IT Security Manager  

Job Description

• Monitoring & closure of technology compliance matters
• Conduct gap analysis to ensure compliance with MAS and internal security group guidelines on various new technologies and latest updates issued by MAS and propose mitigating controls
• Perform technology risk & control assessments on internal processes and controls, e-banking controls, etc to ensure in compliance with the MAS guidelines and supervisory policies and internal group guidelines
• Engage with Information Security teams in Head Office for better and quick resolution of audit gaps or incidents
• Conduct risk assessment and due diligence in relation to new products/ services and outsourced activities
• Manage local IT BCP, application and infrastructure resilience and DR capabilities.
• Other responsibilities and activities as advised by the line manager

Requirements:

• With at least two years' relevant banking experience in technology risk management, information security, cyber security consultancy or IT Audit field
• Familiar with technology risk and cyber security regulatory requirements, including but not limited to those defined by MAS
• Cybersecurity certification such as CISSP, CRISC, CISA, CISM, etc. is prefered

Job Description:

• Incident Response, Manage Security & Safety Systems
• Prevent unauthorised entry into the premises
• Monitor CCTV
• Patrolling and clocking
• Access control duties

Requirements:

• Singaporeans / PR only
• Minimum Secondary 2 Education
• Able to commit 4 days work 1 day off, 3 days work 1 day off schedule.
• 12 hours permanent shift

Bonus:

• Bonus of $2,500 paid in tranches over 1 year (Untrained)
• Bonus of $4,500 paid in tranches over 2 years (Trained)

Interested candidates, please click Apply or send your detailed Resume to:

HR@ascendrecruitment.sg

Ascend Recruitment Pte Ltd (EA License No.: 24C2089)

April Lim (Reg. No.: R22110702)

We regret that only shortlisted candidates will be contacted.

Role Overview

We are seeking a Cyber Security Architect for cybersecurity solution projects.

The successful candidate will provide security architecture and assurance oversight throughout the project lifecycle, ensuring that security requirements are correctly interpreted, incorporated into system design, and validated through security testing and ongoing assessments.

This role will work closely with solution architects, engineering teams, project managers, and customers to ensure that solutions are secure by design and compliant with applicable security standards and regulatory requirements.

Key Responsibilities

Security Architecture & Design

• Interpret and translate security requirements from customers, regulatory authorities, and project specifications into actionable security architecture designs.
• Design and review solution security architectures covering infrastructure, network, application, and cloud environments.
• Ensure appropriate security controls are embedded into system design following secure-by-design principles.
• Provide technical guidance to project teams on security design considerations and best practices.

Security Governance & Risk Assessment

• Assess security risks arising from design decisions, technical limitations, or deviations from required security controls.
• Evaluate and document security deviations, non-compliances, and compensating controls where necessary.
• Conduct risk assessments and recommend mitigation measures to maintain an acceptable security posture.
• Support security governance activities throughout the project lifecycle.

Security Assurance & Testing

• Support security acceptance testing and security validation activities prior to system deployment.
• Work with internal or external teams performing Vulnerability Assessment and Penetration Testing (VAPT) to ensure proper coverage and remediation of identified vulnerabilities.
• Review security testing outcomes and advise on remediation and risk mitigation strategies.

Continuous Security Assessment

• Participate in periodic security reviews and assessments during the operational lifecycle of deployed solutions.
• Identify opportunities to improve the security posture of implemented systems.
• Provide recommendations for security hardening and control enhancements.

Stakeholder Engagement

• Act as the primary security subject matter expert (SME) for assigned projects.
• Liaise with customers, regulatory authorities, auditors, and internal stakeholders on security architecture and assurance matters.
• Support project teams during design reviews, security assessments, and acceptance processes.

Requirements

Experience

• Minimum 8–10 years of experience in cybersecurity, with significant experience in security architecture, security assurance, or enterprise security design.
• Proven experience designing and implementing security architectures for enterprise IT systems.
• Experience supporting projects in regulated environments, government sectors, or critical infrastructure is advantageous.
• Familiarity with security testing processes, risk assessments, and security governance frameworks.

