Total 49 information technology job vacancies in Legal / Public / Security category in Kulim Hi-tech Park

Summary

Working as part of the information security office within the IT department at Pacific Prime CXA, the GRC (Governance, Risk and Compliance) Manager will be responsible for leading the day-to-day IT compliance, data governance and IT risk management functions. Primary responsibility will include defining, creation, management and maintenance of IT and organizational policies and standards in support of legal and regulatory compliance needs as well as general IT and organizational information security controls and practices.

Responsibilities

• Establishing corporate information security policies, standards, guidelines, baselines and practices that protect the integrity and confidentiality of information and network infrastructure.
• Develop procedures and controls to assure compliance with applicable regulatory and legal requirements as well as good business practices.
• Proactively identify audit and compliance related issues to reduce the risk of security exposures, gaps in the design and operating effectiveness of controls whilst seeking opportunities for continuous improvement.
• Driving IT security programs in line with internal and external standards and ensuring compliance with in-country regulatory requirements.
• Maintaining oversight to enterprise-wide security technologies, actively monitoring & responding to security events.
• Develop and maintain standards and controls to ensure the protection of data based on classification.
• Work directly with business units to identify critical data and ensure appropriate data classification and protection standards are implemented.
• Manage the attestation program for all IT controls to support assurance and alignment across all information security stakeholders.
• Support internal and external audit process for relevant compliance concerns including PDPA, GDPR, MAS TRM, ISO27001, etc.
• Perform and evaluate information security risk assessments for various information systems and processes, including annual penetration tests.
• Develop, monitor, track and report against IT Security metrics and KPIs that help the IT Infra understand threats, vulnerabilities and risks associated with protecting information across the enterprise and plans to mitigate those risks.
• Develop and maintain the IT Risk Register to support ongoing tracking and management of all identified risks and issues and to ensure adequate and timely resolutions to all audit/review issues relating to security.
• Lead the development and operation of third-party vendor risk assessment, management and due-diligence program.
• Conduct client meeting and drive all the questions arising from client relationship teams. This includes completing client’s info security questionnaires and liaising with clients on all such requirements within tight deadlines.
• Formulate, lead and communicate security goals and objectives based on an integrated understanding of business priorities, security vision and strategy.
• Providing security related support to IT and business team users and facilitate recommendations on future technical trends/directions that encompass multiple systems and teams to meet business critical initiatives.
• Point of contact to assist and advise on Information Security related matters

Requirement

• BSc in Computer Science or equivalent; with 5+ years of relevant working experience in IT governance, risk, and compliance management.
• ISACA / CISM / CISSP Certification.
• Strong understanding of fundamental information security concepts and technology.
• Familiarity with ISMS and security frameworks, particularly NIST Cybersecurity Framework.
• Understanding of Information Security principles, IT infrastructure (including operating systems, applications, communications and network protocols), architecture elements of Identity Access Management (IAM), network security, data security/DLP, cryptography, logging and monitoring.
• Experience in security design, threat modelling and risk assessments.
• Candidate should be fully aware of the current and emerging security solutions available in the industry.
• Ability to be self-motivated, flexible and be able to drive and manage multiple tasks and priorities on very tight deadlines in a fast paced and rapidly changing environment.
• Strong interpersonal and collaboration skills with the ability to develop, maintain and foster constructive relationships with others.
• Excellent written and oral communication skills.
• Effective communication and analytical skills
• Strong work ethic with attention to detail.

Job Summary

Implement and oversee Sparrow's IT security operations framework, including security operations role definitions, monitoring, incident and event management, privileged access management, and overall security architecture. Ensure compliance with industry standards and regulatory requirements.

Job Responsibilities

· Define and implement IT security operations framework for the company, including security operations role definitions, monitoring, incident and event management, privileged access management, and overall security architecture

· Collaborate with IT management to implement appropriate segregation of duties in compliance with industry best practices

· Create and promote a strong security culture throughout the organization

· Define, implement, document, and conduct reviews on Sparrow's Information Security Policies and Procedures, Information Security Risk Management, and Change Management

· Ensure compliance with information security policies and procedures among employees, contractors, partners, and other third parties

· Work with business units, vendors, IT application, and infrastructure teams during the software development lifecycle to ensure adequate security controls are in place

· Apply risk management practices in an operational environment, including audit procedures/controls and systems hardening

· Perform information security risk assessments and serve as the internal auditor for information security processes

· Review all system-related information security plans throughout the organization's network

· Respond to security incidents, conduct investigations, and recommend appropriate follow-up actions

· Work closely with SOC and development teams to ensure end-to-end security implementation, audit, and MAS regulatory compliance.

