Total 81 Legal / Public / Security job vacancies

We are looking for a hands-on and experienced IT Infrastructure & Security professional to manage network, system, and cybersecurity operations within a 24x7 manufacturing environment.

Key Responsibilities

• Manage IT infrastructure, network security, and system availability

• Lead infrastructure and cybersecurity improvement projects

• Ensure high availability, performance, backup, and disaster recovery readiness

• Support network, server, virtualization, and security operations

• Lead and supervise Infra/Security/OA support team

• Maintain IT compliance, governance, and security standards

• Coordinate with HQ IT teams and external vendors

Requirements

• Degree in Computer Science, IT, Engineering, or related field

• Minimum 5 years of experience in IT Infrastructure & Security

• Strong hands-on experience in:

• Windows/Linux servers

• AD, SCCM, virtualization

• WAN/LAN/VPN, routing & switching

• Backup, security, SIEM, EDR/MDR

• Experience in manufacturing environment preferred

• Good troubleshooting, communication, and leadership skills

• Certifications such as CCNP, CISSP, RHCSA, ISO27001 are a plus

Interested candidate who wish to apply for the advertised position, please click “Apply”. We regret that only shortlisted candidates will be notified 

EA License No.: 01C4394 (PERSOL Singapore Pte Ltd) 

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOL Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolsingapore.com/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy. 

IT Security Engineer (Governance, Incident Response& Vulnerability Management)

Mon to Fri Office hours/ Outram Work Location
Cat2B security clearance for this 1 year project renewable

Salary Package:
• Up to S$5,000 Basic
• 1 Month Performance Bonus
• S$50 Monthly Mobile Phone Claim
• Additional S$100 Staff Amenities Claim given for Night Deployment or Weekend Patching Activities

Join a growing cybersecurity team responsible for protecting critical enterprise IT systems, applications, and infrastructure. We are seeking a hands-on IT Security Officer who enjoys security operations, incident response, vulnerability management, and compliance activities. You will be under Agency payroll for this 1 Yr project renewable assignment.

Key Responsibilities

Security Governance
• Develop, review and maintain information security policies, standards and procedures
• Support security risk assessments and risk register management
• Ensure compliance with security frameworks and regulatory requirements

Threat Detection & Incident Response
• Monitor and investigate security incidents using SIEM and EDR platforms
• Perform incident triage, root cause analysis and risk assessment
• Coordinate incident escalation and remediation activities
• Maintain incident response plans and playbooks

Vulnerability Management
• Perform vulnerability assessments and coordinate remediation activities
• Work closely with infrastructure, application and system owners to address security findings
• Prioritize vulnerabilities based on risk and business impact
• Track remediation progress and reporting

Compliance & Auditing
• Support internal and external security audits
• Prepare security documentation and evidence collection
• Assist in compliance reporting and governance reviews

Good to Have Exposure
• Cloud Security (AWS, Azure, GCP)
• IAM, SSO, MFA and PAM solutions
• Data Loss Prevention (DLP)
• Security Awareness Training
• Third-Party Risk Management
• Application Security and Secure SDLC
• OT / ICS / SCADA Security

Requirements
• Minimum 3 years of IT Security or Cybersecurity experience
• Hands-on experience in Security Operations, Incident Response or Vulnerability Management
• Experience using SIEM, EDR and Vulnerability Scanning tools
• Familiarity with security frameworks such as ISO27001, NIST or CIS Controls
• Strong stakeholder management and communication skills
• Ability to work independently and coordinate with multiple technical teams

Preferred Certifications
• Security+
• CEH
• GSEC
• CySA+
• SSCP
• CISSP (Advantageous)
• ISO27001 Lead Implementer/Auditor (Advantageous)

If you enjoy investigating security incidents, managing vulnerabilities and strengthening enterprise security posture, we would like to hear from you.

EA LicenseNo: 09C4235 I EA Reg: R1103307 (Hong Mei Lin)

Job Description

• Industry/ Organization Type: Security Solutions Provider
• Position Title: Security System IT Technician
• Working Location: Islandwide (office at Woodlands)
• Working Hours: 5.5 days (Mon – Fri: 9am - 6pm, Sat: 9am – 1pm)
• Salary Package: Basic + OT
• Duration: Permanent

Key Responsibilities

• Install, manage, and troubleshoot security systems: Access Control, Intercom, CCTV, NAS, VMS, and related network equipment.
• Handle copper, fibre cabling, electrical work, and installation of data/power cables, conduits, and metal trunking.
• Support testing, commissioning, and regular maintenance of security systems.
• Carry out onsite troubleshooting.
• Provide technical support, training, and engineering assistance.
• Deliver equipment and samples to project sites when needed.
• Set up and design network solutions for security systems.
• Assist Project Managers and Engineers with other tasks as needed.
• Able to standby at night or over weekends when required.

APPLY NOW!!!

• ITE/Diploma/Degree in IT, Computer, Electrical, or Electronics Engineering.
• Minimum 2 years of experience with ELV systems such as Access Control, Intercom, and CCTV.
• Strong knowledge of computer networking and troubleshooting.
• Familiar with Microsoft Windows.
• Class 3A/3 driving license is an advantage.

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job@anradus.com.sg. Please indicate #78602 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

Job Description

• Industry/ Organization Type: Security Solutions Provider
• Position Title: Security System IT Technician
• Working Location: Islandwide (office at Woodlands)
• Working Hours: 5.5 days (Mon – Fri: 9am - 6pm, Sat: 9am – 1pm)
• Salary Package: Basic + OT
• Duration: Permanent

Key Responsibilities

• Install, manage, and troubleshoot security systems: Access Control, Intercom, CCTV, NAS, VMS, and related network equipment.
• Handle copper, fibre cabling, electrical work, and installation of data/power cables, conduits, and metal trunking.
• Support testing, commissioning, and regular maintenance of security systems.
• Carry out onsite troubleshooting.
• Provide technical support, training, and engineering assistance.
• Deliver equipment and samples to project sites when needed.
• Set up and design network solutions for security systems.
• Assist Project Managers and Engineers with other tasks as needed.
• Able to standby at night or over weekends when required.

APPLY NOW!!!

• ITE/Diploma/Degree in IT, Computer, Electrical, or Electronics Engineering.
• Minimum 2 years of experience with ELV systems such as Access Control, Intercom, and CCTV.
• Strong knowledge of computer networking and troubleshooting.
• Familiar with Microsoft Windows.
• Class 3A/3 driving license is an advantage.

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job@anradus.com.sg. Please indicate #78602 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

Client introduction

Our client is an established financial institution, and regulated by the Monetary Authority of Singapore.

