Total 35 information technology job vacancies in Legal / Public / Security category in The Philippines

Product area

The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

Job description

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You are a recognized expert in at least two security domains and use your leadership skills to manage a team that sets the direction and goals for solving Google-wide problems. You identify fundamental security problems at Google and drives major security improvements in Google infrastructure.

Additional job description

As the foundational Security Engineering Manager for Google Vulnerability Rewards Program (VRP) in Singapore, you will lead a team of security and software engineers. You will scale our vulnerability handling capacity by architecting AI-driven agents for triage, reproduction, and automated bug fixing. Beyond operations, you will drive unified risk reporting and lead large-scale remediation projects to eliminate entire vulnerability classes across Google.You are a proven leader with a technical foundation and broad application security expertise—spanning web, mobile, API, and threat modeling.

Qualifications

Job responsibilities

• Maintain a high level of operational independence while collaborating closely with global leads in the US and Zurich to align on technical direction.
• Oversee the Singapore-based triage and remediation rotation, ensuring effective vulnerability reproduction, severity assessment, and bug filing for incoming security reports.
• Steer the strategic development of agents and infrastructure to automate vulnerability handling, triage, and conduct variant analysis to reduce manual workloads.
• Build and maintain a unified vulnerability analysis pipeline and dashboarding system to provide executive-level insights into emerging threats and program return on investment (ROI).
• Drive large-scale remediation efforts that eliminate entire classes of vulnerabilities across Google’s products and infrastructure.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 8 years of experience in a technical leadership role; overseeing projects, with 2 years of experience in a people management, supervision/team leadership role.
• Experience with the bug bounty lifecycle, including triage, severity assessment, and researcher community management.

Preferred qualifications

• Master’s degree or PhD in Engineering, Computer Science, or a related technical field.
• Experience building or deploying automated tools (e.g., LLM-based agents) for security workflows such as triage automation or bug fixing.
• Experience driving large-scale security improvements and collaborating with product teams to remediate widespread technical issues.
• Proven track record of managing engineering teams and a background in software security, particularly in vulnerability reproduction and variant analysis.

Responsibilities:

·      Monitor security alerts and perform initial analysis

·      Investigate security events using SIEM and related tools

·      Perform log analysis to identify suspicious activities

·      Support incident investigation and response

·      Help improve detection rules and monitoring coverage

·      Work with teams in different regions on security operations tasks

·      Contribute to administrative and routine security-related tasks as needed

·      Provide ad-hoc support to group-wide security projects and initiatives

Requirements:

·      Bachelor’s degree in information security, Computer Science, or related field

·      1–3years of experience in security operations, SOC, or related work

·      Familiar with basic SOC processes (alert handling, incident response)

·      Experience with SIEM platforms (e.g., Microsoft Sentinel, Splunk)

·      Basic log analysis capability (Windows, Linux, network logs)

·      Able to work with teams across regions

·      Experience working with overseas or cross-regional teams is a plus

We are seeking a strategic yet hands-on Information Security Officer to join our growing cyber security function. This role bridges security governance with practical technical implementation ensuring that security requirements are translated into effective, real-world controls.

You will strengthen the organization’s security posture by designing, implementing and validating security controls aligned with regulatory, business and technology requirements. You will work closely with internal stakeholders across IT and business units and, where applicable, support client engagements as a trusted security advisor.

This role focusses primarily on technical security implementation, control effectiveness, and risk reduction, rather than people management or purely policy-driven work.

Key Responsibilities

1.      Information Security Framework & Procedures

• Collaborate with Information Security (InfoSec) Department to interpret security policies and translate them into practical, organization-wide procedures.

• Design, document and maintain standardized security processes aligned with internal policies and external standards (e.g. ISO 27001, SS 714:2025).

• Ensure Security procedures are pragmatic, scalable, and adopted across business units.

• Continuously review and improve procedures to reflect changes in technology, risk landscape, and regulatory requirements.
  

