Total 22 technology development job vacancies in Legal / Public / Security category

Job Overview

We are seeking a cybersecurity professional to support technology risk management, security operations, and incident response within a regulated enterprise environment. This role combines governance and compliance responsibilities with hands-on blue team security operations, ensuring systems and data remain secure, resilient, and compliant with regulatory expectations.

The ideal candidate is comfortable operating in fast-paced environments, balancing risk assessment, operational monitoring, and incident handling.

Key Responsibilities

Technology Risk and Regulatory Compliance

• Perform technology risk assessments aligned with business objectives and regional regulatory requirements
• Maintain and update security policies, SOPs, risk registers, and governance documentation
• Conduct third-party and regulatory compliance assessments
• Support certification, audit, and compliance activities, including remediation of findings

Security Operations and Monitoring

• Monitor network traffic, systems, and applications for suspicious behavior and potential security incidents
• Identify vulnerabilities and weaknesses across infrastructure, systems, and applications
• Perform security control reviews covering areas such as email security, endpoint protection, applications, and data security
• Deploy, configure, and manage security technologies including endpoint protection, IAM, PAM, XDR, and SIEM platforms
• Execute threat detection, vulnerability management, security policy enforcement, and continuous control monitoring
• Develop and implement response actions to contain and mitigate security incidents
• Collaborate with technical teams and stakeholders to coordinate remediation activities

Incident Response and Forensics

• Lead and support the full incident response lifecycle including detection, triage, containment, eradication, and recovery
• Handle escalated security incidents and prepare incident reports detailing root cause, forensic findings, and mitigation recommendations
• Conduct forensic analysis of endpoints, logs, and network traffic to determine impact and scope
• Coordinate response efforts with internal stakeholders and external partners during major incidents
• Develop, maintain, and enhance incident response playbooks and reporting templates

Requirements

Experience and Qualifications

• 3 to 5 years of experience in technology risk, security operations, or blue team roles
• Diploma or Degree in Information Technology, Cybersecurity, or a related discipline
• Proficiency in both English and Mandarin to support collaboration with Mandarin-speaking stakeholders

Technical and Domain Expertise

• Strong knowledge of technology risk management and defensive security strategies
• Hands-on experience with endpoint security, IAM, PAM, and access control solutions
• Solid understanding of security frameworks, layered defense concepts, and monitoring tools such as SIEM
• Familiarity with endpoint, VPN, and data protection technologies
• Experience with vulnerability management, security configuration, and automation
• Digital Forensics and Incident Response (DFIR) experience is a strong advantage
• Ability to analyze security issues and recommend practical, effective remediation measures

Certifications (Nice to Have)

• CompTIA Security+
• CISSP Relevant vendor or industry security certifications

Please send your detailed resume in MS Word format to resume@goldtecHRs.com with

• Education Level
• Working experiences
• Each employment background
• Reason for leaving each employment
• Last drawn salary
• Expected salary
• Date of availability

Role: Head of Cyber Security / Security Engineering Lead

Company
A Singapore-based digital payments provider regulated by the Monetary Authority of Singapore (MAS) as a Major Payment Institution, offering Digital Payment Token services and cross-border payments.

Operates a P2B2C model, providing end-to-end infrastructure that enables businesses to enter and scale in the digital asset space with strong emphasis on security, compliance, and reliability.

Through its broader ecosystem and platform, it supports services such as OTC trading, fiat payments, digital asset custody, and prime brokerage.

Overview
Lead security engineering, operations, and technology risk functions. Responsible for defining and executing cyber defense strategy, ensuring compliance with regulatory standards, and driving certification initiatives (e.g. SOC 2, PCI DSS).

Key Responsibilities

Security Architecture & Engineering

• Define security architecture, IAM strategy, and data/application security controls
• Establish detection engineering standards across cloud and enterprise environments

Security Operations & Incident Response

• Oversee MDR, threat intelligence, vulnerability management, and red/purple team exercises
• Lead incident response and strengthen detection and recovery capabilities

Risk, Compliance & Governance

• Maintain security policies and frameworks
• Ensure compliance with regulatory and industry standards (MAS TRM, HKMA, PDPA, GDPR, ISO 27001, SOC 2, PCI DSS)
• Manage audits and third-party risk

Strategy & Leadership

• Develop and execute multi-year security roadmap
• Optimize tools, vendors, and resource allocation
• Present risk insights and performance metrics to senior leadership

