Total 9 Legal / Public / Security job vacancies

Security Strategy & Baseline Framework Development

• Develop, implement, and maintain the company's overall security baseline framework covering production environments, corporate networks, key management, access controls, data classification, and other critical security domains. 
• Regularly review and update policies to address evolving threats and ensure consistent security standards across all business units.

Vulnerability Management & Penetration Testing

• Lead vulnerability identification, assessment, and prioritization efforts. 
• Coordinate and/or conduct penetration testing activities, monitor remediation progress, ensure closure within agreed SLAs, and provide regular reporting of critical risks to the CEO.

Key Management & Wallet Security (Custody Layer)

• Design and enforce security controls for digital asset custody operations, including hot and cold wallet management, key rotation processes, multi-signature (Multi-Sig) and MPC solutions. 
• Lead security integration and configuration of enterprise custody platforms such as Cobo and similar providers, including transaction limits, whitelisting, approval workflows, and review mechanisms. 
• Ensure all asset-related activities maintain a complete and auditable operational trail.

Operational Security (OpSec)

• Implement security controls across customer fund movements, external communications, and data processing activities. 
• Review and assess the security of CFD trading systems, payment channels, and integration interfaces. 
• Enforce segregation of duties (SoD) to reduce risks arising from fraud, abuse, or operational errors.

Security SOP Framework

• Develop, maintain, and continuously improve security-related SOPs covering areas such as account management, wallet operations, employee onboarding/offboarding, incident response, third-party onboarding, and emergency procedures. 
• Drive implementation across departments and ensure periodic review and compliance.

Executive & Key Personnel Security

• Develop digital security programs for executives, key custodians, and other high-value individuals. This includes personal account security, device security, SIM swap prevention, anti-phishing and social engineering measures, and reduction of sensitive information exposure through OSINT management.

Third-Party & Vendor Security Management

• Conduct security due diligence and onboarding assessments for third-party vendors, including SaaS providers, liquidity partners, financial counterparties, and technology suppliers. 
• Review security and data protection provisions within contracts and SLAs. 
• Maintain vendor risk registers and coordinate penetration testing, security assessments, and external audits.

Security Incident Response (Technical)

• Lead technical investigations, forensic analysis, and root-cause assessments during security incidents.
• Produce independent technical investigation reports and collaborate with the Independent Risk Manager while maintaining separate and objective conclusions.

Production Security Audits & Regulatory Support

• Conduct periodic reviews of production environments, including network architecture, IAM controls, API security, and infrastructure configurations. 
• Ensure security principles are effectively implemented across all projects. 
• Support regulatory audits and compliance initiatives related to KYC/AML requirements and drive security certification programs as business needs evolve.

Security Awareness & Governance

• Establish and maintain company-wide information security policies and operational standards. 
• Organize security awareness programs, phishing simulations, and training initiatives to foster a unified security culture across both digital asset and traditional financial services businesses.

AI Product Security & Governance

• Develop and oversee security policies for AI-related products and systems. 
• Conduct security assessments of AI applications and ensure the security and resilience of the company's AI infrastructure and foundational platforms, minimizing attack surfaces and operational risks.

Requirements

• Minimum 5 years of experience in information security, with at least 2 years in fintech, digital assets, cryptocurrency, payments, or trading platforms.
• Professional security certifications such as CISSP, CISM, CISA, CCSP, or equivalent.
• Experience in building security teams and security programs will be an advantage.
• Hands-on experience with IAM/SSO solutions (Okta preferred), MFA, Mobile Device Management (MDM), asset management, cloud security (e.g., AWS), and core security technologies such as network segmentation, IAM, and SIEM.
• Strong understanding of digital asset custody and wallet security, including MPC, multi-signature wallets, hot/cold wallet architecture, and key management.
• Experience integrating and managing enterprise custody platforms such as Cobo, Fireblocks, or equivalent solutions.
• Familiarity with penetration testing methodologies and the ability to review and evaluate third-party penetration testing reports.
• Understanding of AI technologies and security considerations for AI systems and applications.
• Proven ability to build security frameworks, policies, and SOPs from the ground up rather than solely operating within existing structures.

Information Security Analyst - Financial Services

Job Summary

Responsible for cyber governance, risk management, and security operations within a regulated financial services environment. Develops and implements security policies, ensures regulatory compliance, coordinates security testing, and manages incident response and business continuity programs.