2.      Security Review & Technical Assessment

• Assess gaps between current security practices and defined security benchmarks and drive hands-on improvements.

• Perform relevant security assessments such as configuration reviews, vulnerability assessments and control effectiveness reviews.

• Review and refine existing security and operational procedures to ensure effectiveness and scalability.

• Lead the implementation and rollout of new or updated security controls and procedures, ensuring smooth integration into existing technical and operational workflows.

• Validate that implemented controls meet policy and regulatory requirements, maintaining appropriate documentation for audit, assurance and continuous improvement purposes.
  

3.      Stakeholder Enablement & Advisory

• Act as the subject matter expert for information security across the organization and on client projects where applicable.

• Communicate security risks, trade-offs and recommendations clearly to both technical and non-technical stakeholders.

• Deliver targeted security awareness and training sessions to improve organizational cybersecurity maturity.

• Mentor and support process owners and system owners to ensure long-term ownership and sustainable execution of security controls.
  

4.      IT Collaboration & MIS Security Oversight

• Collaborate closely with IT, infrastructure, application and MIS teams.

• Periodically assess MIS-related systems, process, and data flows from an information security and risk perspective.

• Advise IT and MIS stakeholders on security control design, configuration hardening, and risk mitigation measures.

• Validate that MIS solutions and system implementations align with organizational security policies, approved architectures, and regulatory requirements.

• From time to time, support or assist with MIS-related tasks and initiatives where security input or technical understanding is required, particularly during system changes, reviews, or implementation.
  

Required Qualifications & Skills

Relevant Experience

• Demonstrated experience in information security, cybersecurity risk management, IT risk or IT audit, with hands-on involvement in implementation or validating security controls.

• Experience working in complex IT environments involving multiple systems, platforms, or regulatory requirements.

• Working experience with implementation and maintenance of solutions such as Microsoft Intune/Entra, Apple Business Manager, Wazuh is highly advantages.
  

Expertise

• Strong understanding of cybersecurity principles, security architectures, risk management concepts, and control frameworks.

• Practical experience applying security standards and frameworks such as ISO 27001 or equivalent.
  

Communication

• Ability to explain security concepts, risks, and requirements clearly to business leaders, technical teams, and cross-functional teams.

• Comfortable influencing without direct authority and working collaboratively across teams.
  

Certifications

• Security certifications such as CISA, CISM, CISSP or equivalent practical experience designing, implementing, and assessing security controls in real-world environments.
  

Analytical Mindset

• Strong ability to analyse complex environments, identify hidden security or compliance risks, and recommended pragmatic, risk-based solutions.

• Detail-oriented, with the ability to balance security rigor with business practicality.
  

What Success Looks Like in This Role

• Security policies are translated into controls and procedures that are consistently implement and understood across the organization.

• Security gaps are proactively identified, prioritized, and remediated.

• MIS and IT system demonstrate measurable improvement in security posture and audit readiness.

• Stakeholders view the Information Security Officer as a trusted advisor who enables secure and scalable business operations.

Product area

The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

Job description

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You use your industry experience to own and drive the resolution of complex security incidents, policy questions and technical security issues.

Additional job description

The new Singapore-based team will be dedicated to scaling our operations and risk reduction efforts through advanced automation and remediation. Our mission is to safeguard billions of users by efficiently triaging external security reports and proactively eliminating vulnerabilities across Google's products and infrastructure. We aim to evolve into a self-sustaining, AI-driven operation that provides deep insights into vulnerability trends while fostering a community of security researchers.

Qualifications

Job responsibilities

• Review designs and look for vulnerabilities, both with one-time reviews and long-term engagements. Look for vulnerabilities with techniques including reverse engineering, fuzzing, and static analysis.
• Drive large-scale remediation efforts that eliminate entire vulnerabilities across Google’s products and infrastructure.
• Guide the strategic development of agents and infrastructure to automate vulnerability handling, triage, and conduct variant analysis to reduce manual workloads.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
  

Preferred qualifications

• 1 year of experience in leading technical risk analysis in an enterprise environment.
• Experience building or deploying automated tools (e.g., large language model based agents) for security workflows such as triage automation or bug fixing.
• Experience with cross-functional or cross-product teams.
• Experience consulting on security/security protocols.
• Excellent communication skills.

