Total 113 security job vacancies in Others category

Position Overview

We are seeking an Associate Cybersecurity GRC Consultant to join our consulting practice. The primary focus of this role is delivering cybersecurity governance, risk, and compliance (GRC) implementation projects across a range of frameworks (e.g., ISO 27001, CSA Cyber Trust Mark, Cyber Essentials, Security by Design) for clients across diverse industries.

As a secondary function, the consultant will support IT audit and assessment engagements across various frameworks, including ITGC audits, ISO 27001 audits, and Cyber Trust Mark assessments. The successful candidate will work closely with clients to identify security risks, develop mitigation strategies, and implement effective solutions to safeguard their information systems.

Key Responsibilities

• Support cybersecurity GRC implementation projectsend-to-end across a range of frameworks (e.g., ISO 27001, CSA Cyber Trust Mark,Cyber Essentials, Security by Design), including gap analysis, risk assessment, documentation, controls implementation, consultancy, and audit readiness/preparedness.
• Perform cybersecurity risk assessments and develop risk treatment plans aligned to client business context.
• Participate in reviewing, developing and/or enhancing client’s documentation, covering information security policies, procedures, and governance frameworks.
• Support clients in establishing security governance structures, including organization structure, practices and procedures.
• Participate in preparing cybersecurity awareness training programmes to client staff.
• Perform audits evaluating design and operating effectiveness of IT controls, from planning and execution through to draft reporting.
• Prepare audit working papers, document findings, and draft actionable recommendations.
• Manage client relationships and stakeholder communications throughout engagements.
• Stay current on evolving cybersecurity frameworks, regulations, and threat landscape.
• Contribute to internal methodology, tools, and template development.

Job Requirements

• Diploma or bachelor’s degree in information technology, computer science, cybersecurity, information Systems, or a related field.
• Up to 2 years of experience in cybersecurity, IT audit,GRC, or related consulting; fresh graduates with relevant internships orproject work are encouraged to apply.
• Foundational awareness of ISO 27001, CSA Cyber TrustMark / Cyber Essentials, or similar GRC frameworks, with a willingness todeepen knowledge on the job.
• Basic familiarity with IT general controls concepts (e.g.,access management, change management, IT operations) gained through study or early work experience.
• Exposure to risk assessment methodologies and risk treatment planning, or an aptitude to learn them quickly.
• Interest in developing and reviewing security policies, procedures, and governance documentation, with guidance from senior consultants.
• Strong documentation, analytical, and report-writing skills.
• Effective client-facing communication and presentation skills.
• Proactive, detail-oriented, and willing to manage multiple engagements concurrently.
• Ability to work both independently and as part of a team in a fast-paced consulting environment, and openness to coaching and feedback.

Preferred Qualifications

• Entry-level or foundation certifications such asCompTIA Security+, ISC2 Certified in Cybersecurity (CC), ISO 27001 Lead Implementer, or ISO 27001 Internal Auditor.
• Internship or prior exposure to a consulting or professional services environment.

About us:
Our Company is a leading security agency with a strong reputation for providing top-tier security services to a diverse clientele. We are seeking an experienced and dynamic Business Development Manager to lead our business expansion efforts and drive growth in the security industry.

Job Description:

· As the Business Development Manager, you will play a pivotal role in identifying, acquiring, and nurturing client relationships while expanding the reach and impact of our security company’s vision and objectives. This position offers an exciting opportunity to shape our organization’s future while contributing to our client’s safety and security.

Responsibilities;

Client acquisition:
- Prospect, approach and engage potential clients through various channels, including cold calls, emails, networking, and in-person meetings.
- Build and maintain a robust client and track leads and opportunities.

Proposal Development:
- Develop persuasive proposals and presentations that highlight our agency’s services and expertise.
-Tailor proposals to meet the specific security needs and concerns of clients.
Relationship Building:
- Cultivate and maintain strong long-term relationships with clients proposals to meet the specific security needs and concerns of clients.

Requirements;
- Bachelor's degree in business, marketing, or related field.

