Total 8 security job vacancies in Legal / Public / Security category in D26 Springleaf, Upper Thomson

IT Security Engineer (Governance, Incident Response& Vulnerability Management)

Mon to Fri Office hours/ Outram Work Location
Cat2B security clearance for this 1 year project renewable

Salary Package:
• Up to S$5,000 Basic
• 1 Month Performance Bonus
• S$50 Monthly Mobile Phone Claim
• Additional S$100 Staff Amenities Claim given for Night Deployment or Weekend Patching Activities

Join a growing cybersecurity team responsible for protecting critical enterprise IT systems, applications, and infrastructure. We are seeking a hands-on IT Security Officer who enjoys security operations, incident response, vulnerability management, and compliance activities. You will be under Agency payroll for this 1 Yr project renewable assignment.

Key Responsibilities

Security Governance
• Develop, review and maintain information security policies, standards and procedures
• Support security risk assessments and risk register management
• Ensure compliance with security frameworks and regulatory requirements

Threat Detection & Incident Response
• Monitor and investigate security incidents using SIEM and EDR platforms
• Perform incident triage, root cause analysis and risk assessment
• Coordinate incident escalation and remediation activities
• Maintain incident response plans and playbooks

Vulnerability Management
• Perform vulnerability assessments and coordinate remediation activities
• Work closely with infrastructure, application and system owners to address security findings
• Prioritize vulnerabilities based on risk and business impact
• Track remediation progress and reporting

Compliance & Auditing
• Support internal and external security audits
• Prepare security documentation and evidence collection
• Assist in compliance reporting and governance reviews

Good to Have Exposure
• Cloud Security (AWS, Azure, GCP)
• IAM, SSO, MFA and PAM solutions
• Data Loss Prevention (DLP)
• Security Awareness Training
• Third-Party Risk Management
• Application Security and Secure SDLC
• OT / ICS / SCADA Security

Requirements
• Minimum 3 years of IT Security or Cybersecurity experience
• Hands-on experience in Security Operations, Incident Response or Vulnerability Management
• Experience using SIEM, EDR and Vulnerability Scanning tools
• Familiarity with security frameworks such as ISO27001, NIST or CIS Controls
• Strong stakeholder management and communication skills
• Ability to work independently and coordinate with multiple technical teams

Preferred Certifications
• Security+
• CEH
• GSEC
• CySA+
• SSCP
• CISSP (Advantageous)
• ISO27001 Lead Implementer/Auditor (Advantageous)

If you enjoy investigating security incidents, managing vulnerabilities and strengthening enterprise security posture, we would like to hear from you.

EA LicenseNo: 09C4235 I EA Reg: R1103307 (Hong Mei Lin)

[Order Number: 1093349]

Responsibilities:

• Manage post-sales activities for cybersecurity or network performance monitoring products.
• Implement large-scale projects locally and regionally.
• Provide on-site implementation services, including testing, deployment, and documentation.
• Offer technical support to ensure customer satisfaction.
• Analyze and clarify customer queries through troubleshooting and researching existing knowledgebase articles/known issues.
• Be on routine standby to support 24×7 maintenance support calls.
• Communicate issues clearly and concisely.
• Demonstrate excellent written and verbal communication skills.
• Perform any other ad-hoc tasks as assigned.

Requirements:

• 1 year of relevant experience in the IT industry providing network support and administration.
• Knowledge and experience in networking, such as routing and switching technology.
• Possess CCNA or CCSA certification.
• Willingness to work hard and eagerness to learn about new technologies.

To Apply, please kindly email your updated resume to

cv_gary@goodjobcreations.com.sg

Please kindly refer to the Privacy Policy of Good Job Creations for your reference:

https://goodjobcreations.com.sg/en/privacy-policy/

We regret that only shortlisted candidates will be notified. However, rest assured that all applications will be updated to our resume bank for future opportunities.

EA Personnel Name: Gary Ho Cheng Xuan

EA Personnel Reg. No.: R1549767

EA License No.: 07C5771

A Security Engineer I is professional responsible for designing, implementing, and maintaining technical security measures, focusing on vulnerability management, threat detection, and infrastructure protection. They secure cloud/on-prem environments using automation (Python, Terraform) and tools like SIEM or EDR, often collaborating with DevOps to remediate security risks and strengthen security posture.

Essential Functions:

• Develop and maintain security policies, guidelines, and lead implementation in all systems, including AWS and in particular CloudTrail, EKS, AWS Inspector, EC2, EMR, S3, AWS Identity Center, RDS, Security Hub, Guard Duty.

