Total 3,886 Full-time security analyst job vacancies in Hong Kong

JJ Consulting Services is a recruitment firm and preferred partner for multinational companies expanding in Asia. Our consultants bring deep industry and functional expertise, delivering top professional and staffing solutions to clients and candidates. Our Client is an established company in Singapore, who is seeking to recruit a Chief Information Security Officer.

Job Summary

The Chief Information Security Officer (CISO) leads the development and implementation of comprehensive information security strategies and policies, ensuring compliance with regulatory requirements and aligning cybersecurity initiatives with organizational goals.

Responsibilities

• Lead the development and execution of cybersecurity strategies and action plans to secure executive support and drive organizational security posture
• Establish and enforce information security goals, policies, standards, and procedures aligned with whole-of-government cybersecurity directives
• Cultivate a culture of cybersecurity risk assessment and risk acceptance among stakeholders, end users, and ICT professionals
• Ensure organizational compliance with whole-of-government cybersecurity policies and standards through continuous monitoring and enforcement
• Review and endorse information security initiatives, developing risk management and mitigation plans to address emerging threats
• Advise management on selecting and deploying appropriate cybersecurity solutions and technologies to protect organizational assets
• Align IT operations and needs with strategic cybersecurity directions mandated by whole-of-government frameworks
• Implement change management processes to adapt cybersecurity measures in response to evolving threat landscapes

Required competencies and certifications

• Degree in Computer Science, Information Systems, Engineering, or equivalent
• Minimum 10 years of management experience in information security, with working knowledge of ICT operations, security policies, and procedures
• Strong interpersonal and stakeholder management skills to collaborate with cross-functional teams in formulating and monitoring security policies
• Ability to work effectively with multidisciplinary teams to institute and oversee security policies and procedures

Preferred competencies and qualifications

• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)

Other Information

• EA Licence No.: 12C6207
• JJ Consulting Services

Applicants are invited to send a MS Word resume to jobs@jjconsulting.com.sg stating position applied for, present/expected salaries, and earliest available date. We thank all applicants in advance and regret that only shortlisted candidates will be notified.

---

Role Overview 

This role supports Security Operations Centre (SOC) activities, including monitoring, investigation, threat hunting, and incident response. The resource operates as a second line of defence, translating alerts into actionable findings and improving detection capability. 

Core Responsibilities 

• Perform L2 triage and investigation of security alerts across SIEM, EDR/XDR, email, identity, network, and cloud platforms 
• Correlate events to identify root cause, scope, and impact of security incidents 
• Investigate phishing, malware, account compromise, and unauthorised access cases 
• Conduct proactive threat hunting using threat intelligence and MITRE ATT&CK 
• Support containment, remediation, and recovery activities 
• Contribute to SOC improvements (playbooks, detection tuning, onboarding of new tools) 

Core Requirements 

• Degree or Diploma in Cybersecurity, IT, or related field 
• At least 3 years of experience in SOC operations or incident response (L2 preferred) 
• Experience with SIEM, EDR/XDR, and cloud or identity security tools 
• Strong understanding of attack chains, MITRE ATT&CK, and threat analysis 
• Demonstrated hands-on experience in incident investigation or threat hunting 
• Ability to operate independently in a SOC environment 

Key Roles and Responsibilities

• To troubleshoot and maintain/service security systems at clients’ premises
  
• Attend to fault calls during/after office hours
  
• Support Maintenance Lead to upkeep Clients’ security system inventory list and maintenance spares
  
• Support Maintenance Lead to liaise with clients, integrated facility management representatives and trade contractors to facilitate work at clients’ premises
  
• Liaise closely with clients, integrated facility management representatives on all service/maintenance related issues to achieve optimal results
  
• Ensure that works carried out are in compliance with the Workplace Safety and Health Act
  
• Perform any other technical tasks as required including new installations, A&A, HOTO, T&C and equipment replacement etc
  

Requirements

• Diploma/Higher Nitec/Nitec in Engineering/IT or relevant working experience in the related field
  
