Total 587 security analyst job vacancies in Others category in Hong Kong

About Gain City

 At Gain City, we deliver expertise and quality solutions in air-conditioning, home appliances and consumer electronics. Established in 1981, Gain City is a trusted household name in Singapore. We take pride in our strong customer focus, innovative spirit, and commitment to service excellence. With a dynamic workforce and a network of stores and service centres island wide, we offer a vibrant and growth-oriented environment where employees are empowered to thrive, take ownership and make a real impact.

About the Role

Reporting to the finance leadership team, the analyst acts as a bridge between finance and IT teams to drive efficiency, accuracy and data-driven decision making. This role supports the digital transformation of finance operations, involving FP&A processes, analysing workflows, identifying inefficiencies, and implementing automation solutions for reporting, budgeting, forecasting, analytics, and visualization.

Key Responsibilities

• Lead Financial Planning & Analysis (FP&A) and budgeting activities for the Group.

• Responsibilities include reporting metrics, analyzing methodologies, suggesting operational improvements, and building proposal evaluations in cross-functional environment.

• Refine financial processes through identifying opportunities for improvement & efficiency.

• Contribute to UAT planning and execution, including writing acceptance criteria and validating test outputs and outcomes.

• Perform a bridging role between the finance and IT team.

• Think strategically and analytically about business and financial implications.

Key Responsibilities

• Degree or Diploma in Business Analytics.

• At least 2 years of relevant working experience.

• Advanced proficiency in Microsoft Excel and Power Query.

• Demonstrated working knowledge of SQL Functions & Queries is mandatory.

• Robust data analytics and visualization skills, preferably with Microsoft Power BI and Python.

• Experience dealing with databases is an advantage.

• C# experience desired but not a must

What We Offer

At Gain City, we are committed to the growth and development of our employees. You will be offered various learning and development opportunities and a collaborative, forward-thinking and growth-focused work environment to thrive in your career. You will also receive a comprehensive benefits package.

Note

• Only shortlisted candidates will be notified.

Job Target

Maintain and develop fundamental models for APAC power market within AXSG Asia power desk.

Tasks and Responsibilities

Build, maintain and further develop fundamental power models
Fundamental analysis of the APAC power markets in order to support the proprietary trading activities of AXSG/AXSO. Continuous development and improvement of models as well as data quality and accuracy through ongoing market observation and back testing. Timely anticipation and valuation of fundamental changes in power markets, and other price influencing factors.

Work closely with CEMT team to ensure models accuracy and integration across regional desks and products
Work closely with the analysts and traders of the power trading desks in Singapore and Europe, as well as those working in the LNG, gas and fuels desks and AI team to keep models updated and improve forecast accuracy.

Support CEMT trading desks with bespoken and standardised scenarios and sensitivities
Run bespoke scenarios and sensitivities to validate risk/reward of prop trading ideas developed by or with the traders.

Market Intelligence
Monitor market trends, regulatory changes and trading opportunities.

Prepare ad-hoc reports
Prepare ad-hoc material and presentation to the front office and management when required.

Communicate analysis in a clear and accurate manner
Effectively communicate views and findings to traders, other analysts and relevant stakeholders.

Skills and Competencies

Personal Competencies

• Ability to dissect, structure and solve complex tasks and ex-plain clearly analysis
• High attention to detail but able to prioritize tasks.
• Ability to work under pressure and volatile market conditions
• Commercially-minded
• Team player with excellent communication skills
• Appetite to work a newly open desk

Professional Competencies

• 5+ years of experience building and maintaining supply and demand models on Power, Gas and Environmental markets in a major utilities, International Oil & Gas Company, Trading house or Hedge Fund
• In depth knowledge of APAC main fuel (LNG, gas coal, fuel) and renewable energy market
• Deep understanding of international, oil, coal and gas economics and their impact on domestic power
• Prior exposure to derivatives markets is preferred
• Preferably knowledge in energy software platform such as EPSI
• Ability to translate market mechanics into quantitative supply/demand models

Qualifications

• University degree in mathematics, engineering, computer science, economics or chemistry
• Strong Coding and database skills (Python, R, SQL etc)
• Good command of MS Office, especially Excel
• English
• Japanese is a plus

