• Minimum 10+ years of experience in IT/OT infrastructure and operational environments.
• Experience integrating enterprise IT networks with OT systems and industrial equipment.
• Hands-on knowledge of HMIs, PLCs, SCADA systems, sensors, CMMs, CNC machines, and 3D printers.
• Ability to update PLC configurations, IP addressing, and network parameters.
• Perform OT asset inventory collection, validation, and documentation.
• Identify operational and cybersecurity risks and proactively escalate issues.
• Strong understanding of industrial protocols such as OPC-UA, Modbus TCP/IP, Ethernet/IP, and SMB.
• Experience designing and supporting LAN/WAN networks, VLANs, and routing protocols.
• Proficiency in configuring Cisco switches, routers, SD-WAN, and Check Point firewalls.
• Experience with firewall rule management, network security configuration, and troubleshooting.
• Knowledge of network segmentation and micro-segmentation using VLANs, switches, and network taps.
• CCNA/CCNP, CompTIA Network+, or equivalent networking certification preferred.

EA License No: 11C4879 / Registration ID : R1218583

Apar Technologies Pte Ltd, Singapore

To lead and ensure that security management practices across the region are implemented and

maintained to ensure the security of people, assets and operations of DP World within the region.

• To ensure security compliance of the BUs in the region to their respective applicable mandatory,

voluntary and client specific security compliance requirements. These requirements must be identified

and the list to be maintained.

• To plan and support implementation of compliance standards like ISPS Code, ISO 28000, TAPA etc. that

are required or planned as improvement by the BUs within the region.

• To ensure that security awareness becomes a culture within the region, using security campaigns,

training, outreach, and awareness sessions, either in person to locally based colleagues or remotely

through delegated security managers regionally

• To ensure all travellers in the region are apprised of security risk factors and implement measures and

mitigation techniques appropriate to the specific location

• To maintain close contact with regional peers within DP World and to build effective relationships with

regional and local agencies who can assist the collection of security information and the response to an

incident

• Undertake Risk Assessments and provide advice on security matters and compliance for new projects.

• Undertake security reviews and/or audits within the region as per frequency agreed with Group Security

and Regional Head.

• Lead, support and project manage on all aspects of security for new businesses and acquisitions.

• Support and where assigned lead security systems projects within the region.

• Support the integration of new businesses to the global security management system requirements.

• Prepare and submit security reports for the region to Group Security and Regional Head in the agreed

template(s) and frequency.

OTHER

• Applicable if role has direct or indirect reports - responsible for the management and leadership of an

engaged team, promoting collaboration and ensuring that each is developed and evaluated against goals

and objectives which are aligned, specific, measurable, attainable yet challenging, realistic and time

bound.

• Act as an ambassador for DP World at all times when working; promoting and demonstrating positive

behaviours in harmony with DP World's Principles, values and culture; ensuring the highest level of safety

is applied in all activities; understanding and following DP World's Code of Conduct and Ethics policies.

• Perform other related duties as assigned

Job Requirements

• Candidate must possess at least a Diploma in Computer Science/Information Security, Engineering (Computer/Telecommunication) or equivalent.
• Required skill(s): Python.
• Expertise in other programming languages are advantageous.
• Only Singaporeans or PR are eligible.
• Candidates who possess OSCP and CREST Registered Tester certification.will be preferred.

Job Description

• Participate in security review and assessment for our clients' systems.
• Participate in forensics and incident response engagements.
• Participate in security consultancy and advisory engagements.
• Learn how to work independently and in a team.

Working Hours: Monday – Thursday (8.30am –6pm), Friday (8.30am – 5.30pm) (Hybrid working arrangement) 

Working Location: North East

Salary Package: Up to SGD 11,000 + AWS 

Employment Type: Contract (1 year renewable with chances of conversion)

We are looking for a Cloud Security & DevSecOps Engineer to design, develop, and maintain secure, scalable, and automated solutions across cloud and endpoint environments. You will be responsible for software development, cloud engineering, DevSecOps automation, endpoint security, Zero Trust implementation, and Site Reliability Engineering (SRE) practices. This role requires a strong technical foundation across software engineering, cloud platforms, security technologies, and infrastructure automation.