Key Responsibilities

Governance & Compliance:

• Provide cyber governance and risk management oversight
• Develop and maintain security policy framework and standards
• Ensure compliance with applicable regulations and standards (ISO 27001, NIST, regional financial services guidelines)
• Manage and track vulnerability remediation status
• Coordinate penetration testing and escalate material security risks to senior forums
• Conduct third-party due diligence for compliance and operational risk

Risk & Incident Management:

• Identify and assess cyber risks; recommend security solutions and initiatives
• Monitor security alerts and investigate security breaches and incidents
• Manage security incident response according to established protocols
• Maintain incident response plans and playbooks
• Develop and maintain Business Continuity Program; coordinate with department operations to create unified business continuity plan

Regulatory & Stakeholder Relations:

• Act as primary contact for senior management and regulatory body inquiries
• Ensure audit findings are remediated and independently validated within agreed timelines
• Conduct annual disaster recovery exercises with internal and external parties
• Provide security advisory on emerging threats and vulnerabilities

Access & Infrastructure:

• Develop and implement identity and access management policies
• Monitor and audit user access activities
• Assess infrastructure, systems, and applications for compliance and vulnerabilities

Awareness & Training:

• Maintain user cyber awareness programs
• Coordinate security awareness training for staff

Required

• 5 years' information security experience
• Strong analytical and problem-solving skills
• Familiarity with SIEM tools (Splunk) and vulnerability assessment tools (Tenable Nessus)
• Strong written, oral, and presentation skills
• Undergraduate degree in Computer Science, Information Technology, Engineering, or equivalent

Preferred

• CISSP, CISA, or CEH certification
• Graduate degree in related field
• Knowledge of regional financial services regulations and guidelines

About the Role

We are seeking an experienced senior manager to lead our information security team, combining strong hands-on technical expertise as well as people management experience in the information security domain. They will lead a team to manage. They will lead a team to manage Security Operations (SecOps), encompassing threat detection and response, incident management, vulnerability management, security monitoring, and continuous improvement of defensive capabilities.

WHAT YOU’LL BE DOING:

Infrastructure Security

• Manage end-to-end infrastructure security activities, such as vulnerability management, servers’ security monitoring & hardening, infrastructure as a code, etc.

• Design and/or review infrastructure security architecture proposal for various security-driven initiatives for on-premises and cloud environment.

Cloud Security

• Manage compliancy level of AIA SG cloud security assets based on ongoing regular scanning according to the defined threshold.

• Evaluate the security aspect of new cloud-based solutions proposed by application development team, infrastructure team, or business users.

• Manage various cloud security BAU activities, such as assets provisioning, deprovisioning, hardening, etc.

Identity and Access Management

• Supervise the AIA-SG IAM Manager and their team performing IAM Governance functions for the Business Unit. 

Cyber Security & Security Incident Handling

• Work with Security Operation Centre (SOC) Team to ensure secure protection of AIA SG environment.

• Deploy new cyber security initiatives and roll out the platform together with SOC Team.

• Point of contact for security incident handling and investigation, starting from incident is identified, handled, and resolved.

Security Advisory

• Provide feasible security recommendations or guidance based on queries / changes initiated by application development team, infrastructure team, or business users.

• Facilitate challenging security conversations and provide acceptable solutions where IT standards are contradicting with business demands to achieve acceptable business solutions without sacrificing security and compliance aspects.

People Development

• Supervise 8 team members.

• Drive a continues Learning and Development program for the team members through inhouse and external training programs.

• Lead promotion of activities to increase information security within your teams to embed and continuously improve adherence to good practice.

WHAT WE ARE LOOKING FOR:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).

• Minimum 15 years of experiences of information security domain, especially in Application Security, Infrastructure Security and Cloud Security.

• Preferable to have security infrastructure operation background with hands-on experiences of designing and/or reviewing application security or infrastructure security. 

• Hands-on information security experience in the Multiple Cloud Environment (SaaS, PaaS and IaaS) and Cyber Incident management.

• Certifications related to security architecture or Cloud Security is preferable, such as CCSP, Azure DevOps certification, Azure Solutions Architect certification, etc.

• Preferably a holder of one or more of the following information security and audit qualifications: CISSP, CISA, CRISC, CCSP.

• Good knowledge of latest security technologies and cyber landscape in a highly regulated industry.

• Good interpersonal and communication skill.

• Strong leadership with a high integrity, proactive mindset, and strong ownership.

• Working experiences in insurance / banking / IT industry is preferred.

• Infrastructure Security: Windows, Linux, AS400.

• Security Advisory and Assessment, and incident management.

This position is being recruited to support regional information security operations and strengthen cybersecurity capabilities across overseas regions.

Responsibilities:

·      Support the implementation and operation of information security controls and solutions across overseas regions, covering areas such as infrastructure, network, endpoint, application, data, and identity security.