Industry: Information Technology Industry

Location: Central area

Skills: IT Security, IT Risk and IT Compliance

This position will be working for a Financial Institution based at the CBD area, will be responsible and lead the development and execution of enterprise-wide IT security architecture, programme and technology strategy.

Position Responsibilities:

• As the IT Security Lead, will take on a leadership role in risk management, compliance, technology governance, cybersecurity and IT security initiatives and technology advancement / innovation.
• Will lead the department and be responsible for developing and executing IT security policies and practices.
• Will be a strategic partner across Asia and Global counterparts in managing and implementing IT security strategies and enhance security framework.

Position Requirements:

• Bachelor or Masters Degree in Computer Science, Information Security or related field.
• Professional certifications in CISSP, CISM, CISA, CRISC, CCSP are highly preferred.
• 10 to 12 years working experience in the Banking / Financial sector with focus on Information Security and leadership capability.
• Experienced in supervising and leading a department, coaching, guiding and handle operational duties.

We will consider all candidates but will prioritise those who have closer requirements to client needs.

Thank you!

Joseph Syho

Reg Number: R1108657

EA Licence No: 18C9079

We’re partnering with a well-funded, fast-growing tech company to hire a Senior Information Security Specialist to join their team.

• Experienced Information Security professional with a strong record in monitoring, incident response, and risk management.
• Skilled in identifying threats, tracking alerts, and planning effective mitigation strategies.
• Proficient in security operations, governance frameworks, and managing system vulnerabilities.
• Knowledgeable in data privacy, compliance, and regulatory requirements.
• Holds CISSP or CySA+ certification (preferred) with clear and professional English communication.
• Collaborative team player who can also drive security initiatives independently.

Reach out to Ayla at ayla@nodeflair.com for a confidential discussion.
EA License No: 19S9830

Our client is a pioneering, licensed digital bank and Fintech scale-up that serves as the essential bridge between traditional financial rigor and the future of digital assets. Backed by elite institutional powerhouses, they are institutionalizing the next generation of finance for the global digital economy.

With a high-performing team of 150+ professionals and an established security pod of 10 specialists, they have already built a formidable foundation. They are now looking for a visionary leader to move beyond maintenance and architect the next phase of their global security landscape.

You will report directly to the CEO, you will own the enterprise-wide security strategy for a platform that unifies fiat and crypto settlement. This isn’t just about standard defense; it’s about navigating the high-stakes intersection of institutional banking, real-time payments, and stablecoin infrastructure within cloud-native environments. You will be the definitive voice of security to the Board, C-suite, and global regulators.

Key Focus Areas:

• Strategic Leadership: Develop a comprehensive security framework that enables rapid business growth without compromising on risk appetite.
  
• Regulatory Excellence: Navigate a complex web of international financial regulations and global standards such as ISO 27001, NIST, and PCI-DSS.

• Operational Resilience: Oversee high-frequency vulnerability management, penetration testing, and a 24/7 incident response (CSIRT) function for a borderless, always-on banking network.

• Governance & Culture: Serve as the bridge between technical security initiatives and executive leadership, fostering a deep-rooted culture of cybersecurity awareness.

Who You Are:

We are seeking an executive who combines deep technical "hands-on" roots with sophisticated boardroom presence.

• Experience: 10-15+ years of strategic cybersecurity experience within Financial Services, Fintech, or Digital Assets.

• Leadership: A proven track record in a CISO or Senior Management capacity, specifically scaling high-growth environments or digital finance platforms from scratch.

• Education: Bachelor’s or Master’s degree in MIS, Fintech, Computer Science, or a related technical field.