Key Responsibilities

Software Development

• Design, develop, and maintain secure, scalable, and well-documented software solutions.
• Develop applications and automation tools using Python, Java, Node.js, JavaScript/TypeScript, or similar technologies.
• Design and integrate RESTful APIs and web services.
• Work with databases such as AWS DynamoDB and SQL-based databases.
• Collaborate with stakeholders to develop frontend and backend solutions, ensuring seamless system integration.
• Implement software testing and quality assurance best practices.
• Manage source code and development workflows using Git and version control tools.

Endpoint Security, Zero Trust & Identity Management

• Develop and implement solutions to secure and manage endpoint devices across Windows and macOS environments.
• Work with security platforms such as Microsoft Intune, CrowdStrike, CyberArk, and Tanium.
• Automate threat detection, remediation, reporting, and security operations processes.
• Design and implement Zero Trust security architectures and secure access solutions.
• Configure and manage identity and access management (IAM) solutions using Azure Entra ID, Okta, AWS IAM, SAML, and related technologies.
• Administer Cloudflare services including Access, Gateway, and Web Application Firewall (WAF).
• Implement secure authentication, authorisation, and access control frameworks.

Cloud Engineering, DevOps & Automation

• Design, develop, and maintain cloud-native solutions on AWS and Azure platforms.
• Build automation solutions leveraging AWS services such as Lambda, ECS Fargate, DynamoDB, SQS, S3, EC2, CloudWatch, IAM, VPC, WAF, and Step Functions.
• Develop Infrastructure-as-Code (IaC) solutions using Terraform and cloud-native tooling.
• Build and maintain CI/CD pipelines using GitLab CI and other DevOps tools.
• Implement and manage containerised environments using Docker and Kubernetes.
• Support Agile delivery practices through Scrum and Kanban methodologies.
• Conduct proof-of-concepts (PoCs) and evaluate emerging technologies to improve operational efficiency and security.

Site Reliability Engineering (SRE)

• Develop and maintain observability, monitoring, and alerting solutions using the ELK Stack (Elasticsearch, Logstash, Kibana).
• Define and track SLI, SLO, and SLA metrics to ensure service reliability and performance.
• Build dashboards, alerts, and predictive monitoring capabilities.
• Manage ELK clusters, agents, fleet policies, and log ingestion pipelines.
• Design and implement automated recovery and self-healing mechanisms for critical systems.
• Continuously improve platform reliability, scalability, and operational excellence.

Requirements

• Degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or related discipline.
• Experience in software development using Python, Java, Node.js, JavaScript/TypeScript, or similar languages.
• Hands-on experience with AWS and/or Azure cloud platforms.
• Strong knowledge of DevOps, CI/CD, Infrastructure-as-Code, and automation practices.
• Experience with endpoint security, Zero Trust architecture, IAM, and security technologies.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781

Responsibilities

·      Define and drive the vision, roadmap, and maturity model for application security across the enterprise.

·      Align application security initiatives with business objectives, compliance requirements, and risk management frameworks.

·      Act as the primary liaison between development teams, security functions, and executive stakeholders.

·      Secure Development Lifecycle (SDLC) Integration

·      Embed security practices into the SDLC, including threat modeling, secure design reviews, and code analysis.

·      Champion DevSecOps principles, ensuring security automation and continuous integration pipelines are robust and scalable.

·      Provide guidance on secure coding standards, frameworks, and best practices.

·      Establish policies, standards, and metrics to measure application security effectiveness.

·      Conduct regular risk assessments and oversee remediation of vulnerabilities.

·      Lead and mentor a team of application security engineers and specialists.

·      Partner with product owners, architects, and developers to balance innovation with security requirements.

·      Build strong relationships with executive leadership to communicate risks, progress, and strategic priorities.

·      Evaluate emerging technologies, tools, and methodologies to enhance application security capabilities.

Qualifications

·      Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.

·      8+ years of experience in application security, software development, or cybersecurity, with at least 3 years in a leadership role.

·      Strong knowledge of secure coding practices, OWASP Top 10, and modern application architectures (cloud-native, microservices, APIs).

·      Hands-on experience with application security tools (SAST, DAST, IAST,RASP, container security).

·      Proven ability to lead cross-functional teams and influence executive stakeholders.

·      Excellent communication, leadership, and problem-solving skills.

All Successful candidates can expect a very competitive remuneration package and a comprehensive range of benefits.