-Strong understanding of security services and industry trends.

-Strong understanding of security services and industry trends.

-Exceptional communication, negotiation, and presentation skills.

Today

Hr Finanace job scope for security industry

The core HR & Finance job scope in the Singapore security industry centers on three pillars: regulatory compliance, manpower administration, and financial control. The security sector is highly regulated (MOM, SPF/PRD), so HR–Finance roles carry heavier compliance and documentation duties than in most industries. Below is a structured, detailed breakdown tailored to security agencies in Singapore.

ROLESUMMARY

The IT Security Officer is responsible for ensuring the security, integrity, and compliance of enterprise IT systems and data. The role focuses on implementing security controls, monitoring threats, managing risks, and ensuring adherence to regulatory and governance standards in mission-critical and regulated environments.

KEYRESPONSIBILITIES

· Implement and manageenterprise security controls across infrastructure, applications, and networks.

· Monitor security events,logs, and alerts; identify and respond to potential threats and incidents.

·  Conduct vulnerabilityassessments, risk analysis, and security reviews.

· Manage identity and accesscontrols, including user provisioning and privileged access.

· Ensure timely patching,system hardening, and remediation of security vulnerabilities.

· Develop and enforce securitypolicies, standards, and procedures.

· Support incident response,investigation, and root cause analysis (RCA).

· Ensure compliance withregulatory, audit, and governance requirements.

· Collaborate withinfrastructure, network, and application teams to embed security bestpractices.

· Conduct security awarenessand advisory for internal teams.

· Maintain securitydocumentation, reports, and audit artifacts.

· Support third-party/vendorsecurity assessments and risk management.

TECHNICALSKILLS & TOOLS

· Security Domains: Networksecurity, application security, endpoint security, IAM

· Tools: SIEM (Splunk,QRadar), EDR/XDR, vulnerability scanners (Nessus, Qualys)

· Access Management: ActiveDirectory, Azure AD, IAM tools

· Cloud Security: AWS/Azuresecurity services, cloud posture management

·  Networking & Systems: Firewalls, VPNs, Linux/Windows security fundamentals

·  Standards & Frameworks: ISO 27001, NIST, CIS Benchmarks

SECURITY& COMPLIANCE

· Ensure implementation ofsecurity controls aligned with ISO 27001, NIST, and CIS.

· Perform audits, riskassessments, and compliance reporting.

· Support incident managementand regulatory requirements.

· Ensure data protection andsecure handling of sensitive information.

QUALIFICATIONS& EXPERIENCE

· Degree in IT, Cybersecurity,Computer Science, or related field.

· 4–8 years of experience inIT security or cybersecurity roles.

· Experience in enterprise orregulated environments preferred.

· Strong analytical, incidentresponse, and communication skills.

PREFERRED(GOOD TO HAVE)

· Certifications such asCISSP, CISM, CEH, or equivalent.

· Experience with Security Operations Center (SOC) environments.

· Exposure to Zero Trust architecture and cloud security practices.

· Experience in government or compliance-driven projects.

Job Title: Security Officer

Job Responsibilities

• Ensure the safety and security of students, staff and visitors on the school premises.
• Monitor and control access to the school compound, including checking visitors and vehicles.
• Conduct regular patrols around the campus to ensure the security of building and facilities
• Report any suspicious or unusual activities.
• Respond to incidents, alarms and emergencies promptly and report them to the school management.
• Assist with crowd control and security during school events
• Perform other duties as assigned.

Job Requirements

• Minimum Secondary education.
• Valid Security Officer Licence.
• Prior security experience.
• Able to work shift hours, including evenings or weekends when required.
• Responsible, vigilant and able to handle situations calmly.
• Good communication and interpersonal skills.

The Managed Services Cross Technology Engineer (L3/4) –Network / Security is an advanced engineering role, architecting level, responsiblefor ensuring a managed service is provided to all clients, to ensure that theirIT infrastructure and systems remain operational. This is done throughproactively managing, overseeing, monitoring, investigating, and resolvingescalated technical incidents and problems to ensure the restoration of theseservices to the clients.

