Total 26 Manager level Legal / Public / Security job vacancies in Richardson Texas HQ (1001 E. Lookout Drive)

FEMA is seeking candidates with experience in delivering Public Assistance grant funding.

What will I do in this position if hired?

In this Local Hire (Public Assistance Program Delivery Manager) position, you will report to the Public Assistance Program Delivery Task Force Lead and serve as the primary point of contact for the applicant.

Typical assignments include:

• Tracking and communicating the progress of all projects through the entire program delivery model in coordination with the Applicant.
• Engaging program offices as soon as potential opportunities or concerns arise.
• Discussing potential Hazard Mitigation opportunities with the Applicant.
• Hosting key information meetings ensuring recovery priorities and program eligibility requirements are communicated.
• Gathering all required documentation to enable FEMA to write grants so the applicant can be returned to their Pre-Disaster condition as soon as possible.
• Facilitating the delivery of Public Assistance grant funding on behalf of Applicants; this includes (but is not limited to) developing the list of damaged sites, scheduling site inspections, summarizing applicant damages, and coordinating requests for information and questions.
• Working with the applicants to resolve their program related needs ensuring projects are processed as efficiently and expeditiously as possible.

What else do I need to know?

This announcement is for a position as a FEMA Local Hire. Local Hire employees help FEMA respond to, recover from and mitigate hazards by performing a variety of emergency management functions which are not limited to disaster survivor assistance, conducting and verifying damage assessments, and providing administrative, financial and logistical support.

Local Hires are Temporary Positions. The Local Hire Program is an appointment type granted under the Robert T. Stafford Disaster Relief and Emergency Assistance Act, Section 306 (b), which authorizes FEMA to appoint such temporary employees as necessary to accomplish work authorized under the Act. Appointments under this authority within FEMA are made to the excepted service and are nonpermanent in nature. A local hire's term of employment is 120 days. Local Hire appointments may be extended, in 120-day increments, based on the needs of the disaster.

FEMA is committed to ensuring that its workforce reflect the diversity of the nation. At FEMA, our workforce includes the many identities, races, ethnicities, backgrounds, abilities, ages, cultures, and beliefs of the people it serves. To learn about the ongoing diversity and inclusion efforts, reasonable accommodation process, and the FEMA Core Values, please visit?www.fema.gov.

This Program Manager position is located at Enterprise Support (ES), Training and Development (T&D), Canine Training Center, Transportation Security Administration, Department of Homeland Security (DHS). As a Program Manager, you will perform the following duties:

• Oversees and initiates strategic planning to position the canine program for ongoing growth and effectiveness, communicates the program's vision to both internal and external stakeholders and Congress. Sets overall priorities, goals and objectives and evaluates the program's success in meeting such objectives. Monitors and evaluates performance of organizational sections, managers and staff. Defines staff and resource requirements and participates in planning efforts across organizational units.
• Conducts initial and recurrent training, as well as annual certifications, for over 1,000 canine teams deployed across the country; provides standards, training, and quality assurance for Regional Canine Training Instructors.
• Leads TSA's relationship with Military Working Dog program, co-located with TSA's program at Lackland Air Force Base; this includes directing staff to ensure proper veterinarian and other care for canines, budgeting, planning and executing facilities expansion strategies, and collaborating with explosives detection canine capabilities.
• Provides numerous briefings to the TSA Administrator and represents TSA before Congressional Committees on issues relating to procurement, training, and deployment of teams.
• Ensures adequate resources are procured, trained, deployed, and evaluated to meet the current multi-modal security requirements; includes but is not limited to adequate training facilities and equipment for all assigned personnel.

