Total 33 Senior Executive information technology job vacancies in Legal / Public / Security category in Singapore

Leadership Provide leadership and direction to the information security and business continuity service, including wider directorate and business teams Mentor and coach others, helping to develop our long-term capability including identify capability gaps and solutions Contribute to the development of long-term strategic plans for information security and business continuity, identifying risks and issues and developing mitigation strategies with clear outcome measures.Communicating between the technical and non-technical Identify the needs of business and technical stakeholders. Effectively manage stakeholder expectations. Demonstrate excellent communication skills and can manage difficult conversations or negotiations, including highly complex, sensitive and/or contentious information. Represent information security and business continuity on various internal and external groups.Data protection and freedom of information Support information gathering and creating supporting narrative / recommendations for complex data protection and freedom of information requests. Conduct information system searches and investigations that are highly complex / sensitive in nature, to meet data protection or freedom of information needs. Provide advice and expert knowledge to projects / programmes / operational services to ensure that information systems are designed to meet data protection requirements.Financial management Understand how to balance cost versus value. Consider the impact of user needs. Contribute and develop economic investment cases for information security including financial models for implementation, and running of servicesGovernance and assurance Evolve and define governance. Take responsibility for working with and supporting other staff in wider governance. Assure services across sets of services. Use tools such as standards, guardrails, and principles to effectively govern delivery.Information Security and Business Continuity Demonstrate in-depth knowledge of information security and business continuity, including analysing + testing Trust-wide capabilities and identifying improvement areas. Ensure that our security posture is maintained, monitored/measured and be responsible for leading interventions where standards are not met (example: security patching). Develop, maintain, and improve our data and technology Business Continuity & Disaster Recovery Plans, enabling us to respond to and recover from business continuity events ensuring we can provide a safe level of service to the public during the event, and ensuring we can manage the recovery process and incorporating learning. Lead vulnerability audits, security & penetration tests, forensic audits, or related investigations ensuring all findings are evaluated, and where appropriate, fed into continuous service improvement activities to continuously improve our security posture and resilience. Responsible for ensuring standards around information security and business continuity are embedded into service design. Provide subject matter expertise in major incidents, cyber security incident and/or events caused by or affecting information security. Act as the Problem Owner for highly complex, or sensitive information security matters (from identification through to resolution). Undertake Data Protection Impact Assessment (DPIA) and Information Security Assessment (ISA) activities, including supply chain / 3rd party assessments, aligned with projects / operational services. Maintain and improve the Information Security Assessment lifecycle, and Information Risk Management documentation for IT systems and data. Ensure that access to Trust systems is appropriately managed, regularly audited, and lead investigations as required. Provide expert advice on information transfer agreements with partner organisations in support of the Information Governance function. Partner with the Organisational Development and Information Governance teams and support the delivery of information security awareness and training.Making and informing risk-based decisions Make decisions characterised by managed levels of risk and complexity and recommend decisions as risk and complexity increase. Resolve disputes between wider peers and indirect stakeholders, considering all views and opinions.Policies, procedures, and processes Develop, maintain, and improve all directorate information security and business continuity policies & procedures, considering regional and national policies and practices, ensuring that both manual and electronic information across the Trust is included in-scope. Including, but not limited to DSPT, NIS, ISO / IEC series standards, cyber essentials, etc.Risk management Conduct information security risk assessments and control selection activities. Responsible for the management of information security and business continuity risks (for technology and data), including identifying new risks and ensure we are actively managing risk controls (for your portfolio that you are leading on).Service focus, monitoring, and reporting See the bigger picture and investigate how to get the best out of the underlying services to support the organisations strategic objectives and business priorities. Take complex reporting data from multiple sources, compare, and interpret against service baseline and industry standards and provide a supporting narrative. Responsible for service reporting for information security and business continuity, in-line with Trust-agreed reporting measures (example: security dashboard, security operations centre performance, etc). Ensure we comply with external reporting for information security and business continuity (example: NHS Cyber Alerts).Strategy Apply strategy, using and challenging patterns, standards, policies, roadmaps, and vision statements. You can provide guidance. Evaluate current information security and business continuity strategies to ensure business requirements are being met and exceeded where possible Responsible for managing and updating underpinning / enabling information security strategies that support the business objectives Ensure alignment of operating procedures and policies in-line with national, sector (ICS) and industry best practice where it makes sense to do so.Understanding the whole context Understand trends and practices outside your team and how these will impact your work. See how your work fits into the broader strategy and historical context. Consider the patterns and interactions on a larger scale.User focus Explain the difference between user needs and the desires of the user. Champion user research to focus on all users. Prioritise and define approaches to understand the user story, guiding others in doing so. Offer recommendations on the best tools and methods to use.Community of practice Develop and maintain a network of professionals to enable continuous learning and a community which can share, learn, and keep up to date on the information security and business continuity landscape, within the wider Digital, Data and Technology teams. Other Duties: Deputise for the Head of Information Security & Business Continuity as required. Occasional work may be required outside of core business hours to support major projects / programmes. All other reasonable requests

