Total 18 Legal / Public / Security job vacancies

Information Security Analyst - Financial Services

Job Summary

Responsible for cyber governance, risk management, and security operations within a regulated financial services environment. Develops and implements security policies, ensures regulatory compliance, coordinates security testing, and manages incident response and business continuity programs.

Key Responsibilities

Governance & Compliance:

• Provide cyber governance and risk management oversight
• Develop and maintain security policy framework and standards
• Ensure compliance with applicable regulations and standards (ISO 27001, NIST, regional financial services guidelines)
• Manage and track vulnerability remediation status
• Coordinate penetration testing and escalate material security risks to senior forums
• Conduct third-party due diligence for compliance and operational risk

Risk & Incident Management:

• Identify and assess cyber risks; recommend security solutions and initiatives
• Monitor security alerts and investigate security breaches and incidents
• Manage security incident response according to established protocols
• Maintain incident response plans and playbooks
• Develop and maintain Business Continuity Program; coordinate with department operations to create unified business continuity plan

Regulatory & Stakeholder Relations:

• Act as primary contact for senior management and regulatory body inquiries
• Ensure audit findings are remediated and independently validated within agreed timelines
• Conduct annual disaster recovery exercises with internal and external parties
• Provide security advisory on emerging threats and vulnerabilities

Access & Infrastructure:

• Develop and implement identity and access management policies
• Monitor and audit user access activities
• Assess infrastructure, systems, and applications for compliance and vulnerabilities

Awareness & Training:

• Maintain user cyber awareness programs
• Coordinate security awareness training for staff

Required

• 5 years' information security experience
• Strong analytical and problem-solving skills
• Familiarity with SIEM tools (Splunk) and vulnerability assessment tools (Tenable Nessus)
• Strong written, oral, and presentation skills
• Undergraduate degree in Computer Science, Information Technology, Engineering, or equivalent

Preferred

• CISSP, CISA, or CEH certification
• Graduate degree in related field
• Knowledge of regional financial services regulations and guidelines

Client introduction

Our client is an established financial institution, and regulated by the Monetary Authority of Singapore.

As part of strengthening its technology governance and security function, the firm is looking to hire an IT Security Analyst (Governance, Risk & Compliance) to join its infrastructure and security team. This role is well suited for someone with a foundation in IT risk, governance, assurance or security compliance, who is looking to build broader exposure across cyber governance, audit, vulnerability management, vendor due diligence and security operations within a regulated financial services environment.

Job responsibilities

• Support the review and overhaul of the firm's IT and security governance framework, drafting policies, standards and procedures for senior review and refinement.
• Help embed clear, well-understood policies and procedures across the organisation, aligned with regulatory expectations.
• Support compliance against MAS guidelines, including Technology Risk Management, Cyber Hygiene and Outsourcing, and assist with related risk assessments.
• Coordinate internal and external audit activity, including collating responses, gathering supporting artefacts and following up on findings with internal stakeholders through to closure.
• Track vulnerability assessment findings and remediation progress (assessments are run through an external vendor), working with the infrastructure and application teams to close gaps in good time.
• Conduct third-party and vendor due diligence in line with MAS outsourcing requirements, and respond to client and counterparty due diligence queries on the firm's security controls and governance practices.
• Support user access reviews, joiner-mover-leaver processes and identity access governance.
• Assist with business continuity, disaster recovery and related assurance exercises.
• Provide support on security operations and incident response coordination where required, with guidance from the team lead.

Job requirements

• At least 4 years of experience in IT risk, IT governance, technology assurance, IT audit or IT compliance, gained within a regulated financial institution such as a bank, securities or brokerage firm, asset manager or insurer.
• Working familiarity with the MAS Technology Risk Management Guidelines, Cyber Hygiene Notice and Outsourcing Guidelines.
• Exposure to audit coordination, evidence gathering, policy documentation, risk assessment or remediation tracking.
• A genuine interest in cyber security and a willingness to learn the hands-on operational side of the role. Deep SOC or security engineering experience is not required.
• Exposure to vulnerability management, access reviews, SIEM or IAM tooling is an advantage rather than a requirement.
• Strong written and verbal communication, with the ability to engage auditors, vendors, infrastructure and application teams, and business stakeholders clearly.
• A detail-oriented, proactive working style and a readiness to learn across both governance and operational security.
• Relevant certifications such as CISA, or progress toward them, are advantageous but not mandatory.

