Total 990 it support executive job vacancies in Legal / Public / Security category in Malaysia

IT Security Audit Executive or Junior Executive

• Has a degree in Business, accounting, IT, Accounting, Finance or other fields.
• Has at least 1 years in IT Security Audit and Information Risk Assessment
• Able to Audit logs and activities for applications and Database
• Able to monitor systems/applications activities and generate monthly reports.
• Be proactive in tracking, monitoring, and scanning.
• Familiar with SOX & ISO compliances a plus
• Certified in CISA a plus but not required.
• Have experience working with global teams.
• Have good communication skills.

Cloud Security IT Specialist

Central London Contract £650-£775 per day inside IR35

We're currently seeking an accomplished and highly ambitious Cloud Security IT Specialist to work with our exceptional client, a world class brand in a secure environment to drive major business transformation, process and technical change across this complex organisation.

The contract role will require you to conduct security clearance prior to assignment.

The Cloud Security IT Specialist role is conducted in an environment that is far from ordinary, therefore, we're not looking for ordinary. The role is based on site.

Your experience:

* Experience in the design, implementation, and assessment of Cloud Infrastructures

* Knowledge of Cloud Technologies, Cloud Security Principles and Cloud based security controls

* Experience in reviewing Cloud Migration Strategies, for Cloud, On-Prem, and Hybrid models

* Understanding of NCSC Cloud Guidance, Principles and good practice guides coupled with the ability to apply them pragmatically and in line with the needs of the business

* Threat Modelling of Cloud Infrastructure, and Cloud-based applications

Role and Responsibilities:

* Working with Development Teams to design Cloud-based applications and infrastructures.

* Review Cloud Architectures from a Confidentiality, Integrity and Availability perspective.

* Advise on Business-specific requirements to manage information risks.

* Monitoring changes to live Cloud deployments, challenging where appropriate and assessing

implications for assurance status.

* In collaboration with technical/security architects, providing specialist advice to design authorities on requirements and best practice designs to achieve and maintain the required level of assurance.

* Work in a Dev-Rel capacity, across Engineering Teams to provide Cloud Security Point-of- Contact, and support Site Reliability Engineer (SRE) and Cloud Security Champion (CSC) roles.

* Provide Security Subject Matter Expert (SME) advice on Cloud Security Controls, and review Cloud offerings against Business Security requirements.

Essential Skills:

* Ability to propose, design and assess Cloud Security controls, aligned to identified threats

* Ability to facilitate Threat Modelling workshops with multi-disciplined teams and produce relevant output

* Actively keep up to date with Commercial Cloud industry relevant skills and advancements

* Possess an array of technological skills and awareness, aligned but not constrained to Cloud services

* In collaboration with security architects, able to assess the level of technical capability of potential threat actors and able to review a Cloud security risk assessment.

* Ability to review Cloud architectures to ensure mitigation of the identified risks and conformity to the relevant security policies and legislation.

* Ability to clearly translate technical Cloud Security Principles and Controls to non-technical audiences.

* Work as part of a multi-disciplinary, multi-location team.

· 8 - 10 years of IT Security experience in administration and management of IT Security technologies primarily Symantec Data Loss Prevention, Symantec Endpoint Protection, Email Security, Data Classification and other endpoint & data security solutions;

· Should be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;

· Knowledge of different domains of IT Security;

· Working & hands-on experience in administering the IT Security Solutions;

· Must have experience in working in similar Production setup in Run (Operations) mode;

· Ability to apply risk based approach while working on assigned responsibilities;

· Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;

· Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;

· Excellent in analytical, communication and documentation skills;

· Must have strong understanding of ITIL processes and comfortable working in process oriented environment

IT Security Trainer
Hemel Hempstead (Hybrid – 50% Office / 50% Remote)
Competitive Annual Salary + Bonus and Benefits

About the role:
Are you passionate about cybersecurity and eager to share your knowledge with others? We are looking for an experienced IT Security Trainer to join our team. This role is pivotal in improving Haven’s cyber security awareness making use of their proven technical expertise and skills in the field to do so.

This role is critical in ensuring all team know their information security responsibilities and how they can protect the business’s information assets and technology from unauthorised access, alterations, destruction, or disclosure.

The Cyber Security Trainer will evangelise the latest security concepts and best practices, and will be expected to lead by example - using their technical security expertise to amplify the message.

