Total 110 it manager job vacancies in Legal / Public / Security category

Requirements:

• Bachelor’s degree in computer science/information security or equivalent
• Professional certifications, such as GWEB, OSCP, CRISC, CISA or other relevant certifications will be preferred
• Preferably 4 years of experience in a relevant cybersecurity function, such as vulnerability management, attack surface management, security operations, or IT risk
• Strong understanding of cybersecurity concepts, particularly around vulnerability management, patch management, common vulnerability scoring frameworks (e.g. CVSS), and external-facing attack surface risks
• Familiarity with ASM or vulnerability management tools (such as Tenable, Qualys, Censys, or similar)
• Proficiency in programming languages such as Python will be advantageous

Job Summary:

The Application Security Consultants is responsible for auditing and validating the security posture of applications and their supporting infrastructure. This role focuses on reviewing security activities performed by development teams, including static and dynamic code analysis, infrastructure scans, and hardening practices. The analyst ensures that applications meet internal security standards and comply with regulatory requirements.

Key Responsibilities:

·      Review and validate results from SAST (Static Application Security Testing) and DAST( Dynamic Application Security Testing) tools.

·      Audit OS, container, and database scans for vulnerabilities and misconfigurations looking at reports a

·      Assess the effectiveness of hardening measures across application components (e.g., webservers, APIs, containers, databases).

·      Collaborate with application development and DevSecOps teams to ensure remediation of identified issues.

·      Maintain audit documentation, including findings, remediation tracking, and compliance status.

·      Evaluate adherence to secure coding practices and application security policies.

·      Support internal security audits related to application & underlying infrastructure security.

·      Stay updated on emerging threats, vulnerabilities, and secure development trends.

Required Qualifications:

·      Bachelor’s degree in computer science, Cybersecurity, or related field.

·      4+ years of experience in application security, security auditing, or secure software development.

·      Hands-on experience on one or more tools like SonarQube, Fortify SAST/DAST, Burp Suite,OWASP ZAP etc.

·      Strong understanding of OWASP Top 10, secure coding principles, and CI/CD pipelines.

·      Familiarity with container technologies (e.g., Docker, Kubernetes) and cloud platforms (e.g., AWS, Azure, GCP).

Certifications:

·      CRESTCertified Pen Tester

·      CISSP or CCSP 

·      Preferred Certified AWS DevSecOps Professional or equivalent

Key Competencies:

·      Analytical mindset with attention to detail

·      Ability to interpret scan results and prioritize remediation

·      Strong communication and collaboration skills

·      Knowledge of regulatory frameworks (e.g., ISO 27001, PCI-DSS, GDPR)

·      Experience working in Agile and DevOps environments'

Interested applicants please send your resume in MS Wordsformat to pooja.yadav@ambition.com.sg andattention to Pooja (R1551322)

Short listed candidates will be notified

www.ambition.com.sg

EA Registration Number: R1551322

Data provided is for recruitment purposes only

Business Registration Number: 200611680D.

License Number: 10C5117

Job Summary

The IT Security Lead manages end-to-end security governance, compliance, and operations for mission-critical systems, collaborating with cross-functional teams and external auditors to ensure adherence to government security policies.

Responsibilities

Day 1 – Project / Implementation Security

• Define and implement system security architecture aligned with Singapore Government policies
• Review application, middleware, infrastructure, and platform designs for security compliance
• Conduct threat modeling and risk assessments, mapping risks to mitigating controls
• Translate policy requirements into actionable technical controls across technology stacks
• Ensure compliance with IM8, Whole-of-Government security requirements, and PDPA where applicable
• Establish and oversee cybersecurity governance across infrastructure, application, and project teams
• Prepare and maintain documentation including Security Risk Assessments, Vulnerability Assessments, Penetration Testing reports, and security hardening baselines
• Partner with software teams to enforce secure coding standards and DevSecOps practices
• Integrate and govern SAST/DAST, dependency/SCA scanning, and container image scanning within CI/CD pipelines
• Review and triage security tool findings, driving remediation and risk acceptance decisions
• Provide guidance on API security, token/secret management, and secure service-to-service communication
• Plan, coordinate, and manage vulnerability and penetration testing engagements and vendors
• Track remediation progress to closure and document residual risks and risk acceptance
• Support security clearances and go-live certifications
• Review and approve OS, middleware, database, Kubernetes/container security, API gateway, WAF, rate-limiting, and authentication configurations

