Total 773 Information Analyst job vacancies in Legal / Public / Security category in The United States of America

This is a 12 months contract assigned to our client

Work Location: To be confirmed (during interview)

Salary Range : $5,000-$7,500

Job Description

Top Mandatory skills

1. Azure native security

2. Security Incident response

3. Familiar with at least 2 of below security tooling upkeeping:

SIEM, Endpoint Detect and Response, Endpoint Anti-virus, Next Gen Firewall, VA Scanner

Skills which are good to have / optional

1. Hardening CIS benchmark

2. Impact analysis report drafting, testing of patches

3. Government compliance standards familiarity

4. Knowledge on Cloud Application Architecture

Contract Duration: 1st July 2024- Dec 2024

Location: Asai Square Tower

Key Responsibilities:

Restructure our key complex Acts and Regulations in the RI. We propose to break down each key complex Act / Reg into themes and maintain each theme as a Publication of the specific key complex Act / Reg in the RI.

Key Activities include:

• Analysis and structuring of the major Singapore Acts and Regulations (Banking Act, Securities and Futures Act, Financial Advisers Act and associated regulations etc);

• RI enrichment at both publication and obligation levels; and

• Manual mapping of publications and obligations (if required).

Requirements

• Bachelor’s degree; legal experience, and expert in compliance or other control-related function in the financial services firm, regulatory organization, or legal/consulting firm, or a combination thereof; previous experience in Compliance/ Legal, strong working knowledge of function/business/product supported and the related operations and financial requirements
• Expertise in laws, rules, regulations, risks and typologies for Singapore regulations
• Paralegal experience and/or versed in legal analysis, interpretation and its documentation
• Capable to conduct analysis of laws, rules, Regulations, conduct interpretation and understand potential applicability to financial services’ entities
• Understanding of control and compliance risk management
• Ability to articulate complex problems and solutions through concise and clear messaging
• Understanding of the regulatory framework of the country /segments of coverage
• Understanding of financial services and products of the countries of coverage
• Fluent in English
• Proficient in MS Office applications (Excel, Word, PowerPoint)

Interested candidates please share your resuem to shashi@justrecruit.com.sg with all details like current salary, expected salary and notice period

Regards

Shashi (R23112213)

Just Recruit Singapore Pte Ltd (EA12C6295)

IT Cyber Security Analyst & Team Leader - CISSP or CySA+ or MSc Information Security

Weymouth, Dorset, or London, South East UK or Stoke on Trent, Staffordshire

£50,000pa + Hybrid & Flexi-Working & Training & Certifications Available

Weymouth, Dorset, or London, South East UK, or Staffordshire + Hybrid and Flexible Working as Standard

The Client: Are a well-known High St and Online retailer who are seeking a Senior IT Cyber Security Analyst who specialises in Microsoft / Wintel Servers and Virtualisation supporting a UK wide infrastructure.

Objective: You will Lead 2 x Cyber Security Analysts, giving support to the Head of Cyber Security in delivering the Information Security service to the global business.

You will lead all Cyber Security Operations function and be the first point of contact for technical information security related matters.

Role Responsibilities:

• You will Lead 2 x Cyber Security Analysts, giving support to the Head of Cyber Security
• Act as the first point of action or escalation for the identification of security incidents and their investigation.
• Be responsible for the managed Security Operations Centre (SOC), Network Monitoring and Managed Detection and Response services and associated vendor relationships.
• Offer mentoring, advice and guidance to those in your Team
• Be the subject matter expert for technical security related queries, providing the Security Architect, IT Service and Delivery teams and business stakeholders with authoritative advice and defined security requirements.
• Be responsible for the Security Education and Awareness scheme.
• Ensure Cyber Security campaigns are conducted, and improvements implemented and ensure colleague queries around policies and requirements are appropriately answered in a timely manner.
• Be responsible for the Vulnerability Management process.
• Act on vulnerability information and conduct Cyber Security risk assessments and work with suppliers, partners, and internal teams to ensure security vulnerabilities are identified, assessed, and remediated in good time.

