Total 34 Legal / Public / Security job vacancies

Information Security Analyst - Financial Services

Job Summary

Responsible for cyber governance, risk management, and security operations within a regulated financial services environment. Develops and implements security policies, ensures regulatory compliance, coordinates security testing, and manages incident response and business continuity programs.

Key Responsibilities

Governance & Compliance:

• Provide cyber governance and risk management oversight
• Develop and maintain security policy framework and standards
• Ensure compliance with applicable regulations and standards (ISO 27001, NIST, regional financial services guidelines)
• Manage and track vulnerability remediation status
• Coordinate penetration testing and escalate material security risks to senior forums
• Conduct third-party due diligence for compliance and operational risk

Risk & Incident Management:

• Identify and assess cyber risks; recommend security solutions and initiatives
• Monitor security alerts and investigate security breaches and incidents
• Manage security incident response according to established protocols
• Maintain incident response plans and playbooks
• Develop and maintain Business Continuity Program; coordinate with department operations to create unified business continuity plan

Regulatory & Stakeholder Relations:

• Act as primary contact for senior management and regulatory body inquiries
• Ensure audit findings are remediated and independently validated within agreed timelines
• Conduct annual disaster recovery exercises with internal and external parties
• Provide security advisory on emerging threats and vulnerabilities

Access & Infrastructure:

• Develop and implement identity and access management policies
• Monitor and audit user access activities
• Assess infrastructure, systems, and applications for compliance and vulnerabilities

Awareness & Training:

• Maintain user cyber awareness programs
• Coordinate security awareness training for staff

Required

• 5 years' information security experience
• Strong analytical and problem-solving skills
• Familiarity with SIEM tools (Splunk) and vulnerability assessment tools (Tenable Nessus)
• Strong written, oral, and presentation skills
• Undergraduate degree in Computer Science, Information Technology, Engineering, or equivalent

Preferred

• CISSP, CISA, or CEH certification
• Graduate degree in related field
• Knowledge of regional financial services regulations and guidelines

Security Strategy & Baseline Framework Development

• Develop, implement, and maintain the company's overall security baseline framework covering production environments, corporate networks, key management, access controls, data classification, and other critical security domains. 
• Regularly review and update policies to address evolving threats and ensure consistent security standards across all business units.

Vulnerability Management & Penetration Testing

• Lead vulnerability identification, assessment, and prioritization efforts. 
• Coordinate and/or conduct penetration testing activities, monitor remediation progress, ensure closure within agreed SLAs, and provide regular reporting of critical risks to the CEO.

Key Management & Wallet Security (Custody Layer)

• Design and enforce security controls for digital asset custody operations, including hot and cold wallet management, key rotation processes, multi-signature (Multi-Sig) and MPC solutions. 
• Lead security integration and configuration of enterprise custody platforms such as Cobo and similar providers, including transaction limits, whitelisting, approval workflows, and review mechanisms. 
• Ensure all asset-related activities maintain a complete and auditable operational trail.

Operational Security (OpSec)

• Implement security controls across customer fund movements, external communications, and data processing activities. 
• Review and assess the security of CFD trading systems, payment channels, and integration interfaces. 
• Enforce segregation of duties (SoD) to reduce risks arising from fraud, abuse, or operational errors.

Security SOP Framework

• Develop, maintain, and continuously improve security-related SOPs covering areas such as account management, wallet operations, employee onboarding/offboarding, incident response, third-party onboarding, and emergency procedures. 
• Drive implementation across departments and ensure periodic review and compliance.

Executive & Key Personnel Security

• Develop digital security programs for executives, key custodians, and other high-value individuals. This includes personal account security, device security, SIM swap prevention, anti-phishing and social engineering measures, and reduction of sensitive information exposure through OSINT management.

Third-Party & Vendor Security Management

• Conduct security due diligence and onboarding assessments for third-party vendors, including SaaS providers, liquidity partners, financial counterparties, and technology suppliers. 
• Review security and data protection provisions within contracts and SLAs. 
• Maintain vendor risk registers and coordinate penetration testing, security assessments, and external audits.

Security Incident Response (Technical)

• Lead technical investigations, forensic analysis, and root-cause assessments during security incidents.
• Produce independent technical investigation reports and collaborate with the Independent Risk Manager while maintaining separate and objective conclusions.

Production Security Audits & Regulatory Support

• Conduct periodic reviews of production environments, including network architecture, IAM controls, API security, and infrastructure configurations. 
• Ensure security principles are effectively implemented across all projects. 
• Support regulatory audits and compliance initiatives related to KYC/AML requirements and drive security certification programs as business needs evolve.

Security Awareness & Governance

• Establish and maintain company-wide information security policies and operational standards. 
• Organize security awareness programs, phishing simulations, and training initiatives to foster a unified security culture across both digital asset and traditional financial services businesses.

AI Product Security & Governance

• Develop and oversee security policies for AI-related products and systems. 
• Conduct security assessments of AI applications and ensure the security and resilience of the company's AI infrastructure and foundational platforms, minimizing attack surfaces and operational risks.

Requirements

• Minimum 5 years of experience in information security, with at least 2 years in fintech, digital assets, cryptocurrency, payments, or trading platforms.
• Professional security certifications such as CISSP, CISM, CISA, CCSP, or equivalent.
• Experience in building security teams and security programs will be an advantage.
• Hands-on experience with IAM/SSO solutions (Okta preferred), MFA, Mobile Device Management (MDM), asset management, cloud security (e.g., AWS), and core security technologies such as network segmentation, IAM, and SIEM.
• Strong understanding of digital asset custody and wallet security, including MPC, multi-signature wallets, hot/cold wallet architecture, and key management.
• Experience integrating and managing enterprise custody platforms such as Cobo, Fireblocks, or equivalent solutions.
• Familiarity with penetration testing methodologies and the ability to review and evaluate third-party penetration testing reports.
• Understanding of AI technologies and security considerations for AI systems and applications.
• Proven ability to build security frameworks, policies, and SOPs from the ground up rather than solely operating within existing structures.

About the Role

We are seeking an experienced senior manager to lead our information security team, combining strong hands-on technical expertise as well as people management experience in the information security domain. They will lead a team to manage. They will lead a team to manage Security Operations (SecOps), encompassing threat detection and response, incident management, vulnerability management, security monitoring, and continuous improvement of defensive capabilities.