Day 2 – Operations / Production Security

• Lead security incident investigations, containment, and recovery efforts
• Perform root cause analysis and define corrective and preventive actions
• Coordinate with Government SOC and stakeholders; contribute to and refine incident response playbooks
• Communicate security incidents clearly to technical and non-technical audiences
• Oversee continuous vulnerability monitoring and posture management
• Track patch and configuration compliance across infrastructure, middleware, applications, and containers
• Provide risk assessments and compensating controls for deferred patches
• Review and tune alerts, detections, and dashboards in SIEM and related tools
• Ensure monitoring coverage for critical systems and high-value assets
• Support internal and external audits, evidence collection, and closure of audit findings
• Prepare and present security posture, metrics, and trend reports to management
• Maintain risk registers and mitigation plans with up-to-date security documentation
• Communicate security assessments and findings effectively to varied stakeholders
• Oversee and periodically review RBAC, MFA, Privileged Access Management, and joiner/mover/leaver processes
• Ensure least privilege access, segregation of duties, and periodic access recertifications
• Support incident response handling, log analysis, and activity reviews
• Drive continuous improvement across identify, protect, detect, respond, and recover functions

Required competencies and certifications

• Degree in Computer Science, Cybersecurity, Information Security, or equivalent
• 8–12 years of IT experience including at least 5 years as a Security Lead or Security Architect
• Proven experience in Singapore Government IT projects and IM8/government security compliance
• Hands-on experience with Kubernetes/Docker security, API security, Identity & Access Management (IAM), and security tools (SAST/DAST/SIEM) integrated with CI/CD

Preferred competencies and qualifications

• Certifications such as CISSP, CISM, CISA, CEH, GIAC (e.g., GSEC, GCIA, GCIH, GCSA)
• AWS or Azure Security certifications

5 day week @ AMK area

Maestro HR
damien lee tian hong
R1106726
16C8462

Employment Type: Contract (1 year renewable, with potential for conversion)

Working Hours: Monday toThursday (8.30am – 6.00pm), Friday (8.30am – 5.30pm) (Hybrid WorkingArrangement)

Location: One North

Salary: Up to SGD 5,300

We are looking for an experienced IT Systems Governance & Project Management professional who can oversee enterprise systems from both an operational and governance perspective. The ideal candidate should have strong experience in IT governance, risk management, audit compliance, and system lifecycle management, while also being capable of coordinating system enhancements, security assessments, and change initiatives across multiple stakeholders.

Responsibilities:

• Conduct system criticality and risk assessments for enterprise systems.
• Manage system governance, compliance, and audit readiness activities.
• Coordinate system changes, enhancements, and remediation efforts.
• Track and manage security risks, vulnerabilities, and remediation actions.
• Support disaster recovery and cyber incident recovery planning.
• Perform access reviews and ensure timely user deprovisioning.
• Manage certificates, API keys, and system integration credentials.
• Maintain accurate system documentation and governance records.
• Collaborate with system owners, vendors, and internal stakeholders to drive system improvements.
• Provide regular reporting on system risks, issues, changes, and compliance status.