This Program Manager position is located at Enterprise Support (ES), Training and Development (T&D), Canine Training Center,, Transportation Security Administration, Department of Homeland Security (DHS). Duties include but are not limited to:

• Oversees and initiates strategic planning to position the canine program for ongoing growth and effectiveness, communicates the program's vision to both internal and external stakeholders and Congress. Sets overall priorities, goals and objectives and evaluates the program's success in meeting such objectives. Monitors and evaluates performance of organizational sections, managers and staff. Defines staff and resource requirements and participates in planning efforts across organizational units.
• Conducts initial and recurrent training, as well as annual certifications, for over 1,000 canine teams deployed across the country; provides standards, training, and quality assurance for Regional Canine Training Instructors.
• Leads TSA's relationship with Military Working Dog program, co-located with TSA's program at Lackland Air Force Base; this includes directing staff to ensure proper veterinarian and other care for canines, budgeting, planning and executing facilities expansion strategies, and collaborating with explosives detection canine capabilities.
• Provides numerous briefings to the TSA Administrator and represents TSA before Congressional Committees on issues relating to procurement, training, and deployment of teams.
• Ensures adequate resources are procured, trained, deployed, and evaluated to meet the current multi-modal security requirements; includes but is not limited to adequate training facilities and equipment for all assigned personnel.

This Stakeholder Manager position is located at Austin-Bergstrom International Airport (AUS), Transportation Security Administration, Department of Homeland Security (DHS). Duties include but are not limited to:

• Working closely with leadership to develop, coordinate, implement and maintain a program to communicate to stakeholders TSA's policies, programs, and directives.
• Identifying and responding to stakeholders' questions, programs, and concerns regarding security.
• Recommending changes to improve communications with stakeholders.
• Working to identify and implement best practices to enhance the efficiency and effectiveness of aviation security policies.

We are seeking a highly experienced Information Security Technical Program Manager to lead our ISO 27001:2022 certification initiative. The successful candidate will manage all aspects of the certification process, ensuring alignment with organizational objectives and industry standards.

5+ years of experience in Project Management, with 3+ years directly managing ISO 27001 certification or similar standards;

Strong knowledge of ISO 27001:2022 standards and requirements;

Experience in developing and maintaining comprehensive project plans, including timelines and milestones;

Experience in managing ISO 27001-related risks and conducting internal/external audits;

Excellent communication and leadership skills with the ability to engage with cross-functional teams (Technology, Compliance, Legal, HR, Operations) and external auditors;

ISO 27001 Lead Implementer or Lead Auditor certification is highly preferred;

PMP, CISSP, CISM, or similar certifications are a plus;

• Lead the ISO 27001:2022 certification program from start to finish, developing project plans and tracking milestones to ensure alignment with organizational goals;
• Oversee the creation, implementation, and maintenance of policies, procedures, and documentation for ISO 27001 compliance;
• Collaborate with Technology, Compliance, Legal, HR, and other teams, acting as the primary contact for external auditors;
• Identify and mitigate risks to ensure compliance with ISO 27001 standards;
• Drive initiatives to enhance the organization’s security posture and stay updated on ISO 27001 changes;
• Develop training programs to increase ISO 27001 awareness across the organization;
• Provide regular updates on certification progress, risks, and the organization’s security posture.

Should you be interested in this career opportunity, please send in your updated resume to apply@sciente.com at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE's website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

• Conduct meetings with high level officials to develop policies, procedures, and recommendations.
• Develop prevention program polices and procedures through collaboration with stakeholders including high level officials, outside agencies, and subordinate units.
• Exercise a full range of personnel management responsibilities for the People Pilot and all other assigned programs.
• Direct, manage, and supervise subordinate professional/administrative staff to ensure the accomplishment of goals.
• Ensure strategic coordination to allow for the and integration of pilot and prevention programs.
• Provide professional advice and serve as the principal advisor in the command's strategic integration planning and decision-making process.
• Exercise managerial and operational control for the strategic planning, review, study, and analysis of prevention activates.
• Oversee program planning, management, analyses, evaluation and execution of the People Pilot and associated prevention programs to meet strategic objectives.

