Total 6 human resources job vacancies in Legal / Public / Security category

Job Overview

We are looking for a proactive Information Security professional to support enterprise IT security operations and infrastructureinitiatives across regional environments. This role will focus on strengthening cybersecurity operations, monitoring security threats, supporting incident response activities, and maintaining secure network infrastructure within a multinational environment.

The ideal candidate should possess hands-on experience in networking and cybersecurity administration, with the ability to work independently while supporting regional security initiatives.

Key Responsibilities

Cybersecurity Operations & Monitoring

• Monitor security alerts and events through SIEM and security monitoring platforms
• Investigate and respond to cybersecurity incidents and security breaches
• Support vulnerability assessment and remediation activities
• Assist in implementing endpoint and network security solutions across regional offices

Infrastructure & Network Support

• Support daily administration of enterprise IT and network infrastructure
• Maintain network and security configurations to ensure system reliability and compliance
• Troubleshoot infrastructure and connectivity issues across corporate environments
• Participate in infrastructure enhancement and security improvement projects

Project & Regional Support

• Support regional IT security initiatives and deployment activities
• Work closely with internal stakeholders across different countries and teams
• Assist with documentation, operational support, and other assigned tasks
• Occasional regional travel may be required for project implementation or support activities

Requirements

• Diploma or Degree in Information Technology, Cyber Security, Networking, or related discipline
• Minimum 3 to 5 years of experience in network administration or cybersecurity operations
• Familiarity with SIEM monitoring, incident response, and vulnerability management
• Good troubleshooting and problem-solving skills in network and security environments
• Able to work effectively both independently and within a team environment
• Comfortable communicating with users and stakeholders across different backgrounds and regions
• Strong sense of responsibility with the ability to work in a fast-paced environment
• Good verbal and written communication skills in English

Please send your detailed resume in MS Word format to resume@goldtecHRs.com with

• Education Level
• Working experiences
• Each employment background
• Reason for leaving each employment
• Last drawn salary
• Expected salary
• Date of availability

Job Summary

The IT Security Lead manages end-to-end security governance, compliance, and operations for mission-critical systems, collaborating with cross-functional teams and external auditors to ensure adherence to government security policies.

Responsibilities

Day 1 – Project / Implementation Security

• Define and implement system security architecture aligned with Singapore Government policies
• Review application, middleware, infrastructure, and platform designs for security compliance
• Conduct threat modeling and risk assessments, mapping risks to mitigating controls
• Translate policy requirements into actionable technical controls across technology stacks
• Ensure compliance with IM8, Whole-of-Government security requirements, and PDPA where applicable
• Establish and oversee cybersecurity governance across infrastructure, application, and project teams
• Prepare and maintain documentation including Security Risk Assessments, Vulnerability Assessments, Penetration Testing reports, and security hardening baselines
• Partner with software teams to enforce secure coding standards and DevSecOps practices
• Integrate and govern SAST/DAST, dependency/SCA scanning, and container image scanning within CI/CD pipelines
• Review and triage security tool findings, driving remediation and risk acceptance decisions
• Provide guidance on API security, token/secret management, and secure service-to-service communication
• Plan, coordinate, and manage vulnerability and penetration testing engagements and vendors
• Track remediation progress to closure and document residual risks and risk acceptance
• Support security clearances and go-live certifications
• Review and approve OS, middleware, database, Kubernetes/container security, API gateway, WAF, rate-limiting, and authentication configurations

Day 2 – Operations / Production Security

• Lead security incident investigations, containment, and recovery efforts
• Perform root cause analysis and define corrective and preventive actions
• Coordinate with Government SOC and stakeholders; contribute to and refine incident response playbooks
• Communicate security incidents clearly to technical and non-technical audiences
• Oversee continuous vulnerability monitoring and posture management
• Track patch and configuration compliance across infrastructure, middleware, applications, and containers
• Provide risk assessments and compensating controls for deferred patches
• Review and tune alerts, detections, and dashboards in SIEM and related tools
• Ensure monitoring coverage for critical systems and high-value assets
• Support internal and external audits, evidence collection, and closure of audit findings
• Prepare and present security posture, metrics, and trend reports to management
• Maintain risk registers and mitigation plans with up-to-date security documentation
• Communicate security assessments and findings effectively to varied stakeholders
• Oversee and periodically review RBAC, MFA, Privileged Access Management, and joiner/mover/leaver processes
• Ensure least privilege access, segregation of duties, and periodic access recertifications
• Support incident response handling, log analysis, and activity reviews
• Drive continuous improvement across identify, protect, detect, respond, and recover functions

