Total 535 security job vacancies in Legal / Public / Security category in Australia

To lead and ensure that security management practices across the region are implemented and

maintained to ensure the security of people, assets and operations of DP World within the region.

• To ensure security compliance of the BUs in the region to their respective applicable mandatory,

voluntary and client specific security compliance requirements. These requirements must be identified

and the list to be maintained.

• To plan and support implementation of compliance standards like ISPS Code, ISO 28000, TAPA etc. that

are required or planned as improvement by the BUs within the region.

• To ensure that security awareness becomes a culture within the region, using security campaigns,

training, outreach, and awareness sessions, either in person to locally based colleagues or remotely

through delegated security managers regionally

• To ensure all travellers in the region are apprised of security risk factors and implement measures and

mitigation techniques appropriate to the specific location

• To maintain close contact with regional peers within DP World and to build effective relationships with

regional and local agencies who can assist the collection of security information and the response to an

incident

• Undertake Risk Assessments and provide advice on security matters and compliance for new projects.

• Undertake security reviews and/or audits within the region as per frequency agreed with Group Security

and Regional Head.

• Lead, support and project manage on all aspects of security for new businesses and acquisitions.

• Support and where assigned lead security systems projects within the region.

• Support the integration of new businesses to the global security management system requirements.

• Prepare and submit security reports for the region to Group Security and Regional Head in the agreed

template(s) and frequency.

OTHER

• Applicable if role has direct or indirect reports - responsible for the management and leadership of an

engaged team, promoting collaboration and ensuring that each is developed and evaluated against goals

and objectives which are aligned, specific, measurable, attainable yet challenging, realistic and time

bound.

• Act as an ambassador for DP World at all times when working; promoting and demonstrating positive

behaviours in harmony with DP World's Principles, values and culture; ensuring the highest level of safety

is applied in all activities; understanding and following DP World's Code of Conduct and Ethics policies.

• Perform other related duties as assigned

Position Overview:

Squarepoint is seeking a subject matter expert to join our Information Security team as a Senior Information Security Engineer. This senior position plays a pivotal role in strengthening our security posture by providing expert guidance, and driving improvements across key areas such as network, cloud, data, and system security. The successful candidate will act as an escalation point to the Security Operations, ensuring complex security problems are effectively analysed and resolved. This role includes overseeing security in critical IT projects, leading threat modelling for complex systems, auditing key systems for security gaps, and building automated capabilities to continuously validate controls’ effectiveness and system resilience. This position offers an opportunity to lead security initiatives and shape the security roadmap. A high degree of self-motivation and proactivity is mandatory for success in this role.

• Strengthen security across core areas, including network and system security, email security, cloud security, and data protection.
• Serve as a security advisor for IT projects, ensuring security requirements are met and risks are mitigated.
• Manage and optimize security tools, ensuring they are effectively deployed and maintained.
• Lead the design and development of security solutions and architectures to protect critical assets.
• Provide second-line support to Security Operations.
• Conduct threat modelling and risk assessments to identify vulnerabilities and drive proactive mitigation strategies.
• Oversee relationships with the Managed Detection and Response (MDR) provider, ensuring service effectiveness and continuous improvement.
• Execute security roadmap’s initiatives, aligning with business objectives and emerging threats.
• Collaborate with cross-functional teams to enhance security awareness and integrate security into business processes.

Required Qualifications:

• Minimum 5 years of hands-on experience in an information security role, such as security engineering, security architecture, security operations, or application security.
• Thorough understanding of security best-practices, principles, and system hardening techniques.
• Hands-on experience with threat modelling, security testing, including penetration testing, and automated security validation.
• Solid knowledge of cloud, network, and systems security concepts.
• Experience with scripting with one or more languages – Python and PowerShell experience is a plus.
• Familiarity with security tools such as EDR software, DLP solutions, vulnerability scanners, firewalls and email gateways.
• Strong analytical skills and problem-solving skills, with the ability to investigate complex problems and design pragmatic solutions.
• Effective communication skills to work with technical and non-technical teams.
• Degree in Engineering, Computer Science, or STEM related field.

Nice to have:

• Strong knowledge of risk assessment methodologies.
• Familiarity with security best practices, configurations, and threat management in Azure, AWS, and GCP.
• Ability to analyse software for security risks, including reviewing source code, performing static and dynamic analysis, and identifying vulnerabilities in application design and implementation.
• Familiarity with regulatory frameworks and security standards (e.g., SEC Cybersecurity rules, MAS TRM Guidelines, NFA Cybersecurity Guidance, GDPR etc.)
• Relevant security certifications.