WHAT YOU’LL BE DOING:

Infrastructure Security

• Manage end-to-end infrastructure security activities, such as vulnerability management, servers’ security monitoring & hardening, infrastructure as a code, etc.

• Design and/or review infrastructure security architecture proposal for various security-driven initiatives for on-premises and cloud environment.

Cloud Security

• Manage compliancy level of AIA SG cloud security assets based on ongoing regular scanning according to the defined threshold.

• Evaluate the security aspect of new cloud-based solutions proposed by application development team, infrastructure team, or business users.

• Manage various cloud security BAU activities, such as assets provisioning, deprovisioning, hardening, etc.

Identity and Access Management

• Supervise the AIA-SG IAM Manager and their team performing IAM Governance functions for the Business Unit. 

Cyber Security & Security Incident Handling

• Work with Security Operation Centre (SOC) Team to ensure secure protection of AIA SG environment.

• Deploy new cyber security initiatives and roll out the platform together with SOC Team.

• Point of contact for security incident handling and investigation, starting from incident is identified, handled, and resolved.

Security Advisory

• Provide feasible security recommendations or guidance based on queries / changes initiated by application development team, infrastructure team, or business users.

• Facilitate challenging security conversations and provide acceptable solutions where IT standards are contradicting with business demands to achieve acceptable business solutions without sacrificing security and compliance aspects.

People Development

• Supervise 8 team members.

• Drive a continues Learning and Development program for the team members through inhouse and external training programs.

• Lead promotion of activities to increase information security within your teams to embed and continuously improve adherence to good practice.

WHAT WE ARE LOOKING FOR:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).

• Minimum 15 years of experiences of information security domain, especially in Application Security, Infrastructure Security and Cloud Security.

• Preferable to have security infrastructure operation background with hands-on experiences of designing and/or reviewing application security or infrastructure security. 

• Hands-on information security experience in the Multiple Cloud Environment (SaaS, PaaS and IaaS) and Cyber Incident management.

• Certifications related to security architecture or Cloud Security is preferable, such as CCSP, Azure DevOps certification, Azure Solutions Architect certification, etc.

• Preferably a holder of one or more of the following information security and audit qualifications: CISSP, CISA, CRISC, CCSP.

• Good knowledge of latest security technologies and cyber landscape in a highly regulated industry.

• Good interpersonal and communication skill.

• Strong leadership with a high integrity, proactive mindset, and strong ownership.

• Working experiences in insurance / banking / IT industry is preferred.

• Infrastructure Security: Windows, Linux, AS400.

• Security Advisory and Assessment, and incident management.

This position is being recruited to support regional information security operations and strengthen cybersecurity capabilities across overseas regions.

Responsibilities:

·      Support the implementation and operation of information security controls and solutions across overseas regions, covering areas such as infrastructure, network, endpoint, application, data, and identity security.

·      Participate in security projects and initiatives, including planning, coordination, deployment, and ongoing improvement activities.

·      Assist in the implementation of governance, risk, compliance, privacy, and data protection initiatives.

·      Support the development and maintenance of security standards, procedures, and technical baselines.

·      Collaborate with regional and global teams to improve overall cybersecurity capabilities.

·      Provide ad-hoc support for regional and global cybersecurity initiatives as required.

Requirements:

·      Bachelor’s degree in information security, Cyber Security, Computer Science, Information Technology, or a related field.

·      At least 2 years of working experience in information security, cybersecurity, network security, IT infrastructure, system administration, or related areas.

·      Familiar with common information security technologies and concepts, such as network security, endpoint security, IAM, data protection, vulnerability management, SOC/SIEM, or cloud security.

·      Familiar with information security and privacy frameworks, such as ISO 27001/27701, ITIL, or related standards and best practices.

·      Basic knowledge of networking and operating systems (Windows/Linux).

·      Good analytical, problem-solving, and communication skills.

·      Able to work effectively with teams across different regions and cultures.

·      Security certifications (e.g. CISSP, CISA, CCSP, Security+, CCNA/CCNP) are an advantage.

·      Candidates with a Diploma and strong relevant working experience will also be considered.

·      Excellent communication and interpersonal skills in both English and Chinese (to liaise with Mandarin speaking stakeholders).

Job Overview

We are looking for a proactive Information Security professional to support enterprise IT security operations and infrastructureinitiatives across regional environments. This role will focus on strengthening cybersecurity operations, monitoring security threats, supporting incident response activities, and maintaining secure network infrastructure within a multinational environment.

The ideal candidate should possess hands-on experience in networking and cybersecurity administration, with the ability to work independently while supporting regional security initiatives.

Key Responsibilities

Cybersecurity Operations & Monitoring

• Monitor security alerts and events through SIEM and security monitoring platforms
• Investigate and respond to cybersecurity incidents and security breaches
• Support vulnerability assessment and remediation activities
• Assist in implementing endpoint and network security solutions across regional offices

Infrastructure & Network Support

• Support daily administration of enterprise IT and network infrastructure
• Maintain network and security configurations to ensure system reliability and compliance
• Troubleshoot infrastructure and connectivity issues across corporate environments
• Participate in infrastructure enhancement and security improvement projects

Project & Regional Support

• Support regional IT security initiatives and deployment activities
• Work closely with internal stakeholders across different countries and teams
• Assist with documentation, operational support, and other assigned tasks
• Occasional regional travel may be required for project implementation or support activities

Requirements

• Diploma or Degree in Information Technology, Cyber Security, Networking, or related discipline
• Minimum 3 to 5 years of experience in network administration or cybersecurity operations
• Familiarity with SIEM monitoring, incident response, and vulnerability management
• Good troubleshooting and problem-solving skills in network and security environments
• Able to work effectively both independently and within a team environment
• Comfortable communicating with users and stakeholders across different backgrounds and regions
• Strong sense of responsibility with the ability to work in a fast-paced environment
• Good verbal and written communication skills in English

Please send your detailed resume in MS Word format to resume@goldtecHRs.com with

• Education Level
• Working experiences
• Each employment background
• Reason for leaving each employment
• Last drawn salary
• Expected salary
• Date of availability

Client introduction

Our client is an established financial institution, and regulated by the Monetary Authority of Singapore.