Required competencies and certifications

• Degree in Computer Science, Cybersecurity, Information Security, or equivalent
• 8–12 years of IT experience including at least 5 years as a Security Lead or Security Architect
• Proven experience in Singapore Government IT projects and IM8/government security compliance
• Hands-on experience with Kubernetes/Docker security, API security, Identity & Access Management (IAM), and security tools (SAST/DAST/SIEM) integrated with CI/CD

Preferred competencies and qualifications

• Certifications such as CISSP, CISM, CISA, CEH, GIAC (e.g., GSEC, GCIA, GCIH, GCSA)
• AWS or Azure Security certifications

5 day week @ AMK area

Maestro HR
damien lee tian hong
R1106726
16C8462

About the job

This is a senior level, client development role for an individual who has built their career at the intersection of enterprise technology and government. You may have operated within government at a senior level, or spent significant time partnering with and selling into public sector organisations. Either way, you bring established relationships, credibility, and a deep understanding of how public sector institutions make decisions — insight that only comes from genuine, long-term engagement within that environment.

You will be responsible for building and leading our government portfolio in Singapore. This is a true hunting role, focused on originating new opportunities and establishing the right relationships at the most senior levels of the Singapore government ecosystem. You will play a critical role across the full deal lifecycle, from the first conversation through to close. That means shaping opportunity strategy, contributing meaningfully to bids, and taking genuine ownership of how we engage at every stage of the pursuit, not just at the beginning and the end.

The individuals who represent RGP at this level are recognized in their market, known for the quality of their thinking, the strength of their relationships, and the credibility they bring to every client conversation.

The Senior Director, Client Development – Public Sector will play a pivotal role in driving market revenue through new business development, as well as the management and expansion of key client relationships. In keeping with our entrepreneurial culture, this role offers the opportunity to build and own a client portfolio while working closely with colleagues to deliver against strategic growth objectives.

What you will work on

• Build and develop a pipeline of opportunities across Singapore Government agencies, statutory boards and government-linked organizations, originating new opportunities and expanding RGP’s presence in the market.
• Lead the growth and development of RGP’s Singapore government portfolio, driving revenue growth and strengthening our market position against clearly defined performance targets.
• Develop and sustain trusted relationships with senior decision-makers including ministry officials, CIOs, CDOs, agency heads, technology leaders and procurement stakeholders to deepen account penetration and support sales growth.
• Act as a trusted advisor to clients, articulating RGP’s business model, risk management approach and client-specific value proposition, and translating these into meaningful business outcomes.
• Lead commercial conversations with a strong understanding of the Singapore public sector landscape, including government budget cycles, GovTech frameworks and ICT procurement processes.
• Engage clients with curiosity and discipline, focusing first on understanding the problem before shaping solutions, and working closely with GTM, presales and delivery teams to translate client needs into well-designed proposals.
• Contribute to bids and tender responses, including drafting and reviewing proposal content to ensure submissions are clear, compelling and directly address client requirements.
• Represent RGP in the Singapore market through participation in government forums, industry events and technology partner engagements.
• Maintain disciplined pipeline management, including accurate forecasting, CRM updates, and account planning aligned with regional and enterprise growth objectives.
• Foster strong cross-functional collaboration and contribute to RGP’s market positioning through client insights, thought leadership and identification of emerging commercial opportunities in Singapore.