Responsibilities

• Owner of the Incident Response playbooks for diverse threat scenarios (Ransomware, Data Exfiltration, Cloud breaches).
• Direct guidance and technical oversight during High and Critical severity incidents, ensuring timely reporting and effective containment.
• Establish clear command structures and roles, empowering leaders to make difficult, high-stakes decisions during a crisis.
• Create and maintain high-quality Tabletop Exercises for stakeholders (system owners, SIROs, CISOs, CIOs).
• Evaluate external vendors to ensure exercises are realistic, comprehensive, and limits pushing.
• Adopt chaos testing to validate the adequacy of resiliency plans and identify hidden failure points in critical systems.
• Assess operational readiness to bridge identified gaps in incident management.
• Ensure all systems are effectively onboarded to central monitoring services.
• Collaborate with system owners on overcoming challenges encountered during onboarding.
• Maintain a robust and updated IT asset inventory.
• Guidance on unique threat use cases or specialised systems (OT/ICS) that fall outside standard monitoring coverage, and help to build bespoke detection capabilities.
• Develop Standard Operating Procedures for vulnerability management across on-premises, cloud (GCC), and OT environments.
• Ensure proper procedures for managing unpatched vulnerabilities.
• Deploy adequate internal and external scanning tools.
• Oversee workflow for finding prioritisation and validate patches are applied and effective.
• Educate stakeholders on the critical importance of Response and Business Continuity Planning (BCP).
• Ensure project owners and agency leaders understand their roles in threat monitoring and incident management.

Requirement

• 8 years of deep experience in Cybersecurity Operations, SOC Management, or Incident Response.
• Experience leading or providing technical oversight in high-pressure, high-severity security incidents.
• Experience managing security operations across complex hybrid environments (On-premise, Cloud, and OT).
• Expert in IR methodologies
• Skilled in SIEM, SOAR, XDR, and EDR technologies.
• Strong understanding of digital forensics and malware analysis.
• Deep knowledge of the threat landscape and the ability to map monitoring use cases to the MITRE ATT&CK framework.
• In-depth understanding of the CVE (Common Vulnerabilities and Exposures) system and CVSS scoring.
• Knowledge of exploitation techniques and the mechanics of how vulnerabilities are weaponised by threat actors.
• Able to assess the "exploitability" of a vulnerability within the specific context of the environment to prioritise remediation.
• Able to evaluate the relevancy of existing monitoring tools against evolving threats.
• Sound understanding of monitoring and responding to incidents within Government Commercial Cloud (GCC) and native cloud environments.
• Professional certifications such as GCIH (GIAC Certified Incident Handler), GCFA (GIAC Certified Forensic Analyst), CHFI, or CISSP advantageous.
• Able to remain calm and provide clear, authoritative guidance during high-stakes security crises.
• Skill in translating operational needs into strategic priorities for CIOs and CISOs.
• Strong interest in emerging security technologies and the ability to proactively adapt monitoring strategies to counter new actor TTPs.

Ethos Search Associates Pte. Ltd.

EA License No: 13C6655

EA Reg No: R1988580 Jacky Chong

Responsibilities

• Owner of the framework for security testing (Vulnerability Assessment and Penetration Testing - VAPT).
• Design and implement Standard Operating Procedures (SOPs) to guide teams on engaging external security vendors and managing internal testing cycles.
• Establish "Quality Rubrics" to evaluate the performance of pen-testers.
• Conduct periodic sampling of testing reports and project involvements to ensure quality and rigour.
• Lead the execution of complex Red Teaming exercises and deep-dive penetration tests on high-impact systems.
• Leverage on the latest Adversary Tactics, Techniques, and Procedures (TTPs) to simulate real-world attacks, helping to identify blind spots in prevention, detection and response capabilities.
• Keeping a keen eye on the global threat landscape to identify emerging threats and evolving actor TTPs.
• Assess impact of current security posture and update testing standards accordingly.
• Owner of secure coding guidelines (based on OWASP, SANS) to ensure developers build security into the application layer from day one.
• Champion of the Static Application Security Testing (SAST) and Software Composition Analysis (SCA).
• Evaluate automation tools that detects vulnerabilities in source code and third-party libraries.
• Review, recommend, and provide guidance on integrating security tools into DevOps pipelines (DevSecOps).
• Evaluate and suggest systems that help to boost code quality, enforcing security to be treated as a core component of "clean code."
• On the forefront of technology changes (Cloud-native security, AI-driven development) and promote systems/technologies that enhance code quality and resilience.
• Advisor to CIOs, CISOs, and Project Owners to educate and inculcate a culture of secure-by-design.
• Promote a platform for knowledge sharing among security practitioners to harmonise security testing efforts.