Skills & Qualifications

· Expert knowledge of Information Security Standards (ISO 17799/ISO 27002 & ISO 27001), Payment Card Industry Data Security Standards (PCIDSS), and MAS Technology Risk Management Guidelines (TRM)

· Bachelor's degree in Computer Science, Computer Engineering, or a relevant qualification

· Certifications in CISSP, CISA, CISM, ISACA, or equivalent

· At least 5 years of Information Technology experience, including 2 years in managing IT Security Operations

· Fluency in both English and Mandarin

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will assist in the end to end implementation of security solutions for our clients and support our clients in their desire to protect the business.

The Opportunity

This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, advising stakeholders, providing workshops and supporting business development. If you’re flexible and ready to adapt to a constantly changing environment, there’s no better place to develop your skills. Since you’ll be working directly with clients, some travel will be required.

Your Key Responsibilities

As a Cyber Security Consultant, you will be part of the team to assess, design, build, implement and manage security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience.

Skills and Attributes for Success

• Experience in delivering multiple security projects and solutions across one or more of the following domains: (Information Security domains: Cyber Program Management, Cyber Threat Management, Identity & Access Management, Data Protection, Privacy, Security Operations and Cyber Analytics.) This experience should include both advisory, implementation and operation experience
• Understand security concepts and how they apply to business and technology solutions
• Be able to articulate threats and risk to business and technology leaders
• Understand project management concepts and how they can be applied to security related projects
• Strong technical security skills in assessment, design, implementation, architecture, and program / project delivery and work across various delivery models, (Waterfall, Agile, DevOps)

To Qualify for the role, you must have

• A recognized university degree
• Strong interest in the field of information security
• Creative, independent with good problem-solving skills
• Excellent communicator with strong analytical, interpersonal and writing skills

Ideally, you’ll also have

• Industry related certification preferred (e.g. CISA, CISM, SABSA, PRINCE2, TOGAF, ITIL).
• Solution Level Certifications, OSCP, CREST, GIAC would be advantageous, as well as penetration testing experience.
• Solution design of Threat & Vulnerability Management solutions such as implementation of SIEM (e.g. ArcSight), Incident Response (e.g. Resilient) & Security Analytics (e.g. RSA Security Analytics) within the context of a Security Operating Centre framework
• Familiar with at least one of the following IAM technologies such as SailPoint, RSA Aveksa / VIA & Oracle (OIM, OIA)
• Possess a CISSP certification

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.

What we offer

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

Apply now.

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will assist in the end to end implementation of security solutions for our clients and support our clients in their desire to protect the business.

The Opportunity

This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, advising stakeholders, providing workshops and supporting business development. If you’re flexible and ready to adapt to a constantly changing environment, there’s no better place to develop your skills. Since you’ll be working directly with clients, some travel will be required.

Your Key Responsibilities

As a Cyber Security Operations consultant, you will be part of the team to assess, design, build, implement and manage security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience.

Skills and Attributes for Success

• Familiarity with Security Information and Event Management (SIEM) solutions.
• Experience with network security monitoring and incident response activities.
• Ability to process impacts of activities and be able to collaborate with IT operations and Cybersecurity teams on mitigations and remediations.
• Ability to apply cybersecurity and privacy principles to organizational requirements.
• Ability to create standard operating procedures and other similar documentation.

To Qualify for the role, you must have

• A recognized university degree in Computer Science, Computer/Electrical Engineering, Information Technology or equivalent
• At least 3 years of relevant experience. Preferably with a year experience in business consulting role in a leading consultancy firm
• Strong interest in the field of information security
• Creative, independent with good problem-solving skills
• Excellent communicator with strong analytical, interpersonal and writing skills

Ideally, you’ll also have

• Industry related certification preferred (e.g. CISSP, CISA, CISM, SABSA, PRINCE2, TOGAF, ITIL).
• Solution Level Certifications, OSCP, CREST, GIAC would be advantageous, as well as penetration testing experience.

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.

What we offer

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

Apply now.

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will assist in the end to end implementation of security solutions for our clients and support our clients in their desire to protect the business.

The Opportunity

This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, advising stakeholders, providing workshops and supporting business development. If you’re flexible and ready to adapt to a constantly changing environment, there’s no better place to develop your skills. Since you’ll be working directly with clients, some travel will be required.

Your Key Responsibilities

As a Cyber Security Operations consultant, you will be part of the team to assess, design, build, implement and manage security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience.