This role is part of our Information Security & Business Continuity team, responsible for:
• Ensuring the protection of the information in our organisation throughout the information lifecycle - that ensures the confidentiality, integrity, purpose, and availability of information, so that the organisation’s information is safeguarded from unauthorized access and misuse.
• Ensuring the availability of minimum services at a sufficient level for the business to sustain in the event of disasters.
• Horizon scanning across industry, identifying emerging trends and their potential impact and opportunity for the organisation.
The team has operational responsibility for security tooling and data (examples, but not limited to – anti-virus and intrusion prevention, security assurance platforms, security testing and monitoring platforms, etc) and for our managed services (security operations centre).
You will put people at the heart of everything you do – with a relentless focus on user experience and ensuring all our user needs are met across sites at Moorfields Eye Hospital NHS Foundation Trust.
With the ever-increasing need and interest in the use of digital technology in healthcare, you will be part of a team of Digital, Data and Technology experts that delivers service improvements and keeps at the forefront of new technology.

At this role level, you will:
• Responsible practitioner for multiple information security and business continuity services that are highly complex and high risk, ensuring performance and quality measures are aligned with business outcomes, and met.
• Define strategies and be central to assuring multiple services – improving the security and resilience of our organisational infrastructure.
• Regularly collaborate and find agreement with senior stakeholders, providing direction and challenge
• Be proactive in identifying problems and translating these into non-technical descriptions that can be widely understood.
In your role you will partner with other technology and data teams in the organisation. It is expected alongside specialist information security and business continuity skills and experience, you will have generalist or specialist experience in multiple domains:
• Cloud operations
• Data management
• Domain directory services
• Data storage and management
• Datacentre operations
• Device management
• Network security and operations
• Server architecture

At Moorfields, we provide more than just an excellent career and great colleagues to work with. We also offer:
• Salary including High-Cost Area Supplement
• Opportunity to join the NHS Pension Scheme
• Free 24/7 independent counselling service
• Learning and development opportunities
• Easy and quick transport links
• A range of attractive benefits and discounts
• Access to Blue Light Card and other NHS Discount Schemes
• Free Pilates classes
• Full support and training to develop your skills
• Flexible working friendly organisation
And so much more! To see the full range of benefits we offer please see our Moorfields benefits document.

