Total 851 Others it analyst job vacancies in Legal / Public / Security category in Malaysia

Responsibilities:

• Understand Customer's Security Framework: Familiarize with and stay updated on customer's information security policies, processes, procedures, and guidelines.
• Ensure Compliance: Ensure adherence to the customer's cybersecurity policies and standards.
• Security Assurance Activities: Perform activities to secure customer's data systems and networks. This includes, but is not limited to, log analysis and security assessments of customer ICT systems.
• Vulnerability Management: Manage and conduct vulnerability assessments and coordinate penetration testing activities to identify and mitigate security risks.
• Security Awareness Training: Conduct information security awareness training sessions to educate employees and stakeholders on security best practices and policies.

Requirements:

• Minimum 2 years of experience.
• Professional certifications such as CISSP, CISM, or similar are highly desirable.
• Proven experience in information security, including log analysis, security assessments, vulnerability management, and penetration testing.
• Strong understanding of cybersecurity frameworks, policies, and procedures.
• Excellent communication skills, with the ability to conduct training sessions and effectively communicate security concepts to non-technical audiences.
• Ability to work independently and as part of a team, with strong organizational and coordination skills.

Duties & Responsibilities

• Be clear of customer's security framework, such as information security policies, processes/procedures, guidelines and etc.
• Ensure compliance with customer's cybersecurity policies.
• Perform activities necessary to ensure customer's data systems and networks are secure, sure activities are not limited to log analysis and security assessment of customer ICT systems.
• To manage/conduct vulnerability assessment and coordinate penetration tests activities.
• To conduct information security awareness training
• Skills: CISM, CISSP

Please refer to U3’s Privacy Notice for Job Applicants/Seekers at https://u3infotech.com/privacy-notice-job-applicants/. When you apply, you voluntarily consent to the collection, use and disclosure of your personal data for recruitment/employment and related purposes.

Duties & Responsibilities

• Be clear of customer's security framework, such as information security policies, processes/procedures, guidelines and etc.
• Ensure compliance with customer's cybersecurity policies.
• Perform activities necessary to ensure customer's data systems and networks are secure, sure activities are not limited to log analysis and security assessment of customer ICT systems.
• To manage/conduct vulnerability assessment and coordinate penetration tests activities.
• To conduct information security awareness training

Requirements

• Degree in Computer Science, Information Systems, Engineering or equivalent
• At least 3 years of IT security experience in areas of security governance, risk management, application security design, security project management, security operation, network security
• Must have either:CISSP, CISM, CISA, CCSP or other similar security certifications
• Self-motivated with the ability to work independently and as a team member with minimal direction
• Strong interpersonal and stakeholder management skills
• Good written and communication skills
• Singapore Citizen only

Position

Data Security Specialist- Data Security and Endpoint Security

Data Security Specialist is a technical Specialist role within the Data Security Services team and will be responsible for managing, administration and supporting the Data Security and Endpoint Security technologies for the bank.

Person will be the technical point of contact for the Run team and the related activities to data security and will be the last level of escalation for the Security specialists in the team. He/She is also responsible for the technical transition and validation of Security services from other regions to Singapore. He/She will be involved in projects and POC’s that may involve security services. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Specialist on the technologies within data security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France and UK) and Asia remotely from Singapore. France infrastructure represents approximately 80% of the worldwide production activities of CA-CIB in Singapore.

Team works in Europe time zones and this role will be aligned primarily to Paris working hours. Flexible rotations are followed based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect,
• Encryption Solutions: Disk Encryption, File and Folder encryption,
• Database Audit Monitoring solutions
• Email and Web Phishing Prevention solutions.
• Vulnerability Management

Detailed Job Responsibilities

The Specialist has a wide spectrum of responsibilities and actions. Person will be responsible for following (but not limited to) responsibilities in day-to-day work:

As the Specialist of the team, he/she:

• act as the last level of escalation for the team members
• own Incident, Problem and change management process for the team
• assigns technical tasks and manages delegation
• animates the team to encourage collaboration and sharing of practices
• participates to recruitment process for the team

As the Specialist of his/her scope of activity, he/she:

• is actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management
• Is the final technical approver for any changes into Data Security systems and is accountable for any technical changes in the environment from a RUN/BAU perspective
• Is involved in projects like End of Life, New Builds, migrations and technical upgrades of the solution managed by the team
• Participates in global Infra events (like Power down and DR Tests)
• ensures activity is performed in compliance with norms, standards, processes and procedures
• gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting
• ensures documentation is up to date and relevant for use
• lead the continuous improvement initiatives
• responsible to drive and deliver root cause for any high severity issues
• Focus on automation and optimum use of the team to improve efficiency
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

• Work schedule is mainly focused to support Asia and EMEA (Paris) time zone; however, may have to support during non-offce hours for critical incidents or escalation as per the assigned on-call support requirements;
• Rotational Shift schedule is followed;
• Work Hours: 2 PM – 11 PM SGT (with 1 week of General shift 9 AM – 6 PM SGT).

