Total 18 it manager job vacancies in Legal / Public / Security category in PASIR GUDANG Malaysia

Who we are

Crédit Agricole Corporate and Investment Banking (Crédit Agricole CIB) is the corporate and investment banking arm of Crédit Agricole Group, world’s 10th largest bank by total assets.

Our Singapore center (“ISAP” or “Information Systems Asia Pacific”) is the 2nd largest IT setup (after Paris Head Office) for Crédit Agricole CIB's worldwide business. We work daily with international branches located in 30 markets by:

· Envisioning and preparing the Bank’s futures information systems

· Partnering and supporting core banking flagships and transverse areas in their large scale development projects

· Providing premium In-house Banking applications

This unique positioning empowers us to bring our core banking business a sustainable competitive advantage on the market.

We seek innovative and agile people sharing our mindset to support ambitious and forthcoming technological challenges.

Position

IT Security Officer (ITSO)

IT Security Officer role is responsible for managing and supervising Information Technology Security matters for the Bank in Singapore and ensuring that the execution of Information Security activities are in alignment with Banks’ Security Policy and Standards. Person is also in charge of coordination of operational security of Information Systems, conducting Cyber Security Risk Assessment and ensuring effective management of IT Security initiatives in Singapore.

Main Responsibilities (not limited to)

• Information Systems in Singapore are in alignment with Groups’ Security Policies and Standards;
• Develop, contribute and establish local Security Policies, guidelines, standards and processes (as applicable) in conformance to Group’s Information System Security Policies, Governance Texts and local regulatory requirements.
• Conducting Information Security (Cyber) risk assessments to identify Cyber risks, develop and maintain adequate and comprehensive mitigation and deliver subsequent corrective actions when KPI results are unsatisfactory.
• Advising business teams, technology teams and leadership on implementing cyber security best practices for managing cyber and technology risks.
• Maintaining oversight on Key Cyber risk/IT Security indicators in scope;
• Maintaining oversight on the deployment of various Security Programs and projects running for the bank in the region.
• Coordinate studies on security requirements for implementing new IT Security solutions and provide consultation support on IT infrastructures and Applications teams
• Ensuring all Security related requests and derogations are reviewed and granted based on Security Risk Assessments;
• Ensuring the Vulnerabilities under the perimeter are managed and mitigated as per the defined Vulnerability Management Process;
• Assist and recommend the Local IT teams to define and implement remediation actions plans derived from audits or security reviews.
• Follow up on IT security related audit recommendation action plans falling under SG or other entities
• Maintain and Publish the Security Dashboard for Singapore for the Security KPIs;
• Supporting the IT Permanent Controls team and CLSi function on technical matters related to IT Security topics;
• Ensuring technical security projects for the region are properly taken into account and effectively delivered;
• Accompanying local IT teams in technical security topics where Security expertise and advices could be needed, to ensure proper implementation of standards and best practices;
• Acting as an entry point for all technical security related matters to assess the overall Information Systems Security;
• Raising operational security needs or constraints, or local constraints, proposing solutions and possible adaptations of standards in case they cannot cover a precise local requirement (for example due to a local regulation);
• Helping IT teams in deploying level 1 and level 2.1 controls required by ISS control plans.
• Should be able to take up additional responsibilities as needed for the operations or as assigned by the manager;
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer/Compliance Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain and maintain competence.

Candidate Profile

• Must have a minimum 10 years of relevant experience in IT Security domain;
• Must be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;
• Must have knowledge of different domains of Information Security;
• Must have prior hands-on experience in governance, managing and operating the Information System Security;
• Should have experience in working in first and second line of Cyber defense;
• Must have experience in conducting Cybersecurity Risk Assessments, security reviews of IT Projects;
• Must have experience in Security Exceptions management
• Ability to apply risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level Information Security Policies
• Excellent in analytical, communication and documentation skills;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Should have time management skills and able to manage work in fast moving environment;
• Should have excellent written and oral English language skills;

· Professional Certifications :

• CISSP certification is must
• Any other IT Security or Cyber Risk related certifications are desirable

Work Schedule

• Work Hours: 8.45a.m. to 6. 30p.m (Monday to Friday) with one-hour lunch break.

Position

Data Security Specialist- Data Security and Endpoint Security

Data Security Specialist is a technical Specialist role within the Data Security Services team and will be responsible for managing, administration and supporting the Data Security and Endpoint Security technologies for the bank.

Person will be the technical point of contact for the Run team and the related activities to data security and will be the last level of escalation for the Security specialists in the team. He/She is also responsible for the technical transition and validation of Security services from other regions to Singapore. He/She will be involved in projects and POC’s that may involve security services. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Specialist on the technologies within data security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France and UK) and Asia remotely from Singapore. France infrastructure represents approximately 80% of the worldwide production activities of CA-CIB in Singapore.