Leadership
• Provide leadership and direction to the information security and business continuity service, including wider directorate and business teams
• Mentor and coach others, helping to develop our long-term capability including identify capability gaps and solutions
• Contribute to the development of long-term strategic plans for information security and business continuity, identifying risks and issues and developing mitigation strategies – with clear outcome measures.
Communicating between the technical and non-technical
• Identify the needs of business and technical stakeholders.
• Effectively manage stakeholder expectations.
• Demonstrate excellent communication skills and can manage difficult conversations or negotiations, including highly complex, sensitive and/or contentious information.
• Represent information security and business continuity on various internal and external groups.
Data protection and freedom of information
• Support information gathering and creating supporting narrative / recommendations for complex data protection and freedom of information requests.
• Conduct information system searches and investigations that are highly complex / sensitive in nature, to meet data protection or freedom of information needs.
• Provide advice and expert knowledge to projects / programmes / operational services to ensure that information systems are designed to meet data protection requirements.
Financial management
• Understand how to balance cost versus value.
• Consider the impact of user needs.
• Contribute and develop economic investment cases for information security – including financial models for implementation, and running of services
Governance and assurance
• Evolve and define governance.
• Take responsibility for working with and supporting other staff in wider governance.
• Assure services across sets of services.
• Use tools such as standards, guardrails, and principles to effectively govern delivery.
Information Security and Business Continuity
• Demonstrate in-depth knowledge of information security and business continuity, including analysing + testing Trust-wide capabilities and identifying improvement areas.
• Ensure that our security posture is maintained, monitored/measured and be responsible for leading interventions where standards are not met (example: security patching).
• Develop, maintain, and improve our data and technology Business Continuity & Disaster Recovery Plans, enabling us to respond to and recover from business continuity events – ensuring we can provide a safe level of service to the public during the event, and ensuring we can manage the recovery process and incorporating learning.
• Lead vulnerability audits, security & penetration tests, forensic audits, or related investigations – ensuring all findings are evaluated, and where appropriate, fed into continuous service improvement activities to continuously improve our security posture and resilience.
• Responsible for ensuring standards around information security and business continuity are embedded into service design.
• Provide subject matter expertise in major incidents, cyber security incident and/or events caused by or affecting information security.
• Act as the Problem Owner for highly complex, or sensitive information security matters (from identification through to resolution).
• Undertake Data Protection Impact Assessment (DPIA) and Information Security Assessment (ISA) activities, including supply chain / 3rd party assessments, aligned with projects / operational services.
• Maintain and improve the Information Security Assessment lifecycle, and Information Risk Management documentation for IT systems and data.
• Ensure that access to Trust systems is appropriately managed, regularly audited, and lead investigations as required.
• Provide expert advice on information transfer agreements with partner organisations in support of the Information Governance function.
• Partner with the Organisational Development and Information Governance teams and support the delivery of information security awareness and training.
Making and informing risk-based decisions
• Make decisions characterised by managed levels of risk and complexity and recommend decisions as risk and complexity increase.
• Resolve disputes between wider peers and indirect stakeholders, considering all views and opinions.
Policies, procedures, and processes
• Develop, maintain, and improve all directorate information security and business continuity policies & procedures, considering regional and national policies and practices, ensuring that both manual and electronic information across the Trust is included in-scope. Including, but not limited to – DSPT, NIS, ISO / IEC series standards, cyber essentials, etc.
Risk management
• Conduct information security risk assessments and control selection activities.
• Responsible for the management of information security and business continuity risks (for technology and data), including identifying new risks and ensure we are actively managing risk controls (for your portfolio that you are leading on).
Service focus, monitoring, and reporting
• See the bigger picture and investigate how to get the best out of the underlying services to support the organisations’ strategic objectives and business priorities.
• Take complex reporting data from multiple sources, compare, and interpret against service baseline and industry standards and provide a supporting narrative.
• Responsible for service reporting for information security and business continuity, in-line with Trust-agreed reporting measures (example: security dashboard, security operations centre performance, etc).
• Ensure we comply with external reporting for information security and business continuity (example: NHS Cyber Alerts).
Strategy
• Apply strategy, using and challenging patterns, standards, policies, roadmaps, and vision statements. You can provide guidance.
• Evaluate current information security and business continuity strategies to ensure business requirements are being met and exceeded where possible
• Responsible for managing and updating underpinning / enabling information security strategies that support the business objectives
• Ensure alignment of operating procedures and policies in-line with national, sector (ICS) and industry best practice – where it makes sense to do so.
Understanding the whole context
• Understand trends and practices outside your team and how these will impact your work.
• See how your work fits into the broader strategy and historical context.
• Consider the patterns and interactions on a larger scale.
User focus
• Explain the difference between user needs and the desires of the user.
• Champion user research to focus on all users.
• Prioritise and define approaches to understand the user story, guiding others in doing so.
• Offer recommendations on the best tools and methods to use.
Community of practice
• Develop and maintain a network of professionals to enable continuous learning and a community which can share, learn, and keep up to date on the information security and business continuity landscape, within the wider Digital, Data and Technology teams.
Other Duties:
• Deputise for the Head of Information Security & Business Continuity as required.
• Occasional work may be required outside of core business hours to support major projects / programmes.
• All other reasonable requests


This advert closes on Wednesday 13 Nov 2024

As an Information Security Engineer, you will be working on a team responsible for architecting, building, and scaling our global cryptographic security infrastructure systems. This role involves working with Security Architecture and ServiceNow product teams to design and deliver secure cryptographic infrastructure at scale.  

What you get to do in this role

• Define, configure, deliver, and operate cryptographic security services across our private and public cloud infrastructure.