Qualifications and Profile

Functional

• 8 - 10 years of IT Security experience in administration and management of IT Security technologies primarily Symantec Data Loss Prevention, Symantec Endpoint Protection, Email Security, Data Classification and other endpoint & data security solutions;
• Should be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;
• Knowledge of different domains of IT Security;
• Working & hands-on experience in administering the IT Security Solutions;
• Must have experience in working in similar Production setup in Run (Operations) mode;
• Ability to apply risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;
• Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;
• Excellent in analytical, communication and documentation skills;
• Ability to organize work and be able to priories work as per the needs of Production Operation’s needs;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Ability to work independently and as well as a part of team and is able to work under minimal supervision;
• Should have time management skills and able to manage work in fast moving environment;

Technical

• Hands-on experience on Symantec Data Loss Prevention (DLP);
• Highly proficient in data leakage prevention (DLP) technologies - troubleshooting and configuration management;
• Deployment, integration and administration experience of various components of Symantec DLP:

- Symantec Endpoint Protect

- Symantec Web Prevent

- Symantec Email Prevent

- Symantec Enforce

• Must have experience in defining, designing and configuring DLP Policies as per the business requirements;
• Deploy, upgrade and troubleshooting knowledge on Symantec DLP solution;
• Scripting knowledge (Phyton, Regular Expression, Powershell) is desirable;
• Ø Professional Certifications:

- CISSP certified is highly preferred

-Symantec Certified Specialist: Administration of Data Loss Prevention (any version) is highly preferred.

Interested applicants, please email your resume to Shaun Quek Yew Meng

Email: shaunquek@recruitexpress.com.sg

CEI Reg No: R1660732

EA Licence No: 99C4599

Job description
We are seeking a highly skilled and experienced Senior Cyber Security Analyst to join our team. As a Senior Cyber Security Analyst, you will play a pivotal role in safeguarding our organization's systems, networks, and data from cyber threats. Your expertise in cybersecurity frameworks, risk assessment, incident response, and security operations will be crucial in protecting our assets and ensuring compliance with industry regulations. This is an exciting opportunity to lead and contribute to our cybersecurity initiatives while mentoring junior team members.

Responsibilities:
• Lead the development and implementation of comprehensive cybersecurity strategies and initiatives.
• Conduct regular security risk assessments, identify vulnerabilities, and recommend appropriate controls and countermeasures.
• Monitor and analyze security events, alerts, and logs to detect and respond to potential threats and breaches.
• Lead incident response efforts, including investigation, containment, eradication, and recovery, ensuring timely and effective resolution.
• Collaborate with cross-functional teams to design and implement secure infrastructure, systems, and applications.
• Conduct security assessments and penetration testing to identify and address vulnerabilities.
• Provide guidance and support in the development and implementation of security policies, standards, and procedures.
• Stay up-to-date with the latest cybersecurity threats, trends, and technologies, and recommend proactive measures to enhance our security posture.
• Mentor and provide guidance to junior members of the cybersecurity team, promoting professional growth and development.
• Ensure compliance with relevant industry regulations and frameworks (e.g., ISO 27001, NIST, GDPR).

Requirements:
• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience).
• Must have at least 2 years of proven work experience as a Cyber Security Analyst, with a focus on security operations, incident response, and risk assessment.
• In-depth knowledge of cybersecurity principles, frameworks, and best practices.
• Experience with security monitoring tools, SIEM solutions, and threat intelligence platforms.
• Familiarity with penetration testing methodologies, vulnerability assessment tools, and secure coding practices.
• Strong understanding of network security, firewall configuration, intrusion detection systems, and endpoint protection.
• Proficiency in scripting languages (e.g., Python, PowerShell) for automation and security tool integration.
• Familiarity with cloud security principles and technologies (e.g., AWS, Azure).
• Excellent analytical and problem-solving skills, with the ability to analyze complex security issues and recommend effective solutions.
• Strong written and verbal communication skills, with the ability to convey complex security concepts to technical and non-technical stakeholders.
• Relevant certifications such as CISSP, CISM, CEH, or GIAC certifications are highly desirable.
• Proven leadership skills, with the ability to lead and mentor junior team members.