Job Requirements

• Candidate must possess at least a Diploma in Computer Science/Information Security, Engineering (Computer/Telecommunication) or equivalent.
• Required skill(s): Python.
• Expertise in other programming languages are advantageous.
• Only Singaporeans or PR are eligible.
• Candidates who possess OSCP and CREST Registered Tester certification.will be preferred.

Job Description

• Participate in security review and assessment for our clients' systems.
• Participate in forensics and incident response engagements.
• Participate in security consultancy and advisory engagements.
• Learn how to work independently and in a team.

Working Hours: Monday – Thursday (8.30am –6pm), Friday (8.30am – 5.30pm) (Hybrid working arrangement) 

Working Location: North East

Salary Package: Up to SGD 11,000 + AWS 

Employment Type: Contract (1 year renewable with chances of conversion)

We are looking for a Cloud Security & DevSecOps Engineer to design, develop, and maintain secure, scalable, and automated solutions across cloud and endpoint environments. You will be responsible for software development, cloud engineering, DevSecOps automation, endpoint security, Zero Trust implementation, and Site Reliability Engineering (SRE) practices. This role requires a strong technical foundation across software engineering, cloud platforms, security technologies, and infrastructure automation.

Key Responsibilities

Software Development

• Design, develop, and maintain secure, scalable, and well-documented software solutions.
• Develop applications and automation tools using Python, Java, Node.js, JavaScript/TypeScript, or similar technologies.
• Design and integrate RESTful APIs and web services.
• Work with databases such as AWS DynamoDB and SQL-based databases.
• Collaborate with stakeholders to develop frontend and backend solutions, ensuring seamless system integration.
• Implement software testing and quality assurance best practices.
• Manage source code and development workflows using Git and version control tools.

Endpoint Security, Zero Trust & Identity Management

• Develop and implement solutions to secure and manage endpoint devices across Windows and macOS environments.
• Work with security platforms such as Microsoft Intune, CrowdStrike, CyberArk, and Tanium.
• Automate threat detection, remediation, reporting, and security operations processes.
• Design and implement Zero Trust security architectures and secure access solutions.
• Configure and manage identity and access management (IAM) solutions using Azure Entra ID, Okta, AWS IAM, SAML, and related technologies.
• Administer Cloudflare services including Access, Gateway, and Web Application Firewall (WAF).
• Implement secure authentication, authorisation, and access control frameworks.

Cloud Engineering, DevOps & Automation

• Design, develop, and maintain cloud-native solutions on AWS and Azure platforms.
• Build automation solutions leveraging AWS services such as Lambda, ECS Fargate, DynamoDB, SQS, S3, EC2, CloudWatch, IAM, VPC, WAF, and Step Functions.
• Develop Infrastructure-as-Code (IaC) solutions using Terraform and cloud-native tooling.
• Build and maintain CI/CD pipelines using GitLab CI and other DevOps tools.
• Implement and manage containerised environments using Docker and Kubernetes.
• Support Agile delivery practices through Scrum and Kanban methodologies.
• Conduct proof-of-concepts (PoCs) and evaluate emerging technologies to improve operational efficiency and security.

Site Reliability Engineering (SRE)

• Develop and maintain observability, monitoring, and alerting solutions using the ELK Stack (Elasticsearch, Logstash, Kibana).
• Define and track SLI, SLO, and SLA metrics to ensure service reliability and performance.
• Build dashboards, alerts, and predictive monitoring capabilities.
• Manage ELK clusters, agents, fleet policies, and log ingestion pipelines.
• Design and implement automated recovery and self-healing mechanisms for critical systems.
• Continuously improve platform reliability, scalability, and operational excellence.

Requirements

• Degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or related discipline.
• Experience in software development using Python, Java, Node.js, JavaScript/TypeScript, or similar languages.
• Hands-on experience with AWS and/or Azure cloud platforms.
• Strong knowledge of DevOps, CI/CD, Infrastructure-as-Code, and automation practices.
• Experience with endpoint security, Zero Trust architecture, IAM, and security technologies.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781

The Cyber Security Specialist will architect, design, review, and implement cybersecurity solutions for large-scale projects and critical infrastructure. The role involves ensuring compliance with cybersecurity standards, monitoring and mitigating security risks, and developing cloud security architectures.

The specialist will also conduct vulnerability assessments, security audits, and provide consultancy on security vulnerabilities and risks.