• Work with Product and Program management to define and communicate the team's external commitments and roadmap.

• Assess risks, vulnerabilities, and mitigations of existing systems to ensure these systems are highly available, operationally sound, perform at scale, and exceed customer expectations.

• Collaborate with peer teams on complex, global engineering efforts to ensure architecture agreement, resource coordination, and implementation timelines.

• Set and sustain technical standards and best-practices in your domain.

• Work with vendors for cryptographic security services and technologies.

• We provide competitive compensation, generous benefits, and a professional atmosphere. This is a very collaborative and inclusive work environment where individuals strong on aptitude and attitude will have an opportunity to grow their professional careers through working with some of the most advanced technology and talented developers in the business.  

The Senior Information Security Analyst is an intermediate level position responsible for leading efforts to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.

Responsibilities:

• Identify potential information security (IS) risks and make recommendations for enhancement
• Collect and analyze security risk evidence and coordinate with internal and external compliance and auditing agencies / officials
• Execute meetings and communicate complex security topics and safe IS practices with all levels of the organization
• Ensure that controls are utilized daily and that non-compliance remediation is addressed
• Provide IS consulting services, including interpreting and/or clarifying information security policy, procedures, standards or concepts
• Assist with defining and implementing IS standards to align procedures and practices in compliance with Citi standards
• Educate and advise on safe information security practices and current, changing, and/or recommended information security requirements
• Validate compliance with IS policies, practices, and procedures, and resolve a variety of IS related issues in coordination with the business
• Assume informal/formal mentorship role within teams and assist with the coaching and training of new team members
• Has the ability to operate with a limited level of direct supervision.
• Can exercise independence of judgement and autonomy.
• Acts as SME to senior stakeholders and /or other team members.
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

Qualifications:

• 5-8 years of relevant experience
• Applicable Certifications or willingness to earn within 12 months of joining
• Consistently demonstrates clear and concise written and verbal communication
• Proven influencing and relationship management skills
• Proven analytical skills

Education:

• Bachelor’s degree/University degree or equivalent experience

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will assist in the end to end implementation of security solutions for our clients and support our clients in their desire to protect the business.

The Opportunity

This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, advising stakeholders, providing workshops and supporting business development. If you’re flexible and ready to adapt to a constantly changing environment, there’s no better place to develop your skills. Since you’ll be working directly with clients, some travel will be required.

Your Key Responsibilities

As a Cyber Security Operations consultant, you will be part of the team to assess, design, build, implement and manage security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience.

Skills and Attributes for Success

• Familiarity with Security Information and Event Management (SIEM) solutions.
• Experience with network security monitoring and incident response activities.
• Ability to process impacts of activities and be able to collaborate with IT operations and Cybersecurity teams on mitigations and remediations.
• Ability to apply cybersecurity and privacy principles to organizational requirements.
• Ability to create standard operating procedures and other similar documentation.

To Qualify for the role, you must have

• A recognized university degree in Computer Science, Computer/Electrical Engineering, Information Technology or equivalent
• At least 3 years of relevant experience. Preferably with a year experience in business consulting role in a leading consultancy firm
• Strong interest in the field of information security
• Creative, independent with good problem-solving skills
• Excellent communicator with strong analytical, interpersonal and writing skills

Ideally, you’ll also have

• Industry related certification preferred (e.g. CISSP, CISA, CISM, SABSA, PRINCE2, TOGAF, ITIL).
• Solution Level Certifications, OSCP, CREST, GIAC would be advantageous, as well as penetration testing experience.

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.

What we offer

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

Apply now.

My client within the tech space is hiring for a Senior Legal Counsel - APAC

The Role

• Acting as a Legal business partner for all in-region commercial transactions, with a strong focus on sales in Singapore.
• Structuring, negotiating and drafting sales, partner and vendor contracts and related agreements which can range from standard contracts to bespoke, complex and enterprise transactions.
• Advising sales leaders and other business team members on general legal and contract specific issues and risks, their impact and mitigating actions.

To Qualify

• Degree in Law with minimum 5 - 8 years of experience in related field is required
• Excellent legal & contract analytical skills with a good eye for detail
• Excellent drafting capabilities and negotiation/ communication skills

To Apply

If you feel your experience and professionalism can make an impact with this firm, please submit your details resume to hsingh@sg.drakeintl.com

Personal data provided by job applicants will be used strictly in accordance with the employer's personal data policies, a copy of which will be provided.