• Certification: CISM is mandatory. Preferred credentials include Blockchain Security, Data Privacy, or ISO 27001 Lead Auditor.

• Expertise: Deep understanding of end-to-end security architecture design and enterprise risk frameworks.

Why Join This Firm?

• Strategic Impact: Define the security standards for a firm processing billions in monthly volume at the forefront of financial innovation.

• Scale with Resources: Inherit a robust 10-person security team, allowing you to elevate from tactical management to high-level strategy immediately.

• Equity Upside: This role includes a stock option package, offering significant financial upside as the company continues to redefine global banking.

• Executive Visibility: Direct access to the CEO and frequent engagement with a Board of Directors comprised of global finance titans.

Interested applicants, you may send your CV to goal@artemishr.xyz
We will be in touch with the shortlisted candidate for an interview within 5 working days.

Artemis HR Pte Ltd
EA License: 23S1792

Core Responsibilities & Technical Requirements

• Strong hands-on experience performing compliance testing of mobile applications that meet certain Technology Security Standards and regulatory/industries requirements, eg MAS TRM, OWASP MSTG

• In-depth knowledge of iOS/android architecture, including their underlying security mechanisms

• Experienced with performing secure code review of Swift / Kotlin/Objective-C and Java applications.

• Proficient with various reverse engineering tools such as IDA Pro, Ghidra, as well as Frida.re hooking framework or equivalent.

• Knowledge of RM architectures (armeabi-v7a, arm64-v8a, etc) an advantage.

• Experience analyzing and bypassing various security mechanisms commonly present in mobile applications (SSL pinning, root/jailbreak detection, anti [tampering, in-app VPN, etc).

• Ability to develop BURP extensions to aid with mobile and web application tests.

• Solid experience conducting Web Application Penetration tests following industry standards methodologies.

• Ability to conduct comprehensive source code reviews across multiple languages (mobile, web, backend).
• Web & Infrastructure Security Testing

Qualifications & Skills

• Bachelor’s degree in Computer Science,Information Security, or related discipline.
• Minimum 2years of hands-on penetration testing or relevant offensive security experience.

• CREST CRT certification mandatory.

• Additional certifications such as OSCP, OSCE, OSEE, OSWE, Red Teaming, Cloud Security, Artificial Intelligence security credentials are advantageous.

• Excellent oral and written communication skills, including the ability to present technical findings.

• Strong organizational and time management skills; able to manage multiple engagements and meet tight deadlines.

• Self-motivated, proactive and able to work independently or as part of a team.

• Vulnerability Management: Run vulnerability scans (e.g., Nessus) and analyze results.Track remediation with IT/system owners and verify patching.

• Security Tooling Implementation: Research, implement, and maintain security tools (MDM, DLP, SIEM, network monitoring, and analytics platforms). Work with IT teams to ensure integration and efficiency.

• Data Leakage Prevention: Managing & configuration of DLP, Threat Intelligence tools; monitoring and working with end-users for resolving violations.

• Incident Handling: Proactive investigate suspicious activities within IT systems and networks, identify the infected hosts and prevent them from affecting the rest of the network. Correlate and validate alerts to ensure they represent relevant security incidents.

• Cloud Security Assessments: Perform security reviews of cloud infrastructure (AWS, GCP, Azure). Identify misconfigurations, assess risks, and suggest remediations.

• Stay up-to-date with the latest security trends, vulnerabilities, and industry best practices.

• Support ISMS Team to maintain and improve the current practices by following industrial standards such as: ISO 27001 family, SOC 2, HIPAA.

OVERVIEW

To develop, implement, and maintain the company’s enterprise-wide information security strategy and framework, ensuring that all systems, data, and processes are secure, resilient, and compliant with regulatory and industry standards. The CISO provides strategic guidance on information security, leads risk management efforts for cyber and information security, and ensures preparedness against emerging threats.

The CISO oversees information security, cybersecurity, data protection, vulnerability management, incident response, and security governance across the organisation. The role spans all business units, technology platforms, and operational processes, including coordination with regulators, auditors, and external partners.