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s Degree in Computer Science/Information Technology or equivalent.
• At least 5 years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:

- CompTIA Security+

- Certified Information Systems Security Professional (CISSP)

- Certified Information Systems Auditor (CISA)

- Certified Information Security Manager (CISM)

The purpose of the Palo Alto Strategic Leader and Cloud Security Sales at IBM is to drive net new pipeline development and sales progression of IBM Consulting Cybersecurity Services (CSS) client opportunities that incorporate Palo Alto Networks (PANW)’s technology in the broader solution offered by IBM Consulting (IBMC). These opportunities may be part of an even more comprehensive opportunity that an IBMC Lead Client Partner (LCP) is pursuing with or delivering to the client.

The focus of this role will be to develop new and high value IBMC opportunities for the PANW specific CSS portfolio, which currently includes:

· Threat Management, Cyber Trust, X-Force, and Strategy

· Consulting and Systems Integration (C&SI) services and Managed Security Services (MSS)

The CSS PANW portfolio will include all PANW cybersecurity products, including and not limited to:

· Prisma Cloud

· Prisma Access

· Cortex (XSIAM, XDR, Xpanse, XSOAR)

· Strata NexGen Firewalls

The Palo Alto Strategic Leader and Cloud Security Sales role is not a technical role, but a sales role and the individuals in this role will be expected to be/become a PANW subject matter expert (SME), as it pertains how to work with and do business with PANW. To this end, this role requires the ability to articulate, educate, support and be deemed a valued team member for LCPs and CSS consultants in their assigned Geo, Market and/or Industry.

The Palo Alto Strategic Leader and Cloud Security Sales role is client facing. The Palo Alto Strategic Leader and Cloud Security Sales is expected to work with the LCP and CSS Associate Partner (AP) to understand “lay of the land” of the client, including, but not limited to current sales motions, client/industry needs/issues and priorities that are planned, budgeted or currently out of scope and may require CSS advisory services. In conjunction with the LCP and CSS AP, the Business Development Leader is also expected to seek and engage the appropriate Palo Alto individual or teams to solidify teaming and to drive the development of a comprehensive and credible joint sales plan. The Business Development Leaders are to actively participate in key client facing discussions, as well as associated internal and PANW teaming discussions with the sole purpose of aiding the joint teams to qualify, progress and close joint opportunities.

Geo, Market, or Industry specific responsibilities include:

1. Sales Activation:

a. Evangelize the value of the PANW strategic partnership and sharing best ways of working together within and across all of IBMC, including within CSS

b. Build collaborative relationships across IBMC (LCPs and CSS) to expedite teaming, opportunity identification, and deal progression

c. Build collaborative relationships across PANW sales to expedite teaming, opportunity identification, deal progression, as well as possible removal of obstacles to close

2. Sales Enablement:

a. Work with across both parties to promote and educate sellers

i. CSS on PANW products and value propositions

ii. PANW sellers on the value of working with IBMC and its GTM strategies, capabilities, and value propositions

b. Manage, market, and promote CSS offerings and PANW as part of a broader IBMC client engagement

i. Articulate CSS offerings and PANW products strengths, potential weaknesses, and roadmap

ii. Assist in RFI and RFP responses

iii. Assist PANW in understanding client c-suite (above the CISO) requirements and how that translates to project scoping and pricing needs from PANW

iv. Maintain relationships with the Palo Alto product teams

c. Participate in joint events like RSA, IBM Think, Black Hat, PANW Ignite and others

d. Gather, develop (with marketing assistance) and promote win stories to drive greater sales velocity