As part of strengthening its technology governance and security function, the firm is looking to hire an IT Security Analyst (Governance, Risk & Compliance) to join its infrastructure and security team. This role is well suited for someone with a foundation in IT risk, governance, assurance or security compliance, who is looking to build broader exposure across cyber governance, audit, vulnerability management, vendor due diligence and security operations within a regulated financial services environment.

Job responsibilities

• Support the review and overhaul of the firm's IT and security governance framework, drafting policies, standards and procedures for senior review and refinement.
• Help embed clear, well-understood policies and procedures across the organisation, aligned with regulatory expectations.
• Support compliance against MAS guidelines, including Technology Risk Management, Cyber Hygiene and Outsourcing, and assist with related risk assessments.
• Coordinate internal and external audit activity, including collating responses, gathering supporting artefacts and following up on findings with internal stakeholders through to closure.
• Track vulnerability assessment findings and remediation progress (assessments are run through an external vendor), working with the infrastructure and application teams to close gaps in good time.
• Conduct third-party and vendor due diligence in line with MAS outsourcing requirements, and respond to client and counterparty due diligence queries on the firm's security controls and governance practices.
• Support user access reviews, joiner-mover-leaver processes and identity access governance.
• Assist with business continuity, disaster recovery and related assurance exercises.
• Provide support on security operations and incident response coordination where required, with guidance from the team lead.

Job requirements

• At least 4 years of experience in IT risk, IT governance, technology assurance, IT audit or IT compliance, gained within a regulated financial institution such as a bank, securities or brokerage firm, asset manager or insurer.
• Working familiarity with the MAS Technology Risk Management Guidelines, Cyber Hygiene Notice and Outsourcing Guidelines.
• Exposure to audit coordination, evidence gathering, policy documentation, risk assessment or remediation tracking.
• A genuine interest in cyber security and a willingness to learn the hands-on operational side of the role. Deep SOC or security engineering experience is not required.
• Exposure to vulnerability management, access reviews, SIEM or IAM tooling is an advantage rather than a requirement.
• Strong written and verbal communication, with the ability to engage auditors, vendors, infrastructure and application teams, and business stakeholders clearly.
• A detail-oriented, proactive working style and a readiness to learn across both governance and operational security.
• Relevant certifications such as CISA, or progress toward them, are advantageous but not mandatory.

Why you should join them

• Breadth of exposure that is rare at this level, spanning governance, risk, compliance, audit and security operations in a single role, giving the right person a strong foundation early in their career.
• Direct mentorship from an experienced infrastructure and security team lead, who will actively coach the successful candidate on the technical and operational aspects of the role.
• A genuine opportunity to help rebuild and mature the firm's IT governance framework, with visible impact in a lean team.
• Regular interaction with auditors, vendors and counterparties, building a clear path toward a career in IT risk and security governance.

JL
Reg. No. R1766249
BeathChapman Pte Ltd
Licence no. 16S8112

We’re Hiring: Assistant Manager, Digital Transformation Office

Join a dynamic team driving digital transformation and cybersecurity initiatives across enterprise ICT operations. This role offers the opportunity to strengthen ICT governance, improve cyber resilience, and lead impactful process enhancement initiatives within a collaborative and fast-paced environment.

Job Highlights

• Work Location: Pasir Panjang
• Employment Type: 12-Month Contract
• Salary: Up to SGD 5,300
• Working Environment: Collaborative and Transformation-Driven Team

AWS Security Incident Response is looking for a Security Manager who combines deep technical expertise in security operations with the leadership judgment to drive a team through a fundamental transformation — from human-driven investigation to AI-native security operations. You will own operational excellence for a global team of security engineers and data scientists, engage directly with customer security executives during high-severity incidents, and drive the response-to-automation flywheel that makes the service smarter with every investigation.

The AWS Security Incident Response team provides 24/7 security response through a follow-the-sun operating model. The service combines automated triage workflows, AI-powered investigation agents, and human security analysts to respond to threats across customer AWS environments at massive scale. Our AI systems autonomously resolve the majority of routine investigations within minutes, allowing engineers to focus on complex threat analysis, proactive hunting, and customer engagement. We treat every investigation as a confirmed security incident until the data proves otherwise.

Based in Singapore, this role also contributes part-time capacity to a strategic AWS engagement in the region that brings together cybersecurity, data engineering, and AI/ML to support large-scale threat detection and response capabilities.

Internal job description

Basic qualifications

• 5+ years of managing and developing teams experience
• 5+ years of progressive work within a software security team or related operating environment experience
• Bachelor's degree in Computer Science, Information Security, or a related field
• Knowledge of security of web services, video content protection technologies, cryptography, network security protocols and operating system security
• Experience in managing and developing teams
• Experience in progressive work within a software security team or related operating environment
• Experience applying threat modeling or other risk identification techniques or equivalent

Preferred qualifications

• information security professional certification (SANS GIAC, CISSP etc.)
• Master's degree in Computer Science or a related field
• Knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques
• Experience managing remote team members

Job Description

• Industry/ Organization Type: Security Solutions Provider
• Position Title: Security System IT Technician
• Working Location: Islandwide (office at Woodlands)
• Working Hours: 5.5 days (Mon – Fri: 9am - 6pm, Sat: 9am – 1pm)
• Salary Package: Basic + OT
• Duration: Permanent

Key Responsibilities

• Install, manage, and troubleshoot security systems: Access Control, Intercom, CCTV, NAS, VMS, and related network equipment.
• Handle copper, fibre cabling, electrical work, and installation of data/power cables, conduits, and metal trunking.
• Support testing, commissioning, and regular maintenance of security systems.
• Carry out onsite troubleshooting.
• Provide technical support, training, and engineering assistance.
• Deliver equipment and samples to project sites when needed.
• Set up and design network solutions for security systems.
• Assist Project Managers and Engineers with other tasks as needed.
• Able to standby at night or over weekends when required.

APPLY NOW!!!

• ITE/Diploma/Degree in IT, Computer, Electrical, or Electronics Engineering.
• Minimum 2 years of experience with ELV systems such as Access Control, Intercom, and CCTV.
• Strong knowledge of computer networking and troubleshooting.
• Familiar with Microsoft Windows.
• Class 3A/3 driving license is an advantage.

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job@anradus.com.sg. Please indicate #78602 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

Manager, Public Relation

About the Role

We are looking for a dynamic and strategic Manager, Public Relation to lead and strengthen the global reputation of Muslim Pro and the wider Bitsmedia brand ecosystem. This role will be responsible for driving impactful public relations and communications initiatives across international markets, ensuring that Muslim Pro continues to build meaningful trust and engagement with our diverse global Muslim audience and stakeholders.

