Total 1,241 it specialist job vacancies in Legal / Public / Security category in Malaysia

Responsibilities

• Manage sourcing for multiple, complex searches to find and engage key technical talents of all levels globally.
• Collaborate closely with the Recruiting team (TA Partners and Recruitment Coordinators) & hiring managers throughout the recruitment lifecycle to ensure business needs and goals are fulfilled.
• Develop a holistic business understanding and manage stakeholder relationships including HRBP, hiring managers, and external partners.
• Own and drive innovative sourcing strategies, initiate new projects and/or optimise current processes to improve recruiting process and efficiency.
• Conduct complex data analysis and share up-to-date, accurate, and value-adding market intelligence to business leaders to support business growth.
• Ensuring a great candidate experience and advocate as a great place to work for all candidates.

Qualifications

• Proven experience with research/sourcing tools (ie. Boolean, LinkedIn and other alternative sourcing techniques) to identify & engage passive candidates within the tech industry talent space.
• Excellent interpersonal skills with the ability to build rapport quickly with stakeholders and communicate effectively across all levels of the organization internally, as well as externally.
• Ability to contribute in a fast-paced work environment and prioritise multiple functions and tasks.
• At least 1 year of equivalent sourcing experience in a high-volume environment (via recruitment agencies or in-house recruiting environment).
• Proven track record in sourcing/recruiting tech roles with solid understanding of global tech talent market.
• Strong analytical and problem-solving skills with the capability to analyse high amounts of data to support business strategies and decisions.

Position

Data Security Specialist- Data Security and Endpoint Security

Data Security Specialist is a technical Specialist role within the Data Security Services team and will be responsible for managing, administration and supporting the Data Security and Endpoint Security technologies for the bank.

Person will be the technical point of contact for the Run team and the related activities to data security and will be the last level of escalation for the Security specialists in the team. He/She is also responsible for the technical transition and validation of Security services from other regions to Singapore. He/She will be involved in projects and POC’s that may involve security services. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Specialist on the technologies within data security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France and UK) and Asia remotely from Singapore. France infrastructure represents approximately 80% of the worldwide production activities of CA-CIB in Singapore.

Team works in Europe time zones and this role will be aligned primarily to Paris working hours. Flexible rotations are followed based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect,
• Encryption Solutions: Disk Encryption, File and Folder encryption,
• Database Audit Monitoring solutions
• Email and Web Phishing Prevention solutions.
• Vulnerability Management

Detailed Job Responsibilities

The Specialist has a wide spectrum of responsibilities and actions. Person will be responsible for following (but not limited to) responsibilities in day-to-day work:

As the Specialist of the team, he/she:

• act as the last level of escalation for the team members
• own Incident, Problem and change management process for the team
• assigns technical tasks and manages delegation
• animates the team to encourage collaboration and sharing of practices
• participates to recruitment process for the team

As the Specialist of his/her scope of activity, he/she:

• is actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management
• Is the final technical approver for any changes into Data Security systems and is accountable for any technical changes in the environment from a RUN/BAU perspective
• Is involved in projects like End of Life, New Builds, migrations and technical upgrades of the solution managed by the team
• Participates in global Infra events (like Power down and DR Tests)
• ensures activity is performed in compliance with norms, standards, processes and procedures
• gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting
• ensures documentation is up to date and relevant for use
• lead the continuous improvement initiatives
• responsible to drive and deliver root cause for any high severity issues
• Focus on automation and optimum use of the team to improve efficiency
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

• Work schedule is mainly focused to support Asia and EMEA (Paris) time zone; however, may have to support during non-offce hours for critical incidents or escalation as per the assigned on-call support requirements;
• Rotational Shift schedule is followed;
• Work Hours: 2 PM – 11 PM SGT (with 1 week of General shift 9 AM – 6 PM SGT).

