Total 105 security job vacancies in Others category in Hong Kong

⭐ARSLAN SRS SINGAPORE⭐

Security & Risk Solutions Pte. Ltd.

HIRING FULL-TIME SECURITY PERSONNEL

Arslan SRS Singapore

We are seeking a committed and service-oriented Guest Experience Executive to join our hospitality team. This role has been thoughtfully redesigned to integrate security operations with selected concierge and call centre responsibilities, play a pivotal role in ensuring the safety, comfort, and satisfaction of hotel guests through proactive engagement, vigilant security monitoring, and professional call handling. This is a multi-functional role best suited for individuals with strong situational awareness, service excellence, and the ability to respond effectively to both guest needs and security-related matters.

Responsibilities:

1. Guest Experience & Concierge Services

• Deliver warm, professional, and personalized service throughout the guest journey—from arrival to departure.
• Handle VIP guest arrangements and ensure special requests are fulfilled accurately.
• Provide recommendations for local attractions, dining, transportation, and guest services.
• Oversee hotel driveway and lobby area to ensure a clean, welcoming, and organized environment.
• Coordinate logistics such as airport transfers, limousine bookings, and car park assistance.
• Work closely with third-party service providers (e.g. restaurants, transport operators) to enhance guest satisfaction.
• Supervise and support the Concierge/Bell team in their daily tasks and guest interactions.
• Plan duty rosters based on operational needs and manage leave scheduling effectively.

2. Security & Safety

• Conduct routine patrols of hotel premises and report any suspicious activity or safety hazards.
• Enforce safety protocols, conduct bag checks, and assist in managing access control points (e.g. staff entrances, contractor access).
• Respond to emergencies, support the Emergency Response Team (ERT), and provide first aid when needed.
• Assist in managing lift and traffic control during peak hours and special events.
• Support People & Culture team with locker inspections and incident reporting procedures.

3. Call Centre & Guest Communication

• Handle inbound calls, internal communication, and guest requests using hotel systems (e.g., Avaya One-X, DuVoice).
• Manage wake-up calls, do-not-disturb requests, and general phone services professionally.
• Use hotel software platforms (e.g., Infrasys, TableCheck, Bartech) to manage room service orders, minibar status, and restaurant reservations.
• Maintain accurate e-logs of guest communications, complaints, and follow-ups.
• Escalate and resolve guest issues or service recovery cases in a tactful and timely manner.
• Monitor call quality standards (e.g. response time, call abandonment rate) and provide feedback to improve service delivery.

​Our Client is an established company in Singapore, who is seeking to recruit a Lead Cybersecurity Specialist (Offensive Security).

Lead Cybersecurity Specialist (Offensive Security)

As the Cybersecurity Specialist (Offensive Security) within the CISO Office, you will be the domain expert responsible for elevating the security testing and "Secure-by-Design" capabilities across the entire Family. You will bridge the gap between high-level governance and technical implementation, ensuring that all agencies under the ’s purview adopt consistent, high-quality security practices. Your role is pivotal in shifting from a reactive security posture to a proactive, resilient one.

Key Responsibilities

1. Security Testing Governance & Standardisation

·       Establish Standards: Define and maintain the -wide framework for security testing (Vulnerability Assessment and Penetration Testing - VAPT).

·       SOP Development: Create and roll out Standard Operating Procedures (SOPs) to guide project teams on engaging external security vendors and managing internal testing cycles.

·       Quality Assurance: Develop "Quality Rubrics" to help agencies evaluate the performance of pen-testers. You will conduct periodic sampling of testing reports and project involvements to ensure quality and rigour across the Company.

2. Advanced Technical Operations

·       Red Teaming & Critical Testing: Lead and execute complex Red Teaming exercises and deep-dive penetration tests on the ’s high-impact systems.

·       Adversary Simulation: Utilise knowledge of the latest Adversary Tactics, Techniques, and Procedures (TTPs) to simulate real-world attacks, helping agencies identify blind spots in their prevention, detection and response capabilities.

·       Environmental Scanning: Proactively monitor the global threat landscape to identify emerging threats and evolving actor TTPs. Assess how these changes impact the 's current security posture and update testing standards accordingly.

3. Secure-by-Design & Source Code Excellence

·       Secure Coding Standards: Establish -wide secure coding guidelines (e.g., based on OWASP, SANS) to ensure developers build security into the application layer from day one.