·      Participate in security projects and initiatives, including planning, coordination, deployment, and ongoing improvement activities.

·      Assist in the implementation of governance, risk, compliance, privacy, and data protection initiatives.

·      Support the development and maintenance of security standards, procedures, and technical baselines.

·      Collaborate with regional and global teams to improve overall cybersecurity capabilities.

·      Provide ad-hoc support for regional and global cybersecurity initiatives as required.

Requirements:

·      Bachelor’s degree in information security, Cyber Security, Computer Science, Information Technology, or a related field.

·      At least 2 years of working experience in information security, cybersecurity, network security, IT infrastructure, system administration, or related areas.

·      Familiar with common information security technologies and concepts, such as network security, endpoint security, IAM, data protection, vulnerability management, SOC/SIEM, or cloud security.

·      Familiar with information security and privacy frameworks, such as ISO 27001/27701, ITIL, or related standards and best practices.

·      Basic knowledge of networking and operating systems (Windows/Linux).

·      Good analytical, problem-solving, and communication skills.

·      Able to work effectively with teams across different regions and cultures.

·      Security certifications (e.g. CISSP, CISA, CCSP, Security+, CCNA/CCNP) are an advantage.

·      Candidates with a Diploma and strong relevant working experience will also be considered.

·      Excellent communication and interpersonal skills in both English and Chinese (to liaise with Mandarin speaking stakeholders).

Job Overview

We are looking for a proactive Information Security professional to support enterprise IT security operations and infrastructureinitiatives across regional environments. This role will focus on strengthening cybersecurity operations, monitoring security threats, supporting incident response activities, and maintaining secure network infrastructure within a multinational environment.

The ideal candidate should possess hands-on experience in networking and cybersecurity administration, with the ability to work independently while supporting regional security initiatives.

Key Responsibilities

Cybersecurity Operations & Monitoring

• Monitor security alerts and events through SIEM and security monitoring platforms
• Investigate and respond to cybersecurity incidents and security breaches
• Support vulnerability assessment and remediation activities
• Assist in implementing endpoint and network security solutions across regional offices

Infrastructure & Network Support

• Support daily administration of enterprise IT and network infrastructure
• Maintain network and security configurations to ensure system reliability and compliance
• Troubleshoot infrastructure and connectivity issues across corporate environments
• Participate in infrastructure enhancement and security improvement projects

Project & Regional Support

• Support regional IT security initiatives and deployment activities
• Work closely with internal stakeholders across different countries and teams
• Assist with documentation, operational support, and other assigned tasks
• Occasional regional travel may be required for project implementation or support activities

Requirements

• Diploma or Degree in Information Technology, Cyber Security, Networking, or related discipline
• Minimum 3 to 5 years of experience in network administration or cybersecurity operations
• Familiarity with SIEM monitoring, incident response, and vulnerability management
• Good troubleshooting and problem-solving skills in network and security environments
• Able to work effectively both independently and within a team environment
• Comfortable communicating with users and stakeholders across different backgrounds and regions
• Strong sense of responsibility with the ability to work in a fast-paced environment
• Good verbal and written communication skills in English

Please send your detailed resume in MS Word format to resume@goldtecHRs.com with

• Education Level
• Working experiences
• Each employment background
• Reason for leaving each employment
• Last drawn salary
• Expected salary
• Date of availability

• 5 Work Days Per Week
• Office Near to Kaki Bukit MRT, Singapore
• Relocate Near Tai Seng MRT in August / September 2026
• Medical Benefits Provided
• Entitled to Yearly Bonus & Performance Bonus
• Industry: Smart Security Solutions

The current legal team consists of one Head of Legal, and we are seeking to expand the team by hiring additional legal executives to support operational activities.

Requirements:

• Candidates with experience in contract review, corporate standard operating procedures and compliance, data protection, and company-employee disputes, as well as knowledge of trademark and intellectual property, are highly preferred.
• This role will work closely with Head of Legal in Singapore and General Manager from Shen Zhen, China (HQ)

Job Responsibilities (Legal Counsel)

1. Handle compliance and legal affairs related to the company's daily operations to ensure the compliance of business activities.

2. Draft, revise, and review contracts and other company-related legal documents; formulate and improve company regulations, systems, and standardized documents; establish and enhance a comprehensive legal risk control and management system for the company and its overseas subsidiaries.

3. Participate in legal disputes involving the company, assist in handling arbitration and litigation, and provide on-site legal negotiation support during important negotiations.

4. Address various legal issues arising from business operations and provide legal consultation to other business departments or personnel.