Requirements:

• Degree/Diploma in IT, Computer Science, Information Systems, or related field.
• At least 5 years of experience in IT governance, systems support, project management, or security-related roles.
• Strong understanding of IT governance, risk management, compliance, and audit processes.
• Experience managing system changes, vendors, and stakeholder engagements.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781

*Seeking for a talent who has minimum 6 years of experience handling Banking/Financial services’ IT Risk/Cyber security/Information security/Governance risk including 3 years of hands-on IT technical security/security operations*

THE COMPANY
With their reputable brand and commitment to their clients, this company is increasing their operations in the region. They seek an IT Risk/Cyber Security/Information Security Manager to be part of their team.

JOB RESPONSIBILITIES

• Perform Level 2 IT risk/Cyber security/Information Security or governance risk
• Handle IT regulatory compliance (MAS TRM and information security)/security risk framework
• Handle Incident Oversight and root cause analysis & Control Validation
• Prepare Risk Register, Reporting & Adversarial Attack Simulation Exercises to assess the effectiveness of security controls and detection capabilities
• Provide IT security advisory
• Work closely with other business stakeholders etc.
• Any other adhoc duties

JOB REQUIREMENTS

• Degree in IT/Information Technology/Information Security/Computer Science or any other relevant IT education
• Has a recognised information security certification such as CRISC, CISSP, or equivalent
• Minimum 6 years of experience handling Banking/Financial services’ IT Risk/Cyber security/Information security/governance risk including 3 years of hands-on IT technical security/security operations
• Solutions-oriented, friendly, helpful, resourceful and able to multi-task

If you would like to explore this opportunity, please email your resume in Microsoft Word format to marie@resolutehunter.com

We thank you for your interest and will contact shortlisted candidates for more detailed discussion.

For more job opportunities, please visit our website https://resolutehunter.com

EA Licence 18C9105 
EA Reg R1105305

Our client is global organisation operating in the travel and services industry, with a strong presence in Singapore. In line with business expansion, they are looking for a Senior IT Executive (IT Security / Infrastructure) to join their team, in hopes of developing the current high performing team. They are located in the East area.

Job Responsibilities:

• Develop, implement, and enforce IT security policies, standards, and procedures in line with regulatory and industry best practices.
• Monitor and manage IT security systems to detect, investigate, and respond to cyber threats, suspicious activities, and security incidents.
• Analyze network traffic, system logs, and security alerts to identify vulnerabilities and potential risks.
• Maintain and optimize security monitoring tools, detection rules, and automated workflows to strengthen threat detection and response capabilities.
• Conduct security reviews, risk assessments, compliance checks, and system hardening activities for IT infrastructure and applications.
• Support incident response, disaster recovery, and business continuity planning, including participation in recovery exercises and simulations.
• Participate in security architecture reviews, vulnerability assessments, and continuous improvement initiatives to enhance overall cybersecurity posture.
• Collaborate with internal stakeholders, project teams, and developers to ensure secure system implementation and compliance requirements are met.
• Support IT security audits, maintain security documentation and risk registers, and prepare periodic security reports for management review.
• Conduct user awareness initiatives and liaise with external auditors, vendors, and relevant parties on cybersecurity and compliance matters.
• Perform ad-hoc coordination tasks as required.

Requirements:

• Min Diploma/Degree in Information Technology, Information Security, Computer Science, or related discipline
• Min 4 years of relevant experience in IT security, cybersecurity, or infrastructure environments
• Good understanding of cybersecurity concepts, network security, system hardening, and security best practices
• Familiarity with security frameworks such as CIS Benchmarks, PCI DSS, NIST, or similar standards
• Hands-on experience with firewalls, IDS/IPS, endpoint security, or security monitoring tools is advantageous
• Strong analytical, troubleshooting, and stakeholder management skills

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.
We regret that only shortlisted candidate will be notified.

Email: job•@recruitpedia.sg

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Our client is global organisation operating in the travel and services industry, with a strong presence in Singapore. In line with business expansion, they are looking for a Senior IT Executive (IT Security / Infrastructure) to join their team, in hopes of developing the current high performing team. They are located in the East area.

