Total 63 information technology job vacancies in Legal / Public / Security category in Singapore

• Resolve routine and non-routine security policy and procedural problems related to information security programs throughout the Command.
• Provide authoritative and technical evaluations of current Department of the Army (DA) and Dept. of Defense (DoD) security policies and procedures, and recommends/negotiates changes on behalf of the Directorate.
• Synchronize technology and program protection(s) efforts in the Defense Industrial Security Program and apply multiple security disciplines in the business/industrial environment.
• Serve as alternate Foreign Disclosure Officer (FDO) specialist for Army Futures Command (AFC).
• Provide security support for Headquarters, AFC in all matters pertaining to information security (INFOSEC) coordination with other command security personnel.
• Identify and ensure that all appropriate technology and program protection requirements are incorporated into acquisition and contract documents, and verify implementation at all industrial facilities.
• Execute policy requiring the Research and Development (R and D) community to complete assessments of early research to identify developing innovative and potentially critical technology.
• Maintain close liaison with counterparts in other government agencies to ensure coordination and integrity of methodologies and approaches to AFC’s security and protection actions and production.
• Serve as Technology Protection Cell member, orchestrate and synchronize AFC, DoD, Intelligence Community (IC) and non-traditional partners to coordinate the protection of technologies identified in the Critical Technologies Protection List.
• Work with agency and DoD executive agents for horizontal protection, anti-tamper, and Technology Protection Tasks Force to blend multifaceted approaches to protection into a cohesive, executable requirement .
• Serve as an Research Technology Protection (RTP) representative on multiple government boards and working groups to include DoD’s Technology Protection Security Working Group (TPSWG).

Starting at $106,215 Per Year (GG 13)

Job Description: • Able to implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with). Define the process, provisioning, interfaces and provide recommendations.
• Access management and control.
• Engage and execute Security Vulnerability Scanning activities (HCR/NVA/Pen Test/ SAST/DAST activities etc) and resolve findings.
• Manage Access management and SIEM tools in the environment.
• Facilitate auditing processes conducted by external parties.
• Familiar with operational security processes
o OS level patching
o Application-level patching
o Operational housekeeping and archival.
o Server and application hardening procedure & steps
o IM8 policy
o Vulnerability Assessment
o Security Incident detection and reporting
o SSL certificate renewal

Technologies & Skills Required
• OS Administration (Linux / Windows)
• IBM Security Verify Access
• IBM Qradar
• Thales HSM
• OpenSSL
• Tenable Nessus, Burp Suite Enterprise

Top 3 MUST have skills:
• Minimum 2+ years of experience with IT Security.
• CISSP/CCSP/CCSK certification or its equivalent is preferred
• 1-2 areas of Cyber Security domains such as Identity Access Management, Security and Risk Management, Application and Network security, Vulnerability Management with a broad understanding of other areas.

Are you interested in working on some of the world?s most exciting projects, with some of the world?s leading businesses?
At Turner & Townsend we?re passionate about making the difference. That means delivering better outcomes for our clients, helping our people to realize their potential, and doing our part to create a prosperous society. Every day we help our clients deliver ambitious and highly technical projects in over 118 offices and 47 countries worldwide.
At Turner & Townsend, we offer a wide variety of benefits to our staff to help them inside or outside of the work. We offer true work life balance, working from home arrangements, team events and much more.
We are looking to recruit an Information Security Consultant to join our existing Information Security team.
Working with the Information Security team to provide advice and guidance on IT security and further develop IT policies and ... Click here to view more detail / apply for Information Security Consultant

• Serve as a senior technical consultant to OCIO management on the FBI's technical cybersecurity preparedness and as the primary liaison to internal and external stakeholders on the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) implementation; guiding system owners and IT project teams with integrating the RMF implementation into system development life cycle activities, and support project teams with designing and implementing security controls.
• Build and maintain relationships as the primary OCIO point of contact for the system owner (SO), program manager (PM), and Information System Security Officer (ISSO) of each assigned FBI IT system; ensuring the SO, PM and ISSO adhere to the FBI's cybersecurity program and policies, that security best practices are followed, and that baseline configurations are established for each system.
• Conduct cybersecurity assessment and authorization processing, compliance monitoring, and guide system owners and ISSOs through the security assessment and authorization process of RMF.
• Ensure appropriate levels of confidentiality, integrity, authentication, non-repudiation, and availability are in place to protect IT systems from natural and man-made threats.
• Partner with Subject Matter Experts and Senior Leaders to provide recommendations to OCIO leadership and the FBI's authorizing official (AO) regarding system authorization (ATO), appropriate security controls, and the overall security risk posture of each system.
• Work with ISSOs to conduct risk remediation actions based on the results of ongoing monitoring activities and outstanding items in the system Plan of Actions and Milestones (POA&M).
• Collaborate with the SO and ISSO on change and configuration management, including participation in Configuration Control Board (CCB) meetings, as required.