Team works in Europe time zones and this role will be aligned primarily to Paris working hours. Flexible rotations are followed based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect,
• Encryption Solutions: Disk Encryption, File and Folder encryption,
• Database Audit Monitoring solutions
• Email and Web Phishing Prevention solutions.
• Vulnerability Management

Detailed Job Responsibilities

The Specialist has a wide spectrum of responsibilities and actions. Person will be responsible for following (but not limited to) responsibilities in day-to-day work:

As the Specialist of the team, he/she:

• act as the last level of escalation for the team members
• own Incident, Problem and change management process for the team
• assigns technical tasks and manages delegation
• animates the team to encourage collaboration and sharing of practices
• participates to recruitment process for the team

As the Specialist of his/her scope of activity, he/she:

• is actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management
• Is the final technical approver for any changes into Data Security systems and is accountable for any technical changes in the environment from a RUN/BAU perspective
• Is involved in projects like End of Life, New Builds, migrations and technical upgrades of the solution managed by the team
• Participates in global Infra events (like Power down and DR Tests)
• ensures activity is performed in compliance with norms, standards, processes and procedures
• gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting
• ensures documentation is up to date and relevant for use
• lead the continuous improvement initiatives
• responsible to drive and deliver root cause for any high severity issues
• Focus on automation and optimum use of the team to improve efficiency
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

• Work schedule is mainly focused to support Asia and EMEA (Paris) time zone; however, may have to support during non-offce hours for critical incidents or escalation as per the assigned on-call support requirements;
• Rotational Shift schedule is followed;
• Work Hours: 2 PM – 11 PM SGT (with 1 week of General shift 9 AM – 6 PM SGT).

Qualifications and Profile

Functional

• 8 - 10 years of IT Security experience in administration and management of IT Security technologies primarily Symantec Data Loss Prevention, Symantec Endpoint Protection, Email Security, Data Classification and other endpoint & data security solutions;
• Should be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;
• Knowledge of different domains of IT Security;
• Working & hands-on experience in administering the IT Security Solutions;
• Must have experience in working in similar Production setup in Run (Operations) mode;
• Ability to apply risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;
• Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;
• Excellent in analytical, communication and documentation skills;
• Ability to organize work and be able to priories work as per the needs of Production Operation’s needs;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Ability to work independently and as well as a part of team and is able to work under minimal supervision;
• Should have time management skills and able to manage work in fast moving environment;

Technical

• Hands-on experience on Symantec Data Loss Prevention (DLP);
• Highly proficient in data leakage prevention (DLP) technologies - troubleshooting and configuration management;
• Deployment, integration and administration experience of various components of Symantec DLP:

- Symantec Endpoint Protect

- Symantec Web Prevent

- Symantec Email Prevent

- Symantec Enforce

• Must have experience in defining, designing and configuring DLP Policies as per the business requirements;
• Deploy, upgrade and troubleshooting knowledge on Symantec DLP solution;
• Scripting knowledge (Phyton, Regular Expression, Powershell) is desirable;
• Professional Certifications:

- CISSP certified is highly preferred

- Symantec Certified Specialist: Administration of Data Loss Prevention (any version) is highly preferred.

Interested applicants, please email your resume to Shaun Quek Yew Meng

Email: shaunquek@recruitexpress.com.sg

CEI Reg No: R1660732

EA Licence No: 99C4599

PRODUCT AREA

At YouTube, we believe that everyone deserves to have a voice, and that the world is a better place when we listen, share, and build community through our stories. We work together to give everyone the power to share their story, explore what they love, and connect with one another in the process. Working at the intersection of cutting-edge technology and boundless creativity, we move at the speed of culture with a shared goal to show people the world. We explore new ideas, solve real problems, and have fun — and we do it all together.

JOB DESCRIPTION

Fast-paced, dynamic, and proactive, YouTube’s Trust & Safety team is dedicated to making YouTube a safe place for users, viewers, and content creators around the world to belong, create, and express themselves. Whether understanding and solving their online content concerns, navigating within global legal frameworks, or writing and enforcing worldwide policy, the Trust & Safety team is on the frontlines of enhancing the YouTube experience, building internet safety, and protecting free speech in our ever-evolving digital world.

ADDITIONAL JOB DESCRIPTION

As a Policy Enforcement Manager, you will work with global teams to prevent violative content from appearing on the site with a focus on harassment. You will evaluate abuse trends and quality within vendor operations and develop creative solutions to address quality, workflows, and processes. You will also review decisions about the appropriateness of different content, including considerations of cultural and political sensitivities. In this role, you will review graphic, controversial, and offensive video content in line with YouTube’s Community Guidelines. You will be required to work on-call on weekends and holidays on a rotational basis. You will also be exposed to graphic, controversial, and/or upsetting content.

Qualifications

JOB RESPONSIBILITIES

• Research and stay up-to-date on key trends and suspicious patterns across policy areas.
• Oversee enforcement quality across policy areas, including calibrations with vendor teams.
• Work cross-functionally, think strategically, and keep our users safe while protecting free speech.
• Review graphic, controversial, and sometimes offensive video content in line with YouTube’s Community Guidelines.

MINIMUM QUALIFICATIONS

• Bachelor's degree or equivalent practical experience.
• 2 years of experience in data analytics, Trust and Safety, policy, cybersecurity, or related fields.
• Experience in content policy, anti-abuse or reviewing online content.
• Ability to work non-standard hours, including on-call rotation weekend and holiday hours.