KEY RESPONSIBILITIES

Strategic Objectives

• Develop and implement a comprehensive enterprise information security strategy aligned with business objectives and risk appetite.

• Ensure compliance with applicable laws, regulations, and standards related to information security.

• Provide strategic guidance to the Senior Management on emerging threats, vulnerabilities, and security innovations.

• Promote a culture of cybersecurity awareness and best practices across the organization.

Operational Objectives

• Identify, assess, and mitigate information security risks across all systems and processes.

• Oversee the design and execution of vulnerability assessments, penetration tests, and security audits.

• Lead the development and management of security policies, procedures, and incident response plans.

• Ensure timely reporting of security incidents, breaches, and risk assessments to senior management and regulators.

REQUIREMENTS

• Bachelor’s or Master’s degree in Management Information Systems, Fintech, Information Security, Computer Science, or a related technical field.

• 15+ years of hands-on and strategic experience in information security and cybersecurity within the financial services industry (including FinTech, payments, and digital assets).

• Proven executive leadership experience, including operating as a Chief Information Security Officer (CISO) or in a senior managerial capacity.

• Extensive knowledge of international financial regulations, regulatory compliance, and global industry standards (ISO 27001, NIST, PCI-DSS).

• Mandatory professional certification in CISM (Certified Information Security Manager). Additional certifications in Blockchain Security, Data Privacy, or ISO 27001 Lead Auditor are highly preferred.

• Proven track record in launching or scaling digital finance platforms, FinTech, or cloud-native environments from scratch, with a strong understanding of end-to-end security architecture design and 24/7 incident response (CSIRT).

• Strong strategic and leadership skills, with the ability to build enterprise risk frameworks and communicate complex security initiatives to the Board, C-suite, and relevant regulatory bodies.

Responsibilities:

• Design and govern Identity and Access Management (IAM) strategies, ensuring robust user access review processes.
• Develop and implement a comprehensive Data Classification Framework to identify, categorize, and protect sensitive data.
• Enforce Data Loss Prevention (DLP) frameworks and policies to secure sensitive data within regional operations.
• Conduct security architecture design and assessments on technology systems and processes across multiple regions.
• Create and maintain security controls to safeguard organizational data and assets.
• Analyze security risks and identify vulnerabilities, proposing effective mitigation strategies accordingly.
• Collaborate with external parties for information security assessments, including vulnerability scanning and technical architecture assessments.
• Review and validate architecture designs, ensuring security is embedded within project delivery without compromising business objectives.
• Execute daily tasks related to controls, policies, and compliance initiatives in security.
• Maintain and update relevant Cybersecurity and Technology policies and procedures.
• Work with cross-functional teams to ensure compliance with security standards and regulations.
• Stay informed about the latest security threats and best practices to provide guidance to teams on security issues.
• Build and maintain strong relationships with stakeholders, vendors, and external partners.

Requirements:

• University degree in Cybersecurity, Information Security, Computer Science, Management Information Systems, or related fields.
• Minimum of 7 years of experience in Information Security, DLP, and security architecture.
• Familiarity with and experience in Infrastructure and/or application development is preferred.
• In-depth knowledge of security frameworks, such as ISO 27001, NIST, and CIS.
• Understanding of security tools and technologies, including EDR and SIEM.
• Expertise in cloud technologies with knowledge of cloud security best practices.
• Experience within the financial regulatory environment in the Asia region, particularly SFC in Hong Kong and MAS in Singapore.
• Strong problem-solving skills with an ability to analyze complex security challenges and offer effective solutions.
• Excellent communication and interpersonal skills for collaboration with diverse teams and stakeholders.
• Relevant certifications such as TOGAF, CISSP, SANS/GIAC, or other cloud technology certifications are highly desirable.

Interested candidates who wish to apply for the advertised position, please click on “Apply”. We regret that only shortlisted candidates will be notified.