Skills and Attributes for Success

• Familiarity with Security Information and Event Management (SIEM) solutions.
• Experience with network security monitoring and incident response activities.
• Ability to process impacts of activities and be able to collaborate with IT operations and Cybersecurity teams on mitigations and remediations.
• Ability to apply cybersecurity and privacy principles to organizational requirements.
• Ability to create standard operating procedures and other similar documentation.

To Qualify for the role, you must have

• A recognized university degree in Computer Science, Computer/Electrical Engineering, Information Technology or equivalent
• Relevant experience in business consulting will be an added advanatge.
• Strong interest in the field of information security
• Creative, independent with good problem-solving skills
• Excellent communicator with strong analytical, interpersonal and writing skills

Ideally, you’ll also have

• Industry related certification preferred (e.g. CISSP, CISA, CISM, SABSA, PRINCE2, TOGAF, ITIL).
• Solution Level Certifications, OSCP, CREST, GIAC would be advantageous, as well as penetration testing experience.

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.

What we offer

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

Apply now.

Job Responsibilities:

· Drive the fortification and optimization of the wallet security system, including but not limited to security policies, patching vulnerabilities, and monitoring unusual activities.

· Responsible for the daily operational maintenance of the wallet system, including but not limited to node deployment, on-chain data synchronization, and system backup, etc.

· Provide reasonable and effective suggestions for the existing wallet system framework, assist in upgrading the security organizational framework, participate in the design and implementation of security policies, to ensure the security of the exchange wallet system.

· Design and collaborate on the development of a security framework with rational security logic.

· Enrich and optimize existing rules, participate in the emergency response to daily security incidents, as well as the maintenance of security systems.

· Continuously track the latest technologies and threats in the field of blockchain and digital asset security, providing professional advice and guidance to the team.

· Proactively identify and resolve potential system risks, improving the overall security awareness and capabilities of the team.

Qualification Requirements:

· Have a sense of infrastructure security, familiar with common security vulnerabilities and attack methods.

· Capable of independently developing, writing, and maintaining a security framework.

· Familiar with common Linux commands and tools, penetration testing processes and tools.

· Familiar with security risk management, security node upgrades.

· Familiar with WEB3 development technology, with priority given to those who have experience in Solidity smart contract development.

· Have a deep understanding of blockchain technology and digital assets, familiar with the application skills of common scenarios on the chain.

· Good communication and written expression abilities, able to effectively communicate and cooperate with colleagues in different positions.

Bonus Points:

· Experience in security framework design.

· Experience in handling security incidents & offensive and defensive real-world experiences.

· Priority given to those with practical project or tool development experience.
Senior Security Operations Engineer

· Capability to analyze the behavior of malware samples in Windows/macOS/Linux environments.

Job Responsibilities:

1. Promote the construction and optimization of the security and security operation center system, including but not limited to log collection, analysis, alarms, SOAR, and BAS;

2. Responsible for tracking and analyzing security issues and promoting the completion of closed-loop processing of security incidents;

3. Enrich and optimize existing alarm scenarios and rules to improve alarm quality;

4. Participate in daily emergency response to security incidents and security system maintenance;

5. Participate in building security testing capabilities for office networks, production networks, and cloud environments;

6. Participate in the company’s office security offensive and defensive confrontation to improve office security capabilities;

job requirements:

1. More than 10 years of security-related work experience, and those who have engaged in Web3-related work are preferred;

2. Be familiar with vulnerability management, writing and maintaining security baseline detection rules, understand the principles of common vulnerabilities, and have the ability to write POC and EXP codes for vulnerabilities;

3. Familiar with at least one language such as Python and Java, and have API system integration development capabilities;

4. Familiar with big data development tools such as SQL, ELK, Kafka, etc., have log analysis and processing capabilities, and can be combined with security risk data;

5. Be familiar with the threat detection operation ideas in office networks, production networks and other environments, and can set up systematic detection solutions according to scenarios;

6. Familiar with the configuration management and rule writing of common security products such as Sysmon, Osquery, and Wazuh; familiar with the main tactics and techniques of the ATT&CK attack matrix and able to convert them into detection rules;

7. Have experience in intrusion detection and emergency response, and be able to quickly locate, block, and defend security incidents;

8. Have the ability to discover vulnerabilities and be able to complete the entire penetration testing process independently.

Bonus Point:

1. Responsible for the complete R&D cycle of security defense products

2. Have in-depth understanding of offense and defense, and experience in actual combat with APT

3. Ability to analyze the behavior of malware samples in Windows/macOS/Linux environments

4.Able to communicate in different Language with teams based in Europe or China

Summary

Working as part of the information security office within the IT department at Pacific Prime CXA, the GRC (Governance, Risk and Compliance) Manager will be responsible for leading the day-to-day IT compliance, data governance and IT risk management functions. Primary responsibility will include defining, creation, management and maintenance of IT and organizational policies and standards in support of legal and regulatory compliance needs as well as general IT and organizational information security controls and practices.