Requirements

• 12+ years in information security, with 5+ years leading security engineering, operations, and GRC teams
• Experience in regulated financial services (banking, payments, fintech)
• Strong background in Tech Risk, Operational Resilience, and Data Privacy
• Hands-on experience with Zero Trust, DevSecOps, cloud security (AWS/OCI), SIEM/EDR/SOAR, IAM/PAM, DLP
• Proven incident leadership and crisis management experience
• Strong stakeholder management and ability to translate technical risk into business impact

Nice-to-Have

• CISSP, CISM, CCISO, or CCSP
• ISO 27001 Lead Implementer/Auditor
• SOC 2 program leadership
• PCI DSS experience (scoping, segmentation, audits)
• Data protection certifications (e.g. CIPP/E, CIPM)

Be a Part of Something BIG

We create great technology that can change the future, and we're looking for people to be part of our digital and 5G journey. If you like to work in a dynamic, leading communications technology group to deliver innovations and excellence across the region, come join our digital, software engineering, data and cyber security teams!

The Group Security Architect is a visionary leader responsible for shaping the Singtel Group’s security architecture strategy and embedding “secure-by-design” principles across all technology domains. Working closely with the Group Enterprise Architect, Security Architects from Operating Companies, this role defines the Group Security Guardrails that underpin our Reference Architecture and technology blueprints.

As a trusted advisor and design authority, the Group Security Architect ensures that emerging technologies are securely adopted at scale across the Group. The role bridges business, technology, and security strategy, driving alignment between innovation and resilience while strengthening architectural consistency across OpCos.

This position demands both technical depth and strategic foresight and someone who can anticipate technology trends, translate them into actionable security patterns, and influence decision-making at the Group level.

Apply now, and ignite our digital future together.

Make an Impact by

Strategic Leadership & Vision

• Define and maintain the Group Security Architecture Vision and roadmap, ensuring alignment with Group Enterprise Architecture and business strategy.

• Anticipate emerging technology shifts and translate them into forward-looking security design principles and guardrails.

• Support Group’s technology modernisation initiatives by embedding “secure-by-design” and “zero-trust” concepts into enterprise blueprints.

Security Guardrails & Reference Architecture

• Co-develop with the Group Enterprise Architect the Group Security Guardrails to guide technology adoption, integration, and operations across OpCos.

• Maintain the Security Reference Architecture (SRA) for major technology domains

• Ensure alignment with regulatory frameworks

• Translate architectural blueprints into adoptable and actionable implementation guidance for solution architects and engineering teams.

Security Technology Stack Alignment

• Drive Group-wide alignment of the security technology stack across OpCos, ensuring rationalisation, interoperability, and consistent adoption of Group-endorsed platforms.

• Lead the monthly Security Technology Stack Alignment Forum, bringing together OpCo security and architecture leads to review current deployments, share lessons learned, and define forward plans for convergence.
• Identify opportunities for joint initiatives, shared services, and Group-level optimisation across domains
• Collaborate with Group Procurement and Technology Strategy teams to align vendor selection, licensing models, and roadmap integration.

Advanced Cyber Technology Exploration

• Participate in the evaluation and assessment of advanced technologies such as areas related to AI (e.g., GenAI, LLMs), quantum computing, and deepfakes.

• Participate in pilots and research programs to test technical readiness and applicability.

• Identify opportunities to integrate advanced technologies into the Group’s cyber resilience roadmap.

Architecture Review Board (ARB) & Governance

• Represent Group Cyber in the Group Architecture Review Board, providing authoritative guidance on cybersecurity controls, technology patterns, and architecture deviations.

• Define security architecture review processes, ensuring risk-based and business-aligned assessments.

• Develop reusable security architecture patterns and decision frameworks to accelerate secure solution design.

Design Assurance & Advisory

• Provide design assurance for strategic Group programs and high impact initiatives

• Partner with OpCo CISOs and architects to ensure consistent implementation of approved guardrails and architectural patterns.

• Act as a trusted advisor to solution architects, engineers, and project teams, helping balance innovation with security and compliance.

 Budget & Resource Stewardship

• Assist in planning and managing budgets for emerging tech-related cyber programs.

• Recommend resource allocation strategies to optimize cost, scale, and talent effectiveness.

Stakeholder Engagement & Influence

• Partner with the Group Enterprise Architecture, OpCo Architecture and Security Architecture Teams to ensure alignment of blueprints and technology choices.

• Contribute to cross-functional governance

• Collaborate with architects and technical leads across OpCos on security-by-design, architecture assurance, and emerging security paradigms.

• Liaise with internal stakeholders to align cybersecurity strategy with enterprise-wide goals.

• Foster alignment and awareness of cybersecurity priorities across the Group.