Requirements

• Possess OSCP certification.
• 8 years of deep technical experience in Cybersecurity, with a strong focus on offensive security and application security.
• Experience in conducting penetration tests for Web Applications, IT Systems (on-premises and cloud environments), and complex Network architectures.
• Experience in performing manual and automated source code reviews to identify logic flaws, injection vulnerabilities, and cryptographic weaknesses.
• Experience in manual and automated testing tools
• Experience with Government Commercial Cloud (GCC) environments.
• In-depth understanding of secure software development lifecycles (SSDLC) and the ability to read/analyze common programming languages (Java, Python, .NET, JavaScript).
• Skilled with enterprise-grade SAST, DAST, SCA and VAPT tools (Checkmarx, Fortify, SonarQube, Snyk, Burp Suite).
• Sound understanding of the MITRE ATT&CK framework and common TTPs.
• Practical knowledge of Jenkins, GitLab CI, or GitHub Actions.
• Able to communicate complex technical risks to non-technical stakeholders
• Able to influence change without direct reporting lines.
• Able to identify patterns in "bad" testing jobs or recurring code vulnerabilities and provide constructive feedback to improve performance.
• Continuously learning and keeping pace with the rapidly evolving cyber threat landscape.

Ethos Search Associates Pte. Ltd.

EA License No: 13C6655

EA Reg No: R1988580 Jacky Chong

Jobs Responsibilities

• Process end-to-end securities transfer requests; ensure accuracy and adherence to client mandates and procedures
• Liaise with Front Office, internal teams, custodians and counterparties for timely execution and issue resolution
• Monitor and resolve failed or delayed transfers within agreed timelines
• Perform daily reconciliation of stock and cash breaks; investigate and resolve discrepancies
• Conduct end-of-day controls, RCSA checks, and ensure proper handling of exceptions
• Manage stakeholder queries and support process improvements, UAT and operational projects

Application Procedures

Interested candidates, please email your resume to:

Attention: Lynn Mak Ling Ling (CEI No. R1986990)

lynnmak@recruitexpress.com.sg

Recruit Express Pte Ltd (EA No. 99C4599)

We regret that only shortlisted candidates will be notified.

• Location: CDB
• Working hrs: Mon - Fri, 9am - 6pm (Hybrid Arrangement)

Job Description:

• Review, draft, negotiate, and issue sale and purchase agreements to support the company’s physical oil and products trading activities.

• Evaluate and negotiate counter-proposal terms to protect the company’s legal and commercial interests, minimize exposure, and support favourable trading outcomes.

• Manage contract administration and documentation processes, ensuring accuracy, completeness, and compliance with internal control standards.

• Coordinate the onboarding of new counterparties by supporting KYC, due diligence, and internal approval processes in liaison with relevant stakeholders.

• Support tender and bid submissions by reviewing tender documentation, identifying contractual risks, and providing comments and recommendations where required.

Job requirements:

• Minimum Diploma

• 2 to 3 years of related contract administration/ analysis working experience preferably in oil & gas industry
  

HOW TO APPLY

Interested applicants, kindly click on “APPLY NOW” or send your resume in MS WORD format to hestia.wong(at)trustrecruit.com.sg

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Wong Ying Huan (Hestia)

EA Personnel Reg No: R24122431

☑ Good Bonuses

☑ Near MRT

☑ Family Friendly Environment

Job Description:

• Manage user access lifecycle including provisioning, modification, and de-provisioning across systems.
• Handle IAM service requests and incidents, working with IT and business teams to resolve access issues.
• Support access reviews and certification campaigns to ensure compliance with security policies.
• Maintain IAM documentation and audit reports aligned with standards such as ISO/IEC 27001 and guidelines from the Monetary Authority of Singapore.