The primary objective of this role is to understand, design,implement, and maintain the enterprise network's defensive architecture toprotect data and infrastructure from sophisticated threats. This involvesacting as the highest-tier escalation point for complex security incidents anddefining the strategic roadmap for firewalls, segmentation, and Zero Trustmodels. This role also proactively review all client requests or tickets andapply technical process knowledge to provide the clients with almost immediateresolution without breaching service level agreement (SLA).

The Managed Services Cross Technology Engineer (L3/4)focuses on forth line support for escalated incidents and requests with a highlevel of complexity. Ensures contracted Managed Services outcomes are deliveredto the client.

This is a strategic role focusing across various technologydomains such as (but not limited to) Cloud, Security, Networking, Applicationsand / or Collaboration.

This role may also contribute to / support on project workas and when required.

Key Responsibilities:

·       Define andLead Network Security Strategy: Understand, architect, design, and champion theoverall network security posture and roadmap for the entire organization(on-premise, cloud, hybrid).

·       L3/L4Incident Management & Root Cause Analysis: Act as the highest-tierescalation point for complex and critical network security incidents andfailures, driving resolution and preventative measures.

·       SecurityInfrastructure Management: Design, deploy, and manage core network securitycomponents, including next-generation Firewalls (NGFW), IDS/IPS, LoadBalancers, VPN concentrators, and network access control (NAC) systems.

·       PolicyDevelopment and Review: Establish and enforce comprehensive security policies,standards, and baselines across all network devices and segmentation zones.

·       CloudNetwork Security Architecture: Design secure networking patterns for cloudenvironments (e.g., AWS VPCs, Azure VNet security groups, Transit Gateways)integrated with on-premise solutions.

·       DisasterRecovery (DR) and Business Continuity: Develop and regularly test networksecurity components of the DR and Business Continuity plans.

·       TechnologyEvaluation: Evaluate and recommend new security technologies and tools (e.g.,SASE, Zero Trust Network Architecture) to improve the organization's defensivecapabilities.

·       Mentorshipand Documentation: Create high-quality documentation (HLD/LLD) and mentorjunior engineers on security best practices and advanced troubleshootingtechniques.

• Works independently, with general direction from the client, stakeholders, team lead, or senior manager, to perform operational tasks to resolve all escalated incidents/requests in a timely manner within the agreed SLA.
• Timely and consistent updates of tickets with resolution tasks performed.
• Proactively identifies, investigates, analyses issues and errors prior to or when they occur and log all such incidents in a timely manner.
• Captures all required and relevant information for immediate resolution.
• Provides forth level support to all escalated incidents, requests and identify the root cause of incidents and problems, respond to tickets where third line engineer teams were unable to fix the problem.
• Shares such knowledge, to resolve issues, document them, and push the knowledge down to other engineers.
• Communicates with other teams and clients for extending support. Acts as emergency support contact as needed, for critical client and business-impacting issues.
• Supports, tracks, and documents change implementation.
• Provides timely escalation of all tickets to management with ensuing updates, where applicable.
• Proactively identifies, contributes, implements and works with automation teams for effort optimization and automating routine tasks.
• Systematically gathers relevant information and applies technical knowledge to analyze and uses highly technical troubleshooting tools and content and analytical practices.
• Uses operational and diagnostic procedures to resolve escalated tickers in unique and complex client environments.
• Coaches L1, L2, and L3 teams offering technical expertise and pushing work down to other engineering teams.
• Performs quality audits, covering process, service experience, ticket updates, etc. as required.
• May manage and implement projects within technology domain, delivering effectively and promptly per client agreed upon requirements and timelines.
• May work on implementing and delivering disaster recovery functions and tests.
• Performs any other related task as required.