PREFERRED QUALIFICATIONS

• Experience with identifying abuse trends or working in news or policy.
• Experience with SQL or large data sets and spreadsheet software and using data to drive strategy and business action along with strong problem-solving skills.
• Ability to build effective relationships with cross-functional partners across geographies.
• Excellent organizational, people management, and project management skills with good attention to detail.

Main Responsibilities

Person will be responsible for following responsibilities in day-to-day work:

• Focal Point of contact for Technical management of Menlo Web Isolation Platform (“Menlo”). Person will primarily be responsible for managing the Menlo setup and ensuring the service is available, functional, and up-to-date;
• Propose, plan and execute timely upgrades to ensure that the Menlo setup remains current;
• Propose, plan and deploy the various security related policies by leveraging different features available in product;
• Active coordination with product support vendors for any product related issues or bugs;
• Propose, plan and execute actions to ensure that web traffic requests for identified users are routed through Menlo solution;
• Work with end-users where there are issues reported for external website accessibility and/or functionalities;
• Ensure policy exclusions are challenged, reviewed, validated and deployed as per approved plan;
• Periodical review of policy exclusions and ensure that they are relevant to the current context;
• Collaboratively work with network and other infrastructure teams globally for related issues;
• Propose, plan and execute Service improvements initiatives in order to elevate the current state, including identifying the activities to automate, improve and fine-tune the policies
• Handling RFCs, Incidents and Problem tickets under ownerships- and manage related day-to-day operations;
• Maintaining and Reporting the various KPI indicators pertaining to the technologies under administration scope and leading the report actions;
• Vulnerability Scanning and Remediation of the technologies under management scope
• Planning the periodical Technology Upgrades- testing and implementation;
• Identify Risks under respective technology under ownership, maintain Risk Register and work towards closure of risks and issues;
• Escalate- discuss and consult- technical issues, Incidents, RFC roadmaps and Problem tickets as required to next levels and Management in timely manner;
• Provide technical subject matter expertise on the solutions under technical ownerships;
• Perform Root Cause Analysis for Major Incidents and provide report in timely manner and maintain proactive follow-ups to close the actions;
• Perform Trend analysis, identify top few incidents and work with respective teams/individuals to minimize the incidents, hardware/software troubleshooting;
• Participate in meetings with various stake holders as per the schedules;
• Liaise with different vendors to ensure product issues are resolved as per operational and functional needs;
• Liaise with different teams in different geographical zones;
• Adhere to different policies set out by the organization;
• Prepare and provide different reports (weekly/monthly/ad-hoc) as necessary for Operations;
• Perform changes or work on incidents during weekends as necessary;
• Participate in periodical Disaster Recovery and Business Continuity exercises as per the plan;
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role;
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.
• To take up additional responsibilities as per Operational needs for the scope under the team.

Work Schedule

• Work schedule is mainly focused to support Asia and EMEA (Paris) time zone;
• Work Hours: 2 PM – 11 PM SGT (with 1 week of General shift 9 AM – 6 PM SGT as per rotation).
• Rotational Shift schedule is followed between general and afternoon hours;
• Candidate have to be standby to support critical issues reported outside of business hours and on weekends. This will be based on On-call Schedule roster which is pre-defined.

Qualification Requirements

• 8 -10 years of IT experience with minimum 5 years of hands-on experience in network security managing web traffic proxies or web phishing prevention/web isolation platforms e.g. Menlo Web Isolation Platform
• Should be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;
• Working & hands-on experience in administering the Menlo Web Isolation Platform and any of the Web Proxies solutions;
• Experience in managing Production setup in Run (Operations) mode;
• Ability to apply Risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;
• Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;
• Excellent in analytical, communication and documentation skills;
• Ability to organize work and be able to priories work as per the needs of Production Operation’s needs;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Ability to work independently and as well as a part of team and is able to work under minimal supervision;
• Should have time management skills and able to manage work in a fast-paced environment.

Professional Certifications:

• Security Certifications: Comptia Security+, CISSP is highly preferred

Interested applicants, please email your resume to Shaun Quek Yew Meng

Email: shaunquek@recruitexpress.com.sg

CEI Reg No: R1660732

EA Licence No: 99C4599

We are JTI, Japan Tobacco International, and we are present in 130 countries. We have spent years innovating, creating new and better products for the consumers to choose from. This is our business. But not only. Our business is our people. Their talent. Their potential. We believe that when they are free to be themselves, and they are given the opportunity to grow, travel and develop, amazing things can happen.

That’s why our employees, from around the world, choose to be a part of JTI. It is why 80% of employees feel happy working at JTI. And why we’ve been awarded Global Top Employer status, ten years running.

So when you’re ready to choose a career you’ll love, in a company you’ll love, feel free to #JoinTheIdea.

Learn more: jti.com

Global Travel Retail (GTR) is among the largest volume markets in JTI, operating in 160+ countries with 37 brands. We sell JTI products to international travelers in various channels (airports, border shops, ferries, diplomatic shops, etc.) and aspire to become the No.1 Tobacco Company in Travel Retail.

GTR is a highly culturally diverse market with employees from 37 nationalities working across the globe, with the market HQ based in Geneva and several Regional Hubs around the world.

What this position is about – Purpose

The GTR Legal Manager will be responsible for providing legal advice to the GTR business on all legal matters affecting its operations. The aim is to achieve corporate and commercial objectives in a manner that ensures compliance with the law and appropriate monitoring and management of legal risk.