EA License No.: 01C4394 (Persol Singapore PTE LTD)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Persol Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolsingapore.com/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy

About audax 

audax means courage. To have the courage to change the banking scene, eliminating constraints caused by existing legacy infrastructure. Our mission is to empower banks and financial institutions to scale and modernise at speed, reaching new customers without breaking the bank. 

We began our journey supplying services to and powering Standard Chartered’s white-label plug and play Banking-as-a-Service (BaaS) solution, Standard Chartered nexus, through our technology capabilities. At audax, we seek go-getters who are hungry for growth and can bring fresh perspectives. 

Website - https://www.audax.io  

What You’ll Do:

1.     Firewall, Network Proxy, and EDR Management: 

• Firewall Management: Oversee the configuration, maintenance, and monitoring of firewall systems to enforce security policies and control network traffic effectively. 

• Network Proxy Management: Manage proxy servers to secure internet traffic, optimize performance, and troubleshoot issues as needed. 

• Endpoint Detection and Response (EDR) Management: Manage EDR tools across endpoints, configure policies for threat detection and response, and analyze endpoint data for security anomalies. 

2.     Threat Detection and Content Creation: 

• Write and refine rules, signatures, and queries to detect security threats effectively. 

• Develop and update security detection content for SIEM (Security Information and Event Management) systems. 

3.     Vulnerability and Threat Management: 

• Manage vulnerability assessment and remediation programs, prioritizing and mitigating security vulnerabilities. 

• Coordinate with technology operations teams to apply patches and updates to systems and applications. 

• Monitor and respond to emerging threats, implementing proactive measures to protect systems and data. 

4.     Incident Response: 

• Perform security monitoring and triaging for potential threats and SIEM alerts. 
• Develop and maintain incident response plans and procedures, coordinating responses during security incidents or breaches. 
• Lead incident response teams, ensuring timely resolution and post-incident analysis to prevent future occurrences. 

5.     Access Review and Security Exceptions: 

• Establish and maintain access review processes to ensure appropriate access rights and permissions. 
• Manage and review user requests for security exceptions, balancing business needs with security requirements. 
• Implement controls and monitor activities to detect unauthorized access attempts and policy violations. 

6.     Collaboration with Engineering Teams: 

• Work closely with engineering teams to integrate security best practices into the development lifecycle. 
• Conduct security reviews of infrastructure, applications, and new technologies, providing recommendations for security enhancements. 
• Collaborate on the design and implementation of secure architecture and solutions. 

7.     Service Management: 

• Provide oversight of security service delivery, ensuring SLAs (Service Level Agreements) are met. 
• Manage relationships with security service providers and vendors, evaluating services and negotiating contracts. 

8.     Compliance and Reporting: 

• Ensure compliance with relevant security standards, regulations, and best practices. 
• Generate regular reports on security metrics, incidents, vulnerabilities, and operational status. 
• Participate in audits and assessments related to security operations. 

9.     Audit Management: 

• Manage and coordinate security audits conducted internally or by external auditors. 
• Prepare audit responses and action plans, implementing corrective measures and tracking progress. 

Who You Are:

• Bachelor’s degree in Computer Science, Information Technology, or related field; advanced degree or certifications (e.g., CISSP, CISM) preferred. 
• Proven experience in a security operations role with hands-on experience in firewall management, network proxy, EDR, incident response, and threat detection. 
• Strong understanding of security principles, protocols, and technologies. 
• Experience with access control, vulnerability management, audit management, and compliance frameworks (e.g., PCI-DSS, GDPR). 
• Excellent communication skills and ability to collaborate effectively across teams and stakeholders. 
• Fresh graduates with the right skillet and aptitude may also be considered. 

Why Join Us? 

• Be Part of a Bold Vision – At audax, we’re not just building software – we’re transforming how financial institutions and businesses manage risk, compliance, and growth. Join a team that’s fearless in challenging the status quo.
• Flexible, People-First Workplace – We value the importance of Family, Team, Self. In that order.
• Competitive Rewards and Startup Perks – We offer competitive salaries and meaningful benefits that look after your well-being. 