Job Responsibilities:

• Develop, implement, and enforce IT security policies, standards, and procedures in line with regulatory and industry best practices.
• Monitor and manage IT security systems to detect, investigate, and respond to cyber threats, suspicious activities, and security incidents.
• Analyze network traffic, system logs, and security alerts to identify vulnerabilities and potential risks.
• Maintain and optimize security monitoring tools, detection rules, and automated workflows to strengthen threat detection and response capabilities.
• Conduct security reviews, risk assessments, compliance checks, and system hardening activities for IT infrastructure and applications.
• Support incident response, disaster recovery, and business continuity planning, including participation in recovery exercises and simulations.
• Participate in security architecture reviews, vulnerability assessments, and continuous improvement initiatives to enhance overall cybersecurity posture.
• Collaborate with internal stakeholders, project teams, and developers to ensure secure system implementation and compliance requirements are met.
• Support IT security audits, maintain security documentation and risk registers, and prepare periodic security reports for management review.
• Conduct user awareness initiatives and liaise with external auditors, vendors, and relevant parties on cybersecurity and compliance matters.
• Perform ad-hoc coordination tasks as required.

Requirements:

• Min Diploma/Degree in Information Technology, Information Security, Computer Science, or related discipline
• Min 4 years of relevant experience in IT security, cybersecurity, or infrastructure environments
• Good understanding of cybersecurity concepts, network security, system hardening, and security best practices
• Familiarity with security frameworks such as CIS Benchmarks, PCI DSS, NIST, or similar standards
• Hands-on experience with firewalls, IDS/IPS, endpoint security, or security monitoring tools is advantageous
• Strong analytical, troubleshooting, and stakeholder management skills

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.
We regret that only shortlisted candidate will be notified.

Email: job•@recruitpedia.sg

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Our client is global organisation operating in the travel and services industry, with a strong presence in Singapore. In line with business expansion, they are looking for a Senior IT Executive (IT Security / Infrastructure) to join their team, in hopes of developing the current high performing team. They are located in the East area.

Job Responsibilities:

• Develop, implement, and enforce IT security policies, standards, and procedures in line with regulatory and industry best practices.
• Monitor and manage IT security systems to detect, investigate, and respond to cyber threats, suspicious activities, and security incidents.
• Analyze network traffic, system logs, and security alerts to identify vulnerabilities and potential risks.
• Maintain and optimize security monitoring tools, detection rules, and automated workflows to strengthen threat detection and response capabilities.
• Conduct security reviews, risk assessments, compliance checks, and system hardening activities for IT infrastructure and applications.
• Support incident response, disaster recovery, and business continuity planning, including participation in recovery exercises and simulations.
• Participate in security architecture reviews, vulnerability assessments, and continuous improvement initiatives to enhance overall cybersecurity posture.
• Collaborate with internal stakeholders, project teams, and developers to ensure secure system implementation and compliance requirements are met.
• Support IT security audits, maintain security documentation and risk registers, and prepare periodic security reports for management review.
• Conduct user awareness initiatives and liaise with external auditors, vendors, and relevant parties on cybersecurity and compliance matters.
• Perform ad-hoc coordination tasks as required.

Requirements:

• Min Diploma/Degree in Information Technology, Information Security, Computer Science, or related discipline
• Min 4 years of relevant experience in IT security, cybersecurity, or infrastructure environments
• Good understanding of cybersecurity concepts, network security, system hardening, and security best practices
• Familiarity with security frameworks such as CIS Benchmarks, PCI DSS, NIST, or similar standards
• Hands-on experience with firewalls, IDS/IPS, endpoint security, or security monitoring tools is advantageous
• Strong analytical, troubleshooting, and stakeholder management skills

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.
We regret that only shortlisted candidate will be notified.