The Legal Manager will be responsible for all legal matters (marketing activities, products regulation, contracts, etc.) for the ASIA and MENEAT Hubs and act as 1st point of contact for the business teams. Active participation in business meetings as well as collaboration with Market and HQ Lawyers and other Legal and Regulatory Affairs functions are key.

What will you do – Responsibilities:

• Performs legal advice on Tobacco regulations to the business teams in the ASIA and MENEAT hubs and to GTR central functions. Performs complex research and analysis of local laws in GTR markets with a focus on product regulation and marketing activities.
• Works in close collaboration with Market Lawyers.
• Analyzes the potential impact of anticipated regulations and actively supports the Corporate Affairs Department in its advocacy efforts
• Responsible for the review, drafting, and legal negotiation of GTR agreements in the Regional hubs he/she is responsible for (e.g. sales and distribution agreements and on Smoking Lounges agreements).
• Supports the development of the GTR Route to Market strategy in these markets
• Works closely with the Legal Director on a variety of topics, such as the implementation and monitoring of JTI's Competition law Policy and International Economic Sanctions. Responsible for the preparation of training materials for these matters, including delivering the necessary training to GTR colleagues
• Closely cooperates with external counsels and ensures the quality of outsourced legal advice as well as cost control/follow-up

Whom are we looking for – Requirements:

• University Degree in Law
• Minimum 8 years of work experience in a law firm and/or multinational corporation
• Capacity to work autonomously and make effective decisions quickly, capacity to prioritize a diverse workload.
• Strong negotiation and excellent communications skills, cultural sensitivity, business and results oriented.
• Demonstrated competence as a practicing lawyer in international business transactions, contracts, distribution, and competition/antitrust areas as well as regulatory issues.
• Experience in the Travel Retail Industry is not required
• Fluency in the English language both written and verbal
• Fluency in Mandarin is an advantage.

EDP Renewables is the main subsidiary of EDP Group), a global leader in the renewable energy sector and one of the world’s largest wind producers. With its headquarters in Singapore, EDP Renewables is the leading sustainable development hub for the Asia Pacific region with activities across nine different markets. Our activities are focused on the design, development, management, and operation of renewable energy sources, namely solar, wind, as well as new technologies such as storage.

EDP is a global energy group leading the Energy Transition, Innovation and Sustainability. Using the technology of the future, we create solutions highly focused on the needs of our people and our customers, never neglecting our role and contributions to society. To achieve our goals, we aim to attract diverse people with high potential through the professional opportunities we create.

Join us to be part of a renewable energy leader that reinvests in society through sustainable projects and social as well as cultural causes. You will have the opportunity to actively participate in our global transformation, by changing tomorrow now.

Responsibilities

• Extend EDP/EDPR SOC vulnerability management activities and SIEM monitoring to cover EDPR Sunseap's environment.
• Validate the operational security reports produced by the EDP/EDPR SOC and lead the resolution initiatives on EDPR Sunseap.
• Lead and follow-up Security Incidents and Crisis Management in the face of Security Incidents.
• Define an incident response plan and identify roles responsible for carrying out mitigation efforts.
• Test periodically the incident response plan and EDP/EDPR Group’s overall coordination.
• Propose and ensure the implementation of the EDPR Sunseap Security Roadmap of initiatives, in order to protect its assets against risks and threats.
• Whenever requested, know and investigate the vulnerabilities of the Information Systems, applying this knowledge to determine vulnerabilities in the EDPR Sunseap infrastructure and define the respective mitigation actions.
• Design and implement Security operations processes, including Security Incident Management and Security Vulnerability Management (in alignment with EDP/EDPR processes).
• Participate in the activities aimed at protecting the EDPR Sunseap IT assets in terms of Information Security, through the monitoring, detection and resolution of Security incidents, as well as the respective mitigation of the risks identified.
• Define, together with the Business Units, the monitoring scenarios in the context of the Business processes that may constitute Security incidents.
• Define Security requirements in projects and services.
• Perform information security activities such as vulnerability management, application development security, business continuity, networking, risk management, etc.
• Perform first-level incidence responses and computer forensic activities whenever integrated into technical teams when requested.
• Identify, extract, preserve and document evidence of security incidents in the EDPR Sunseap information systems (aligned with EDP/EDPR security teams).
• Collaborate with IT teams and business areas to develop information security activities, such as training, awareness, or exercises.

Requirements

• Degree/Diploma in IT or equivalent
• Possess a minimum of 3-year work experience in IT Security field
• Possess a valid Industry-accepted IT Security Professional Certifications (such as CISSP, CISA or equivalent)
• Knowledge of International Standards and Best Practices for IT ( ISO/IEC 27001, NSA Security Guidelines)
• Good written and verbal communication skills.
• Ability to work in a collaborative environment and with global teams.
• Ability to critically analyse and focus on problem solving.
• Commitment to quality delivery.
• Knowledge of the Energy & Utilities (valued).
• Value alignment: stewardship, collaboration, innovation and with a spirit of excellence

When you join EDP Renewables, you will have access to:

• Professional experience in a leading global company in the renewables industry with flexible work conditions
• Recognition through remuneration compatible with the role and other additional benefits
• Opportunities for personal and professional development, e.g. cross-cutting projects, mobilities and volunteering

About EDP Group:

As a socially responsible company, we incorporate our values and practices with the principles of Diversity and Inclusion. To achieve all our objectives, we intend to attract, develop and retain different profiles, assuming diversity as a key factor and differentiator of fundamental innovation in our organisation. We welcome and value all people, and we are committed to the inclusion and sense of belonging of each person who is part of the EDP Group.

