Total 221 Network Analyst job vacancies in Legal / Public / Security category in Singapore

Responsibilities：

• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure)
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to to ensure compliance and regulatory requirements and industry standards

Requirements;

• Diploma/degree in computer studies
• 2 years of experience working in a security operations, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role
• Willing to work in rotational shift environment (including weekends and night shift).

Job Description:

•Support and maintain security tools including Endpoint Security, SIEM, IPS/IDS, Email Security, NGFW, DLP, Security Assessment.

•Administration of information security systems and devices, review audit logs and security alerts.

• Perform activities related to IT security, including installation, configuration changes, and updates/patches.

• To investigate, resolve or mitigate security incidents in a timely manner.

• To conduct internal vulnerability assessments and remediate identified vulnerabilities.

• To work with external vendor for penetration testing and remediate findings.

• To work with external MDR/SOC providers to detect and follow up on cyber security incidents.

• To work closely with DevOps and Developers to assess, identify and mitigate security vulnerabilities, and integrate security best practices into the software development lifecycle.

• Generation of metrics, reports, relevant information to support compliance status.

• Point of contact for ISO27001, liaise with auditors, perform self-assessment to ensure compliance with company policy and regulatory requirements.

• Develop and maintain information security awareness program.

• Maintain documentation of security system configurations, procedures, and troubleshooting steps.

Job Specifications :

• Diploma or Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related field (or equivalent work experience).

• Relevant experience with security related solutions (Endpoint Security, VPN, Firewall, etc.) and handling of cyber security incidents and associated incident response tools.

• Strong knowledge of operating systems (e.g., Windows, Linux), network protocols, and server hardware.

• Understanding of security principles and best practices, including patch management and vulnerability assessment.

• Strong knowledge of malware families and network attack vectors.

• Good understanding of TCP/IP and internetworking technology including packet analysis, routing, and network security defenses.

• Minimum 2 years of related experience in cyber security or computer network defense role

• Strong understanding of MITRE ATT&CK Framework, NIST Cybersecurity Framework (CSF) and Kill Chain Methodology

• Relevant security-related certifications like CISSP, GCIH, GCIA, GCED, GCFA, CySA+ is a plus

• Good communication skills, with the ability to collaborate effectively with technical stakeholders.

• Strong attention to detail.

KEY ROLES AND RESPONSIBILITIES

• Ensure enhancement of SOC for cyber threats monitoring, detection, analysis and response through the use of threat intelligent and automation

• Project management and Vendors Management

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Synthesize multiple information sources and analysis reports into a holistic view of potential threats

• Conduct in-depth research into cyber security issues of industry- or nation-wide significance

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Develop a playbook for cyber incident management

• Perform the remediation and resolution of cyber incidents at the organizational level

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 3-5 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Advance Persistence Threat Solution

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Familiar with Kill Chain methodology, MITRE Att&ck, NIST Cybersecurity Framework, ISO 27001, 27002 and etc.

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

About the Job

You will be tasked with triaging incidents, conducting investigations, and performing threat hunting. Additionally, you will play a key role in enhancing our threat detection capabilities across a complex organization. Other responsibilities are as follow:

• Conducts triage, incident investigations, and threat hunting.
• Reviews, updates, and creates threat detection rules using SIEM or EDR.
• Reviews, updates, creates playbooks and updates the incident response plan. Automates processes using tools such as SOAR or scripting.
• Delivers timely and relevant updates to appropriate stakeholders.
• Stays current with the evolving threat landscape, tactics, techniques, and procedures (TTPs), and is familiar with industry best practices.

Requirements

You will need min Degree in Computer Science, Information Security, Information Technology, or related field.

• Strong foundation in Cybersecurity and analytics skills with the ability to recognize information from various sources to support investigations.
• Scripting knowledge such as Python will be required.
• Knowledge in forensic analysis will be an added advantage.

R1332781

NCS is the leading technology services firm that operates across the Asia Pacific region in over 20 countries, providing consulting, digital services, technology solutions, and more.

We believe in harnessing the power of technology to achieve extraordinary things, creating lasting value and impact for our communities, partners, and people. Our diverse workforce of 12,000 has delivered large-scale, mission-critical, and multi-platform projects for governments and enterprises in Singapore and the APAC region.

We’re searching for a Security Analyst (Threat Hunter) to be part of our diverse team of talent here at NCS!

If you believe in going above and beyond, embodying excellence, and bringing people and technology together like never before, we would love to have a conversation with you!

What we seek to accomplish together!