Email: job•@recruitpedia.sg

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Manager, Corporate Secretarial Services

This position is an urgent hire to manage our Corporate Secretarial team and is a replacement for an employee who recently left the company. The primary responsibility of this role is to act as Company Secretary for Singapore entities and as the Qualified Individual for ACRA purposes. This is a mandatory requirement for the position.

Reports To: Client Services Director, Singapore Office

Minimum Experience

• Minimum 5 years of experience in a Corporate Secretarial Services position.
• Professional qualifications such as ICSA are preferred.
• Must be capable of acting as the Qualified Individual for ACRA purposes.

Job Description

Responsible for providing a full scope of corporate administration services for a portfolio of Singapore companies, including:

• Acting as the primary point of contact for international clients to assist in the establishment of new trust and corporate structures and their ongoing administration.
• Managing new client company business acceptance and due diligence procedures for Singapore companies.
• Handling new corporate bank account applications.
• Overseeing ongoing administration and ensuring compliance with statutory requirements.
• Managing terminations, liquidations, and striking-off of corporate structures.
• Issuing timely invoices to clients and ensuring prompt collection of outstanding debts.
• Liaising with the Accounting Department to ensure financial statements are completed on a timely basis for companies under administration.
• Maintaining corporate records and internal files.
• Processing Employment Pass and Dependant's Pass applications for client corporate structures.
• Supervising and providing on-the-job training and development for a Junior Trust and Corporate Officer.
• Maintaining the Client Management Information System (IBIS) database.
• Liaising with the Compliance Officer for annual client reviews, addressing any deficiencies identified during the review process, and handling other ad hoc administrative requirements as needed.
• Acting as Resident Director for selected Singapore client entities.
• Acting as the Qualified Individual for ACRA purposes.

Personal Attributes

• Minimum 5 years of relevant professional experience.
• Strong knowledge of Singapore corporate law and best practices.
• Excellent organizational skills with the ability to manage multiple tasks efficiently and effectively.
• Strong attention to detail.
• High level of professionalism and appreciation for client confidentiality and sensitivity.

YOUR NEW JOB

As a Security Implementation Engineer, you will work alongside senior consultants and project teams to deliver successful implementations of Google SecOps and/or SentinelOne platforms, ensuring customers are onboarded effectively and solutions are configured according to project requirements.
You will support the deployment, configuration, and implementation of modern cybersecurity solutions across enterprise customer environments.
This is a 12-month renewable contract role based with one of the region's leading technology & systems integrators.

WHAT YOU’LL BE DOING

• Support the implementation and deployment of Google SecOps and/or SentinelOne solutions for enterprise customers
• Assist with solution configuration, onboarding, and integration activities
• Participate in customer workshops, requirement gathering, and technical discussions
• Perform testing, validation, and troubleshooting during implementation projects
• Document implementation procedures, technical configurations, and deployment activities
• Work closely with project managers, senior engineers, and customer stakeholders to ensure successful project delivery
• Provide post-implementation support and issue resolution where required
• Stay updated on product features, cybersecurity trends, and vendor best practices

WHAT IS NEEDED FROM YOU

• At least 1 year of hands-on experience with Google SecOps and/or SentinelOne solutions
• 1–3 years of IT infrastructure, cybersecurity, or systems implementation experience
• Basic understanding of SIEM, endpoint security, threat detection, and security operations concepts
• Experience supporting technical deployments, implementations, or system integrations
• Familiarity with Windows, Linux, networking, and cloud environments
• Strong troubleshooting and problem-solving skills
• Diploma or degree in Information Technology, Computer Science, Cybersecurity, or related field
• Good communication skills and ability to work directly with customers and internal teams

WHAT WILL MAKE YOU STAND OUT

• Relevant certifications from Google, SentinelOne, Microsoft, or other cybersecurity vendors
• Exposure to cybersecurity projects within enterprise environments
• Experience working for a systems integrator, managed services provider, or IT services organisation
• Familiarity with scripting or automation tools such as Python, PowerShell, or APIs
• Experience supporting SOC, SIEM, EDR, or threat monitoring environments

Job Summary:

This position is responsible for handling daily legal and compliance activities, including document review, legal research, and corporate governance. It plays a crucial role in supporting the Legal & Compliance department in managing the company’s legal and regulatory obligations globally.