Starting at $104,604 Per Year (GS 14)

• Define, prepare and manage the deployment of the strategic security initiatives in the organization, as part of the larger information security management team.
• Work on increasing the maturity of the various functions of the security operation center department.
• Act as point of escalation for the internal customers of the information security team.
• Act as delegated sponsor of some of the global security initiatives.
• Deputize for the head of the department as well as other members of the security management team, when relevant.
• Participate in non-security projects as a security SME & SPOC, ensuring alignment of these initiatives with overall security strategy.
• Support the development and review of the security policies.
• Provide management oversight for internally run initiatives and teams. Collaborate closely with managers of security architecture, operational teams in the SOC as well as the security reporting team to improve & adapt the delivery of the teams to the internal customer demands.

Other Assignments:

• Build and maintain stakeholder/client relationships both internally and externally;
• Prepare and publish reporting to IT Management.
• Support the budgeting process for a 100 FTEs security operations department.
• Support the group head of information security and head of SOC in other daily duties;

Job Summary:

We are seeking a skilled and dedicated Information Security Analyst/Consultant to join our team. In this role, you will be responsible for advising, assisting, and implementing information security programs for our clients using frameworks such as ISO/IEC 27001:2022 and Cyber Trust Mark, in addition you will also be involve in overseeing the implementation of security solutions to assist clients in improving their information security and cyber security posture. You will work closely with clients to assess their security needs, develop robust security strategies, and ensure compliance with industry standards and are expected to manage client’s requirements and expectations during the consulting process helping them to achieve ISO/IEC 27001:2022 or Cyber Trust Mark Certification.

Key Responsibilities:

• Client Advisory and Consultation: Provide pre-sales support, expert advice and consultation to clients on information security practices and strategies.
• Framework Implementation: Assist clients in developing and implementing information security programs using frameworks like ISO/IEC 27001:2022 and Cyber Trust Mark.
• Security Assessments: Conduct comprehensive security assessments to identify vulnerabilities and recommend mitigation strategies.
• Policy Development: Develop and maintain information security policies, procedures, and guidelines for clients.
• Compliance and Auditing: Ensure client compliance with industry standards and regulatory requirements through regular audits and assessments.
• Risk Management: Identify, analyze, and manage information security risks for clients.
• Incident Response: Assist clients in developing incident response plans and provide support during security incidents.
• Training and Awareness: Conduct training sessions and workshops to raise awareness about information security best practices among client employees.
• Documentation: Prepare detailed reports and documentation for security assessments, policies, and compliance efforts.
• Monitoring Emerging Technologies and Threats: Stay up-to-date with emerging technologies and threats in AI, blockchain, and other relevant fields, and integrate this knowledge into security strategies.
• Security solutions: Understand and learn new cybersecurity solutions and assisting to implement these solutions to improve their security posture.

Qualifications:

• Education: Minimum diploma in Cyber Security, Computer Science, or related field and minimum 3 years of experience in IT or Cyber Security field.
• Certifications: Good to have certifications such as CISSP, CISM, or ISO/IEC 27001 Lead Auditor/Implementer, Certified Ethical Hacker.
• Experience: Proven experience in information security consulting, with a focus on implementing security frameworks like ISO/IEC 27001:2022, NIST, CSA Star and CIS.
• Skills: Strong analytical, problem-solving, and communication skills. Proficiency in security assessment tools and methodologies.
• Knowledge: In-depth knowledge of information security principles, standards, and best practices.
• Project management: Understanding of stakeholder management and managing project lifecycle.

What We Offer:

Opportunities for professional development and career growth. A dynamic and collaborative work environment.

Cybersecurity certification training opportunities

As a Business Information Security Officer, you will play a key role in proactively managing the information security and Data privacy landscape within the organization. Your expertise will help guide strategic decision-making on technology risk and security matters, ensuring robust IT security architecture, practices, and compliance across the organization.

Key Responsibilities:

• Lead proactive management of InfoSec & privacy.
• Provide thought leadership on technology risk and security.
• Drive the development and implementation of IT security policies and solutions.
• Ensure secure software development practices and change management processes.
• Plan and manage security incident responses and investigations.
• Oversee global adoption of cybersecurity and privacy controls.
• Act as the main point of contact for InfoSec and privacy matters.
• Collaborate with external auditors and regulators for compliance.