Technical Skills

Strong understanding of:

• Security architecture principles and frameworks
• Network security architecture and segmentation
• Identity and access management (IAM)
• Encryption and key management
• Logging, monitoring, and security analytics architecture
• Secure system and application design
• Risk assessment and security compliance frameworks

Certifications

Candidates should possess recognized cybersecurity certifications, particularly insecurity architecture and enterprise security governance.

Highly Preferred

• CISSP-ISSAP – Information Systems Security Architecture Professional
• SABSA Security Architecture Certification

Key Attributes

• Strong analytical and problem-solving abilities.
• Ability to translate security requirements into practical architecture solutions.
• Strong communication skills to engage both technical and non-technical stakeholders.
• Ability to provide independent security judgement and risk-based recommendations

Work location: Jurong East

Company Overview

OSP connects jobseekers with reliable employers across various industries, focusing on security roles. We assist with interview arrangements and provide direct access to employers for efficient job matching.

Job Summary

We are seeking dedicated full-time Security Officers to join our team at NTU Singapore, working permanent night shifts to maintain safety and security through active patrolling and incident reporting.

Responsibilities

• Conduct routine patrols to monitor and secure assigned premises, ensuring safety and preventing unauthorized activities
• Perform security clocking to accurately record attendance and patrol checkpoints during shifts
• Report faults and incidents promptly and accurately to maintain operational awareness and support timely responses
• Maintain physical fitness to perform active patrolling duties effectively throughout night shifts

Required competencies and certifications

• Possess WSQ qualification in Crowd Control (CCTC).
• Maintain physical fitness to conduct active patrolling during shifts

Other Information

• Official Start Date: 1 May 2026
• On-the-Job Training (OJT) will commence earlier; dates to be confirmed
• Vacancies: 6 Security Officers (SO) and 2 Woman Security Officers (WSO)
• Shift: Permanent night shift, 19:30 PM – 08:00 AM
• Gross Salary: $3,090
• KPI Allowance: $130 (subject to terms and conditions)
• Authorized Employment Agency: One Stop Placement Pte Ltd (Lic: 14C7105)
• Contact Person: Wei Ming (R24125491)
• Phone / WhatsApp: 81260121

Job description

THE JOB

The physical security operations team is the primary interface with all stakeholders and ensures physical security requirements and expectations are met with high quality, industry standard programs and services. The organization is now looking for a physical security risk assessment professional to join our team. We utilize third‑party external data centers managed by co‑location service providers. This position will collaborate with stakeholder security teams to understand security risk requirements and deliver key insights. This role is responsible for supporting the products and services within the physical security operations line of business, with specialized functional expertise in the area of data center operational security and physical security risk assessments.

This position operates as an individual contributor and supports decision‑making by providing risk insights and analysis. The role includes collaboration under moderate supervision with opportunity to influence security operational priorities.

JOB RESPONSIBILITIES:

• Provide physical security risk analysis and assessments to ensure data center locations meet security standards, including vulnerability and gap analysis.

• Perform risk assessment activities to ensure physical security compliance with diverse regulatory and auditing requirements including, but not limited to, SSAE 18, ISO, and PCI.

• Deliver both written and oral briefings, tailored for key business stakeholders and senior leadership.

• Collaborate with stakeholders across the enterprise to ensure risk findings are aligned to prioritized company assets and threats.

• Support documentation, data, metrics, and KPI tracking to sustain and improve operational performance.

• Enhance operational strategy by participating in development of processes and services that advance risk visibility and stakeholder decision‑making.

• Regional and occasional global travel required up to 50%.
  

JOB REQUIREMENTS:

• Minimum 5–6 years of proven experience in conducting physical security risk assessments or directly related functional responsibilities is required.

• Experience in risk analysis, security operations, or facility auditing is preferred.

• Ability to communicate and articulate with a high level of proficiency in both the written and verbal format at all levels up to and including Corporate Executive leadership.