Responsibilities and Duties:

• Assist in reviewing and drafting contracts, NDAs and other legal documents.
• Ensure contracts comply with company policies and requirements, legal compliance, and international standards.
• Assist in matters related to the establishment of cross-border subsidiaries, including the preparation of incorporation documents and liaison with external company formation agencies.
• Assist in handling other matters assigned by the Legal Manager.

Requirements / Professional Skills:

• Minimum Diploma or bachelor’s degree in law, Legal Studies, or a related field is preferred.
• At least 1-2 years of relevant experience in corporate commercial law acquired in-house or in a law firm
• Able to work independently and be a team player
• Good written and spoken English to effectively communicate with international affiliates and business partners
• Able to maintain confidentiality on all legal and corporate secretarial matters

Duties & Responsibilities

• Draft, review, and negotiate contracts, agreements, and other legal documents for local and regional operations.
• Provide legal advice on corporate, commercial, and regulatory matters.
• Support compliance initiatives, including antitrust, anti-corruption, and data protection.
• Assist in managing litigation, arbitration, and dispute resolution processes.
• Collaborate with internal teams and external counsel to mitigate legal risks.
• Stay updated on regulatory changes and advise on implications for business operations.
• Ad-hoc duties as per required.

Requirements

• Bachelor’s Degree in Law
• Admission to the Singapore Bar is mandatory
• Min 3-5 years in law firm/ as a legal counsel, preferably in an international business environment.
• Strong knowledge of contract law and regulatory compliance.
• Knowledge of maritime law, trade compliance (including economic sanctions), M&A or industry-specific regulations.

HOW TO APPLY:

Interested applicants, please click on “Apply Now” or submit your resume to ref71@trustrecruit.com.sg

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Lee Jia Xiang

EA Personnel Reg No: R25158171

Are you ready to lead security strategy and operational excellence across SingHub and the APAC region while helping protect people, assets, and business continuity?

Bring your security leadership expertise to the LEGO Group and drive strategy, resilience, and operational excellence across SingHub and APAC in a role that protects people, assets, and business continuity.

Core Responsibilities

• Lead and drive the overall security strategy, governance, and operational excellence for SingHub and APAC offices, ensuring alignment with Global Security priorities, regional business objectives, and evolving risk landscapes.

• Act as the senior security advisor and trusted business partner to regional leadership, providing strategic guidance on security risks, crisis management, business continuity, executive protection, and organizational resilience.

• Provide leadership and oversight for all regional security operations, ensuring consistent standards, effective risk mitigation, high-quality service delivery, and scalable security solutions across offices and hub environments.

• Lead regional crisis and emergency management preparedness, including planning, exercises, incident coordination, executive communications, and support for Regional Crisis Support Teams during critical events.

• Drive the development and implementation of regional security programs, policies, standards, and roadmaps to strengthen operational resilience, compliance, and security maturity across APAC.

• Build and maintain strong partnerships with regional stakeholders, global security teams, external agencies, landlords, vendors, and service providers to ensure effective collaboration and integrated security support.

• Champion a strong security culture through leadership engagement, awareness programs, coaching, and strategic communication, ensuring security is embedded in daily operations and business decision-making.

• Lead, mentor, and develop regional security resources and capabilities while driving continuous improvement, digitalization, data-driven performance management, and operational efficiency across security services.

Play your part in our team succeeding

The Global Security Organization (GSO) protects people and assets across the LEGO Group. Its primary role is to ensure business continuity by protecting the company and employees from critical security incidents, enabling efficient incident response, and preventing physical leaks and theft of intellectual property and other critical assets. This also includes the safety aspects of events, travel security, and risk assessments.