Skills for Succes

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.
• 10–15 years in enterprise or security architecture, with at least 5 years in Group-level or large multi-entity governance.
• Demonstrated experience in managing and delivering large-scale cybersecurity projects and design architectures.
• Strong understanding of cybersecurity frameworks, standards, and regulations (e.g., NIST, ISO 27001, GDPR, etc.).
• Familiarity with emerging cyber threats and innovative defenses, particularly in advanced technology areas.
• Security architecture frameworks (SABSA, TOGAF, NIST), Zero Trust, Cloud (AWS/Azure/GCP), IAM, Data Security, Network Segmentation, AI Security, and Quantum.
• Strong understanding of telco, cloud, and enterprise IT ecosystems.
• Proven ability to translate complex technical concepts into board- and business-friendly narratives.
• Certifications preferred: SABSA, TOGAF, CISSP, CISM, or CCSP.
• Experience representing security architecture in cross-functional review boards and engaging senior stakeholders.
• Exceptional leadership, collaboration, and team management skills.
• Ability to work effectively with diverse stakeholders, including subsidiaries in a conglomerate or multi-subsidiary environment.
• Strong analytical, decision-making, and problem-solving skills, especially in dynamic and high-pressure situations.
• Excellent communication and interpersonal abilities, with a proven track record of engaging and influencing stakeholders at all levels.
• Strong capacity to present complex ideas and strategies in an accessible manner for varied audiences.

Rewards that Go Beyond

• Flexible work arrangements
• Full suite of health and wellness benefits 
• Ongoing training and development programs 
• Internal mobility opportunities

Are you ready to say hello to BIG Possibilities?

Take the leap with Singtel to unlock new opportunities and accelerate your growth. Apply now and start your empowering career!

We are committed to a safe and healthy environment for our employees & customers and will require all prospective employees to be fully vaccinated.

We are seeking a Legal & Contracts Assistant to support our legal and commercial teams in Singapore. The role will focus on reviewing and managing commercial contracts related to international trading activities, as well as supporting domestic raw material procurement contracts in China. The candidate will assist in ensuring contractual compliance with relevant legal and regulatory frameworks.

Key Responsibilities

• Review, draft, and manage commercial contracts related to international trading activities.
• Assist in reviewing and managing domestic raw material procurement contracts in China.
• Support the legal team in contract preparation, negotiation, and documentation.
• Ensure contracts comply with Singapore law and applicable regulatory requirements.
• Provide legal and contractual support to internal business and trading teams.
• Review and interpret standard trading terms including FOB, CIF, and other Incoterms.
• Monitor contractual obligations and identify potential legal and commercial risks.
• Liaise with external legal counsel in Singapore and China when required.
• Maintain proper documentation and contract records.

Requirements

• Diploma or Bachelor’s degree in Law, Legal Studies, or a related discipline.
• Minimum 1 year of relevant experience in legal, contracts administration, or trading-related roles.
• Familiarity with international trading terms (FOB, CIF, Incoterms).
• Basic knowledge of Singapore contract law is required.
• Familiarity with PRC contract law or experience handling China domestic contracts is an advantage.
• Strong attention to detail with good analytical and organizational skills.
• Ability to work independently and support cross-functional teams.
• Proficiency in both Mandarin and English (to liaise with Chinese-speaking stakeholders and review Chinese contracts).

Preferred Qualifications

• Experience in commodity trading, energy, shipping, or logistics industries.
• Experience reviewing commercial trading contracts and procurement agreements.

Job Summary

Lead the development and deployment of technology-enabled security solutions across Asia, supporting the transformation of traditional guarding services into integrated and scalable service models. This Singapore-based role partners closely with operations, commercial, and leadership teams to strengthen service delivery, operational efficiency, and client solutions.

Responsibilities

• Lead the regional strategy and roadmap for security technology transformation across Asia.
• Drive the shift from traditional guarding to technology-supported hybrid security service models.
• Oversee the implementation of command centres, remote monitoring platforms, surveillance systems, and integrated security solutions across client sites and markets.
• Partner with operations teams to embed technology into service delivery.
• Support commercial teams on strategic bids and client solutions involving security technology.
• Manage relationships with vendors, system integrators, and technology partners.
• Track implementation progress, operational impact, and continuous improvement opportunities.

Requirements

• Degree in Engineering, Technology, Information Systems, Security Technology, or related field.
• Strong experience in security technology, integrated security systems, or technology-enabled operational services.
• Proven experience leading large-scale transformation or implementation programmes.
• Experience working across regional or multi-country environments.
• Strong stakeholder management and cross-functional collaboration skills.
• Good understanding of physical security operations and technology deployment.