3. Sales Engagement:

a. Target and track joint pursuits from identification through close, including loss reporting

b. Establish and maintain relationships with PANW product sales specialists to allow for internal PANW advocacy of client needs as it pertains to new opportunities and rapid issue resolution

c. Leading joint account workshops which includes:

i. Work with PANW and internal IBMC teams to identify opportunities to team – who, what, where, why and how

ii. Share best practices and identify risks, if applicable

iii. Outline a joint sales plan with actions, owners and timeline, assigned to individuals

iv. Establish ongoing cadence for joint read-outs to maintain alignment and communicate revisions to plan

v. Engage executives, as needed

vi. Monitor progress for leadership reporting, monthly and quarterly

d. Refresh as needed, PANW knowledge and/or certifications to maintain SME knowledge of market impact and/or industry trends that drive the need and value of CSS offerings and PANW products

Sample governance activities include:

1. Preparing collateral for Geo / Market specific cadence sessions, monthly reviews, and quarterly business reviews

2. Providing color commentary, e.g.win stories, best practices, lessons learned, issues to be resolved, etc., to pipeline, forecasts, and other internal and/or joint performance reports

3. Monitoring and reporting against individual metrics, showing current assumptions, progress to date and actions needed or anticipated to ensure achievement

The successful candidate will meet the following requirements:

1. Knowledge of the relevant CSS offerings portfolio in terms of the value to the client, to IBMC and to PANW

2. Ability to present the value of the strategic partnership and the CSS offerings to clients, PANW field sellers, and LCPs

3. Knowledge of the PANW product portfolio in terms of their value propositions to the client, to IBMC and PANW

4.Maintain an understanding of competitive products and technologies and accurately position PANW products in competitive scenarios.

5. Complete required online PANW sales training

Job Objectives:

Tasked with aiding the Security Manager in safeguarding properties and ensuring the well-being of guests, employees, and the hotel. Supervise all activities of security staff to ensure compliance and proper application of department regulations and hotel policies. Documents all action in the department, including: emergencies, loss, theft, or accident.

Primary Responsibilities

• Manages the Security Department, alongside with Security Manager.
• Oversees the security department and their day to day operations.
• Trains all security personnel in their areas of responsibilities.
• Reviews policies, procedures, and instructions on a regular basis.
• Evaluates possible hazards or threats to security.
• Promotes a safety attitude amongst all employees.
• Ensures safety of persons in the hotel and property assets.
• Reports irregularity in employee or guest behavior.
• Handles loss, damage and accidents.
• Handles, documents, and follows up with necessary persons any accidents occurring in the hotel premises.
• Investigates theft as reported by guest or employee.
• Documents all action in the department, including: emergencies, loss, theft, or accident.
• Participates in weekly department heads meeting in absence of Security Manager - Rooms Division Meeting and any others if requested.
• Secondary liaison for interacting with government officials, ministries, and law enforcement agencies.
• Reviews emergency procedures regularly.
• Delivers security training and promotes awareness within the hotel.
• Performs other duties as assigned by Security Manager.

Job Requirements

• Minimum education of High Vocational diploma in any discipline. Bachelor degree holder have an advantage.
• At least 3 years’ experience in a similar position in security & safety operations.
• Basic knowledge of local laws, investigative methods and fire safety.
• Criminal-free record
• Have good English communication skills both in written and spoken
• Possess professional disposition with good communication and interpersonal skills

The purpose of the Palo Alto Strategic Leader and Cloud Security Sales at IBM is to drive net new pipeline development and sales progression of IBM Consulting Cybersecurity Services (CSS) client opportunities that incorporate Palo Alto Networks (PANW)’s technology in the broader solution offered by IBM Consulting (IBMC). These opportunities may be part of an even more comprehensive opportunity that an IBMC Lead Client Partner (LCP) is pursuing with or delivering to the client.