• Proactively 'hunt' for potential malicious activity and incidents across the environment using advanced threat network and host-based tools adopting Mitre Attack Framework.
• Perform hunting for malicious activity across the network, endpoint, and Critical Assets.
• Create hunting hypothesis and perform IOCs & TTPs based threat hunting and share reports with the management weekly on the findings, misconfiguration, use case development and provide suggestions for counter measurement.
• Expertise in hunting, managing, and writing detections using logs from Endpoint Detect and Response solutions like Carbon Black EDR, CrowdStrike EDR & Cortex XDR etc.
• Research on different TTP's for ATP Threat groups which are used by attackers during the sophisticated Cyber-attacks.
• Collaborates with technical and threat intelligence team to provide indications and warnings and contributes to predictive analysis of malicious activity.
• Perform cyber security threat hunting & detection activities with specific focus on countermeasure Tactics, Techniques and Procedures (TTPs)
• Contribute to the tuning and development of security information and event monitoring systems (SIEM) use cases and other security control configurations to enhance threat detection capabilities.
• Familiarity with threat modelling, development of attack plans, performing manual & automated Ethical Hacking, & develop proof of concept exploits.
• Evaluates new security technologies and products and performs engineer-level work and analysis to determine if solutions should be pursued.

The Ideal Candidate should ...

• Contribute to securing the organization by enhancing technologies and processes.
• Evaluate security controls against standards, policies, and best practices.
• Improve technology management and perform regular security assessments.
• Build relationships with project and operational teams as needed.
• Exhibit strong technical skills and the capacity to learn new technologies.
• Understand security principles and key technologies, with a focus on sustainable solutions and risk mitigation.
• Analyze sophisticated threats, leveraging knowledge of the threat landscape and cybersecurity fundamentals.
• Utilize forensic analysis and incident response tools to identify and assess threats.
• Have experience in threat hunting, incident response, and familiarity with programming languages like Python and SQL, as well as reverse engineering skills.
• Communicate effectively with diverse groups, reporting key metrics and statuses promptly.
• Possess 2 years and more of highly relevant threat hunting experience.
• Have professional certifications such as GIAC Certified Incident Handler Certification (GCIH) or equivalent

About NCS Group

We aspire to create the extraordinary and impact millions of people every day.

We believe in building a talent-led delivery model to enable our best people to lead, and to support them with the right structure, processes, and tools to ensure that our clients are delivered top quality services.

We want to invest in you!

Great work is never done alone, which is why we believe in fostering a collaborative work environment where people with different expertise and talent can come together.

We provide opportunities for our people to grow within our organization with clearly defined career tracks and specializations, ensuring that our talent and people can continuously deliver new value for our clients.

We’re here to make the extraordinary happen.

Find out more at ncs.co and our LinkedIn career site.

We handle all profiles with the highest level of confidentiality

KEY ROLES AND RESPONSIBILITIES

• Ensure enhancement of SOC for cyber threats monitoring, detection, analysis and response through the use of threat intelligent and automation

• Project management and Vendors Management

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Synthesize multiple information sources and analysis reports into a holistic view of potential threats

• Conduct in-depth research into cyber security issues of industry- or nation-wide significance

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Develop a playbook for cyber incident management

• Perform the remediation and resolution of cyber incidents at the organizational level

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 3-5 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Advance Persistence Threat Solution

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Familiar with Kill Chain methodology, MITRE Att&ck, NIST Cybersecurity Framework, ISO 27001, 27002 and etc.

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

We have an immediate position to be filled. Fresh graduates are welcome to apply to have a feel of what it's like to work in a Security, Network & Service Desk Operations Center.

Qualifications

• Fresh graduates Degree/Diploma/ITE in Computer Science or Information Technology or its equivalent, are welcome to apply
• Preferably with 1-2 years of experience in IT in system, network, and/or application security with knowledge of network and web-related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, BGP and other routing protocols)
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits, application of threat modeling or other risk identification techniques
• Possess basic technical knowledge in IT network infrastructure, server platforms (Unix, Windows platform) and desktops (OS X and Windows XP and the above)
• Excellent teamwork player
• Strong sense of ownership and drive

Tier 1 Functions and Responsibilities:

• Work in a rotational 24/7 environment
• Respond to the incoming enquiries/incident/request/alerts (Call, Email, Webchat, EUP, IVR handling, Monitoring consoles)
• 1st level troubleshooting of in supported systems; i.e. Workplace; Server; Network; Microsoft 365; Secure Access Service Edge; Point of Sale
• Security event monitoring - accurate and rapid response to security events, participate in incident response
• Server and network availability and performance monitoring
• Password reset and unlock
• Perform log & route [to higher tier or Resolver Team(s)]
• Record and manage all transactions/ cases in Service Management System
• Broadcast notifications to the relevant parties
• Provide timely status update, follow up on cases escalated until closure within the service level agreement.
• Ensure daily tasks are executed according to the Standard Operation Procedure

1. Responsibilities

· Strategic planning for IT security investments and technology adoption to maximize effectiveness of IT security controls against rapidly evolving threats.