Your Opportunity:
This is an exceptional opportunity to lead and shape the future of cybersecurity training within our organisation. You will have the chance to:
Develop and refine our cybersecurity training curriculum, ensuring it reflects the latest industry standards and threat landscapes.

Conduct engaging training sessions for a variety of audiences, including technical and non-technical Team, ensuring all Team are aware of and can adhere to our security policies and best practices.

Mentor and coach IT Security Team to identify training needs and create targeted programmes designed to mitigate risks and enhance our security posture.

Stay abreast of the latest cybersecurity trends, threats, tools, and technologies to ensure our training material is current and relevant.

Demonstrate best practice and leading by example using the latest security tools and methodolgy

Work as a proactive member of the security team in a technical capacity, ensuring that threats are minimised, mitigated and effectively managed.

What we’d like you to bring:
The skills and experience we’d like to see from you:
Proven experience as an IT Security Trainer, Cybersecurity Educator, or similar role.

In-depth knowledge of cybersecurity principles, and best practices.

Extensive Cybersecurity experience across multiple domains (e.g. assets, networks, identity, operations, risk, and development) in large and complex organisations

Experience of implementing security standards across an organisation

Experience developing and delivering a wide range of training materials and sessions, from bitesize to workshops to comprehensive training programmes.

Excellent communication and presentation skills, with the ability to engage and educate audiences of varying technical backgrounds.

Educated in the field of IT Security (E.g. Bachelor's or Master's degree in Information Security or similar)

Previous experience as a security analyst, engineer or leader, demonstrating first person experience and ‘deep insight’ 

What’s In It For You?
- Holiday allowance that rises with service, plus a ‘Holiday Buy Scheme’
- Annual bonus
- 20% discount on both Haven and Warner Hotels holiday for you, family and friends
- Comprehensive wellbeing support
- Access to the Bourne Leisure corporate box at the O2 Arena ,London
- Exclusive discounts with corporate partners
- Exciting career pathways, including Learning and Development opportunities such as Apprenticeships and Degrees
- Enhanced family friendly policies and pay (eligibility criteria applied)

Who are we?
We’re part of an award-winning Bourne Leisure family, which includes Haven & Warner Hotels. We have 9,000 fantastic team members and 39 beautiful seaside locations and our HQ based in Hemel Hempstead.

What’s it like to work with us?
Working with us is ultimately defined by our exceptional people and teams. At Haven, we take pride in our Breath of Fresh Air culture, which focuses on valuing and supporting every team member. We prioritise openness and transparency in our interactions allowing our team members to be their authentic selves.
We operate a hybrid working model, meaning 50% of your working week will be spent at the office, occasionally on Park, or at external events.

What can you expect during the recruitment process?
The interview process will be up to 3 stages and may contain a presentation or skills test, depending on the role. If you require any support or reasonable adjustments to help you perform at your best during this process, please let us know.

Diversity, equity, and inclusion are at the heart of who we are and what we do. Our commitment to these values is unwavering and they are central to our mission. We encourage applications from all backgrounds, communities and industries and we are happy to discuss any reasonable adjustments or flexibility that you may require, including whether a role can be part-time or a job-share.

We genuinely care about every candidate's experience during the recruitment process and are here to provide support where we can. If you require any assistance or reasonable adjustments while applying, please don't hesitate to reach out to us at resourcingteam@bourne-leisure.co.uk.

Reporting to the Deputy Director, the successful candidate will be supporting the division in all IT security initiatives for the institution.

Key Responsibilities:

• Lead the IT Security team to manage and all IT security-related matters that support Institution’s business objectives and strategies
• Develop and carry out IT security policies and plans
• Conduct security review of existing systems on their ability to provide adequate defence against the latest security threats
• Conduct vulnerability assessments and penetration tests for all critical IT systems
• Drive and conduct IT Security awareness and training like security talks, phishing simulation and incident response exercises
• Manage and investigate all cyber security alerts and notifications from cyber surveillance and threat intelligence to identify root cause and impact for effective containment, mitigation and future improvements
• Manage and investigate all IT Security incidents to identify root cause and impact for effective containment, mitigation and future improvements
• Engage IT project teams throughout the SDLC to identify and prioritize applicable security controls and provide guidance on how to implement these controls
• Jointly perform, monitor, track and review with IT Governance team and other IT teams on all information systems and infrastructure and security
• Maintain and enhance the Information Security risk assessment methodology
• Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit
• Act as Subject Matter Expert (SME) in security technologies, and provide knowledge sharing and technical assistance to other team members
• Define security configuration standards for platforms and technologies
• Detailed reporting on IT security initiatives, scans, incidents to management and statutory reporting to both internal and external authorities
• Research new security technologies, threats and vulnerabilities and implement necessary measures such as EDR/XDR, DAM, MDM, Microsoft AIP, VMS, CASB, PAM, IAM, 2/MFA, NAC, Red Teaming