As Manager, Public Relation, you will develop and execute integrated communications strategies that amplify brand visibility, strengthen corporate reputation, manage media relations, and support key business and product initiatives. You will work closely with cross-functional teams including Marketing, Product, Partnerships, Social Media, Community, and Leadership to craft authentic and compelling narratives that resonate globally.

The ideal candidate is a strong communicator and storyteller with excellent media instincts, crisis management capabilities, and a deep understanding of digital culture, audience sentiment, and reputation management in fast-paced environments.

Key Responsibilities

1. PR Strategy & Brand Reputation

• Develop and execute comprehensive PR and reputation strategies aligned with Muslim Pro’s global brand and business objectives.

• Drive positive brand visibility and thought leadership for Muslim Pro across regional and international markets.

• Identify timely media opportunities, industry trends, and culturally relevant narratives to position the brand proactively.

• Build strategic communication plans around product launches, campaigns, partnerships, community initiatives, and corporate announcements.

• Collaborate with internal stakeholders to ensure consistency in brand messaging and public communications.

2. Media Relations & Communications

• Build and maintain strong relationships with journalists, editors, media agencies, influencers, Key Opinion Leaders (KOLs), and strategic partners.

• Serve as the primary media liaison for press inquiries, interviews, statements, and media opportunities.

• Draft and review press releases, key messaging documents, media pitches, Q&As, speeches, briefing notes, and leadership communications.

• Secure meaningful media coverage across lifestyle, tech, business, entertainment, and Muslim-focused publications.

• Monitor media sentiment and public perception of the brand across all channels.

3. Crisis & Reputation Management

• Lead and coordinate crisis communication efforts to protect and uphold the reputation of Muslim Pro and Bitsmedia.

• Develop and maintain crisis communication frameworks, response protocols, and messaging playbooks.

• Work closely with leadership and internal stakeholders during sensitive or high-impact situations to ensure timely, transparent, and consistent communications.

• Monitor social and media conversations to identify reputational risks and emerging issues proactively.

4. Stakeholder & Community Engagement

• Strengthen relationships with community leaders, strategic partners, investors, creators, and relevant organisations.

• Support executive communications and thought leadership initiatives for senior management.

• Collaborate with marketing and social teams to ensure PR efforts complement broader brand and campaign objectives.

• Represent the company at events, conferences, media engagements, and industry networking opportunities where required.

5. Reporting & Performance Analysis

• Track and analyse PR performance metrics, media coverage, share of voice, campaign effectiveness, and audience sentiment.

• Prepare regular reports and insights for management with recommendations for continuous improvement.

• Use analytics and industry insights to refine communication strategies and maximise impact.

Qualifications & Requirements

• Bachelor’s degree in Public Relations, Communications, Journalism, Marketing, or a related field.

• 5–8 years of relevant experience in Public Relations, Corporate Communications, Brand Communications, or Agency environments.

• Strong understanding of global media landscapes, digital culture, and reputation management.

• Exceptional written and verbal communication skills with strong attention to detail.

• Proven experience crafting compelling narratives and securing impactful media coverage.

• Excellent stakeholder management and interpersonal skills.

• Experience handling sensitive issues and crisis communications with professionalism and sound judgment.

• Ability to thrive in a fast-paced, collaborative, and multicultural environment.

• Familiarity with media monitoring and PR reporting tools is preferred.

• Passion for storytelling, community engagement, and mission-driven brands.

Why Join Us

At Bitsmedia, you’ll be part of a mission-driven team behind one of the world’s leading Muslim lifestyle platforms. You’ll have the opportunity to shape meaningful conversations, build impactful narratives, and contribute to products that serve millions of users globally.

Interested candidates are invited to submit their updated resume/CV and relevant portfolio or writing samples (if applicable) to nasuha@bitsmedia.com.

Please include “Application – Manager, Public Relation” in the subject line of your email.

We appreciate all applications and interest in joining Bitsmedia. However, only shortlisted candidates will be contacted for the next stage of the recruitment process.

We are seeking an experienced ITSO Security Officer to join our team. In this role, you will act as the security advisor throughout the software development lifecycle, partnering closely with developers, architects, DevOps engineers, and project stakeholders to ensure applications are designed, built, and deployed securely.

Why Join Us:

• Salary up to $9,000 + AWS
• Hybrid Work Arrangement
• Government Projects

Responsibilities:

• Conduct threat modelling exercises to identify, assess, and mitigate application security risk
• Perform and review security assessments using SAST, DAST, and other application security tools
• Review security controls for cloud-hosted applications, particularly within AWS environments
• Provide ongoing support and troubleshooting for deployed features, maintaining platform stability, performance, and a strong user experience

Requirements:

• Minimum 4 years of experience across software development, application security, DevSecOps, or cloud security
• Working knowledge of: OWASP Top 10, OWASP ASVS
• Experience with security scanning tools such as: Fortify on Demand, SonarQube, Similar SAST/DAST solutions
• Familiarity with AWS cloud environments and cloud security best practices

If you’re passionate about contributing to impactful government projects while advancing your career, we welcome you to explore this opportunity with us

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.

All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Elias Yeo HongJie (Outsourcing Team)
ScienTec Consulting Pte Ltd - 11C5781

Summary:

In this role, you will help ensure that vulnerabilities and exposures across our environment are identified, validated, and remediated in a timely manner. You will work closely with system owners and report findings, helping to keep our risk posture visible and well-managed.

Job Scope

Attack Surface Monitoring, Vulnerability Scanning, and Triage

• Monitor and triage findings surfaced by our Attack Surface Management (ASM) and Vulnerability Management tools
• Assess each finding for validity, severity, and exploitability before escalating or acting on it
• Distinguish genuine exposures from false positives and contextualise findings against our asset inventory
• Prioritise remediation efforts based on risk
• Remediation Workflow Management
• Work with system owners to follow up on outstanding findings
• Track remediation progress and ensure findings are resolved in a timely manner
• Manage exceptions and risk acceptance where remediation is not immediately feasible
• Communicate clearly with non-technical stakeholders, translating technical findings into actionable guidance

Reporting & Insights

• Consolidate vulnerability data and remediation metrics for reporting
• Identify trends and surface systemic issues across the organisation's attack surface and internal asset landscape
• Provide recommendations to improve our overall exposure management programme

Process Improvement

• Contribute to the refinement of ASM and vulnerability management processes, tooling configurations, and escalation playbooks over time
• Support the development and maintenance of vulnerability management policies, standards, and procedures in alignment with industry best practices