Why you should join them

• Breadth of exposure that is rare at this level, spanning governance, risk, compliance, audit and security operations in a single role, giving the right person a strong foundation early in their career.
• Direct mentorship from an experienced infrastructure and security team lead, who will actively coach the successful candidate on the technical and operational aspects of the role.
• A genuine opportunity to help rebuild and mature the firm's IT governance framework, with visible impact in a lean team.
• Regular interaction with auditors, vendors and counterparties, building a clear path toward a career in IT risk and security governance.

JL
Reg. No. R1766249
BeathChapman Pte Ltd
Licence no. 16S8112

Global Security Operations Centre (GSOC) Analyst, Asia-Pacific

The APAC Global Security Operations Centre (GSOC) Analyst will be based in Kuala Lumpur,Malaysia providing regional threat detection, intelligence collection and analysis, risk incident triage and escalation as well as crisis management support (administrative & operational) for the firm across APAC. The Analyst supports and works integrally with the 24/7/365 APAC GSOC team based in Singapore. This is an opportunity to grow within a mature corporate security operation and work with seasoned regional security experts, gaining competency to key aspects of mature corporate security operations. The successful candidate should be a self-driven and resilient individual, with the ability to perform under pressure and deliver across competing priorities.

• Threat Detection & Reporting: Proactively gather and analyze information from various internal/external sources and draft reports to provide management and global contacts with useful, timely and actionable intelligence.

• Incident Management: Support regional senior management and line-of-business (LOB) stakeholders by triaging risks and underpinning business continuity during incident or crisis.

• Crisis Management Operational Support: Perform incident case and records management, progress logging, and stakeholder messaging and enterprise mass notification.

• Travel Security: Manage and administer travel security operations including tracking, assisting and advising international travelers on any incident or crisis.

• Regional Aptitude: Coordinate with other regional GS leaders or GSOCs fortrans-national incidents or crises or other aspects of security operations.

• Cross-Team Collaboration: Work closely with other incident management partners such as Real Estate, Global Technology Infrastructure, Resiliency, LOB Business Resiliency and Global Security managers to ensure effective coordination and operations.

• Manage any other duties or projects as directed by APAC Global Security senior managers, including Technical and Physical Security tasks.

Requirements

• Minimum of Bachelor’s degree or post-graduate level qualification, particularly in relevant fields e.g. security studies, international relations, geomatics,criminology or social sciences. 

• Strong knowledge and interest in security and geo-political developments across APAC with strong initiative to independently assess emerging themes, events and incidents with potential to impact business, client and third-party locations and travelers across region.

• Ability to work effectively under pressure in a fast-paced environment while consistently producing error-free work and meeting deadlines. 

• Strong analytical, interpersonal skills and comprehensive computer skills (good understanding of all Microsoft applications and willingness to work in a high-technology role regularly utilizing new tools and applications).

Job Title: Microsoft Purview DLP Security Analyst / M365 DLP Support Engineer

Employment Period: August/September 2026 to March 2027, with possible yearly renewal
Location: 1 Fusionopolis Way
Working Hours: Monday to Friday, 8:30am to 6:00pm
Engagement Type: Contract / Renewable Term

Role Overview
We are seeking a Microsoft Purview DLP Security Analyst / M365 DLP Support Engineer to support Data Loss Prevention alert monitoring, incident handling, investigation, reporting, user support, and policy improvement activities.

The successful candidate will work closely with security operations, service desk, data owners, business users, compliance teams, and Microsoft Purview SMEs to ensure DLP alerts are properly monitored, investigated, classified, documented, escalated, and improved through continuous policy tuning.

Key Responsibilities

DLP Alert Monitoring & Incident Handling
Monitor DLP alerts from Microsoft Purview DLP Dashboard, Microsoft Defender XDR, email notifications, service desk tickets, and related alerting channels.

Log, track, triage, and classify DLP alerts, including initial investigation of true positives and false positives.

Perform first-level analysis and escalate high-risk or complex incidents to L2 security operations, L3 Purview SMEs, architects, compliance, legal, or other relevant stakeholders where required.

Investigation & Analysis
Perform detailed analysis of DLP incidents to identify root causes, including user behaviour, policy gaps, data misclassification, or process issues.