Requirements:

• Bachelor's degree in Computer Science, of Information Technology or equivalent, with minimum 8-10 years' experience in Information and Cyber Security
• Good knowledge and experience with cloud security of Amazon Web Services (AWS), Microsoft Azure and SaaS solutions, security standards and frameworks like NIST, ISO27001, MTCS, CSA Security-by-Design (SBD) and Personal Data Protection Act (PDPA) is essential; familiarity with Government IM and PCI-DSS is desirable
• Other relevant certifications such as CISSP/CISA/CISM, CREST, CEH, CHFI would be advantageous
• Demonstrated leadership and adaptability, with willingness to readily and voluntarily take ownership of highly challenging tasks and problems, even beyond initial scope of responsibility
• Ability to handle multiple tasks concurrently and meet deadlines, while maintaining focus despite conflicting demands
• Possess excellent written and oral communication skills with the ability to present ideas and results to all levels of staff, including C-Level and Board executives
• Good analytical and problem-solving skills
• Have a positive attitude and excellent team player

Interested candidates are invited to submit their MS Word formatted CV with your Do your current and expected salary remunerations to cs.seh@jondavidsongroup.com.

• JonDavidson Pte Ltd • EA Lic-22S1412 • MOM Reg No-R1440770 •

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

· ICT Security Governance:
Develop and implement enterprise-wide ICT security programmes as follows:
i. Establish the cybersecurity governance structure for HDB to ensure that the security posture is robust, resilient, and pragmatic
ii. Enhance and update the IT security policy, standards, procedures so that they are always current against the evolving cyber security landscape
iii. Manage the compliance with the GovTech ICT/SS Security Policies, Initiatives, Measures and the relevant Government Instruction Manual to further strengthen the WOG and HDB ICT security posture.
iv. Establish the governance and administer the Third-Party Management Policy and Procedure

· Cybersecurity Awareness Outreach
Manage and implement Cybersecurity Awareness Framework to promote IT security awareness and outreach programme as follows:
i. Raise HDB management and staff’s security awareness and appreciation of ICT Security to ensure HDB’s information assets are protected.
ii. Create good staff cyber security hygiene through regular ICT Security outreach programme such as annual ICT Security Awareness Talk, security advisories, conduct of Phishing exercise, road show.
iii. Keep abreast of key technology and skillset in the industry to maintain ICT Security personnel skills development.
iv. Identify various channels for the conduct of the security program such as cyber range exercises, technical certification, gamification.

· Identity & Access Management
To establish procedures and standards for the Identity and Access management in HDB as follows:
i. To administer and manage the user accounts and privileged access, so as to safeguard the confidentiality of ICT assets and systems in HDB.
j. To maintain and manage the access controls to applications on premises and on Cloud.
k. Digital Certificate Management

· Quality Audit and Security Reviews
a. To serve as an independent party to perform quality auditing and report to Management on the observations and recommendations.
b. To conduct regular security reviews on application systems and infrastructure to ensure the HDB’s systems and infrastructure are secured and reliable.
You are also to:
· keep abreast of the latest industry ICT security practices and technologies as well as emerging threats and vulnerabilities and recommend appropriate controls for implementation to improve the enterprise security posture.
· lead and/or participate in the adoption of new technological advances and best practices in infrastructure security systems to mitigate security risks

You will be a Great Fit if you:

You should possess a strong background in ICT Security, Information Security, Information Technology, Computer Science, Engineering (Computing/Telecommunication), Cybersecurity and/or Digital Forensic or equivalent.
At least 1 years of direct and relevant full-time ICT security work experience
Preferably possess one or more appropriate IT security certifications, such as CISSP, CRISC, CISM, CISA, CEH, etc
Preferably with strong knowledge and experience in information and cybersecurity risks, controls, vulnerability assessment/penetration testing, compliance, and industry IT/cyber security best-practices.