*Only shortlisted candidate will be notified.

Registration No. R1658237 | EA License No. 11C3510 | Drake International

You may also register at our company website https://sgjobs.drakeintl.com/jobs/

Or like us on Facebook www.facebook.com/drakesgtemp/ for more job opportunity!!!

We are seeking a highly skilled and experienced Information Security Engineer to join our dynamic team. The ideal candidate will possess extensive hands-on experience in Cloud/Azure infrastructure with a strong focus on networking, system hardening, and security operations.

 

This role is essential for maintaining the security and integrity of our enterprise infrastructure, encompassing a broad range of responsibilities and technologies, including cloud environments, antivirus solutions, DLP, network intrusion detection/prevention systems, firewalls, email security gateways, and more.

 

The successful candidate will bring a deep understanding of cybersecurity principles, experience with incident response, and the ability to work collaboratively with various stakeholders. This is an excellent opportunity for a seasoned professional to contribute to the ongoing enhancement of our security posture in a fast-paced and evolving environment.

 

Key Responsibilities:

• Security Monitoring & Incident Response:
  • Develop and integrate security event monitoring and incident management services.
  • Respond to security incidents as they occur, participating actively in incident response teams.
  • Assist with playbook automation and case management to streamline security operations.
• Infrastructure Security Management:
  • Implement and maintain a baseline of system security, informed by the latest threat intelligence and industry trends.
  • Regularly review and assess cybersecurity tools, identifying gaps, and recommending improvements.
  • Maintain and manage Microsoft directory services (both on-prem and cloud-based).
  • Support and mentor Junior Analysts in managing Security Operations Center (SOC) systems.
• Cloud and Network Security:
  • Implement conditional access policies, zero trust architecture, system hardening, and least privilege access controls.
  • Oversee the configuration, management, and auditing of security tools including EDR, vulnerability management, firewalls, and secure email gateways.
• Process Development & Documentation:
  • Produce and maintain detailed documentation to ensure the standardization and repeatability of security procedures.
  • Develop additional investigative methods using a wide range of toolsets to enhance threat detection and analysis.
  • Liaise with SOC engineers to maintain up-to-date security alert dashboards, facilitating faster incident response.
• Strategic Security Guidance:
  • Provide Subject Matter Expertise (SME) on a broad range of information security standards and best practices.
  • Offer strategic and tactical security guidance, including the evaluation of technical controls and risk assessments.
  • Participate in root cause analysis of incidents, working with engineers across the enterprise to improve security resilience.

 

ABOUT THE NATIONAL INSTITUTE OF EDUCATION (NIE)

The National Institute of Education (NIE), Singapore, is Singapore’s national teacher education institute and we are proud to be an integral part of the nation’s education service. We play a key role in the preparation of teachers and in the provision of teacher professional and school leadership development programmes. We are committed to our vision of being An Institute of Distinction: Leading the Future of Education and our mission to Inspire Learning, Transform Teaching and Advance Research.

NIE invites suitable candidates to join the Division of Academic Computing & Information Services (ACIS) as a Senior IT Security Analyst (3-year contract).

Key Responsibilities:

Incident Response Leadership

• Oversee the entire incident response lifecycle from detection to resolution.
• Lead investigations of IT security incidents and ensure thorough root cause analysis and remediation.
• Develop and maintain incident response playbooks and procedures.
• Coordinate with internal, external stakeholders, and vendors during incidents.
• Conduct post-incident reviews and report findings to management.

Monitoring and Detection

• Develop and implement advanced threat detection and monitoring strategies.
• Utilize SIEM, EDR, and other security tools for timely incident detection.
• Perform threat hunting and proactive security assessments.
• Collaborate with IT teams to deploy and optimize security solutions.

AI and Automation

• Integrate AI and automation technologies to enhance security operations.
• Develop automated workflows and scripts for incident response and routine tasks using SOAR.
• Leverage machine learning and AI-driven tools for threat detection and analysis.
• Stay updated with advancements in AI and evaluate their applicability to security operations.
• Apply system design thinking to security solutions.

Threat Statistics and Reporting

• Analyze and compile statistics on threats relevant to the Institute.
• Prepare and present detailed reports on threat statistics to stakeholders.
• Use data visualization tools to communicate threat trends and insights.