Additional Information:
We offer competitive compensation packages, a collaborative work environment, and opportunities for professional growth and development. If you are a highly skilled and motivated Senior Cyber Security Analyst looking to make a significant impact in a forward-thinking organization in Australia, we would love to hear from you. Apply today with your resume, cover letter, and any relevant certifications.

Permanent Residents (PR), Australian / Citizens are eligible to apply Job Type: Full-time Salary: $80,000 to $120,000 per year (inclusive of super)

We are representing our client (A Software Engineering Firm) to look for a highly motivated and skilled Cybersecurity Analyst with Security Operations Center (SOC) experience to join their team.

The candidate will be responsible for protecting the organization's IT infrastructure and data from cyber threats, leverage his/her expertise in Endpoint Detection and Response (EDR) tools, log management (NXLog), and security architecture to identify, analyze, and respond to security incidents within a fast-paced SOC environment.

Responsibilities

• Play a key role in reviewing and improving the existing security posture.
• Monitor and analyze security events and alerts from various sources (e.g., EDR, network security tools, SIEM) to identify potential security incidents.
• Investigate and respond to security incidents according to established SOC procedures, including escalation to senior analysts when needed.
• Leverage EDR tools (e.g. Crowdstrike Falcon, Palo Alto Cortex XDR) to investigate suspicious activity on endpoints.
• Configure and maintain NXLog for efficient log collection and analysis within the SOC workflow.
• Participate in security architecture reviews and provide recommendations for improvement based on SOC findings.
• Stay up-to-date on the latest cybersecurity threats and vulnerabilities.
• Document security incidents, findings, and remediation steps.
• Collaborate with the security team and other IT teams to ensure effective security practices.

Requirements

• Minimum of 3 years of experience as a Cybersecurity Analyst, preferably within a SOC environment.
• Security+ or equivalent certification is preferred
• CISSP or SANS certifications related to EDR and security architecture (preferred).
• Excellent scripting skills (Python, PowerShell).
• Strong understanding of cybersecurity concepts, principles, and SOC operations.
• Experience working with EDR tools (e.g., Crowdstrike Falcon, Palo Alto Cortex XDR).
• Proficient in log management tools (e.g., NXLog, Splunk, ELK Stack).
• Experience in security architecture design and review is a strong plus.
• Excellent analytical and problem-solving skills.
• Strong communication and collaboration skills.
• Ability to work independently and as part of a team in a fast-paced environment.

Position

We are seeking a knowledgeable and experienced Cybersecurity Consultant to join our team of experts. As a Cybersecurity Consultant, you will provide strategic guidance and expertise to clients in managing and mitigating cyber risks. Your primary responsibility will be to manage the transition of the new services from other regions to Singapore and manages the project/transition. The role is a techno-managerial role and will have to be involved in DLP policy/rule modifications as well. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Expert on the technologies within data and endpoint security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France, UK, and Russia) remotely from Singapore. France infrastructure represents approximately 90% of the worldwide production activities.

Team works in Asia and Europe time zones and flexible rotational shift is based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect,
• Encryption Solutions: Disk Encryption, File and Folder encryption,
• Database Audit Monitoring solutions
• Email and Web Phishing Prevention solutions.
• Vulnerability Management Services
• Access Management

Qualifications and Profile

• Minimum 12 years of IT Security experience and with 3-4 years of team management experience.
• Must have knowledge of different domains of IT Security;
• Must have managed a team size of 8 or more Security Specialists in an enterprise level environment;
• Must have prior hands-on experience in managing the IT Security Solutions;
• Must have experience in working in Production setup in Run (Operations) mode;
• Must have working experience in managing the endpoint and data security solutions for a Large enterprise level environment, working experience in financial organization is preferred;
• Ability to apply risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;
• Excellent in analytical, communication and documentation skills;
• Ability to organize work and be able to prioritise work as per the needs of Production Operation’s needs;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Ability to work independently and as well as a part of team and is able to work under minimal supervision;
• Should have time management skills and able to manage work in fast moving environment;
• Knowledge of French language is preferred as required to liaise with stakeholders in France
• Should have hands-on technical exposure on wide spectrum of endpoint and data security technologies e.g. Symantec Data Loss Prevention (DLP), Symantec Endpoint Protection, Phishing Prevention and other IT Security technologies;
• Must have experience in defining, designing and configuring DLP Policies as per the business requirements;
• Professional Certifications:

- CISSP, CISM certified is highly preferred

• Must be experienced to cover the scope as mentioned in the SKILLS MATRIX section of this document.

