Total 33 Legal / Public / Security job vacancies

About audax 

audax means courage. To have the courage to change the banking scene, eliminating constraints caused by existing legacy infrastructure. Our mission is to empower banks and financial institutions to scale and modernise at speed, reaching new customers without breaking the bank. 

We began our journey supplying services to and powering Standard Chartered’s white-label plug and play Banking-as-a-Service (BaaS) solution, Standard Chartered nexus, through our technology capabilities. At audax, we seek go-getters who are hungry for growth and can bring fresh perspectives. 

Website - https://www.audax.io  

What You’ll Do:

1.     Firewall, Network Proxy, and EDR Management: 

• Firewall Management: Oversee the configuration, maintenance, and monitoring of firewall systems to enforce security policies and control network traffic effectively. 

• Network Proxy Management: Manage proxy servers to secure internet traffic, optimize performance, and troubleshoot issues as needed. 

• Endpoint Detection and Response (EDR) Management: Manage EDR tools across endpoints, configure policies for threat detection and response, and analyze endpoint data for security anomalies. 

2.     Threat Detection and Content Creation: 

• Write and refine rules, signatures, and queries to detect security threats effectively. 

• Develop and update security detection content for SIEM (Security Information and Event Management) systems. 

3.     Vulnerability and Threat Management: 

• Manage vulnerability assessment and remediation programs, prioritizing and mitigating security vulnerabilities. 

• Coordinate with technology operations teams to apply patches and updates to systems and applications. 

• Monitor and respond to emerging threats, implementing proactive measures to protect systems and data. 

4.     Incident Response: 

• Perform security monitoring and triaging for potential threats and SIEM alerts. 
• Develop and maintain incident response plans and procedures, coordinating responses during security incidents or breaches. 
• Lead incident response teams, ensuring timely resolution and post-incident analysis to prevent future occurrences. 

5.     Access Review and Security Exceptions: 

• Establish and maintain access review processes to ensure appropriate access rights and permissions. 
• Manage and review user requests for security exceptions, balancing business needs with security requirements. 
• Implement controls and monitor activities to detect unauthorized access attempts and policy violations. 

6.     Collaboration with Engineering Teams: 

• Work closely with engineering teams to integrate security best practices into the development lifecycle. 
• Conduct security reviews of infrastructure, applications, and new technologies, providing recommendations for security enhancements. 
• Collaborate on the design and implementation of secure architecture and solutions. 

7.     Service Management: 

• Provide oversight of security service delivery, ensuring SLAs (Service Level Agreements) are met. 
• Manage relationships with security service providers and vendors, evaluating services and negotiating contracts. 

8.     Compliance and Reporting: 

• Ensure compliance with relevant security standards, regulations, and best practices. 
• Generate regular reports on security metrics, incidents, vulnerabilities, and operational status. 
• Participate in audits and assessments related to security operations. 

9.     Audit Management: 

• Manage and coordinate security audits conducted internally or by external auditors. 
• Prepare audit responses and action plans, implementing corrective measures and tracking progress. 

Who You Are:

• Bachelor’s degree in Computer Science, Information Technology, or related field; advanced degree or certifications (e.g., CISSP, CISM) preferred. 
• Proven experience in a security operations role with hands-on experience in firewall management, network proxy, EDR, incident response, and threat detection. 
• Strong understanding of security principles, protocols, and technologies. 
• Experience with access control, vulnerability management, audit management, and compliance frameworks (e.g., PCI-DSS, GDPR). 
• Excellent communication skills and ability to collaborate effectively across teams and stakeholders. 
• Fresh graduates with the right skillet and aptitude may also be considered. 

Why Join Us? 

• Be Part of a Bold Vision – At audax, we’re not just building software – we’re transforming how financial institutions and businesses manage risk, compliance, and growth. Join a team that’s fearless in challenging the status quo.
• Flexible, People-First Workplace – We value the importance of Family, Team, Self. In that order.
• Competitive Rewards and Startup Perks – We offer competitive salaries and meaningful benefits that look after your well-being. 

Privacy Notice:
Please note: by submitting your application, you acknowledge that you have read and understood audax’s Privacy Policy for Employees, Freelancers, Contractors and Job Applicants (the “Policy”), and consent to the collection, use and disclosure of your personal data by audax for the purposes set out in the Policy. You may withdraw consent for such collection, use and disclosure, and make an access or correction request in respect of your personal data, in accordance with the Policy by emailing dpo@audax.io.