The focus of this role will be to develop new and high value IBMC opportunities for the PANW specific CSS portfolio, which currently includes:

· Threat Management, Cyber Trust, X-Force, and Strategy

· Consulting and Systems Integration (C&SI) services and Managed Security Services (MSS)

The CSS PANW portfolio will include all PANW cybersecurity products, including and not limited to:

· Prisma Cloud

· Prisma Access

· Cortex (XSIAM, XDR, Xpanse, XSOAR)

· Strata NexGen Firewalls

The Palo Alto Strategic Leader and Cloud Security Sales role is not a technical role, but a sales role and the individuals in this role will be expected to be/become a PANW subject matter expert (SME), as it pertains how to work with and do business with PANW. To this end, this role requires the ability to articulate, educate, support and be deemed a valued team member for LCPs and CSS consultants in their assigned Geo, Market and/or Industry.

The Palo Alto Strategic Leader and Cloud Security Sales role is client facing. The Palo Alto Strategic Leader and Cloud Security Sales is expected to work with the LCP and CSS Associate Partner (AP) to understand “lay of the land” of the client, including, but not limited to current sales motions, client/industry needs/issues and priorities that are planned, budgeted or currently out of scope and may require CSS advisory services. In conjunction with the LCP and CSS AP, the Business Development Leader is also expected to seek and engage the appropriate Palo Alto individual or teams to solidify teaming and to drive the development of a comprehensive and credible joint sales plan. The Business Development Leaders are to actively participate in key client facing discussions, as well as associated internal and PANW teaming discussions with the sole purpose of aiding the joint teams to qualify, progress and close joint opportunities.

Geo, Market, or Industry specific responsibilities include:

1. Sales Activation:

a. Evangelize the value of the PANW strategic partnership and sharing best ways of working together within and across all of IBMC, including within CSS

b. Build collaborative relationships across IBMC (LCPs and CSS) to expedite teaming, opportunity identification, and deal progression

c. Build collaborative relationships across PANW sales to expedite teaming, opportunity identification, deal progression, as well as possible removal of obstacles to close

2. Sales Enablement:

a. Work with across both parties to promote and educate sellers

i. CSS on PANW products and value propositions

ii. PANW sellers on the value of working with IBMC and its GTM strategies, capabilities, and value propositions

b. Manage, market, and promote CSS offerings and PANW as part of a broader IBMC client engagement

i. Articulate CSS offerings and PANW products strengths, potential weaknesses, and roadmap

ii. Assist in RFI and RFP responses

iii. Assist PANW in understanding client c-suite (above the CISO) requirements and how that translates to project scoping and pricing needs from PANW

iv. Maintain relationships with the Palo Alto product teams

c. Participate in joint events like RSA, IBM Think, Black Hat, PANW Ignite and others

d. Gather, develop (with marketing assistance) and promote win stories to drive greater sales velocity

3. Sales Engagement:

a. Target and track joint pursuits from identification through close, including loss reporting

b. Establish and maintain relationships with PANW product sales specialists to allow for internal PANW advocacy of client needs as it pertains to new opportunities and rapid issue resolution

c. Leading joint account workshops which includes:

i. Work with PANW and internal IBMC teams to identify opportunities to team – who, what, where, why and how

ii. Share best practices and identify risks, if applicable

iii. Outline a joint sales plan with actions, owners and timeline, assigned to individuals

iv. Establish ongoing cadence for joint read-outs to maintain alignment and communicate revisions to plan

v. Engage executives, as needed

vi. Monitor progress for leadership reporting, monthly and quarterly

d. Refresh as needed, PANW knowledge and/or certifications to maintain SME knowledge of market impact and/or industry trends that drive the need and value of CSS offerings and PANW products

Sample governance activities include:

1. Preparing collateral for Geo / Market specific cadence sessions, monthly reviews, and quarterly business reviews

2. Providing color commentary, e.g.win stories, best practices, lessons learned, issues to be resolved, etc., to pipeline, forecasts, and other internal and/or joint performance reports

3. Monitoring and reporting against individual metrics, showing current assumptions, progress to date and actions needed or anticipated to ensure achievement

The successful candidate will meet the following requirements:

1. Knowledge of the relevant CSS offerings portfolio in terms of the value to the client, to IBMC and to PANW

2. Ability to present the value of the strategic partnership and the CSS offerings to clients, PANW field sellers, and LCPs

3. Knowledge of the PANW product portfolio in terms of their value propositions to the client, to IBMC and PANW

4.Maintain an understanding of competitive products and technologies and accurately position PANW products in competitive scenarios.