Work Schedule

• Work Timing is flexible and is scheduled to manage the operations within business hours of Asia and Emea timezone.
• Role may have to attend and lead any critical issues escalated outside of working hours, when operational needs.

Education Requirements

At least a Bachelor's degree in any of these faculties:

• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Interested applicants, please email your resume to Shaun Quek Yew Meng

Email: shaunquek@recruitexpress.com.sg

CEI Reg No: R1660732

EA Licence No: 99C4599

Reference: TQ2324_2135_355
Vacancy: 2
Job title: IT Security Analyst
Location: Leicester
Job Purpose:

TESTQ Technologies is an IT services and solutions company whose offerings spans over variety of industry sectors with strong technical, domain and process expertise helping clients grow their businesses and decrease operational costs on continuous basis in an ever-changing business environment.

This opportunity is in the solution design and development arena for IT Security Analyst who will play a major role with the technical design and development of company’s technical offerings. The role is based at our Leicester office with occasional assignments at client locations.

Job Description (Main Duties and Responsibilities):
Conduct or coordinate vulnerability scans, and penetration tests on campus systems, document findings, and recommend risk mitigation strategies.
Operate, administer and monitor network and host-based intrusion detection/prevention systems
Prefer understanding and background with Intrusion Detection Systems and SIEM products.
Assist other technical support staff in identifying and implementing appropriate security safeguards, including patch application and anti-malware strategies.
Ability to present and explain complex technical topics, problems, alternative solutions to others.
Analyze network traffic, intrusion attempts, activity logs, and system alerts for trends, anomalies, and potential security breaches.
Protect systems and information infrastructure, including firewalls and data encryption programs
Develop scripts, tools, and procedures to automate scans, assessments, and other monitoring and discovery activities.
Upgrade systems to enable security software
Install and upgrade antivirus software
Test and evaluate new technology
Perform penetration testing
Configure and utilize firewalls, encryption programs, and other security measures.
Analyze IT requirements and provide objective advice on the use of IT security requirements
Key Skills, Qualifications and Experience Needed [The candidate must demonstrate these in all stages of assessment]
3 to 4 years of experience in a security analyst or related position.
Work experience with the following technology vendors and products: Splunk Cloud, Rapid7 Nexpose
Thorough understanding of Microsoft’s enterprise technology platform, including Azure, Active Directory, SQL, Office365, and the Windows server and desktop operating systems.
Demonstrated experience implementing and/or enforcing security and compliance frameworks such as NIST, Cobit, and ISO, vulnerability Scanner, Sophos Antivirus, Varonis DatAlert, ForeScout CounterACT
Technical knowledge of enterprise-class technologies such as firewalls, routers, switches, wireless access points, VPNs, and desktop and server operating systems.
Engage with key stakeholders to support internal and external audit activities to ensure compliance with regulations such as: SOC, FCA, NYDFS, GDPR, HIPAA
One or more of the following certifications: CEH, CISM, CompTIA Security+, CISSP, GSEC

Other Key skills:
Good analytical and Problem-solving skills
Good communication skills
A thorough approach and Self starter
Focus on quality and delivery
Working together in teams.
Leadership and effective decision making.
Flexible Attitude
Excellent customer service

Qualifications:
Bachelor's degree in Computer Engineering, or a related field is preferrable. Master’s degree preferred
Salary: GBP 46000 to 60000 per annum
Published Date: 15 May 2024
Closing Date: 15 June 2024
Evaluation: CV Review, Technical Test, Personal and Technical Interview and References
Job Type: Full-time, Permanent [Part time and Fixed Term option is available]

Vacancy Information

Hourly rate of pay: £16.37 - £17.78

Days and Hours of Work:
Monday - Friday, 09:00-17:00
Flexi time is applicable, and starting and finishing times are flexible.
To start 1st July 2024.