Good to Have:

Added advantage for candidates with knowledge in any of the following:
· Domain knowledge of access control; telecommunications and network security; cloud security; Cybersecurity & information security governance and risk management; software development security; cryptography; security architecture and design; operations security; security incident response and management; business continuity and disaster recovery planning; legal regulations, investigations, and compliance; physical (environmental) security
· Knowledge in IT security principles and IT controls as well as industry best practices and frameworks pertaining to IT Controls (IM8, COBIT, ISO27001/2 etc.)
· Good understanding of the current IT/Cyber Security landscape

Candidate also need to:
· to work beyond business hours including weekend when necessary
· possess good interpersonal and communication skills
· demonstrate a strong sense of urgency and have good troubleshooting and problem-solving skills with good attention to detail
· have good command of written and oral English

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14625706/a714138f-b047-1edf-8286-5e09c172d2b8

Job Description:

•Support and maintain security tools including Endpoint Security, SIEM, IPS/IDS, Email Security, NGFW, DLP, Security Assessment.

•Administration of information security systems and devices, review audit logs and security alerts.

• Perform activities related to IT security, including installation, configuration changes, and updates/patches.

• To investigate, resolve or mitigate security incidents in a timely manner.

• To conduct internal vulnerability assessments and remediate identified vulnerabilities.

• To work with external vendor for penetration testing and remediate findings.

• To work with external MDR/SOC providers to detect and follow up on cyber security incidents.

• To work closely with DevOps and Developers to assess, identify and mitigate security vulnerabilities, and integrate security best practices into the software development lifecycle.

• Generation of metrics, reports, relevant information to support compliance status.

• Point of contact for ISO27001, liaise with auditors, perform self-assessment to ensure compliance with company policy and regulatory requirements.

• Develop and maintain information security awareness program.

• Maintain documentation of security system configurations, procedures, and troubleshooting steps.

Job Specifications :

• Diploma or Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related field (or equivalent work experience).

• Relevant experience with security related solutions (Endpoint Security, VPN, Firewall, etc.) and handling of cyber security incidents and associated incident response tools.

• Strong knowledge of operating systems (e.g., Windows, Linux), network protocols, and server hardware.

• Understanding of security principles and best practices, including patch management and vulnerability assessment.

• Strong knowledge of malware families and network attack vectors.

• Good understanding of TCP/IP and internetworking technology including packet analysis, routing, and network security defenses.

• Minimum 2 years of related experience in cyber security or computer network defense role

• Strong understanding of MITRE ATT&CK Framework, NIST Cybersecurity Framework (CSF) and Kill Chain Methodology

• Relevant security-related certifications like CISSP, GCIH, GCIA, GCED, GCFA, CySA+ is a plus

• Good communication skills, with the ability to collaborate effectively with technical stakeholders.

• Strong attention to detail.

Responsibilities:

• Craft, enhance, and uphold IT security policies, standards, and processes.
• Ensure adherence to company's requirements, legal mandates, and regulations by implementing policies and controls.
• Assist in IT security risk management and enterprise risk management endeavors through policy development and execution.
• Foster a culture of continuous improvement by establishing, monitoring, and reporting on policy governance metrics.
• Conduct training sessions and awareness programs for staff.
• Serve as a liaison for IT policy matters, facilitating communication and interpretation of requirements, maintaining the enterprise IT policy framework, and ensuring alignment with IT governance.
• Support security audits and compliance efforts.
• Provide mentorship and guidance to team members.
• Engage with users and stakeholders to understand and address their needs effectively, maintaining a positive professional image.
• Manage budgetary and administrative responsibilities.

Minimum Requirements:

• Bachelor’s degree in Computer/Electrical/Electronics Engineering or Computer Science, with a preference for industry-recognized security certifications such as CISSP, CRISC, CISM, etc.
• At least 3 years of experience in an IT security governance role (5 years for senior manager position), preferably in a CII environment.
• Knowledge of Cloud Computing and Risk Assessment is advantageous.
• Strong problem-solving and analytical abilities.
• Excellent verbal and written communication skills, along with exceptional customer service capabilities.
• Ability to thrive in high-pressure environments and deliver results efficiently in a fast-paced setting.

Interested candidates, who wish to apply for the above position, please send in your resume to priyanka_tewari@persolkelly.com

We regret to inform that only shortlisted candidates will be contacted.