5. Complete required online PANW sales training

Position Overview

Assist in managing Infrastructure and IT Security related, for Regional Office (South Asia Ocean Region).

Responsibilities

• Support tRhe Regional Cloud Infrastructure hosting all the Critical Regional Business Solutions.
• Support Cloud Consolidation and Integration to Common Cloud for the Region.
• Plan, Design and Setup adequate Infrastructure for Operation Companies (OPCOs) to connect to Global and Regional Solutions.
• Support various Regional IT Infra projects, with primarily focus on Infrastructure, Elimination of Legacy hosted Infra.
• Support SD-WAN and other Infra Initiatives for the Region.
• Work closely with Global / Regional / Country IT teams to implement & Support Global IT Security Initiatives
• Manage other duties as assigned for Automation of Patch Management (Using Manage Engine), for GSOC, implementing Multi-Factor Authentication (MFA), Zscaler, Rapid 7 (Vulnerability Management), Trend Micro EDR and Others.
• Supporting initiatives advised by Global Security Audit (GSA) teams, resulting in overall improvement of IT Security Posture for the region.
• Assist in Documentation of IT Section Policies.
• Regular PDCA and follow up with Countries, to ensure Adherence for the above Initiatives.

Requirements & Qualifications

• Minimum Bachelor’s degree in IT or related field.
• Minimum 5 to 7 years In-Depth experience in Handling IT Infrastructure & IT Security at a Regional Level.
• Business driven with a Strong understanding of Prevalent / Current IT infrastructure and IT Security Solutions.
• Infrastructure Management and IT Security Skills.
• Cloud Solution Skills with a Must have experience to handle a regional Cloud Setup using AZURE.
• Understanding of relevant technology requirements required to handle the Responsibilities mentioned above.
• Strong Project Management Skills.
• Proven strength in strategic and conceptual thinking and design, implementation, and execution of strategies.
• Strong problem-solving and Co-ordination skills.
• Strong Vendor Management Skills.
• Good verbal and written communication skills.
• Proficient in Microsoft O365 Tools (Word, Excel, PPT and Others)
• Business trravelling may be required for this position.

Job Location

2 Changi South Avenue 2, Singapore 486354

Job Summary

We are currently looking for a seasoned leader as the Head of IT Security. The incumbent will be responsible for leading the transformation while establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. This role oversees the development and implementation of security policies, standards, and procedures to ensure the protection of the organization's information systems and data.

Mandatory Skill-set

• Degree in Computer Science, Information Security, Information Systems or a related field;
• At least 12-15 years of experience in IT security & risk management preferably in a large scale organisation;
• Deep knowledge and understanding of internal controls, security frameworks, risk management and IT governance, auditing techniques, threat modeling and risk management principles;
• Good knowledge of enterprise IT systems and components (applications, operating systems, databases, networks, cloud, DevOps;
• Knowledgeable in using various cyber security monitoring and analysis tools and techniques depending on the organization's needs and requirements;
• Familiarity with security technologies such as firewalls, intrusion detection systems, and endpoint protection;
• Familiar with cyber security standards, protocols and frameworks such as NIST, CIS, PCI/ DSS, MAS TRM, ISO standards;
• Experience with Security operations centers (SOC) and setting up SOC models;
• Experience in driving enterprise initiatives for E2E security posture analysis;
• Ability to work with subsidiaries and understand regional security requirements;
• Strong in analytical thinking with attention to detail;
• Excellent communication and inter personal skills.

Desired Skill-set

• CISSP, CISM, CRISC, CGEIT and/or CISA certified.