What makes us proud as an employer:

• TOP Employer Europe 2021 certification
• Bloomberg Gender Equality Index 2021
• Top Workplaces US 2021
• Certification in Conciliation (Excellence) by the Más Familia Foundation

Position Summary

Role and Responsibilities

• Lead, coach and manage Field Force, Merchandising and Training teams for Mobile segment with ultimate goal of producing strong talents. 
• Continuously improve performance and capabilities across Field Force, Merchandising and Training teams to deliver quality and speed to market resulting in sales.
• Take charge and manage internal and external training programs defined by team lead, RHQ or HQ.
• Plan departmental/functional Field Force and Training team budgets, forecast costs and delegate numbers as required by organizational planning and budgeting systems.
• Ensure all training activities and materials meet with organizational requirements and statutory policies, including health and safety, legal stipulations, general duty of care and employment laws.
• Lead Field Force and Training teams to proactively strategize on new and improved ways to drive customer engagement, resulting in higher conversion rates.
• Lead Merchandising team in driving new ways of working to deliver timely and accurate launches as well as day-to-day operations.
• Conduct planned and ad-hoc store visitations to sense market, including competitor launches and movements.

#LI-Midsenior #LI-SME

Skills and Qualifications

• At least a Degree holder, majoring in Business Administration or any relevant courses
• Min 5 years’ working experience in managing field force and/or promoters
• Excellent communication and presentation skills
• Pleasant appearance, well groomed
• A people person, team player, organized, agile and independent
• Strong power point and excel skills
• Fluent in English, Malay and Chinese
• Tech savvy

* Please visit Samsung membership to see Privacy Policy, which defaults according to your location. You can change Country/Language at the bottom of the page. If you are European Economic Resident, please click here.

PRODUCT AREA

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats.

ADDITIONAL JOB DESCRIPTION

As a Strategic Services Function Manager, you will blend risk assessment, strategic planning, and client collaboration. You will manage a team of cyber security consultants. You'll conduct in-depth cyber maturity assessments, develop forward-thinking strategies, and lead realistic simulations that help clients prepare for and respond to cyber threats.

In this role, you will identify vulnerabilities and develop actionable mitigation plans. You'll empower clients with data-driven insights, enhancing their security posture.

Qualifications

JOB RESPONSIBILITIES

• Manage and inspire a highly skilled team towards surpassing our goals by driving performance and outcomes, while managing workload, scheduling resources, and ensuring the quality of their output.
• Foster expansion in the APAC region for our Strategic Services Practice through the identification and advancement of opportunities, aiding in the creation and development of Statements of Work, and participating in responses to RFPs/RFIs/RFQs. Promote a culture of continuous learning and development within the cyber security practice.
• Perform in-depth assessments to identify and analyse cyber vulnerabilities and threats. Prioritize risks based on their potential impact.
• Craft cyber risk mitigation strategies, ensuring alignment with regulations (e.g., GDPR, ISO 27001, NIST/CIS Controls).
• Collaborate with clients to tailor cyber security solutions. Generate clear reports and presentations explaining risks and mitigation plans. Scope and propose solutions to clients.

MINIMUM QUALIFICATIONS

• Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent practical experience.
• 10 years of experience in cyber security with a risk assessment focus.

PREFERRED QUALIFICATIONS

• Master's degree in a relevant field.
• Professional certifications in cyber security (e.g., CISSP, CISM, CRISC)
• Consulting and/or project management experience, and experience leading cyber security assessments, including Table-Top Exercises (TTX).
• Knowledge of security frameworks (e.g., ISO 27000, NIST CSF).
• Ability to present complex security concepts to varied audiences (e.g., technical and executive).
• Excellent communication and problem solving skills.

About Us

Green Link Digital Bank is Singapore's inaugural wholesale digital bank focusing on supply chain finance, mainly serving MSMEs and aiming to help MSMEs grow and improve digitization.

We are seeking a highly motivated and detail-oriented IT Security Intern to join our team. The successful candidate will work closely with our IT Security team to ensure the confidentiality, integrity, and availability of our information systems. The IT Security Intern will be responsible for assisting in the development, implementation, and maintenance of security policies, procedures, and standards. The intern will also assist in the identification, analysis, and resolution of security incidents.

Duration: 6 months

Responsibilities

• Assist in the development, implementation, and maintenance of security policies, procedures, and standards.
• Assist in the identification, analysis, and resolution of security incidents.
• Assist in the development and delivery of security awareness training programs.
• Assist in the evaluation and testing of security technologies.
• Assist in the development and maintenance of security documentation.
• Assist in the monitoring and reporting of security metrics.