We are looking to recruit an IT Analyst to work in our IT Infrastructure & Security Team. Your primary focus will be on systems administration of our key systems associated with the day to day running of our networks and cyber security functions. We are looking for someone with strong attention to detail and accuracy combined with a good understanding of the Council's business critical networks and the devices and software we run on them.

The key tasks of the role include:
User management and access; daily administration of our M365 and Azure tenancies; systems administration of our web filtering products, assisting with the cyber and information security functions of the team, provision of IT support and assisting with the project work of the team and the wider IT Service.

Home Working Consideration
Applications for homeworking or hybrid working will be considered for this post, subject to a trial period and in accordance with East Lothian Council’s Home Working and Worksmart Policies. Home or Hybrid working options can be discussed with candidates invited for interview. All applicants must live in the UK and will be expected to attend Council offices from time to time as required.

INTERNAL APPLICANTS ONLY
This post is open only to current employees of East Lothian Council (this includes agency/casual/locum staff who are currently undertaking work for us).

Job Details

To work as a member of the IT Infrastructure & Security team with a primary focus on providing IT support to all Council staff to help bring about Council Wide digital transformation.

The key areas of responsibility are:
- Providing Level 1 IT Support and assisting the support efforts of others.
- Assist with the work of the IT Service.
- Provide professional advice and guidance to enable council wide digital transformation.

The Jobholder will be a proactive individual with excellent customer service with experience of assessing client and service need.

Please download the Job Outline/Person Specification (available under 'Job Attachments') for the full range of tasks and duties associated with this job. You will need to refer to these in order to complete the application form. You must ensure you meet every 'essential' criteria stated on the Person Specification to be considered for interview.

The ‘East Lothian Way’– values and behaviours we expect our employees to demonstrate in their everyday work. Should you be invited to interview, you may be asked questions based on these behaviours. Please refer to the document via the link to familiarise yourself with them.

Job Requirements

Relevant Qualifications
Relevant HNC and/or able to demonstrate equivalent knowledge, skills and competencies gained through relevant experience.

Driving Licence
As the duties of this role require you to effectively travel to successfully undertake the full remit of the role, you must hold a current driving licence and have access to a vehicle.*
(*Where a disability precludes you from obtaining a driving licence, ELC will take into account its responsibility to make reasonable adjustments to allow for your disability.)

Disclosure
The preferred candidate for this position may be subject to a Basic Disclosure provided by Disclosure Scotland prior to a formal offer of employment being made by East Lothian Council.

Please note:
If a Disclosure check is required and you have spent more than 3 months working or living outwith the UK in the last 5 years then you will also be required to present a copy of an overseas criminal record check. Details of how to apply and contact details can be found on the GOV.UK website.

Additional Information

For additional East Lothian Council employment information please click on the following link:
www.eastlothian.gov.uk/nonteachinginfo

If you have any difficulties creating an account on MyJobScotland or applying for this post please contact the MyJobScotland support team via this link https://www.myjobscotland.gov.uk/contact-us.

If you require further information about this vacancy, please call 01620 827868, or email us on recruitment@eastlothian.gov.uk

Please note: We do not accept CV's (either electronically or by mail). All our vacancies must be applied for by fully completing the on-line application form. Although there is an ‘import data from my CV’ function on MyJobScotland, this only imports very limited data and should not be relied upon to complete the application form.

Proud member of the Disability Confident employer scheme

Responsibilities:

• Clearly understand the customer's security framework, including information security policies, processes/procedures, guidelines, etc.
• Ensure compliance with the customer's cybersecurity policies.
• Perform activities to secure the customer's data systems and networks, including but not limited to log analysis and security assessment of customer ICT systems.
• Manage and conduct vulnerability assessments and coordinate penetration testing activities.
• Conduct information security awareness training.

Requirements:

• At least 5 years of experience in cybersecurity with a focus on SecOps.
• Must have certifications: CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager).
• Proven experience in leading and managing a team within projects.
• Strong understanding of security frameworks and standards.
• Good interpersonal and communication skills.
• Experience in managing multiple stakeholders is preferred.
• Ability to clearly present business propositions, ICT solutions, and service information.
• Result-oriented with the ability to work independently and under pressure.
• A team player with a pleasant personality.
• Dynamic and able to adjust to a fast-paced environment.