As part of this organisation, the Singapore/APAC Senior Security Manager supports the Security Director (Vietnam & APAC) on security matters across the APAC region, excluding China, to enable the business to deliver on its growth ambitions. The role helps keep security high on the agenda across the company and connects security priorities to the broader LEGO strategy, with focus areas including investigation and confidentiality, crisis management support, security infrastructure and project management, property protection, people and event protection, and risk management.

Do you have what it takes?

• Bachelor’s degree or equivalent relevant academic background in risk management, corporate security, legal, manufacturing, engineering, IT, or a related field.

• Progressive experience in a corporate security function, ideally with hands-on leadership experience and exposure to manufacturing environments.

• Strong exposure to physical and systems security, supply chain security, crisis management, investigations, and risk-based decision-making.

• Proven ability to work within global standards while adapting to local regulatory requirements in complex, multicultural environments.

• Strong stakeholder management, communication, negotiation, and coaching capabilities, combined with a collaborative mindset.

• Strategic thinking with strong operational execution, high integrity, discretion, and resilience.

• Experience with access control and CCTV systems, preferably Genetec.

• Advanced English is required; Mandarin Chinese is preferred as the role will require support across APAC region.

• Professional certifications such as CPP or PSP, ISO knowledge, and willingness to travel are advantageous.

Applications are reviewed on an ongoing basis. However, please note we do amend or withdraw our jobs and reserve the right to do so at any time, including prior to any advertised closing date. So, if you're interested in this role we encourage you to apply as soon as possible.

What’s in it for you?

Here is what you can expect:

Family Care Leave - We offer enhanced paid leave options for those important times.

Insurances – All colleagues are covered by our life and disability insurance which provides protection and peace of mind.

Wellbeing - We want our people to feel well and thrive. We offer resources and benefits to nurture physical and mental wellbeing along with opportunities to build community and inspire creativity.

Colleague Discount – We know you'll love to build, so from day 1 you will qualify for our generous colleague discount.

Bonus - We do our best work to succeed together. When goals are reached and if eligible, you'll be rewarded through our bonus scheme.

Workplace - When you join the team you'll be assigned a primary workplace location i.e. one of our Offices, stores or factories. Our hybrid work policy means an average of 3 days per week in the office. The hiring team will discuss the policy and role eligibility with you during the recruitment process.

Children are our role models. Their curiosity, creativity and imagination inspire everything we do. We strive to create a diverse, dynamic and inclusive culture of play at the LEGO Group, where everyone feels safe, valued and they belong.

The LEGO Group is highly committed to equal employment opportunity and equal pay and seeks to encourage applicants from all backgrounds (eg. sex, gender identity or expression, race/ethnicity, national origin, sexual orientation, disability, age and religion) to apply for roles in our team.

The LEGO Group is fully committed to Children’s Rights and Child Wellbeing across the globe. Candidates offered positions with high engagement with children are required to take part in Child Safeguarding Background Screening, as a condition of the offer.

Thank you for sharing our global commitment to Children’s Rights.

Just imagine building your dream career.

Then make it real.

Join the LEGO® team today.

Responsibilities:
Network & System Security

• Review and support the design and implementation of secure network architecture (LAN/WAN, VPN, cloud, hybrid)
• Assist in configuring firewalls, network segmentation, and access controls
• Support secure setup of new systems, sites, and integrations
• Apply secure configuration standards to infrastructure and systems
• Implement zero trust principles where applicable

Firewall & Network Security Policy Ownership

• Implement firewall rules based on approved standards and requests
• Perform initial review of firewall rule changes and escalate where needed
• Support enforcement of least-privilege access across network zones
• Assist in managing secure remote access (VPN, admin, third-party)

