Total 58 Legal / Public / Security job vacancies

IT Security Manager  

Job Description

• Monitoring & closure of technology compliance matters
• Conduct gap analysis to ensure compliance with MAS and internal security group guidelines on various new technologies and latest updates issued by MAS and propose mitigating controls
• Perform technology risk & control assessments on internal processes and controls, e-banking controls, etc to ensure in compliance with the MAS guidelines and supervisory policies and internal group guidelines
• Engage with Information Security teams in Head Office for better and quick resolution of audit gaps or incidents
• Conduct risk assessment and due diligence in relation to new products/ services and outsourced activities
• Manage local IT BCP, application and infrastructure resilience and DR capabilities.
• Other responsibilities and activities as advised by the line manager

Requirements:

• With at least two years' relevant banking experience in technology risk management, information security, cyber security consultancy or IT Audit field
• Familiar with technology risk and cyber security regulatory requirements, including but not limited to those defined by MAS
• Cybersecurity certification such as CISSP, CRISC, CISA, CISM, etc. is prefered

Job Purpose
This role leads the Governance, Risk, and Compliance functions. The role ensures that security controls are well‑designed, risks are understood and managed, and the company maintains compliance with industry, customer, and regulatory requirements. This leader partners closely with IT, operations, legal, procurement, and third‑party partners to embed security into daily business processes.

Roles and Responsibilities
IT Security Governance and Policy Management

• Develop, maintain, and enforce security policies, standards,and procedures aligned with business needs and regulatory requirements.
• Establish a governance framework that integrates security intologistics operations, including forwarding systems, warehouse systems, transportation management systems, fleet technologies, IoT devices, and corporate applications.
• Lead security awareness programs tailored to both office and field personnel.

Risk Management

• Own the enterprise security risk management program, including risk identification, assessment, scoring, treatment planning, and reporting.
• Conduct regular risk assessments and maintain the risk register.
• Plan, manage and report mitigation actions.
• Define risk responses (Mitigate/Transfer/Accept) and manage treatment plans.
• Monitor Key Risk Indicators (KRIs) and analyze risk trends.
• Prepare risk heatmaps and executive risk reports.
• Support customer/regulatory assessments with risk documentation.
• Monitor emerging threats and regulatory changes affecting supply chain and logistics operations.

Compliance and Audit

• Manage compliance with frameworks such as ISO 27001, SOC 2,NIST CSF, GDPR, PDPA, CTPAT, PCI DSS (if applicable), and customer‑mandated security requirements.
• Manage internal and external audits, ensuring evidencereadiness and timely remediation of findings.
• Maintain compliance documentation repositories, controllibraries, and audit trails to ensure regulatory adherence.
• Evaluate regulatory changes and update internal policies.
• Support incident response ensuring compliance obligations.
• Coordinate evidence collection for customer/governmentassessments.

Third Party and Vendor Security

• Lead the third‑party risk management program, including duediligence, contract reviews, and ongoing monitoring.
• Evaluate security posture of logistics partners, carriers, technology vendors, and SaaS providers.
• Work with procurement and legal to embed security requirements into vendor agreements.
• Conduct third‑party security risk assessments.

Incident Preparedness and Response Governance

• Develop and maintain incident response plans, playbooks, andcommunication protocols and ensure compliance.
• Coordinate tabletop exercises with IT, operations, and executive leadership.
• Ensure post‑incident reviews translate into updated controls and governance improvements.

Control Design and Assurance

• Oversee the design, implementation, and testing of security controls across IT and operational technology environments.
• Partner with infrastructure, application, and operations teams to ensure controls are practical and effective in high availability logistics environments.
• Track control performance metrics and drive continuous improvement.

Reporting and Stakeholder Engagement

• Deliver regular reports to executive leadership on risk posture, compliance status, and key initiatives.
• Serve as the primary point of contact for customer security questionnaires and supply chain security assessments.
• Communicate complex security topics in clear, business aligned language.