Key Requirements you will need:

• In depth knowledge of Information Security concepts and principles, including cloud security capabilities.
• Experience with configuring and utilising security tooling, including SIEM, EDR, vulnerability scanners, CASB, network scanning, DLP.
• Hands-on IT experience with proven expertise in a previous Information Security role.
• Vendor management experience.
• A relevant intermediate or advanced Information Security based qualification (e.g. CISSP, CySA+, MSc Information Security)
• Ability to critically analyse information and make decisions based on judgement, knowledge, and experience.

Business Knowledge:

• Knowledge of Retail and eCommerce is of great advantage but is not essential.
• Working knowledge of the Information Security elements of Data Protection regulations (e.g. GDPR, The Data Protection Act 2018) is essential.
• Knowledge of the NIST Cyber Security Framework is of advantage.
• Awareness of regulations that affect Retail, such as PCI DSS, is of great advantage but experience of maintaining compliance is not essential.

CISSP or CySA+ or MSc Information Security Certifications will be advantageous.

Call 0121 712 8715 today!

1. Experience – Paralegal/ Legal analysis (Banking & Finance Law)
2. Location : Centre
3. Contract : Till end of Dec 2024

Key Responsibilities:

• Analysis and structuring of the major Singapore Acts and Regulations (Banking Act, Securities and Futures Act, Financial Advisers Act and associated regulations etc);
• Regulatory Inventory (RI)enrichment at both publication and obligation levels; and
• Manual mapping of publications and obligations (if required).

Requirements:

• Bachelor's degree in Legal with relevant legal experience, and expert in compliance or other control-related function in the financial services firm, legal/consulting firm
• Expertise in laws, rules, regulations, risks and typologies for Singapore regulations
• Paralegal experience and/or versed in legal analysis, interpretation and its documentation
• Understanding of control and compliance risk management
• Ability to articulate complex problems and solutions through concise and clear messaging
• Understanding of the regulatory framework of the country /segments of coverage
• Understanding of financial services and products of the countries of coverage
• Proficient in MS Office applications (Excel, Word, PowerPoint)
• Analytical skill and result driven

Send your Cv to linda@forteemp.com.sg

Business Function

Group Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibilities

• Administration and management (technical operations) of firewall infrastructure
• Evaluate and upgrade firewall hardware and/or firmware
• Coordinate with vendor, deploy, configure and manage Firewall devices according to system engineering design
• Coordinate with information security governance team to align IT infrastructure with established standards
• Ensures system compliance with all established information security policies
• Perform period health check and tuning of firewall devices
• Performs technical assessment of any non-well defined or complex firewall change requests prior to implementation
• Performs regular review of firewall rulebases and recommend necessary optimization actions
• Assists Level 1 Support Engineers during problem determination and resolution whenever necessary.
• Planning and recommending overall improvements in firewall management
• Device Access management
• Advanced troubleshooting production problems with RCA and fault diagnosis
• Performance and historical trend analysis
• Implements changes to firewall infrastructure hardware in order to correct errors or enhance functionality
• Develops processes for improving operational efficiencies, as well as identifies/implements automation tools for existing manual processes.
• Prepares technical reports, memoranda, and instructional manuals as documentation of network design and operational requirements.
• Management of network daily activities; incident and problem management
• Responsible to work with respective team members on the review of network architecture and design
• Responsible to work with the respective server and application team's members
• Responsible to work with the respective network vendor's teams for the trouble-shooting, identification and resolution of network problems
• Responsible for network devices, as well as appliances, vulnerability review and assessment.
• Responsible for network devices, as well as appliances, change implementation review and assessment
• Responsible to conduct pre / post implementation plan review
• Responsible to conduct and train Level 1 engineers, i.e. to empower and equipped the L1 engineers with the knowledge to run and maintain Data center network
• Coordinate with information security governance team to align IT infrastructure with established standards
• Change requests prior to implementation
• Advanced troubleshooting production problems with RCA and fault diagnosis
• Design and monitor operations metrics on a monthly basis to keep track of key operation metrics
• Ready to work in shifts including public holidays
• Ready to be on call for 24x7 support during shifts