Responsibilities

• Establishing corporate information security policies, standards, guidelines, baselines and practices that protect the integrity and confidentiality of information and network infrastructure.
• Develop procedures and controls to assure compliance with applicable regulatory and legal requirements as well as good business practices.
• Proactively identify audit and compliance related issues to reduce the risk of security exposures, gaps in the design and operating effectiveness of controls whilst seeking opportunities for continuous improvement.
• Driving IT security programs in line with internal and external standards and ensuring compliance with in-country regulatory requirements.
• Maintaining oversight to enterprise-wide security technologies, actively monitoring & responding to security events.
• Develop and maintain standards and controls to ensure the protection of data based on classification.
• Work directly with business units to identify critical data and ensure appropriate data classification and protection standards are implemented.
• Manage the attestation program for all IT controls to support assurance and alignment across all information security stakeholders.
• Support internal and external audit process for relevant compliance concerns including PDPA, GDPR, MAS TRM, ISO27001, etc.
• Perform and evaluate information security risk assessments for various information systems and processes, including annual penetration tests.
• Develop, monitor, track and report against IT Security metrics and KPIs that help the IT Infra understand threats, vulnerabilities and risks associated with protecting information across the enterprise and plans to mitigate those risks.
• Develop and maintain the IT Risk Register to support ongoing tracking and management of all identified risks and issues and to ensure adequate and timely resolutions to all audit/review issues relating to security.
• Lead the development and operation of third-party vendor risk assessment, management and due-diligence program.
• Conduct client meeting and drive all the questions arising from client relationship teams. This includes completing client’s info security questionnaires and liaising with clients on all such requirements within tight deadlines.
• Formulate, lead and communicate security goals and objectives based on an integrated understanding of business priorities, security vision and strategy.
• Providing security related support to IT and business team users and facilitate recommendations on future technical trends/directions that encompass multiple systems and teams to meet business critical initiatives.
• Point of contact to assist and advise on Information Security related matters

Requirement

• BSc in Computer Science or equivalent; with 5+ years of relevant working experience in IT governance, risk, and compliance management.
• ISACA / CISM / CISSP Certification.
• Strong understanding of fundamental information security concepts and technology.
• Familiarity with ISMS and security frameworks, particularly NIST Cybersecurity Framework.
• Understanding of Information Security principles, IT infrastructure (including operating systems, applications, communications and network protocols), architecture elements of Identity Access Management (IAM), network security, data security/DLP, cryptography, logging and monitoring.
• Experience in security design, threat modelling and risk assessments.
• Candidate should be fully aware of the current and emerging security solutions available in the industry.
• Ability to be self-motivated, flexible and be able to drive and manage multiple tasks and priorities on very tight deadlines in a fast paced and rapidly changing environment.
• Strong interpersonal and collaboration skills with the ability to develop, maintain and foster constructive relationships with others.
• Excellent written and oral communication skills.
• Effective communication and analytical skills
• Strong work ethic with attention to detail.

FIND YOUR 'BETTER' AT AIA

We don’t simply believe in being ‘The Best’. We believe in better - because there’s no limit to how far ‘better’ can take us.

We believe in empowering every one of our people to find their 'better' - in the work they do, the career they build, the life they live and the difference they make. So that together we can support even more people - including our own - to live Healthier, Longer, Better Lives.

If you believe in better, we’d love to hear from you.

About the Role

This position is responsible for to providing consultation, professional advice, awareness/training on information security and key technology risk matters relating to the abovementioned geographical responsibilities, thereby contributing to building a strong information security risk culture cantered on people, processes and technology. The role will also coordinate regular governance engagements and being involved in technology-related audit engagements for AIA Singapore, and exercise professional judgment and assessments on the material to be provided by the various process and control owners for the audits.

What you will do:

Information Security & Technology Risk Metrics

• Support the alignment of various information security and technology risk metrics for management reporting and escalation – this includes reporting/escalation of outstanding or overdue action required from penetration tests, vulnerability assessments, security incidents, policy/standards deviations, third party security assessments, etc.
• Drive the monthly Technology Security Governance forum focusing on highlighting metrics impacting the Company’s cybersecurity metrics.
• Collate and review collated metrics and material relating to the Operational Risk Management forums, Key Risk Indicators and Key Risk Tolerance Indicators for cybersecurity and technology processes.