Prerequisites

• Bachelor’s Degree in Computer Science/Information Security or equivalent
• Professional certifications, including GWEB, OSCP, CRISC, CISA or other relevant certifications will be preferred
• Preferably 5 years of experience in a relevant cybersecurity function, such as vulnerability management, attack surface management, security operations, or IT risk
• Strong understanding of cybersecurity concepts, particularly around vulnerability management, patch management, common vulnerability scoring frameworks (eg CVSS), and external-facing attack surface risks
• Familiarity with ASM or vulnerability management tools (such as Tenable, Qualys, Censys, or similar)
• Proficiency in programming languages such as Python will be advantageous
• Strong analytical and judgement skills, with the ability to think critically and make sound recommendations
• Good communication and interpersonal skills, with the ability to multitask, prioritise, and translate technical findings
• Meticulous, with a high degree of integrity, initiative, and energy

Singaporean only

Role Overview

The IT Security Engineer will be responsible for implementing, operating, and supporting security controls for mission-critical systems within a secured environment.

This role covers both:

Day 1 Security (Build / Project Implementation)

Day 2 Security (Operations / Production Support)

The Security Engineer will work closely with Security Leads, Infra, System, and Software teams to ensure compliance with government security policies and standards.

Key Responsibilities

Day 1 – Project / Implementation Security

1. Security Implementation & Engineering

Implement security architecture and controls as designed by Security Leads/Architects

Support system, application, and infrastructure security configurations

Assist in threat modelling and risk assessment activities

Translate security requirements into technical implementation across platforms

2. Compliance Support

Support compliance with:

IM8 / Government security policies

Whole‑of‑Government (WOG) security requirements

PDPA (where applicable)

Assist in preparation and documentation for:

Security Risk Assessments (SRA)

Vulnerability Assessments (VA)

Penetration Testing (PT)

Maintain security documentation and evidence for audits

3. DevSecOps & Secure Development

Implement and maintain security tools in CI/CD pipelines:

SAST, DAST, SCA, container scanning

Monitor and triage findings, and work with developers on remediation

Support secure coding practices and DevSecOps adoption

Assist in API security, secrets management, and secure communications setup

4. Security Testing Support

Support coordination and execution of VA/PT activities

Track vulnerabilities and ensure timely remediation

Assist in documenting findings and closure evidence

Support system security certification and go-live requirements

5. System & Platform Hardening

Implement and maintain security hardening for:

Operating systems

Middleware and databases

Kubernetes and containers (RBAC, secrets, network policies)

Support configuration of:

API Gateways

WAF

Authentication and authorization mechanisms (OAuth2, mTLS)

Day 2 – Operations / Production Security

1. Incident Response

Support investigation, containment, and remediation of security incidents

Perform log analysis and assist in root cause analysis (RCA)

Work with SOC and internal teams during incidents

Follow and improve incident response playbooks

2. Vulnerability & Patch Management

Perform regular vulnerability scans and monitoring

Track and verify patching and remediation activities

Escalate high-risk vulnerabilities and propose mitigation controls

3. Security Monitoring

Monitor alerts from SIEM and security tools

Assist in tuning detection rules and dashboards

Ensure logging and monitoring coverage across systems

4. Audit & Compliance Support

Support audit preparation, evidence collection, and remediation tracking

Maintain security records and documentation

Assist in reporting security posture and issues

5. Access Control Administration

Support implementation of:

RBAC

MFA

Privileged Access Management (PAM)

Perform user access reviews and ensure least privilege

Required Qualifications & Experience

Mandatory

Degree in Computer Science / Cybersecurity / Information Security or equivalent

3–7 years of IT experience in cybersecurity or infrastructure security

Experience supporting security in projects or production environments

Familiarity with Singapore Government security policies (IM8 preferred)

Hands-on experience with:

Kubernetes / Docker security

IAM and access control

Security tools (SAST, DAST, SIEM, vulnerability scanners)

CI/CD and DevSecOps practices

Basic knowledge of network security, application security, and cloud security

Preferred Certifications

CEH, CompTIA Security+, or equivalent

Other certifications (e.g., CISSP Associate, GIAC, AWS/Azure Security) are advantageous

Key Competencies

Strong technical troubleshooting and problem-solving skills

Ability to follow security standards and implement controls effectively

Good communication skills with technical and non-technical teams

Detail-oriented with strong documentation skills

Collaborative team player with willingness to learn

Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security and

cloud computing (e.g. AWS)

• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,

SOAP, SSL/TLS)

• Experience in threat modelling and able to establish threat profiles for application projects to

identify, quantify and remediate application security risks

• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security

verification standard

• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,

Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines

• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

• Track and address security vulnerabilities with timely remediation and patching processes.

• Conduct security awareness training sessions

• Good verbal/written communications, collaboration skills and experience interacting with

various stakeholders

• Strong analytical, problem-solving and troubleshooting skills, ability to work independently

• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or

equivalent etc.)

• Experience in working with Government Commercial Cloud (GCC) preferred

• 1-year contract, renewable
• Hybrid work arrangement
• Government project

Key Responsibilities

• Perform threat modelling and establish threat profiles to identify, assess, and remediate application security risks.

• Review application architectures, APIs, and cloud environments to ensure compliance with security best practices.

• Conduct security testing using SAST tools such as Fortify-on-Demand, SonarQube, and similar solutions.

• Track, manage, and remediate security vulnerabilities through timely patching and mitigation activities.

• Work closely with development, DevOps, and infrastructure teams to integrate security controls into CI/CD pipelines.

• Conduct security awareness training and provide security advisory support to project teams.

• Ensure adherence to security standards and frameworks such as OWASP Top 10 and OWASP ASVS.

Requirements

• Minimum 4 years of experience in software development, application security, and/or cloud computing (AWS preferred).

• Strong understanding of web and mobile application security, API security, and related technologies (REST, SOAP, SSL/TLS).

• Experience in threat modelling and application security risk assessment.

• Familiarity with Agile development methodologies, DevOps practices, and CI/CD pipelines.

• Hands-on experience with security scanning tools such as Fortify-on-Demand, SonarQube, or equivalent.

• Good knowledge of security best practices and secure software development lifecycle (SSDLC).

• Strong analytical, troubleshooting, communication, and stakeholder management skills.

• Ability to work independently and collaboratively within cross-functional teams.

Preferred Qualifications

• Relevant certifications such as CISSP, OSCP, AWS Security Specialty, AWS DevOps Engineer, or equivalent.

• Experience working in Government environments.

• Experience with Government Commercial Cloud (GCC) environments.