Knowledge and Attributes:

• Ability to communicate and work across different cultures and social groups.
• Ability to plan activities and projects well in advance, and takes into account possible changing circumstances.
• Ability to maintain a positive outlook at work.
• Ability to work well in a pressurized environment.
• Ability to work hard and put in longer hours when it is necessary.
• Ability to apply active listening techniques such as paraphrasing the message to confirm understanding, probing for further relevant information, and refraining from interrupting.
• Ability to place clients at the forefront of all interactions, understanding their requirements, and creating a positive client experience throughout the total client journey.
• Excellent proficiency in change management process with an ability to plan, monitor and execute changes with clear identification of risks and mitigation plans to be captured into the change record.
• Deep technical skills in relevant functions.
• Excellent client service orientation and passion for achieving or exceeding expectations.

Academic Qualifications and Certifications and tools:

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).
• Certifications relevant to the services provided (certifications carry additional weightage on a candidate’s qualification for the role).
• Relevant certifications include (but not limited to) -

·       Fortinet

·       RSA

·       Tenable

·       Trend Micro

·       F5

·       CCIE, CCNP in Security or PCNSE certification orFirewall Vendor related certification is good to have along with advancedtechnical certification such as CCIE, CISSP.

·       Firewalls:Expert-level management of Cisco or FortiGate.

·       Zero TrustArchitecture (ZTA) / SASE

·       Segmentation:Micro-segmentation and logical network segmentation (VLANs, VRFs).

·       CloudNetwork Security: AWS/Azure/GCP network security controls (VPC, SecurityGroups, NSGs).

·       NAC: CiscoISE or similar Network Access Control systems.

·       IDS/IPS& WAF (Web Application Firewalls, e.g., F5, Cloudflare).

·       Automation:Basic scripting skills in Python and use of Ansible for security configuration.

·       SIEM:Familiarity with Splunk or Microsoft Sentinel for log analysis.

Packet Analysis: Expert troubleshooting usingWireshark or tcpdump

​Our Client is an established company in Singapore, who is seeking to recruit a Lead Cybersecurity Specialist (Security Operations).

Lead Cybersecurity Specialist (Security Operations)

You will be the primary architect of the security governance and risk management framework., with the mission to transform GRC from a compliance-heavy exercise into a strategic enabler. You will ensure that risk management is deeply integrated into the lifecycle of every digital system, from web applications to critical Operational Technology (OT) environments.

1. Incident Management & Response Standardisation

·       Unified Playbooks: Establish and maintain Incident Response (IR) playbooks for diverse threat scenarios (e.g., Ransomware, Data Exfiltration, Cloud breaches).

·       Crisis Leadership: Provide direct guidance and technical oversight to agencies during High and Critical severity incidents, ensuring timely reporting and effective containment.

·       Incident Governance: Work with CIOs and CISOs to establish clear command structures and roles, empowering leaders to make difficult, high-stakes decisions during a crisis.

2. Operational Readiness & Resiliency Testing

·       Advanced Exercises: Design and oversee high-quality Tabletop Exercises (TTX) for various stakeholders (system owners, SIROs, CISOs, CIOs). You will evaluate external vendors to ensure these exercises are realistic, comprehensive, and push the limits.

·       Chaos Testing: Drive the adoption of chaos testing across agencies to validate the adequacy of resiliency plans and identify hidden failure points in critical systems.

·       Capability Building: Continuously assess the operational readiness of the Family and lead initiatives to bridge identified gaps in incident management.

3. Continuous Monitoring & Asset Governance

·       Centralised Monitoring: Ensure all systems are effectively onboarded to central monitoring services. Work with system owners on overcoming challenges encountered during onboarding.

·       Asset Visibility: Partner with CIOs to maintain a robust and updated IT asset inventory, ensuring that "you cannot protect what you do not know."

·       Custom Threat Scenarios: Provide expert guidance for agencies with unique threat use cases or specialised systems (e.g., OT/ICS) that fall outside standard monitoring coverage, helping them build bespoke detection capabilities.

4. Vulnerability & Attack Surface Management

·       Full-Spectrum SOPs: Establish Standard Operating Procedures for vulnerability management across on-premises, cloud (GCC), and OT environments. Ensure that there are proper procedures for managing unpatched vulnerabilities.