• Hands on experience in security systems such as Integrated Security Management Systems, Card Access Control Systems, Intrusion Detection Systems, CCTV systems and Electronic Key Management System
  
• Additional knowledge in hardware configuration, System Networking and integration with third-party systems will be an advantage
  
• Must be a team player, independent and willing to take ownership and pro-active in problem solving
  
• Driving License (Car or Motorbike) – Preferably if candidate possesses its own vehicle
  
• Singapore Citizens are preferred
  
• Work Location is at 3 Shan Road/Clients’ premises
  
• 5 days work week
  
• Require to perform rotational standby duties
  
• Experienced candidates will be considered for Maintenance Engineer
  
• Fresh Graduates keen to seek a career path in security system are welcome to apply as a Maintenance Technician

Job Summary

The basic role of a Security & Safety Officer is to perform general safety duties to protect lives and properties, including preventing and deterring crimes within the premises. This includes creating security and fire awareness among employees and guests.

Job Responsibilities

• Ensure that all security and fire safety duties are performed and maintained following standard regulations.
• Ensure the safety and security of all assets, including its people, guests, employees, and others and their properties.
• Conduct a preliminary investigation and write a report regarding the incident occurring during duty.
• Respond promptly to guests' needs and requests from department or employees for security and fire safety assistance.
• Monitor the CCTV at FCC.
• Be familiar with all the Security and fire life safety emergency procedures for the building.
• Responsible for the FCC and ensuring that no irregularities take place, including CCTV, car park computers, time attendance procedures, fire alarm monitoring panel, lifts supervisory panel, emergency intercom, PA paging system, etc.
• Be vigilant and pay particular attention to suspicious characters loitering, rooms left open when guests are out, and other potential security concerns.
• Ensure that no mischief/vandalism, or disturbances occur on company properties.
• Monitor contractors within the building. Examine their credentials and ensure they have been issued a visitor pass before entering the premises.
• And such other tasks and responsibilities as may reasonably be required for the needs of the business and to fulfil your role.

We are seeking a committed and service-oriented Guest Experience Executive to join our hospitality team. This role has been thoughtfully redesigned to integrate security operations with selected concierge and call centre responsibilities, play a pivotal role in ensuring the safety, comfort, and satisfaction of hotel guests through proactive engagement, vigilant security monitoring, and professional call handling. This is a multi-functional role best suited for individuals with strong situational awareness, service excellence, and the ability to respond effectively to both guest needs and security-related matters.

Responsibilities:

1. Guest Experience & Concierge Services

• Deliver warm, professional, and personalized service throughout the guest journey—from arrival to departure.
• Handle VIP guest arrangements and ensure special requests are fulfilled accurately.
• Provide recommendations for local attractions, dining, transportation, and guest services.
• Oversee hotel driveway and lobby area to ensure a clean, welcoming, and organized environment.
• Coordinate logistics such as airport transfers, limousine bookings, and car park assistance.
• Work closely with third-party service providers (e.g. restaurants, transport operators) to enhance guest satisfaction.
• Supervise and support the Concierge/Bell team in their daily tasks and guest interactions.
• Plan duty rosters based on operational needs and manage leave scheduling effectively.

2. Security & Safety

• Conduct routine patrols of hotel premises and report any suspicious activity or safety hazards.
• Enforce safety protocols, conduct bag checks, and assist in managing access control points (e.g. staff entrances, contractor access).
• Respond to emergencies, support the Emergency Response Team (ERT), and provide first aid when needed.
• Assist in managing lift and traffic control during peak hours and special events.
• Support People & Culture team with locker inspections and incident reporting procedures.

3. Call Centre & Guest Communication

• Handle inbound calls, internal communication, and guest requests using hotel systems (e.g., Avaya One-X, DuVoice).
• Manage wake-up calls, do-not-disturb requests, and general phone services professionally.
• Use hotel software platforms (e.g., Infrasys, TableCheck, Bartech) to manage room service orders, minibar status, and restaurant reservations.
• Maintain accurate e-logs of guest communications, complaints, and follow-ups.
• Escalate and resolve guest issues or service recovery cases in a tactful and timely manner.
• Monitor call quality standards (e.g. response time, call abandonment rate) and provide feedback to improve service delivery.