Skills

Security Technology Transformation, Integrated Security Systems, Remote Monitoring, Command Centre Operations, Stakeholder Management, Vendor Management, Regional Programme Management, Operational Integration, Commercial Support

Applicants should have experience in the deployment of security technology, regional programme leadership, and cross-functional stakeholder management.

Job Descriptions:

• Dealing with requests and complaints from the public
• Overall in-charge and responsible for the internal and external publication and communication issue
• Working closely with all contractors and take proactive measures in mitigating all complaints arising from the construction activities
• Maintaining and developing good relationships with those resident
• To prepare and compile those requests received from the public
• Handle general admin tasks (phone calls, office stationery, office maintenance, attendance checking on the time management system)
• Prepare and manage staff and project petty cash claim
• Provide clerical & administration support to project team
• Filing and maintain up-to-date file records to enable quick retrieval

Requirements:

• Diploma in Public Relations or equivalent
• Min. 2 years relevant PRO experience in building Construction Industry
• Excellent communication , interpersonal and writing skills
• Able to multitask, good organizational and time management skills
• Able to start work on short notice

Job Purpose
This role leads the Governance, Risk, and Compliance functions. The role ensures that security controls are well‑designed, risks are understood and managed, and the company maintains compliance with industry, customer, and regulatory requirements. This leader partners closely with IT, operations, legal, procurement, and third‑party partners to embed security into daily business processes.

Roles and Responsibilities
IT Security Governance and Policy Management

• Develop, maintain, and enforce security policies, standards,and procedures aligned with business needs and regulatory requirements.
• Establish a governance framework that integrates security intologistics operations, including forwarding systems, warehouse systems, transportation management systems, fleet technologies, IoT devices, and corporate applications.
• Lead security awareness programs tailored to both office and field personnel.

Risk Management

• Own the enterprise security risk management program, including risk identification, assessment, scoring, treatment planning, and reporting.
• Conduct regular risk assessments and maintain the risk register.
• Plan, manage and report mitigation actions.
• Define risk responses (Mitigate/Transfer/Accept) and manage treatment plans.
• Monitor Key Risk Indicators (KRIs) and analyze risk trends.
• Prepare risk heatmaps and executive risk reports.
• Support customer/regulatory assessments with risk documentation.
• Monitor emerging threats and regulatory changes affecting supply chain and logistics operations.

Compliance and Audit

• Manage compliance with frameworks such as ISO 27001, SOC 2,NIST CSF, GDPR, PDPA, CTPAT, PCI DSS (if applicable), and customer‑mandated security requirements.
• Manage internal and external audits, ensuring evidencereadiness and timely remediation of findings.
• Maintain compliance documentation repositories, controllibraries, and audit trails to ensure regulatory adherence.
• Evaluate regulatory changes and update internal policies.
• Support incident response ensuring compliance obligations.
• Coordinate evidence collection for customer/governmentassessments.

Third Party and Vendor Security

• Lead the third‑party risk management program, including duediligence, contract reviews, and ongoing monitoring.
• Evaluate security posture of logistics partners, carriers, technology vendors, and SaaS providers.
• Work with procurement and legal to embed security requirements into vendor agreements.
• Conduct third‑party security risk assessments.

Incident Preparedness and Response Governance

• Develop and maintain incident response plans, playbooks, andcommunication protocols and ensure compliance.
• Coordinate tabletop exercises with IT, operations, and executive leadership.
• Ensure post‑incident reviews translate into updated controls and governance improvements.

Control Design and Assurance

• Oversee the design, implementation, and testing of security controls across IT and operational technology environments.
• Partner with infrastructure, application, and operations teams to ensure controls are practical and effective in high availability logistics environments.
• Track control performance metrics and drive continuous improvement.

Reporting and Stakeholder Engagement

• Deliver regular reports to executive leadership on risk posture, compliance status, and key initiatives.
• Serve as the primary point of contact for customer security questionnaires and supply chain security assessments.
• Communicate complex security topics in clear, business aligned language.

Requirements

• Bachelor’s degree in information security, Computer Science or related discipline.
• Certifications preferred: CISSP, CISM, CRISC, CISA.
• 7+ years in IT Security, GRC or related roles.
• Strong understanding of security frameworks (ISO 27001, NIST CSF, SOC2).
• Knowledge of data privacy regulations (GDPR, PDPA) and cross-border logistics considerations.
• Experience managing audits, compliance programs, and risk assessments.
• Familiarity with logistics & supply chain environments.
• Ability to collaborate with cross‑functional teams and influence without authority.
• Excellent communication, documentation, and stakeholder‑management skills.