Alternatively, you may wish to email your resume in a detailed Word format to debbie@peopleprofilers.com

We regret that only shortlisted candidates will be notified

People Profilers Pte Ltd, 20 Cecil Street, #08-09 PLUS Building, Singapore 049705

 Tel: 69509748

http://www.peopleprofilers.com

debbie@peopleprofilers.com

Consultant in charge: So Boon Shyen, Debbie

EA Licence Number: 02C4944

Registration Number: R1111376

The candidate will join the Private Bank KYC Client Ongoing Review Team, which supports periodic reviews of existing private banking clients. The role focuses on ensuring that client profiles, account activities, and documentation remain consistent with the purpose of the banking relationship and comply with the bank’s Anti-Money Laundering / Countering the Financing of Terrorism (AML/CFT) requirements.

The candidate will be responsible for reviewing completed KYC (Know Your Customer) ongoing reviews, identifying potential risk issues, providing guidance to stakeholders, and supporting the bank’s overall AML control framework.

Key Responsibilities

• Perform quality review of KYC periodic ongoing reviews (OGRs) for existing private banking clients.
• Ensure reviews are completed according to internal AML policies, Private Bank procedures, and regulatory requirements.
• Assess whether the client’s profile, source of wealth, source of funds, account activity, and transaction behaviour remain appropriate for the private banking relationship.
• Review cases previously closed with conditions and decide whether the conditions can be removed, or whether further escalation or action is required.
• Identify potential AML/CFT risks, documentation gaps, control issues, or unusual client activity.
• Provide clear and timely guidance to Relationship Managers, Front Office, Compliance, Operations, and other stakeholders.
• Handle escalations and propose practical closure strategies or action plans.
• Support AML-related projects as a subject matter contributor or stakeholder.
• Prepare management reports on key operational risk items, review status, exceptions, and control issues.
• Suggest process improvements to strengthen review quality and reduce repeat findings from Business Compliance, Group Compliance, Internal Audit, or External Audit.

Key Requirements

• At least 3 years of hands-on experience in AML (Anti-Money Laundering), KYC (Know Your Customer), client onboarding review, or ongoing periodic review.
• Prior experience in Private Banking, Wealth Management, or handling high-net-worth client reviews is preferred.
• Familiarity with MAS Notice 626 and/or international AML/CFT standards.
• Good understanding of client due diligence, enhanced due diligence, source of wealth, source of funds, risk assessment, and ongoing monitoring.
• Strong analytical skills with the ability to review data, documents, client activity, and risk indicators.
• Strong attention to detail and ability to manage a high volume of review cases within deadlines.
• Good written and verbal communication skills, with the ability to explain review findings clearly to stakeholders.
• Proficient in Microsoft Office, especially Excel, PowerPoint, and Word.
• Able to work independently, manage multiple priorities, and operate in a fast-paced banking control environment.
• Team player with a diligent, hands-on, and solution-oriented working style.

KYC Periodic Review,KYC Ongoing Review,Client Due Diligence (CDD),Enhanced Due Diligence (EDD),Anti-Money Laundering (AML),Countering the Financing of Terrorism (CFT),Source of Wealth (SOW),Source of Funds (SOF),Private Banking,Wealth Management,High-Net-Worth Clients,MAS Notice 626,Client Risk Assessment,Ongoing Monitoring,Quality Review / Quality Control,Management Reporting

• Support General Price Increase (GPI) Exercise
• Assist in compiling monthly incentive plans for Global Customers’ GPI review.
• To clarify pricing terms.
• Maintenance of Rates
• Support rate setup or updates in Express Billing
• Maintenance of Global Agreements
• Support post-activation maintenance activities
• Update Global Customer Agreement information

Interestedapplicants can send their detailed resumes to janelui@recruitexpress.com.sgor call JANE @ 6735 1955.

JANE LUI JIE'EN

CEI: R1104482

Company Reg.No. 199601303W || EA Licence No. 99C4599

Mandatory Skills

• Prior exposure to Sunline (SunLTTS / SunCBS) core banking
• Minimum 4-8 years of experience in core banking implementation, with at least 1-3 years in a lead functional BA or functional lead capacity.
• Demonstrable experience on at least one full end-to-end core banking implementation lifecycle — from requirements through to go-live and post-production support.
• Deep functional knowledge across one or more core banking domains: retail deposits, consumer/SME lending, payments and clearing, or transaction banking.
• Proficiency in producing structured, professional functional documentation (BRDs, FDDs, process maps, use cases).
• Experience working in Agile, Waterfall, or hybrid delivery methodologies.