· Develop and enhance the integrated Security Operations Centre (SOC) for advanced cyber threat monitoring and detection, early warning and active defence capabilities for both the Financial Sector and MAS as an institution.

· Work closely with internal and external stakeholders to manage the operations of the integrated SOC.

· Develop and implement cyber resilience frameworks, standard operating procedures and playbooks for cyber security operations and incident response.

· Ensure that cyber threats, risks and vulnerabilities are appropriately investigated and addressed promptly.

· Coordinate the investigations of cybersecurity incidents with internal teams and cross agency partners.

· Perform periodic management and third-party reporting.

· Work with partners to perform periodic rules tuning, streamline procedures and implement automation to improve efficiency and quality of output.

· Participate in various internal, external and international forums/projects on cyber security.

· Broad understanding of Financial Sectors operations will be provided so that we can better relate the linkages between business and cyber operation.

2. What we are looking for

• Strong interest in SOC operations.

• Hands-on experiences with implementing services/application on Windows and/or Linux preferred.

• Hands-on experiences with prevailing SIEM tools preferred.

• Hands-on experiences with prevailing cloud technologies preferred.

• Scripting/coding skills preferred.

• Normal office hours, but off-office hours standby to respond to exigencies is expected.

• Management of technical projects/implementation is expected.

• Writing of proposals and procurement related work is expected.

My fintech client is looking to grow their IT security team. This is a full time, permanent position

Role

We are looking for a motivated IT Security Analyst to join our team and play a vital role in protecting our organization's IT infrastructure and data. Responsibilities include identifying, assessing, and mitigating IT risks, ensuring compliance with regulations, and supporting IT security operations.

Responsibilities:

• Conduct regular threat, risks, and vulnerability assessments.
• Assess technologies against cybersecurity standards.
• Identify, analyze, and prioritize IT security risks.
• Develop and implement risk mitigation strategies and controls.
• Maintain and update the organization's risk register.
• Stay updated on relevant IT security regulations and standards.
• Develop and implement security policies and procedures.
• Monitor and audit compliance activities and report on status.
• Monitor security logs for suspicious activity and investigate incidents.
• Assist with incident response and security tool deployment.
• Collaborate with IT operations, development, and other units to promote security awareness.
• Provide guidance and training on security policies and procedures.
• Collaborate with external auditors and regulators and prepare management reports on IT security posture.

Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, or related field.
• At least 2 years of experience in IT security, risk management, and compliance.
• Strong understanding of IT security concepts, frameworks, and methodologies.
• Working knowledge of relevant IT security regulations and standards.
• Experience with security tools (e.g., vulnerability scanners, SIEM, IDS/IPS).
• Certifications such as CISA, CISM, or CISSP are advantageous.
• Knowledge in PHP, C++, and Java programming is a plus.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.
• Self-driven, detail-oriented, and able to work independently or in a team.

APPLY NOW! Interviews are ongoing! Email to dayna.chiam@stellar-link.com

We regret to inform that only shortlisted candidates would be notified.

Chiam Lee Ping Dayna

Consultant

Reg. No: R1764404

Stellar- Link Partners Pte Ltd (EA License: 21S0698)

My fintech client is looking to grow their IT security team. This is a full time, permanent position

Role

We are looking for a motivated IT Security Analyst to join our team and play a vital role in protecting our organization's IT infrastructure and data. Responsibilities include identifying, assessing, and mitigating IT risks, ensuring compliance with regulations, and supporting IT security operations.

Responsibilities:

• Conduct regular threat, risks, and vulnerability assessments.
• Assess technologies against cybersecurity standards.
• Identify, analyze, and prioritize IT security risks.
• Develop and implement risk mitigation strategies and controls.
• Maintain and update the organization's risk register.
• Stay updated on relevant IT security regulations and standards.
• Develop and implement security policies and procedures.
• Monitor and audit compliance activities and report on status.
• Monitor security logs for suspicious activity and investigate incidents.
• Assist with incident response and security tool deployment.
• Collaborate with IT operations, development, and other units to promote security awareness.
• Provide guidance and training on security policies and procedures.
• Collaborate with external auditors and regulators and prepare management reports on IT security posture.

Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, or related field.
• At least 2 years of experience in IT security, risk management, and compliance.
• Strong understanding of IT security concepts, frameworks, and methodologies.
• Working knowledge of relevant IT security regulations and standards.
• Experience with security tools (e.g., vulnerability scanners, SIEM, IDS/IPS).
• Certifications such as CISA, CISM, or CISSP are advantageous.
• Knowledge in PHP, C++, and Java programming is a plus.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.
• Self-driven, detail-oriented, and able to work independently or in a team.

APPLY NOW! Interviews are ongoing! Email to dayna.chiam@stellar-link.com

We regret to inform that only shortlisted candidates would be notified.

Chiam Lee Ping Dayna

Consultant

Reg. No: R1764404

Stellar- Link Partners Pte Ltd (EA License: 21S0698)

My fintech client is looking to grow their IT security team. This is a full time, permanent position

Role

We are looking for a motivated IT Security Analyst to join our team and play a vital role in protecting our organization's IT infrastructure and data. Responsibilities include identifying, assessing, and mitigating IT risks, ensuring compliance with regulations, and supporting IT security operations.

Responsibilities:

• Conduct regular threat, risks, and vulnerability assessments.
• Assess technologies against cybersecurity standards.
• Identify, analyze, and prioritize IT security risks.
• Develop and implement risk mitigation strategies and controls.
• Maintain and update the organization's risk register.
• Stay updated on relevant IT security regulations and standards.
• Develop and implement security policies and procedures.
• Monitor and audit compliance activities and report on status.
• Monitor security logs for suspicious activity and investigate incidents.
• Assist with incident response and security tool deployment.
• Collaborate with IT operations, development, and other units to promote security awareness.
• Provide guidance and training on security policies and procedures.
• Collaborate with external auditors and regulators and prepare management reports on IT security posture.

Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, or related field.
• At least 2 years of experience in IT security, risk management, and compliance.
• Strong understanding of IT security concepts, frameworks, and methodologies.
• Working knowledge of relevant IT security regulations and standards.
• Experience with security tools (e.g., vulnerability scanners, SIEM, IDS/IPS).
• Certifications such as CISA, CISM, or CISSP are advantageous.
• Knowledge in PHP, C++, and Java programming is a plus.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.
• Self-driven, detail-oriented, and able to work independently or in a team.

APPLY NOW! Interviews are ongoing! Email to dayna.chiam@stellar-link.com

We regret to inform that only shortlisted candidates would be notified.

Chiam Lee Ping Dayna

Consultant

Reg. No: R1764404

Stellar- Link Partners Pte Ltd (EA License: 21S0698)

Roles & Responsibilities

• Perform Security Event/Threat Monitoring as part of a 24x7x365 Security Operations Centre
• Day to day triaging ticket alerts, analyzing using threat intelligence and escalating when required
• Serve as a technical escalation resource for other SOC Analysts and provide mentoring for junior team members’ skill development
• Act as an incident responder for the Security Operations Center, leading technical investigations of security incidents and providing customers security expertise
• Conducting cyber threat research and analysis for purposes of improving visibility and development of the SIEM use case library and playbooks
• Conduct proactive “Threat Hunting” and investigations in the absence of any known indicator of compromise
• Contribute to the evaluation of new or updated security solutions with engineering
• Support and manage various Endpoint Detection and Response (EDR), Web Application Firewall (WAF), and Network Intrusion Detection (NIDS) solutions

Job Requirements

Hands-on working knowledge with a variety of security technologies and processes including but not limited to:

• 5 years of technical operations experience in Information Security, System Administration, or Network Engineering with at least 3 years of experience in a Security Operations Centre
• Advanced knowledge and expertise using SIEM technologies for event investigation
• Knowledge of Windows Active Directory, Group Policies, PowerShell
• Log analyses for Windows, Linux, Azure/O365/AWS/Google, network and end point security controls
• Knowledge of the MITRE ATT&CK framework to understand adversaries’ tactics and techniques
• Network fundamentals including OSI stack, TCP/IP, DNS, HTTP, SMTP packet capture and analysis
• Solid understanding of OSs including Windows and Linux
• Knowledge of Cloud technologies (AWS, Google Cloud, Azure)
• Knowledge of malware capabilities, attack vectors and impact
• Knowledge and experience in threat analysis
• Experience on: Vulnerability Scanning technologies, Firewalls, VPN technologies, IDS/IPS solutions, Web Application firewalls, Host based intrusion detection systems, Malware analysis and Endpoint Protection, Malware analysis and Endpoint Protection, EDR technologies and Content filtering technologies
• Should have experience in incident response and a working knowledge of IT Service Management disciplines and their application to security operations
• Ability to work in rotating shifts including weekends