To apply please click the Apply button or send us your updated profile to recruit@percept-solutions.com

EA Licence No.:18S9405 / EA Reg. No.:R1330864

Percept Solutions is undergoing a growth phase and are on the lookout for talent. Applicants are encouraged to follow Percept Solutions on LinkedIn @ https://www.linkedin.com/company/percept-solutions/ to stay up to date on our upcoming roles and events.

Position Type :

Full time

Type Of Hire :

Experienced (relevant combo of work and education)

Education Desired :

Bachelor of Computer Science

Travel Percentage :

15 - 25%

About the team:

It’s an amazing opportunity to join a Talented team of innovative and committed folks doing interesting work at the world’s largest global provider dedicated to financial technology solutions.

What you will be doing:

In this role you will be performing all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.
 

• Hands-on experience in Information Security Management System implementation and audit inline to ISO 27001 standard.
• Provide oversight on Information Security Management System (ISMS) implementation and audit management including collection, evaluation and retention of evidence; monitoring results of vulnerability scans and remediation; and ensure compliance with FIS policy.
• Knowledge/ Experience in SSAE18 assessments.

• Executes security controls to prevent hackers from infiltrating company information or jeopardizing programs.
• Researches attempted efforts to compromise security protocol and recommends solutions.
• Maintains security systems and administers security policies to control access to systems.
• Creates information security documentation related to work area and completes requests in accordance with company requirements.
• Responds to information security-related questions and inquiries using established information security tools and procedures.
• Resolves and/or performs follow through to resolve all information security issues and questions.
• Implements and administers information security controls using software and vendor security systems.
• Identifies opportunities and executes plans to improve workflow and understands and quantifies business impacts of those improvements for communication to management.
• Interfaces with user community to understand security needs and implements procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain security.
• Provides status reports on security matters to develop security risk analysis scenarios and response procedures.
• Other related duties assigned as needed.

Education Requirements
Bachelor’s/Master’s degree in computer science or the equivalent combination of education, training, or work experience.

What you bring

• One or more relevant professional certifications preferred (CISA, CISSP, ISO 27001 Lead Auditor).
• 4-5 year of work experience in Information Security/Cybersecurity/Risk Management
• Knowledge of ITGC, Cloud Security, Network Security will be an added advantage.
• Knowledge of networks technologies (protocols, design concepts, access control)
• Knowledge of security technologies (encryption, data protection, design, privilege access, etc.)
• Proficiency in time management, communications, decision making, presentation and organizational skills
• Proficiency in planning, reporting, establishing goals and objectives, standards, priorities and schedules
• Basic to intermediate decision-making and problem solving skills
• Basic to intermediate verbal and written communication skills to technical and non-technical audiences of various levels in the organization
• Experience establishing and maintaining effective working relationships with employees and/or clients

What we offer you:

• A multifaceted job with a high degree of responsibility and a broad spectrum of opportunities
• The chance to work on some of the most challenging, relevant issues in financial services & technology
• A work environment built on collaboration, flexibility, and respect
• A modern, international work environment and a dedicated and motivated team
• A variety of career development tools, resources, and opportunities

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.

Sourcing Model

Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.

#pridepass

Position Type :

Full time

Type Of Hire :

Experienced (relevant combo of work and education)

Education Desired :

Bachelor of Computer Science

Travel Percentage :

15 - 25%

About the team:

It’s an amazing opportunity to join a Talented team of innovative and committed folks doing interesting work at the world’s largest global provider dedicated to financial technology solutions.

What you will be doing:

In this role you will be performing all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.

• Hands-on experience in Information Security Management System implementation and audit inline to ISO 27001 standard.
• Provide oversight on Information Security Management System (ISMS) implementation and audit management including collection, evaluation and retention of evidence; monitoring results of vulnerability scans and remediation; and ensure compliance with FIS policy.
• Knowledge/ Experience in SSAE18 assessments.

• Executes security controls to prevent hackers from infiltrating company information or jeopardizing programs.
• Researches attempted efforts to compromise security protocol and recommends solutions.
• Maintains security systems and administers security policies to control access to systems.
• Creates information security documentation related to work area and completes requests in accordance with company requirements.
• Responds to information security-related questions and inquiries using established information security tools and procedures.
• Resolves and/or performs follow through to resolve all information security issues and questions.
• Implements and administers information security controls using software and vendor security systems.
• Identifies opportunities and executes plans to improve workflow and understands and quantifies business impacts of those improvements for communication to management.
• Interfaces with user community to understand security needs and implements procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain security.
• Provides status reports on security matters to develop security risk analysis scenarios and response procedures.
• Other related duties assigned as needed.