Requirements

• Currently pursuing a bachelor’s degree in Computer Science, Information Security, or a related field.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work independently and as part of a team.
• Knowledge of security technologies and concepts is a plus.
• Able to commit for a minimum of 6-months.
• Full-time interns preferred, but open to part-time interns of minimally 3 working days.

Roles & Responsibilities

• Manage communications and working relationships between IT and other departments within the organization as well as multiple outside IT service providers.
• Design, develop, implement, and coordinate policies and procedures for all areas of information technology to assure data accuracy, security, legal and regulatory compliance; assure compliance with Standard.
• Implement, maintain, and ensure maximum uptime for IT systems and user support.
• Hands-on experience on IT supports and Perform the hardware and software installation and maintenance.
• Support the IT infrastructure with a focus on Cloud server and in-house server in office.
• Maintain the telecommunication and data communication links, network routing and switching, firewall and security, SAN storage, server virtualization and OS maintenance, database management, end-point protections.
• Maintain IT Operations & system/network appliance, IT Administration & Resource Planning.
• Business Recovery, Security Risk & Operational Risk, Project Management, PDPA policy, Documentation & Work Procedure Manual to ensure compliance and regulatory requirements and industry standards.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• Carry out any additional responsibilities assigned by the Supervisor.

Job Requirement

• Diploma/degree in computer studies
• 2 years of experience working in a security operation, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Technical knowledge – Network switches, servers, PCs, printers, and other equipment all fall under the IT infrastructure engineer’s purview.
• Have the knowledge to manage VLANs on wired/wireless networks.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Have team work spirit, weekend support are required when needed.
• Be fluent in English listening, speaking, reading and writing.

Added experience in the below will be an advantage.

• Work experience for Oracle Cloud Infrastructure and AWS.

JOB OBJECTIVE

CDS Asia provides a range of cybersecurity services and solutions to our regional clients with a strong focus on Operational Technology. Our ambition is to scale up our existing business and increase our footprint in the region with a refreshed strategy and mandate to leverage our global capability and win new business in our core markets.

We are actively seeking a Senior Cybersecurity Engineer to take a leading role in design, development and implementation of IT/OT cybersecurity solutions within our existing install base.

The role will require someone that this is a problem solver, determined and enthusiastic. They will bring experience of implementing a wide variety of cybersecurity products and solutions within large complex system development. They will have the ability to apply cybersecurity and principles to organizational requirements and be able to identify and remediate critical infrastructure systems that were designed without system security considerations.

The successful Candidate will enjoy a rewarding role full of new challenges and be part of a company that provides highly complex solutions in the most critical operational environments where robust safety and resilience standards are applied.

ROLES & RESPONSIBILITIES

• Define overall security solution strategies based on customer requirements.
• Work with Thales engineering teams to integrate cybersecurity solutions into existing and new platforms.
• Act as the single point of contact for customer security queries.
• Contribute to the management of the risks and/or opportunities during the project implementation phase, including managing subcontractors and partners
• Analyse design constraints, analyse trade-offs and detailed system and security design, and consider life cycle support.
• Build, test, and modify product prototypes using working models or theoretical models.
• Design and develop cybersecurity or cybersecurity-enabled solutions.
• Design or integrate appropriate cybersecurity capabilities into overall system designs.
• Develop and execute system testing and validation procedures and documentation.
• Develop architectures or system components consistent with technical specifications.
• Identify and direct the remediation of technical problems encountered during testing and implementation of new systems.
• Identify, assess, and recommend cybersecurity or cybersecurity-enabled products for use within a system and ensure that recommended products are in compliance with evaluation and validation requirements.
• Perform risk analysis whenever an application or system undergoes a major change.
• Provide guidelines for implementing developed systems to customers or installation teams.
• Store, retrieve, and manipulate data for analysis of system capabilities and requirements.
• Utilize models and simulations to analyse or predict system performance under different operating conditions.
• Implement and integrate various system development life cycle methodologies into development environment.
• Conduct a market analysis to identify, assess, and recommend commercial, off-the-shelf, and open source products for use within a system and ensure recommended products are in compliance with evaluation and validation requirements.
• Design and develop system administration and management functionality for privileged access users.
• Design, implement, test, and evaluate secure interfaces between information systems, physical systems, and/or embedded technologies.
• Ensure that design and development activities are properly documented and updated as necessary.
• Design to security requirements to ensure requirements are met for all systems and/or applications.
• Develop detailed design documentation for component and interface specifications to support system design and development.
• Implement designs for new or existing system(s).
• Perform security reviews and identify security gaps in architecture.
• Provide input to implementation plans, standard operating procedures, maintenance documentation, and maintenance training materials
• Provide support to test and evaluation activities.
• Trace system requirements to design components and perform gap analysis.
• Analyse user needs and requirements to plan and conduct system development.
• Develop designs to meet specific operational needs and environmental factors (e.g., access controls, automated applications, networked operations.
• Collaborate on cybersecurity designs to meet specific operational needs and environmental factors (e.g., access controls, automated applications, networked operations, high integrity and availability requirements, multilevel security/processing of multiple classification levels, and processing Sensitive Compartmented Information).