Responsibilities

• Define and implement the Enterprise InfoSec (IS) landscape and roadmap;
• Responsible for documenting methodologies and tools to mitigate information security or cyber risk for on-prem and clous platforms;
• Prepare reports for information security or cyber risk related reporting, threat awareness and security awareness reports;
• Design and implement secure cloud architecture for various cloud platforms and act as an SME for cloud platforms (AWS, GCP, or Azure) using cloud-native security services;
• Recommend corrective actions or appropriate security controls to mitigate technical risk;
• Conduct Technology Security Risk Assessments on systems throughout their lifecycle to identify and mitigate security risks;
• Assist in the development of policies for conducting cyber security risk assessments and compliance audits;
• Formulate governance procedures for documenting and updating security policy, standards, guidelines and procedures;
• Perform information security or cyber risk assessment activities and assess third party security controls and internal security systems including onsite assessments;
• Establish scope of risk analysis for new technology initiatives and identify security risks in the Tech Obsolescence Risk program;
• Communicate with regulators such as MAS and ensure solutions meet external and internal requirements and guidelines
• Keep abreast of the dynamic cyber threat landscape and identify opportunities for enhancement of IT risk processes;
• Provide regular updates on the overall health of compliance, criticality assessment, audit findings, remediation and action plans.

Should you be interested in this career opportunity, please send in your updated resume to apply@sciente.com at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

Senior Manager, Or Manager - Cyber Security & IT Governance

Responsible for the assessment, development, implementation and maintenance of enterprise-wide cyber security and IT Governance programmes to preserve the confidentiality, integrity, and availability of information resources. As part of the IT leadership team, this individual will be expected to provide technical leadership and consultation across the organisation. S/he will also work with external experts to implement security solutions, detect, and contain cyber security incidents.

Responsibilities

Cyber Security:

Assess and review environment and cybersecurity measures to ensure security and operational effectiveness, for e.g. network, system, application, endpoint security, physical and logical access security, etc.

Review and develop security framework, information security policies, processes, procedures, and guidelines.

Conduct cybersecurity risk assessments, penetration tests, and IT controls tests.

Identify security gaps and propose mitigating measures and escalate security incidents and non-compliances on a timely basis.

Evaluate, deploy, and maintain cybersecurity infrastructure to improve cybersecurity posture. Design, implement and maintain security incident response and escalation procedures.

Monitor, analyze and correlate events to determine the best course of action, to mitigate and contain threats when detected.

improve cybersecurity awareness of staff, for e.g. by conducting awareness training. Automate security controls, data, and processes.

IT Governance:

Review and enhance IT policies, standards, guidelines, and best practices regularly to ensure that these are aligned to organization objectives and industry best practices.

Develop and implement effective change management plans (such as communication plans and training programs) to drive adoption and compliance.

Participate in audit planning meetings with internal/external auditors, collate/provide the required materials on a timely basis, validate audit findings, provide remediation solutions, and implement the agreed solutions on a timely basis.

Drive security access and activity log reviews on regular basis.

Promote IT risk management, governance, and compliance culture across the organization.

IT Management:

Contribute to IT strategic planning and budgeting. Ensure IT vendors meet contractual obligations.

Maintain up-to-date knowledge on cybersecurity technologies and standards.

Attend to any other reasonable duties as assigned by Director, Information Technology.

Requirements

Degree in engineering, science or information technology, or equivalent education.

8-10 years of related work experience in cybersecurity management and security governance.

Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.

Strong understanding of cybersecurity standards.

Hands-on experience with cybersecurity tools such as Next Generation Firewalls, SASE, Endpoint Protection, Data Loss Protection, Email Security, etc.

To apply:

Please email Resume in Microsoft Word format

Please state your Position/ positions applied on the “on TOP” of your resume.

Please state Available Commencement Date or notice period

Please state current and last SALARY and Expected Salary in your resume.

Please state Reasons for leaving current & previous Employment.