Requirements:

• Lead and support cybersecurity implementation for large-scale projects and critical infrastructure systems.
• Ensure compliance with critical infrastructure cybersecurity standards (e.g., KINS/CII).
• Develop and implement cloud security architectures and solutions.
• Monitor, research, and analyse security risks to mitigate threats and attacks.
• Conduct vulnerability assessments, penetration testing (VAPT), and provide remediation recommendations.
• Perform system hardening, patch management, and secure configuration practices.
• Prepare and maintain security documentation (e.g., design documents, risk assessments, compliance reports).
• Provide guidelines for coding, key management, hardening, patch management, backup management, and incident management.
• Familiarity with public cloud infrastructures (Azure, AWS, GCP, Huawei).

Qualifications:

• Proven experience in large-scale projects, preferably in government or critical infrastructure environments.
• Strong familiarity with cybersecurity frameworks and standards (e.g., IM8, CIS, NIST).
• Hands-on experience in security architecture, system hardening, vulnerability assessment, and network/system security controls.
• Experience with network security, firewalls, VPNs, and identity and access control.
• Experience in system integration or project delivery environments.
• Strong documentation, communication, and stakeholder management skills.
• Relevant certifications (e.g., CISSP, CISM, CEH, CompTIA Security+) are a plus.

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage.
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines.

Reachfield Security (Grade “A” agency) specialises in supplying security manpower to Schools, Factories, Shopping Centres, Museums, libraries, etc.

Security Officer

Location: Braddell

Timing: 630-630

////////////////////////////////////////////////////////////////////////

1. Works in a school/ office building environment.

2. Good customer service skills; able to communicate with people of all levels.

3. 12hrs-shift (Fixed shift, no need to rotate)

4. PC knowledge required.

5. Job duties include traffic control, issue visitors/ contractor passes, patrolling, protecting clients’ premises and access control, etc.

6. Possess valid security license, completed WSQ RTT.

Office:10 Anson Road, #26-09 International Plaza

(Near Tanjong Pagar MRT Exit C)

Contact Us

Mobile: 8805 2291 Office: 6324 0648

You may fill in the application form online thru below link.

https://rss.armfort.com/direct... 

Do let us know once you submit the application online

Job Summary

The IT Security Lead manages end-to-end security governance, compliance, and operations for mission-critical systems, collaborating with cross-functional teams and external auditors to ensure adherence to government security policies.

Responsibilities

Day 1 – Project / Implementation Security

• Define and implement system security architecture aligned with Singapore Government policies
• Review application, middleware, infrastructure, and platform designs for security compliance
• Conduct threat modeling and risk assessments, mapping risks to mitigating controls
• Translate policy requirements into actionable technical controls across technology stacks
• Ensure compliance with IM8, Whole-of-Government security requirements, and PDPA where applicable
• Establish and oversee cybersecurity governance across infrastructure, application, and project teams
• Prepare and maintain documentation including Security Risk Assessments, Vulnerability Assessments, Penetration Testing reports, and security hardening baselines
• Partner with software teams to enforce secure coding standards and DevSecOps practices
• Integrate and govern SAST/DAST, dependency/SCA scanning, and container image scanning within CI/CD pipelines
• Review and triage security tool findings, driving remediation and risk acceptance decisions
• Provide guidance on API security, token/secret management, and secure service-to-service communication
• Plan, coordinate, and manage vulnerability and penetration testing engagements and vendors
• Track remediation progress to closure and document residual risks and risk acceptance
• Support security clearances and go-live certifications
• Review and approve OS, middleware, database, Kubernetes/container security, API gateway, WAF, rate-limiting, and authentication configurations

Day 2 – Operations / Production Security

• Lead security incident investigations, containment, and recovery efforts
• Perform root cause analysis and define corrective and preventive actions
• Coordinate with Government SOC and stakeholders; contribute to and refine incident response playbooks
• Communicate security incidents clearly to technical and non-technical audiences
• Oversee continuous vulnerability monitoring and posture management
• Track patch and configuration compliance across infrastructure, middleware, applications, and containers
• Provide risk assessments and compensating controls for deferred patches
• Review and tune alerts, detections, and dashboards in SIEM and related tools
• Ensure monitoring coverage for critical systems and high-value assets
• Support internal and external audits, evidence collection, and closure of audit findings
• Prepare and present security posture, metrics, and trend reports to management
• Maintain risk registers and mitigation plans with up-to-date security documentation
• Communicate security assessments and findings effectively to varied stakeholders
• Oversee and periodically review RBAC, MFA, Privileged Access Management, and joiner/mover/leaver processes
• Ensure least privilege access, segregation of duties, and periodic access recertifications
• Support incident response handling, log analysis, and activity reviews
• Drive continuous improvement across identify, protect, detect, respond, and recover functions