WORK EXPERIENCE REQUIREMENTS

• Minimum of 8 years’ experience of security engineering
• Strong critical thinking and problem-solving skills and a passion for information security
• Experience of working with internal experts/external vendors to resolve technical issues independently
• Fluent communicator in both written and spoken English;
• Previous consulting or professional services experience
• Knowledge of Aviation, Government, Defence and Transportation sectors
• Knowledge of computer networking concepts and protocols, and network security methodologies.
• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
• Knowledge of regional laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
• Knowledge of cyber threats and vulnerabilities.
• Knowledge of OT security architecture.
• Knowledge of industrial evaluation and validation requirements.
• Knowledge of installation, integration, and optimization of system components.
• Knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Knowledge of information security systems engineering principles.
• Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
• Knowledge of network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML).
• Knowledge of various operating systems.
• Knowledge of secure configuration management techniques.
• Knowledge of software development and engineering models (e.g., Agile, Lean, Waterfall Model, Spiral Model).
• Knowledge of system software and organizational design standards, policies, and authorized approaches (e.g., International Organization for Standardization [ISO] guidelines) relating to system design.
• Knowledge of system life cycle management principles, including software security and usability.
• Knowledge of Supply Chain Risk Management Practices
• Knowledge of critical infrastructure systems with information communication technology that were designed without system security considerations.
• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defence-in-depth).
• Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
• Knowledge of countermeasure design for identified security risks.

QUALIFICATION, CERTIFICATION & EDUCATIONAL REQUIREMENTS

• Degree in Information Security (preferred) or Information Technology or Computer Science
• Certified Information Systems Security Professional (CISSP), or
• Certified Information Security Manager (CISM)

Preferred

• Information Security Masters degree from either:U.S. National Centres of Academic Excellence in Cyber Defence; or, those certified by U.K. National Cyber Security Centre
  
• CREST Registered Technical Security Architect (CRTSA); or
• Information Systems Security Architecture Professional (CISSP-ISSAP).

Main responsibilities

dministration of different Endpoint Security solutions e.g., Symantec Endpoint Protection, Trend Micro Host Intrusion Prevention, Phishing Prevention solution and other endpoint security solution/services as under the scope of team;

Ø Focal Point of contact for Technical management of Symantec Endpoint Protection (“SEP”). Person will primarily be responsible for managing the SEP setup and ensuring the service is available, functional, and up-to-date;

Ø Propose, plan and execute timely upgrades to ensure that the SEP setup remains current;

Ø Propose, plan and deploy the various endpoint security related policies by leveraging different features available in SEP product;

Ø Propose solutions in order to meet various regulatory and policy requirements;

Ø Active coordination with product support vendors for any product related issues or bugs

Ø Propose, plan and execute actions to ensure that Ant-virus (“AV”) protection compliance target levels are met or exceeded; where issues are observed, identify patterns and work with servers and workstations teams for remedation;

Ø Propose, plan and execute Service improvements initiatives in order to elevate the current state, including indentifying the activities to automate, improve and fine-tune the policies;

Ø Ensure AV exclusions are challenged, validated and deployed as per approved plan;

Ø Review AV exclusions and ensure that they are relevant to the application needs;

Ø Collobaratively work with various infrastructure teams globally for AV related issues;

Ø Ensuring that virus relared alerts are attended to with priority; own & drive the remediation end-to end. Involve all the right teams needed to clean/quarantine/delete the viral incident.

Ø Handling RFCs, Incidents and Problem tickets under ownerships- and manage related day-to-day operations;

Ø Maintaining and Reporting the various KPI indicators pertaining to the technologies under administration scope and leading the report actions;

Ø Vulnerability Scanning and Remediation of the technologies under management scope

Ø Planning the periodical Technology Upgrades- testing and implementation;

Ø Identify Risks under respective technology under ownership, maintain Risk Register and work towards closure of risks and issues;

Ø Escalate- discuss and consult- technical issues, Incidents, RFC roadmaps and Problem tickets as required to next levels and Management in timely manner;

Ø Handle first point escalation for all technical issues related to Symantec Endpoint Protection and any other AV related issues;

Ø Provide technical subject matter expertise on the solutions under technical ownerships;

Ø Perform Root Cause Analysis for Major Incidents and provide report in timely manner and maintain proactive follow-ups to close the actions;

Ø Perform Trend analysis, identify top few incidents and work with respective teams/individuals to minimize the incidents, hardware/software troubleshooting;

Ø Participate in meetings with various stake holders as per the schedules;

Ø Liaise with different vendors to ensure product issues are resolved as per operational and functional needs;

Ø Liaise with different teams in different geographical zones;

Ø Adhere to different policies set out by the organization;

Ø Prepare and provide different reports (weekly/monthly/ad-hoc) as necessary for Operations;

Ø Perform changes or work on incidents during weekends as necessary;

Ø Participate in periodical Disaster Recovery and Business Continuity exercises as per the plan;

Ø Maintain appropriate knowledge to ensure to be fully qualified to undertake the role;

Ø Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Ø To take up additional responsibilities as per Operational needs for the scope under the team.

Work Schedule

v Work schedule is mainly focused to support Asia and EMEA (Paris) time zone;

v Work Hours: 2 PM – 11 PM SGT (with 1 week of General shift 9 AM – 6 PM SGT as per rotation).

v Rotational Shift schedule is followed between general and afternoon hours;

v Candidate have to be standby to support critical issues reported outside of business hours and on weekends. This will be based on On-call Schedule roster which is pre-defined.