Required Skills and Qualifications:

• Extensive experience in IT security architecture, policy, and procedure development.
• Demonstrated leadership with strong decision-making abilities.
• Knowledge of software development life cycle security and asset management.
• Proven track record in incident response management and cybersecurity investigations.
• Excellent communication skills for non-technical stakeholders.
• Proficiency in current and emerging security trends.
• Familiarity with Singapore regulatory IT security requirements (e.g., MAS TRM, Cyber Hygiene notice).
• Bachelor's degree in IT/Computer Science or related field.
• Preferred certifications: CISSP, CISA, CISM, GIAC.

Personal Attributes:

• Team-oriented and able to work collaboratively.
• Strong communication skills for engaging senior stakeholders.
• Analytical problem-solver with a creative mindset.
• Independent and hands-on approach with strong attention to detail.

Application Process:
If you are interested in this role, please send your resume to komal@kstalentsolutions.com

Ongoing & Non-ongoing For an initial period of up to 12 months
Executive Level 1 ($121,717 - $138,722) plus 15.4% superannuation
Barton, ACT


Location: Barton, ACT
Application Closing Date: Sunday, 8 December by 11:30pm AEDT
Classification Executive Level 1 ($121,717 - $138,722)
Employment Type Ongoing & Non-ongoing (for an initial period of up to 12 months).
This role is being advertised as both ongoing and non-ongoing, with the employment type to be determined in negotiation with the preferred candidate and the PM&C delegate.
Where a non-ongoing specified term is offered, this would be for an initial period of up to 12 months, with possibility of extension up to a maximum period of two years.
A non-ongoing offer may result in conversion to an ongoing offer of employment, however this must occur within 18 months from the opening date of this advertisement.

... Click here to view more detail / apply for Cyber Security Adviser, Information Services

Company

Work matters. It’s where we spend a third of our lives. And the workplace of the future is going to be a great place. We’re dedicated to bringing that to life for people everywhere. That’s why we put people at the heart of everything we do.

People matter. Our people have a passion for learning, building, and innovating. Whether you’re an engineer, a sales professional, a finance professional, or anything in-between, our roles aim to provide each person with meaningful impact and plenty of space to grow.

Team 

This position reports to the Sr Manager, Public Cloud Security Engineering. The Security Engineering team targets building state-of-the-art technology that will help reduce the risk surrounding the sensitive assets of the company with the least impact possible on operations, acts as guidance and facilitator to the security operations teams and helps shifting Security perception from blocker to enabler by building a relationship of trust with the other teams. 

Role

 As the Manager of Public Cloud Security Engineering team, you will be responsible for the team that implements most comprehensive security standards and controls for ServiceNow’s public cloud.

• Define vision and drive execution of technical strategies to secure ServiceNow’s public cloud assets
• Lead and mentor a team of cloud security engineers.
• Drive cross functional execution to build and manage cutting-edge cloud security solutions
• Provide technical expertise throughout the design, implementation, and delivery of scalable services and infrastructure
• Opportunities to build solutions in ServiceNow platform to secure public cloud
• Build DevSecOps culture in the team and drive automation
• Partner with Security Architecture, IT, Vuln & Config management and Security Operations to improve security posture of ServiceNow’s public cloud

 

 

Salary - £36,585 - £41,834 plus a £5000 Digital, Data and Technology (DDaT) pay supplement after a 3 month qualifying period
Location - Dundee or Glasgow
Hours - 35 hours per week
Closing Date - Monday 9th December 2024 at 23:55
Reference - 94
Employment Type - Permanent

Overview
As a Security and Information Risk Advisor, you will play a key role in providing expert guidance on implementing robust cyber security measures to ensure the integrity, availability, authenticity, and confidentiality of critical information. Collaborating with the Security Risk and Assurance Manager, you will monitor compliance, conduct risk assessments, and work with Security Architects and the Chief Digital Office to identify vulnerabilities and strengthen security protocols.

If you have a solid understanding of cyber security and a passion for digital risk management, this position offers a chance to contribute to Social Security Scotland's mission, ensuring secure services for the public while advancing your career and making a community impact.

DDaT Pay Supplement
This post attracts a £5000 Digital, Data and Technology (DDaT) pay supplement after a 3 months DDaT competency qualifying period. The payment will be backdated to your start date in the role. Pay supplements are temporary payments designed to address recruitment and retention issues caused by market pressures and are subject to regular review. This post is part of the Scottish Government DDaT profession. As a member of the profession you will join the professional development system, currently BCS RoleModelplus.