Qualifications and Profile

Functional

• 8 - 10 years of IT Security experience in administration and management of IT Security technologies primarily Symantec Data Loss Prevention, Symantec Endpoint Protection, Email Security, Data Classification and other endpoint & data security solutions;
• Should be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;
• Knowledge of different domains of IT Security;
• Working & hands-on experience in administering the IT Security Solutions;
• Must have experience in working in similar Production setup in Run (Operations) mode;
• Ability to apply risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;
• Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;
• Excellent in analytical, communication and documentation skills;
• Ability to organize work and be able to priories work as per the needs of Production Operation’s needs;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Ability to work independently and as well as a part of team and is able to work under minimal supervision;
• Should have time management skills and able to manage work in fast moving environment;

Technical

• Hands-on experience on Symantec Data Loss Prevention (DLP);
• Highly proficient in data leakage prevention (DLP) technologies - troubleshooting and configuration management;
• Deployment, integration and administration experience of various components of Symantec DLP:

- Symantec Endpoint Protect

- Symantec Web Prevent

- Symantec Email Prevent

- Symantec Enforce

• Must have experience in defining, designing and configuring DLP Policies as per the business requirements;
• Deploy, upgrade and troubleshooting knowledge on Symantec DLP solution;
• Scripting knowledge (Phyton, Regular Expression, Powershell) is desirable;
• Professional Certifications:

- CISSP certified is highly preferred

- Symantec Certified Specialist: Administration of Data Loss Prevention (any version) is highly preferred.

Interested applicants, please email your resume to Shaun Quek Yew Meng

Email: shaunquek@recruitexpress.com.sg

CEI Reg No: R1660732

EA Licence No: 99C4599

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Responsibilities
• Plan, implement, manage, monitor, and upgrade IT security solutions.
• Support projects by delivering project deliverables and completing milestones.
• Develop and maintain technical, operational, and configuration documentation necessary for project implementation.
• Coordinate and manage vendors for product implementation and troubleshooting.
• Evaluate security products and conduct Proof of Concept (POC) to verify the effectiveness of security measures, ensuring their continued efficacy post-implementation.
• Provide technical support and incident response for IT security infrastructure components to the maintenance team.

Requirements:
• Proficient in Endpoint Security solutions, including Anti-Malware, Host Firewall, Application & Change Control, Disk Encryption, and EDR.
• Knowledgeable in Identity & Access Control solutions, such as PKI solutioning, Hardware Security Module (HSM), Privileged Access Management, 2FA, and OS Hardening Policies.
• Implement Endpoint or Identity & Access Control Security tools.
• Familiarity with various operating systems like Windows or Linux.

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Interested Applicants
Please WA Bryan Tay @ 97559161
Shortlisted Candidates will be notified

Bryan Tay Reg No. R23112463
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

Wipro Limited is a leading global information technology, consulting and business process services company. We harness the power of cognitive computing, hyper-automation, robotics, cloud, analytics and emerging technologies to help our clients adapt to the digital world and make them successful.

A company recognized globally for its comprehensive portfolio of services, strong commitment to sustainability and good corporate citizenship, we have over 220,000 dedicated employees serving clients across six continents. Together, we discover ideas and connect the dots to build a better and a bold new future.

IT Security Specialist - Symantec DLP

Responsibilities

• Manage the different IT Security platforms seamlessly.
• Handle first point escalation for all technical and process issues.
• Provide technical subject matter expertise wherever required.
• Ensure proper communication and quick resolution as a crisis manager.
• Plan and schedule Changes, Coordinating with different stakeholders.
• Escalate issues to the next level and management in a timely manner.
• Perform RCA for Major Incidents related to his / her tower Follow quality / security process defined for the engagement.
• Perform Trend analysis, identify top few incidents and work with respective teams/individuals to minimize the incidents, hardware/software troubleshooting.
• Participate in business meetings with various stake holders on a need basis.
• Take corrective actions based on the analysis performed or issues identified.
• Liaise with different vendors to clarify questions or to resolve issues.
• Liaise with different teams in different geographical zones.
• Work on the service improvements.
• Effort estimation/reviews on need basis for new projects.
• Train/mentor team members.
• Work on knowledge acquisition and update related documents.
• Work on projects related to endpoint security and data security.
• Adhere to different policies set out by the organization and the customer.
• Educate team members and other teams or customers on different security policies.
• Prepare and provide different reports (weekly/monthly/ad-hoc) to the lead or manager as necessary.
• Participate in rotational on-call rota for data security platforms.
• Perform changes or work on incidents during weekends as necessary.