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage.
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines.

Reachfield Security (Grade “A” agency) specialises in supplying security manpower to Schools, Factories, Shopping Centres, Museums, libraries, etc.

Security Officer

Location: Braddell

Timing: 630-630

////////////////////////////////////////////////////////////////////////

1. Works in a school/ office building environment.

2. Good customer service skills; able to communicate with people of all levels.

3. 12hrs-shift (Fixed shift, no need to rotate)

4. PC knowledge required.

5. Job duties include traffic control, issue visitors/ contractor passes, patrolling, protecting clients’ premises and access control, etc.

6. Possess valid security license, completed WSQ RTT.

Office:10 Anson Road, #26-09 International Plaza

(Near Tanjong Pagar MRT Exit C)

Contact Us

Mobile: 8805 2291 Office: 6324 0648

You may fill in the application form online thru below link.

https://rss.armfort.com/direct... 

Do let us know once you submit the application online

If you are a cheerful, initiative and strong integrity person who likes to meet new people and are able to contribute by fulfilling clients’ needs, join us.

Job Description:

· To manage and ensure that the systems, servers and infrastructure is installed in accordance to the prescribed design document and/or requirements

. Understanding the scope of works and the needs of the clients and implement the appropriate output to the best of your ability or to the requirements

. To design the network architecture and configure in accordance to the requirements

· Configure, Test and Hand over the required systems and provide Training to client

· Ensure the highest standard of system and infrastructure availability

· To liaise with various parties such as system manufacturers or cybersecurity vendors to resolve issues and problems

· Attend new product trainings

Requirements:

. Applicants need to be able to work overtime/Night Shift.

· Required Skill(s): Communication skills, Analytical skills, Decision making, Organizational skills, Attention to details, Patience and Knowledge of Systems engineering software tools

.Min 3 years of relevant hands-on experiences

. Familiar with Security Systems such as ISMS, CCTV, ACS and VA systems will be advantageous

. Familiar with Networking systems (eg. Routing, VLAN, VPN, Wireless AP) will be advantageous

. Familiar with IT Security (eg. firewall, IPSEC, SSL, hardening) will be advantageous

. Able to work independently with minimum guidance, monitoring and a good team player

. Valid Class 3 driving license has an added advantage

Other Information:

· Location: Kaki Bukit or as needed

· Working hours: 44 hours per week (Follow Company’s Arrangement)

· Salary (commensurate with experience): Basic salary + OT allowances + Variable Bonus

Resumes please INCLUDE:

· Personal particulars

· Education background

· Work experiences in point forms

· All reasons for leaving

· Current and expected salary

· Date of availability / Notice Period

Interested applicants are invited to send your updated resume in MS Word format via Apply Now.

We regret that only shortlisted applicants will be notified.

If you are a cheerful, self-initiated, holds strong integrity values and who likes to meet new people and are able to contribute by fulfilling clients’ needs, join us!

Job Description:

• To manage and ensure that the systems, servers and infrastructure is installed in accordance to the prescribed design document and/or requirements
• Understanding the scope of works and the needs of the clients and implement the appropriate output to the best of your ability or to the requirements
• To design the network architecture and configure in accordance to the requirements
• Configure, Test and Hand over the required systems and provide Training to client
• Ensure the highest standard of system and infrastructure availability
• To liaise with various parties such as system manufacturers or cybersecurity vendors to resolve issues and problems
• Attend new product trainings

Requirements:

• Applicants need to be able to work overtime/Night Shift.
• Required Skill(s): Communication skills, Analytical skills, Decision making, Organizational skills, Attention to details, Patience and Knowledge of Systems engineering software tools
• Min 3 years of relevant hands-on experiences
• Familiar with Security Systems such as ISMS, CCTV, ACS and VA systems will be advantageous
• Familiar with Networking systems (eg. Routing, VLAN, VPN, Wireless AP) will be advantageous
• Familiar with IT Security (eg. firewall, IPSEC, SSL, hardening) will be advantageous
• Able to work independently with minimum guidance, monitoring and a good team player
• Valid Class 3 driving license has an added advantage

Other Information:

• Location: Kaki Bukit or as needed
• Working hours: 9am to 6pm
• Salary (commensurate with experience): Basic Salary + Variable Bonus

Resumes please INCLUDE:

• Personal particulars
• Education background
• Work experiences in point forms
• All reasons for leaving
• Current and expected salary
• Date of availability / Notice Period

Interested applicants are invited to send your updated resume in MS Word format via Apply Now. We regret that only shortlisted applicants will be notified.