Qualifications:

• Diploma / Degree in Computer Science or IT related field
• Preferred SANS GCIH or other equivalent Security certification/accreditation
• Excellent written and verbal communication in English is essential to support client and internal interactions

Responsibilities

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Participate in regular threat focus meetings with fellow SOCs
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assist the Security Analysts with the investigative works
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations thru CESM IE/MCE Rules, DB scripts etc.
• Works with R&D for new signature package for deployment.
• Filtering and fine-tuning the security events flowing to our databases
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Working with engineering team to set up new initiatives i.e. honeypot on the Internet ADSL link to improve security incident detection capabilities
• Monitor real-time third party security feeds, forums, and mailing lists to gather information on vulnerabilities and exploits related to the client
• Assess each event based on factual information and wider contextual information available
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

• SME in Group Information Security Office
• All rounded exposure in application security, cloud security, DevSecOps

Key Responsibilities:

• Offer expert security consultancy, technical guidance, and education to our enterprise.
• Advise on and evaluate application and infrastructure security design for relevance and effectiveness.
• Ensure alignment of security architecture with business strategies and uphold cyber risk management framework.
• Review application security design, driving necessary remediation tasks.
• Develop application security blueprints and training courses to elevate developers’ security awareness.
• Assess security by design principles in Cloud platforms (GCP, AWS, Azure) and integrate security tools seamlessly into DevOps pipelines.
• Ensure adherence to security requirements for low code platforms and conduct threat modeling for critical applications.
• Manage project priorities, deadlines, and deliverables, and assist with ad-hoc duties as required.
• Review RFP proposals for compliance with security requirements.
• Offer expert security consultancy, technical guidance, and education to our enterprise.

Requirements:

• Bachelor degree in IT, computer science or related fields
• 6+ years' experience in information security
• Expertise in application security will be a bonus
• Have in-depth knowledge of secure application development techniques and hands-on experience with security testing tools; good understanding in cyber security threats, vulnerabilities, and hacking methods.
• Possess professional security certifications (CISSP, CSSLP, CEH, CCSP, etc.), preferably.
• Be familiar with Agile, DevSecOps, OWASP Top 10, and cloud security in (Azure / AWS / GCP); experience with technologies like WAF and Anti Bot Protection will be a bonus

If you are interested in the above job or related cybersecurity opportunities, please kindly send your updated CV to Shannagh.Wu@ethosbc.com

Reg No.R23112660
BeathChapman Pte Ltd
Licence no. 16S8112

• Leading regional financial institution
• Focus in Information Security Compliance, Policy & Control
• Open to IT professionals with passion in InfoSec Control and Risk Management

Reporting to Head of Information Security & IT GRC, here are your responsibilities:

• Collaborate with the cybersecurity team to develop and execute the annual information security action plan.
• Establish and maintain an efficient incident reporting and tracking system, overseeing corrective and improvement measures.
• Monitor and provide guidance on the effectiveness of information security workflows and controls.
• Lead information security projects and automation initiatives in Asia.
• Manage outsourcing matters across BUs in Asia and oversee outsourcing requirements
• Conduct annual on-site reviews of BUs in Asia.
• Support compliance efforts under Singapore’s PDPA, including policy communication, query management, and liaison with regulatory authorities.
• Report to the Board and management on adherence to laws, regulations, and information security policies.
• Review and update regional information security and outsourcing policies to ensure compliance.
• Develop training materials to enhance information security awareness.
• Design, develop, and maintain automated compliance and information security workflow management systems.
• Manage regional reporting tools and consolidate results.
• Prepare reports and documents for internal committee meetings.
• Collaborate with the Compliance team on various compliance-related initiatives.

Requirements:

• Bachelor's degree in computer science or related disciplines
• Preferred certifications: CISM and/or CISSP.
• 3+ years of experience in information security or IT risk management
• Strong understanding of information security risks, controls, processes, and trends.
• Experience in project management.
• Familiarity with regional information security regulations and the insurance sector.
• Understanding of Asian cultural and business dynamics.

If you are interested in the above job or related information security opportunities, please kindly send your updated CV to Shannagh.Wu@ethosbc.com

Reg No.R23112660
BeathChapman Pte Ltd
Licence no. 16S8112