security or IT risk management
Strong understanding of information security risks, controls, processes, and trends.
Experience in project management.
Familiarity with regional information security regulations and the insurance sector.
Understanding of Asian cultural and business dynamics.

If you are interested in the above job or related information security opportunities, please kindly send your updated CV to Shannagh.Wu@ethosbc.com

Reg No.R1981018

BeathChapman Pte Ltd

Licence no. 16S8112

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Enterprise Job Description:
This job is responsible for partnering with leaders to balance the needs of the business while ensuring information security and organizational risks are appropriately identified and managed to drive uncompromising cyber security protection. Key responsibilities include leading in-depth information security risk-based discussions and acting as an integrated business partner with cross-functional leaders to provide blended security and business expertise to ensure appropriate management of information security risks.

Shift:

1st shift (United States of America)

Hours Per Week: 

40

Information Security Risk Specialist, Senior

The Opportunity:  

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you—an information security risk specialist who will break down complex threats into manageable plans of action.  

As an information security risk specialist on our team, you’ll use your experience to work with the DoD and Navy to discover their cyber risks, understand policies, and develop a mitigation plan. You’ll review technical, environmental, and personnel details from SMEs, Engineers, and Program Managers to assess the entire threat landscape. Then, you’ll guide your client through a plan of action with presentations, white papers, and milestones. You’ll work with your client to translate security concepts, so they can make the best decisions to secure their mission-critical systems and critical infrastructure. This is your opportunity to act as an information security subject matter expert while broadening your skills in cybersecurity and the Risk Management Framework.   

Work with us as we protect our nation's cyber infrastructure.  

Join us. The world can’t wait. 

You Have:  

• 5+ years of experience in cybersecurity

• 3+ years of experience with Risk Management Framework supporting the Navy

• Experience as an Information Systems Security Officer

• Experience with developing supporting artifacts for Navy authorization packages, including Categorization Forms, HW/SW Lists, Authorization Boundary Diagrams, and Security Control policy documentation

• Experience with Navy Risk Management Framework and analyzing policies, procedures, and standard operating procedures 

• Experience with Enterprise Mission Assurance Support Service (eMASS)

• Experience in creating and managing POA&Ms

• TS/SCI clearance

• Bachelor’s degree

• DoD 8570 IAT or IAM Level II Certification

Nice If You Have: 

• Experience as an Operating System Administrator, Systems Engineer, Requirements Analyst, Information Systems Security Manager, or Information Systems Security Engineer

• Experience with using Microsoft Office products, including Word, Excel, PowerPoint, and Visio

• Experience with Security Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP), Assured Compliance Assessment Solution (ACAS), Ports, Protocols and Services Matrix, Vulnerability Remediation Asset Manager (VRAM), and Host Based Security System

• Experience with eMASSTer 

• Ability to identify security requirements for connected and non-connected systems and unclassified and classified systems 

• Ability to create tactics, techniques, procedures, white papers, standard operating procedures, workflows, system data flows, and architectural diagrams

• Master’s degree

• Navy Qualified Validator Level I, II, or III Certification

Clearance: 

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Create Your Career: 

Grow With Us 
Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms. 

A Place Where You Belong 
Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time. 

Support Your Well-Being 
Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home. 

Your Candidate Journey 
At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $73,100.00 to $166,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees. This posting will close within 90 days from the Posting Date.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.