Responsibilities:

1.      To protect the properties of the Club.

2.      To patrol designated locations within the Club compound at regular intervals.

3.      To conduct investigations if breach of security is suspected.

4.      All incidences to be updated in the incident report form for further actions or for record purpose.

5.      Issuing of the keys when requested by staff and maintaining proper records when issuing and returning of keys.

6.      Monitoring of the club premises via CCTV and to conduct simple investigations when necessary.

7.      Conduct random checks on vehicles parked at the club to make sure non-members park at the designated lots.

8.       To perform wheel clamp on unauthorized parking within the club.

9.      To issue warning notices to drivers when they do not follow parking guidelines at the club.

10.  To exchange visitor, pass for part timer to access with-in club premises.

11.   To check proper recording of working hours is maintained by part-timers when they commence and finish work at the club.

12.  To maintain records of lost & found items and to make sure those items are kept safely under key and lock.

13.  Covering duties with extended hours when other security officer is away on leave/medical leave. (Perm Night 2200H to 0700H / Supporting from 1900h to 0700H)

14.  Cordoning of carpark lots for events or management meetings.

15.  To assist maintenance team when there is a fire alarm activation.

16.  To participate and assist during the annual fire alarm drill involving all club staff.

17.  Notwithstanding the above, you are expected to undertake any other duties that are assigned to you by the Management.

Requirements:

·        WSQ Recognize Terrorist Threats

·        WSQ Manage Disorderly Conduct and Threatening

·        WSQ Operate Basic Security Equipment

·        WSQ Perform Remote Surveillance Function (PRSF)

·        WSQ Crowd and Traffic Control Management

·        PWM Rank SSO

·        Basic Computer Knowledge

Staff transport available at Khatib and Seng Kang.

Employment Type: Contract (1 year renewable, with potential for conversion)

Working Hours: Monday toThursday (8.30am – 6.00pm), Friday (8.30am – 5.30pm) (Hybrid WorkingArrangement)

Location: One North

Salary: Up to SGD 5,300

We are looking for an experienced IT Systems Governance & Project Management professional who can oversee enterprise systems from both an operational and governance perspective. The ideal candidate should have strong experience in IT governance, risk management, audit compliance, and system lifecycle management, while also being capable of coordinating system enhancements, security assessments, and change initiatives across multiple stakeholders.

Responsibilities:

• Conduct system criticality and risk assessments for enterprise systems.
• Manage system governance, compliance, and audit readiness activities.
• Coordinate system changes, enhancements, and remediation efforts.
• Track and manage security risks, vulnerabilities, and remediation actions.
• Support disaster recovery and cyber incident recovery planning.
• Perform access reviews and ensure timely user deprovisioning.
• Manage certificates, API keys, and system integration credentials.
• Maintain accurate system documentation and governance records.
• Collaborate with system owners, vendors, and internal stakeholders to drive system improvements.
• Provide regular reporting on system risks, issues, changes, and compliance status.

Requirements:

• Degree/Diploma in IT, Computer Science, Information Systems, or related field.
• At least 5 years of experience in IT governance, systems support, project management, or security-related roles.
• Strong understanding of IT governance, risk management, compliance, and audit processes.
• Experience managing system changes, vendors, and stakeholder engagements.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781

Endpoint Security Engineer – Singapore (SingaporeansOnly)

We are hiring an experienced and hands-on Endpoint SecurityEngineer to manage, operate, and enhance enterprise endpoint protectioncapabilities across our organization. The ideal candidate will have strongexperience in endpoint security operations, incident management, and enterprisesecurity tools such as Symantec Endpoint Protection Manager (SEPM) and/orMicrosoft Defender.