Requirements

• Bachelor’s degree in information security, Computer Science or related discipline.
• Certifications preferred: CISSP, CISM, CRISC, CISA.
• 7+ years in IT Security, GRC or related roles.
• Strong understanding of security frameworks (ISO 27001, NIST CSF, SOC2).
• Knowledge of data privacy regulations (GDPR, PDPA) and cross-border logistics considerations.
• Experience managing audits, compliance programs, and risk assessments.
• Familiarity with logistics & supply chain environments.
• Ability to collaborate with cross‑functional teams and influence without authority.
• Excellent communication, documentation, and stakeholder‑management skills.

We are seeking an experienced IT Security Engineer with strong expertise in web proxy technologies, including Squid Proxy, Bluecoat (Symantec) ProxySG, and Zscaler Internet Access (ZIA). The engineer will be responsible for designing, implementing, and managing secure web access solutions while supporting enterprise security policies, threat protection, and compliance requirements.

Key Responsibilities

Proxy Infrastructure Management

• Deploy, configure, and maintain Squid Proxy, Bluecoat ProxySG, and Zscaler ZIA solutions.
• Optimize proxy performance, caching, load-balancing, and traffic routing.
• Develop rules, policies, and filters for secure web access control.

Security Operations

• Monitor and analyze web traffic logs to detect anomalies, threats, or policy violations.
• Investigate proxy-related security incidents and provide remediation.
• Implement URL filtering, SSL inspection, DLP controls, and threat prevention mechanisms.

Technology Integration

• Integrate proxy solutions with authentication systems (LDAP, AD, SAML).
• Collaborate with Network, SOC, and Cloud teams to support security controls across hybrid environments.
• Support integration with SIEM platforms for log forwarding and analytics.

Policy & Governance

• Maintain security configuration baselines, documentation, and SOPs.
• Ensure compliance with regulatory requirements (e.g., ISO 27001, MAS TRM, GDPR).
• Support periodic audits and risk assessments.

Troubleshooting & Support

• Provide Level 2/3 support for proxy-related issues.
• Troubleshoot connectivity, performance, and access control issues across distributed environments.
• Work with vendors (e.g., Broadcom, Zscaler) for escalated support cases.

Required Skills & Experience

• 3–8 years of experience in IT Security, Network Security, or related roles.
• CCIE Certification is preferred.
• Hands-on expertise with Squid Proxy, Bluecoat ProxySG/ASG, and Zscaler ZIA.
• Strong understanding of: Web protocols (HTTP/HTTPS)SSL/TLS inspection Web filtering & threat protection Networking fundamentals (TCP/IP, DNS, routing)
• Experience with enterprise logging, SIEM integration, and security monitoring.
• Familiarity with Linux environments (for Squid).
• Strong analytical and problem‑solving skills.
• 24/7 Rotating shift and on call support is required for this role.

The IT Security Officer (ITSO) is responsible for developing,implementing, and maintaining the organisation’s cybersecurity framework,ensuring compliance with security policies, and safeguarding information assets. This role oversees security operations, risk assessments, incidentresponse, access control, and compliance with regulatory and industry standards. The ITSO works closely with internal departments and external partners to ensure a secure digital environment.

Key Responsibilities

A. Security Governance & Compliance

• Develop, review, and enforce IT security policies, standards, and procedures.
• Maintain compliance with regulatory requirements
• Conduct periodic security audits, vulnerability assessments, and compliance checks.
• Prepare documentation, reports, and evidence for internal and external audits.
• Lead awareness programs to promote cybersecurity culture across the organisation.

B. Security Operations & Monitoring

• Monitor security events, alerts, and logs using SIEM, EDR, and other monitoring tools.
• Conduct threat analysis and respond to suspicious activities.
• Manage user access rights, privileged accounts, and identity lifecycle.
• Oversee endpoint protection, patch management, and secure configurations.
• Perform regular reviews of firewall, network, and application security.

C. Incident Response & Recovery

• Lead cybersecurity incident investigations, triage, containment, and recovery.
• Maintain and improve the Incident Response Plan (IRP) and Disaster Recovery (DR) procedures.
• Conduct post‑incident reviews and recommend preventive measures.
• Coordinate with external cybersecurity vendors and authorities when required.

D. Risk Management

• Perform IT risk assessments and maintain the IT risk register.
• Identify security gaps, evaluate vulnerabilities, and recommend mitigation strategies.
• Assess security posture of third‑party vendors and systems.
• Provide security input for new IT projects, system changes, and application rollouts.