As part of strengthening its technology governance and security function, the firm is looking to hire an IT Security Analyst (Governance, Risk & Compliance) to join its infrastructure and security team. This role is well suited for someone with a foundation in IT risk, governance, assurance or security compliance, who is looking to build broader exposure across cyber governance, audit, vulnerability management, vendor due diligence and security operations within a regulated financial services environment.

Job responsibilities

• Support the review and overhaul of the firm's IT and security governance framework, drafting policies, standards and procedures for senior review and refinement.
• Help embed clear, well-understood policies and procedures across the organisation, aligned with regulatory expectations.
• Support compliance against MAS guidelines, including Technology Risk Management, Cyber Hygiene and Outsourcing, and assist with related risk assessments.
• Coordinate internal and external audit activity, including collating responses, gathering supporting artefacts and following up on findings with internal stakeholders through to closure.
• Track vulnerability assessment findings and remediation progress (assessments are run through an external vendor), working with the infrastructure and application teams to close gaps in good time.
• Conduct third-party and vendor due diligence in line with MAS outsourcing requirements, and respond to client and counterparty due diligence queries on the firm's security controls and governance practices.
• Support user access reviews, joiner-mover-leaver processes and identity access governance.
• Assist with business continuity, disaster recovery and related assurance exercises.
• Provide support on security operations and incident response coordination where required, with guidance from the team lead.

Job requirements

• At least 4 years of experience in IT risk, IT governance, technology assurance, IT audit or IT compliance, gained within a regulated financial institution such as a bank, securities or brokerage firm, asset manager or insurer.
• Working familiarity with the MAS Technology Risk Management Guidelines, Cyber Hygiene Notice and Outsourcing Guidelines.
• Exposure to audit coordination, evidence gathering, policy documentation, risk assessment or remediation tracking.
• A genuine interest in cyber security and a willingness to learn the hands-on operational side of the role. Deep SOC or security engineering experience is not required.
• Exposure to vulnerability management, access reviews, SIEM or IAM tooling is an advantage rather than a requirement.
• Strong written and verbal communication, with the ability to engage auditors, vendors, infrastructure and application teams, and business stakeholders clearly.
• A detail-oriented, proactive working style and a readiness to learn across both governance and operational security.
• Relevant certifications such as CISA, or progress toward them, are advantageous but not mandatory.

Why you should join them

• Breadth of exposure that is rare at this level, spanning governance, risk, compliance, audit and security operations in a single role, giving the right person a strong foundation early in their career.
• Direct mentorship from an experienced infrastructure and security team lead, who will actively coach the successful candidate on the technical and operational aspects of the role.
• A genuine opportunity to help rebuild and mature the firm's IT governance framework, with visible impact in a lean team.
• Regular interaction with auditors, vendors and counterparties, building a clear path toward a career in IT risk and security governance.

JL
Reg. No. R1766249
BeathChapman Pte Ltd
Licence no. 16S8112

Global Security Operations Centre (GSOC) Analyst, Asia-Pacific

The APAC Global Security Operations Centre (GSOC) Analyst will be based in Kuala Lumpur,Malaysia providing regional threat detection, intelligence collection and analysis, risk incident triage and escalation as well as crisis management support (administrative & operational) for the firm across APAC. The Analyst supports and works integrally with the 24/7/365 APAC GSOC team based in Singapore. This is an opportunity to grow within a mature corporate security operation and work with seasoned regional security experts, gaining competency to key aspects of mature corporate security operations. The successful candidate should be a self-driven and resilient individual, with the ability to perform under pressure and deliver across competing priorities.

• Threat Detection & Reporting: Proactively gather and analyze information from various internal/external sources and draft reports to provide management and global contacts with useful, timely and actionable intelligence.

• Incident Management: Support regional senior management and line-of-business (LOB) stakeholders by triaging risks and underpinning business continuity during incident or crisis.

• Crisis Management Operational Support: Perform incident case and records management, progress logging, and stakeholder messaging and enterprise mass notification.

• Travel Security: Manage and administer travel security operations including tracking, assisting and advising international travelers on any incident or crisis.

• Regional Aptitude: Coordinate with other regional GS leaders or GSOCs fortrans-national incidents or crises or other aspects of security operations.

• Cross-Team Collaboration: Work closely with other incident management partners such as Real Estate, Global Technology Infrastructure, Resiliency, LOB Business Resiliency and Global Security managers to ensure effective coordination and operations.

• Manage any other duties or projects as directed by APAC Global Security senior managers, including Technical and Physical Security tasks.

Requirements

• Minimum of Bachelor’s degree or post-graduate level qualification, particularly in relevant fields e.g. security studies, international relations, geomatics,criminology or social sciences. 

• Strong knowledge and interest in security and geo-political developments across APAC with strong initiative to independently assess emerging themes, events and incidents with potential to impact business, client and third-party locations and travelers across region.

• Ability to work effectively under pressure in a fast-paced environment while consistently producing error-free work and meeting deadlines. 

• Strong analytical, interpersonal skills and comprehensive computer skills (good understanding of all Microsoft applications and willingness to work in a high-technology role regularly utilizing new tools and applications).

Job Title: Microsoft Purview DLP Security Analyst / M365 DLP Support Engineer

Employment Period: August/September 2026 to March 2027, with possible yearly renewal
Location: 1 Fusionopolis Way
Working Hours: Monday to Friday, 8:30am to 6:00pm
Engagement Type: Contract / Renewable Term

Role Overview
We are seeking a Microsoft Purview DLP Security Analyst / M365 DLP Support Engineer to support Data Loss Prevention alert monitoring, incident handling, investigation, reporting, user support, and policy improvement activities.

The successful candidate will work closely with security operations, service desk, data owners, business users, compliance teams, and Microsoft Purview SMEs to ensure DLP alerts are properly monitored, investigated, classified, documented, escalated, and improved through continuous policy tuning.

Key Responsibilities

DLP Alert Monitoring & Incident Handling
Monitor DLP alerts from Microsoft Purview DLP Dashboard, Microsoft Defender XDR, email notifications, service desk tickets, and related alerting channels.

Log, track, triage, and classify DLP alerts, including initial investigation of true positives and false positives.

Perform first-level analysis and escalate high-risk or complex incidents to L2 security operations, L3 Purview SMEs, architects, compliance, legal, or other relevant stakeholders where required.