Risk Assessments, Audit and Regulatory Management

• Support Technology related audit engagements with statutory auditor and regulator, following up with relevant parties to ensure all issues identified are remediated.
• Support the delivery of annual IT risk and control self-assessment exercises according to MAS regulatory notices/guidelines, internal enterprise IT policies, and standards.

Policy, Standards and Exception Management

• Communicate material changes to internal policies/standards to collaborators. Facilitate risk evaluations and exception handling to deviations from the policies, standards and regulatory requirements.

What you should have:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).
• 5 years or more of relevant work experience, including at least 2 years of experience in IT audit, risk management, compliance and/or governance roles, with particular expertise and knowledge of governance reporting of technology risk issues and cybersecurity.
• Rich working experience from financial industry, big tech firms or established auditing firms will be considered favorably.
• Experience and exposure in information security standards such as ISO27001 and PCIDSS will be an advantage.
• Preferably a holder of one or more of the following information security and audit qualifications: Security+ and CEH.
• Candidates with advanced level qualifications such as CISSP, CISA, CRISC, CCSP will have added advantage.
• Good Communication, Coordination and Interpersonal Skills. Good experience working alongside and opposite external auditors as well as regulatory bodies Meticulous and analytical traits Strong programme/Project Management skills High drive, energy and good demeanor over teamwork High levels of professional integrity.
• Eagerness to learn and develop one’s knowledge in information security and computing, especially on emerging computing fields such as cloud security, DevSecOps, etc.

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.

Executive Summary

Smart IMS Inc provides Digital technology & Cloud transformation services, Application & Infrastructure Management Services, Unified Communications, and Insurance implementation services to customers across the Americas, Europe, Middle East, and Asia-Pacific regions. As the trusted technology and business partner of leading MNCs, including Global Investment Banks, Smart IMS is also a Microsoft Gold Certified Partner, Oracle Platinum Partner and AWS MSP Partner.

We are looking to hire a Cyber Security Engineer in Singapore to support our client, a statutory board, with the following responsibilities:

• Able to perform Security & Vulnerabilities Assessment and Remediations, and apply security Patches & Fixes
• Manage security incidents and conduct forensic analysis when necessary to determine the source and scope of any security breaches.
• Collaborate with cross-functional teams to implement security best practices and ensure compliance with regulatory requirements.
• Engage on Security incident management and response efforts.
• Respond to security alarms and analyze and escalate incidents by process or management.
• Perform Security & Vulnerabilities Assessment and Remediations
• Perform impact assessment and testing of security patches before applying them.
• Provide timely reports and status updates on the progress of fixes to stakeholders.
• Taking Owner ship of Security incident life cycle management
• Automate the security monitoring and incident response.
• Collaborate with system administrators and developers to address and remediate identified vulnerabilities.
• Conduct regular security audits and vulnerability assessments to identify weaknesses and potential threats to the organization's information systems.

Title:

Information Security Engineer

KBR is seeking an Information Security Engineer (ISSO/ISSE) to join our GSUS, Defense Systems Engineering- Naval Solutions Division. The Information Security Engineer will primarily support the Joint Technical Data Integration (JTDI) program by providing advice and assistance to the Government regarding the secure configuration and operation of the JTDI package, interfaces, and modernization efforts.

In This Role, You Will...

• Conducts risk management framework (RMF) assessment and authorization activities of current and future systems. Mitigates and eradicates malicious activity.
• Applies knowledge and experience with standard information systems security concepts, practices, and procedures; implements common information systems security practices, policies, and technologies
• Prepares reports on the status of security safeguards applied to computer systems; gathers pertinent security documentation and artifacts for inclusion into system authorization packages.
• Monitor and report the status of Information Assurance Vulnerability Alerts (IAVA) compliance and ensure associated patches are up to date for customer mission systems. Responsible for the configuration of system hardware and software, including compliance with all Information Assurance (IA) requirements.
• Performs preventive and corrective maintenance on equipment, including updating existing software, installing new software, resolving software issues, and repairing or replacing hardware components. Implements Flaw Remediation, Installing Security Patches / Hot Fixes, Software Suite Updates, and Firmware Updates.
• Troubleshoots system flaws and implements technical controls within the software installed in cloud and on-premise environments.
• Utilizes IT expertise, performs technical evaluations of Information Technology systems/components, and documents findings that will be used to assess IT Infrastructure upgrades.
• Performs other duties that may be assigned to support the lab environments and users, including media transfers and documentation of all IT maintenance activities.