Education Requirements
Bachelor’s/Master’s degree in computer science or the equivalent combination of education, training, or work experience.

What you bring
• One or more relevant professional certifications preferred (CISA, CISSP, ISO 27001:2022 Lead Auditor).

4-5 Years of Work experience in Information Security/Risk Management

• Knowledge of ITGC, Cloud Security, Network Security will be an added advantage.

• Knowledge of networks technologies (protocols, design concepts, access control)
• Knowledge of security technologies (encryption, data protection, design, privilege access, etc.)
• Proficiency in time management, communications, decision making, presentation and organizational skills
• Proficiency in planning, reporting, establishing goals and objectives, standards, priorities and schedules
• Basic to intermediate decision-making and problem-solving skills
• Basic to intermediate verbal and written communication skills to technical and non-technical audiences of various levels in the organization
• Experience establishing and maintaining effective working relationships with employees and/or clients

What we offer you:

• A multifaceted job with a high degree of responsibility and a broad spectrum of opportunities
• The chance to work on some of the most challenging, relevant issues in financial services & technology
• A work environment built on collaboration, flexibility, and respect
• A modern, international work environment and a dedicated and motivated team
• A variety of career development tools, resources, and opportunities

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.

Sourcing Model

Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.

#pridepass

Position Type :

Full time

Type Of Hire :

Experienced (relevant combo of work and education)

Education Desired :

Bachelor of Computer Science

Travel Percentage :

15 - 25%

About the team:

It’s an amazing opportunity to join a Talented team of innovative and committed folks doing interesting work at the world’s largest global provider dedicated to financial technology solutions.

What you will be doing:

In this role you will be performing all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.

• Hands-on experience in Information Security Management System implementation and audit inline to ISO 27001 standard.
• Provide oversight on Information Security Management System (ISMS) implementation and audit management including collection, evaluation and retention of evidence; monitoring results of vulnerability scans and remediation; and ensure compliance with FIS policy.
• Knowledge/ Experience in SSAE18 assessments.

• Executes security controls to prevent hackers from infiltrating company information or jeopardizing programs.
• Researches attempted efforts to compromise security protocol and recommends solutions.
• Maintains security systems and administers security policies to control access to systems.
• Creates information security documentation related to work area and completes requests in accordance with company requirements.
• Responds to information security-related questions and inquiries using established information security tools and procedures.
• Resolves and/or performs follow through to resolve all information security issues and questions.
• Implements and administers information security controls using software and vendor security systems.
• Identifies opportunities and executes plans to improve workflow and understands and quantifies business impacts of those improvements for communication to management.
• Interfaces with user community to understand security needs and implements procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain security.
• Provides status reports on security matters to develop security risk analysis scenarios and response procedures.
• Other related duties assigned as needed.

Education Requirements
Bachelor’s/Master’s degree in computer science or the equivalent combination of education, training, or work experience.

What you bring
• One or more relevant professional certifications preferred (CISA, CISSP, ISO 27001:2022 Lead Auditor).

4-5 Years of Work experience in Information Security/Risk Management

• Knowledge of ITGC, Cloud Security, Network Security will be an added advantage.

• Knowledge of networks technologies (protocols, design concepts, access control)
• Knowledge of security technologies (encryption, data protection, design, privilege access, etc.)
• Proficiency in time management, communications, decision making, presentation and organizational skills
• Proficiency in planning, reporting, establishing goals and objectives, standards, priorities and schedules
• Basic to intermediate decision-making and problem-solving skills
• Basic to intermediate verbal and written communication skills to technical and non-technical audiences of various levels in the organization
• Experience establishing and maintaining effective working relationships with employees and/or clients

What we offer you:

• A multifaceted job with a high degree of responsibility and a broad spectrum of opportunities
• The chance to work on some of the most challenging, relevant issues in financial services & technology
• A work environment built on collaboration, flexibility, and respect
• A modern, international work environment and a dedicated and motivated team
• A variety of career development tools, resources, and opportunities

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.

Sourcing Model

Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.