Investigation & Analysis
Perform detailed analysis of DLP incidents to identify root causes, including user behaviour, policy gaps, data misclassification, or process issues.

Validate and document false positives clearly to support policy improvement and operational reporting.

Support forensic analysis and evidence gathering for high-risk DLP incidents where required.

Escalation & Stakeholder Coordination
Coordinate with SOC teams, service desk, business units, data owners, compliance, legal, and IT stakeholders to ensure DLP incidents are handled appropriately and within expected timelines.

Communicate DLP-related issues clearly to both technical and non-technical users.

Policy Tuning & Change Management
Work with L3 SMEs and architects to recommend improvements to DLP policies based on repeated alerts, user feedback, threat trends, false positive patterns, and post-incident findings.

Support DLP change management activities arising from new regulatory requirements, new workloads such as Teams, Copilot or SaaS applications, and post-incident improvements.

Provide practical recommendations to improve DLP policy effectiveness and reduce unnecessary business disruption.

User Support & Awareness
Respond to user-reported DLP issues, including blocked activities, policy alerts, and suspected false positives.

Provide guidance to users on compliant data handling and proper use of sensitive information.

Support communication and awareness activities related to DLP policy enforcement.

Monitor and ensure the AI agent is running and responding correctly where applicable.

Reporting & Continuous Improvement
Prepare periodic DLP reports covering alert volumes, top users triggering policies, false positive rates, policy effectiveness trends, recurring issues, and recommended improvements.

Maintain proper documentation of investigations, findings, escalations, and closure actions.

Technical Skills Required
Strong hands-on knowledge of Microsoft Purview DLP is mandatory.

Experience in Microsoft Purview policy configuration, troubleshooting, alert review, and operational support.

Good understanding of DLP across Endpoint, Exchange, SharePoint, Teams, and Microsoft 365 workloads.

Knowledge of Microsoft Defender XDR, Microsoft 365 Compliance Portal, Microsoft Entra, sensitivity labels, data classification, and information protection.

Microsoft Intune experience will be an added advantage.

Operational & SOC Skills
Experience in incident triage, investigation, security alert analysis, ticket handling, true/false positive determination, and basic log analysis.

Experience with ticketing tools such as ServiceNow or similar platforms.

Ability to work with SOC, service desk, compliance, legal, and business stakeholders.

Data Security & Compliance Knowledge
Good understanding of data protection, data classification, data exfiltration risks, insider risk awareness, and DLP control concepts.

Knowledge of Singapore PDPA and data protection practices will be advantageous.

Soft Skills
Strong communication skills with business users and technical stakeholders.

Ability to explain DLP blocks, alerts, and policy enforcement in a professional and user-friendly manner.

Strong analytical thinking, root-cause analysis, documentation, and coordination skills.

Able to work independently while escalating appropriately when needed.

Experience Requirement
3 to 5 years of experience in Microsoft 365, Microsoft Purview, DLP, security operations, end-user support, or L2 support.

Hands-on experience supporting Microsoft Purview DLP in an enterprise environment is strongly preferred.

Preferred Certifications
Microsoft SC-400: Information Protection Administrator
Microsoft SC-200: Security Operations Analyst
Microsoft MS-102: Microsoft 365 Administrator
Microsoft SC-300: Identity and Access Administrator

Position Overview:

Squarepoint is seeking a subject matter expert to join our Information Security team as a Senior Information Security Engineer. This senior position plays a pivotal role in strengthening our security posture by providing expert guidance, and driving improvements across key areas such as network, cloud, data, and system security. The successful candidate will act as an escalation point to the Security Operations, ensuring complex security problems are effectively analysed and resolved. This role includes overseeing security in critical IT projects, leading threat modelling for complex systems, auditing key systems for security gaps, and building automated capabilities to continuously validate controls’ effectiveness and system resilience. This position offers an opportunity to lead security initiatives and shape the security roadmap. A high degree of self-motivation and proactivity is mandatory for success in this role.

• Strengthen security across core areas, including network and system security, email security, cloud security, and data protection.
• Serve as a security advisor for IT projects, ensuring security requirements are met and risks are mitigated.
• Manage and optimize security tools, ensuring they are effectively deployed and maintained.
• Lead the design and development of security solutions and architectures to protect critical assets.
• Provide second-line support to Security Operations.
• Conduct threat modelling and risk assessments to identify vulnerabilities and drive proactive mitigation strategies.
• Oversee relationships with the Managed Detection and Response (MDR) provider, ensuring service effectiveness and continuous improvement.
• Execute security roadmap’s initiatives, aligning with business objectives and emerging threats.
• Collaborate with cross-functional teams to enhance security awareness and integrate security into business processes.

Required Qualifications:

• Minimum 5 years of hands-on experience in an information security role, such as security engineering, security architecture, security operations, or application security.
• Thorough understanding of security best-practices, principles, and system hardening techniques.
• Hands-on experience with threat modelling, security testing, including penetration testing, and automated security validation.
• Solid knowledge of cloud, network, and systems security concepts.
• Experience with scripting with one or more languages – Python and PowerShell experience is a plus.
• Familiarity with security tools such as EDR software, DLP solutions, vulnerability scanners, firewalls and email gateways.
• Strong analytical skills and problem-solving skills, with the ability to investigate complex problems and design pragmatic solutions.
• Effective communication skills to work with technical and non-technical teams.
• Degree in Engineering, Computer Science, or STEM related field.

Nice to have:

• Strong knowledge of risk assessment methodologies.
• Familiarity with security best practices, configurations, and threat management in Azure, AWS, and GCP.
• Ability to analyse software for security risks, including reviewing source code, performing static and dynamic analysis, and identifying vulnerabilities in application design and implementation.
• Familiarity with regulatory frameworks and security standards (e.g., SEC Cybersecurity rules, MAS TRM Guidelines, NFA Cybersecurity Guidance, GDPR etc.)
• Relevant security certifications.