WHAT YOU WILL BRING

• A minimum of 15 years’ experience working at a senior level with the Singapore public sector, either within government or alongside it, with a proven track record of winning and growing significant engagements across ministries, agencies and statutory boards.
• A trusted advisor who operates at the intersection of strategic thinking and practical delivery, able to sit with complexity, reframe problems and help senior government leaders see a clear path forward. You are sought out for your judgement, not just your network.
• Deep familiarity with how Singapore Government agencies are structured, how technology and transformation decisions are made and approved, and how procurement works in practice.
• Established executive-level relationships across key ministries, agencies and statutory boards, built through credibility, consistency and long-term engagement.
• Strong experience navigating GovTech frameworks, government ICT procurement processes and public sector budget cycles.
• Executive-level experience working with enterprise technology platforms such as ServiceNow, SAP, Salesforce, Oracle, Workday or comparable solutions. You do not need to be technically deep, but you understand the business value these platforms deliver and why government organizations invest in them.
• Strong commercial and business acumen, with the ability to engage senior leaders on strategic priorities, organizational challenges and the broader economic and operational context shaping their decisions.
• The ability to translate complex client challenges into clear direction for delivery and GTM teams, ensuring solutions are shaped with the right strategic context from the outset.
• A clear understanding of how to position RGP’s capabilities across consulting, technology, talent, risk and business transformation, and the credibility to articulate that value to sophisticated government buyers.
• Experience contributing to formal government bids and tender responses, including developing content covering approach, methodology and delivery capability.
• Strong written and verbal communication — clear, precise and professional, without unnecessary corporate language.
• A proven ability to originate opportunities, build and advance a sales pipeline, manage senior client relationships and deliver measurable revenue outcomes.
• Comfortable operating with autonomy in a lean, entrepreneurial environment where you carry real accountability for growth and client outcomes.

WHAT SUCCESS LOOKS LIKE

In the first 6 to 12 months:

• Establish yourself as a credible and visible RGP presence in the Singapore government market, building active relationships across priority ministries, agencies and statutory boards.
• Develop and socialize a clear, executable Singapore go-to-market strategy aligned to RGP’s strengths, the competitive landscape and the highest-value opportunities across the public sector.
• Build a qualified opportunity pipeline based on genuine client engagement and real demand, not just market mapping.
• Engage the GTM and presales teams on two to three substantive pursuits with a credible path to close.
• Begin shaping RGP’s positioning in the Singapore government market through participation in forums, industry events and strategic conversations that build long-term credibility and trust.
• Provide the Singapore and APAC leadership teams with clear visibility into the opportunity landscape, key relationships and where RGP has the strongest right to win.
• Build strong internal partnerships across RGP Singapore and APAC teams — sales, consulting, delivery and talent, ensuring alignment and effective collaboration to accelerate market impact.
• Establish RGP as a credible and capable ServiceNow partner within the Singapore government ecosystem, building early relationships, visibility and pipeline across priority agencies.

Job Overview

We are seeking a cybersecurity professional to support technology risk management, security operations, and incident response within a regulated enterprise environment. This role combines governance and compliance responsibilities with hands-on blue team security operations, ensuring systems and data remain secure, resilient, and compliant with regulatory expectations.

The ideal candidate is comfortable operating in fast-paced environments, balancing risk assessment, operational monitoring, and incident handling.

Key Responsibilities

Technology Risk and Regulatory Compliance

• Perform technology risk assessments aligned with business objectives and regional regulatory requirements
• Maintain and update security policies, SOPs, risk registers, and governance documentation
• Conduct third-party and regulatory compliance assessments
• Support certification, audit, and compliance activities, including remediation of findings

Security Operations and Monitoring

• Monitor network traffic, systems, and applications for suspicious behavior and potential security incidents
• Identify vulnerabilities and weaknesses across infrastructure, systems, and applications
• Perform security control reviews covering areas such as email security, endpoint protection, applications, and data security
• Deploy, configure, and manage security technologies including endpoint protection, IAM, PAM, XDR, and SIEM platforms
• Execute threat detection, vulnerability management, security policy enforcement, and continuous control monitoring
• Develop and implement response actions to contain and mitigate security incidents
• Collaborate with technical teams and stakeholders to coordinate remediation activities