BASIC REQUIREMENTS

Citizenship: Must be a US Citizen

Clearance: An active/current Secret Clearance with eligibility to obtain TS.

Certifications: Must have a CompTIA Security + CE

Experience: At least 3-5 years of experience supporting CyberSecurity programs as an Information System Security Officer (ISSO), including experience with...

• Navy Risk Management Framework (RMF) Compliance (DoD Instruction 8510.01)
• Executing DISA Security Technical Implementation Guides (STIG’s)
• Executing Information Assurance Vulnerability Alert (IAVA) Updates
• Executing Vulnerability Remediation Asset Manager (VRAM)
• Experience interrogating and processing Assured Compliance Assessment Solution (ACAS) Scanning & Nessus Vulnerability Scanner
• Knowledge of performance monitoring and tuning, upgrades and patching, backup and recovery, troubleshooting, and problem resolution.
• Experience working independently and as part of a team researching data developing analytical techniques and methodologies.
• Experience with Active Directory and Group Policy Objects.

Highly Desired Experience

• Windows Server and RHEL OS experience and or approved DoD course completion
• ISC2 CISSP certification
• Bachelor’s degree in computer science or equivalent work experience

This position offers a flexible remote workplace setting.

Scheduled Weekly Hours: 40 hours/week

Benefits + More

When you become part of the KBR team, your career opportunities are endless. Our people are the heart of everything we do here at KBR. We Value our People!

KBR offers a selection of competitive lifestyle benefits which could include a 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development.

KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels per internal policy or contractual designation. Additional compensation may be in the form of a sign-on bonus, relocation benefits, short-term incentives, long-term incentives, or discretionary payments for exceptional performance.

At KBR, we are passionate about our people, sustainability, and our Zero Harm culture. These ideals form all that we do and are at the heart of our commitment to, and ongoing journey toward, being a more inclusive and diverse company. That commitment is central to our team of team’s philosophy and fosters an environment of real collaboration across cultures and locations. Our individual differences and perspectives bring enhanced value to our teams and help us develop solutions for the most challenging problems. We understand that by embracing those differences and working together, we are more innovative, more resilient, and safer. We Deliver — Together.

KBR is an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will assist in the end to end implementation of security solutions for our clients and support our clients in their desire to protect the business.

The Opportunity

This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, advising stakeholders, providing workshops and supporting business development. If you’re flexible and ready to adapt to a constantly changing environment, there’s no better place to develop your skills. Since you’ll be working directly with clients, some travel will be required.

Your Key Responsibilities

As a Cyber Security Manager, you will be part of the team to assess, design, build, implement and manage security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience.

Skills and Attributes for Success

• Experience in delivering multiple security projects and solutions across one or more of the following domains: (Information Security domains: Cyber Program Management, Cyber Threat Management, Identity & Access Management, Data Protection, Privacy, Security Operations and Cyber Analytics.) This experience should include both advisory, implementation and operation experience
• Understand security concepts and how they apply to business and technology solutions
• Be able to articulate threats and risk to business and technology leaders
• Understand project management concepts and how they can be applied to security related projects
• Strong technical security skills in assessment, design, implementation, architecture, and program / project delivery and work across various delivery models, (Waterfall, Agile, DevOps)

To Qualify for the role, you must have

• A recognized university degree in Computer Science, Computer/Electrical Engineering, Information Technology or equivalent
• At least 6 years of relevant experience. Preferably with 2 years of experience in business consulting role in a leading consultancy firm
• Possess a CISSP certification
• Mandatory skills: Threat Modelling and Cloud Technical Risk Assessment knowledge
• Strong interest in the field of information security
• Creative, independent with good problem-solving skills
• Excellent communicator with strong analytical, interpersonal and writing skills

Ideally, you’ll also have

• Industry related certification preferred (e.g. CISA, CISM, SABSA, PRINCE2, TOGAF, ITIL).
• Solution Level Certifications, OSCP, CREST, GIAC would be advantageous, as well as penetration testing experience.
• Solution design of Threat & Vulnerability Management solutions such as implementation of SIEM (e.g. ArcSight), Incident Response (e.g. Resilient) & Security Analytics (e.g. RSA Security Analytics) within the context of a Security Operating Centre framework
• Familiar with at least one of the following IAM technologies such as SailPoint, RSA Aveksa / VIA & Oracle (OIM, OIA)

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.

What we offer

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

Apply now.

Information Security Risk Specialist, Senior

The Opportunity:  

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you—an information security risk specialist who will break down complex threats into manageable plans of action.  