E. Project & Advisory Support

• Work with IT teams to ensure secure architecture and configurations.
• Review business requirements for security implications.
• Support IT projects with security design, testing, and validation.
• Participate in procurement processes to evaluate security technologies and solutions.

Qualifications & Requirements

Education

• Bachelor’s degree in Information Security, Computer Science, IT, or related field.
• Equivalent experience will be considered.

Professional Certifications (Preferred/Optional)

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• GIAC Certified Incident Handler (GCIH).

Skills

• Proven experience in IT security, with a focus on infrastructure security
• Strong understanding of information security principles, best practices, and relevant regulations
• Experience with a range of security tools and technologies
• Familiarity with forensic investigation techniques and tools
• Excellent analytical and problem-solving skills
• Strong written and verbal communication skills
• Ability to work effectively both independently and in a team environment
• Experience in liaising with external partners and suppliers on security matters

Working Location : Central

**We regret to inform that only shortlisted candidates will be notified. Personal data collected will be used for recruitment purposes**

IT Security Officer (ITSO)

• Working Hours: Mon-Fri (Hybrid)
• Location: Central
• Remuneration: Up to $11,000 + AWS

Job Description

We are seeking an IT Security Specialist to provide cybersecurity support across on-premises and cloud environments. The role focuses on system security, monitoring, compliance, risk assessment, and governance to ensure the protection and resilience of IT systems.

Key Responsibilities

• Perform system security reviews, hardening checks, and risk assessments based on recognised benchmarks (e.g. CIS Benchmarks).
• Develop, review, and maintain system hardening baselines, standards, and Standard Operating Procedures (SOPs).
• Conduct periodic compliance reviews and follow up on remediation of identified security gaps.
• Monitor and respond to security alerts including phishing attempts, malware detections, and endpoint security incidents.
• Support vulnerability assessments, penetration testing activities, and audit engagements, including responding to audit RFIs.
• Review Cloud Security Posture Management (CSPM) findings across cloud and hybrid environments and assess alert validity.
• Track remediation progress, ensure timely follow-up, and escalate unresolved security issues where necessary.
• Provide security recommendations and risk-based assessments to system owners and infrastructure teams.
• Advise on security controls for new systems, projects, and enhancements.
• Manage governance and compliance tools, including updating remediation status and approved exceptions.
• Prepare periodic security reports highlighting risks, outstanding issues, and overall security posture.
• Support security awareness initiatives and user briefings to strengthen organisational security practices.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum 4 years of relevant IT security experience, including exposure to cloud and on-premises environments.
• Experience in security assessment, vulnerability management, and security monitoring.
• Familiarity with CSPM, SIEM/log analytics, and endpoint security tools.
• Possession of at least one recognised security certification (e.g. CISSP, CISM, CRISC, CISA) is preferred.
• Good communication skills in spoken and written English.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

Contact you about potential opportunities.

Delete personal data as it is not required at this application stage.

All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Aloysius Tan Sheng Rong - R22110441
ScienTec Consulting Pte Ltd - 11C5781

TRANSCOMOS ZERO is currently searching for a passionate and dedicated IT Security / Operations Engineer who is proficient in Japanese to add value to our vibrant Operations Team.

Role Objectives:

The successful candidate will be a crucial part of our team, using their expertise in IT security to manage and maintain systems for not only our company but also our group companies.

The role is not limited to security support but includes account management and technical support for clients and vendors.

With a strong grasp of our cloud-based infrastructure tools, the candidate will be fundamental in providing continuous technical support to clients and internal teams within the APAC region.

Key Responsibilities:

• Implement and maintain security configuration across our IT infrastructure (including M365, Google Workspaces, ClickUp, Bitbucket, and etc.)
• Guide IT managers of the group companies per the headquarters' directive.
• Effectively manage and analyze system logs on an ongoing basis.
• Remain updated about the latest security vulnerabilities and take immediate action if necessary.
• Collaborate with internal and external parties to ensure secure, smooth operations.
• Handle client inquiries about our proprietary applications.
• Automate redundant tasks using programming language skills.
• Regularly monitor and maintain system metrics dashboard and alerts.
• Educate colleagues and enhance company documentation about our IT infrastructure.
• Collaborate closely with the Tech department at Japan HQ.