Main Duties
Provide advice and guidance on security strategies to manage identified risks and ensure adoption and adherence to standards.
Obtain and act on vulnerability information and conducts security risk assessments and business impact analysis on complex information systems.
Investigate major breaches of security, and recommend appropriate control improvements.
Contribute to development of information security policy, standards and guidelines.
Interpret information assurance and security policies and applies these in order to manage risks.
Provide advice and guidance to ensure adoption of and adherence to information assurance architectures, strategies, policies, standards and guidelines.
Use control testing information to support information assurance assessments.
Contribute to the development of policies, standards and guidelines.

Additional duties:
Liaison with and support of other Digital Risk and Security functions.
Management of problems and issues, resolutions, corrective actions, and lessons learned.
Collection and dissemination of relevant information and risk management advice.
Collection of feedback from customers in order to develop and enhance customer and stakeholder relationships.
Supporting the assessment of third party suppliers’ control environments.

Further Information
Social Security Scotland are a Disability Confident Employer. We will consider and implement any reasonable adjustments you may require throughout the recruitment process and during the course of your employment, should you be successful in securing a post. If you feel you may require assistance with any part of our recruitment process, please contact us at Recruitment@socialsecurity.gov.scot.

DHS Cybersecurity Service (DHS-CS) uses a multi-phase assessment process to qualify applicants seeking employment through the DHS-CS. Given the ever-advancing nature of cybersecurity and the ongoing need for cybersecurity talent, DHS-CS uses "Talent Pools" to pull qualified applicants (i.e., individuals who have successfully completed the multi-phase assessment process for their capability and career track/level) for consideration for these jobs.

By applying to this job announcement, you are not just applying for a specific job but are opting to be part of the DHS-CS Talent pool for ongoing consideration for employment in this Technical Capability and will remain eligible for consideration for up to one year from the date of completion.

As Deputy CISO you will report directly to the CISA Chief Information Security Officer (CISO) and manage a range of complex cybersecurity work related to establishing and maintaining a comprehensive Agency-wide information security and risk management program. You will be responsible for the Agency's security architecture, security operations center, and responsiveness to incidents that may impact business, mission assets, personnel, and networks across CISA's multi-billion-dollar information technology enterprise.

As a DHS Cybersecurity Service Employee in the Leadership Track, at the Senior Cybersecurity Manager level, you will continually and proactively participate in learning activities to enhance and apply your technical and leadership expertise in either Cybersecurity Defensive Operations - Intelligence Collection & Analysis (ICA), as well as Planning, Execution & Analysis (PEA), Cybersecurity Engineering, or Cybersecurity Architecture to oversee multiple DHS Federal cybersecurity programs, organizations, employees and contract resources to manage a range of unusually difficult tasks, including:

• Leading and/or overseeing teams to design, implement, and evaluate DHS cybersecurity policies, protocols, and programs aimed at enhancing the security of organizational networks and IT systems, including those related to artificial intelligence and other emerging technologies.
• Coordinating across the Department and with White House and interagency bodies to support the development and implementation of national-level cybersecurity policy and strategy, including related to artificial intelligence and other emerging technologies.
• Representing DHS policy positions in interagency and other working groups with other departments and agencies, foreign, state and local governments, the private sector, and academia.
• Reviewing and analyzing new and proposed legislation, strategies, and policy initiatives to assess the impact on DHS operations and existing cybersecurity policies, strategies, and programs.
• Assisting subordinate employees in the application of laws, rules, regulations, executive orders, and current requirements to ensure DHS cybersecurity policies and programs are legally compliant and align to the organization's mission and goals.
• Supervising and managing staff to conduct formal technical policy reviews of DHS's cybersecurity programs to determine if policies are current and effective, or if modifications are needed based on evolving security developments or threats.
• Providing leadership and expert policy support to the implementation of new systems, networks, and software designs for potential security risks, as well as resolving integration issues related to the implementation of new systems with the existing infrastructure.
• Directing and overseeing the creation, drafting, interpretation, and dissemination cybersecurity policy guidance to a variety of audiences in the form of briefings, reports, or other written products.
• Providing leadership and senior advisement to the Department's engagement with Congress or other legislative bodies in order to achieve and maintain the necessary authorities and resources required to meet mission critical priorities.
• Overseeing performance and development of cybersecurity policy personnel as well as serving as a mentor to DHS headquarters and/or Component employees in cybersecurity policy and those seeking to build expertise in the field.
• Proactively coordinating with internal and external DHS stakeholders to share intellectual capital and relevant information in support of the overall success of cybersecurity policies and protocols, ensuring alignment with critical agency priorities.