This role requires close collaboration with IToperations, security teams, and end users to ensure enterprise endpoints remainsecure against evolving cyber threats.

Key Responsibilities

Endpoint Protection & Security Operations

• Administer, maintain, and support Symantec Endpoint Protection Manager (SEPM), Microsoft Defender, or equivalent endpoint security platforms
• Deploy, configure, and manage endpoint protection policies including:
• Anti-malware
• Intrusion Prevention Systems (IPS)
• Firewall policies
• Device control
• Monitor endpoint security alerts and investigate incidents
• Perform root cause analysis and remediation activities
• Generate regular security posture and compliance reports
• Manage the complete lifecycle of endpoint security agents
• Execute upgrades, patching, and rollout activities during maintenance windows

User Support & Incident Management

• Provide Level 2 / Level 3 support for endpoint security-related incidents and requests
• Troubleshoot endpoint protection issues across Windows and/or Linux environments
• Work closely with internal IT and security teams to resolve operational issues efficiently

IT Service Management

• Follow ITIL processes for Incident, Problem, and Change Management
• Maintain accurate ticket documentation and resolution records
• Ensure SLA compliance and timely issue resolution

Required Skills & Qualifications

• Singaporeans only
• Degree in Computer Science, Information Technology, Cyber Security, or related discipline
• 4–6 years of relevant experience in endpoint security operations
• Minimum 1 year of hands-on experience with SEPM and/or Microsoft Defender
• Experience with HIPS/HIDS technologies
• Strong knowledge of Windows and/or Linux (RedHat) administration
• Ability to manage multiple priorities in a fast-paced environment
• Strong communication and interpersonal skills

Preferred Skills

• Knowledge of Microsoft Defender ecosystem
• Experience with scripting and automation using:
• Powershell
• Python

Job Summary

The IT Security Lead manages end-to-end security governance, compliance, and operations for mission-critical systems, collaborating with cross-functional teams and external auditors to ensure adherence to government security policies.

Responsibilities

Day 1 – Project / Implementation Security

• Define and implement system security architecture aligned with Singapore Government policies
• Review application, middleware, infrastructure, and platform designs for security compliance
• Conduct threat modeling and risk assessments, mapping risks to mitigating controls
• Translate policy requirements into actionable technical controls across technology stacks
• Ensure compliance with IM8, Whole-of-Government security requirements, and PDPA where applicable
• Establish and oversee cybersecurity governance across infrastructure, application, and project teams
• Prepare and maintain documentation including Security Risk Assessments, Vulnerability Assessments, Penetration Testing reports, and security hardening baselines
• Partner with software teams to enforce secure coding standards and DevSecOps practices
• Integrate and govern SAST/DAST, dependency/SCA scanning, and container image scanning within CI/CD pipelines
• Review and triage security tool findings, driving remediation and risk acceptance decisions
• Provide guidance on API security, token/secret management, and secure service-to-service communication
• Plan, coordinate, and manage vulnerability and penetration testing engagements and vendors
• Track remediation progress to closure and document residual risks and risk acceptance
• Support security clearances and go-live certifications
• Review and approve OS, middleware, database, Kubernetes/container security, API gateway, WAF, rate-limiting, and authentication configurations

Day 2 – Operations / Production Security

• Lead security incident investigations, containment, and recovery efforts
• Perform root cause analysis and define corrective and preventive actions
• Coordinate with Government SOC and stakeholders; contribute to and refine incident response playbooks
• Communicate security incidents clearly to technical and non-technical audiences
• Oversee continuous vulnerability monitoring and posture management
• Track patch and configuration compliance across infrastructure, middleware, applications, and containers
• Provide risk assessments and compensating controls for deferred patches
• Review and tune alerts, detections, and dashboards in SIEM and related tools
• Ensure monitoring coverage for critical systems and high-value assets
• Support internal and external audits, evidence collection, and closure of audit findings
• Prepare and present security posture, metrics, and trend reports to management
• Maintain risk registers and mitigation plans with up-to-date security documentation
• Communicate security assessments and findings effectively to varied stakeholders
• Oversee and periodically review RBAC, MFA, Privileged Access Management, and joiner/mover/leaver processes
• Ensure least privilege access, segregation of duties, and periodic access recertifications
• Support incident response handling, log analysis, and activity reviews
• Drive continuous improvement across identify, protect, detect, respond, and recover functions

