Total 4 Manager level Legal / Public / Security job vacancies

*Seeking for a talent who has minimum 6 years of experience handling Banking/Financial services’ IT Risk/Cyber security/Information security/Governance risk including 3 years of hands-on IT technical security/security operations*

THE COMPANY
With their reputable brand and commitment to their clients, this company is increasing their operations in the region. They seek an IT Risk/Cyber Security/Information Security Manager to be part of their team.

JOB RESPONSIBILITIES

• Perform Level 2 IT risk/Cyber security/Information Security or governance risk
• Handle IT regulatory compliance (MAS TRM and information security)/security risk framework
• Handle Incident Oversight and root cause analysis & Control Validation
• Prepare Risk Register, Reporting & Adversarial Attack Simulation Exercises to assess the effectiveness of security controls and detection capabilities
• Provide IT security advisory
• Work closely with other business stakeholders etc.
• Any other adhoc duties

JOB REQUIREMENTS

• Degree in IT/Information Technology/Information Security/Computer Science or any other relevant IT education
• Has a recognised information security certification such as CRISC, CISSP, or equivalent
• Minimum 6 years of experience handling Banking/Financial services’ IT Risk/Cyber security/Information security/governance risk including 3 years of hands-on IT technical security/security operations
• Solutions-oriented, friendly, helpful, resourceful and able to multi-task

If you would like to explore this opportunity, please email your resume in Microsoft Word format to marie@resolutehunter.com

We thank you for your interest and will contact shortlisted candidates for more detailed discussion.

For more job opportunities, please visit our website https://resolutehunter.com

EA Licence 18C9105 
EA Reg R1105305

Product area

The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

Job description

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You are a recognized expert in at least two security domains and use your leadership skills to manage a team that sets the direction and goals for solving Google-wide problems. You identify fundamental security problems at Google and drives major security improvements in Google infrastructure.

Additional job description

As the foundational Security Engineering Manager for Google Vulnerability Rewards Program (VRP) in Singapore, you will lead a team of security and software engineers. You will scale our vulnerability handling capacity by architecting AI-driven agents for triage, reproduction, and automated bug fixing. Beyond operations, you will drive unified risk reporting and lead large-scale remediation projects to eliminate entire vulnerability classes across Google.You are a proven leader with a technical foundation and broad application security expertise—spanning web, mobile, API, and threat modeling.

Qualifications

Job responsibilities

• Maintain a high level of operational independence while collaborating closely with global leads in the US and Zurich to align on technical direction.
• Oversee the Singapore-based triage and remediation rotation, ensuring effective vulnerability reproduction, severity assessment, and bug filing for incoming security reports.
• Steer the strategic development of agents and infrastructure to automate vulnerability handling, triage, and conduct variant analysis to reduce manual workloads.
• Build and maintain a unified vulnerability analysis pipeline and dashboarding system to provide executive-level insights into emerging threats and program return on investment (ROI).
• Drive large-scale remediation efforts that eliminate entire classes of vulnerabilities across Google’s products and infrastructure.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 8 years of experience in a technical leadership role; overseeing projects, with 2 years of experience in a people management, supervision/team leadership role.
• Experience with the bug bounty lifecycle, including triage, severity assessment, and researcher community management.

Preferred qualifications

• Master’s degree or PhD in Engineering, Computer Science, or a related technical field.
• Experience building or deploying automated tools (e.g., LLM-based agents) for security workflows such as triage automation or bug fixing.
• Experience driving large-scale security improvements and collaborating with product teams to remediate widespread technical issues.
• Proven track record of managing engineering teams and a background in software security, particularly in vulnerability reproduction and variant analysis.

Industry: Information Technology Industry

Location: Central area

Skills: IT Security, IT Risk and IT Compliance

This position will be working for a Financial Institution based at the CBD area, will be responsible and lead the development and execution of enterprise-wide IT security architecture, programme and technology strategy.

Position Responsibilities:

• As the IT Security Lead, will take on a leadership role in risk management, compliance, technology governance, cybersecurity and IT security initiatives and technology advancement / innovation.
• Will lead the department and be responsible for developing and executing IT security policies and practices.
• Will be a strategic partner across Asia and Global counterparts in managing and implementing IT security strategies and enhance security framework.