Requirement

Primary Skills:

• Expert Knowledge on Symantec Data Loss Prevention

Secondary Skills:

• Trend Micro Deep Discovery Email Inspector (or experience in any other Sand boxing based Security solution e.g. FireEye, McAfee Advance Threat Detection, Symantec Advance Threat Protection)
  Imperva Secure sphere (Database Audit Monitoring)
• Excellent in analytical skills
• Strong people, project/task management and communication skills
• Experience in defining, implementing, and enforcing enterprise-level security policies and business processes
• Knowledge and working experience in Financial Organizations is desirable
• Knowledge & working experience in IT Security
• In-depth understanding of endpoint and data security solutions
• Symantec Certified Specialist certification is a must: - Administration of Symantec Endpoint Protection
• CISSP certification is preferred.
• Excellent written and oral English communication skills
• Knowledge of French language is preferred

Other Infomation

• Rotational Shift ( 9 Hours / Shift), Work is mainly focused on Asia and Paris time zone; however may have to support in nights and weekend as per on call requirements

We thank all applicants for your interest but regret to inform that only shortlisted candidates would be notified.

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, caste, creed, religion, gender, marital status, age, ethnic and national origin, gender identity, gender expression, sexual orientation, political orientation, disability status, protected veteran status, or any other characteristic protected by law.

Responsibilities :

● Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.

● Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.

● Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.

● Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.

● Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.

● Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.

● Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.

● Developing and implementing security policies and procedures that ensure the organization’s data

and systems are protected against cyber threats.

● Conduct regular vulnerability assessments and penetration testing to identify potential security

weaknesses and risks to make improvements in the organization’s security.

● Report all security incidents to the home office and work with corporate IT on response and resolution strategy.

● Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.

● Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

● Bachelor’s degree in computer science, information technology, or equivalent experience.

● 5+ Years of experience in a cyber or information security management role.

● Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).

● Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.

● Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.

● Demonstrated understanding of business processes, IT risk management, and related standards.

● Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.

● Excellent problem-solving skills and the ability to think critically under pressure.

● Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.

● Proven track record of staying current with evolving cybersecurity threats and best practices.

● Exceptional planning and organizational skills, and excellent written and oral communication.

● Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.

● Professional information security certification preferred, such as:

○ CompTIA Security+

○ Certified Information Systems Security Professional (CISSP)

○ Certified Information Systems Auditor (CISA)

○ Certified Information Security Manager (CISM)

Location: East area

HOW TO APPLY :

Interested candidates, please submit your resume by clicking on “Apply Now” or aliceyap(a)hkmsvs.com

All applications will be treated in the strictest confidence and only shortlisted candidates will be notified

Yap Lay Choo

EA Licence No. 03C5391 | Registration No. R1987101

Job Description

Department: Business Engineering
Report to: Manager
Supervise:
Functional Relationships with: MES + ASEAN OSA OPA & Japan

Position Profile:
Based in: Singapore
The successful candidate will: Responsible to provide adequate IT security to MES & OSA, liaise with MMC IT security team, monitor security logs

Key Duties & Responsibilities:

• Work as an IT Security coordinator & Security operation center leader for ASEAN region
• Align cyber security needs with the business direction
• Initiate, develop, and maintain IT security policies, standards and procedures
• Facilitate a comprehensive Cyber Security training, awareness program and business continuity plans
• Perform IT Security risk assessments, propose and track remediation tasks
• Ensure IT compliance & governance measures are in place & followed
• Conduct audits of internal IT services and 3rd party services, as well work with external auditors on external audits
• Advise on appropriate cyber security solution & technology trends to be deployed
• Perform in-depth investigation to determine the root cause of a security incident
• Conduct analysis of logs from a wide range of systems, such as firewalls, EDR, SIEM, Anti-Virus, Vulnerability management to detect various types of IT-related threats
• Monitors security event reports and actions; ensuring the appropriate response is performed and coordinated.