• Proficient in common business productivity tools, including Microsoft Excel, Word, Windows, and Outlook

• Has the ability to build partnerships with both internal & external strategic business partners and stakeholders.

• Must have the ability to work collaboratively with individuals from various backgrounds, cultures, and organizational levels.

• Willing to travel globally, minimally 50% of their time

• Strong interpersonal, verbal, presentation, and written communication skill

• Able to work in an ambiguous environment and operate independently.

• Develops and maintains professional relationships with external governmental, law enforcement, academic, and private sector professionals supporting the physical security mission.

• At least a bachelor's degree in relevant field. Master's degree is preferred.

Thank you for applying.

To learn more about us, please visit our website at www.securitas-singapore.com.

If you are keen to be part of our team and possess the above pre-requisites, kindly submit your detailed resume stating your current and expected salary via the APPLY NOW button below or to :

HR Department

Securitas Guarding Services (Singapore) Pte Ltd

**Note: We regret that only shortlisted candidates will be notified.

Reachfield Security (Grade “A” agency) specializes in supplyingsecurity manpower to Schools, Factories, Shopping Centres, Museums, libraries,etc

Security Officer

Salary : up to $3130 gross a month (5666days work arrangement)

////////////////////////////////////

1. Works in Commercial (Factory / Warehouse / Condo / Mall /Polytechnic) environment.

2. Good customer service skills; able to communicate with peopleof all levels

3. 12hrs-shift (Fixed shift)

4. PC literate

5. Job duties include issue visitors/ contractor passes, clocking,patrolling, protecting clients’ premise and access control, etc.

6. Possess valid security license, completed 4 mandatory WSQmodule for PWM-SO

Reachfield Security & Safety Management Pte Ltd

10 Anson Road #26-09

International Plaza, Singapore 079903

(Tanjong Pagar MRT)

For more information, please call office at 6324 2925 (Andrew)

Reachfield Security (Grade “A” agency) specialises in supplying security manpower to Schools, Factories, Shopping Centres, Museums, libraries, etc.

[OFFICE BUILDING]

Permanent Day Security Officer

Salary: up to $3130 gross a month

Location: Buona Vista

Working hours: 7AM - 7PM

✅ Must have at least 1 year of experience in an office building assignment.

////////////////////////////////////////////////////////////////////////

1. Works in an office building environment.

2. Good customer service skills; able to communicate with people of all levels.

3. 12hrs-shift (Fixed shift, no need to rotate)

4. PC knowledge required.

5. Job duties include traffic control, issue visitors/ contractor passes, patrolling, protecting clients’ premises and access control, etc.

6. Possess valid security license, completed WSQ RTT.

Walk-in for interviews - (Mon to Fri, 9am to 5pm) 

10 Anson Road #26-09

International Plaza, Singapore 079903

(Tanjong Pagar MRT)

For more information, please call the office at 6324 0648 / 9137 4851 (Janet) 

You may fill in the application form online thru below link.

https://rss.armfort.com/direct... 

Do let us know once you submit the application online

Reachfield Security (Grade “A” agency) specialises in supplying security manpower to Schools, Factories, Shopping Centres, Museums, libraries, etc.

[OFFICE BUILDING]

Permanent Day Security Officer

Salary: up to $3130 gross a month

Location: Buona Vista

Working hours: 7AM - 7PM

✅ Must have at least 1 year of experience in an office building assignment.

////////////////////////////////////////////////////////////////////////

1. Works in an office building environment.

2. Good customer service skills; able to communicate with people of all levels.

3. 12hrs-shift (Fixed shift, no need to rotate)

4. PC knowledge required.

5. Job duties include traffic control, issue visitors/ contractor passes, patrolling, protecting clients’ premises and access control, etc.

6. Possess valid security license, completed WSQ RTT.

Walk-in for interviews - (Mon to Fri, 9am to 5pm) 

10 Anson Road #26-09

International Plaza, Singapore 079903

(Tanjong Pagar MRT)

For more information, please call the office at 6324 0648 / 9137 4851 (Janet) 

You may fill in the application form online thru below link.

https://rss.armfort.com/direct... 