As an information security risk specialist on our team, you’ll use your experience to work with the DoD and Navy to discover their cyber risks, understand policies, and develop a mitigation plan. You’ll review technical, environmental, and personnel details from SMEs, Engineers, and Program Managers to assess the entire threat landscape. Then, you’ll guide your client through a plan of action with presentations, white papers, and milestones. You’ll work with your client to translate security concepts, so they can make the best decisions to secure their mission-critical systems and critical infrastructure. This is your opportunity to act as an information security subject matter expert while broadening your skills in cybersecurity and the Risk Management Framework.   

Work with us as we protect our nation's cyber infrastructure.  

Join us. The world can’t wait. 

You Have:  

• 5+ years of experience in cybersecurity

• 3+ years of experience with Risk Management Framework supporting the Navy

• Experience as an Information Systems Security Officer

• Experience with developing supporting artifacts for Navy authorization packages, including Categorization Forms, HW/SW Lists, Authorization Boundary Diagrams, and Security Control policy documentation

• Experience with Navy Risk Management Framework and analyzing policies, procedures, and standard operating procedures 

• Experience with Enterprise Mission Assurance Support Service (eMASS)

• Experience in creating and managing POA&Ms

• TS/SCI clearance

• Bachelor’s degree

• DoD 8570 IAT or IAM Level II Certification

Nice If You Have: 

• Experience as an Operating System Administrator, Systems Engineer, Requirements Analyst, Information Systems Security Manager, or Information Systems Security Engineer

• Experience with using Microsoft Office products, including Word, Excel, PowerPoint, and Visio

• Experience with Security Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP), Assured Compliance Assessment Solution (ACAS), Ports, Protocols and Services Matrix, Vulnerability Remediation Asset Manager (VRAM), and Host Based Security System

• Experience with eMASSTer 

• Ability to identify security requirements for connected and non-connected systems and unclassified and classified systems 

• Ability to create tactics, techniques, procedures, white papers, standard operating procedures, workflows, system data flows, and architectural diagrams

• Master’s degree

• Navy Qualified Validator Level I, II, or III Certification

Clearance: 

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Create Your Career: 

Grow With Us 
Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms. 

A Place Where You Belong 
Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time. 

Support Your Well-Being 
Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home. 

Your Candidate Journey 
At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $73,100.00 to $166,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees. This posting will close within 90 days from the Posting Date.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

Title:

Information Systems Security Officer

KBR has an opening for an Information Systems Security Officer to join our team of qualified, diverse individuals onsite at KBR, Lexington Park, MD. This position requires on site presence.

Note: Remote or Tele-Work is not available.

Duties and Responsibilities:

• Serve as an Information Systems Security Officer (ISSO) for Government information systems in support of a Program Management Activity (PMA).

• Performs extensive assessments of systems and networks within the networking environment or enclave and identify where those systems/networks deviate from acceptable configurations, enclave policy, or local policy.  Candidate will achieve this through passive evaluations (compliance audits) and active evaluations (vulnerability assessments). 

• Establish strict program control processes to ensure mitigation of risks and supports obtaining certification and accreditation of systems. This includes process support, analysis support, coordination support, security certification test support, security documentation support, investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits.

• Assists in the implementation of the required government policy (i.e., RMF, NISPOM, JSIG) and makes recommendations on process tailoring. 

• Performs extensive analyses to validate established security requirements and to recommends additional security requirements and safeguards.

• Supports the formal Security Test and Evaluation (ST&E) required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results, and preparation of required reports. 

• Periodically conducts of a review of each system's audits and monitors corrective actions until all actions are closed.

Required Qualifications:

• Bachelor’s degree in computer and architecture information systems management or related field from an accredited college or university or equivalent experience is required OR an additional four (4) years of relevant experience may be substituted for a Bachelor’s Degree

• Two (2) years of experience with mid-sized client/server systems in systems analysis, software design, software development, and system administration is required.

• Experience with DoD M5205.07 Series, Risk Management Framework (RMF) and Joint SAP Implementation Guide (JSIG) requirements is required.

• Knowledge of quality assurance, quality control, and independent verification and validation techniques is required

• Experience working independently and as part of a team in researching data, developing analytical techniques and methodologies is required.

• Experience with managing secure Information Systems (IS) and databases while implementing and maintaining cross-domain solutions is required.

• A current Information Assurance Manager (IAM) Level I certification in accordance with DoD 8570.01-M, or the ability to gain the IAM Level I certification within six months is required.

• Applicant selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information. A current Top Secret Clearance with a Single Scope Background Investigation (SSBI) completed within the last 6 years is required.

Preferred Qualifications:

• Implement Risk Management Framework (RMF) in accordance with NIST SP 800, Joint Special Access Program Implementation Guide (JSIG).