Innovation and Continuous Improvement

• Evaluate and integrate new technologies to enhance security operations.
• Foster a culture of continuous improvement within the team.
• Encourage continuous learning and professional development.

Forensics Capability Development

• Enhance the team's digital forensics capabilities.
• Develop forensic investigation procedures and protocols.
• Train team members in forensic tools and methodologies.
• Oversee the collection, preservation, and analysis of digital evidence.
• Collaborate with legal and compliance teams to ensure regulatory alignment.
• Conduct regular drills and simulations for forensic readiness.

Requirements:

• Degree in Information Systems, Computer Science, Cybersecurity, or a related field.
• Professional Certification(s) in incident handling and security analysis preferred.
• GCIH or its equivalent is preferred
• Minimum of 8 years of progressive experience in IT security, with a focus on Incident response
• Minimum of 4 years of experience in a security operations center, with proven leadership capabilities.
• Intermediate knowledge of security operations, incident analysis, incident handling, and vulnerability management or testing, system patching, log analysis, intrusion detection, or firewall administration
• Proven experience in managing incident response and performing threat hunting
• Proven experience in integrating AI and automation in IT Security using Security Orchestration Automated Response (SOAR) technologies.
• Proficiency in Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), traffic and packet analysis, digital forensics, and cloud security.
• Experience in Blue/Purple teaming, firewall, Intrusion Prevention Systems (IPS), Web Application Firewalls (WAF) administration, virtualization, and cloud technologies.
• Experience in monitoring and administering host-based intrusion detection systems.
• Knowledge and experience in Linux/Windows/Database technologies preferred.
• Strong knowledge of industry standards and information security policy frameworks.
• Hands-on experience with scripting and automation tools to enhance security operations.
• Ability to conduct gap analysis of current processes and identify opportunities for improvement.
• Evaluate internal and external environments for threats related to Information Security and act as a subject matter expert to ensure these are properly addressed and controlled.
• Continuously improve event correlation and alerting processes and use cases to detect potential incidents.
• Automate manual processes to enhance security incident response.
• Experience with network security assessment tools.
• Excellent leadership and team management skills, with the ability to inspire and motivate a team.
• Strong communication skills, with the ability to effectively interact with stakeholders at all levels, including University administration.
• Demonstrated ability to drive strategic initiatives and lead a team through change.
• Exceptional problem-solving skills and the ability to think critically under pressure.
• Ability to interview stakeholders to define and document business requirements.
• Provide advice and guidance on response action plans for information risk events and incidents based on incident type and severity.

Other Information

NIE staff can take chartered buses at their own expense from or near their home to the NIE campus. This is subject to the availability of bus routes and seats.

Req ID: R00018131

Job Purpose

A Red Team operator is a member of the Information Security Assurance group driving security improvement through continuous assessment of our threat landscape. The Red Team is a globally dispersed “testing” team.

Team Duties

• Red Team Core (70%): primarily, as a Red Team operator, you will work closely with team members to deliver sophisticated engagements focusing on high priority, global security objectives. This will take the form of engagements that deliver chained exploits and a full kill-chain of specific recommendations, to demonstrate and explain security gaps in the context of other vulnerabilities. These engagements may include working with externally contracted red teams and exploring Artificial Intelligence based applications such as Large Language Models (LLMs).
• Threat Automation and Detection development (15%): you will be developing and recreating atomic red team tests (“TTPs”) not developed as part of Red Team Core duties. These will be used to improve our Blue Team detection and response capabilities.
• Infrastructure support and development (15%): you will run, support and maintain our red team-owned tools and infrastructure alongside other team members.

Responsibilities
Seniority is determined by experience and demonstration of exceptional competencies including:

• Documenting and effectively publishing technology guidance and repeatable processes
• Mentoring peers in groups and individually
• Improving processes and incorporating advanced methodologies into engagements
• Taking initiative to learn business goals, liaise with other departments, and identify ways to increase productivity in other ICE groups and offices

Knowledge and Experience

• University degree in Mathematics, Computer Science, Engineering, or related discipline
• 4 years or more direct penetration testing and red teaming experience.
• Scripting - python, bash, Go etc, software engineering, and system administration
• Offensive Security Certified Expert (OSCE) or CREST CCT qualification
• Artificial Intelligence background is a plus

Schedule

This role offers work from home flexibility of one day per week.