Requirement

• Experience: Minimum 8 years firewall operations and/or management role
• Certification : CCSA, CCSE, JNCIA-FWV, JNCIA-SEC, JNCIS-SEC (Preferred but not mandatory CISSP, CISM, ITIL Foundation)
• Checkpoint Firewalls, Juniper Netscreen / SRX Firewalls, VPN Technologies, DNS, NTP, 2 Factor Authentication technologies.
• Ability to work independently or as a team player.
• Experience in highly complex data center network design and support
• Experience with Cisco and Arista products specially DCI technology
• Experience with Cisco and Arista Software Define network (ACI, DNAC, etc)
• Strong hands on experiences on Fabric Patch, OTV, VPC+, Vxlan, Mlag, MP-BGP
• Knowledge and experience in employing and using various networking trace tools, i.e. Sniffer, Wireshark, riverbed net profiler, NetBrain, Gigamon and etc.
• Pro-active, dynamic and with good analytical/conceptual thinking.
• Certifications such as CCIE or above level in networking is an advantage
• Python or Linux shell scripting skill is a plus

Apply Now

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognises your achievements.

My fintech client is looking to grow their IT security team. This is a full time, permanent position

Role

We are looking for a motivated IT Security Analyst to join our team and play a vital role in protecting our organization's IT infrastructure and data. Responsibilities include identifying, assessing, and mitigating IT risks, ensuring compliance with regulations, and supporting IT security operations.

Responsibilities:

• Conduct regular threat, risks, and vulnerability assessments.
• Assess technologies against cybersecurity standards.
• Identify, analyze, and prioritize IT security risks.
• Develop and implement risk mitigation strategies and controls.
• Maintain and update the organization's risk register.
• Stay updated on relevant IT security regulations and standards.
• Develop and implement security policies and procedures.
• Monitor and audit compliance activities and report on status.
• Monitor security logs for suspicious activity and investigate incidents.
• Assist with incident response and security tool deployment.
• Collaborate with IT operations, development, and other units to promote security awareness.
• Provide guidance and training on security policies and procedures.
• Collaborate with external auditors and regulators and prepare management reports on IT security posture.

Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, or related field.
• At least 2 years of experience in IT security, risk management, and compliance.
• Strong understanding of IT security concepts, frameworks, and methodologies.
• Working knowledge of relevant IT security regulations and standards.
• Experience with security tools (e.g., vulnerability scanners, SIEM, IDS/IPS).
• Certifications such as CISA, CISM, or CISSP are advantageous.
• Knowledge in PHP, C++, and Java programming is a plus.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.
• Self-driven, detail-oriented, and able to work independently or in a team.

APPLY NOW! Interviews are ongoing! Email to dayna.chiam@stellar-link.com

We regret to inform that only shortlisted candidates would be notified.

Chiam Lee Ping Dayna

Consultant

Reg. No: R1764404

Stellar- Link Partners Pte Ltd (EA License: 21S0698)

This is a 12 months contract assigned to our client

Work Location: To be confirmed (during interview)

Salary Range : $5,000-$7,500

Job Description

Top Mandatory skills

1. Azure native security

2. Security Incident response

3. Familiar with at least 2 of below security tooling upkeeping:

SIEM, Endpoint Detect and Response, Endpoint Anti-virus, Next Gen Firewall, VA Scanner

Skills which are good to have / optional

1. Hardening CIS benchmark

2. Impact analysis report drafting, testing of patches

3. Government compliance standards familiarity

4. Knowledge on Cloud Application Architecture

Cyber Security Analyst Role Type: Ongoing, full-time opportunity. Clerk Grade: 07/08 The package includes a base salary range of $ 106,025 to $117,363 plus employer’s contribution to superannuation and annual leave loading. Location: Sydney or Bathurst Cyber Security NSW is looking for a Strategic Intelligence Cyber Security Analyst, to join our Intelligence and Response Team. The Intelligence and Response Team leads and coordinates intelligence and the NSW Government response to cyber incidents and events across all of NSW Government. The team combines both cyber security knowledge and processes with intelligence methodologies to monitor, assess and report on the cyber threat landscape and supports NSW Government responses to cyber security issues, risks and threats. The Strategic Intelligence team works closely with the Operational Intelligence Team and Incident Response team to provide expert advice and intelligence on the cyber threat environment impacting NSW Government and local council entities both individually, by sector and as a whole.  The…