• Participates in the development and maintenance of system security plans and contingency plans for all systems under their responsibility.

• Draft, maintain, Planned, System Security Checklists, Privacy Impact Assessments, POA&M, and Authority to Operate (ATO) artifacts.

• Develop Plan of Action and Milestones (POA&M) for identified vulnerabilities and ensure compliance through monthly / quarterly updates.

• Maintain inventory of all information Security System assigned.

• Develop a variety of Assessment & Authorization deliverables including System Security Plan (SSP), Security Assessment Report (SAR), Contingency Plan (CP) and POA&M for review and approval for Authorization Official.

Contract requirements regarding education and experience will prevail.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

Details of the Division and Team:

The Global Threat Detection & Response (TDR) team operates 24x7x365 in a follow-the-sun mode with distributed teams across 3 regions (APAC, EMEA and AMER) and is responsible for enabling the business of Deutsche Bank by providing agile, implementable, and cost-effective and cutting-edge threat response services to protect Deutsche Bank’s data assets, customers and partners.

This Threat Response (TR) Analyst role is part of the APAC TDR team and requires a heavy focus on all areas of security operations, automation, threat assessment and response, requiring min 3 years of experience.

What we will offer you:

A healthy, engaged and well-supported workforce are better equipped to do their best work and, more importantly, enjoy their lives inside and outside the workplace. That’s why we are committed to providing an environment with your development and wellbeing at its center.

You can expect:

• Flexible benefits plan including virtual doctor consultation services
• Comprehensive leave benefits
• Gender Neutral Parental Leave
• Flexible working arrangements
• 21 days of annual paid leave, plus public holiday & Flexible Working Arrangement

Your key responsibilities:

1. The Threat Respond (TR) Analyst supports the Global Security Operations Center from the APAC region. The SOC operates 24x7x365 in a follow-the-sun mode with distributed teams across APAC, EMEA and AMER.

2. The Analyst needs to monitor, investigate alerts and events escalated from the SIEM or other security channels. The scope of investigation includes in-depth log-file analysis and IOC correlation and taking threat containment actions when needed.

3. The role will also proactively search and identify patterns of compromise, emerging threats, evidence of breach and inconsistencies by analyzing historical data.

4. The role will be assigned projects on the design, creation and maintenance of cyber threat use cases to detect adversaries and malicious activities as well as automation use cases to improve efficiency of the SOC.

5. The role is part of the Bank's 24/7 follow-the-sun cybersecurity monitoring and response team providing immediate cyber security, triage, containment and incident management to protect the Bank. It involves:

• Performing shift work On-rotation weekend / public holiday work 7AM to 7PM (time off in-lieu will be offered)
• Earlier morning shift on weekdays (for ex 7am to 4pm) in rotation.

Your skills and experience:

• Min of 3 years of cyber security working experience in security operations, incident response, Vulnerability management, threat assessment and containment with 1 year working experience in an enterprise-grade SOC.
• Working experience with cyber security tools to perform proxy/web access/network/database activity monitoring as well as using End-point Detection Response tool to investigate/contain threats in endpoints.
• Working experience in investigating cloud security alerts and understanding of cloud infrastructure, operations and administering operating systems (Windows and Linux).
• Proven experience in scripting languages such as Python, PowerShell, Bash/Linux equivalent, Windows BAT scripts; software vulnerabilities, hacking techniques, exploits, malware and forensics.
• Experience with creating documentations for end user as well as producing security awareness content.

Role is required to be performed on-site at One Raffles Quay office. Relevant vaccination requirements may apply.

How we’ll support you:

• Flexible working to assist you balance your personal priorities
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs
• Training and development to help you excel in your career

About us and our teams:

Deutsche Bank is the leading German bank with strong European roots and a global network. Click click here to see what we do.

Deutsche Bank & Diversity

Our values define the working environment we strive to create – diverse, supportive and welcoming of different views. We embrace a culture reflecting a variety of perspectives, insights and backgrounds to drive innovation. We build talented and diverse teams to drive business results and encourage our people to develop to their full potential. Talk to us about flexible work arrangements and other initiatives we offer.

We promote good working relationships and encourage high standards of conduct and work performance. We welcome applications from talented people from all cultures, countries, races, genders, sexual orientations, disabilities, beliefs and generations and are committed to providing a working environment free from harassment, discrimination and retaliation.

Visit Inside Deutsche Bank to discover more about the culture of Deutsche Bank including Diversity, Equity & Inclusion, Leadership, Learning, Future of Work and more besides.