Job Summary

The IT Security Lead manages end-to-end security governance, compliance, and operations for mission-critical systems, collaborating with cross-functional teams and external auditors to ensure adherence to government security policies.

Responsibilities

Day 1 – Project / Implementation Security

• Define and implement system security architecture aligned with Singapore Government policies
• Review application, middleware, infrastructure, and platform designs for security compliance
• Conduct threat modeling and risk assessments, mapping risks to mitigating controls
• Translate policy requirements into actionable technical controls across technology stacks
• Ensure compliance with IM8, Whole-of-Government security requirements, and PDPA where applicable
• Establish and oversee cybersecurity governance across infrastructure, application, and project teams
• Prepare and maintain documentation including Security Risk Assessments, Vulnerability Assessments, Penetration Testing reports, and security hardening baselines
• Partner with software teams to enforce secure coding standards and DevSecOps practices
• Integrate and govern SAST/DAST, dependency/SCA scanning, and container image scanning within CI/CD pipelines
• Review and triage security tool findings, driving remediation and risk acceptance decisions
• Provide guidance on API security, token/secret management, and secure service-to-service communication
• Plan, coordinate, and manage vulnerability and penetration testing engagements and vendors
• Track remediation progress to closure and document residual risks and risk acceptance
• Support security clearances and go-live certifications
• Review and approve OS, middleware, database, Kubernetes/container security, API gateway, WAF, rate-limiting, and authentication configurations

Day 2 – Operations / Production Security

• Lead security incident investigations, containment, and recovery efforts
• Perform root cause analysis and define corrective and preventive actions
• Coordinate with Government SOC and stakeholders; contribute to and refine incident response playbooks
• Communicate security incidents clearly to technical and non-technical audiences
• Oversee continuous vulnerability monitoring and posture management
• Track patch and configuration compliance across infrastructure, middleware, applications, and containers
• Provide risk assessments and compensating controls for deferred patches
• Review and tune alerts, detections, and dashboards in SIEM and related tools
• Ensure monitoring coverage for critical systems and high-value assets
• Support internal and external audits, evidence collection, and closure of audit findings
• Prepare and present security posture, metrics, and trend reports to management
• Maintain risk registers and mitigation plans with up-to-date security documentation
• Communicate security assessments and findings effectively to varied stakeholders
• Oversee and periodically review RBAC, MFA, Privileged Access Management, and joiner/mover/leaver processes
• Ensure least privilege access, segregation of duties, and periodic access recertifications
• Support incident response handling, log analysis, and activity reviews
• Drive continuous improvement across identify, protect, detect, respond, and recover functions

Required competencies and certifications

• Degree in Computer Science, Cybersecurity, Information Security, or equivalent
• 8–12 years of IT experience including at least 5 years as a Security Lead or Security Architect
• Proven experience in Singapore Government IT projects and IM8/government security compliance
• Hands-on experience with Kubernetes/Docker security, API security, Identity & Access Management (IAM), and security tools (SAST/DAST/SIEM) integrated with CI/CD

Preferred competencies and qualifications

• Certifications such as CISSP, CISM, CISA, CEH, GIAC (e.g., GSEC, GCIA, GCIH, GCSA)
• AWS or Azure Security certifications

5 day week @ AMK area

Maestro HR
damien lee tian hong
R1106726
16C8462

This position is responsible for :

·        Analyzes and defines security strategies basedon local context and identified threats

·        Implements security policies and coordinatessecurity actions at the country, LBU, and project levels

·        Ensures optimization of security CAPEX and OPEXby prescribing reliable, cost-effective solutions strictly adapted to needs

·        Advises and assists Country Chairs, EntityDirectors, and site managers to help them define the appropriate securityposture level

·        Recommends an OTOC security organization andvalidates internal or external recruitment of CSOs/security team members

·        Supports each CSO in their area to ensure theirskill development, completion of security training, and benefits from expertiseand experience to adopt the appropriate security posture level for evolvingthreats and security situations, and to handle emergency situations

·        Manages the CSO network in their area

·        Ensures Country Chairs and Entity Directors haveappropriate security plans, with the appropriate level of protection forpeople, facilities, and informational assets; also verifies proper POBmaintenance and implementation of measures regarding VPSHR compliance

·        Conducts security reviews in Company entities tocontrol effective protection of people and sites

·        Prescribes corrective or improvement measures tobe implemented and assists entities in action plan implementation

·        Evaluates and makes recommendations on theselection of security providers for subsidiaries

·        Identifies and updates security performanceindicators in their area

Additional information:

·        Anticipates threats, provides expertise, advice,support, and assistance in the security approach

·        Responsible for compliance with Company securityrequirements in their geographical area

·        Ensures compliance with the OTOC principle (OneTotalEnergies One Country) by guaranteeing that all Company entities present ina given country adhere to the same security standards

·        Co-manages subsidiary security budgets andcosts, evaluated by area of responsibility at several hundred million euros

·        Sovereign dimension: liaison with diplomaticrepresentations in their area: Ambassadors and Defense Attachés

·        Inter-company dimension: maintains aprofessional network with counterparts from major French companies and keyindustrial sector players in the area

Requirement
Qualification level required for the position : At least Bachelor or Master’s or equivalent level

Technical skills required for the position : - Experience in managing large projects - Experience in writing organizational and methodological documents

Behavioral competencies required for the position : - Rigorousness, strong responsiveness, and organizational skills are required -

Listening, perspective, and ability to convince are necessary

Specific knowledge required for the position : Good knowledge of the company's business and professions to be able to cross security vision and business challenges

Level of experience required for the position : - Minimum 15 years of executive experience in the security field with proven crisis

management skills - Successful managerial experience in operational situations or transverse management

Activate Interactive Pte Ltd (“Activate”) is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency.

We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realize their full potential, who in turn have the opportunity to continuously drive innovation.

We are searching for our next team members to join our growing team.

If you love the idea of being part of a growing company with exciting prospects in mobile and web technologies that create positive impact on people’s lives, then we would love to hear from you.

This is a 12 months fixed term contract role.

What will you do?