• Architect, design, implement, support, and evaluate security-focused tools and controls to meet security and compliance needs.

•  Integrate security checks into the CI/CD pipelines to ensure continuous compliance and shift left security practice.

• Utilize tools like Terraform or Cloud Formation to build, deploy and enforce compliance and secure cloud infrastructure.

• Utilize networking (VPC, Firewall, Transit Gateways), container security and encryption.

• Builds scripts (phyton, bash) and serverless functions (AWS Lambda) for alerting on anomalies, misconfigurations and threats include automations to auto respond to such threat actors/findings.

• Oversee threat management and security incident handling, including the coordination of investigations and reporting of security incidents to management, in alignment with business.

•  Work with the team and QSA on PCI (level 1 & level 2 service provider) & SOC initiatives for the company.

• Ensure that security is factored into the evaluation, selection, and configuration of hardware, applications and software.

• Ensure audit trails, systems logs and other monitoring data sources are reviewed periodically and are in compliance with policies and audit requirements. Provide support and guidance for legal and regulatory compliance efforts, including audit support.

• Promote information security awareness throughout the company. Stay current with security technologies and threats by monitoring vendor and industry publications and attending training.

• Secure sensitive data, manage user credentials through principal of least privileges, track user activity.

• Proactively identify security risks and implement practices that meet standards for information security, by analyzing current systems, and working with IT and the business. Partner with development and infrastructure teams to identify and remediate vulnerabilities Develop mitigation plans.

Qualifications:

• Bachelor Degree in Computer Science or related technical field

• 3 to 5 years in cybersecurity experience within a professional environment

• Certified Information Systems Security Professional certification is a plus

Knowledge, Skills and Abilities:

• Experience with IDS/IPS, file integrity, internal/ external penetration & vulnerability tests, FIM, SEIM, Log aggregation tools required

• Development and scripting experience to build automation: Lambda, Terraform, Cloud Formation, API Integrations

• Understanding of the software development life cycle and CI/CD pipelines

• Ability to execute process and standards around code quality and the deployment lifecycle including SAST and DAST

• Experience in SIEM, MDR, EDR, DLP Identity Management, WAF, WAS, Incident Response, attack surface management

• Proactively find weaknesses in applications and network through audits, penetration tests and security assessments

• Prepare reports on security metrics, attempted attacks, document findings and actions taken

• Proven record of learning new languages, skills and technologies quickly, with minimal guidance

• Takes initiative, stays focused, always accountable

• Thrives in a fast-paced environment with the ability to focus on achieving the target whole minding longer term goals along the way

• Excellent communication skills

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed above are representative of the knowledge, skill, and/ or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Description

IAM Operations

• Manage the day-to-day operations of IAM systems, including provisioning, de-provisioning, and lifecycle management of user and machine identities.
• Administer and maintain Active Directory and LDAP directory services, ensuring accurate and up-to-date identity records across the environment.
• Operate and support One Identity solutions, handling configuration, troubleshooting, and routine maintenance.
• Process access requests in a timely manner, ensuring requests are fulfilled in accordance with established policies and approval workflows.
• Monitor IAM systems for anomalies, policy violations, and potential security threats, escalating and resolving issues promptly.
• Maintain accurate documentation of IAM configurations, procedures, access records, and operational runbooks.

Access Governance and Compliance

• Support periodic access reviews and IAM audits, identifying and remediating access risks in line with internal policies and regulatory requirements.
• Assist in tracking IAM-related risks and remediation action plans, providing updates to relevant stakeholders.
• Generate reports on access activity, identity lifecycle status, and compliance posture for management and audit purposes.

Stakeholder Support

• Serve as the first point of contact for IAM-related issues and queries from users and IT teams, providing clear and timely resolution.
• Work closely with the broader IT and security teams to ensure identity and access controls remain aligned with business needs.
• Maintain service quality and operational consistency as the team transitions project-focused members to new IAM initiatives.

Overview of Citi:

Citi, the world leading global bank, has approximately 200 million customer accounts and a presence in more than 160 countries and jurisdictions worldwide. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management. Citi enables clients to achieve their strategic financial objectives by providing them with cutting-edge ideas, best-in-class products and solutions, and unparalleled access to capital and liquidity.

The Team:

The Chief Information Security Office (CISO) is responsible for looking after the cyber security of all of Citi’s technical assets. It has several new and exciting programs utilising cutting edge cloud and container technologies, with a view to ensuring that our cyber security is best in class and offers reassurance to our wider business lines and clients alike.