Ability / Competency Required:

• Bachelor's Degree in Computer Science / Information Technology or Equivalent
• At least 1 year of working experience
• Good communication and presentation skills
• Able to work well as a team player while being independent and pro-active
• Positive attitude in challenging work environment
• Degree in Computer Science/ Information Technology or equivalent
• Good interpersonal and communication skills
• Ability to work well in a team
• Ability to perform multi-tasking

Murata Electronics Singapore is committed to providing a safe and secure environment for all job applicants.
Please note that Murata Electronics Singapore does not charge any fee for job applications or interviews. If you receive any suspicious emails or messages claiming to be from Murata Electronics Singapore, please do not respond and report it to us immediately.

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Responsibilities
• Plan, implement, manage, monitor, and upgrade IT security solutions.
• Support projects by delivering project deliverables and completing milestones.
• Develop and maintain technical, operational, and configuration documentation necessary for project implementation.
• Coordinate and manage vendors for product implementation and troubleshooting.
• Evaluate security products and conduct Proof of Concept (POC) to verify the effectiveness of security measures, ensuring their continued efficacy post-implementation.
• Provide technical support and incident response for IT security infrastructure components to the maintenance team.

Requirements:
• Proficient in Endpoint Security solutions, including Anti-Malware, Host Firewall, Application & Change Control, Disk Encryption, and EDR.
• Knowledgeable in Identity & Access Control solutions, such as PKI solutioning, Hardware Security Module (HSM), Privileged Access Management, 2FA, and OS Hardening Policies.
• Implement Endpoint or Identity & Access Control Security tools.
• Familiarity with various operating systems like Windows or Linux.

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Interested Applicants
Please WA Bryan Tay @ 97559161
Shortlisted Candidates will be notified

Bryan Tay Reg No. R23112463
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

Hi Everyone, PT Asuransi Jiwa Inhealth Indonesia Official (Mandiri Inhealth) is currently looking for suitable candidates to fill the position of Senior IT Security for our Head Office at Mega Kuningan, South Jakarta. Here are some of the details :

• Bachelor’s degree in Information Technology or System Information or a related field.
• Minimum of 5-10 years as a IT Security or IT Cyber Security
• Familiar with common security controls and security flaws for modern Mobile Application, Web Applications, APIs and Cloud Infrastructure
• Understands the OWASP testing methodology
• Manage reporting related Information System Security status
• Manage operational SIEM & Information System Security day to day
• Familiar with common security controls and security standard such as NIST
• Offensive Security certifications is an advantage such as CEH Pratical or OSCP /OSCE certifiied

Main Responsibilities

Person will be responsible for following responsibilities in day-to-day work:

• Focal Point of contact for Technical management of Menlo Web Isolation Platform (“Menlo”). Person will primarily be responsible for managing the Menlo setup and ensuring the service is available, functional, and up-to-date;
• Propose, plan and execute timely upgrades to ensure that the Menlo setup remains current;
• Propose, plan and deploy the various security related policies by leveraging different features available in product;
• Active coordination with product support vendors for any product related issues or bugs;
• Propose, plan and execute actions to ensure that web traffic requests for identified users are routed through Menlo solution;
• Work with end-users where there are issues reported for external website accessibility and/or functionalities;
• Ensure policy exclusions are challenged, reviewed, validated and deployed as per approved plan;
• Periodical review of policy exclusions and ensure that they are relevant to the current context;
• Collaboratively work with network and other infrastructure teams globally for related issues;
• Propose, plan and execute Service improvements initiatives in order to elevate the current state, including identifying the activities to automate, improve and fine-tune the policies
• Handling RFCs, Incidents and Problem tickets under ownerships- and manage related day-to-day operations;
• Maintaining and Reporting the various KPI indicators pertaining to the technologies under administration scope and leading the report actions;
• Vulnerability Scanning and Remediation of the technologies under management scope
• Planning the periodical Technology Upgrades- testing and implementation;
• Identify Risks under respective technology under ownership, maintain Risk Register and work towards closure of risks and issues;
• Escalate- discuss and consult- technical issues, Incidents, RFC roadmaps and Problem tickets as required to next levels and Management in timely manner;
• Provide technical subject matter expertise on the solutions under technical ownerships;
• Perform Root Cause Analysis for Major Incidents and provide report in timely manner and maintain proactive follow-ups to close the actions;
• Perform Trend analysis, identify top few incidents and work with respective teams/individuals to minimize the incidents, hardware/software troubleshooting;
• Participate in meetings with various stake holders as per the schedules;
• Liaise with different vendors to ensure product issues are resolved as per operational and functional needs;
• Liaise with different teams in different geographical zones;
• Adhere to different policies set out by the organization;
• Prepare and provide different reports (weekly/monthly/ad-hoc) as necessary for Operations;
• Perform changes or work on incidents during weekends as necessary;
• Participate in periodical Disaster Recovery and Business Continuity exercises as per the plan;
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role;
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.
• To take up additional responsibilities as per Operational needs for the scope under the team.