Do let us know once you submit the application online

We are seeking a highly driven and self-motivated Cyber Security Consultant specialising in Vulnerability Assessment and Penetration Testing (VAPT) to join our team. In this role, you will conduct security assessments across applications, networks infrastructure, Mobile apps working on diverse client engagements while developing your technical and consulting expertise.

Job Summary:

• Conduct comprehensive Vulnerability Assessment and Penetration Testing (VAPT) across systems, network infrastructure, mobile and web applications.
• Conduct source code reviews and host configuration assessments to evaluate customer systems against industry best practices and recognised security standards.
• Produce detailed technical reports outlining identified vulnerabilities, including impact assessments, risk severity ratings, and clear, actionable remediation guidance.

Requirements

To succeed in this role, you will ideally have:

• Fresh graduates are welcome to apply; Candidates with up to 1 year of experience with a focus on VAPT are preferred.
• Hybrid working arrangement with the option to work from home.
• Hands-on experience with industry-standard VAPT tools and OWASP methodologies.
• Relevant certifications such as OSCP, GPEN, OSWE, OSEP, or equivalent are highly desirable.

The remuneration package will commensurate with your qualifications and experience. Interested applicants, please click "Apply Now".

We thank you for your interest and please note that only shortlisted candidates will be notified.

Job Responsibilities:

• Attend to security enquiries in the premises.
• Conduct armed security patrol in the premises
• Consolidate incident reports.
• Perform armed access control and security screenings.
• Perform armed security surveillance at the command Centre.
• Perform crowd control in public areas and manage traffic on the roads.
• Perform law enforcement duties.
• Provide armed guarding and escorting services.
• Provide quick responses to incidents and emergencies.

Benefits:

• Attractive salary package – Basic Salary From SGD2,920
• Gross Salary up to SGD5,800*
• Bonus – Up to SGD35,000*
• Fully sponsored WSQ certified security training
• Annual leave
• Hospitalisation leave
• Comprehensive medical and dental benefits
• Group insurance coverage
• Work injury compensation
• Marriage and childcare leave
• CPF contribution
  *Terms and conditions apply.

Requirement:

• At least 3 GCE ‘N’ / ‘O’ Levels / NITEC or WPLN SOA 5 and above for all 5 modules (Writing, Speaking, Reading, Listening and Numeracy)
• Able to work shift duties (Including extended shift, weekends & public holidays)
• Class 2A license (For Outrider)

Company overview:

"Our competitive edge in providing security solutions stems from investment in our greatest asset – Our People. An elite team of highly skilled officers and professionals in their respective fields, they fulfil a diverse array of roles across our core businesses and work together to create a better and safer future.

Step out of your comfort zone and embark on a journey of personal growth with us. Carve out your career in an environment where you are empowered to make a difference; be it in ensuring the safety and security of the nation, or the lives of the people around you."

Reachfield Security (Grade “A” agency) specialises in supplying security manpower to Schools, Factories, Shopping Centres, Museums, libraries, etc.

[OFFICE BUILDING]

Permanent Day Security Officer

Salary: up to $3130 gross a month

Location: Buona Vista

Working hours: 7AM - 7PM

✅ Must have at least 1 year of experience in an office building assignment.

////////////////////////////////////////////////////////////////////////

1. Works in an office building environment.

2. Good customer service skills; able to communicate with people of all levels.

3. 12hrs-shift (Fixed shift, no need to rotate)

4. PC knowledge required.

5. Job duties include traffic control, issue visitors/ contractor passes, patrolling, protecting clients’ premises and access control, etc.

6. Possess valid security license, completed WSQ RTT.

Walk-in for interviews - (Mon to Fri, 9am to 5pm) 

10 Anson Road #26-09

International Plaza, Singapore 079903

(Tanjong Pagar MRT)

For more information, please call the office at 6324 0648 / 9137 4851 (Janet) 

You may fill in the application form online thru below link.

https://rss.armfort.com/direct... 