The job:

This role sits within the Cloud Security team which is responsible for Private and Public Cloud Security, Container Security as well as strategic Secrets products. As we look to expand our programme, we are creating a consolidated SRE team that will work across our portfolio of products.

As a member of the SRE team, you will be responsible for working towards our SRE strategy and operating model, as the team embarks on a multiyear transformation journey.

Engineering excellence and secure by design are important principles for our CISO organisation. You will raise the bar on both our existing products but also the frameworks and capabilities that are engineered within the SRE team.

Partnership and collaboration are key. You will work closely with the existing Engineering and Operations teams, building out the SRE capability alongside evangelising SRE best practice and techniques for the wider organisation. Reducing TOIL will be paramount to your success.

What the role covers:

• Working across Container products and Secrets products, across Public and Private Cloud, as well as Cloud native specific products
• Architecting and building tools and platforms that provide capabilities for SRE
• Collaboration with multiple stakeholders and partners across Engineering and Operations as well as partner teams within the wider Citi organisation
• Actively owning production level incidents till resolution

Job Skills/ Qualifications:

• Bachelor’s degree or equivalent work experience
• 6+ years of relevant work experience
• Highly motivated self-starter with excellent interpersonal and communication skills. Able to communicate efficiently at multiple levels of seniority
• Certification or formal training in site reliability engineering concepts and practices
• Prior experience working towards SLIs, SLOs and observability capabilities at a large scale
• 4+ years experience in Python (preferable) or Java, on large scale systems alongside Linux based scripting languages.
• Experience working on observability, logging and metrics toolsets
• Experience of k8s and container technologies such as Docker, Openshift and EKS.
• Experience with public cloud technologies such as AWS, GCP or Azure
• Experience with Secrets products such as HashiCorp Vault or CyberArk
• Highly effective navigating large and complex organisations.
• Ability to work under pressure and manage to tight deadlines or unexpected changes in expectations or requirements.
• Experience working in CISO or security led organisations desirable but not essential

How You’ll Succeed

Be conscientious and consistent in identifying security vulnerabilities and working with the respective engineering teams and stakeholders to provide sound guidance and remediations. Be a team player, anda keen learner.

Working at Citi is far more than just a job. A career with us means joining a family of more than 230,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Take the next step in your career, apply for this role atCiti today

https://jobs.citi.com/dei

THE JOB

The Security Executive reports to the Security Manager. This role involves direct management and operational responsibility, and ensuring customer and company satisfaction.

Oversee all day-to-day aspects of operations of site, including all people & performance, and administrative issues. Create an enabling, positive environment where individuals take responsibility in carrying out their duties and work together as a team on-site to deliver them. Sets clear protocols, objectives, and leads by example.

JOB RESPONSIBILITIES

• Overseeing the day-to-day operations of security systems and processes, including access control, surveillance systems, and incident response.

• Managing a team of security personnel, including security guards, security control room operators and security operations staff.

• Ensuring the proper maintenance and operation of security equipment and systems.

• Conducting regular audits and assessments of security systems and processes to identify areas for improvement.

• Developing and implementing standard operating procedures for security operation.

• Collaborating with other departments and integrating security measures and ensuring consistent security practices.

• Developing and conducting security training programs for employees.

• Responding to security incidents and emergencies, including coordinating with local law enforcement and other relevant organizations.

• Facilitate internal / external physical security audits and tracking corrective and preventive actions till closure.

• Perform any other duties as assigned by the Country Security Manager/ delegated personnel.

• To conduct audits as required by site, on monthly, quarterly & yearly basis.

JOB REQUIREMENTS:

• Must hold a valid PRD Grade of Security Supervisor (SS) rank.
• Minimum of 3 years of relevant experience as an Operation Executive or Security Executive in the security industry.
• Equipped with computer skills (Microsoft applications, etc.).
• Experience in dealing with information and intelligence, interpreting security threats and risks, and managing investigations.
• High level of attention to detail and accuracy.
• Strong oral and written communication skills are critical, as well as the ability to think clearly, analyze semi-quantitatively, problem-solve, and scope.
• Ability to comfortably and confidently present to all levels within the enterprise.
• Independent, well-organized, and good work attitude.
• Flexible and adaptable.
• Flexibility in relation to the working hours (days, evenings, nights, weekends, and holidays).
• Have to undergo background checks and security screening.
• Willing to travel internationally when required (on average once or twice every quarterly).
• At least a Diploma-certified in relevant field.
• Ability to liaise with mandarin-speaking client is an advantage.

Thank you for applying.

To learn more about us, please visit our website at www.securitas-singapore.com.