Intercontinental Exchange, Inc. is an Equal Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin or ancestry, age, disability or veteran status, or other protected status.

Do you want to work at an agency where each day reveals new opportunities to work on some of the biggest issues facing consumers and businesses and have opportunities to pursue new and exciting pathways?
Do you want to work at a place where smart and dedicated people from all walks of life collaborate to work on meaningful matters?
Do you want to kickstart your career with the ACCC in a supportive and dynamic environment?

Then this is the place for you! At the ACCC, were proud of the impact we can make together. We understand the responsibilities and challenges that come with a fast moving and ever-changing environment. Our high performing culture is built on a foundation of care, support and inclusion. Its why were driven by connection and collaboration, sharing our skills, knowledge and support with each other freely and frequently.

... Click here to view more detail / apply for Public Information Officers/Senior Public Information Officers, APS3/APS4 -(EA2024/187)

Job Description:

• Attend to internal and external inquiries at the counter.
• Handle Medical Report/Records queries.
• Assist in sending acknowledgment letters and receipts.
• Extend Medical Report/Medical Records deadlines as needed.
• Respond to external queries about Medical Report applications.
• Sort incoming mails and faxes.
• Receive documentation from staff or Courier Services.
• Manage returned cases from departments and clinics.
• Coordinate appointments for Workman Compensation/Specialist Medical Report/Objection.
• Manage the MRO hotline and respond to queries.
• Follow up on AM/PM process and close Records requests.
• Process Inter-hospital loan requests.
• Tag internal/external emails in a shared system.
• Assist Executives with ad hoc tasks.

Requirements:

• Diploma in Business or similar.
• 1-3 years of administration experience.

All qualified applicants, please click “ APPLY NOW”

Kimmy Low Yi Ting (Kim) | CEI Registration Number: R23112122

Recruit Express Pte Ltd Company Reg. No. 199601303W | EA LICENCE Number: 99C4599

Job Description:

• Attend to internal and external inquiries at the counter.
• Handle Medical Report/Records queries.
• Assist in sending acknowledgment letters and receipts.
• Extend Medical Report/Medical Records deadlines as needed.
• Respond to external queries about Medical Report applications.
• Sort incoming mails and faxes.
• Receive documentation from staff or Courier Services.
• Manage returned cases from departments and clinics.
• Coordinate appointments for Workman Compensation/Specialist Medical Report/Objection.
• Manage the MRO hotline and respond to queries.
• Follow up on AM/PM process and close Records requests.
• Process Inter-hospital loan requests.
• Tag internal/external emails in a shared system.
• Assist Executives with ad hoc tasks.

Requirements:

• Diploma in Business or similar.
• 1-3 years of administration experience.

All qualified applicants, please click “ APPLY NOW”

Kimmy Low Yi Ting (Kim) | CEI Registration Number: R23112122

Recruit Express Pte Ltd Company Reg. No. 199601303W | EA LICENCE Number: 99C4599

• Leading regional financial institution
• Focus in Information Security Compliance, Policy & Control
• Open to IT professionals with passion in InfoSec Control and Risk Management

Reporting to Head of Information Security & IT GRC, here are your responsibilities:

• Collaborate with the cybersecurity team to develop and execute the annual information security action plan.
• Establish and maintain an efficient incident reporting and tracking system, overseeing corrective and improvement measures.
• Monitor and provide guidance on the effectiveness of information security workflows and controls.
• Lead information security projects and automation initiatives in Asia.
• Manage outsourcing matters across BUs in Asia and oversee outsourcing requirements
• Conduct annual on-site reviews of BUs in Asia.
• Support compliance efforts under Singapore’s PDPA, including policy communication, query management, and liaison with regulatory authorities.
• Report to the Board and management on adherence to laws, regulations, and information security policies.
• Review and update regional information security and outsourcing policies to ensure compliance.
• Develop training materials to enhance information security awareness.
• Design, develop, and maintain automated compliance and information security workflow management systems.
• Manage regional reporting tools and consolidate results.
• Prepare reports and documents for internal committee meetings.
• Collaborate with the Compliance team on various compliance-related initiatives.

Requirements:

• Bachelor's degree in computer science or related disciplines
• Preferred certifications: CISM and/or CISSP.
• 3+ years of experience in information security or IT risk management
• Strong understanding of information security risks, controls, processes, and trends.
• Experience in project management.
• Familiarity with regional information security regulations and the insurance sector.
• Understanding of Asian cultural and business dynamics.