Required competencies and certifications

• Degree in Computer Science, Cybersecurity, Information Security, or equivalent
• 8–12 years of IT experience including at least 5 years as a Security Lead or Security Architect
• Proven experience in Singapore Government IT projects and IM8/government security compliance
• Hands-on experience with Kubernetes/Docker security, API security, Identity & Access Management (IAM), and security tools (SAST/DAST/SIEM) integrated with CI/CD

Preferred competencies and qualifications

• Certifications such as CISSP, CISM, CISA, CEH, GIAC (e.g., GSEC, GCIA, GCIH, GCSA)
• AWS or Azure Security certifications

5 day week @ AMK area

Maestro HR
damien lee tian hong
R1106726
16C8462

Working Hours

12-hour rotating shifts (Rostered)

• 8:00am – 8:00pm
• 8:00pm – 8:00am

3–4 working days per week, including weekends and public holidays. Shift schedule will be rostered based on operational requirements.

Job Summary

Support hospital safety and security operations by monitoring premises, responding to incidents, and ensuring a safe environment for patients, visitors, and staff.

Key Responsibilities

• Conduct routine patrols and monitor security-related equipment
• Respond promptly to incidents and provide assistance when required
• Investigate incidents and gather relevant information from involved parties
• Identify and report fire safety hazards or security concerns
• Support mortuary transfer procedures within the hospital
• Maintain accurate documentation and incident reporting
• Support operational and ad-hoc duties as assigned

Requirements

• Minimum GCE ‘N’ Level qualification
• At least 3 years of relevant security experience
• Valid Security Licence registered with Police Licensing & Regulatory Department (PLRD)

All qualified applicants, please click “ APPLY NOW”

Or you may send in your resume to:

Whatsapp: https://wa.me/+6597430026  

Email : kimlow@recruitexpress.com.sg

Kimmy Low Yi Ting (Kim) | CEI Registration Number: R23112122

Recruit Express Pte Ltd Company Reg. No. 199601303W | EA LICENCE Number: 99C4599

Reachfield Security (Grade “A” agency) specializes in supplyingsecurity manpower to Schools, Factories, Shopping Centres, Museums, libraries,etc

Security Officer

Salary : up to $3130 gross a month (5666days work arrangement)

////////////////////////////////////

1. Works in Commercial (Factory / Warehouse / Condo / Mall /Polytechnic) environment.

2. Good customer service skills; able to communicate with peopleof all levels

3. 12hrs-shift (Fixed shift)

4. PC literate

5. Job duties include issue visitors/ contractor passes, clocking,patrolling, protecting clients’ premise and access control, etc.

6. Possess valid security license, completed 4 mandatory WSQmodule for PWM-SO

Reachfield Security & Safety Management Pte Ltd

10 Anson Road #26-09

International Plaza, Singapore 079903

(Tanjong Pagar MRT)

For more information, please call office at 6324 2925 (Andrew)

Reachfield Security (Grade “A” agency) specializes in supplyingsecurity manpower to Schools, Factories, Shopping Centres, Museums, libraries,etc

Position: Full Time, Security Supervisor

Salary up to $3730 gross per month (5666days work arrangement)

Location of work:

SS > Tampines / Outram / Telok Ayer/ Hillview

***

1. Supervise a team ofsecurity personnel.   

2. Good leadershipskills and able to lead a security team to meet the client's requirements.

3. Day / Night dependson location; 12hr-shift (Fixed shift, no need to rotate)

4. Job duties includeleading the team, conduct daily briefing, patrolling, protecting clients’premise and access control, etc.

5. Possessed with PLRDlicense (SSS / SS rank), and completed CERT training.

6. Work with client’srepresentative closely and carry out instructions according to set SOP.

7. PC literate and canable to put up incident reports.

8. Conduct OJT for newstaff; guide, advise and orientate new staff for the job.

9. Attend managementmeetings.

Reachfield Security & Safety Management Pte Ltd

10 Anson Road #26-09

International Plaza, Singapore 079903

(Tanjong Pagar MRT)

Please email the updated resume to hr@reachfield.com

Skills Required:

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
• Minimum of 5 years’ professional experience, including at least 3 years in IT security or related roles.
• Working exp in Banking environment is desirable
• Experience in managing Darktrace, ForeScout, Keysight, Pentera appliances is MUST
• Hands-on experience with network security, infrastructure security, etc.
• Strong understanding of network protocols and security technologies
• Comprehensive understanding of security principles, and industry best practices
• Excellent communication skills, including technical writing and documentation proficiency.
• Proven ability to manage multiple tasks and meet deadlines
• Certifications like CISSP, OSCP, GSEC, CySA+, CNNP Security or equivalent are preferred

Roles and Responsibility:

• Health maintenance
• Perform updates and patching
• System features enablement and recommend enhancements
• Troubleshoot issues/problems till proper closure
• Liaise with stakeholders
• Cross-functional collaboration
• Support solution implementation
• Participate in DR Drill and power shut-down activities
• Perform data reconciliation and reporting
• Render support for audit needs
• Plan and schedule system upgrade
• Act on tasks assigned by System PICs

Location: Changi AIrport
Salary: $2,800 – $3,100 per month
Working days: 4 days work 2 days off OR 5 days work 1 day off

Responsibilities
• Manning of static/access control points
• Checking of passes and other documents at static/access points
• Screening and checking of all personnel and vehicles entering and exiting the premises
• Patrolling and guarding client’s personnel and properties
• Operating metal/explosive detectors/x-ray machines at checkpoints
• Issuing of visitor/contractor pass in exchange for their identification cards
• Attending to alarm activation
• CCTV Monitoring
• Responding to incidents such as unattended bags, etc.
• Maintaining records of all incidents
• Checking of boarding, staff, and valid entry passes

Benefits
• Full-time: Attractive salary package – Up to SGD3,600*
• 12hrs shift work (can be rotating or perm)
• Joining bonus up to $3500*
• Yearly Increment*
• Fully sponsored WSQ certified security training
• Comprehensive medical and dental benefits, etc

ISS International School is committed to safeguarding the well-being of our students and promoting the welfare of children and young people. We uphold high standards in our recruitment practices, with a strong focus on child protection and safety.

Working Schedule

Mon to Fri, 6.30 am to 6 pm, Sat, 8 am to 5 pm, rotational work 2 days and off 1 day.

Responsibilities

• Greet visitors and log in all visitors entering and leaving the school premises during school operation hours.
• Check all staff and students for valid IDs entering and leaving the school premises during school operation hours.
• Log in all staff and students entering and leaving the school premises after school operation hours and on weekends.
• Monitor and direct vehicular traffic entering and leaving the school premises, assist in maintaining safe traffic flow during start and end of the school day.
• Investigate alarms and disturbances and report all such situations to the Assistant Manager, Facilities.
• Record details of security-related incidents, eg. break-ins, dangerous driving within school premises, activation of the security alarm system etc. in the Occurrence Book and alert the Assistant Manager, Facilities immediately.
• Issue warning of rule infractions or violations and, where warranted, apprehend or evict violators from premises as directed by the Assistant Manager, Facilities or Senior School staff.
• Call police or fire departments in emergency situations such as fire or suspicious unauthorized personnel on school premises.
• To attend training be in line with the Singapore Police Force new Licensing Condition for Security Officer.
• Follow the security SOP meticulously and carry them out diligently and sensibly.
• Coordinate vacation leave with the team to ensure minimal disruption to the daily operational schedule.
• Perform other duties as assigned by the immediate supervisor or Deputy CEO.

Education/trade qualification/other requirements generally required for job

• You should possess relevant security officer license issued by PLRD.
• You should be able to deal with unexpected emergencies calmly and sensibly.
• You should follow the chain of command and comply with directives from supervisors.
• You should maintain a professional appearance and attitude and able to interact with the staff and members of the public politely and firmly as needed.

Role Overview

• Drive enterprise-wide and group security initiatives, maintaining and strengthening them through PDCA cycles
• Develop and deploy information security policies/standards, plan and execute security strategies
• Design and implement employee training programs (planning, execution, and effectiveness analysis)
• Respond to security consultations from business units, and coordinate with key departments to drive cross- security governance and initiatives.

Required Skills & Experience

• Japanese (business) and English (business) to communicate with HQ in Japan
• 5+ years of experience in information security planning and strategy development
• Experience with ISMS (Information Security Management System) and/or ISO 27001certification acquisition and operations
• Experience conducting gap analysis using NIST CSF and/or CIS Controls
• Hands-on experience with security risk assessment, management, and incident response
• Experience handling information security regulations (e.g., Personal Information Protection Act, GDPR)
• Experience leading cross-functional projects
• Experience planning and conducting security awareness and training programs for executives and operational staff
• Basic knowledge and operational experience with IT infrastructure (network, cloud, servers, etc.)
• Information security certifications (CISSP, CISM, Registered Information Security Specialist, etc.)

Preferred Skills & Experience

• Experience developing internal policies and guidelines
• 3+ years of system operation and deployment experience
• 3+ years of information security-related work experience

Soft Skills

• Ability to explain and persuade based on the audience's perspective and knowledge level
• Proactive attitude and self-starter mindset
• Strong collaboration skills with ability to coordinate and build consensus across departments