If you are keen to be part of our team and possess the above pre-requisites, kindly submit your detailed resume stating your current and expected salary via the APPLY NOW button below or to :

HR Department

Securitas Guarding Services (Singapore) Pte Ltd

**Note: We regret that only shortlisted candidates will be notified.

Job description

THE JOB

The physical security operations team is the primary interface with all stakeholders and ensures physical security requirements and expectations are met with high quality, industry standard programs and services. The organization is now looking for a physical security risk assessment professional to join our team. We utilize third‑party external data centers managed by co‑location service providers. This position will collaborate with stakeholder security teams to understand security risk requirements and deliver key insights. This role is responsible for supporting the products and services within the physical security operations line of business, with specialized functional expertise in the area of data center operational security and physical security risk assessments.

This position operates as an individual contributor and supports decision‑making by providing risk insights and analysis. The role includes collaboration under moderate supervision with opportunity to influence security operational priorities.

JOB RESPONSIBILITIES:

• Provide physical security risk analysis and assessments to ensure data center locations meet security standards, including vulnerability and gap analysis.

• Perform risk assessment activities to ensure physical security compliance with diverse regulatory and auditing requirements including, but not limited to, SSAE 18, ISO, and PCI.

• Deliver both written and oral briefings, tailored for key business stakeholders and senior leadership.

• Collaborate with stakeholders across the enterprise to ensure risk findings are aligned to prioritized company assets and threats.

• Support documentation, data, metrics, and KPI tracking to sustain and improve operational performance.

• Enhance operational strategy by participating in development of processes and services that advance risk visibility and stakeholder decision‑making.

• Regional and occasional global travel required up to 50%.
  

JOB REQUIREMENTS:

• Minimum 5–6 years of proven experience in conducting physical security risk assessments or directly related functional responsibilities is required.

• Experience in risk analysis, security operations, or facility auditing is preferred.

• Ability to communicate and articulate with a high level of proficiency in both the written and verbal format at all levels up to and including Corporate Executive leadership.

• Proficient in common business productivity tools, including Microsoft Excel, Word, Windows, and Outlook

• Has the ability to build partnerships with both internal & external strategic business partners and stakeholders.

• Must have the ability to work collaboratively with individuals from various backgrounds, cultures, and organizational levels.

• Willing to travel globally, minimally 50% of their time

• Strong interpersonal, verbal, presentation, and written communication skill

• Able to work in an ambiguous environment and operate independently.

• Develops and maintains professional relationships with external governmental, law enforcement, academic, and private sector professionals supporting the physical security mission.

• At least a bachelor's degree in relevant field. Master's degree is preferred.

Thank you for applying.

To learn more about us, please visit our website at www.securitas-singapore.com.

If you are keen to be part of our team and possess the above pre-requisites, kindly submit your detailed resume stating your current and expected salary via the APPLY NOW button below or to :

HR Department

Securitas Guarding Services (Singapore) Pte Ltd

**Note: We regret that only shortlisted candidates will be notified.

[Job ID: 1507790] 

Key Responsibilities

• Design and manage Identity & Access Management (IAM) processes, including user access reviews
• Develop and enforce Data Classification and Data Loss Prevention (DLP) frameworks
• Conduct security architecture design, assessments, and reviews
• Identify risks and vulnerabilities, and implement effective security controls
• Work with external vendors on security testing (e.g. vulnerability scans, penetration tests)
• Review and validate system designs to ensure security is built into projects
• Maintain and enforce cybersecurity policies, standards, and procedures
• Collaborate with internal teams to ensure compliance with regulatory and security requirements
• Stay updated on emerging security threats and best practices

Requirements

• 7 years of experience in Information Security, including IAM, DLP, and security architecture
• Strong knowledge of frameworks such as ISO 27001, NIST, CIS
• Experience with security tools (e.g. SIEM, EDR)
• Solid understanding of cloud security principles and best practices
• Experience working in regulated environments (e.g. MAS, SFC)
• Strong analytical, problem-solving, and communication skills

Nice to Have

• Background in infrastructure or application development
• Relevant certifications (e.g. CISSP, TOGAF, GIAC, cloud certifications)

We regret that only shortlisted candidates will be notified. However, rest assured that all applications will be updated to our resume bank for future opportunities.

Please kindly refer to the Privacy Policy of Good Job Creations for your reference: https://goodjobcreations.com.sg/en/privacy-policy/

EA Personnel Name: Ong Kang Quan Ryan
EA Personnel Registration Number: R23116952
EA License No.: 07C5771