Do let us know once you submit the application online

Reachfield Security (Grade “A” agency) specializes in supplyingsecurity manpower to Schools, Factories, Shopping Centres, Museums, libraries,etc

Security Officer

Salary : up to $3130 gross a month (5666days work arrangement)

////////////////////////////////////

1. Works in Commercial (Factory / Warehouse / Condo / Mall /Polytechnic) environment.

2. Good customer service skills; able to communicate with peopleof all levels

3. 12hrs-shift (Fixed shift)

4. PC literate

5. Job duties include issue visitors/ contractor passes, clocking,patrolling, protecting clients’ premise and access control, etc.

6. Possess valid security license, completed 4 mandatory WSQmodule for PWM-SO

Reachfield Security & Safety Management Pte Ltd

10 Anson Road #26-09

International Plaza, Singapore 079903

(Tanjong Pagar MRT)

For more information, please call office at 6324 2925 (Andrew)

About audax 

audax means courage. To have the courage to change the banking scene, eliminating constraints caused by existing legacy infrastructure. Our mission is to empower banks and financial institutions to scale and modernise at speed, reaching new customers without breaking the bank. 

We began our journey supplying services to and powering Standard Chartered’s white-label plug and play Banking-as-a-Service (BaaS) solution, Standard Chartered nexus, through our technology capabilities. At audax, we seek go-getters who are hungry for growth and can bring fresh perspectives. 

Website - https://www.audax.io  

What You’ll Do:

1.     Firewall, Network Proxy, and EDR Management: 

• Firewall Management: Oversee the configuration, maintenance, and monitoring of firewall systems to enforce security policies and control network traffic effectively. 

• Network Proxy Management: Manage proxy servers to secure internet traffic, optimize performance, and troubleshoot issues as needed. 

• Endpoint Detection and Response (EDR) Management: Manage EDR tools across endpoints, configure policies for threat detection and response, and analyze endpoint data for security anomalies. 

2.     Threat Detection and Content Creation: 

• Write and refine rules, signatures, and queries to detect security threats effectively. 

• Develop and update security detection content for SIEM (Security Information and Event Management) systems. 

3.     Vulnerability and Threat Management: 

• Manage vulnerability assessment and remediation programs, prioritizing and mitigating security vulnerabilities. 

• Coordinate with technology operations teams to apply patches and updates to systems and applications. 

• Monitor and respond to emerging threats, implementing proactive measures to protect systems and data. 

4.     Incident Response: 

• Perform security monitoring and triaging for potential threats and SIEM alerts. 
• Develop and maintain incident response plans and procedures, coordinating responses during security incidents or breaches. 
• Lead incident response teams, ensuring timely resolution and post-incident analysis to prevent future occurrences. 

5.     Access Review and Security Exceptions: 

• Establish and maintain access review processes to ensure appropriate access rights and permissions. 
• Manage and review user requests for security exceptions, balancing business needs with security requirements. 
• Implement controls and monitor activities to detect unauthorized access attempts and policy violations. 

6.     Collaboration with Engineering Teams: 

• Work closely with engineering teams to integrate security best practices into the development lifecycle. 
• Conduct security reviews of infrastructure, applications, and new technologies, providing recommendations for security enhancements. 
• Collaborate on the design and implementation of secure architecture and solutions. 

7.     Service Management: 

• Provide oversight of security service delivery, ensuring SLAs (Service Level Agreements) are met. 
• Manage relationships with security service providers and vendors, evaluating services and negotiating contracts. 

8.     Compliance and Reporting: 

• Ensure compliance with relevant security standards, regulations, and best practices. 
• Generate regular reports on security metrics, incidents, vulnerabilities, and operational status. 
• Participate in audits and assessments related to security operations. 

9.     Audit Management: 

• Manage and coordinate security audits conducted internally or by external auditors. 
• Prepare audit responses and action plans, implementing corrective measures and tracking progress. 