Validate and document false positives clearly to support policy improvement and operational reporting.

Support forensic analysis and evidence gathering for high-risk DLP incidents where required.

Escalation & Stakeholder Coordination
Coordinate with SOC teams, service desk, business units, data owners, compliance, legal, and IT stakeholders to ensure DLP incidents are handled appropriately and within expected timelines.

Communicate DLP-related issues clearly to both technical and non-technical users.

Policy Tuning & Change Management
Work with L3 SMEs and architects to recommend improvements to DLP policies based on repeated alerts, user feedback, threat trends, false positive patterns, and post-incident findings.

Support DLP change management activities arising from new regulatory requirements, new workloads such as Teams, Copilot or SaaS applications, and post-incident improvements.

Provide practical recommendations to improve DLP policy effectiveness and reduce unnecessary business disruption.

User Support & Awareness
Respond to user-reported DLP issues, including blocked activities, policy alerts, and suspected false positives.

Provide guidance to users on compliant data handling and proper use of sensitive information.

Support communication and awareness activities related to DLP policy enforcement.

Monitor and ensure the AI agent is running and responding correctly where applicable.

Reporting & Continuous Improvement
Prepare periodic DLP reports covering alert volumes, top users triggering policies, false positive rates, policy effectiveness trends, recurring issues, and recommended improvements.

Maintain proper documentation of investigations, findings, escalations, and closure actions.

Technical Skills Required
Strong hands-on knowledge of Microsoft Purview DLP is mandatory.

Experience in Microsoft Purview policy configuration, troubleshooting, alert review, and operational support.

Good understanding of DLP across Endpoint, Exchange, SharePoint, Teams, and Microsoft 365 workloads.

Knowledge of Microsoft Defender XDR, Microsoft 365 Compliance Portal, Microsoft Entra, sensitivity labels, data classification, and information protection.

Microsoft Intune experience will be an added advantage.

Operational & SOC Skills
Experience in incident triage, investigation, security alert analysis, ticket handling, true/false positive determination, and basic log analysis.

Experience with ticketing tools such as ServiceNow or similar platforms.

Ability to work with SOC, service desk, compliance, legal, and business stakeholders.

Data Security & Compliance Knowledge
Good understanding of data protection, data classification, data exfiltration risks, insider risk awareness, and DLP control concepts.

Knowledge of Singapore PDPA and data protection practices will be advantageous.

Soft Skills
Strong communication skills with business users and technical stakeholders.

Ability to explain DLP blocks, alerts, and policy enforcement in a professional and user-friendly manner.

Strong analytical thinking, root-cause analysis, documentation, and coordination skills.

Able to work independently while escalating appropriately when needed.

Experience Requirement
3 to 5 years of experience in Microsoft 365, Microsoft Purview, DLP, security operations, end-user support, or L2 support.

Hands-on experience supporting Microsoft Purview DLP in an enterprise environment is strongly preferred.

Preferred Certifications
Microsoft SC-400: Information Protection Administrator
Microsoft SC-200: Security Operations Analyst
Microsoft MS-102: Microsoft 365 Administrator
Microsoft SC-300: Identity and Access Administrator

Job Overview

We are looking for a proactive Information Security professional to support enterprise IT security operations and infrastructureinitiatives across regional environments. This role will focus on strengthening cybersecurity operations, monitoring security threats, supporting incident response activities, and maintaining secure network infrastructure within a multinational environment.

The ideal candidate should possess hands-on experience in networking and cybersecurity administration, with the ability to work independently while supporting regional security initiatives.

Key Responsibilities

Cybersecurity Operations & Monitoring

• Monitor security alerts and events through SIEM and security monitoring platforms
• Investigate and respond to cybersecurity incidents and security breaches
• Support vulnerability assessment and remediation activities
• Assist in implementing endpoint and network security solutions across regional offices

Infrastructure & Network Support

• Support daily administration of enterprise IT and network infrastructure
• Maintain network and security configurations to ensure system reliability and compliance
• Troubleshoot infrastructure and connectivity issues across corporate environments
• Participate in infrastructure enhancement and security improvement projects

Project & Regional Support

• Support regional IT security initiatives and deployment activities
• Work closely with internal stakeholders across different countries and teams
• Assist with documentation, operational support, and other assigned tasks
• Occasional regional travel may be required for project implementation or support activities