Role Summary

The Functional Business Analyst will lead requirements gathering, functional design, system configuration, testing, and stakeholder engagement activities for Core Banking transformation initiatives. The role involves translating business requirements into functional solutions within the Sunline Core Banking platform, ensuring successful delivery across banking domains such as deposits, lending, payments, treasury, and transaction banking.

Ways of Working

Requirements & Functional Design

• Facilitate workshops with business and IT stakeholders to gather, analyse, and validate requirements.
• Translate business requirements into functional specifications and Sunline platform configurations.
• Produce key functional artefacts including BRDs, FDDs, process maps, and configuration documents.
• Define business rules relating to product setup, interest and fee calculations, account lifecycle management, and transaction processing.

System Configuration & Testing

• Lead functional configuration of core banking modules including deposits, lending, cash management, and payments.
• Drive SIT and UAT planning, execution, and validation of end-to-end business processes.
• Manage functional defect resolution with technical teams.
• Support data migration activities, including mapping validation, reconciliation, and business rule verification.

Stakeholder & Delivery Management

• Serve as the primary functional liaison between business stakeholders and project teams.
• Lead and mentor functional analysts across project workstreams.
• Support project governance activities, status reporting, risk management, and steering committee engagements.
• Contribute to change management, user training, and business readiness activities.

Preferred Qualifications

• Experience with Sunline Core Banking architecture, including distributed or microservices-based environments.
• Exposure to Digital Banking, Open Banking/Open Finance, and API-driven channels.Knowledge of IFRS 9, Basel III, and banking regulatory reporting frameworks.
• Experience in Core Banking modernisation or legacy migration programmes.
• Relevant certifications such as CBAP, banking certifications, or financial services accreditations.

The Company

Wellington Management offers comprehensive investmentmanagement capabilities that span nearly all segments of the global capitalmarkets. Our investment solutions, tailored to the unique return and riskobjectives of institutional clients in more than 60 countries, draw on a robustbody of proprietary research and a collaborative culture that encouragesindependent thought and healthy debate. As a private partnership, we believeour ownership structure fosters a long-term view that aligns our perspectives withthose of our clients.

Our global investment platform is comprised of over 500investment professionals across seven investment functions (Hedge Fund Group,Private Investments, Sustainability, Equity & Fixed Income Boutiques,Research, Science & Strategy) in the Americas, EMEA and APAC regions. Theteam collectively manages approximately $1 trillion in assets across thecapital structure.

The Position

We are seeking an experienced equity analyst to join ourglobal Finance team within Global Investment Research (GIR) as a GlobalIndustry Analyst (GIA). The ideal candidate will be a key member of our Financeteam and be responsible for conducting research and making investmentrecommendations on Emerging Market Financial stocks as well as providing expertperspective on the respective subsectors and trends. The Global IndustryAnalyst (GIA) will conduct fundamental research that leads to differentiatedinsights derived from asking innovative questions, anticipating trends,identifying risks and potential disruptions in this rapidly changing industry.

The ideal candidate will be passionate about markets with ademonstrated track record of successful stock recommendations. In addition, theGIA must exhibit a fundamental, research oriented, bottom-up approach,supported by a strong investment philosophy and process, including theintegration of ESG considerations, and be able to implement ideas through ahighly analytical framework.

The GIA will be able to identify mispricing and valuationdiscrepancies, which will allow them to make investment recommendations, andcommunicate their findings to Portfolio Managers globally, who manage long-onlyand hedge fund portfolios on behalf of our clients. Over time, we expect theGIA to take on portfolio management responsibilities for their industry withinthe firm's research portfolios.  AtWellington, we consider research to be a core aspect of the investment processand view this as a career position that can be highly challenging andrewarding.

Essential Skills

We are seeking an analyst who is:

·        Passionate about the markets and has ademonstrated record of successful stock­picking recommendations. GIAs must have a fundamental, research oriented,bottom-up approach supported by a strong philosophy and process.

·        Enjoy acting as an individual contributor withina highly collaborative investment culture. S/he will thrive by building strongrelationships with colleagues and company management teams, communicatingaction-oriented investment opinions clearly and with conviction and enjoying anopen investment dialogue and respectful debate with others across the firm.