Note: This role is not open to recruitment agencies. Thank you.

Responsibilities

• Produce cyber security strategies and work plan, policies, standards and guidelines
• Support digitalisation planning and aligning with ICT security strategy goals and policy baselines.
• Perform regular Gap analysis.
• Oversee ICT security matters (approving and tracking ICT security work plan and resourcing, monitoring performance in security indicators and risk acceptance decisions).
• Regular reviews of all ICT systems across different operating environments, the systems’ security design, implementation and operations.
• Conduct Cybersecurity risk assessment and acceptance processes at the management level.
• Review, consult and endorse risk management and mitigation plans from project teams.
• Advise on cyber security solutions and technologies to be deployed suitable to business operations and aligned with WOG-wide advisories and practices.
• Ensure compliance to the defined security policies, standards and guidelines.
• Create and execute end user security awareness programmes
• Establish defined processes for Threat and Incident Management.
• Ownership of security incident response workshops and exercises (table-top exercises, simulation and drills)
• Lead investigation and management of ICT security incidents.

Requirement

• Degree in Computer Science, Information Systems, Engineering or a related Technology based education.
• Minimum 5 years of information security management experience
• Skilled in evaluating the effectiveness of existing controls and recommending appropriate mitigation strategies for on-premises and cloud-related cybersecurity and data security issues.
• Able to identify on-premises and cloud-specific cybersecurity risks and threats as well as potential violations in on-premises or cloud environments
• Able to collaborate with multi-functional, multi-disciplined teams to formulate, institute real time awareness of security posture and baseline among end users.
• Demonstrate skills to thoroughly assess cybersecurity risks/threats impact
• Solid grasp of ICT operations, security policies, business processes and the relationship between them.
• Knowledge or experience in Infrastructure as Code (IaC) tools such as Terraform and Ansible, including their application in maintaining and automating secure on-premises and cloud environments.
• Strong understanding of insider threats, vendor risks, data leakage, malwares including ransomware, account hijacking, and compliance risks.
• Strong understanding of compliance requirements
• Good interpersonal and partner/ executive leadership skills.
• CISSP/ CISM/ CISA certifications are advantageous.

Ethos Search Associates Pte. Ltd.

EA Licence No: 13C6655

EA Reg No: R1988580 Jacky Chong

Job Purpose
This role leads the Governance, Risk, and Compliance functions. The role ensures that security controls are well‑designed, risks are understood and managed, and the company maintains compliance with industry, customer, and regulatory requirements. This leader partners closely with IT, operations, legal, procurement, and third‑party partners to embed security into daily business processes.

Roles and Responsibilities
IT Security Governance and Policy Management

• Develop, maintain, and enforce security policies, standards,and procedures aligned with business needs and regulatory requirements.
• Establish a governance framework that integrates security intologistics operations, including forwarding systems, warehouse systems, transportation management systems, fleet technologies, IoT devices, and corporate applications.
• Lead security awareness programs tailored to both office and field personnel.

Risk Management

• Own the enterprise security risk management program, including risk identification, assessment, scoring, treatment planning, and reporting.
• Conduct regular risk assessments and maintain the risk register.
• Plan, manage and report mitigation actions.
• Define risk responses (Mitigate/Transfer/Accept) and manage treatment plans.
• Monitor Key Risk Indicators (KRIs) and analyze risk trends.
• Prepare risk heatmaps and executive risk reports.
• Support customer/regulatory assessments with risk documentation.
• Monitor emerging threats and regulatory changes affecting supply chain and logistics operations.

Compliance and Audit

• Manage compliance with frameworks such as ISO 27001, SOC 2,NIST CSF, GDPR, PDPA, CTPAT, PCI DSS (if applicable), and customer‑mandated security requirements.
• Manage internal and external audits, ensuring evidencereadiness and timely remediation of findings.
• Maintain compliance documentation repositories, controllibraries, and audit trails to ensure regulatory adherence.
• Evaluate regulatory changes and update internal policies.
• Support incident response ensuring compliance obligations.
• Coordinate evidence collection for customer/governmentassessments.