Job Code: PRIT

PERSOLKELLY Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1875348 (Tewari Priyanka)

**********************************

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.**********************************

Responsibilities:

• Provide Presales support on cybersecurity & PKI security products/ solutions to clients and partners.
• Execute post-sales installation, technical support (L1-L3) and maintenance services of cybersecurity & PKI products/solutions.
• Troubleshoot reported issues and collaborate with technology vendors for escalation when required.
• Ensure the completion and follow-up of daily operations and tasks.
• Provide technical support for tender submission, including technical compliance, technical solution proposal, and conducting Proof-of-Concept testing based on given bill of material.
• Evaluate and test security products and technologies for the development of new products and solutions.

Requirements:

• Diploma or Degree in IT, Computer Science, Cybersecurity, or equivalent
• 1-2 years of hands-on experience in designing, managing, and implementing cybersecurity for multi-vendor infrastructure, including:
• Microsoft based Domain Controller, DNS, DHCP, LDAP, RADIUS & AAA servers
• Microsoft based Certificate Authority, Prime Key EJBCA
• Window/Linux/UNIX OS environments
• Hardware Security Module (HSM)
• Key Management System (KMS)
• Ability to troubleshoot technical issues or perform technical setup with minimal supervision.
• Knowledge in SQL system such as MSSQL, Oracle, MYSQL is a plus.
• Familiarity with networking solutions (i.e. switching, routing) is advantageous.
• Professional certifications in cyber security or networking will be advantageous.
• Initiative with a positive working attitude.
• Hardworking and eager to learn new technologies and skills.

HOW TO APPLY:

Interested applicants, kindly send your resume in MS WORD format to ref10@trustrecruit.com.sg or please click on “Apply Now” and provide the below details in your resume.

• Last drawn salary
• Expected salary
• Notice period
• Reason for leaving

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Hooi Wai Man (Samantha)

EA Personnel Reg No: R21100062

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

• Develop, maintain, and operationalise a Threat Risk Assessment framework for HDB to identify and mitigate the threats and risks in its IT systems and programmes.

• Work with key stakeholders to ensure high cybersecurity posture of application systems through activities such as the following:
i. Promote secure coding practices.
ii. Review of Vulnerability Assessment and Penetration Testing (VAPT) Cases
iii. Facilitate remediation of vulnerabilities arising from application security testing
iv. Setup DevSecOps through CI/CD pipeline
v. Securing Cloud Workloads
vi. Procure & Maintain Security testing Tools/services to support source code review and VAPT.

• Related works include Threat Risk Assessment, project specific cybersecurity specification, cybersecurity proposals evaluation, cybersecurity design review, System Security Acceptance Test and review, Vulnerability Assessment and Penetration Test.

• Manage and promote IT security awareness and outreach programme.

• Keep abreast of the latest industry ICT security practices and technologies as well as emerging threats and vulnerabilities and recommend appropriate controls for implementation to improve the enterprise security posture.

• lead and/or participate in the adoption of new technological advances and best practices in infrastructure security systems to mitigate security risks.

You will be a Great Fit if you:

• You should possess a strong background in ICT Security, Information Security, Information Technology, Computer Science, Cybersecurity or equivalent.

• At least 2 years of experience in ICT works involving the setup, development, and management of web-based systems, with at least 2years of relevant ICT security work experience.

• Preferably possess one or more appropriate IT security certifications, such as CISSP, CRISC, CISM, CISA, CEH, etc

• Preferably with strong knowledge and experience in information and cybersecurity risks, controls, vulnerability assessment/penetration testing, compliance, and industry IT/cyber security best-practices.

Good to Have:

• Domain knowledge of access control; telecommunications and network security; cloud security; Cybersecurity & information security governance and risk management; software development security; cryptography; security architecture and design; operations security; security incident response and management; business continuity and disaster recovery planning; legal regulations, investigations, and compliance; physical (environmental) security

• Knowledge in IT security principles and IT controls as well as industry best practices and frameworks pertaining to IT Controls (IM8, COBIT, ISO27001/2 etc.)

• Good understanding of the current IT/Cyber Security landscape Great Attitude to bring the best out our team
• work beyond business hours including weekend when necessary.

• possess good interpersonal and communication skills.

• demonstrate a strong sense of urgency and have good troubleshooting and problem-solving skills with good attention to detail.

• conduct research on ICT and cybersecurity technologies where necessary to perform the assigned tasks.