• Develop and maintain IT security policies and action plans, reviewing them at least annually or as required by the Customer.
• Evaluate and recommend IT security products and solutions for implementation within the Customer's IT infrastructure.
• Implement and manage risk assessment methodologies, ensuring compliance with relevant service management requirements and industry standards.
• Develop and implement security management frameworks and governance structures as specified by the Customer.
• Establish and manage IT Security Incident Management processes, including detection, response, and handling of security incidents according to Customer guidelines.
• Collaborate with external partners and suppliers to resolve IT security incidents effectively.
• Participate in and contribute to industry-wide IT security incident response simulations and technical assessment exercises.
• Conduct forensic investigations when required, including secure disk image acquisition and analysis within specified timeframes.
• Monitor, analyze, and report on emerging security threats, vulnerabilities, and solutions relevant to the Customer's IT infrastructure.
• Conduct regular meetings with key stakeholders to highlight security issues and propose improvements to the Customer's IT infrastructure.
• Liaise and coordinate with external suppliers, security organizations, and the Government on IT security matters related to the Customer's infrastructure.
• Perform additional activities as necessary to secure the Customer's IT infrastructure.
• Review and follow up on security reports generated from central security tools, providing timely updates to the Customer.
• Manage the inventory of IT assets to be monitored by central security tools, ensuring compliance and proper onboarding of servers, networks, and databases.

Requirements

• At least 4 years combined work experience in software development, application security and cloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST, SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects to identify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security verification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github, Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting with various stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (e.g. CISSP, OSCP, AWS security, AWS DevOps Engineer or equivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred

Benefits

What do we offer in return?

• Fun working environment
• Employee Wellness Program
• To work in Singapore Government Agencies projects
• We provide structured development framework and growth opportunities. (We are a “SHRI 2025 Gold winner” in “Learning & Development; Coaching & Mentoring”)

Why you'll love working with us?

If you are looking for opportunities to collaborate with leading industry experts and be surrounded by highly motivated and talented peers, we welcome you to join us. We provide all employees with equal opportunities to grow and develop with us. We believe your success is our success.

Does it sound like something you are interested in exploring further? Please be in touch with our team for an initial chat at careers@activate.sg

Activate Interactive Singapore is an equal opportunity employer. Employment decisions will be based on merit, qualifications and abilities. Activate Interactive Pte Ltd does not discriminate in employment opportunities or practices on the basis of race, color, religion, gender, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Protecting your privacy and the security of your data are longstanding top priorities for Activate Interactive Pte Ltd.

Your personal data will be processed for the purposes of managing Activate Interactive Pte Ltd’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results, and as is otherwise needed in the recruitment and hiring processes.

Please consult our Privacy Notice (https://www.activate.sg/privacy-policy) to know more about how we collect, use, and transfer the personal data of our candidates. Here you can find how you can request for access, correction and/or withdrawal of your Personal Data.

Overview

We are seeking an experienced Application Security Consultant to drive secure application development practices, perform security assessments, and support cloud security initiatives. The ideal candidate will have strong expertise in application security, secure SDLC, DevSecOps, threat modelling, and cloud technologies.

Responsibilities

• Perform application security assessments and reviews for web, mobile, and cloud-based applications.
• Conduct threat modelling exercises to identify, assess, and mitigate application security risks.
• Establish threat profiles and recommend security controls for application projects.
• Track, manage, and remediate security vulnerabilities through timely patching and remediation processes.
• Integrate security best practices and automated security testing into CI/CD pipelines.
• Conduct security awareness training and promote secure coding practices across development teams.
• Collaborate with developers, engineers, and stakeholders to strengthen application security posture.
• Support security governance, risk management, and compliance initiatives. 

Requirements

• Minimum 4 years of combined experience in software development, application security, and cloud computing (AWS preferred).
• Strong understanding of web and mobile application architectures and APIs, including REST, SOAP, SSL/TLS.
• Experience in threat modelling and application security risk assessment.
• Strong knowledge of application security standards and frameworks, including:OWASP Top 10OWASP Application Security Verification Standard (ASVS)
• Familiarity with Agile development methodologies, DevOps practices, and CI/CD pipelines.
• Experience integrating security testing into development workflows.
• Hands-on experience with SAST (Static Application Security Testing) tools such as:Fortify on DemandSonarQubeSimilar security scanning platforms
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication and stakeholder management skills.
• Ability to work independently and collaboratively within cross-functional teams.

Preferred Qualifications

• Professional certifications such as:CISSPOSCPAWS Security SpecialtyAWS DevOps EngineerEquivalent cybersecurity certifications
• Experience working with Government Commercial Cloud (GCC) environments.

Key Skills

Application Security | DevSecOps | Threat Modelling | OWASP Top 10 | OWASP ASVS | AWS Security | CI/CD | SAST | Fortify | SonarQube | REST API | SOAP | SSL/TLS | GitLab | GitHub | Ansible | Cloud Security | Vulnerability Management | Secure SDLC | Security Awareness Training | GCC Cloud Environment

Legal Counsel

• Work Location: Changi site office
• Working days: 5 days 8am to 5pm
• Salary: $12k to $15k (depends on experience)
• Construction Industry

Requirements

• Possess at least Bachelor’s Degree in Law (LLB) from a recognized university
• Minimum 10 years of relevant legal experience in a law firm and/or in-house (preferably in the construction industry)
• Deep knowledge and understanding of construction laws, regulations, and compliance frameworks in Singapore

Job Description

• Ensure the legal integrity of contracts to protect the company's interests and prevent potential legal issues.
• Advise on the appropriate legal structures for project entities (e.g., joint ventures, SPVs) and ensure their compliance with local and international laws.
• Address international legal considerations, including trade laws, export controls, and multi-jurisdictional regulatory requirements.
• Draft, review, and revise contracts to ensure legal soundness, regulatory compliance, and alignment with the company’s strategic objectives. This includes negotiating contract terms with external parties to achieve favorable outcomes and safeguard the company’s interests.
• Identify and assess potential risks associated with contracts and implement strategies to mitigate them.
• Support the acquisition and maintenance of all necessary licenses, permits, and regulatory approvals required for project implementation.
• Negotiate and mediate disputes arising during contract execution, leveraging legal expertise to deliver fair and efficient resolutions.
• Provide legal guidance and support to internal teams on contract-related matters and broader legal issues as needed.
• Clearly communicate contract terms and obligations to internal stakeholders to ensure uniform understanding and compliance.
• Collaborate with external legal counsel on legal and/or regulatory matters when necessary and manage legal engagements effectively
• Work closely with project management, finance, procurement, and other departments to ensure cohesive contract management across the organization.
• Conduct legal training and briefings for internal stakeholders to ensure awareness of key legal issues and compliance requirements.
• Maintain comprehensive and accurate records of contracts, correspondence, and related documentation.
• Oversee and manage claims, arbitrations, and court proceedings related to the company’s projects.
• Participate in ad hoc projects and assignments as directed by management, ensuring all legal and regulatory considerations are addressed.
• Assist in the development and implementation of internal policies and procedures to strengthen legal governance in project execution.