Skills Required:

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
• Minimum of 5 years’ professional experience, including at least 3 years in IT security or related roles.
• Working exp in Banking environment is desirable
• Experience in managing Darktrace, ForeScout, Keysight, Pentera appliances is MUST
• Hands-on experience with network security, infrastructure security, etc.
• Strong understanding of network protocols and security technologies
• Comprehensive understanding of security principles, and industry best practices
• Excellent communication skills, including technical writing and documentation proficiency.
• Proven ability to manage multiple tasks and meet deadlines
• Certifications like CISSP, OSCP, GSEC, CySA+, CNNP Security or equivalent are preferred

Roles and Responsibility:

• Health maintenance
• Perform updates and patching
• System features enablement and recommend enhancements
• Troubleshoot issues/problems till proper closure
• Liaise with stakeholders
• Cross-functional collaboration
• Support solution implementation
• Participate in DR Drill and power shut-down activities
• Perform data reconciliation and reporting
• Render support for audit needs
• Plan and schedule system upgrade
• Act on tasks assigned by System PICs

JJ Consulting Services is a recruitment firm and preferred partner for multinational companies expanding in Asia. Our consultants bring deep industry and functional expertise, delivering top professional and staffing solutions to clients and candidates. Our Client is an established company in Singapore, who is seeking to recruit a Chief Information Security Officer.

Job Summary

The Chief Information Security Officer (CISO) leads the development and implementation of comprehensive information security strategies and policies, ensuring compliance with regulatory requirements and aligning cybersecurity initiatives with organizational goals.

Responsibilities

• Lead the development and execution of cybersecurity strategies and action plans to secure executive support and drive organizational security posture
• Establish and enforce information security goals, policies, standards, and procedures aligned with whole-of-government cybersecurity directives
• Cultivate a culture of cybersecurity risk assessment and risk acceptance among stakeholders, end users, and ICT professionals
• Ensure organizational compliance with whole-of-government cybersecurity policies and standards through continuous monitoring and enforcement
• Review and endorse information security initiatives, developing risk management and mitigation plans to address emerging threats
• Advise management on selecting and deploying appropriate cybersecurity solutions and technologies to protect organizational assets
• Align IT operations and needs with strategic cybersecurity directions mandated by whole-of-government frameworks
• Implement change management processes to adapt cybersecurity measures in response to evolving threat landscapes

Required competencies and certifications

• Degree in Computer Science, Information Systems, Engineering, or equivalent
• Minimum 10 years of management experience in information security, with working knowledge of ICT operations, security policies, and procedures
• Strong interpersonal and stakeholder management skills to collaborate with cross-functional teams in formulating and monitoring security policies
• Ability to work effectively with multidisciplinary teams to institute and oversee security policies and procedures

Preferred competencies and qualifications

• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)

Other Information

• EA Licence No.: 12C6207
• JJ Consulting Services

Applicants are invited to send a MS Word resume to jobs@jjconsulting.com.sg stating position applied for, present/expected salaries, and earliest available date. We thank all applicants in advance and regret that only shortlisted candidates will be notified.

---

Key Responsibilities:

1. Investment Research & Analysis:

• Conduct detailed industry and market research to identify emerging investment opportunities.
• Analyze financial statements, build financial models, and assess the financial health of potential investment targets.
• Assist in due diligence efforts, including financial, operational, and strategic evaluations of prospective investments.
• Prepare investment presentations, and reports for internal and external stakeholders.
• Monitor portfolio investments, track key performance metrics, and assess risk management strategies.

2. Strategic Management:

• Coordinate cross-functional teams and support ongoing projects to support growth and operational objectives within portfolio companies.
• Build and maintain strong relationships with key stakeholders, including portfolio company management teams, and other third parties.
• Liaise with external partners, advisors, and service providers to support investment activities and portfolio management.

Who We’re Looking For:

• Passionate about investing in a concentrated manner via deep conviction.
• A Bachelor’s degree in Finance, Business Administration, Economics, or related field (Master’s/MBA is a plus).
• 1-2 prior experiences preferably in investment management or operational roles.
• Strong financial modeling skills and proficiency with Microsoft Excel and financial analysis software.
• Excellent written and verbal communication skills.
• Strong understanding of financial markets, investment principles, and best practices in business management.
• Independent, highly analytical, detail-oriented, and proactive problem solver.
• Demonstrated ability to work collaboratively within a team and independently.

Preferred Skills:

• Knowledge of private equity/venture capital, mergers and acquisitions (M&A), or asset management.

Duration:

• Full-time, on-site

How to apply:

• Please submit your resume, unofficial transcript and any relevant supporting documents to hr.ad@hobeemedia.com

*Seeking for a talent who has minimum 6 years of experience handling Banking/Financial services’ IT Risk/Cyber security/Information security/Governance risk including 3 years of hands-on IT technical security/security operations*

THE COMPANY
With their reputable brand and commitment to their clients, this company is increasing their operations in the region. They seek an IT Risk/Cyber Security/Information Security Manager to be part of their team.

JOB RESPONSIBILITIES

• Perform Level 2 IT risk/Cyber security/Information Security or governance risk
• Handle IT regulatory compliance (MAS TRM and information security)/security risk framework
• Handle Incident Oversight and root cause analysis & Control Validation
• Prepare Risk Register, Reporting & Adversarial Attack Simulation Exercises to assess the effectiveness of security controls and detection capabilities
• Provide IT security advisory
• Work closely with other business stakeholders etc.
• Any other adhoc duties

JOB REQUIREMENTS

• Degree in IT/Information Technology/Information Security/Computer Science or any other relevant IT education
• Has a recognised information security certification such as CRISC, CISSP, or equivalent
• Minimum 6 years of experience handling Banking/Financial services’ IT Risk/Cyber security/Information security/governance risk including 3 years of hands-on IT technical security/security operations
• Solutions-oriented, friendly, helpful, resourceful and able to multi-task

If you would like to explore this opportunity, please email your resume in Microsoft Word format to marie@resolutehunter.com

We thank you for your interest and will contact shortlisted candidates for more detailed discussion.

For more job opportunities, please visit our website https://resolutehunter.com

EA Licence 18C9105 
EA Reg R1105305

Responsibilities:

·      Support daily network security operations, including monitoring and basic security controls

·      Assist in vulnerability management for network devices, servers, and endpoints (scan, track, follow-up)

·      Support security monitoring and alert handling (e.g., firewall, endpoint, network logs)

·      Perform basic log analysis to identify abnormal or suspicious activities

·      Assist in incident investigation and response

·      Work with IT and regional teams to follow up and close security issues

·      Support implementation and improvement of basic security controls (network, end point, server)

·      Contribute to administrative and routine security-related tasks as needed

·      Provide ad-hoc support to group-wide security projects and initiatives

Requirements:

·      Bachelor’s degree in Information Security, Cyber Security, Computer Science, or related field

·      1–3years of experience in information security, IT security, or system/network administration

·      Basic understanding of network fundamentals (TCP/IP, firewall, VPN, etc.)