·       Attack Surface Scanning: Ensure agencies deploy adequate internal and external scanning tools. You will oversee the workflow for finding prioritisation and validate that patches are applied and effective.

5. Advocacy & Education

·       Resilience Culture: Educate stakeholders on the critical importance of Response and Business Continuity Planning (BCP).

·       Stakeholder Inculcation: Foster a mindset of "assumed breach," ensuring project owners and leaders understand their roles in threat monitoring and incident management.

Requirements

Experience

·       Years of Experience: 8 to 10 years of deep experience in Cybersecurity Operations, SOC Management, or Incident Response.

·       Crisis Management: Proven track record of leading or providing technical oversight in high-pressure, high-severity security incidents.

·       Domain Expertise: Experience managing security operations across complex hybrid environments (On-premise, Cloud, and OT).

Technical Skills

·       Incident Response & Forensics: Mastery of IR methodologies and a strong understanding of digital forensics and malware analysis.

·       Threat Intelligence & TTPs: Deep knowledge of the threat landscape and the ability to map monitoring use cases to the MITRE ATT&CK framework.

·       Vulnerability & Exploitation Research: Deep understanding of the CVE (Common Vulnerabilities and Exposures) system and CVSS scoring. Knowledge of exploitation techniques and the mechanics of how vulnerabilities are weaponised by threat actors. Ability to assess the "exploitability" of a vulnerability within the specific context of the environment to prioritise remediation.

·       Detection Technologies: Proficiency in SIEM, SOAR, XDR, and EDR technologies. Ability to evaluate the relevancy of existing monitoring tools against evolving threats.

·       Cloud Operations: Strong understanding of monitoring and responding to incidents within Government Commercial Cloud (GCC) and native cloud environments.

·       Certifications: Professional certifications such as GCIH (GIAC Certified Incident Handler), GCFA (GIAC Certified Forensic Analyst), CHFI, or CISSP are highly desirable.

Soft Skills

·       Command & Control: Ability to remain calm and provide clear, authoritative guidance during high-stakes security crises.

·       Diplomacy & Education: Skill in translating operational needs into strategic priorities for CIOs and CISOs.

·       Strategic Foresight: A strong interest in emerging security technologies and the ability to proactively adapt monitoring strategies to counter new actor TTPs.

JJ Consulting Services

EA Licence No.: 12C6207

Applicants are invited to send in a MS Word resume to jobs@jjconsulting.com.sg stating position applying for/present/expected salaries and earliest available date.

We thank all applicants in advance and regret that only short listed candidates will be notified.

Responsibilities

• Owner of the Incident Response playbooks for diverse threat scenarios (Ransomware, Data Exfiltration, Cloud breaches).
• Direct guidance and technical oversight during High and Critical severity incidents, ensuring timely reporting and effective containment.
• Establish clear command structures and roles, empowering leaders to make difficult, high-stakes decisions during a crisis.
• Create and maintain high-quality Tabletop Exercises for stakeholders (system owners, SIROs, CISOs, CIOs).
• Evaluate external vendors to ensure exercises are realistic, comprehensive, and limits pushing.
• Adopt chaos testing to validate the adequacy of resiliency plans and identify hidden failure points in critical systems.
• Assess operational readiness to bridge identified gaps in incident management.
• Ensure all systems are effectively onboarded to central monitoring services.
• Collaborate with system owners on overcoming challenges encountered during onboarding.
• Maintain a robust and updated IT asset inventory.
• Guidance on unique threat use cases or specialised systems (OT/ICS) that fall outside standard monitoring coverage, and help to build bespoke detection capabilities.
• Develop Standard Operating Procedures for vulnerability management across on-premises, cloud (GCC), and OT environments.
• Ensure proper procedures for managing unpatched vulnerabilities.
• Deploy adequate internal and external scanning tools.
• Oversee workflow for finding prioritisation and validate patches are applied and effective.
• Educate stakeholders on the critical importance of Response and Business Continuity Planning (BCP).
• Ensure project owners and agency leaders understand their roles in threat monitoring and incident management.