·       Source Code Analysis: Lead the strategy for Static Application Security Testing (SAST) and Software Composition Analysis (SCA). You will evaluate tools that automate the detection of vulnerabilities in source code and third-party libraries.

·       CI/CD Integration: Evaluate, recommend, and provide guidance on integrating security tools into the agencies' DevOps pipelines (DevSecOps).

·       Code Quality Oversight: Review and recommend systems that help to boost code quality, ensuring that security is treated as a core component of "clean code."

·       Technology Foresight: Stay abreast of technology changes (e.g., Cloud-native security, AI-driven development) and recommend systems/technologies that enhance code quality and resilience.

4. Stakeholder Engagement & Advocacy

·       Consultative Leadership: Act as a trusted advisor to CIOs, ACISOs, and Project Owners to educate them and inculcate a culture of secure-by-design.

·       Community of Practice: Establish a platform for knowledge sharing among security practitioners within the Family to harmonise security testing efforts.

Requirements

Experience

·       Years of Experience: 8 to 10 years of deep technical experience in Cybersecurity, with a strong focus on offensive security and application security.

·       Domain Expertise: Proven track record in conducting penetration tests for Web Applications, IT Systems (on-premises and cloud environments), and complex Network architectures.

·       Code Review Mastery: Experience in performing manual and automated source code reviews to identify logic flaws, injection vulnerabilities, and cryptographic weaknesses.

Technical Skills

·       Secure Development: Deep understanding of secure software development lifecycles (SSDLC) and the ability to read/analyze common programming languages (e.g., Java, Python, .NET, JavaScript).

·       Source Code Analysis Tools: Proficiency with enterprise-grade SAST, DAST, SCA and VAPT tools (e.g., Checkmarx, Fortify, SonarQube, Snyk, Burp Suite).

·       Offensive Security: Proficiency in manual and automated testing tools; deep understanding of the MITRE ATT&CK framework and common TTPs.

·       Cloud & DevOps: Experience with Government Commercial Cloud (GCC) environments and practical knowledge of Jenkins, GitLab CI, or GitHub Actions.

·       Certifications: Professional certifications such as OSCP, OSWE (Offensive Security Web Expert), CASE (Certified Application Security Engineer), or GWEB are highly desirable.

Soft Skills

·       Influence & Diplomacy: Ability to communicate complex technical risks to non-technical stakeholders (CIOs/Project Owners) and influence change without direct reporting lines.

·       Analytical Mindset: Ability to spot patterns in "bad" testing jobs or recurring code vulnerabilities and provide constructive feedback to improve Company-level performance.

·       Intellectual Curiosity: A strong commitment to continuous learning and keeping pace with the rapidly evolving cyber threat landscape.

JJ Consulting Services

EA Licence No.: 12C6207

Applicants are invited to send in a MS Word resume to jobs@jjconsulting.com.sg stating position applying for/present/expected salaries and earliest available date.

We thank all applicants in advance and regret that only short listed candidates will be notified.

Education / Experience:

 Diploma / Degree in relevant discipline

 Minimally 2 years of relevant work experience in similar roles

 Experience in IT industry

Job Description:

 Responsible for maintaining and enhancing strategic relationships with existing partners and onboarding new partners while continuing to drive revenue opportunities

 Develop and execute joint got-to-market strategies with vendors, distributors and other strategic alliance partners

 Facilitate engagement between the partners, sales and presales team to drive growth

 Drive engagement with local and overseas startups as well as existing vendors product team on technology roadmap

 Engage with founders, market researchers, innovators and ecosystem players to understand current market landscape and upcoming trends and impacts

 Translating market trends and company’s own internal capabilities into actionable insights

 Drive internal teams to explore new technologies and generate innovative solutions that is unique to the company

 Analysis of large sets of data to identify trends and generate insights that drive strategic decisions

 Converting of data into meaningful reports, dashboards and presentations for management consumptions

Skill sets:

 Excellent interpersonal communication and partner management

 Strong team player

 Experience with the IT industry and have the ability to exude corporate diplomacy at all times

 Good breadth of technology knowledge

 Strong interest in new technologies

 Analytical mindset

Position Overview

We are seeking an Associate Cybersecurity GRC Consultant to join our consulting practice. The primary focus of this role is delivering cybersecurity governance, risk, and compliance (GRC) implementation projects across a range of frameworks (e.g., ISO 27001, CSA Cyber Trust Mark, Cyber Essentials, Security by Design) for clients across diverse industries.