·        Possesses the ability to take risks and holdnon-consensus investment views is critical, as is maintaining the humility toadmit mistakes and course correct as new information comes to light. The rolerequires striking a good balance of intellectual curiosity and the ability tomake decisions with incomplete information.

Other Qualifications

A successful candidate islikely to have the following qualifications:

·        Havea strong academic credentials, ideally including an MBA or CFA

·        8+ years of relevant experience in EmergingMarket Financials research in the Buy side;

·        Demonstrate the ability, skill, and comfortcommunicating to Portfolio Managers across the globe (US, Europe, and Asia);

·        Demonstrate a capacity for differentiatedthinking;

·        Be able and willing to make investment decisionsunder pressure and in uncertain times;

·        Have a strong desire and appetite for continuouslearning;

·        Have a global perspective, in addition toregional responsibilities;

·        Have an understanding of how to incorporate ESGconsiderations into their investment Philosophy and Process;

·        Demonstrate the highest personal andprofessional integrity and ethics

·        Strong proficiency in spoken and writtenEnglish.

Responsibilities

• Engage stakeholders and business units to gather, analyze, and document business requirements, processes, and pain points.
• Develop clear process workflows, use cases, user stories, user guides, and functional specifications.
• Conduct Proof of Concept (POC) initiatives using system to validate business solutions and processes.
• Facilitate collaboration between business and technical teams, ensuring requirements are clearly understood and effectively implemented.
• Support change management activities to drive successful adoption of new systems and processes.

Requirements

• Min Diploma/ Degree in IT or Business Management/ Analytics
• Min 1 to 3 years of relevant experience in Business Analysis
• Candidates without experience are welcome to apply as training will be provided

All qualified applicants, please send in your resume to:

triciagoh@recruitexpress.com.sg

Tricia Celestine Goh (R1981653)

Recruit Express Pte Ltd | Company Reg. No. 199601303W | EA License Number: 99C4599

The Cyber Security Specialist will architect, design, review, and implement cybersecurity solutions for large-scale projects and critical infrastructure. The role involves ensuring compliance with cybersecurity standards, monitoring and mitigating security risks, and developing cloud security architectures.

The specialist will also conduct vulnerability assessments, security audits, and provide consultancy on security vulnerabilities and risks.

Requirements:

• Lead and support cybersecurity implementation for large-scale projects and critical infrastructure systems.
• Ensure compliance with critical infrastructure cybersecurity standards (e.g., KINS/CII).
• Develop and implement cloud security architectures and solutions.
• Monitor, research, and analyse security risks to mitigate threats and attacks.
• Conduct vulnerability assessments, penetration testing (VAPT), and provide remediation recommendations.
• Perform system hardening, patch management, and secure configuration practices.
• Prepare and maintain security documentation (e.g., design documents, risk assessments, compliance reports).
• Provide guidelines for coding, key management, hardening, patch management, backup management, and incident management.
• Familiarity with public cloud infrastructures (Azure, AWS, GCP, Huawei).

Qualifications:

• Proven experience in large-scale projects, preferably in government or critical infrastructure environments.
• Strong familiarity with cybersecurity frameworks and standards (e.g., IM8, CIS, NIST).
• Hands-on experience in security architecture, system hardening, vulnerability assessment, and network/system security controls.
• Experience with network security, firewalls, VPNs, and identity and access control.
• Experience in system integration or project delivery environments.
• Strong documentation, communication, and stakeholder management skills.
• Relevant certifications (e.g., CISSP, CISM, CEH, CompTIA Security+) are a plus.

Reachfield Security (Grade “A” agency) specialises in supplying security manpower to Schools, Factories, Shopping Centres, Museums, libraries, etc.

Security Officer

Location: Braddell

Timing: 630-630

////////////////////////////////////////////////////////////////////////

1. Works in a school/ office building environment.

2. Good customer service skills; able to communicate with people of all levels.

3. 12hrs-shift (Fixed shift, no need to rotate)

4. PC knowledge required.

5. Job duties include traffic control, issue visitors/ contractor passes, patrolling, protecting clients’ premises and access control, etc.

6. Possess valid security license, completed WSQ RTT.

Office:10 Anson Road, #26-09 International Plaza

(Near Tanjong Pagar MRT Exit C)

Contact Us

Mobile: 8805 2291 Office: 6324 0648

You may fill in the application form online thru below link.

https://rss.armfort.com/direct... 