If you are interested in the above job or related information security opportunities, please kindly send your updated CV to Shannagh.Wu@ethosbc.com

Reg No.R23112660
BeathChapman Pte Ltd
Licence no. 16S8112

Business Function

Group Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibilities

• Administration and management (technical operations) of firewall infrastructure
• Evaluate and upgrade firewall hardware and/or firmware
• Coordinate with vendor, deploy, configure and manage Firewall devices according to system engineering design
• Coordinate with information security governance team to align IT infrastructure with established standards
• Ensures system compliance with all established information security policies
• Perform period health check and tuning of firewall devices
• Performs technical assessment of any non-well defined or complex firewall change requests prior to implementation
• Performs regular review of firewall rulebases and recommend necessary optimization actions
• Assists Level 1 Support Engineers during problem determination and resolution whenever necessary.
• Planning and recommending overall improvements in firewall management
• Device Access management
• Advanced troubleshooting production problems with RCA and fault diagnosis
• Performance and historical trend analysis
• Implements changes to firewall infrastructure hardware in order to correct errors or enhance functionality
• Develops processes for improving operational efficiencies, as well as identifies/implements automation tools for existing manual processes.
• Prepares technical reports, memoranda, and instructional manuals as documentation of network design and operational requirements.
• Management of network daily activities; incident and problem management
• Responsible to work with respective team members on the review of network architecture and design
• Responsible to work with the respective server and application team's members
• Responsible to work with the respective network vendor's teams for the trouble-shooting, identification and resolution of network problems
• Responsible for network devices, as well as appliances, vulnerability review and assessment.
• Responsible for network devices, as well as appliances, change implementation review and assessment
• Responsible to conduct pre / post implementation plan review
• Responsible to conduct and train Level 1 engineers, i.e. to empower and equipped the L1 engineers with the knowledge to run and maintain Data center network
• Coordinate with information security governance team to align IT infrastructure with established standards
• Change requests prior to implementation
• Advanced troubleshooting production problems with RCA and fault diagnosis
• Design and monitor operations metrics on a monthly basis to keep track of key operation metrics
• Ready to work in shifts including public holidays
• Ready to be on call for 24x7 support during shifts

Requirement

• Experience: Minimum 8 years firewall operations and/or management role
• Certification : CCSA, CCSE, JNCIA-FWV, JNCIA-SEC, JNCIS-SEC (Preferred but not mandatory CISSP, CISM, ITIL Foundation)
• Checkpoint Firewalls, Juniper Netscreen / SRX Firewalls, VPN Technologies, DNS, NTP, 2 Factor Authentication technologies.
• Ability to work independently or as a team player.
• Experience in highly complex data center network design and support
• Experience with Cisco and Arista products specially DCI technology
• Experience with Cisco and Arista Software Define network (ACI, DNAC, etc)
• Strong hands on experiences on Fabric Patch, OTV, VPC+, Vxlan, Mlag, MP-BGP
• Knowledge and experience in employing and using various networking trace tools, i.e. Sniffer, Wireshark, riverbed net profiler, NetBrain, Gigamon and etc.
• Pro-active, dynamic and with good analytical/conceptual thinking.
• Certifications such as CCIE or above level in networking is an advantage
• Python or Linux shell scripting skill is a plus

Apply Now

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognises your achievements.

About the role The Information and Technology (I&T) team is dedicated to delivering solutions that engage clients and stakeholders while meeting the diverse business requirements of the organisation. Our portfolio encompasses a wide range of responsibilities, including information technology strategy, ICT service delivery, information and knowledge management, information security, and business partnering and engagement. As a Senior Information Officer, where you'll play a pivotal role in promoting information and records management aligned with QPT's strategic direction and architecture. Your primary focus is to advocate for best practices and foster a culture of excellence in this critical domain. Leveraging your expertise in information management, you'll guide and support the organisation, empowering effective decision-making and driving digital innovation. Operating within a complex and dynamic environment, collaboration is key to success. You'll seamlessly bridge functional boundaries, fostering cross-functional cooperation to achieve organisational goals. As a Senior Information Officer, you'll perform a variety of functions across information, records, knowledge,…

Click here to view more detail / apply for Senior Information Officer, Public Trust Office