Requirements

• Diploma or Degree in Information Technology, Cyber Security, Networking, or related discipline
• Minimum 3 to 5 years of experience in network administration or cybersecurity operations
• Familiarity with SIEM monitoring, incident response, and vulnerability management
• Good troubleshooting and problem-solving skills in network and security environments
• Able to work effectively both independently and within a team environment
• Comfortable communicating with users and stakeholders across different backgrounds and regions
• Strong sense of responsibility with the ability to work in a fast-paced environment
• Good verbal and written communication skills in English

Please send your detailed resume in MS Word format to resume@goldtecHRs.com with

• Education Level
• Working experiences
• Each employment background
• Reason for leaving each employment
• Last drawn salary
• Expected salary
• Date of availability

Key Responsibilities:

1. Investment Research & Analysis:

• Conduct detailed industry and market research to identify emerging investment opportunities.
• Analyze financial statements, build financial models, and assess the financial health of potential investment targets.
• Assist in due diligence efforts, including financial, operational, and strategic evaluations of prospective investments.
• Prepare investment presentations, and reports for internal and external stakeholders.
• Monitor portfolio investments, track key performance metrics, and assess risk management strategies.

2. Strategic Management:

• Coordinate cross-functional teams and support ongoing projects to support growth and operational objectives within portfolio companies.
• Build and maintain strong relationships with key stakeholders, including portfolio company management teams, and other third parties.
• Liaise with external partners, advisors, and service providers to support investment activities and portfolio management.

Who We’re Looking For:

• Passionate about investing in a concentrated manner via deep conviction.
• A Bachelor’s degree in Finance, Business Administration, Economics, or related field (Master’s/MBA is a plus).
• 1-2 prior experiences preferably in investment management or operational roles.
• Strong financial modeling skills and proficiency with Microsoft Excel and financial analysis software.
• Excellent written and verbal communication skills.
• Strong understanding of financial markets, investment principles, and best practices in business management.
• Independent, highly analytical, detail-oriented, and proactive problem solver.
• Demonstrated ability to work collaboratively within a team and independently.

Preferred Skills:

• Knowledge of private equity/venture capital, mergers and acquisitions (M&A), or asset management.

Duration:

• Full-time, on-site

How to apply:

• Please submit your resume, unofficial transcript and any relevant supporting documents to hr.ad@hobeemedia.com

*Seeking for a talent who has minimum 6 years of experience handling Banking/Financial services’ IT Risk/Cyber security/Information security/Governance risk including 3 years of hands-on IT technical security/security operations*

THE COMPANY
With their reputable brand and commitment to their clients, this company is increasing their operations in the region. They seek an IT Risk/Cyber Security/Information Security Manager to be part of their team.

JOB RESPONSIBILITIES

• Perform Level 2 IT risk/Cyber security/Information Security or governance risk
• Handle IT regulatory compliance (MAS TRM and information security)/security risk framework
• Handle Incident Oversight and root cause analysis & Control Validation
• Prepare Risk Register, Reporting & Adversarial Attack Simulation Exercises to assess the effectiveness of security controls and detection capabilities
• Provide IT security advisory
• Work closely with other business stakeholders etc.
• Any other adhoc duties

JOB REQUIREMENTS

• Degree in IT/Information Technology/Information Security/Computer Science or any other relevant IT education
• Has a recognised information security certification such as CRISC, CISSP, or equivalent
• Minimum 6 years of experience handling Banking/Financial services’ IT Risk/Cyber security/Information security/governance risk including 3 years of hands-on IT technical security/security operations
• Solutions-oriented, friendly, helpful, resourceful and able to multi-task

If you would like to explore this opportunity, please email your resume in Microsoft Word format to marie@resolutehunter.com

We thank you for your interest and will contact shortlisted candidates for more detailed discussion.