Who You Are:

• Bachelor’s degree in Computer Science, Information Technology, or related field; advanced degree or certifications (e.g., CISSP, CISM) preferred. 
• Proven experience in a security operations role with hands-on experience in firewall management, network proxy, EDR, incident response, and threat detection. 
• Strong understanding of security principles, protocols, and technologies. 
• Experience with access control, vulnerability management, audit management, and compliance frameworks (e.g., PCI-DSS, GDPR). 
• Excellent communication skills and ability to collaborate effectively across teams and stakeholders. 
• Fresh graduates with the right skillet and aptitude may also be considered. 

Why Join Us? 

• Be Part of a Bold Vision – At audax, we’re not just building software – we’re transforming how financial institutions and businesses manage risk, compliance, and growth. Join a team that’s fearless in challenging the status quo.
• Flexible, People-First Workplace – We value the importance of Family, Team, Self. In that order.
• Competitive Rewards and Startup Perks – We offer competitive salaries and meaningful benefits that look after your well-being. 

Privacy Notice:
Please note: by submitting your application, you acknowledge that you have read and understood audax’s Privacy Policy for Employees, Freelancers, Contractors and Job Applicants (the “Policy”), and consent to the collection, use and disclosure of your personal data by audax for the purposes set out in the Policy. You may withdraw consent for such collection, use and disclosure, and make an access or correction request in respect of your personal data, in accordance with the Policy by emailing dpo@audax.io.

Note: This role is not open to recruitment agencies. Thank you.

Position Overview

We are seeking a talented and motivatedSecurity Platform Engineer with expertise in Fortinet SIEM onboarding,patching, use case creation, and SentinelOne operations—including agentpatching. The ideal candidate will also demonstrate proficiency with FortiSOAR,Orca Security platforms, and Palo Alto platform management. This role iscritical for maintaining the integrity and effectiveness of our securityinfrastructure, supporting both proactive and reactive cybersecurityinitiatives.

Key Responsibilities

·      Lead the onboarding andintegration of Fortinet SIEM solutions, ensuring seamless data ingestion,correlation, and alerting.

·      Manage and execute patchingprocesses for Fortinet SIEM platforms and related infrastructure to maintaincompliance and optimal performance.

·      Develop, test, and implementuse cases within Fortinet SIEM to enhance detection capabilities and addressemerging threats.

·      Oversee SentinelOne operations,including the deployment, configuration, and patching of endpoint agents acrossthe organization.

·      Utilize FortiSOAR toorchestrate, automate, and respond to security incidents, improving incidentresponse efficiency.

·      Employ Orca Security for cloudsecurity posture management, vulnerability assessment, and compliancemonitoring.

·      Own Palo Alto Networks platformengineering for Cortex XSIAM/XDR (and related security services), includingtenant administration, upgrades/patching, health monitoring, troubleshooting,and lifecycle management.

·      Engineer data onboarding intoXSIAM: integrate log sources and telemetry (endpoint, network, cloud,identity), validate parsing/normalization, manage data models/mappings, andensure high-fidelity ingestion for analytics.

·      Develop and tune XSIAMdetection content (correlation rules, analytics, and alert logic): reduce falsepositives, build threat-focused use cases, and maintain content throughtesting, release, and continuous improvement.

·      Build and maintain XSIAMautomations and integrations (playbooks, case management workflows, enrichment,ticketing/ITSM hooks), and establish operational runbooks, KPIs, and on-callprocedures for reliable platform operations.

·      Collaborate withcross-functional teams to support security monitoring, incident response, andcontinuous improvement initiatives.

·      Document processes, procedures,and configurations for knowledge sharing and compliance purposes.

Required Qualifications

·      Proven experience with FortinetSIEM solutions, including onboarding, patching, and use case development.

·      Hands-on expertise inSentinelOne endpoint protection, with a focus on agent management and patching.

·      Familiarity with FortiSOAR forsecurity orchestration, automation, and response.

·      Experience working with OrcaSecurity or similar cloud security posture management tools.

·      Demonstrated experienceengineering Palo Alto Networks platforms—especially Cortex XSIAM/XDR (andideally XSOAR)—including integrations, data onboarding, content/detectiontuning, upgrades/patching, and troubleshooting.

·      Strong understanding ofcybersecurity principles, threat detection, and incident response processes.