Third Party and Vendor Security

• Lead the third‑party risk management program, including duediligence, contract reviews, and ongoing monitoring.
• Evaluate security posture of logistics partners, carriers, technology vendors, and SaaS providers.
• Work with procurement and legal to embed security requirements into vendor agreements.
• Conduct third‑party security risk assessments.

Incident Preparedness and Response Governance

• Develop and maintain incident response plans, playbooks, andcommunication protocols and ensure compliance.
• Coordinate tabletop exercises with IT, operations, and executive leadership.
• Ensure post‑incident reviews translate into updated controls and governance improvements.

Control Design and Assurance

• Oversee the design, implementation, and testing of security controls across IT and operational technology environments.
• Partner with infrastructure, application, and operations teams to ensure controls are practical and effective in high availability logistics environments.
• Track control performance metrics and drive continuous improvement.

Reporting and Stakeholder Engagement

• Deliver regular reports to executive leadership on risk posture, compliance status, and key initiatives.
• Serve as the primary point of contact for customer security questionnaires and supply chain security assessments.
• Communicate complex security topics in clear, business aligned language.

Requirements

• Bachelor’s degree in information security, Computer Science or related discipline.
• Certifications preferred: CISSP, CISM, CRISC, CISA.
• 7+ years in IT Security, GRC or related roles.
• Strong understanding of security frameworks (ISO 27001, NIST CSF, SOC2).
• Knowledge of data privacy regulations (GDPR, PDPA) and cross-border logistics considerations.
• Experience managing audits, compliance programs, and risk assessments.
• Familiarity with logistics & supply chain environments.
• Ability to collaborate with cross‑functional teams and influence without authority.
• Excellent communication, documentation, and stakeholder‑management skills.

Key Responsibilities

• Provide administrative and secretarial support to the Director of Operations
• Manage calendar, schedule meetings, and arrange appointments
• Coordinate meeting logistics (venue, materials, invitations)
• Assist in preparing and formatting documents, reports, and presentations
• Handle emails, correspondence, and basic communication when required
• Maintain proper filing systems (physical and digital)
• Record basic meeting notes and follow up on simple action items
• Support general administrative duties and ad-hoc tasks

Requirements

• Minimum Diploma in any discipline
• Basic administrative or secretarial experience preferred
• Proficient in Microsoft Office (Word, Excel, Outlook)
• Good organizational and communication skills
• Able to follow instructions and work independently
• Bilingual in English and Chinese is an advantage

Role Overview

Currently seeking a highly qualified, skilled and motivated Security Engineer to join our Information Security Operations, Cyber Threat Management Team. This role is critical in defending the organization against Cyber threats through proactive threat detection, intelligence gathering, vulnerability and risk management. The ideal candidate will bring deep technical expertise, strategic thinking, and leadership to drive continuous improvement in our security posture, with a strong understanding of the supply chain and logistics industry.

Key Responsibilities

As a seasoned professional your key responsibilities will entail leading and/or overseeing vital security intelligence and threat management initiatives, driving vulnerability and external attack surface management and remediation, mentor junior analysts.

Security Intelligence & Threat Management

• Lead and/or overseeing the development and execution of security intelligence programs to identify emerging threats and attack vectors.
• Oversee threat management activities including threat hunting and analysis of advanced persistent threats (APTs).
• Collaborate with internal and external stakeholders to enrich threat intelligence feeds and apply contextual analysis.

Vulnerability Management

• Manage the end-to-end vulnerability and risk management lifecycle, including identification, assessment, prioritization, remediation, and reporting.
• Maintain and enhance vulnerability scanning tools and processes.

External Attack Surface Management

• Monitor and assess the organization’s external digital footprint to identify exposed assets and potential attack vectors.
• Assess security implications of common ports (e.g., 443 (HTTPS), 22 (SSH), 3389 (RDP), 53 (DNS), 445 (SMB)) and automate network security controls.
• Work on firewall rule reviews, segmentation strategies, and security policy enforcement.
• Implement tools and processes to continuously discover, classify, and secure internet-facing assets.
• Coordinate incident response and containment efforts to minimize impact and ensure timely recovery.