MDR Integration &Security Visibility

• Ensure systems and network devices are properly onboarded to MDR/SIEM
• Monitor security alerts and escalate incidents based on defined procedures
• Work with MDR provider to investigate and respond to security events
• Support basic tuning of monitoring rules and logging requirements

Security Operations& Risk Support

• Perform vulnerability scans and support remediation tracking
• Assist in risk assessments and identification of security gaps
• Support incident response activities and documentation
• Assist with security audits and testing activities

Change & ProjectSecurity Support

• Participate in security review of infrastructure and system changes
• Highlight potential risks (e.g., access exposure, misconfigurations, lateral movement exposure))
• Provide recommendations to improve security posture

Security Governance & Standards

• Establish and maintain network security baseline standards

• Develop and enforce security policies, standards, and procedures

• Define security requirements for new infrastructure, sites, and systems
• Support audits and security assessments
• Assist in aligning implementations with internal standards and frameworks (e.g., NIST,ISO27001)

Collaboration &Awareness

• Work closely with infrastructure and IT teams on secure implementations
• Provide basic security guidance to technical teams when required
• Promote security awareness and good practices

Awareness & Training

• Provide security guidance to IT and business teams
• Promote best practices and awareness

Requirements:

Education

• Bachelor’s degree in IT, Cybersecurity, or related field

Experience

• 2–5years in cyber security, network security, and infrastructure security
• Hands-on experience with: -Firewalls (e.g., SonicWall, Fortinet, Palo Alto Networks) -VPN, endpoint security, or basic IDS/IPS -Network design or system architecture
• Exposure to enterprise network environments (multi-site preferred)
• Experience supporting projects
• Experience with OT/industrial networks
• Knowledge of compliance/regulations (GDPR, PDPA, etc.)

Technical Skills

• Good understanding of:
• TCP/IP, networking fundamentals
• VLANs, segmentation, and access control concepts
• Firewall rules and basic network security principles
• VPN and remote access security -Familiarity with:
• SIEM/MDR concepts
• Vulnerability scanning tools
• Basic cloud security concepts

• Strong hands on technical skills
• Regional role
• People centric environment and value talents

about the company
My client is looking for a Senior Executive, IT Security & Compliance who will play a key role within the team to helpshape their cybersecurity operations.

about the job

• Serve as the Global ISMS Management Representative, owning the ISO/IEC 27001 lifecycle and evolving our governance framework.
• Provide hands-on technical and operational oversight for SIEM, EDR, and DLP stacks to pre-emptively neutralize risks.
• Act as the primary security lead for enterprise clients, ensuring PDPA compliance and managing high-stakes security questionnaires.
• Lead Proof-of-Concept (PoC) activities to validate new security technologies from a risk perspective.
• Coordinate security incident response activities, including tabletop exercises, classification, escalation, and post-incident reviews.
• Monitor emerging threats to ensure detection capabilities evolve. Identify gaps and evaluate new security technologies (e.g., SSE, PAM, Vulnerability Management) from a risk perspective.
• Coordinate periodic vulnerability scans and penetration testing, ensuring successful remediation and retesting.

skills and experience required
Minimum 5 years of experience and a proven track record in managing information security, specifically covering both governance and operational security.

Proven experience serving as an ISO 27001 ISMS representative and coordinating SOC 1/SOC 2 audits.

Strong understanding of cloud security (AWS/Alibaba Cloud preferred), encryption, IAM, network security, and endpoint protection.

Ability to interpret SIEM alerts, EDR findings, cloud security logs, and vulnerability results. 

Preferred certifications include CISSP, CISM, CCSP, or ISO 27001 Lead Implementer/Auditor.

Whats and offer
The permanent opportunity for an Senior Executive, IT Security & Compliance, will pay a salary range of $ 7,000 - $ 9,000 plus benefits. 

To apply online please use the 'apply' function, alternatively you can reach me at
https://www.linkedin.com/in/Oliviatoh-032330132/. (EA: 94C3609 / R22109942)