Requirements:

• Degree in IT, Computer Science, or related field with 3–5 years of IAM or IT operations experience.
• Experience with IAM technologies, such as Microsoft Active Directory and Microsoft Azure Active Directory.
• Knowledge of IAM lifecycle and access control principles.
• Familiarity with ITSM tools and scripting, such as ServiceNow, PowerShell, or Python.

To apply, please include the following details inside your CV for faster processing:

• Reasons for leaving each past & current employment
• Salary drawn for each past & current employment
• Expected Salary
• Earliest availability date

Loh Puay Hwee David

EA License | 24C2215

EA Registration Number | R1766892

Responsibilities

• Manage daily foreign exchange (FX) transactions and support the FX desk operations.
• Coordinate with banks to execute FX trades.
• Process daily trust account transfers accurately and in a timely manner.
• Perform inter-account fund transfers to support operational requirements.
• Prepare monthly bank reconciliations to ensure balances are accurate.
• Record cash book entries and maintain proper documentation of transactions.
• Work with internal teams to ensure smooth treasury and cash management processes.
• Assist with ad-hoc tasks or projects assigned by the team.

Requirements

• Possess a Diploma or Degree in Finance, Accounting, Banking, or related field.
• Strong attention to detail and accuracy when handling financial transactions.
• Good analytical and problem-solving skills, with the ability to work independently.
• Positive attitude with good communication and interpersonal skills to liaise with both internal and external stakeholders

Please submit your updated resume in Word format by using the Apply Now Button.
We regret that only shortlisted candidates will be notified.
Email resume to ken.ng@peopleprofilers.com
People Profilers Pte Ltd, 20 Cecil Street,#08-09, PLUS Building, Singapore 049705.
Tel: 6950 9724
http://www.peopleprofilers.com
EA License Number: 02C4944
Registration Number: R1872398
Posting Personnel: Ng Jwee Ken
Ref: W36Y747W

Position Overview

• We are seeking a highly motivated and skilled Research Analyst to join our team.

• The Research Analyst will play a crucial role in developing and publishing our Industry Models.

• You'll work directly with our Director of Research to develop and launch our latest industry model and continue to play a significant role in maintaining and sharing regular updates to our clients.

• In addition to your core work on Industry Models, you will represent SemiAnalysis at various industry conferences and events in both Singapore and broader APAC.

• You will also play a role in writing and preparing our newsletter articles for publishing, with the opportunity for direct authorship recognition.

• The role will be full-time, based in Singapore.

Responsibilities

• Conduct detailed financial analysis and modeling to support our various products, research reports and consulting projects.

• Perform in-depth research on the semiconductor and AI industries, including market trends, technological advancements, and competitive landscapes.

• Follow earnings, news releases, important product trends and technological developments related to coverage industries and companies.

• Assist in the preparation of research reports, presentations, and other deliverables for clients.

Requirements

• 1-5 years of prior work experience in equities research, investment banking or the buy-side.

• Undergraduate degree in Business, Finance, Engineering, Computer Science or other relevant technical field.

• Experience covering companies and technologies in the semiconductor supply chain.

• Demonstrated experience with financial modeling and analysis. Must be proficient in three-statement financial modeling.

• Strong research skills and the ability to synthesize information from various sources to draw insights.

• Proficiency with Excel and financial modeling is essential. Familiarity with Python or other relevant software is preferred. Experience with PowerPoint or other presentation software is highly preferred.

• Excellent written and verbal communication skills, with the ability to convey complex ideas effectively.

• Proactive, self-motivated, and capable of working independently in an international work environment.

• Demonstrates the highest degree of integrity and transparency.

• Proficiency in English is a must; additional languages are a plus.

Roles and Responsibilities:

• Monitor network traffic, system logs, and security alerts to identify potential security incidents and unauthorized activities in a timely manner.

• Design, deploy, and manage threat detection rules and preventive security controls to safeguard critical systems and data in response to the latest threat landscape.