As a secondary function, the consultant will support IT audit and assessment engagements across various frameworks, including ITGC audits, ISO 27001 audits, and Cyber Trust Mark assessments. The successful candidate will work closely with clients to identify security risks, develop mitigation strategies, and implement effective solutions to safeguard their information systems.

Key Responsibilities

• Support cybersecurity GRC implementation projectsend-to-end across a range of frameworks (e.g., ISO 27001, CSA Cyber Trust Mark,Cyber Essentials, Security by Design), including gap analysis, risk assessment, documentation, controls implementation, consultancy, and audit readiness/preparedness.
• Perform cybersecurity risk assessments and develop risk treatment plans aligned to client business context.
• Participate in reviewing, developing and/or enhancing client’s documentation, covering information security policies, procedures, and governance frameworks.
• Support clients in establishing security governance structures, including organization structure, practices and procedures.
• Participate in preparing cybersecurity awareness training programmes to client staff.
• Perform audits evaluating design and operating effectiveness of IT controls, from planning and execution through to draft reporting.
• Prepare audit working papers, document findings, and draft actionable recommendations.
• Manage client relationships and stakeholder communications throughout engagements.
• Stay current on evolving cybersecurity frameworks, regulations, and threat landscape.
• Contribute to internal methodology, tools, and template development.

Job Requirements

• Diploma or bachelor’s degree in information technology, computer science, cybersecurity, information Systems, or a related field.
• Up to 2 years of experience in cybersecurity, IT audit,GRC, or related consulting; fresh graduates with relevant internships orproject work are encouraged to apply.
• Foundational awareness of ISO 27001, CSA Cyber TrustMark / Cyber Essentials, or similar GRC frameworks, with a willingness todeepen knowledge on the job.
• Basic familiarity with IT general controls concepts (e.g.,access management, change management, IT operations) gained through study or early work experience.
• Exposure to risk assessment methodologies and risk treatment planning, or an aptitude to learn them quickly.
• Interest in developing and reviewing security policies, procedures, and governance documentation, with guidance from senior consultants.
• Strong documentation, analytical, and report-writing skills.
• Effective client-facing communication and presentation skills.
• Proactive, detail-oriented, and willing to manage multiple engagements concurrently.
• Ability to work both independently and as part of a team in a fast-paced consulting environment, and openness to coaching and feedback.

Preferred Qualifications

• Entry-level or foundation certifications such asCompTIA Security+, ISC2 Certified in Cybersecurity (CC), ISO 27001 Lead Implementer, or ISO 27001 Internal Auditor.
• Internship or prior exposure to a consulting or professional services environment.

About us:
Our Company is a leading security agency with a strong reputation for providing top-tier security services to a diverse clientele. We are seeking an experienced and dynamic Business Development Manager to lead our business expansion efforts and drive growth in the security industry.

Job Description:

· As the Business Development Manager, you will play a pivotal role in identifying, acquiring, and nurturing client relationships while expanding the reach and impact of our security company’s vision and objectives. This position offers an exciting opportunity to shape our organization’s future while contributing to our client’s safety and security.

Responsibilities;

Client acquisition:
- Prospect, approach and engage potential clients through various channels, including cold calls, emails, networking, and in-person meetings.
- Build and maintain a robust client and track leads and opportunities.

Proposal Development:
- Develop persuasive proposals and presentations that highlight our agency’s services and expertise.
-Tailor proposals to meet the specific security needs and concerns of clients.
Relationship Building:
- Cultivate and maintain strong long-term relationships with clients proposals to meet the specific security needs and concerns of clients.

Requirements;
- Bachelor's degree in business, marketing, or related field.

-Strong understanding of security services and industry trends.

-Strong understanding of security services and industry trends.

-Exceptional communication, negotiation, and presentation skills.

Today

Hr Finanace job scope for security industry

The core HR & Finance job scope in the Singapore security industry centers on three pillars: regulatory compliance, manpower administration, and financial control. The security sector is highly regulated (MOM, SPF/PRD), so HR–Finance roles carry heavier compliance and documentation duties than in most industries. Below is a structured, detailed breakdown tailored to security agencies in Singapore.

ROLESUMMARY

The IT Security Officer is responsible for ensuring the security, integrity, and compliance of enterprise IT systems and data. The role focuses on implementing security controls, monitoring threats, managing risks, and ensuring adherence to regulatory and governance standards in mission-critical and regulated environments.

KEYRESPONSIBILITIES

· Implement and manageenterprise security controls across infrastructure, applications, and networks.