Do let us know once you submit the application online

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage.
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines.

Job Summary

The IT Security Lead manages end-to-end security governance, compliance, and operations for mission-critical systems, collaborating with cross-functional teams and external auditors to ensure adherence to government security policies.

Responsibilities

Day 1 – Project / Implementation Security

• Define and implement system security architecture aligned with Singapore Government policies
• Review application, middleware, infrastructure, and platform designs for security compliance
• Conduct threat modeling and risk assessments, mapping risks to mitigating controls
• Translate policy requirements into actionable technical controls across technology stacks
• Ensure compliance with IM8, Whole-of-Government security requirements, and PDPA where applicable
• Establish and oversee cybersecurity governance across infrastructure, application, and project teams
• Prepare and maintain documentation including Security Risk Assessments, Vulnerability Assessments, Penetration Testing reports, and security hardening baselines
• Partner with software teams to enforce secure coding standards and DevSecOps practices
• Integrate and govern SAST/DAST, dependency/SCA scanning, and container image scanning within CI/CD pipelines
• Review and triage security tool findings, driving remediation and risk acceptance decisions
• Provide guidance on API security, token/secret management, and secure service-to-service communication
• Plan, coordinate, and manage vulnerability and penetration testing engagements and vendors
• Track remediation progress to closure and document residual risks and risk acceptance
• Support security clearances and go-live certifications
• Review and approve OS, middleware, database, Kubernetes/container security, API gateway, WAF, rate-limiting, and authentication configurations

Day 2 – Operations / Production Security

• Lead security incident investigations, containment, and recovery efforts
• Perform root cause analysis and define corrective and preventive actions
• Coordinate with Government SOC and stakeholders; contribute to and refine incident response playbooks
• Communicate security incidents clearly to technical and non-technical audiences
• Oversee continuous vulnerability monitoring and posture management
• Track patch and configuration compliance across infrastructure, middleware, applications, and containers
• Provide risk assessments and compensating controls for deferred patches
• Review and tune alerts, detections, and dashboards in SIEM and related tools
• Ensure monitoring coverage for critical systems and high-value assets
• Support internal and external audits, evidence collection, and closure of audit findings
• Prepare and present security posture, metrics, and trend reports to management
• Maintain risk registers and mitigation plans with up-to-date security documentation
• Communicate security assessments and findings effectively to varied stakeholders
• Oversee and periodically review RBAC, MFA, Privileged Access Management, and joiner/mover/leaver processes
• Ensure least privilege access, segregation of duties, and periodic access recertifications
• Support incident response handling, log analysis, and activity reviews
• Drive continuous improvement across identify, protect, detect, respond, and recover functions

Required competencies and certifications

• Degree in Computer Science, Cybersecurity, Information Security, or equivalent
• 8–12 years of IT experience including at least 5 years as a Security Lead or Security Architect
• Proven experience in Singapore Government IT projects and IM8/government security compliance
• Hands-on experience with Kubernetes/Docker security, API security, Identity & Access Management (IAM), and security tools (SAST/DAST/SIEM) integrated with CI/CD

Preferred competencies and qualifications

• Certifications such as CISSP, CISM, CISA, CEH, GIAC (e.g., GSEC, GCIA, GCIH, GCSA)
• AWS or Azure Security certifications

5 day week @ AMK area

Maestro HR
damien lee tian hong
R1106726
16C8462

Reachfield Security (Grade “A” agency) specialises in supplying security manpower to Schools, Factories, Shopping Centres, Museums, libraries, etc.

Security Officer

Location: Braddell ( School ) , Buona Vista ( Office Building )

Timing: 630-630, 7-7

////////////////////////////////////////////////////////////////////////

1. Works in a school/ office building environment.

2. Good customer service skills; able to communicate with people of all levels.

3. 12hrs-shift (Fixed shift, no need to rotate)

4. PC knowledge required.

5. Job duties include traffic control, issue visitors/ contractor passes, patrolling, protecting clients’ premises and access control, etc.

6. Possess valid security license, completed WSQ RTT.

Office:10 Anson Road, #26-09 International Plaza

(Near Tanjong Pagar MRT Exit C)

Contact Us

Mobile: 8805 2291 Office: 6324 0648

You may fill in the application form online thru below link.

https://rss.armfort.com/direct... 

Do let us know once you submit the application online