5. Research policies, laws, and regulations of relevant countries and regions; establish and optimize the company's legal information repository; and manage risks associated with legal matters.

Reolink, a leader in intelligent visual technology for homes and businesses, was founded in 2009 by a group of engineers with a strong commitment to and passion for smarter security solutions.

Our products are now trusted by millions of users acrossmore than 110 countries and regions worldwide. Building on this trust, wecontinue expanding our presence and bringing our innovations to more markets around the globe. 

Reolink remains committed to delivering advanced, reliable, and user‑centric solutions that empower people to protect what matters most.

• 5 Work Days Per Week
• Current Office Near to Kaki Bukit MRT
• Will Relocate to Tai Seng MRT in August 2026
• Medical & Dental Benefits Provided
• Entitled to Yearly Bonus & Performance Bonus
• Position: Global Legal Director

Experience in providing legal advice across the Asia, Europe, United States, and Australia regions is highly desirable.

Qualifications:

• Master's Degree or above in law from a well-recognized institution.
• Experience: Minimum 8–10 years of experience in top-tier law firms and/or multinational corporate legal departments, including at least 5 years in a management role (e.g., Legal Director, Senior Legal Counsel).
• Experience in technology, manufacturing, or internet industries, and a background in building or managing a global legal system, is highly advantageous.
• Professional Competence: Proficient in corporate law, contract law, foreign investment, data privacy, intellectual property, and dispute resolution.
• Demonstrated experience and a successful track record in handling cross-border transactions, compliance projects, and complex legal disputes.

Responsibilities:

1. Global Compliance and Strategic Management: Develop, lead, and oversee the company's global legal compliance strategies and framework to ensure all operations across regions fully comply with local laws, regulations, and international standards.
2. Legal System Development and Contract Management: Establish, refine, and optimize the company's global contract management system and standardized legal documents; lead or review major, complex commercial contracts, agreements, and investment-related legal documents; build a comprehensive global legal risk prevention and management system.
3. Dispute Resolution and Business Support: Represent the company in handling significant and complex litigation, arbitration, and other legal disputes; provide on-site legal leadership and support in key business negotiations, M&A, financing, and other strategic matters to safeguard the company's core interests.
4. Legal Advisory and Risk Control: Provide authoritative and forward-looking legal advice and solutions to senior management and various business departments; identify, assess, and alert legal and compliance risks in global business operations.
5. Team Leadership and External Resource Management: Lead and manage the global legal team (including legal professionals in Singapore and overseas locations); efficiently manage and coordinate external lawyers and legal advisors to ensure quality and cost-effectiveness in handling global legal matters.
6. Regulatory Research and Knowledge Management: Continuously research and monitor policies and legal developments in key countries/regions; establish and maintain the company's global legal information database to support business decision-making.

Roles & Responsibilities:

• We are seeking a proactive and people-oriented Public Relations Officer to support our Public Utilities Board (PUB) Sewer Rehabilitation Projects.

Key Responsibilities:

• Serve as the main liaison for public engagement on PUB sewer rehabilitation works.
• Notify property owners and stakeholders of upcoming public works in their vicinity.
• Attend progress and technical meetings to stay updated on project developments.
• Address and manage public and stakeholder enquiries related to the project.
• Provide clear and timely updates to residents, HDB branches, and Town Councils, including on-site notices and circulars.
• Coordinate with property owners on work schedules, and communicate any changes or issues effectively.
• Maintain a professional and responsive presence on-site to foster good community relations.

Working Hours:

• 5.5-day work week.

Requirements:

• Strong communication and interpersonal skills.
• Proficiency in both spoken and written English; additional languages are an advantage.
• Prior experience in public relations, community engagement, or construction-related industries preferred.
• A valid Class 3 driving license is an advantage.
• Only apply if your willing to travel to site office located at East side and willing to travel to multiple locations for on-site jobs.

Job Description:

Monitor and control access at the main gate, lobby, and loading bay, ensuring only authorized personnel, vehicles, and visitors enter the premises.

Conduct regular patrols of the building exterior, car park, and common facilities .

Operate and monitor CCTV systems, alarm panels, and access control equipment.

Maintain accurate visitor, delivery, and contractor logs.

Attend to car park matters, including assisting drivers and reporting any gantry or ticketing system issues to the supervisor or maintenance personnel.

Identify and report any safety or security hazards and respond promptly to suspicious activities or incidents.

Assist in emergency situations such as fire alarms or evacuations in accordance with site protocols.

Prepare and submit daily occurrence reports and incident records to the Security Supervisor or Property Management.

Provide assistance and directions to tenants, staff, and visitors when required.