Privacy Notice:
Please note: by submitting your application, you acknowledge that you have read and understood audax’s Privacy Policy for Employees, Freelancers, Contractors and Job Applicants (the “Policy”), and consent to the collection, use and disclosure of your personal data by audax for the purposes set out in the Policy. You may withdraw consent for such collection, use and disclosure, and make an access or correction request in respect of your personal data, in accordance with the Policy by emailing dpo@audax.io.

Note: This role is not open to recruitment agencies. Thank you.

Responsibilities

• Produce cyber security strategies and work plan, policies, standards and guidelines
• Support digitalisation planning and aligning with ICT security strategy goals and policy baselines.
• Perform regular Gap analysis.
• Oversee ICT security matters (approving and tracking ICT security work plan and resourcing, monitoring performance in security indicators and risk acceptance decisions).
• Regular reviews of all ICT systems across different operating environments, the systems’ security design, implementation and operations.
• Conduct Cybersecurity risk assessment and acceptance processes at the management level.
• Review, consult and endorse risk management and mitigation plans from project teams.
• Advise on cyber security solutions and technologies to be deployed suitable to business operations and aligned with WOG-wide advisories and practices.
• Ensure compliance to the defined security policies, standards and guidelines.
• Create and execute end user security awareness programmes
• Establish defined processes for Threat and Incident Management.
• Ownership of security incident response workshops and exercises (table-top exercises, simulation and drills)
• Lead investigation and management of ICT security incidents.

Requirement

• Degree in Computer Science, Information Systems, Engineering or a related Technology based education.
• Minimum 5 years of information security management experience
• Skilled in evaluating the effectiveness of existing controls and recommending appropriate mitigation strategies for on-premises and cloud-related cybersecurity and data security issues.
• Able to identify on-premises and cloud-specific cybersecurity risks and threats as well as potential violations in on-premises or cloud environments
• Able to collaborate with multi-functional, multi-disciplined teams to formulate, institute real time awareness of security posture and baseline among end users.
• Demonstrate skills to thoroughly assess cybersecurity risks/threats impact
• Solid grasp of ICT operations, security policies, business processes and the relationship between them.
• Knowledge or experience in Infrastructure as Code (IaC) tools such as Terraform and Ansible, including their application in maintaining and automating secure on-premises and cloud environments.
• Strong understanding of insider threats, vendor risks, data leakage, malwares including ransomware, account hijacking, and compliance risks.
• Strong understanding of compliance requirements
• Good interpersonal and partner/ executive leadership skills.
• CISSP/ CISM/ CISA certifications are advantageous.

Ethos Search Associates Pte. Ltd.

EA Licence No: 13C6655

EA Reg No: R1988580 Jacky Chong

[Job ID: 1507790] 

Key Responsibilities

• Design and manage Identity & Access Management (IAM) processes, including user access reviews
• Develop and enforce Data Classification and Data Loss Prevention (DLP) frameworks
• Conduct security architecture design, assessments, and reviews
• Identify risks and vulnerabilities, and implement effective security controls
• Work with external vendors on security testing (e.g. vulnerability scans, penetration tests)
• Review and validate system designs to ensure security is built into projects
• Maintain and enforce cybersecurity policies, standards, and procedures
• Collaborate with internal teams to ensure compliance with regulatory and security requirements
• Stay updated on emerging security threats and best practices

Requirements

• 7 years of experience in Information Security, including IAM, DLP, and security architecture
• Strong knowledge of frameworks such as ISO 27001, NIST, CIS
• Experience with security tools (e.g. SIEM, EDR)
• Solid understanding of cloud security principles and best practices
• Experience working in regulated environments (e.g. MAS, SFC)
• Strong analytical, problem-solving, and communication skills

Nice to Have

• Background in infrastructure or application development
• Relevant certifications (e.g. CISSP, TOGAF, GIAC, cloud certifications)

We regret that only shortlisted candidates will be notified. However, rest assured that all applications will be updated to our resume bank for future opportunities.