Desired Skills and Experience:

• At least 5 years of extensive experience in IT-related fields.
• Proficient reading and writing skills in Japanese.
• Exceptionally good communication and interpersonal skills.
• Clear knowledge of AWS, Azure(Entra), and/or GCP Services, relating to software development.
• Strong ability to configure SIEM and Power BI tools.
• In-depth familiarization with account management and data security.
• Experience in creating, monitoring and responding to security events.

Preferred Qualifications:

• Proficiency in additional languages such as Korean, Chinese, Malay or Thai to support group companies in these countries.
• Proven experience with Cyber Incident Response Plan (CIRP).
• Expertise in vulnerability management, penetration testing, and implementing security incident response processes.
• Extensive experience in developing, implementing, and maintaining security policies.
• Knowledge of network security design and implementation.
• Experience in using vulnerability scanning tools and security tools.
• Proven record of enhancing cloud security through policy　implementation and monitoring.
• Experience in promoting social engineering and phishing countermeasures.
• Ability to provide in-house security training.
• Professional security-related certifications such as CISSP, CISM, CEH are highly desirable.

Summary:
The successful candidate will support tasks within the data Protection Portfolio, such as provision of computing resources, installing and configuring security software, managing network/firewall requests, account provisioning, backend integrations (SSO, SIEM, SOAR, MyAccess, DataDog), and creation of support documentation for operationalization.

• Possess a degree in Computer Science/Information Technology or related fields.
• Possess a strong combination of technical and analytical skills incybersecurity, including expertise in data loss prevention, data securityposture management, enterprise digital rights management, and general datasecurity technologies.
• Hands-on experience in implementing and operationalizing data securitysolutions and data protection, for both structured and unstructured data,specifically:
• Data discovery, classification, and labelling
• Data encryption, masking, tokenization
• Data Loss Prevention (DLP)
• Enterprise Digital Rights Management / Information Rights Management
• Privacy Enhancing Technologies and Confidential Computing
• Key and certificate management
• Hardware Security Modules (HSM)

Skillset(Must have)

• Secure file transfer and data store (including SaaS solutions)
• Familiarity with Cloud security and data security and protection in Cloud environments (e.g., AWS, Azure, Google Cloud).
• Possess scripting and coding skills, with proficiency in Java, Python, C#, orsimilar programming languages, and good understanding of REST API’s and JSON.
• Ability to create and maintain automation scripts.
• Familiarity with Cloud security and data security and protection in cloudenvironments (e.g., AWS, Azure, Google Cloud).
• Strong written and verbal communication skills, with the ability to conveytechnical information to non-technical stakeholders.
• Ability to work collaboratively with cross-functional teams and build strongworking relationships.
• Apply critical thinking skills to analyze complex security issues, evaluate potential solutions, and make well-informed decisions.

Job Description

• Industry/ Organization Type: Security Solutions Provider
• Position Title: Security System IT Technician
• Working Location: Islandwide (office at Woodlands)
• Working Hours: 5.5 days (Mon – Fri: 9am - 6pm, Sat: 9am – 1pm)
• Salary Package: Basic + OT
• Duration: Permanent

Key Responsibilities

• Install, manage, and troubleshoot security systems: Access Control, Intercom, CCTV, NAS, VMS, and related network equipment.
• Handle copper, fibre cabling, electrical work, and installation of data/power cables, conduits, and metal trunking.
• Support testing, commissioning, and regular maintenance of security systems.
• Carry out onsite troubleshooting.
• Provide technical support, training, and engineering assistance.
• Deliver equipment and samples to project sites when needed.
• Set up and design network solutions for security systems.
• Assist Project Managers and Engineers with other tasks as needed.
• Able to standby at night or over weekends when required.

APPLY NOW!!!

• ITE/Diploma/Degree in IT, Computer, Electrical, or Electronics Engineering.
• Minimum 2 years of experience with ELV systems such as Access Control, Intercom, and CCTV.
• Strong knowledge of computer networking and troubleshooting.
• Familiar with Microsoft Windows.
• Class 3A/3 driving license is an advantage.

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job@anradus.com.sg. Please indicate #78602 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781