• have good command of written and oral English

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14629820/335b844d-46dc-1eef-82a2-be58b2a32125

Hi Everyone, PT Asuransi Jiwa Inhealth Indonesia Official (Mandiri Inhealth) is currently looking for suitable candidates to fill the position of Senior IT Security for our Head Office at Mega Kuningan, South Jakarta. Here are some of the details :

• Bachelor’s degree in Information Technology or System Information or a related field.
• Minimum of 5-10 years as a IT Security or IT Cyber Security
• Familiar with common security controls and security flaws for modern Mobile Application, Web Applications, APIs and Cloud Infrastructure
• Understands the OWASP testing methodology
• Manage reporting related Information System Security status
• Manage operational SIEM & Information System Security day to day
• Familiar with common security controls and security standard such as NIST
• Offensive Security certifications is an advantage such as CEH Pratical or OSCP /OSCE certifiied

Responsibilities :

● Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.

● Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.

● Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.

● Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.

● Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.

● Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.

● Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.

● Developing and implementing security policies and procedures that ensure the organization’s data

and systems are protected against cyber threats.

● Conduct regular vulnerability assessments and penetration testing to identify potential security

weaknesses and risks to make improvements in the organization’s security.

● Report all security incidents to the home office and work with corporate IT on response and resolution strategy.

● Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.

● Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

● Bachelor’s degree in computer science, information technology, or equivalent experience.

● 5+ Years of experience in a cyber or information security management role.

● Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).

● Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.

● Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.

● Demonstrated understanding of business processes, IT risk management, and related standards.

● Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.

● Excellent problem-solving skills and the ability to think critically under pressure.

● Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.

● Proven track record of staying current with evolving cybersecurity threats and best practices.

● Exceptional planning and organizational skills, and excellent written and oral communication.

● Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.

● Professional information security certification preferred, such as:

○ CompTIA Security+

○ Certified Information Systems Security Professional (CISSP)

○ Certified Information Systems Auditor (CISA)

○ Certified Information Security Manager (CISM)

Location: East area

HOW TO APPLY :

Interested candidates, please submit your resume by clicking on “Apply Now” or aliceyap(a)hkmsvs.com

All applications will be treated in the strictest confidence and only shortlisted candidates will be notified

Yap Lay Choo

EA Licence No. 03C5391 | Registration No. R1987101

Job Description

Department: Business Engineering
Report to: Manager
Supervise:
Functional Relationships with: MES + ASEAN OSA OPA & Japan

Position Profile:
Based in: Singapore
The successful candidate will: Responsible to provide adequate IT security to MES & OSA, liaise with MMC IT security team, monitor security logs

Key Duties & Responsibilities:

• Work as an IT Security coordinator & Security operation center leader for ASEAN region
• Align cyber security needs with the business direction
• Initiate, develop, and maintain IT security policies, standards and procedures
• Facilitate a comprehensive Cyber Security training, awareness program and business continuity plans
• Perform IT Security risk assessments, propose and track remediation tasks
• Ensure IT compliance & governance measures are in place & followed
• Conduct audits of internal IT services and 3rd party services, as well work with external auditors on external audits
• Advise on appropriate cyber security solution & technology trends to be deployed
• Perform in-depth investigation to determine the root cause of a security incident
• Conduct analysis of logs from a wide range of systems, such as firewalls, EDR, SIEM, Anti-Virus, Vulnerability management to detect various types of IT-related threats
• Monitors security event reports and actions; ensuring the appropriate response is performed and coordinated.

Ability / Competency Required:

• Bachelor's Degree in Computer Science / Information Technology or Equivalent
• At least 1 year of working experience
• Good communication and presentation skills
• Able to work well as a team player while being independent and pro-active
• Positive attitude in challenging work environment
• Degree in Computer Science/ Information Technology or equivalent
• Good interpersonal and communication skills
• Ability to work well in a team
• Ability to perform multi-tasking

Murata Electronics Singapore is committed to providing a safe and secure environment for all job applicants.
Please note that Murata Electronics Singapore does not charge any fee for job applications or interviews. If you receive any suspicious emails or messages claiming to be from Murata Electronics Singapore, please do not respond and report it to us immediately.

To apply, It will be great if you could share your CV to hoonteck.tan@randstad.com.sg. Alternatively, you can apply at https://lnkd.in/gWMmB2d2

• Exposure to wide range of cyber security tools
• Team based environment (more than 6 other team members)

About the company

Our Client is an established company. With rapid expansion plan, they are now looking for a Cyber Security Analyst / IT Security Specialist to join their team.