Please kindly refer to the Privacy Policy of Good Job Creations for your reference: https://goodjobcreations.com.sg/en/privacy-policy/

EA Personnel Name: Ong Kang Quan Ryan
EA Personnel Registration Number: R23116952
EA License No.: 07C5771

Job Purpose
This role leads the Governance, Risk, and Compliance functions. The role ensures that security controls are well‑designed, risks are understood and managed, and the company maintains compliance with industry, customer, and regulatory requirements. This leader partners closely with IT, operations, legal, procurement, and third‑party partners to embed security into daily business processes.

Roles and Responsibilities
IT Security Governance and Policy Management

• Develop, maintain, and enforce security policies, standards,and procedures aligned with business needs and regulatory requirements.
• Establish a governance framework that integrates security intologistics operations, including forwarding systems, warehouse systems, transportation management systems, fleet technologies, IoT devices, and corporate applications.
• Lead security awareness programs tailored to both office and field personnel.

Risk Management

• Own the enterprise security risk management program, including risk identification, assessment, scoring, treatment planning, and reporting.
• Conduct regular risk assessments and maintain the risk register.
• Plan, manage and report mitigation actions.
• Define risk responses (Mitigate/Transfer/Accept) and manage treatment plans.
• Monitor Key Risk Indicators (KRIs) and analyze risk trends.
• Prepare risk heatmaps and executive risk reports.
• Support customer/regulatory assessments with risk documentation.
• Monitor emerging threats and regulatory changes affecting supply chain and logistics operations.

Compliance and Audit

• Manage compliance with frameworks such as ISO 27001, SOC 2,NIST CSF, GDPR, PDPA, CTPAT, PCI DSS (if applicable), and customer‑mandated security requirements.
• Manage internal and external audits, ensuring evidencereadiness and timely remediation of findings.
• Maintain compliance documentation repositories, controllibraries, and audit trails to ensure regulatory adherence.
• Evaluate regulatory changes and update internal policies.
• Support incident response ensuring compliance obligations.
• Coordinate evidence collection for customer/governmentassessments.

Third Party and Vendor Security

• Lead the third‑party risk management program, including duediligence, contract reviews, and ongoing monitoring.
• Evaluate security posture of logistics partners, carriers, technology vendors, and SaaS providers.
• Work with procurement and legal to embed security requirements into vendor agreements.
• Conduct third‑party security risk assessments.

Incident Preparedness and Response Governance

• Develop and maintain incident response plans, playbooks, andcommunication protocols and ensure compliance.
• Coordinate tabletop exercises with IT, operations, and executive leadership.
• Ensure post‑incident reviews translate into updated controls and governance improvements.

Control Design and Assurance

• Oversee the design, implementation, and testing of security controls across IT and operational technology environments.
• Partner with infrastructure, application, and operations teams to ensure controls are practical and effective in high availability logistics environments.
• Track control performance metrics and drive continuous improvement.

Reporting and Stakeholder Engagement

• Deliver regular reports to executive leadership on risk posture, compliance status, and key initiatives.
• Serve as the primary point of contact for customer security questionnaires and supply chain security assessments.
• Communicate complex security topics in clear, business aligned language.

Requirements

• Bachelor’s degree in information security, Computer Science or related discipline.
• Certifications preferred: CISSP, CISM, CRISC, CISA.
• 7+ years in IT Security, GRC or related roles.
• Strong understanding of security frameworks (ISO 27001, NIST CSF, SOC2).
• Knowledge of data privacy regulations (GDPR, PDPA) and cross-border logistics considerations.
• Experience managing audits, compliance programs, and risk assessments.
• Familiarity with logistics & supply chain environments.
• Ability to collaborate with cross‑functional teams and influence without authority.
• Excellent communication, documentation, and stakeholder‑management skills.