Job Objectives:

Tasked with aiding the Security Manager in safeguarding properties and ensuring the well-being of guests, employees, and the hotel. Supervise all activities of security staff to ensure compliance and proper application of department regulations and hotel policies. Documents all action in the department, including: emergencies, loss, theft, or accident.

Primary Responsibilities

• Manages the Security Department, alongside with Security Manager.
• Oversees the security department and their day to day operations.
• Trains all security personnel in their areas of responsibilities.
• Reviews policies, procedures, and instructions on a regular basis.
• Evaluates possible hazards or threats to security.
• Promotes a safety attitude amongst all employees.
• Ensures safety of persons in the hotel and property assets.
• Reports irregularity in employee or guest behavior.
• Handles loss, damage and accidents.
• Handles, documents, and follows up with necessary persons any accidents occurring in the hotel premises.
• Investigates theft as reported by guest or employee.
• Documents all action in the department, including: emergencies, loss, theft, or accident.
• Participates in weekly department heads meeting in absence of Security Manager - Rooms Division Meeting and any others if requested.
• Secondary liaison for interacting with government officials, ministries, and law enforcement agencies.
• Reviews emergency procedures regularly.
• Delivers security training and promotes awareness within the hotel.
• Performs other duties as assigned by Security Manager.

Job Requirements

• Minimum education of High Vocational diploma in any discipline. Bachelor degree holder have an advantage.
• At least 3 years’ experience in a similar position in security & safety operations.
• Basic knowledge of local laws, investigative methods and fire safety.
• Criminal-free record
• Have good English communication skills both in written and spoken
• Possess professional disposition with good communication and interpersonal skills

[What you will be working on]

Lead the IT Governance and Security Team to:

- Develop frameworks and processes to support both Enterprise and Teaching & Learning business objectives of ITE

- Develop, implement and monitor reporting mechanisms for governance, security and risk practices to support compliance and highlight areas of exposure.

- Provide guidance to other IT and business units in the conducting and updating of risk assessment for IT projects and systems.

- Review to identify security risks and breaches to ensure the organisation’s assets and information are appropriately secured at all times.

- Communicate security basics to the general user population including formulating Security Awareness program to raise user awareness and understanding of basic security concepts

- Develop and updating of the IT Business Continuity Plan.

- Monitor and review compliance with risk management strategies and practices to ensure ICT-related activities are meeting Singapore Government Instruction Manual and relevant ICT security best practices.

- Working with project teams to collate, track deliverables and ensure timely update to IT & Digitalisation Steering Committee.

- Work with project teams to ensure timely submission on various polls, monthly/quarterly/yearly submission requests from internal and external bodies - Work collaboratively with other corporate oversight functions to identify and implement consistent and effective approaches to risk governance and control-based activities

- Work with internal units to conduct regular reviews and audit of IT systems and applications to ensure statutory compliance

- Liaise and support internal and external auditors to facilitate IT audits, reviews and timely closure of audit outcomes

- Provide secretariat support to IT & Digitalisation Steering Committee

- Lead in the investigation of cyber security incidents by working with other government agencies

[What we are looking for]

- Possess suitable academic or professional credentials in Information Technology, Computer Engineering, Computer Science or related fields.

- Possess relevant IT Governance, security and project management certifications (eg COBIT, CISSP, CISM, PMP).

- Minimum 5 years’ experience in either IT Governance and/or IT Security & Operations.

- Having experience in leading cross-functional teams in IT Governance and/or IT Security & Operations would be an advantage

- Possess leadership qualities as well as good people and collaboration skills. - Good presentation, verbal and written communications skills.

- Diligent, resourceful and able to multitask in a dynamic work environment - Meticulous in planning and tracking - Familiarity with tendering procedures, ICT Security Standards in Singapore Public Service and managing IT budgets would be an advantage.

Applicants may check their application status at the end of 8 weeks from the closing date of this job posting.