Work Schedule

• Work schedule is mainly focused to support Asia and EMEA (Paris) time zone;
• Work Hours: 2 PM – 11 PM SGT (with 1 week of General shift 9 AM – 6 PM SGT as per rotation).
• Rotational Shift schedule is followed between general and afternoon hours;
• Candidate have to be standby to support critical issues reported outside of business hours and on weekends. This will be based on On-call Schedule roster which is pre-defined.

Qualification Requirements

• 8 -10 years of IT experience with minimum 5 years of hands-on experience in network security managing web traffic proxies or web phishing prevention/web isolation platforms e.g. Menlo Web Isolation Platform
• Should be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;
• Working & hands-on experience in administering the Menlo Web Isolation Platform and any of the Web Proxies solutions;
• Experience in managing Production setup in Run (Operations) mode;
• Ability to apply Risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;
• Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;
• Excellent in analytical, communication and documentation skills;
• Ability to organize work and be able to priories work as per the needs of Production Operation’s needs;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Ability to work independently and as well as a part of team and is able to work under minimal supervision;
• Should have time management skills and able to manage work in a fast-paced environment.

Professional Certifications:

• Security Certifications: Comptia Security+, CISSP is highly preferred

Interested applicants, please email your resume to Shaun Quek Yew Meng

Email: shaunquek@recruitexpress.com.sg

CEI Reg No: R1660732

EA Licence No: 99C4599

Who we are

Crédit Agricole Corporate and Investment Banking (Crédit Agricole CIB) is the corporate and investment banking arm of Crédit Agricole Group, world’s 10th largest bank by total assets.

Our Singapore center (“ISAP” or “Information Systems Asia Pacific”) is the 2nd largest IT setup (after Paris Head Office) for Crédit Agricole CIB's worldwide business. We work daily with international branches located in 30 markets by:

· Envisioning and preparing the Bank’s futures information systems

· Partnering and supporting core banking flagships and transverse areas in their large scale development projects

· Providing premium In-house Banking applications

This unique positioning empowers us to bring our core banking business a sustainable competitive advantage on the market.

We seek innovative and agile people sharing our mindset to support ambitious and forthcoming technological challenges.

Position

IT Security Officer (ITSO)

IT Security Officer role is responsible for managing and supervising Information Technology Security matters for the Bank in Singapore and ensuring that the execution of Information Security activities are in alignment with Banks’ Security Policy and Standards. Person is also in charge of coordination of operational security of Information Systems, conducting Cyber Security Risk Assessment and ensuring effective management of IT Security initiatives in Singapore.