·      Ability to troubleshoot complexsecurity platform issues and propose effective solutions.

·      Excellent documentation,communication, and collaboration skills.

Preferred Qualifications

·      Industry certifications such asFortinet NSE, SentinelOne Certified, Palo Alto Networks certifications, orother relevant security certifications.

·      Experience with scripting orautomation tools to streamline security operations.

·      Familiarity with regulatorycompliance frameworks and audit requirements.

·      Bachelor’s degree in ComputerScience, Information Security, or a related field.

Job Purpose
This role leads the Governance, Risk, and Compliance functions. The role ensures that security controls are well‑designed, risks are understood and managed, and the company maintains compliance with industry, customer, and regulatory requirements. This leader partners closely with IT, operations, legal, procurement, and third‑party partners to embed security into daily business processes.

Roles and Responsibilities
IT Security Governance and Policy Management

• Develop, maintain, and enforce security policies, standards,and procedures aligned with business needs and regulatory requirements.
• Establish a governance framework that integrates security intologistics operations, including forwarding systems, warehouse systems, transportation management systems, fleet technologies, IoT devices, and corporate applications.
• Lead security awareness programs tailored to both office and field personnel.

Risk Management

• Own the enterprise security risk management program, including risk identification, assessment, scoring, treatment planning, and reporting.
• Conduct regular risk assessments and maintain the risk register.
• Plan, manage and report mitigation actions.
• Define risk responses (Mitigate/Transfer/Accept) and manage treatment plans.
• Monitor Key Risk Indicators (KRIs) and analyze risk trends.
• Prepare risk heatmaps and executive risk reports.
• Support customer/regulatory assessments with risk documentation.
• Monitor emerging threats and regulatory changes affecting supply chain and logistics operations.

Compliance and Audit

• Manage compliance with frameworks such as ISO 27001, SOC 2,NIST CSF, GDPR, PDPA, CTPAT, PCI DSS (if applicable), and customer‑mandated security requirements.
• Manage internal and external audits, ensuring evidencereadiness and timely remediation of findings.
• Maintain compliance documentation repositories, controllibraries, and audit trails to ensure regulatory adherence.
• Evaluate regulatory changes and update internal policies.
• Support incident response ensuring compliance obligations.
• Coordinate evidence collection for customer/governmentassessments.

Third Party and Vendor Security

• Lead the third‑party risk management program, including duediligence, contract reviews, and ongoing monitoring.
• Evaluate security posture of logistics partners, carriers, technology vendors, and SaaS providers.
• Work with procurement and legal to embed security requirements into vendor agreements.
• Conduct third‑party security risk assessments.

Incident Preparedness and Response Governance

• Develop and maintain incident response plans, playbooks, andcommunication protocols and ensure compliance.
• Coordinate tabletop exercises with IT, operations, and executive leadership.
• Ensure post‑incident reviews translate into updated controls and governance improvements.

Control Design and Assurance

• Oversee the design, implementation, and testing of security controls across IT and operational technology environments.
• Partner with infrastructure, application, and operations teams to ensure controls are practical and effective in high availability logistics environments.
• Track control performance metrics and drive continuous improvement.

Reporting and Stakeholder Engagement

• Deliver regular reports to executive leadership on risk posture, compliance status, and key initiatives.
• Serve as the primary point of contact for customer security questionnaires and supply chain security assessments.
• Communicate complex security topics in clear, business aligned language.

Requirements

• Bachelor’s degree in information security, Computer Science or related discipline.
• Certifications preferred: CISSP, CISM, CRISC, CISA.
• 7+ years in IT Security, GRC or related roles.
• Strong understanding of security frameworks (ISO 27001, NIST CSF, SOC2).
• Knowledge of data privacy regulations (GDPR, PDPA) and cross-border logistics considerations.
• Experience managing audits, compliance programs, and risk assessments.
• Familiarity with logistics & supply chain environments.
• Ability to collaborate with cross‑functional teams and influence without authority.
• Excellent communication, documentation, and stakeholder‑management skills.