Position Requirements:

• Bachelor or Masters Degree in Computer Science, Information Security or related field.
• Professional certifications in CISSP, CISM, CISA, CRISC, CCSP are highly preferred.
• 10 to 12 years working experience in the Banking / Financial sector with focus on Information Security and leadership capability.
• Experienced in supervising and leading a department, coaching, guiding and handle operational duties.

We will consider all candidates but will prioritise those who have closer requirements to client needs.

Thank you!

Joseph Syho

Reg Number: R1108657

EA Licence No: 18C9079

Job Purpose
This role leads the Governance, Risk, and Compliance functions. The role ensures that security controls are well‑designed, risks are understood and managed, and the company maintains compliance with industry, customer, and regulatory requirements. This leader partners closely with IT, operations, legal, procurement, and third‑party partners to embed security into daily business processes.

Roles and Responsibilities
IT Security Governance and Policy Management

• Develop, maintain, and enforce security policies, standards,and procedures aligned with business needs and regulatory requirements.
• Establish a governance framework that integrates security intologistics operations, including forwarding systems, warehouse systems, transportation management systems, fleet technologies, IoT devices, and corporate applications.
• Lead security awareness programs tailored to both office and field personnel.

Risk Management

• Own the enterprise security risk management program, including risk identification, assessment, scoring, treatment planning, and reporting.
• Conduct regular risk assessments and maintain the risk register.
• Plan, manage and report mitigation actions.
• Define risk responses (Mitigate/Transfer/Accept) and manage treatment plans.
• Monitor Key Risk Indicators (KRIs) and analyze risk trends.
• Prepare risk heatmaps and executive risk reports.
• Support customer/regulatory assessments with risk documentation.
• Monitor emerging threats and regulatory changes affecting supply chain and logistics operations.

Compliance and Audit

• Manage compliance with frameworks such as ISO 27001, SOC 2,NIST CSF, GDPR, PDPA, CTPAT, PCI DSS (if applicable), and customer‑mandated security requirements.
• Manage internal and external audits, ensuring evidencereadiness and timely remediation of findings.
• Maintain compliance documentation repositories, controllibraries, and audit trails to ensure regulatory adherence.
• Evaluate regulatory changes and update internal policies.
• Support incident response ensuring compliance obligations.
• Coordinate evidence collection for customer/governmentassessments.

Third Party and Vendor Security

• Lead the third‑party risk management program, including duediligence, contract reviews, and ongoing monitoring.
• Evaluate security posture of logistics partners, carriers, technology vendors, and SaaS providers.
• Work with procurement and legal to embed security requirements into vendor agreements.
• Conduct third‑party security risk assessments.

Incident Preparedness and Response Governance

• Develop and maintain incident response plans, playbooks, andcommunication protocols and ensure compliance.
• Coordinate tabletop exercises with IT, operations, and executive leadership.
• Ensure post‑incident reviews translate into updated controls and governance improvements.

Control Design and Assurance

• Oversee the design, implementation, and testing of security controls across IT and operational technology environments.
• Partner with infrastructure, application, and operations teams to ensure controls are practical and effective in high availability logistics environments.
• Track control performance metrics and drive continuous improvement.

Reporting and Stakeholder Engagement

• Deliver regular reports to executive leadership on risk posture, compliance status, and key initiatives.
• Serve as the primary point of contact for customer security questionnaires and supply chain security assessments.
• Communicate complex security topics in clear, business aligned language.

Requirements

• Bachelor’s degree in information security, Computer Science or related discipline.
• Certifications preferred: CISSP, CISM, CRISC, CISA.
• 7+ years in IT Security, GRC or related roles.
• Strong understanding of security frameworks (ISO 27001, NIST CSF, SOC2).
• Knowledge of data privacy regulations (GDPR, PDPA) and cross-border logistics considerations.
• Experience managing audits, compliance programs, and risk assessments.
• Familiarity with logistics & supply chain environments.
• Ability to collaborate with cross‑functional teams and influence without authority.
• Excellent communication, documentation, and stakeholder‑management skills.