Chin See Min Reg No. : R22107450

The Supreme HR Advisory Pte Ltd EA No. : 14C7279

The Security Manager is responsible for leading and overseeing all aspects of security and safety for Sports Excellence Singapore. This role ensures the security and safety of staff, student-athletes, residents, visitors, physical assets, and operations through robust security strategies, operational excellence, and regulatory compliance.

The incumbent will drive a proactive and risk-informed security posture by strengthening governance, improving operational readiness, leveraging security technologies, and working closely with internal and external stakeholders to maintain a safe and secure environment.

Key Responsibilities

Security Strategy & Risk Management

·       Lead site security framework aligned with organisational priorities

·       Conduct risk assessments and implement mitigation plans

·       Set and monitor KPIs for prevention, response, and improvement

Operations & Incident Management

·       Oversee daily security operations and environment safety

·       Lead incident response, investigation, and documentation

·       Ensure effective surveillance, access control, and asset protection

·       Use technology to enhance efficiency and resilience

Compliance& Governance

·       Ensure compliance with relevant laws and regulations

·       Maintain audit readiness and data confidentiality

Emergency Preparedness & Business Continuity

·       Lead emergency planning and response(fire, security threats)

·       Conduct drills and continuous improvement reviews

·       Coordinate with relevant government agencies

Team & Vendor Management

·       Oversee outsourced vendors and service performance

Financial Management

·       Manage budget and ensure cost-effective security investment

Stakeholder Engagement

·       Collaborate with internal and external stakeholders on security matters

·       Build trust and promote awareness across community

·       Maintain professional, balanced conduct in all situations

Any other matters, as assigned by Management Team.

Job Requirements

·       Diploma in Security Management, Risk Management, WSQ security qualifications, Advanced Certificate in Security, management-level security training or a related field is preferred

·       Certification in Fire Safety Manager, First Aid, AED/CPR is preferred

·       At least 5 years of experience in a managerial role leading security teams and site operations

·       Minimum 8 years of security experience, preferably in residential, education, or customer-facing environments

·       Valid Singapore security license and regulatory compliance

·       Strong knowledge of security operations, risk assessment, incident management, investigation, and emergency planning

·       Familiarity with security technologies such as CCTV, access control, various alarm monitoring, incident reporting systems, and related security platforms

·       Knowledge of relevant legislation(WSH, PDPA, security procedures)

·       Experience in liaising with police and external agencies on security matters

·       Experience in budgeting, manpower planning, vendor management, security related improvement works and service partner oversight

·       Able to work shifts, weekends, and respond to incidents beyond working hours

·       Able to stay in provided accommodation will be an advantage

·       Independent, team oriented and able to work under pressure

·       Proficient in MS Office with strong reporting and documentation skills

We regret to inform that only shortlisted candidates will be notified.

We welcome and encourage all applications to submit your application using this link: https://www.lego.com/en-sg/careers/job/legal-operations-manager-apac-china-ip-contracts-e67df73018b310011c43cc517a430000

Are you passionate about intellectual property, commercial contracting, and supporting global business operations in a complex international environment? Join the LEGO Group and play a key role in safeguarding our brand and supporting legal operations across the APAC and China region!

Core Responsibilities

• Support trademark border enforcement activities across the APAC/China region, including collaboration with customs authorities
• Assist with global trademark and copyright clearance work to help protect the LEGO Group’s intellectual property portfolio
• Draft, review, and negotiate contracts across multiple legal areas and jurisdictions, including manufacturing, procurement, sales, and marketing agreements
• Ensure legal accuracy and alignment with corporate policies, contracting standards, governance requirements, and applicable legal frameworks
• Identify material legal risks where appropriate and support effective risk mitigation
• Communicate complex legal concepts clearly and concisely to non-legal interested parties to support informed decision-making
• Contribute to the streamlining and standardization of legal processes, templates, negotiation guides, and playbooks
• Support the development and improvement of legal tech platforms and digital contracting solutions
• Collaborate closely with internal partners, external advisors, and regional teams across APAC and globally

This role is located in Singapore, and no relocation assistance is offered for this position.

Play your part in our team succeeding

The LEGO Group continues to grow, increasing the demand for scalable and high-quality legal services across regions. As part of the newly established Tax and Legal Operations team within Business Service Operations (BSO), this role supports the business by delivering legal operational excellence across intellectual property and commercial contracting activities!

Do you have what it takes?

• Hands-on experience working with intellectual property rights within the APAC/China region
• Experience supporting trademark border enforcement activities and collaborating with customs authorities
• Experience with copyright and trademark clearance work
• Strong contract drafting, review, and negotiation skills across multiple legal areas, including procurement, marketing, sales, and manufacturing agreements
• Experience working in a corporate legal department or law firm environment
• Strong communication skills with the ability to explain complex legal concepts clearly to non-legal partners
• Ability to manage multiple priorities and meet deadlines in a dynamic international environment

What would be an advantage?

• Chinese language skills for effective collaboration with partners are a plus
• Knowledge of Vietnamese and/or Chinese legislation and legal frameworks is an advantage

Applications are reviewed on an ongoing basis. However, please note we do amend or withdraw our jobs and reserve the right to do so at any time, including prior to any advertised closing date. So, if you're interested in this role we encourage you to apply as soon as possible.

What’s in it for you?

Here is what you can expect:

Family Care Leave - We offer enhanced paid leave options for those important times.

Insurances – All colleagues are covered by our life and disability insurance which provides protection and peace of mind.

Wellbeing - We want our people to feel well and thrive. We offer resources and benefits to nurture physical and mental wellbeing along with opportunities to build community and inspire creativity.

Colleague Discount – We know you'll love to build, so from day 1 you will qualify for our generous colleague discount.

Bonus - We do our best work to succeed together. When goals are reached and if eligible, you'll be rewarded through our bonus scheme.

Workplace - When you join the team you'll be assigned a primary workplace location i.e. one of our Offices, stores or factories. Our hybrid work policy means an average of 3 days per week in the office. The hiring team will discuss the policy and role eligibility with you during the recruitment process.

Children are our role models. Their curiosity, creativity and imagination inspire everything we do. We strive to create a diverse, dynamic and inclusive culture of play at the LEGO Group, where everyone feels safe, valued and they belong.

The LEGO Group is highly committed to equal employment opportunity and equal pay and seeks to encourage applicants from all backgrounds (eg. sex, gender identity or expression, race/ethnicity, national origin, sexual orientation, disability, age and religion) to apply for roles in our team.

The LEGO Group is fully committed to Children’s Rights and Child Wellbeing across the globe. Candidates offered positions with high engagement with children are required to take part in Child Safeguarding Background Screening, as a condition of the offer.