Operational Leadership

• Lead and mentor a team of security analysts, fostering a culture of excellence and continuous learning.
• Develop and maintain standard operating procedures (SOPs) for threat hunting, vulnerability remediation, IOC investigation and incident response.
• Drive automation and integration of security tools, Incident & Change Mgmt Workflows, adoption of Artificial Intelligence technologies to improve operational efficiency.

Reporting & Metrics

• Develop tools to generate real-time compliance reports, track remediation progress, and reduce audit preparation time.
• Stay ahead of emerging threats, regulatory changes, and vulnerability trends, continuously refining security automation strategies.
• Enhance Configuration Compliance monitoring by automating the processing of audit findings and risk exceptions.
• Ensure that security data is accurate, actionable, and seamlessly integrated with ITSM and GRC platforms.

Qualifications

• Bachelor’s or Master’s degree in Information Security, Information Technology, or related field.
• 7+ years of experience in Information Technology, with at least 5+ years in Information Security Operations and vulnerability management.
• Expert-level understanding of network security protocols and common port numbers.
• Proven ability to lead security automation initiatives and mentor junior analysts.
• Strong knowledge of threat intelligence platforms including Mimecast, SentinelOne, Tenable, SIEM, EASM tools, and vulnerability management solutions.
• Experience with MITRE ATT&CK framework, threat modeling, and incident response.
• Thorough understanding of Industry Standards & Best practices in Networking, IAM, Endpoint, IOT, Infra & App Security, Email & Brand Protection, Asset & Data Protection
• Relevant certifications (e.g., CISSP, CISM, GIAC, CEH, OSCP) preferred.

Preferred Skills

• Excellent communication, Customer Service & stakeholder management skills.
• Ability to work under pressure and manage multiple priorities.
• Strong analytical, troubleshooting, and problem-solving skills.
• Expertise in developing User Awareness, Training, Experience with Table-top Exercises & Simulations
• Understanding of Information Security challenges specific to the supply chain and logistics industry.
• Experience with ISO & NIST Frameworks

[Job ID: 1507790] 

Key Responsibilities

• Design and manage Identity & Access Management (IAM) processes, including user access reviews
• Develop and enforce Data Classification and Data Loss Prevention (DLP) frameworks
• Conduct security architecture design, assessments, and reviews
• Identify risks and vulnerabilities, and implement effective security controls
• Work with external vendors on security testing (e.g. vulnerability scans, penetration tests)
• Review and validate system designs to ensure security is built into projects
• Maintain and enforce cybersecurity policies, standards, and procedures
• Collaborate with internal teams to ensure compliance with regulatory and security requirements
• Stay updated on emerging security threats and best practices

Requirements

• 7 years of experience in Information Security, including IAM, DLP, and security architecture
• Strong knowledge of frameworks such as ISO 27001, NIST, CIS
• Experience with security tools (e.g. SIEM, EDR)
• Solid understanding of cloud security principles and best practices
• Experience working in regulated environments (e.g. MAS, SFC)
• Strong analytical, problem-solving, and communication skills

Nice to Have

• Background in infrastructure or application development
• Relevant certifications (e.g. CISSP, TOGAF, GIAC, cloud certifications)

We regret that only shortlisted candidates will be notified. However, rest assured that all applications will be updated to our resume bank for future opportunities.

Please kindly refer to the Privacy Policy of Good Job Creations for your reference: https://goodjobcreations.com.sg/en/privacy-policy/

EA Personnel Name: Ong Kang Quan Ryan
EA Personnel Registration Number: R23116952
EA License No.: 07C5771

Reolink, a leader in intelligent visual technologyfor homes and businesses, was founded in 2009 by a group of engineers with astrong commitment to and passion for smarter security solutions.

Our products are now trusted by millions of users acrossmore than 110 countries and regions worldwide. Building on this trust, wecontinue expanding our presence and bringing our innovations to more marketsaround the globe. Reolink remains committed to delivering advanced, reliable,and user‑centric solutions that empower people to protect whatmatters most.

Key Highlights:

• 5 Work Days, 8.30am-5.30pm / 9am-6pm
• Office Near to Kaki Bukit MRT, Singapore
• Medical Benefits Provided
• Entitled to Yearly Bonus & Performance Bonus

The Chief Security Officer (CSO) is responsible forshaping and leading the company’s global security vision and strategy. Thisrole oversees all aspects of cybersecurity, information security, physicalsecurity, and enterprise risk management across the organization. As a keymember of the executive leadership team, the CSO partners closely with theCEO, Board of Directors, and cross‑functional leaders to safeguard thecompany’s assets, ensure regulatory compliance, and enable secure businessgrowth.