Click here to view more detail / apply for Cyber Security Analyst

Full time permanent - Government agency - Cyber Security Analyst Your new company This government agency is looking for a Cyber Security Analyst to join their cyber security team in a full-time permanent role. You will have the opportunity of working for a government organisation located in Sydney CBD. Your new role As a Cyber Security Analyst, your role is to safeguard the information and systems of the institution from cyber threats. This involves tracking, examining and reporting on various security events, as well as handling escalations from the external security services provider to help in detecting and responding to security incidents, and managing cyber security products. You will also be responsible for:

Analyse and continually monitor security events and escalations from the managed security service provider and other network and endpoint security systems to identify potential threats and vulnerabilities, aid in remediation activities
Assist with vulnerability assessment scanning, reporting processes and tracking remediation of discovered vulnerabilities
Support the Cyber Security Team in the timely management of cyber security incidents, including assisting in implementing mitigation measures and reporting to internal stakeholders

What you'll need to succeed As a Cyber Security Analyst, you will be required to possess the following skills and experience:

Demonstrated experience in Email and Web Security, Endpoint Detection and Response and Microsoft 365 Security products
Demonstrated knowledge of ISO27001 and ACSC Essential 8 framework
Demonstrated experience in administration of technical tools to support security operations (SIEM, Advanced Threat Detection, Vulnerability Management, Firewalls, IDS, IPS, WAF, EDR)
Excellent written and verbal communication skills.

What you'll get in return

Full time permanent role with a government agency
Hybrid work environment
Great culture and a flexible workplace

What you need to do now You must have full working rights in Australia to apply for this role. If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or contact Lola Costa on 02 9249 2286 or Lola.Costa@hays.com.au for further information. If this job isn't quite right for you but you are looking for a new position, please contact us for a confidential discussion on your career. Please click here to apply.

Cyber Security Analyst Back to search results Apply now Job Number: 80629-184570 Work type: Permanent - Full Time Location: Brisbane Categories: Information Technology Location:  Brisbane About the role: Join Aurizon's Cyber Security Group as a Cyber Security Analyst! In this role, you'll play a crucial part in safeguarding Aurizon's assets from cyber security threats by implementing effective cyber security controls and maintaining a highly capable incident detection and response capability. Key Responsibilities: Onboard new data sources and asset types to the SIEM/logging solutions. Analyse the latest malware and vulnerability discoveries to enhance Aurizon's capabilities. Tune existing detection rules to maximize threat and incident detection capability. Develop enhanced detection rules and capabilities, with a focus on automating defence capabilities where possible. Create playbooks and response strategies for detection rules. Improve the ingestion, consolidation, and utilization of threat intelligence within existing SOC operations. Support the existing threat hunting program within SOC operations. Assist in all incident response…

Click here to view more detail / apply for Cyber Security Analyst

Job Description:

•Support and maintain security tools including Endpoint Security, SIEM, IPS/IDS, Email Security, NGFW, DLP, Security Assessment.

•Administration of information security systems and devices, review audit logs and security alerts.

• Perform activities related to IT security, including installation, configuration changes, and updates/patches.

• To investigate, resolve or mitigate security incidents in a timely manner.

• To conduct internal vulnerability assessments and remediate identified vulnerabilities.

• To work with external vendor for penetration testing and remediate findings.

• To work with external MDR/SOC providers to detect and follow up on cyber security incidents.

• To work closely with DevOps and Developers to assess, identify and mitigate security vulnerabilities, and integrate security best practices into the software development lifecycle.

• Generation of metrics, reports, relevant information to support compliance status.

• Point of contact for ISO27001, liaise with auditors, perform self-assessment to ensure compliance with company policy and regulatory requirements.

• Develop and maintain information security awareness program.