For more job opportunities, please visit our website https://resolutehunter.com

EA Licence 18C9105 
EA Reg R1105305

- At least 5 years experience with configuration and security analysis module

- Define security policy and validate configuration items of managed SAP landscape

- Familiar with alerting capablitiies for proactive security manage-ment

- Knowledge of integration with Guided Procedure to automate secu-rity check and assess effectiveness of security measures - Knowledge of Simple Diagnotiss Agent (SDA) and CCDB availa-ble in Focused Run

- Knowledge of XML programming languages used in Focused Run policies

Job Title: Legal Counsel, Asia – Payments

Salary: S$100,000 to S$120,000

Job Location: Singapore

Job Type: Permanent

Posted: 27th April 2026

This key Legal Counsel position offers an exciting opportunity to join a fast-growing organization within the payments industry, supporting its expanding operations across Asia. Based in Singapore, you will serve as a regional legal advisor covering multiple jurisdictions, with a strong focus on regulatory, commercial, and product-related legal matters in the fintech and payments space.

You will be responsible for drafting, reviewing, and negotiating a wide range of commercial agreements, including merchant contracts, technology and outsourcing arrangements, and partnership documentation. You will also provide legal and regulatory guidance on payment services regulations, licensing requirements, AML/CTF obligations, and cross-border compliance matters across Asia.

In this role, you will work closely with business, compliance, risk, and product teams to support new product launches and ensure adherence to evolving regulatory frameworks in a dynamic and highly regulated environment.

This role is ideal for a commercially minded legal professional seeking strong regional exposure in the fintech and payments sector, with the opportunity to work in a fast-paced, innovation-driven business.

To apply for this job, please send your resume to hsingh@sg.drakeintl.com, or contact Heamenjit for more information at +65 6645 4540.

Closing date: Open until filled

License No: 11C3510 / EA Reg ID: R1658237

About Akkodis

Akkodis is a global leader in engineering and R&D, leveraging connected data and deep technical expertise to accelerate innovation and digital transformation. With over 50,000 engineers and digital specialists across 30 countries in North America, EMEA, and APAC, Akkodis supports clients across the full innovation lifecycle—from concept and engineering to deployment and operations.

Its capabilities span mobility, software and technology services, robotics, testing and simulation, data security, AI, and analytics. Akkodis is part of the Adecco Group, bringing together the strengths of AKKA and Modis.

Job Summary

We are seeking a Cybersecurity SOC Engineer with strong hands-on experience in infrastructure and security operations within complex, multi-vendor enterprise environments. This role requires a proactive individual who can operate effectively in evolving and partially structured environments while maintaining high standards in security operations, troubleshooting, and system validation.

Experience Requirements

• 5–8 years of relevant experience in infrastructure, cybersecurity operations, or system integration
• Proven experience working in complex, multi-vendor enterprise environments
• Ability to work effectively in dynamic environments with evolving processes

Key Technical Skills

Core Infrastructure & Security

• Hands-on experience with:Firewalls (e.g., Check Point or equivalent)SIEM platforms (e.g., LogRhythm or similar)Endpoint security solutions (e.g., Symantec or equivalent)Network Access Control tools (e.g., Aruba ClearPass or similar)
• Strong understanding of:Networking fundamentals (TCP/IP, routing, switching, VPNs)Security operations and incident response workflows

Systems & Operations

• Experience in Linux/Unix environments
• Strong troubleshooting capabilities across system and network/security issues
• Familiarity with:Ticketing tools (e.g., JIRA, ServiceNow)Log monitoring and analysis tools

Key Functional Competencies

• Strong troubleshooting and root cause analysis (RCA) mindset
• Ability to quickly learn and adapt across multiple technologies
• Comfortable working in documentation-heavy environments (e.g., test reports, RCA, compliance documentation)
• Effective stakeholder management across multiple teams and approval layers
• High sense of ownership and accountability, especially in ambiguous situations

Ideal Candidate Profile

• Resilient and adaptable in fast-paced, high-demand environments
• Able to balance operational responsibilities, testing activities, and documentation requirements
• Works independently with minimal supervision while collaborating effectively with cross-functional teams
• Demonstrates a pragmatic, solution-oriented mindset with the ability to prioritise and execute under imperfect conditions.

Don't miss out on this chance to be a part of a dynamic and growing team. Take the Next Step in your career journey with us!

• To apply, please submit your updated resume along with your notice period. [ We are looking for someone to start ASAP]
• Click on the 'Apply here' button to drop your resume directly or email it to susmita.SAHU@akkodis.com
• Our team will review all applications and contact shortlisted candidates for further steps in the selection process.

​Our Client is an established and leading company in Singapore, who is seeking to recruit a Cyber Security Analyst.