Requirements

Ø 8 -10 years of IT experience with minimum 5 years of hands-on experience in administration and management of Symantec Endpoint Protection (SEP Anti-virus);

Ø Should be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;

Ø Working & hands-on experience in administering the IT Security Solutions;

Ø Experience in managing Production setup in Run (Operations) mode;

Ø Ability to apply Risk based approach while working on assigned responsibilities;

Ø Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;

Ø Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;

Ø Excellent in analytical, communication and documentation skills;

Ø Ability to organize work and be able to priories work as per the needs of Production Operation’s needs;

Ø Must have strong understanding of ITIL processes and comfortable working in process oriented environment;

Ø Ability to work independently and as well as a part of team and is able to work under minimal supervision;

Ø Should have time management skills and able to manage work in fast moving environment;

Ø Excellent written and oral English language skills;

Ø Knowledge of French language is preferred due to interactions with France Headquarters.

Professional Certifications:

• Security Certifications: Security+, CISSP is highly preferred
• Symantec Certified Specialist: Administration of Symantec Endpoint Protection (any version) is highly preferred.

Interested applicants, please email your resume to Shaun Quek Yew Meng.

Email: shaunquek@recruitexpress.com.sg

CEI Reg No: R1660732

EA Licence No: 99C4599

Job description

• Responsible for the planning, organizing, coordinating and controlling of security operations and activities in the Club.
• Manages and operates the Security Department in a manner so as to ensure the safety of the members/employee and safeguard the assets/facilities of the Club.
• Develop, coordinate and implement security policies, standards, systems, procedures, strategies and practices for the department.
• Trains and conducts all security-related programs for all employees for the purposes of improving work performance, achieving greater work productivity and increasing member satisfaction thereby ensuring the achievement of departmental goal.
• Conducts frequent Security Operations Meetings. Conducts briefings with all security personnel to facilitate communication and dissemination of information.
• Discussion and meetings with security vendors and contractors on security system repairs, maintenance, additions, upgrades and enhancements (for both hardware and software). Liaise with them on system evaluation trials, testing and observation, frequent trouble-shooting and problem resolution.
• Follow up on security enhancement projects – progress and development, if any.
• Conducts daily inspection of the Club’s premises, facilities, exit/entrances regularly, eg fire extinguishers, emergency exits and lights, security lights, security/fire safety equipment etc.
• To stand in as Fire Safety Manager as and when required.
• Any other duties as assigned by the Management

Requirement:

• Good industry knowlegde
• PLRD Certified

Other Information

• Work location: West Coast Ferry Road (Bus 175 and 176) beside West Coast Park
• Permanent role with attractive benefits
• Meals provided
• Company transport provided (Clementi MRT Station)

Responsibilities:

- Actively develop new business and participate in new business pitches

- Develop and execute communications strategy and tactics for clients

- Set up framework for monitoring and measuring performance for clients

- Develop materials required for clients including but not limited to: briefing books, press releases, media pitches, thought leadership articles

- Act as point of contact for clients; cultivate and maintain cordial client relationships, and ensure high level of client satisfaction

- Manage client accounts independently with little guidance from directors

- Cultivate and maintain strong media relationships not limited to target markets

- Manage account budgets and ensure account profitability

- Manage and mentor SAEs, AEs and interns

- Be able to troubleshoot bottlenecks in processes and workflow, and provide solutions to make internal improvements

- Actively build firm visibility through networking opportunities, develop and execute internal PR strategy

Requirements:

- 3 or more years of public relations/integrated communications experience in an agency with proven track record in securing new business and accounts management

- Able to manage given budgets independently

- Strong organisational, project management and leadership abilities

- Experience in managing one or more account executives and/or intern

- Solution-minded with an open mind to embrace new ideas and methodologies

- Strategic thinker

- Detail-oriented

- An interest in emerging markets such as technology and esports

- Able to embrace the startup culture and willingness to be hands-on to grow with the agency

- Uphold professional conduct and DIFY’s core values

Knowledge in Technology/Fintech/Blockchain sectors

Only shortlisted candidates will be notified

• Lead the planning and development of public affairs, communications strategy and operations to help drive brand awareness and thought leadership
• Responsible for ongoing public relations and communications operations including press releases (drafting & distribution), drafting of corporate FAQs, drafting of media enquiries responses, thought leadership papers and speaking opportunities, editorial calendar planning and etc.
• To work with the marketing department to develop engaging, educational and inspirational content in areas of stories, thought leadership, news and etc.
• Work closely with internal stakeholders for information or data collection for public affairs and communications on campaigns and content.
• Work closely with external stakeholders such as media, events company and government-related agencies to help drive brand awareness and thought leadership (speaking opportunities and etc)
• Lead in tracking, analysing and reporting on the effectiveness of public affairs and communications efforts.
• Assist in any other communication, marketing, or sustainability matters

Qualifications:

• Degree or Diploma in Business or Mass Communications
• 5 years relevant working experience in public affairs/corporate communication/public relations
• Experience in clean/renewable energy or similar will have an advantage
• Digital marketing experience will be a bonus