Starting at $163,600 Per Year (DL 3)

Your New Role:

Align IT needs with the strategic directions of the enterprise.

Allocate budget and resources accordingly by taking into consideration business impact

of the information security risks.

Analyse various internal and external information security risk reporting sources.

Contribute to the development of a strategy plan.

Determine appropriate IT strategies and solutions.

Develop a budget.

Develop business cases that support information security programme investments.

Disseminate organisation's IT security goals and objectives to business units and senior

management.

Evaluate IT security goals and objectives against the benchmarks.

Evaluate existing IT environment against organisation's IT strategic directions.

Formulate information security goals and objectives.

Identify and implement business innovation.

Identify controls and solutions to address/mitigate risks.

Implement change management process.

Manage overall information security risk.

Maximise business value of IT investments.

Obtain management support for information security programme investments highlighted

in the endorsed business cases.

Select new technology models for business.

Translate solutions into information security programmes.

What you'll get in return
This is an exciting opportunity to join a global company. You will be part of a dynamic team and you will be remunerated at market competitive rates.

What you need to do now

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV.

Referrals are welcome.

EA Reg Number: R21103035

EA License Number: 07C3924 | Company Registration No: 200609504D

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;

Strong knowledge of ISO 27001:2022 standards and requirements;

Experience in developing and maintaining comprehensive project plans, including timelines and milestones;

Experience in managing ISO 27001-related risks and conducting internal/external audits;

Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;

PMP, CISSP, CISM, or similar certifications are a plus;

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to apply@sciente.com at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE's website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

• Driving innovation and shaping the future with cutting-edge projects
• Personal growth and collaboration.

About Our Client

Client is a global technology firm known for its innovative approach to content creation and distribution. It operates a range of platforms that combine artificial intelligence and machine learning to deliver personalized experiences to users. The company's products span entertainment, social networking, and e-commerce, with a strong focus on fostering creativity and community engagement. It has a diverse and rapidly growing global presence, continuously pushing the boundaries of digital media and technology.

Job Description

• Communicate technical and non-technical concepts effectively to the business side.
• Coordinate security assessments with product teams.
• Conduct cyber risk assessments and technical security reviews to identify IT risks for new products and features, and recommend controls.
• Collaborate with security and business teams to design defense-in-depth controls and improve security posture.
• Fulfill business security requirements like red teaming, fraud detection, and penetration tests, while enhancing security maturity.
• Monitor and manage risk mitigations, exceptions, and ensure adequate monitoring is in place.
• Track emerging cyber threats, vulnerabilities, and exploits affecting infrastructure and products.

The Successful Applicant

A successful candidate will have a strong technical background in cybersecurity, with the ability to communicate effectively between technical teams and business stakeholders. They should be skilled in risk assessments, vulnerability management, and implementing security controls. Proactive, collaborative, and able to manage security requirements like red teaming and penetration testing, they will stay ahead of emerging threats and continuously improve security posture across the organization.

What's on Offer

A chance to work on impactful security initiatives in an innovative environment, collaborate with cross-functional teams, and grow your career. You'll receive a competitive package, opportunities for professional development, and the chance to work with cutting-edge technologies.

Contact

Miao Xia Neo (Lic No: R21103441/ EA no: 18C9065)

Quote job ref

JN-112024-6583081

Phone number

+65 6416 9828

Michael Page International Pte Ltd | Registration No. 199804751N

Team

This position reports to the Senior Manager, Security Engineering. The Enterprise Security Engineering team targets building state-of-the-art technology that will help reduce the risk surrounding the sensitive assets of the company with the least impact possible on operations, acts as guidance and facilitator to the security operations teams and helps shifting Security perception from blocker to enabler by building a relationship of trust with the other teams.

Role

The Senior Information Security Engineer will be part of the endpoint security team and will be responsible for ensuring the integrity and security of the organization's information systems by managing and enhancing endpoint and network security measures.

What you get to do in this role:

• Implement and maintain advanced security measures for endpoints and networks, ensuring robust protection against unauthorized access and cyber threats
• Define policies to support Insider threat program, have good knowledge on technologies such as DLP, EDR and endpoint controls.
• Design and enforce security protocols, conduct regular security audits, and ensure compliance with industry standards and regulatory requirements.
• Implement and manage security solutions to enhance the organization’s overall security posture, ensuring secure and efficient remote access and internet security
• Monitor user activities and enforce security policies to prevent data leakage and ensure compliance with organizational security standards