Incident Response and Forensics

• Lead and support the full incident response lifecycle including detection, triage, containment, eradication, and recovery
• Handle escalated security incidents and prepare incident reports detailing root cause, forensic findings, and mitigation recommendations
• Conduct forensic analysis of endpoints, logs, and network traffic to determine impact and scope
• Coordinate response efforts with internal stakeholders and external partners during major incidents
• Develop, maintain, and enhance incident response playbooks and reporting templates

Requirements

Experience and Qualifications

• 3 to 5 years of experience in technology risk, security operations, or blue team roles
• Diploma or Degree in Information Technology, Cybersecurity, or a related discipline
• Proficiency in both English and Mandarin to support collaboration with Mandarin-speaking stakeholders

Technical and Domain Expertise

• Strong knowledge of technology risk management and defensive security strategies
• Hands-on experience with endpoint security, IAM, PAM, and access control solutions
• Solid understanding of security frameworks, layered defense concepts, and monitoring tools such as SIEM
• Familiarity with endpoint, VPN, and data protection technologies
• Experience with vulnerability management, security configuration, and automation
• Digital Forensics and Incident Response (DFIR) experience is a strong advantage
• Ability to analyze security issues and recommend practical, effective remediation measures

Certifications (Nice to Have)

• CompTIA Security+
• CISSP Relevant vendor or industry security certifications

Please send your detailed resume in MS Word format to resume@goldtecHRs.com with

• Education Level
• Working experiences
• Each employment background
• Reason for leaving each employment
• Last drawn salary
• Expected salary
• Date of availability

Responsibilities
• You will play an instrumental part in securing, implementing, and managing scalable and secure cloud solutions 
• Delivering cutting-edge data centre and cloud services to a broad range of clients.

 Requirements
• Degree in Computer Engineering or equivalent
• At least 4-5 years of relevant working experiences 
• Proven experience in operating AWS cloud environments at scale.
• Strong proficiency with key AWS services such as EC2, S3, VPC, Lambda, RDS, IAM, and CloudWatch.
• Good knowledge of networking concepts, security best practices, and identity management within AWS.
• Excellent problem-solving skills and capability to manage complex cloud projects independently as well as collaboratively.
• Strong communication skills with the ability to articulate technical concepts clearly to diverse audiences.
• Relevant AWS certifications is highly desirable.
• Hands-on experience with automation and configuration management tools including CloudFormation, Terraform, Ansible or similar is an advantage.
• Familiarity with containerisation technologies such as Docker and orchestration platforms like Kubernetes is a Plus. 

Licence no: 12C6060

A renowned international lifestyle retail brand is seeking a Regional Senior Legal Counsel to support its Southeast Asia operations. This role will act as a key legal partner to the business, with a strong focus on marketing, digital, and commercial legal matters, ensuring compliance while enabling business growth across multiple markets.

Key Responsibilities:

• Provide legal advisory on marketing campaigns, PR activations, influencer/KOL engagements, and brand collaborations.
• Oversee compliance in personal data protection, CRM, loyalty programmes, and e-commerce platforms.
• Advise on competition law, anti-trust, and consumer protection matters across regional markets.
• Draft, review, and negotiate contracts covering digital, IT, e-commerce, marketing agencies, and service providers.
• Support digital transformation initiatives, including platform integrations, system implementations, and technology-related agreements.
• Partner closely with marketing, e-commerce, IT, and retail teams to support business initiatives.
• Manage legal risks, disputes, and external counsel across Southeast Asia.
• Drive compliance frameworks, internal policies, and legal governance across the region.

Key Requirements:

• Qualified lawyer with at least 8–10 years of relevant experience.
• Strong experience in marketing, digital, e-commerce, and commercial contracts.
• Solid knowledge of personal data protection, competition law, and consumer regulations.
• Experience supporting CRM, digital platforms, and IT-related legal matters.
• Strong stakeholder management skills with a commercial, business-oriented mindset.
• Ability to work across multiple markets in a fast-paced regional environment.

Interested applicant, kindly submit full-detailed resume to admin@clarist.com.sg

We thank all applicants for writing in. Only shortlisted candidates will be notified.