• Maintain documentation of security system configurations, procedures, and troubleshooting steps.

Job Specifications :

• Diploma or Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related field (or equivalent work experience).

• Relevant experience with security related solutions (Endpoint Security, VPN, Firewall, etc.) and handling of cyber security incidents and associated incident response tools.

• Strong knowledge of operating systems (e.g., Windows, Linux), network protocols, and server hardware.

• Understanding of security principles and best practices, including patch management and vulnerability assessment.

• Strong knowledge of malware families and network attack vectors.

• Good understanding of TCP/IP and internetworking technology including packet analysis, routing, and network security defenses.

• Minimum 2 years of related experience in cyber security or computer network defense role

• Strong understanding of MITRE ATT&CK Framework, NIST Cybersecurity Framework (CSF) and Kill Chain Methodology

• Relevant security-related certifications like CISSP, GCIH, GCIA, GCED, GCFA, CySA+ is a plus

• Good communication skills, with the ability to collaborate effectively with technical stakeholders.

• Strong attention to detail.

Responsibilities：

• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure)
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to to ensure compliance and regulatory requirements and industry standards

Requirements;

• Diploma/degree in computer studies
• 2 years of experience working in a security operations, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role
• Willing to work in rotational shift environment (including weekends and night shift).

About the role

The position is part of our SOC team, and is responsible for real time security event monitoring and security incident investigation.

Responsibilities:

• Continuously monitor security alerts queue and perform initial triage to identify any false positives and initiate escalations as necessary.
• Monitors health of security sensors and managed infrastructure, and provide necessary support, including onsite troubleshooting, root cause analysis, incident reports.
• Manage ticket queue and take ownership and responsibility of tickets assigned, within agreed SLA.
• Collects data, evidence, and context necessary for Level 2 escalation.
• Works closely with Level 2 & Level 3 team towards the continuous improvement of the service.
• Ensure that daily operations and tasks are properly completed or followed up.
• Escalate issues and liaise with subject matter experts as required to resolve issues.
• Support After-office hours activities and standby requirements as necessary.
• Prepare scheduled and ad-hoc report and documentation.

Candidate requirements:

• Diploma/Degree in Computer Science/Computer Engineering/Information Engineering/Cybersecurity or equivalent.
• At least 2 years hands-on experience with security solutions and tools such as Firewall, Proxy, EDR, PAM, IDS/IPS, SIEM, DLP, CASB etc.
• Basic understanding of common networking protocols and system infrastructure.
• Strong analytical, problem solving and interpersonal skills.
• Keen Interest in cyber security domain and developing skillsets in new technologies.
• Proficiency in one or more general-purpose programming languages (Perl, Python, PHP, Shell, .Net or Java etc) will be a plus.
• Ability to work independently, under the general guidance.
• Support after office hour and during weekend/public holiday.
• Working experience and knowledge on system infrastructure with interest of exploring security product also welcome to apply.
• Leadership roles are available for engineers with relevant experience in cybersecurity domain.

Responsibilities：

• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure)
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to to ensure compliance and regulatory requirements and industry standards

Requirements;

• Diploma/degree in computer studies
• 2 years of experience working in a security operations, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role
• Willing to work in rotational shift environment (including weekends and night shift).

About the Team The role will be integrated into the Information Security and IT organisations within Rheinmetall and will report to the Governance and Information Security Manager in Australia as part of a small but well established team. About the Role The role is well suited to someone who displays a keen eye for detail, is happy to contribute in group discussions and has a passion for Information Security or Governance. As Information Security (InfoSec) Advisor, you can anticipate some of your day-to-day tasks to include: Provide guidance to Rheinmetall regarding the Information Security Management System and ensuring compliance with Information Security Policy, Standards, Regulations and Legislation; Support Information Securities development within RDA and help to implement a strong security culture; Develop and/or review Information Security Standards, Policies and Procedures; Support the implementation and management of Security Tools & Solutions; Development and participation in Projects, Consulting and Support of Departments in Information Security matters; Evaluation…

Click here to view more detail / apply for Information Security Advisor