KEY ROLES AND RESPONSIBILITIES

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 6 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

JJ Consulting Services

EA Licence No.: 12C6207

Applicants are invited to send in a MS Word resume to jobs@jjconsulting.com.sg stating position applying for/present/expected salaries and earliest available date.

We thank all applicants in advance and regret that only short listed candidates will be notified.

This posting is for a contract assignment with Tundra Technical Solutions to provide services to our Client, a Fortune 500 Tech Firm.

Job Description:

The main function of the Legal Operations Analyst/ Law Enforcement Associate is to perform a variety of legal and operational duties in support of the Law Enforcement Outreach team.

Job Responsibilities:
Support the APAC Law Enforcement Outreach Team with:
- Managing escalations from law enforcement in relation to content reports
- Managing escalations from law enforcement in relation to issues with data disclosures
- Managing escalations from law enforcement in relation to hacked accounts
- Managing escalations from law enforcement in relation to verification of police accounts
- Manage inquiries from law enforcement about law enforcement issues
- Program manage internal follow-up actions with XFN arising from Enhanced Engagements with law enforcement partners
- Managing and implementing internet safety and security programs with law enforcement partners
- Engage with internal XFN teams on resolving issues of concern flagged by law enforcement partners
- Engage with internal XFN teams on improving operational workflow processes

Skills and Experience
Essential:
- Prior background working with law enforcement as well as trust and safety within the Tech Industry
- Superior data analytical skills and distilling recommendations
- Experience with metric driven processes and technology improvements
- Excellent verbal and written communication skills, problem solving skills, attention to detail and interpersonal skills.
- Strong ability to work independently, be organized, and manage one's time.
- Strong ability to create relationships with XFN teams
- Work to improve cross-functional relationships with internal teams
- Ability to multi-task and change direction quickly
- Ensure and maintain confidentiality of all appropriate communications and documentation
- Communicate daily with internal partners and externally with law enforcement contacts, while exhibiting the highest degree of professionalism, courtesy and diplomacy
- Track, prioritize, and assign all incoming written and oral communications, as necessary, to appropriate team member for response
- Prior experience at a tech company
- Experience managing operations

*This role may involve exposure to potentially graphic and/or objectionable content including but not limited to graphic images, videos and writings, offensive or derogatory language, and other potential objectionable material. I.e. child exploitation, graphic violence, animal abuse, self-injury and other content which may be considered offensive or disturbing.

This posting is for a contract assignment with Tundra Technical Solutions to provide services to our client. Please note that this is not a full-time employment opportunity. Candidates selected for this role will be engaged as contractors for the specified duration of the project.

The Role:

Our client is a Global Financial Services firm in the insurance sector, looking for an experienced Senior Legal Counsel to head up the regional team. You are a key member of the global leadership team for this business line.

Requirements:

• Law degree with at least 10 years PQE, ideally gained in the insurance/reinsurance sector, with people management experience
• Experience in treaty drafting process and experience dealing with senior management and regulators
• Strong organizational, communication, and stakeholder management skills.
• Lead advice on interpretation and judgement matters, advise on disputes with clients or third parties

Take charge of your career in 2026. Feel free to send your resume and to Linus Choo linus@ethosbc.com. 

LC
Reg. No. R1216328
BeathChapman Pte Ltd
Licence no. 16S8112

    Job Description

·      We are seeking a skilled and proactive Cyber Security Analyst to join our Security Operations Center (SOC). The ideal candidate will be responsible for real-time security monitoring, incident investigation, and response across enterprise environments.

·       This role requires strong expertise in threat detection, incident handling, and continuous improvement of SOC capabilities. 

Key Responsibilities 

·      Security Monitoring & Incident Response Monitor, investigate, and respond to medium to high-severity security incidents across network, endpoint, cloud, and application environments

·       Perform in-depth analysis of alerts, logs, and security telemetry to identify root cause, impact, and remediation actions

·       Coordinate incident response activities with internal teams and external stakeholders when required 

·      Escalate critical incidents to management as per defined protocols 

·      Ensure all incidents are handled in accordance with SLAs, playbooks, and compliance requirements 

·      Threat Detection & Use Case Management Tune and optimize SIEM detection rules to improve detection accuracy and reduce false positives

·       Analyze emerging threats and enhance detection use cases accordingly

·       Continuous Improvement & SOC Maturity Contribute to the development and enhancement of SOC processes, runbooks, and playbooks 