#pridepass

About our client:

We're partnering with a leading Singaporean FinTech company on a mission to revolutionise bill management. They've processed over 650 million bills and are now transforming into a regional powerhouse, offering innovative cloud-based payment solutions. Their goal? To empower users with a seamless and efficient payment experience, freeing them to focus on what matters most.

Become a Guardian of the Digital Realm:

Are you a passionate IT security professional with a keen eye for detail? Do you thrive in a fast-paced environment and enjoy tackling complex challenges? If so, this is the perfect opportunity for you to play a pivotal role in safeguarding our company's critical IT infrastructure and data.

In this critical role, you'll:

• Protect Digital Assets: You'll be responsible for identifying, assessing, and mitigating potential cyber threats and vulnerabilities. This includes conducting regular security assessments, evaluating technologies against security standards, and developing robust risk mitigation strategies.
• Ensure Compliance: Staying informed of the latest IT security regulations (e.g., PCI-DSS) is key. You'll develop and implement security policies and procedures, monitor and audit security activities, and report on compliance status to stakeholders.
• Master of Security Operations: Monitoring security logs for suspicious activity, mitigating potential data loss events, investigating security incidents, and participating in incident response exercises are all part of your critical duties. You'll also assist with deploying and maintaining essential security tools.
• Collaboration is Key: Building a strong security culture is essential. You'll work closely with IT operations, development, and other departments to promote best practices, provide security training to employees, and collaborate with external auditors. Regular reports will keep management informed of the overall IT security posture.

We're looking for a highly skilled professional who:

• Holds a Bachelor's degree in Cybersecurity, Information Technology, or a related field (or equivalent experience).
• Certifications such as CISA, CISM, or CISSP are highly desirable.
• Possesses a minimum of 3-5 years of experience in IT security, risk management, and compliance.
• Demonstrates a strong understanding of IT security concepts, frameworks, and methodologies.
• Has a working knowledge of relevant IT security regulations and standards.
• Possesses experience with industry-standard security tools (e.g., vulnerability scanners, SIEM, IDS/IPS).
• Knowledge of programming languages like PHP, C++, and Java is a plus.
• Has excellent analytical and problem-solving skills with a keen eye for detail.
• Thrives in a collaborative environment with strong communication and interpersonal skills.
• Is self-motivated, independent, and can work effectively both independently and as part of a team.

Be Part of Something Special:

This is a unique opportunity to join a dynamic and growing company where your IT security expertise will be highly valued. You'll work alongside a talented team in a collaborative environment, playing a vital role in safeguarding the company's digital assets.

DID +65 6513 5697

Key Selling Point

• Dynamic and innovative work environment
• Corporate culture that invests in its people and their success
• Office location near town, hybrid work arrangement

Our client, a well-known MNC company is looking for candidates for the IT Security Engineer position.

Responsibilities: -

• Work as an IT Security coordinator and security operation centre analyst for ASEAN region.
• Align cyber security needs with the business direction.
• Initiate, develop, and maintain IT security policies, standards, and procedures.
• Facilitate a comprehensive Cyber Security training, awareness program and business continuity plans.
• Perform IT Security risk assessments, propose and track remediation tasks.
• Ensure IT compliance & governance measures are in place & followed.
• Conduct audits of internal IT services and 3rd party services, as well work with external auditors on external audits.
• Advise on appropriate cyber security solution & technology trends to be deployed.
• Perform in-depth investigation to determine the root cause of a security incident.
• Conduct analysis of logs from a wide range of systems, such as firewalls, EDR, SIEM, Anti-Virus, Vulnerability management to detect various types of IT-related threats.
• Monitors security event reports and actions; ensuring the appropriate response is performed and coordinated.

Requirements:

• Degree in Computer Science/ Information Technology or equivalent
• Minimum 1 year of working experience, information security related
• Strong interpersonal skills, analytical, with a flair for numbers
• Good communication and presentation skills
• Positive attitude in challenging work environment
• Excellent Team player with good people management and development skills
• Good interpersonal and communication skills
• Ability to work well in a team
• Ability to perform multi-tasking

PERSOLKELLY Singapore Pte Ltd | EA License No.: 01C4394 | UEN No. 200007268E
Registration No.: R23112488 (Julian Nerchan)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates collecting, using and disclosing my personal data for the purposes set out in the Privacy Policy which is available at www.persolkelly.com.sg I also acknowledge that I have read, understood, and agree to the said Privacy Policy.