Key Responsibilities

1. Strategy & Leadership

• Develop, implement, and continuously refine the company’s enterprise-wide security strategy, multi‑year roadmap, and annual budget.
• Advise the CEO and Board of Directors on security risks, emerging threats, and strategic security decisions.
• Foster a security-first culture and drive organization‑wide security awareness programs.
• Lead, mentor, and grow a high-performing global security team, promoting operational excellence and professional development.

2. Information Security & Cybersecurity

• Establish and maintain a comprehensive cybersecurity defense ecosystem, including threat intelligence, SOC operations, incident response, red/blue team exercises, and vulnerability management.
• Oversee cloud, application, data, and endpoint security strategies to ensure robust protection across the technology stack.
• Lead the response to major security incidents, ensuring rapid containment, communication, remediation, and post‑incident lessons learned.

3. Physical Security & Operational Security

• Develop and oversee physical security programs for global offices, data centers, warehouses, and critical facilities.
• Design and maintain Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP), including regular testing and scenario-based drills.

4. Compliance & Risk Management

• Ensure continuous compliance with applicable laws, regulations, and industry standards (e.g., GDPR, ISO 27001, SOC 2, PCI DSS).
• Lead internal and external security audits, address findings, and implement long-term remediation plans.
• Build and manage a robust enterprise risk management framework, evaluating risks and tracking mitigation progress across all business units.

5. Third-Party & Supply Chain Security

• Develop and enforce a supplier and third‑party security risk assessment framework to manage security posture across key partners, vendors, and service providers.

Job Qualifications

1. Security Skillset & Core Competencies

• Deep expertise in cybersecurity frameworks, cloud security models, and enterprise security architecture.
• Strong knowledge of security standards and regulations (e.g., NIST, ISO 27001, GDPR).
• Proficiency with major security tools and platforms (e.g., IDS/IPS, WAF, EDR, SIEM).
• Proven experience in security incident response, crisis management, and post‑incident forensics.

2. Relevant Experience & Technical Expertise

• 10+ years of experience in security roles, with 5+ years in senior leadership (e.g., Security Director, Head of Security).
• Demonstrated success in building and scaling security programs within fast‑growing technology companies.
• Hands-on experience with major cloud platforms (AWS, Azure, GCP) and scripting languages (e.g., Python, Bash).
• Familiarity with security solutions including Nessus, Splunk, and container/cloud-native security (e.g., Docker, Kubernetes security).

3. Certifications

• Bachelor’s degree or higher in Computer Science, Information Security, or a related discipline.
• Recognized security certifications such as CISSP, CISM, CISA, or equivalent are preferred.
• Strong knowledge of security technologies, risk management practices, and compliance frameworks.

• Perm, Central
• Must have experience within a law firm or legal/professional services environment
• Proven track record in delivering training and driving technology adoption

We are seeking for a confident and engaging Legal Technology Specialist to drive technology adoption and deliver high-quality training across our client's offices. This is a highly visible, business-facing role acting as the regional representative for Change & Adoption towards Legal Tech.

Job Description

• Deliver engaging in-person and virtual training for legal professionals and business support teams
• Design and create training materials (guides, videos, e-learning content) to support adoption
• Partner with business stakeholders to identify training needs and improve technology usage
• Drive adoption of legal systems and tools, ensuring users are सक्षम and efficient
• Act as the bridge between users, IT, and innovation teams
• Support onboarding through structured induction training programs
• Promote new tools, updates, and initiatives across Asia (including newsletters, drop-in sessions, etc.)
• Travel across Asia offices as required

Requirements

• Experience within a law firm or legal/professional services environment
• Hands-on experience with InTapp (essential)
• Proven track record in delivering training and driving technology adoption
• Strong communication and presentation skills (clear, confident, engaging)
• Experience creating training content (e-learning, videos, user guides)
• Familiarity with Microsoft 365 and document management systems
• Proactive, independent, and comfortable working with regional stakeholders

Triton AI Pte Ltd

Registration Number: R1980724

EA: 21C0661