·      Basic knowledge of operating systems (Windows/Linux) and endpoint security

·      Experience with security tools or platforms (e.g., SIEM, EDR, firewall solutions)

·      Familiar with vulnerability management or basic security operations concepts

·      Able to work with teams across regions

·      Experience working in an international or cross-regional environment is a plus

Product area

The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

Job description

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You are a recognized expert in at least two security domains and use your leadership skills to manage a team that sets the direction and goals for solving Google-wide problems. You identify fundamental security problems at Google and drives major security improvements in Google infrastructure.

Additional job description

As the foundational Security Engineering Manager for Google Vulnerability Rewards Program (VRP) in Singapore, you will lead a team of security and software engineers. You will scale our vulnerability handling capacity by architecting AI-driven agents for triage, reproduction, and automated bug fixing. Beyond operations, you will drive unified risk reporting and lead large-scale remediation projects to eliminate entire vulnerability classes across Google.You are a proven leader with a technical foundation and broad application security expertise—spanning web, mobile, API, and threat modeling.

Qualifications

Job responsibilities

• Maintain a high level of operational independence while collaborating closely with global leads in the US and Zurich to align on technical direction.
• Oversee the Singapore-based triage and remediation rotation, ensuring effective vulnerability reproduction, severity assessment, and bug filing for incoming security reports.
• Steer the strategic development of agents and infrastructure to automate vulnerability handling, triage, and conduct variant analysis to reduce manual workloads.
• Build and maintain a unified vulnerability analysis pipeline and dashboarding system to provide executive-level insights into emerging threats and program return on investment (ROI).
• Drive large-scale remediation efforts that eliminate entire classes of vulnerabilities across Google’s products and infrastructure.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 8 years of experience in a technical leadership role; overseeing projects, with 2 years of experience in a people management, supervision/team leadership role.
• Experience with the bug bounty lifecycle, including triage, severity assessment, and researcher community management.

Preferred qualifications

• Master’s degree or PhD in Engineering, Computer Science, or a related technical field.
• Experience building or deploying automated tools (e.g., LLM-based agents) for security workflows such as triage automation or bug fixing.
• Experience driving large-scale security improvements and collaborating with product teams to remediate widespread technical issues.
• Proven track record of managing engineering teams and a background in software security, particularly in vulnerability reproduction and variant analysis.

Responsibilities:

·      Monitor security alerts and perform initial analysis

·      Investigate security events using SIEM and related tools

·      Perform log analysis to identify suspicious activities

·      Support incident investigation and response

·      Help improve detection rules and monitoring coverage

·      Work with teams in different regions on security operations tasks

·      Contribute to administrative and routine security-related tasks as needed

·      Provide ad-hoc support to group-wide security projects and initiatives

Requirements:

·      Bachelor’s degree in information security, Computer Science, or related field

·      1–3years of experience in security operations, SOC, or related work

·      Familiar with basic SOC processes (alert handling, incident response)

·      Experience with SIEM platforms (e.g., Microsoft Sentinel, Splunk)

·      Basic log analysis capability (Windows, Linux, network logs)

·      Able to work with teams across regions

·      Experience working with overseas or cross-regional teams is a plus

- At least 5 years experience with configuration and security analysis module

- Define security policy and validate configuration items of managed SAP landscape

- Familiar with alerting capablitiies for proactive security manage-ment

- Knowledge of integration with Guided Procedure to automate secu-rity check and assess effectiveness of security measures - Knowledge of Simple Diagnotiss Agent (SDA) and CCDB availa-ble in Focused Run

- Knowledge of XML programming languages used in Focused Run policies

We are seeking a strategic yet hands-on Information Security Officer to join our growing cyber security function. This role bridges security governance with practical technical implementation ensuring that security requirements are translated into effective, real-world controls.

You will strengthen the organization’s security posture by designing, implementing and validating security controls aligned with regulatory, business and technology requirements. You will work closely with internal stakeholders across IT and business units and, where applicable, support client engagements as a trusted security advisor.

This role focusses primarily on technical security implementation, control effectiveness, and risk reduction, rather than people management or purely policy-driven work.

Key Responsibilities

1.      Information Security Framework & Procedures

• Collaborate with Information Security (InfoSec) Department to interpret security policies and translate them into practical, organization-wide procedures.

• Design, document and maintain standardized security processes aligned with internal policies and external standards (e.g. ISO 27001, SS 714:2025).

• Ensure Security procedures are pragmatic, scalable, and adopted across business units.

• Continuously review and improve procedures to reflect changes in technology, risk landscape, and regulatory requirements.
  

2.      Security Review & Technical Assessment

• Assess gaps between current security practices and defined security benchmarks and drive hands-on improvements.

• Perform relevant security assessments such as configuration reviews, vulnerability assessments and control effectiveness reviews.

• Review and refine existing security and operational procedures to ensure effectiveness and scalability.

• Lead the implementation and rollout of new or updated security controls and procedures, ensuring smooth integration into existing technical and operational workflows.

• Validate that implemented controls meet policy and regulatory requirements, maintaining appropriate documentation for audit, assurance and continuous improvement purposes.
  

3.      Stakeholder Enablement & Advisory

• Act as the subject matter expert for information security across the organization and on client projects where applicable.

• Communicate security risks, trade-offs and recommendations clearly to both technical and non-technical stakeholders.

• Deliver targeted security awareness and training sessions to improve organizational cybersecurity maturity.

• Mentor and support process owners and system owners to ensure long-term ownership and sustainable execution of security controls.
  

4.      IT Collaboration & MIS Security Oversight

• Collaborate closely with IT, infrastructure, application and MIS teams.

• Periodically assess MIS-related systems, process, and data flows from an information security and risk perspective.

• Advise IT and MIS stakeholders on security control design, configuration hardening, and risk mitigation measures.

• Validate that MIS solutions and system implementations align with organizational security policies, approved architectures, and regulatory requirements.

• From time to time, support or assist with MIS-related tasks and initiatives where security input or technical understanding is required, particularly during system changes, reviews, or implementation.
  