About the job

Your role involves:

• Monitoring the evolving threat landscape and remediate incidents and take action on incident alerts. Ensuring thorough incident investigation following the Incident Response (IR) plan. This is with support from the Managed Security Service Providers (MSSPs) to deliver 24/7 monitoring and incident response services, ensuring timely resolution of incidents.
• Conducting threat simulations to detect early indicators of compromise and collaborate with the Solutions team to address identified gaps in security measures.
• Proactively engaging in threat hunting activities upon receipt of indicators from threat intelligence sources to maintain a secure environment free from vulnerabilities.
• Overseeing the continuous management of vulnerabilities, collaborating with the patch management team to ensure vulnerabilities are addressed within acceptable thresholds.
• Ensuring the deployment of appropriate security technologies to effectively mitigate threats.
• Leading , drive and manage new cybersecurity program and initiatives
• Partnering with internal and external team in planning and delivery, and in executing assessments, improvements and roadmaps.

Skills and experience required

As a successful applicant, you will have at least 5 years of experience in Cyber Security. Exposure to incident response, SIEM, Threat Monitoring or Threat hunting is required for this role.

Experienced in cloud security will be of added advantage.

Whats on offer

This is an excellent opportunity to join an established company with concrete plans to invest more in cyber security.

To apply online please use the 'apply' function, alternatively you can reach me at https://www.linkedin.com/in/hoonteck-nologyrecruitment. (EA: 94C3609/ R1219669)

To apply, It will be great if you could share your CV to hoonteck.tan@randstad.com.sg. Alternatively, you can apply at https://lnkd.in/gWMmB2d2 (EA: 94C3609/ R1219669)

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

We are seeking a highly skilled and motivated Cloud Security Specialist to join our dynamic team and play a pivotal role in ensuring the security, integrity, and compliance of our cloud-based systems and applications. As a Cloud Security Specialist, you will work collaboratively with cross-functional teams to design, implement, and maintain robust security measures that protect our organisation's assets and data in cloud environments.

• Cloud Security Strategy: Develop, implement, and maintain an effective cloud security strategy and architectures that adhere to best practices, industry standards, and regulatory requirements.

• Security Architecture: Collaborate with engineering teams to design and implement common cloud security architectures, ensuring principles of least privilege, zero trust, defense in depth, and security by design.

• Infrastructure Security: Implement and manage security controls for cloud infrastructure components, including networks, virtual machines, containers, and serverless services. Apply security groups, network segmentation, and encryption to safeguard data in transit and at rest.

• Identity and Access Management (IAM): Design and enforce robust IAM policies to manage user access, authentication, authorisation, and privilege escalation within cloud environments.

• Security Monitoring and Incident Response: Set up and manage continuous security monitoring, threat detection, and incident response processes for cloud environments. Respond to security incidents, perform root cause analysis, and implement preventive measures.

• Vulnerability Management: Conduct regular vulnerability assessments to identify and remediate security weaknesses. Know how to apply patches and updates in a timely manner.

• Security Compliance: Ensure and assess cloud environments adhere to relevant government ICT/SS compliance frameworks and regulations.

• Security Automation: Build and maintain security automation scripts and tools to streamline security processes such as provisioning, configuration management, and incident response.

You will be a Great Fit if you:

• Have experience (2+ years) in designing, implementing, and managing security solutions in cloud environments (AWS, Azure, Google Cloud, etc.).

• Understand cloud security principles, including network security, encryption, identity and access management, and security monitoring.

• Are proficient in security tools such as intrusion detection/prevention systems, SIEM, vulnerability scanners, network firewalls, and web application firewalls.

• Have implemented security best practices within Infrastructure-as-Code frameworks (e.g. Terraform, CloudFormation, Ansible) to ensure secure infrastructure provisioning and configuration management.

Good to Have:

• Relevant professional certifications such as Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, or equivalent.

• Proficiency in scripting or programming languages (e.g., Python, PowerShell) for security automation and orchestration.

• Experience in using containerisation technologies, such as Docker, Kubernetes, AWS ECS, and knowledge in securing containers.

• Proficiency in implementing DevSecOps and CI/CD pipelines, with experience in relevant CI technologies such as Git, Gitlab, and Jenkins. Hands-on experience with security testing tools (e.g., SAST, DAST, SCA) and vulnerability management.

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14625704/a714138f-b047-1edf-8286-5760531052b8