Main Responsibilities (not limited to)

• Information Systems in Singapore are in alignment with Groups’ Security Policies and Standards;
• Develop, contribute and establish local Security Policies, guidelines, standards and processes (as applicable) in conformance to Group’s Information System Security Policies, Governance Texts and local regulatory requirements.
• Conducting Information Security (Cyber) risk assessments to identify Cyber risks, develop and maintain adequate and comprehensive mitigation and deliver subsequent corrective actions when KPI results are unsatisfactory.
• Advising business teams, technology teams and leadership on implementing cyber security best practices for managing cyber and technology risks.
• Maintaining oversight on Key Cyber risk/IT Security indicators in scope;
• Maintaining oversight on the deployment of various Security Programs and projects running for the bank in the region.
• Coordinate studies on security requirements for implementing new IT Security solutions and provide consultation support on IT infrastructures and Applications teams
• Ensuring all Security related requests and derogations are reviewed and granted based on Security Risk Assessments;
• Ensuring the Vulnerabilities under the perimeter are managed and mitigated as per the defined Vulnerability Management Process;
• Assist and recommend the Local IT teams to define and implement remediation actions plans derived from audits or security reviews.
• Follow up on IT security related audit recommendation action plans falling under SG or other entities
• Maintain and Publish the Security Dashboard for Singapore for the Security KPIs;
• Supporting the IT Permanent Controls team and CLSi function on technical matters related to IT Security topics;
• Ensuring technical security projects for the region are properly taken into account and effectively delivered;
• Accompanying local IT teams in technical security topics where Security expertise and advices could be needed, to ensure proper implementation of standards and best practices;
• Acting as an entry point for all technical security related matters to assess the overall Information Systems Security;
• Raising operational security needs or constraints, or local constraints, proposing solutions and possible adaptations of standards in case they cannot cover a precise local requirement (for example due to a local regulation);
• Helping IT teams in deploying level 1 and level 2.1 controls required by ISS control plans.
• Should be able to take up additional responsibilities as needed for the operations or as assigned by the manager;
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer/Compliance Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain and maintain competence.

Candidate Profile

• Must have a minimum 10 years of relevant experience in IT Security domain;
• Must be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;
• Must have knowledge of different domains of Information Security;
• Must have prior hands-on experience in governance, managing and operating the Information System Security;
• Should have experience in working in first and second line of Cyber defense;
• Must have experience in conducting Cybersecurity Risk Assessments, security reviews of IT Projects;
• Must have experience in Security Exceptions management
• Ability to apply risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level Information Security Policies
• Excellent in analytical, communication and documentation skills;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Should have time management skills and able to manage work in fast moving environment;
• Should have excellent written and oral English language skills;

· Professional Certifications :

• CISSP certification is must
• Any other IT Security or Cyber Risk related certifications are desirable

Work Schedule

• Work Hours: 8.45a.m. to 6. 30p.m (Monday to Friday) with one-hour lunch break.

Responsibilities:

• Lead the IT Security team to manage and all IT security-related matters that support business objectives and strategies
• Develop and carry out IT security policies and plans
• Conduct security review of existing systems on their ability to provide adequate defence against the latest security threats.
• Conduct vulnerability assessments and penetration tests for all critical IT systems
• Drive and conduct IT Security awareness and training like security talks, phishing simulation and incident response exercises
• Manage and investigate all cyber security alerts and notifications from cyber surveillance and threat intelligence to identify root cause and impact for effective containment, mitigation and future improvements
• Manage and investigate all IT Security incidents to identify root cause and impact for effective containment, mitigation and future improvements
• Engage IT project teams throughout the SDLC to identify and prioritize applicable security controls and provide guidance on how to implement these controls
• Jointly perform, monitor, track and review with IT Governance team and other IT teams on all information systems and infrastructure and security
• Maintain and enhance the Information Security risk assessment methodology
• Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit
• Act as Subject Matter Expert (SME) in security technologies, and provide knowledge sharing and technical assistance to other team members
• Define security configuration standards for platforms and technologies
• Detailed reporting on IT security initiatives, scans, incidents to management and statutory reporting
• Any other ad hoc duties as assigned.