• Perform in-depth analysis of security events to determine the nature and scope of potential security incidents and recommend risk mitigation strategies. When necessary, carry out digital forensic for reporting and auditing purposes.

• Contribute in threat hunting exercises or cyber projects to improve overall security posture.

Qualifications & Experience:

• Technical know-how and experience in solutions such as but not limited to:

• Network Security (F/W, IPS, VPN, NAC) - Fortigate, Palo Alto

• Web Security (WAF, Web isolation) - Cloudflare, Zscaler, Microsoft

• Endpoint Security (EDR, AV, DLP) - Crowdstrike, Microsoft

• Threat Monitoring - Qradar, GoogleSec Ops, Resilient, Claroty

• Vulnerability Management – Tenable, Ivanti, Microsoft

• Cloud Security – Microsoft, Palo Alto

• Identity Management - Microsoft, CyberArk

• Threat Hunting and Simulation – Cymulate, Crowdstrike

• 3 years of relevant experience in SOC environment

☑ Good Bonuses

☑ Near MRT

☑ Family Friendly Environment

Job Description:

• Investigate and analyse security alerts escalated from L1 using SIEM, EDR, and other security tools.
• Lead incident response activities including containment, eradication, and recovery.
• Perform threat hunting using IOC analysis and threat intelligence frameworks (e.g., MITRE ATT&CK).
• Improve SOC operations through automation, documentation, and guidance to L1 analysts.

Requirements:

• At least a Diploma in Computer Science or related field with 6+ years SOC/CERT/IR experience.
• Strong skills in incident investigation, log analysis, and event correlation.
• Hands-on experience with SIEM, EDR, SOAR, and Windows/Linux environments.
• Familiar with MITRE ATT&CK, Cyber Kill Chain, OWASP, with basic scripting (Python/Bash/PowerShell).

To apply, please include the following details inside your CV for faster processing:

• Reasons for leaving each past & current employment
• Salary drawn for each past & current employment
• Expected Salary
• Earliest availability date

Loh Puay Hwee David

EA License | 24C2215

EA Registration Number | R1766892

Senior SOC Analyst (L2/ Cyber Threat/ Perm Role/ Central)

• Location: Central Area

• Permanent Role

• Salary: up to $8,000 (commensurates with experience) + Attractive Bonus & Benefits

Responsibility:

• Investigate L1-escalated alerts; assess scope, impact, and severity.
• Lead incident response (containment, eradication, recovery) using playbooks.
• Correlate data from SIEM, EDR, network, and cloud tools to identify threats and root causes.
• Assess vulnerabilities and threats; recommend timely remediation.
• Use scripting/automation to improve investigation and reporting.
• Produce clear incident reports with timelines and evidence.
• Apply threat intelligence (e.g., MITRE ATT&CK) and perform IOC-based hunting.
• Collaborate with L1 and CSOC teams to resolve incidents and enhance SOC processes.

Requirement:

• Min 3 year of relevant working experience in SOC as Security Engineer, IT Security Operations and Security Operations Centre or Computer Emergency Response Team (CERT/CIRT).
• Diploma/ Degree in computer science/ Computer Engineering / Information Security or related certifications.
• Strong incident investigation, log analysis, and event correlation skills.
• Ability to evaluate impact and recommend mitigation actions.
• Experience with phishing, malware, credential compromise, misconfigurations, and network threats.
• Knowledge of network protocols, system logs, Windows/Linux, and attack techniques.
• Basic scripting (Python, Bash, PowerShell) preferred.
• Familiar with MITRE ATT&CK, Cyber Kill Chain, CVSS, OWASP Top 10.
• Experience with SIEM, EDR, SOAR; rule tuning/automation is a plus.
• Willing to work 12-hour rotating shifts.

How to apply

Interested candidates who wish to apply for the post, you may click the Apply Now Button or send in your updated resume (in MS Word format) to jackyooi@careerally.com.sg

We regret to inform that only shortlisted candidates will be notified.