Required competencies and certifications

• Degree in Computer Science, Cybersecurity, Information Security, or equivalent
• 8–12 years of IT experience including at least 5 years as a Security Lead or Security Architect
• Proven experience in Singapore Government IT projects and IM8/government security compliance
• Hands-on experience with Kubernetes/Docker security, API security, Identity & Access Management (IAM), and security tools (SAST/DAST/SIEM) integrated with CI/CD

Preferred competencies and qualifications

• Certifications such as CISSP, CISM, CISA, CEH, GIAC (e.g., GSEC, GCIA, GCIH, GCSA)
• AWS or Azure Security certifications

5 day week @ AMK area

Maestro HR
damien lee tian hong
R1106726
16C8462

Airbus is looking for a Corporate Security Manager Asia Pacific (APAC) for the Airbus Corporate Security department in Asia.

We are a multifunctional team with a comprehensive security portfolio. We protect our employees, our property, and our products through the application of technical, personnel, and organizational security measures. Furthermore, we act as the interface to various external government and government-related organizations for Airbus.

We are organizationally linked to Corporate Security and report into both, the regional Airbus HQ in Singapore and into Corporate Security, headquartered in Toulouse, France.

Corporate Security APAC is responsible for the entire Asia Pacific region which covers 11 countries in which Airbus and its affiliates are represented.

Your Role

• Our mission - Guide, Protect and Strengthen Airbus

• This is our core mission. It requires us to focus inward to protect all Airbus assets using a risk-based approach, but also to guide, together with Divisions and Airbus’ functions, when it comes to Security compliance, business opportunities or in times of crisis. We must always focus first on protecting Airbus’ employees, workplaces, information systems, data, industrial assets, supply chain, and of course our products and services, especially where Security impacts people's safety. To do so, our federated model needs to be strengthened and priorities need to be adapted to the capabilities of federated functions.

• We are looking for a strategic and proactive Corporate Security Manager to oversee our regional security posture. This isn't just about "locks and badges"—we need a leader who can weave security into the very fabric of our corporate culture. You will be responsible for defining the long-term security strategy, governing risk, and leading high-impact projects that protect our people, assets, and reputation.

• The ideal candidate balances a "big picture" mindset with the tactical ability to execute complex projects and influence behaviour at every level of the organization.

• As a Corporate Security Manager you will be responsible and accountable for the following:

Primary Responsibilities
 

1. Strategic Governance & Regulatory Compliance

• Ensure the organization meets or exceeds standards set by national authorities (e.g., Part IS (Information Security), NIS2 Directive (Directive (EU) 2022/2555), General Data Protection Regulation (GDPR), etc.) and ensure that Airbus internal requirements and baselines are implemented and rolled out. Furthermore to evaluate local regulations to ensure continued compliance.

• Represent the company in security forums and maintain active liaisons with an external security network and (where possible) intelligence agencies.

• Govern the Airbus International Security Operating Model (ISOM), ensuring that security is treated with the same rigor as safety.

• Develop and execute a multi-year APAC Corporate Security Strategy aligned with business objectives.

• Identify emerging threats and trends to ensure the organization remains resilient in a shifting global landscape.

• Advise senior leadership on security risks, providing data-driven insights to support executive decision-making.

• Establish and maintain a robust Security Governance Framework, ensuring compliance with local and international regulations.

• Lead comprehensive risk assessments and business impact analyses to prioritize resource allocation.

2. Security Projects & Innovation

• Lead the implementation of advanced screening technologies related to the Airbus Trusted Workforce Project, identify use cases for new technology in the security perimeter to increase efficiency and establish a strong network with Airbus cross divisional corporate stakeholders.