Requirements:

• Bachelor's degree in Computer Science, of Information Technology or equivalent, with minimum 5-7 years' experience in Information and Cyber Security
• Good knowledge and experience with cloud security of Amazon Web Services (AWS), Microsoft Azure and SaaS solutions, security standards and frameworks like NIST, ISO27001, MTCS, CSA Security-by-Design (SBD) and Personal Data Protection Act (PDPA) is preferred.
• Other relevant certifications such as CISSP/CISA/CISM, CREST, CEH, CHFI would be advantageous
• Demonstrated leadership and adaptability, with willingness to readily and voluntarily take ownership of highly challenging tasks and problems, even beyond initial scope of responsibility.
• Ability to handle multiple tasks concurrently and meet deadlines, while maintaining focus despite conflicting demands.

Interested applicants, please Email , and look for

Jensen Fang Lifa

Recruit Express Pte Ltd

EA License No. 99C4599

EA Personnel Registration Number: R2197080

We regret that only shortlisted candidates will be contacted.

About Us!

The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

You will be part of the Security Operations Centre (SOC) Team who will be responsible for the following areas Tier 2 SOC Analyst responsible for investigating alerts and incidents escalated by Tier 1 Analysts, Develop and enhance SOC processes and procedures, ensuring effective operations, Coordinate with stakeholders to address, follow up and resolve security alerts. Operate and maintain security monitoring tools such SIEM, EDR and SOAR. Gather and analyse Cyber intel. Conduct Threat hunting. Lead the adoption of new technological advances and best practices in cybersecurity monitoring and response.

You will be a Great Fit if you:

- Demonstrable experience and in-depth knowledge in cyber security operations, cyber intelligence gathering, incident response and investigations.

- Have strong experience in various cyber security technologies such as IDS/IPS, firewalls, SIEM, APT, email security, web security, endpoint security, malware analysis, etc

- Have experience in threat hunting / red teaming will be preferred.

- Have at least 2 years of experience as a Tier 2 analyst in a SOC.

- Have professional certifications would be added advantage: CISSP, GIAC Certified Incident Handler, EC-Council CEH and CSA, or any other relevant qualifications

Good to Have:

- High attention to detail and quality.

- Be able to work under pressure and meet deadlines.

- Must be highly reliable, trustworthy, honest, and commitment oriented.

- Strong written and verbal communication skills

- Autonomous

- Take ownership

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14542075/2fc68717-fd53-1ede-bce4-ab8bfed8329f

Job Responsibilities:

• Ability to deploy, configure and fine-tune security policies as well as performing threat hunting to proactively response to potential cyber threats.
• Manage and operate the IT Security Protection System which includes liaising with Maintenance Contractor to address technical & security issues and Health Checks.
• Manage and investigate Events of Interests and security vulnerabilities to identify early indicators and work with the respective team to address them.
• Facilitate and support (internal and external parties) on Cyber Security Incident management and response.
• Enforce IT Security Policy compliance which includes assessment of security posture of the organisation’s IT assets as well as recommending appropriate measures and controls to mitigate security threats within the organisation.
• Assist in all internal & external IT audits. Follow-up with the respective Risk Owners to remediate audit findings.
• Review and enhance IT security policies, procedure and documentations with respect to industry standards and best practices.
• Facilitate, plan and conduct Cyber Security Awareness Training, including Cyber Security Exercises.
• Be on standby for any critical security alerts and incident management after office hours.

Job Requirements:

• Degree in Information Technology or Information Security or related discipline
• Minimum 3 years of working experience in Cyber Security field.
• Good Knowledge in Cyber Security Management, IT Compliance and/or Risk Management.
• Hands-on experience with Windows or Linux OS.
• Familiar with ISO27001 and/or PCI Data Security Standards.
• Hands-on experience on Microsoft Azure Cloud Security technologies (MS Sentinel, MS Defender...etc) as well as other Enterprise Security Appliances; such as Privileged Access management & Vulnerability Management tools.
• Familiar with modernised A.I and SecOps tools.
• Possess good project management and report writing skills.
• Security Screening will be required for potential candidates.

To apply, please visit www.gmprecruit.com and search for Job Reference: 24196

To learn more about this opportunity, please contact Gia Grace at gia.grace@gmprecruit.com

We regret that only shortlisted candidates will be notified.