Thank you for sharing our global commitment to Children’s Rights.

Just imagine building your dream career.

Then make it real.

Join the LEGO® team today.

Our client is global organisation operating in the travel and services industry, with a strong presence in Singapore. In line with business expansion, they are looking for a Senior IT Executive (IT Security / Infrastructure) to join their team, in hopes of developing the current high performing team. They are located in the East area.

Job Responsibilities:

• Develop, implement, and enforce IT security policies, standards, and procedures in line with regulatory and industry best practices.
• Monitor and manage IT security systems to detect, investigate, and respond to cyber threats, suspicious activities, and security incidents.
• Analyze network traffic, system logs, and security alerts to identify vulnerabilities and potential risks.
• Maintain and optimize security monitoring tools, detection rules, and automated workflows to strengthen threat detection and response capabilities.
• Conduct security reviews, risk assessments, compliance checks, and system hardening activities for IT infrastructure and applications.
• Support incident response, disaster recovery, and business continuity planning, including participation in recovery exercises and simulations.
• Participate in security architecture reviews, vulnerability assessments, and continuous improvement initiatives to enhance overall cybersecurity posture.
• Collaborate with internal stakeholders, project teams, and developers to ensure secure system implementation and compliance requirements are met.
• Support IT security audits, maintain security documentation and risk registers, and prepare periodic security reports for management review.
• Conduct user awareness initiatives and liaise with external auditors, vendors, and relevant parties on cybersecurity and compliance matters.
• Perform ad-hoc coordination tasks as required.

Requirements:

• Min Diploma/Degree in Information Technology, Information Security, Computer Science, or related discipline
• Min 4 years of relevant experience in IT security, cybersecurity, or infrastructure environments
• Good understanding of cybersecurity concepts, network security, system hardening, and security best practices
• Familiarity with security frameworks such as CIS Benchmarks, PCI DSS, NIST, or similar standards
• Hands-on experience with firewalls, IDS/IPS, endpoint security, or security monitoring tools is advantageous
• Strong analytical, troubleshooting, and stakeholder management skills

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.
We regret that only shortlisted candidate will be notified.

Email: job•@recruitpedia.sg

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

*Seeking for a talent who has minimum 6 years of experience handling Banking/Financial services’ IT Risk/Cyber security/Information security/Governance risk including 3 years of hands-on IT technical security/security operations*

THE COMPANY
With their reputable brand and commitment to their clients, this company is increasing their operations in the region. They seek an IT Risk/Cyber Security/Information Security Manager to be part of their team.

JOB RESPONSIBILITIES

• Perform Level 2 IT risk/Cyber security/Information Security or governance risk
• Handle IT regulatory compliance (MAS TRM and information security)/security risk framework
• Handle Incident Oversight and root cause analysis & Control Validation
• Prepare Risk Register, Reporting & Adversarial Attack Simulation Exercises to assess the effectiveness of security controls and detection capabilities
• Provide IT security advisory
• Work closely with other business stakeholders etc.
• Any other adhoc duties

JOB REQUIREMENTS

• Degree in IT/Information Technology/Information Security/Computer Science or any other relevant IT education
• Has a recognised information security certification such as CRISC, CISSP, or equivalent
• Minimum 6 years of experience handling Banking/Financial services’ IT Risk/Cyber security/Information security/governance risk including 3 years of hands-on IT technical security/security operations
• Solutions-oriented, friendly, helpful, resourceful and able to multi-task

If you would like to explore this opportunity, please email your resume in Microsoft Word format to marie@resolutehunter.com

We thank you for your interest and will contact shortlisted candidates for more detailed discussion.

For more job opportunities, please visit our website https://resolutehunter.com

EA Licence 18C9105 
EA Reg R1105305

Requirements:

• Bachelor’s degree in computer science/information security or equivalent
• Professional certifications, such as GWEB, OSCP, CRISC, CISA or other relevant certifications will be preferred
• Preferably 4 years of experience in a relevant cybersecurity function, such as vulnerability management, attack surface management, security operations, or IT risk
• Strong understanding of cybersecurity concepts, particularly around vulnerability management, patch management, common vulnerability scoring frameworks (e.g. CVSS), and external-facing attack surface risks
• Familiarity with ASM or vulnerability management tools (such as Tenable, Qualys, Censys, or similar)
• Proficiency in programming languages such as Python will be advantageous

Job Summary:

The Application Security Consultants is responsible for auditing and validating the security posture of applications and their supporting infrastructure. This role focuses on reviewing security activities performed by development teams, including static and dynamic code analysis, infrastructure scans, and hardening practices. The analyst ensures that applications meet internal security standards and comply with regulatory requirements.

Key Responsibilities:

·      Review and validate results from SAST (Static Application Security Testing) and DAST( Dynamic Application Security Testing) tools.

·      Audit OS, container, and database scans for vulnerabilities and misconfigurations looking at reports a

·      Assess the effectiveness of hardening measures across application components (e.g., webservers, APIs, containers, databases).

·      Collaborate with application development and DevSecOps teams to ensure remediation of identified issues.

·      Maintain audit documentation, including findings, remediation tracking, and compliance status.

·      Evaluate adherence to secure coding practices and application security policies.

·      Support internal security audits related to application & underlying infrastructure security.

·      Stay updated on emerging threats, vulnerabilities, and secure development trends.

Required Qualifications:

·      Bachelor’s degree in computer science, Cybersecurity, or related field.

·      4+ years of experience in application security, security auditing, or secure software development.

·      Hands-on experience on one or more tools like SonarQube, Fortify SAST/DAST, Burp Suite,OWASP ZAP etc.

·      Strong understanding of OWASP Top 10, secure coding principles, and CI/CD pipelines.

·      Familiarity with container technologies (e.g., Docker, Kubernetes) and cloud platforms (e.g., AWS, Azure, GCP).

Certifications:

·      CRESTCertified Pen Tester

·      CISSP or CCSP 

·      Preferred Certified AWS DevSecOps Professional or equivalent

Key Competencies:

·      Analytical mindset with attention to detail

·      Ability to interpret scan results and prioritize remediation

·      Strong communication and collaboration skills

·      Knowledge of regulatory frameworks (e.g., ISO 27001, PCI-DSS, GDPR)

·      Experience working in Agile and DevOps environments'

Interested applicants please send your resume in MS Wordsformat to pooja.yadav@ambition.com.sg andattention to Pooja (R1551322)

Short listed candidates will be notified

www.ambition.com.sg

EA Registration Number: R1551322

Data provided is for recruitment purposes only

Business Registration Number: 200611680D.

License Number: 10C5117