·      Identify opportunities for automation using SOAR and AI-driven solutions 

·      Support initiatives to improve SOC efficiency and maturity 

·      Leadership & Mentorship Provide guidance and mentoring to junior SOC analysts Act as an escalation point for complex investigations 

·      Promote knowledge sharing, training, and continuous learning within the team 

Required Skills & Experience 

·      Hands-on experience with SIEM platforms such as Splunk, Elasticsearch, Microsoft Sentinel, or Google SecOps Strong understanding of network, endpoint, identity, and cloud security concepts 

·      Experience analyzing logs from firewalls, EDR, IDS/IPS, cloud platforms, and operating systems 

·      Knowledge of incident response methodologies and digital forensics fundamentals 

·      Experience 3–5 years of experience in Cyber Security Operations, SOC, or Incident 

·      Response roles Proven ability to independently handle medium to high-severity incidents 

·      Experience working in regulated environments (financial services, healthcare, government) is an advantage 

·      Soft Skills Strong analytical and problem-solving abilities 

·      Ability to remain calm and structured under pressure High level of ownership, accountability, and attention to detail 

Preferred / Nice-to-Have 

·      Experience with SOAR platforms and security automation 

·      Cloud security expertise (AWS, Azure, GCP) Scripting/query skills (SPL, KQL, SQL, Python) 

·      Experience in SOC transformation or SIEM migration projects 

·      Certifications (Preferred) GCIA, GCIH, GCED SIEM-related certifications (Elastic, Google SecOps, Microsoft Sentinel, or equivalent)vv

​Our Client is an established and leading company in Singapore, who is seeking to recruit a Cyber Security Analyst.

KEY ROLES AND RESPONSIBILITIES

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 6 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

JJ Consulting Services

EA Licence No.: 12C6207

Applicants are invited to send in a MS Word resume to jobs@jjconsulting.com.sg stating position applying for/present/expected salaries and earliest available date.

We thank all applicants in advance and regret that only short listed candidates will be notified.

​Our Client is an established and leading company in Singapore, who is seeking to recruit a Cyber Security Analyst.

KEY ROLES AND RESPONSIBILITIES

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 6 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

JJ Consulting Services

EA Licence No.: 12C6207

Applicants are invited to send in a MS Word resume to jobs@jjconsulting.com.sg stating position applying for/present/expected salaries and earliest available date.

We thank all applicants in advance and regret that only short listed candidates will be notified.

About audax 

audax means courage. To have the courage to change the banking scene, eliminating constraints caused by existing legacy infrastructure. Our mission is to empower banks and financial institutions to scale and modernise at speed, reaching new customers without breaking the bank. 

We began our journey supplying services to and powering Standard Chartered’s white-label plug and play Banking-as-a-Service (BaaS) solution, Standard Chartered nexus, through our technology capabilities. At audax, we seek go-getters who are hungry for growth and can bring fresh perspectives. 

Website - https://www.audax.io  

What You’ll Do:

1.     Firewall, Network Proxy, and EDR Management: 

• Firewall Management: Oversee the configuration, maintenance, and monitoring of firewall systems to enforce security policies and control network traffic effectively. 

• Network Proxy Management: Manage proxy servers to secure internet traffic, optimize performance, and troubleshoot issues as needed. 

• Endpoint Detection and Response (EDR) Management: Manage EDR tools across endpoints, configure policies for threat detection and response, and analyze endpoint data for security anomalies. 

2.     Threat Detection and Content Creation: 

• Write and refine rules, signatures, and queries to detect security threats effectively. 

• Develop and update security detection content for SIEM (Security Information and Event Management) systems. 

3.     Vulnerability and Threat Management: 

• Manage vulnerability assessment and remediation programs, prioritizing and mitigating security vulnerabilities. 

• Coordinate with technology operations teams to apply patches and updates to systems and applications. 

• Monitor and respond to emerging threats, implementing proactive measures to protect systems and data. 

4.     Incident Response: 

• Perform security monitoring and triaging for potential threats and SIEM alerts. 
• Develop and maintain incident response plans and procedures, coordinating responses during security incidents or breaches. 
• Lead incident response teams, ensuring timely resolution and post-incident analysis to prevent future occurrences. 