· Monitor security events,logs, and alerts; identify and respond to potential threats and incidents.

·  Conduct vulnerabilityassessments, risk analysis, and security reviews.

· Manage identity and accesscontrols, including user provisioning and privileged access.

· Ensure timely patching,system hardening, and remediation of security vulnerabilities.

· Develop and enforce securitypolicies, standards, and procedures.

· Support incident response,investigation, and root cause analysis (RCA).

· Ensure compliance withregulatory, audit, and governance requirements.

· Collaborate withinfrastructure, network, and application teams to embed security bestpractices.

· Conduct security awarenessand advisory for internal teams.

· Maintain securitydocumentation, reports, and audit artifacts.

· Support third-party/vendorsecurity assessments and risk management.

TECHNICALSKILLS & TOOLS

· Security Domains: Networksecurity, application security, endpoint security, IAM

· Tools: SIEM (Splunk,QRadar), EDR/XDR, vulnerability scanners (Nessus, Qualys)

· Access Management: ActiveDirectory, Azure AD, IAM tools

· Cloud Security: AWS/Azuresecurity services, cloud posture management

·  Networking & Systems: Firewalls, VPNs, Linux/Windows security fundamentals

·  Standards & Frameworks: ISO 27001, NIST, CIS Benchmarks

SECURITY& COMPLIANCE

· Ensure implementation ofsecurity controls aligned with ISO 27001, NIST, and CIS.

· Perform audits, riskassessments, and compliance reporting.

· Support incident managementand regulatory requirements.

· Ensure data protection andsecure handling of sensitive information.

QUALIFICATIONS& EXPERIENCE

· Degree in IT, Cybersecurity,Computer Science, or related field.

· 4–8 years of experience inIT security or cybersecurity roles.

· Experience in enterprise orregulated environments preferred.

· Strong analytical, incidentresponse, and communication skills.

PREFERRED(GOOD TO HAVE)

· Certifications such asCISSP, CISM, CEH, or equivalent.

· Experience with Security Operations Center (SOC) environments.

· Exposure to Zero Trust architecture and cloud security practices.

· Experience in government or compliance-driven projects.

Job Title: Security Officer

Job Responsibilities

• Ensure the safety and security of students, staff and visitors on the school premises.
• Monitor and control access to the school compound, including checking visitors and vehicles.
• Conduct regular patrols around the campus to ensure the security of building and facilities
• Report any suspicious or unusual activities.
• Respond to incidents, alarms and emergencies promptly and report them to the school management.
• Assist with crowd control and security during school events
• Perform other duties as assigned.

Job Requirements

• Minimum Secondary education.
• Valid Security Officer Licence.
• Prior security experience.
• Able to work shift hours, including evenings or weekends when required.
• Responsible, vigilant and able to handle situations calmly.
• Good communication and interpersonal skills.

The Managed Services Cross Technology Engineer (L3/4) –Network / Security is an advanced engineering role, architecting level, responsiblefor ensuring a managed service is provided to all clients, to ensure that theirIT infrastructure and systems remain operational. This is done throughproactively managing, overseeing, monitoring, investigating, and resolvingescalated technical incidents and problems to ensure the restoration of theseservices to the clients.

The primary objective of this role is to understand, design,implement, and maintain the enterprise network's defensive architecture toprotect data and infrastructure from sophisticated threats. This involvesacting as the highest-tier escalation point for complex security incidents anddefining the strategic roadmap for firewalls, segmentation, and Zero Trustmodels. This role also proactively review all client requests or tickets andapply technical process knowledge to provide the clients with almost immediateresolution without breaching service level agreement (SLA).

The Managed Services Cross Technology Engineer (L3/4)focuses on forth line support for escalated incidents and requests with a highlevel of complexity. Ensures contracted Managed Services outcomes are deliveredto the client.

This is a strategic role focusing across various technologydomains such as (but not limited to) Cloud, Security, Networking, Applicationsand / or Collaboration.

This role may also contribute to / support on project workas and when required.

Key Responsibilities:

·       Define andLead Network Security Strategy: Understand, architect, design, and champion theoverall network security posture and roadmap for the entire organization(on-premise, cloud, hybrid).

·       L3/L4Incident Management & Root Cause Analysis: Act as the highest-tierescalation point for complex and critical network security incidents andfailures, driving resolution and preventative measures.