Careerally Pte Ltd | EA Licence: 24C2215

Ooi Chuan Yi (Jacky)| EA Registration No: R24122948

The Job:

• Analysing new and existing customers’ profiles and transactions in the relevant sanctions, money laundering and terrorism financing
• Providing relevant risk assessments of customers’ profiles and transactions, highlighting any key risk area(s)
• Recommending effective risk mitigating strategies for senior management consideration
• Implementing approved risk mitigating strategies by ensuring thorough and consistent execution

The Requirements:

• Min Degree holder with min 3-5 years of relevant working experience
• Proficient in MS Office
• Good communication and interpersonal skills

Interested applicants can send their detailed resumes to janelui@recruitexpress.com.sg or call JANE @ 6735 1955.

JANE LUI JIE'EN

CEI: R1104482

Company Reg. No. 199601303W || EA Licence No. 99C4599

SAP Quality Management (QM)

1. Lead implementation and provide ongoing support for SAP QM in manufacturing environments.
2. Configure and maintain key QM components including Inspection Types, Master Inspection Characteristics (MIC), Sampling Procedures, Quality Info Records, and Certificate Processing.
3. Set up and manage end-to-end Quality Planning, Quality Inspection, Quality Control, and Quality Notification processes.
4. Ensure seamless integration of QM with SAP modules such as MM, PP, SD, and PM.
5. Manage defect processing and corrective/preventive action workflows.
6. Support and maintain QM-related master data including Inspection Plans, Task Lists, and other QM master records.
7. Coordinate and manage system testing activities (Unit Testing, Integration Testing, UAT).

Required Functional Expertise:

1. Quality Planning
2. In-Process and Goods Receipt Inspection
3. Usage Decision Processing
4. Quality Notifications Management
5. Batch Management integration with QM
6. Familiarity with SAP Fiori applications for QM

Total Experience Expected: 04-06 years

Job Description: Specialist – Supplier Bonus & Rebate Settlements

Role Purpose

This role focuses on managing and checking supplier bonuses and rebate agreements. You will make sure calculations are correct, suppliers follow agreed terms, and all settlements are done accurately. You will also provide data and insights that help improve profitability and support buying teams.

Key Responsibilities

1. Supplier Bonuses & Rebates

• Keep all supplier bonus and rebate agreements updated and correct (such as volume rebates, growth incentives, slabs, and trading terms).
• Ensure all bonus and rebate amounts are calculated accurately after transactions.
• Work with category managers to finalize bonus calculations.
• Prepare settlement statements and confirm them with suppliers.

2. Reconciliation

• Match supplier turnover figures with company turnover and fix any mismatches.
• Check if actual purchase volumes match agreed bonus slabs.
• Identify missed or unpaid rebates and suggest corrective actions.
• Manage recoveries through credit notes, debit notes, or supplier settlements.

3. Contracts & Agreements

• Maintain a central record of all supplier contracts, addendums, and yearly terms.
• Ensure all documents follow company compliance rules and procurement policies.
• Track contract expiry dates and support category teams with renewals.
• Escalate pending recoveries due to insolvency to the legal team.

4. Data Analysis & Insights

• Analyze trends in supplier income, rebates, and contract profitability.
• Provide required reports and insights to category teams.
• Identify opportunities to improve processes and reduce gaps.

5. Stakeholder & Supplier Coordination

• Work closely with Buying, Finance, Accounts Payable, and Supply Chain teams.
• Act as the main contact for suppliers regarding settlements, reconciliation, and turnover alignment.
• Support category teams during negotiations with accurate data.

6. Audit, Compliance & Controls

• Follow all business rules and financial control processes.
• Provide proper documents for audits.
• Strengthening controls to prevent errors, leakage, or missing income.

Required Skills

Technical Skills

• Strong understanding of trading terms and B2B discounts.
• Excellent Excel skills (formulas, pivot tables, etc.).
• Experience with SAP or other wholesale ERP systems.
• Understanding of wholesale pricing (WSP, margins, landed cost).
• Knowledge of accruals, reconciliation, settlements, write offs, and supplier ledger.
• Experience in supplier follow-ups (dunning process).
• Understanding of supplier open items management.

Behavioral Skills

• Strong attention to detail.
• Good analytical and problem-solving skills.
• Clear communication with suppliers and internal teams.
• Ability to work well in a fast-paced environment.