GMP Technologies (S) Pte Ltd | EA License: 11C3793 | EA Personnel: Bautista Gia Grace De Guzman | Registration No: R23111973

EML is a leading Workers Compensation and Personal Injury Claims Management business. Our goal is to help people get their lives back through ongoing support during their return-to-work journey . We continue to experience ongoing growth and now have over 4,000 dedicated employees . We foster a learning culture that allows for us to continually invest in our employees ensuring a long-term career here at EML.

THE OPPORTUNITY

As part of our diverse team based in  Sydney CBD , you will help make a positive impact on someone?s life every day. You will feel great satisfaction knowing your talent and hard work has a purpose.

The purpose of this role is to manage litigation, undertake legal research, undertake legal project work for EML business units and reports to the Legal Manager. Working as part of a Claims Business Unit this role will be responsible for ensuring EML performance targets and ... Click here to view more detail / apply for Legal Specialist

Job Title: Security Specialist
Location: Ashton Vale, Bristol + Hybrid Working Arrangements
Compensation: Competitive Salary + Benefits
Role Type: Full time / Permanent
Role ID: SF56871

At Babcock we're working to create a safe and secure world, together, and if you join us, you can play your part as a Security Specialist at our Ashton House site.

The role
As a Security Specialist, you'll have a role that's out of the ordinary. This is a challenging role where you will be responsible for providing a high level of professional security support to a focused part of the Missions Systems business unit.

Day-to-day, you'll support the delivery of all security requirements, ensuring they are compliant with our policy and other internal requirements as well as all external contractual obligations and legal requirements.

• Responsible for authoring key security documentation, including plans, policy and processes to ensure they meet the requirements of the business and are compliant with the customers expectations
• Provide support and ensure compliance to prime contract obligations in accordance with delegated authority approval and security process requirements
• Work collaboratively with the project team to provide timely support and accurate interpretations of security conditions associated with contracting authority security requirements. In addition, you'll support Commercial, Supply Chain and Bid work activities ensuring such security conditions are properly flowed down and accurately implemented

This position may involve occasional travel/working across a range of internal and customer sites.

This role is full time, 37-hours per week and provides hybrid working arrangements with 3-4 days in the office/onsite and 1-2 days working from home.

Essential experience of the Security Specialist

• A thorough working knowledge of all aspects of the Security Policy Framework / GOV S007as well as JSP 440
• Well developed IT skills
• Strong communication/interpersonal skills
• Ability to develop and maintain relationships at all levels
• Confident and self-motivated individual displaying effective entrepreneurial development techniques, whilst acting as a key part of the team

Qualifications for the Security Specialist

• Qualified to Degree level or equivalent in a related subject

Security Clearance
The successful candidate must be a sole UK national who is able to achieve and maintain Security Check (SC) security clearance for this role.

Many of the positions within our company are subject to national security clearance and Trade Control restrictions. This means that your eligibility for certain roles may be affected by your place of birth, nationality, current or former citizenship, and any residency you hold or have held.

What we offer

• Generous holiday allowance
• Matched contribution pension scheme, with life assurance
• Employee share scheme
• Employee shopping savings portal
• Payment of Professional Fees
• Reservists in the armed forces receive 10-days special paid leave
• Holiday Trading is a benefit that allows the majority of employees to buy additional leave or to sell up to one working week of annual leave from their annual entitlement
• 'Be Kind Day' enables employees to take one working day's paid leave a year (or equivalent hours) to undertake volunteering work with their chosen organisation or registered charity

Babcock International
For over a century Babcock has helped to defend nations, protect communities and build a better world. To continue, we must adapt, advance and be a sustainable business with a shared goal.

We are a disability confident committed employer. If you have a disability or need any reasonable adjustments during the application and selection stages, please email with the subject header 'Reasonable adjustments requirement'. We're committed to building an inclusive culture where everyone's free to thrive. We are happy to talk about flexible working - please ask about alternative patterns of work at interview.

Closing date: 29/04/2024

Proud member of the Disability Confident employer scheme