Required Qualifications & Skills

Relevant Experience

• Demonstrated experience in information security, cybersecurity risk management, IT risk or IT audit, with hands-on involvement in implementation or validating security controls.

• Experience working in complex IT environments involving multiple systems, platforms, or regulatory requirements.

• Working experience with implementation and maintenance of solutions such as Microsoft Intune/Entra, Apple Business Manager, Wazuh is highly advantages.
  

Expertise

• Strong understanding of cybersecurity principles, security architectures, risk management concepts, and control frameworks.

• Practical experience applying security standards and frameworks such as ISO 27001 or equivalent.
  

Communication

• Ability to explain security concepts, risks, and requirements clearly to business leaders, technical teams, and cross-functional teams.

• Comfortable influencing without direct authority and working collaboratively across teams.
  

Certifications

• Security certifications such as CISA, CISM, CISSP or equivalent practical experience designing, implementing, and assessing security controls in real-world environments.
  

Analytical Mindset

• Strong ability to analyse complex environments, identify hidden security or compliance risks, and recommended pragmatic, risk-based solutions.

• Detail-oriented, with the ability to balance security rigor with business practicality.
  

What Success Looks Like in This Role

• Security policies are translated into controls and procedures that are consistently implement and understood across the organization.

• Security gaps are proactively identified, prioritized, and remediated.

• MIS and IT system demonstrate measurable improvement in security posture and audit readiness.

• Stakeholders view the Information Security Officer as a trusted advisor who enables secure and scalable business operations.

About Akkodis

Akkodis is a global leader in engineering and R&D, leveraging connected data and deep technical expertise to accelerate innovation and digital transformation. With over 50,000 engineers and digital specialists across 30 countries in North America, EMEA, and APAC, Akkodis supports clients across the full innovation lifecycle—from concept and engineering to deployment and operations.

Its capabilities span mobility, software and technology services, robotics, testing and simulation, data security, AI, and analytics. Akkodis is part of the Adecco Group, bringing together the strengths of AKKA and Modis.

Job Summary

We are seeking a Cybersecurity SOC Engineer with strong hands-on experience in infrastructure and security operations within complex, multi-vendor enterprise environments. This role requires a proactive individual who can operate effectively in evolving and partially structured environments while maintaining high standards in security operations, troubleshooting, and system validation.

Experience Requirements

• 5–8 years of relevant experience in infrastructure, cybersecurity operations, or system integration
• Proven experience working in complex, multi-vendor enterprise environments
• Ability to work effectively in dynamic environments with evolving processes

Key Technical Skills

Core Infrastructure & Security

• Hands-on experience with:Firewalls (e.g., Check Point or equivalent)SIEM platforms (e.g., LogRhythm or similar)Endpoint security solutions (e.g., Symantec or equivalent)Network Access Control tools (e.g., Aruba ClearPass or similar)
• Strong understanding of:Networking fundamentals (TCP/IP, routing, switching, VPNs)Security operations and incident response workflows

Systems & Operations

• Experience in Linux/Unix environments
• Strong troubleshooting capabilities across system and network/security issues
• Familiarity with:Ticketing tools (e.g., JIRA, ServiceNow)Log monitoring and analysis tools

Key Functional Competencies

• Strong troubleshooting and root cause analysis (RCA) mindset
• Ability to quickly learn and adapt across multiple technologies
• Comfortable working in documentation-heavy environments (e.g., test reports, RCA, compliance documentation)
• Effective stakeholder management across multiple teams and approval layers
• High sense of ownership and accountability, especially in ambiguous situations

Ideal Candidate Profile

• Resilient and adaptable in fast-paced, high-demand environments
• Able to balance operational responsibilities, testing activities, and documentation requirements
• Works independently with minimal supervision while collaborating effectively with cross-functional teams
• Demonstrates a pragmatic, solution-oriented mindset with the ability to prioritise and execute under imperfect conditions.

Don't miss out on this chance to be a part of a dynamic and growing team. Take the Next Step in your career journey with us!

• To apply, please submit your updated resume along with your notice period. [ We are looking for someone to start ASAP]
• Click on the 'Apply here' button to drop your resume directly or email it to susmita.SAHU@akkodis.com
• Our team will review all applications and contact shortlisted candidates for further steps in the selection process.

​Our Client is an established and leading company in Singapore, who is seeking to recruit a Cyber Security Analyst.

KEY ROLES AND RESPONSIBILITIES

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 6 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

JJ Consulting Services

EA Licence No.: 12C6207

Applicants are invited to send in a MS Word resume to jobs@jjconsulting.com.sg stating position applying for/present/expected salaries and earliest available date.

We thank all applicants in advance and regret that only short listed candidates will be notified.

Product area

The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

Job description

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You use your industry experience to own and drive the resolution of complex security incidents, policy questions and technical security issues.

Additional job description

The new Singapore-based team will be dedicated to scaling our operations and risk reduction efforts through advanced automation and remediation. Our mission is to safeguard billions of users by efficiently triaging external security reports and proactively eliminating vulnerabilities across Google's products and infrastructure. We aim to evolve into a self-sustaining, AI-driven operation that provides deep insights into vulnerability trends while fostering a community of security researchers.

Qualifications

Job responsibilities

• Review designs and look for vulnerabilities, both with one-time reviews and long-term engagements. Look for vulnerabilities with techniques including reverse engineering, fuzzing, and static analysis.
• Drive large-scale remediation efforts that eliminate entire vulnerabilities across Google’s products and infrastructure.
• Guide the strategic development of agents and infrastructure to automate vulnerability handling, triage, and conduct variant analysis to reduce manual workloads.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
  

Preferred qualifications

• 1 year of experience in leading technical risk analysis in an enterprise environment.
• Experience building or deploying automated tools (e.g., large language model based agents) for security workflows such as triage automation or bug fixing.
• Experience with cross-functional or cross-product teams.
• Experience consulting on security/security protocols.
• Excellent communication skills.

This posting is for a contract assignment with Tundra Technical Solutions to provide services to our Client, a Fortune 500 Tech Firm.

Job Description:

The main function of the Legal Operations Analyst/ Law Enforcement Associate is to perform a variety of legal and operational duties in support of the Law Enforcement Outreach team.