5.     Access Review and Security Exceptions: 

• Establish and maintain access review processes to ensure appropriate access rights and permissions. 
• Manage and review user requests for security exceptions, balancing business needs with security requirements. 
• Implement controls and monitor activities to detect unauthorized access attempts and policy violations. 

6.     Collaboration with Engineering Teams: 

• Work closely with engineering teams to integrate security best practices into the development lifecycle. 
• Conduct security reviews of infrastructure, applications, and new technologies, providing recommendations for security enhancements. 
• Collaborate on the design and implementation of secure architecture and solutions. 

7.     Service Management: 

• Provide oversight of security service delivery, ensuring SLAs (Service Level Agreements) are met. 
• Manage relationships with security service providers and vendors, evaluating services and negotiating contracts. 

8.     Compliance and Reporting: 

• Ensure compliance with relevant security standards, regulations, and best practices. 
• Generate regular reports on security metrics, incidents, vulnerabilities, and operational status. 
• Participate in audits and assessments related to security operations. 

9.     Audit Management: 

• Manage and coordinate security audits conducted internally or by external auditors. 
• Prepare audit responses and action plans, implementing corrective measures and tracking progress. 

Who You Are:

• Bachelor’s degree in Computer Science, Information Technology, or related field; advanced degree or certifications (e.g., CISSP, CISM) preferred. 
• Proven experience in a security operations role with hands-on experience in firewall management, network proxy, EDR, incident response, and threat detection. 
• Strong understanding of security principles, protocols, and technologies. 
• Experience with access control, vulnerability management, audit management, and compliance frameworks (e.g., PCI-DSS, GDPR). 
• Excellent communication skills and ability to collaborate effectively across teams and stakeholders. 
• Fresh graduates with the right skillet and aptitude may also be considered. 

Why Join Us? 

• Be Part of a Bold Vision – At audax, we’re not just building software – we’re transforming how financial institutions and businesses manage risk, compliance, and growth. Join a team that’s fearless in challenging the status quo.
• Flexible, People-First Workplace – We value the importance of Family, Team, Self. In that order.
• Competitive Rewards and Startup Perks – We offer competitive salaries and meaningful benefits that look after your well-being. 

Privacy Notice:
Please note: by submitting your application, you acknowledge that you have read and understood audax’s Privacy Policy for Employees, Freelancers, Contractors and Job Applicants (the “Policy”), and consent to the collection, use and disclosure of your personal data by audax for the purposes set out in the Policy. You may withdraw consent for such collection, use and disclosure, and make an access or correction request in respect of your personal data, in accordance with the Policy by emailing dpo@audax.io.

Note: This role is not open to recruitment agencies. Thank you.

Summary:
The successful candidate will support tasks within the data Protection Portfolio, such as provision of computing resources, installing and configuring security software, managing network/firewall requests, account provisioning, backend integrations (SSO, SIEM, SOAR, MyAccess, DataDog), and creation of support documentation for operationalization.

• Possess a degree in Computer Science/Information Technology or related fields.
• Possess a strong combination of technical and analytical skills incybersecurity, including expertise in data loss prevention, data securityposture management, enterprise digital rights management, and general datasecurity technologies.
• Hands-on experience in implementing and operationalizing data securitysolutions and data protection, for both structured and unstructured data,specifically:
• Data discovery, classification, and labelling
• Data encryption, masking, tokenization
• Data Loss Prevention (DLP)
• Enterprise Digital Rights Management / Information Rights Management
• Privacy Enhancing Technologies and Confidential Computing
• Key and certificate management
• Hardware Security Modules (HSM)

Skillset(Must have)

• Secure file transfer and data store (including SaaS solutions)
• Familiarity with Cloud security and data security and protection in Cloud environments (e.g., AWS, Azure, Google Cloud).
• Possess scripting and coding skills, with proficiency in Java, Python, C#, orsimilar programming languages, and good understanding of REST API’s and JSON.
• Ability to create and maintain automation scripts.
• Familiarity with Cloud security and data security and protection in cloudenvironments (e.g., AWS, Azure, Google Cloud).
• Strong written and verbal communication skills, with the ability to conveytechnical information to non-technical stakeholders.
• Ability to work collaboratively with cross-functional teams and build strongworking relationships.
• Apply critical thinking skills to analyze complex security issues, evaluate potential solutions, and make well-informed decisions.