• In relation to the Airbus BPRO (Business Project Registration Office) culture ensure security by design for any new corporate application

• Oversee the end-to-end lifecycle of Airbus security infrastructure projects (e.g., crisis management software, travel security applications etc).

• Manage project budgets, vendor relationships, and cross-functional teams to deliver solutions on time and within scope.

• Evaluate and integrate emerging security technologies (AI-driven monitoring, biometrics, etc.) to modernize the physical and procedural security stack.

3. Security Awareness & "Informed Culture"

• Based on the Airbus Corporate Security global Security Awareness Program that moves beyond "check-the-box" training to drive genuine behavioral change, customize a APAC related awareness strategy and host, conduct and conclude associated campaigns.

• Act as the primary ambassador for security, conducting workshops, simulations, and internal communications.

• Build a network of "Security Champions" across different departments to decentralize vigilance.

• Based on the Airbus Corporate Security global Security Awareness Program that moves beyond "check-the-box" training to drive genuine behavioral change, customize a APAC related awareness strategy and host, conduct and conclude associated campaigns.

4. Crisis Management & Response
4.1. Crisis Framework & Readiness

• Business Continuity Planning (BCP): Develop and maintain the security components of the corporate BCP, ensuring the Airbus Security Teams are enabled to maintain "minimum viable operations" during a security-related disruption.

• Crisis Management Organization: Serve as a primary coordinator within the regional and local Singapore Crisis Management Team (CMT), coordinating all the Airbus CMT response between HQ stakeholder, regional management team and Airbus CMT functions, and external authorities.

4.2. Tactical Incident Response

• Threat Assessment: Lead the immediate evaluation of natural disasters, insider threats, terror / amok escalations, or "Cyber-Physical" attacks on Airbus systems.

• In case of major events / disaster, lead the emergency and contingency first response operations.

• Outstation Evacuations: Design and execute emergency extraction and evacuation plans for staff and assets in high-risk regions during sudden geopolitical shifts or civil unrest.

4.3. Simulation & Training

• Tabletop Exercises

• After-Action Reviews

Other Duties

• You are very familiar with the assets, industrial processes, Airbus business models, logistics and supply chain of Airbus and develop a strong relationship with the country management teams, country & site security teams, procurement, HR, Legal and Compliance and many other functions.

• You work closely with third party suppliers and other users of Airbus sites to ensure they act in accordance with the Airbus security policies and practices

• Threat Management, establish and maintain an intense network with all related Corporate Security Functions, national and international security bodies (NGO & GO)

• Investigation, loss prevention and anti fraud management. Establish and maintain a network and processes to protect, detect and react.

• Promote a security culture throughout all Airbus APAC based organizations and shape a business oriented operational model for all security teams.

• You promote, operate, and continue to improve the Performance Culture within Airbus APAC Security based on Airbus Operating System (AOS)

• Strong stakeholder management among all Airbus Affiliates in the Asia Pacific Region

Personal & Interpersonal Skills

• Availability: Must be able to participate in a 24/7 on-call rotation for global emergency response.

• Good understanding of needs and requirements of an industrial production, maintenance, training, sales and customer service organization.

• Crisis management experience

• Excellent communication and organisational skills with an ability to analyse and assess complex issues.

• Complementary skills in risk management and emergency planning is essential.

• Language: Fluent in English

Qualification & Professional skills

• Master or Bachelor Degree in a security relevant sector (i.e. degree in Information security or related field)

• Experience: 3+ years in security, with at least 2 years specifically within Aviation or Aerospace.

• Experience: Proven experience in Incident Command Systems (ICS) or similar emergency management frameworks.

• Deep familiarity with the National Aviation Security Program (NASP) and international civil aviation conventions.

• Expertise in Security Governance Programs, Risk Management / Risk Mitigation, Crisis and Emergency Response Management, Project Management.

• High emotional intelligence and the ability to maintain "calm under pressure" while making split-second, high-stakes decisions.

• A strong background in Security Management with experience in Corporate Security of the commercial or industrial sector is essential.