Job Responsibilities:
Support the APAC Law Enforcement Outreach Team with:
- Managing escalations from law enforcement in relation to content reports
- Managing escalations from law enforcement in relation to issues with data disclosures
- Managing escalations from law enforcement in relation to hacked accounts
- Managing escalations from law enforcement in relation to verification of police accounts
- Manage inquiries from law enforcement about law enforcement issues
- Program manage internal follow-up actions with XFN arising from Enhanced Engagements with law enforcement partners
- Managing and implementing internet safety and security programs with law enforcement partners
- Engage with internal XFN teams on resolving issues of concern flagged by law enforcement partners
- Engage with internal XFN teams on improving operational workflow processes

Skills and Experience
Essential:
- Prior background working with law enforcement as well as trust and safety within the Tech Industry
- Superior data analytical skills and distilling recommendations
- Experience with metric driven processes and technology improvements
- Excellent verbal and written communication skills, problem solving skills, attention to detail and interpersonal skills.
- Strong ability to work independently, be organized, and manage one's time.
- Strong ability to create relationships with XFN teams
- Work to improve cross-functional relationships with internal teams
- Ability to multi-task and change direction quickly
- Ensure and maintain confidentiality of all appropriate communications and documentation
- Communicate daily with internal partners and externally with law enforcement contacts, while exhibiting the highest degree of professionalism, courtesy and diplomacy
- Track, prioritize, and assign all incoming written and oral communications, as necessary, to appropriate team member for response
- Prior experience at a tech company
- Experience managing operations

*This role may involve exposure to potentially graphic and/or objectionable content including but not limited to graphic images, videos and writings, offensive or derogatory language, and other potential objectionable material. I.e. child exploitation, graphic violence, animal abuse, self-injury and other content which may be considered offensive or disturbing.

This posting is for a contract assignment with Tundra Technical Solutions to provide services to our client. Please note that this is not a full-time employment opportunity. Candidates selected for this role will be engaged as contractors for the specified duration of the project.

Industry: Information Technology Industry

Location: Central area

Skills: IT Security, IT Risk and IT Compliance

This position will be working for a Financial Institution based at the CBD area, will be responsible and lead the development and execution of enterprise-wide IT security architecture, programme and technology strategy.

Position Responsibilities:

• As the IT Security Lead, will take on a leadership role in risk management, compliance, technology governance, cybersecurity and IT security initiatives and technology advancement / innovation.
• Will lead the department and be responsible for developing and executing IT security policies and practices.
• Will be a strategic partner across Asia and Global counterparts in managing and implementing IT security strategies and enhance security framework.

Position Requirements:

• Bachelor or Masters Degree in Computer Science, Information Security or related field.
• Professional certifications in CISSP, CISM, CISA, CRISC, CCSP are highly preferred.
• 10 to 12 years working experience in the Banking / Financial sector with focus on Information Security and leadership capability.
• Experienced in supervising and leading a department, coaching, guiding and handle operational duties.

We will consider all candidates but will prioritise those who have closer requirements to client needs.

Thank you!

Joseph Syho

Reg Number: R1108657

EA Licence No: 18C9079

We’re partnering with a well-funded, fast-growing tech company to hire a Senior Information Security Specialist to join their team.

• Experienced Information Security professional with a strong record in monitoring, incident response, and risk management.
• Skilled in identifying threats, tracking alerts, and planning effective mitigation strategies.
• Proficient in security operations, governance frameworks, and managing system vulnerabilities.
• Knowledgeable in data privacy, compliance, and regulatory requirements.
• Holds CISSP or CySA+ certification (preferred) with clear and professional English communication.
• Collaborative team player who can also drive security initiatives independently.

Reach out to Ayla at ayla@nodeflair.com for a confidential discussion.
EA License No: 19S9830

Our client is a pioneering, licensed digital bank and Fintech scale-up that serves as the essential bridge between traditional financial rigor and the future of digital assets. Backed by elite institutional powerhouses, they are institutionalizing the next generation of finance for the global digital economy.

With a high-performing team of 150+ professionals and an established security pod of 10 specialists, they have already built a formidable foundation. They are now looking for a visionary leader to move beyond maintenance and architect the next phase of their global security landscape.

You will report directly to the CEO, you will own the enterprise-wide security strategy for a platform that unifies fiat and crypto settlement. This isn’t just about standard defense; it’s about navigating the high-stakes intersection of institutional banking, real-time payments, and stablecoin infrastructure within cloud-native environments. You will be the definitive voice of security to the Board, C-suite, and global regulators.

Key Focus Areas:

• Strategic Leadership: Develop a comprehensive security framework that enables rapid business growth without compromising on risk appetite.
  
• Regulatory Excellence: Navigate a complex web of international financial regulations and global standards such as ISO 27001, NIST, and PCI-DSS.

• Operational Resilience: Oversee high-frequency vulnerability management, penetration testing, and a 24/7 incident response (CSIRT) function for a borderless, always-on banking network.

• Governance & Culture: Serve as the bridge between technical security initiatives and executive leadership, fostering a deep-rooted culture of cybersecurity awareness.

Who You Are:

We are seeking an executive who combines deep technical "hands-on" roots with sophisticated boardroom presence.

• Experience: 10-15+ years of strategic cybersecurity experience within Financial Services, Fintech, or Digital Assets.

• Leadership: A proven track record in a CISO or Senior Management capacity, specifically scaling high-growth environments or digital finance platforms from scratch.

• Education: Bachelor’s or Master’s degree in MIS, Fintech, Computer Science, or a related technical field.

• Certification: CISM is mandatory. Preferred credentials include Blockchain Security, Data Privacy, or ISO 27001 Lead Auditor.

• Expertise: Deep understanding of end-to-end security architecture design and enterprise risk frameworks.

Why Join This Firm?

• Strategic Impact: Define the security standards for a firm processing billions in monthly volume at the forefront of financial innovation.

• Scale with Resources: Inherit a robust 10-person security team, allowing you to elevate from tactical management to high-level strategy immediately.

• Equity Upside: This role includes a stock option package, offering significant financial upside as the company continues to redefine global banking.

• Executive Visibility: Direct access to the CEO and frequent engagement with a Board of Directors comprised of global finance titans.

Interested applicants, you may send your CV to goal@artemishr.xyz
We will be in touch with the shortlisted candidate for an interview within 5 working days.

Artemis HR Pte Ltd
EA License: 23S1792