·       SecurityInfrastructure Management: Design, deploy, and manage core network securitycomponents, including next-generation Firewalls (NGFW), IDS/IPS, LoadBalancers, VPN concentrators, and network access control (NAC) systems.

·       PolicyDevelopment and Review: Establish and enforce comprehensive security policies,standards, and baselines across all network devices and segmentation zones.

·       CloudNetwork Security Architecture: Design secure networking patterns for cloudenvironments (e.g., AWS VPCs, Azure VNet security groups, Transit Gateways)integrated with on-premise solutions.

·       DisasterRecovery (DR) and Business Continuity: Develop and regularly test networksecurity components of the DR and Business Continuity plans.

·       TechnologyEvaluation: Evaluate and recommend new security technologies and tools (e.g.,SASE, Zero Trust Network Architecture) to improve the organization's defensivecapabilities.

·       Mentorshipand Documentation: Create high-quality documentation (HLD/LLD) and mentorjunior engineers on security best practices and advanced troubleshootingtechniques.

• Works independently, with general direction from the client, stakeholders, team lead, or senior manager, to perform operational tasks to resolve all escalated incidents/requests in a timely manner within the agreed SLA.
• Timely and consistent updates of tickets with resolution tasks performed.
• Proactively identifies, investigates, analyses issues and errors prior to or when they occur and log all such incidents in a timely manner.
• Captures all required and relevant information for immediate resolution.
• Provides forth level support to all escalated incidents, requests and identify the root cause of incidents and problems, respond to tickets where third line engineer teams were unable to fix the problem.
• Shares such knowledge, to resolve issues, document them, and push the knowledge down to other engineers.
• Communicates with other teams and clients for extending support. Acts as emergency support contact as needed, for critical client and business-impacting issues.
• Supports, tracks, and documents change implementation.
• Provides timely escalation of all tickets to management with ensuing updates, where applicable.
• Proactively identifies, contributes, implements and works with automation teams for effort optimization and automating routine tasks.
• Systematically gathers relevant information and applies technical knowledge to analyze and uses highly technical troubleshooting tools and content and analytical practices.
• Uses operational and diagnostic procedures to resolve escalated tickers in unique and complex client environments.
• Coaches L1, L2, and L3 teams offering technical expertise and pushing work down to other engineering teams.
• Performs quality audits, covering process, service experience, ticket updates, etc. as required.
• May manage and implement projects within technology domain, delivering effectively and promptly per client agreed upon requirements and timelines.
• May work on implementing and delivering disaster recovery functions and tests.
• Performs any other related task as required.

Knowledge and Attributes:

• Ability to communicate and work across different cultures and social groups.
• Ability to plan activities and projects well in advance, and takes into account possible changing circumstances.
• Ability to maintain a positive outlook at work.
• Ability to work well in a pressurized environment.
• Ability to work hard and put in longer hours when it is necessary.
• Ability to apply active listening techniques such as paraphrasing the message to confirm understanding, probing for further relevant information, and refraining from interrupting.
• Ability to place clients at the forefront of all interactions, understanding their requirements, and creating a positive client experience throughout the total client journey.
• Excellent proficiency in change management process with an ability to plan, monitor and execute changes with clear identification of risks and mitigation plans to be captured into the change record.
• Deep technical skills in relevant functions.
• Excellent client service orientation and passion for achieving or exceeding expectations.

Academic Qualifications and Certifications and tools:

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).
• Certifications relevant to the services provided (certifications carry additional weightage on a candidate’s qualification for the role).
• Relevant certifications include (but not limited to) -

·       Fortinet

·       RSA

·       Tenable

·       Trend Micro

·       F5

·       CCIE, CCNP in Security or PCNSE certification orFirewall Vendor related certification is good to have along with advancedtechnical certification such as CCIE, CISSP.

·       Firewalls:Expert-level management of Cisco or FortiGate.

·       Zero TrustArchitecture (ZTA) / SASE

·       Segmentation:Micro-segmentation and logical network segmentation (VLANs, VRFs).

·       CloudNetwork Security: AWS/Azure/GCP network security controls (VPC, SecurityGroups, NSGs).

·       NAC: CiscoISE or similar Network Access Control systems.

·       IDS/IPS& WAF (Web Application Firewalls, e.g., F5, Cloudflare).

·       Automation:Basic scripting skills in Python and use of Ansible for security configuration.

·       SIEM:Familiarity with Splunk or Microsoft Sentinel for log analysis.

Packet Analysis: Expert troubleshooting usingWireshark or tcpdump