Requirement

• 8 years of deep experience in Cybersecurity Operations, SOC Management, or Incident Response.
• Experience leading or providing technical oversight in high-pressure, high-severity security incidents.
• Experience managing security operations across complex hybrid environments (On-premise, Cloud, and OT).
• Expert in IR methodologies
• Skilled in SIEM, SOAR, XDR, and EDR technologies.
• Strong understanding of digital forensics and malware analysis.
• Deep knowledge of the threat landscape and the ability to map monitoring use cases to the MITRE ATT&CK framework.
• In-depth understanding of the CVE (Common Vulnerabilities and Exposures) system and CVSS scoring.
• Knowledge of exploitation techniques and the mechanics of how vulnerabilities are weaponised by threat actors.
• Able to assess the "exploitability" of a vulnerability within the specific context of the environment to prioritise remediation.
• Able to evaluate the relevancy of existing monitoring tools against evolving threats.
• Sound understanding of monitoring and responding to incidents within Government Commercial Cloud (GCC) and native cloud environments.
• Professional certifications such as GCIH (GIAC Certified Incident Handler), GCFA (GIAC Certified Forensic Analyst), CHFI, or CISSP advantageous.
• Able to remain calm and provide clear, authoritative guidance during high-stakes security crises.
• Skill in translating operational needs into strategic priorities for CIOs and CISOs.
• Strong interest in emerging security technologies and the ability to proactively adapt monitoring strategies to counter new actor TTPs.

Ethos Search Associates Pte. Ltd.

EA License No: 13C6655

EA Reg No: R1988580 Jacky Chong

Responsibilities

• Owner of the framework for security testing (Vulnerability Assessment and Penetration Testing - VAPT).
• Design and implement Standard Operating Procedures (SOPs) to guide teams on engaging external security vendors and managing internal testing cycles.
• Establish "Quality Rubrics" to evaluate the performance of pen-testers.
• Conduct periodic sampling of testing reports and project involvements to ensure quality and rigour.
• Lead the execution of complex Red Teaming exercises and deep-dive penetration tests on high-impact systems.
• Leverage on the latest Adversary Tactics, Techniques, and Procedures (TTPs) to simulate real-world attacks, helping to identify blind spots in prevention, detection and response capabilities.
• Keeping a keen eye on the global threat landscape to identify emerging threats and evolving actor TTPs.
• Assess impact of current security posture and update testing standards accordingly.
• Owner of secure coding guidelines (based on OWASP, SANS) to ensure developers build security into the application layer from day one.
• Champion of the Static Application Security Testing (SAST) and Software Composition Analysis (SCA).
• Evaluate automation tools that detects vulnerabilities in source code and third-party libraries.
• Review, recommend, and provide guidance on integrating security tools into DevOps pipelines (DevSecOps).
• Evaluate and suggest systems that help to boost code quality, enforcing security to be treated as a core component of "clean code."
• On the forefront of technology changes (Cloud-native security, AI-driven development) and promote systems/technologies that enhance code quality and resilience.
• Advisor to CIOs, CISOs, and Project Owners to educate and inculcate a culture of secure-by-design.
• Promote a platform for knowledge sharing among security practitioners to harmonise security testing efforts.

Requirements

• Possess OSCP certification.
• 8 years of deep technical experience in Cybersecurity, with a strong focus on offensive security and application security.
• Experience in conducting penetration tests for Web Applications, IT Systems (on-premises and cloud environments), and complex Network architectures.
• Experience in performing manual and automated source code reviews to identify logic flaws, injection vulnerabilities, and cryptographic weaknesses.
• Experience in manual and automated testing tools
• Experience with Government Commercial Cloud (GCC) environments.
• In-depth understanding of secure software development lifecycles (SSDLC) and the ability to read/analyze common programming languages (Java, Python, .NET, JavaScript).
• Skilled with enterprise-grade SAST, DAST, SCA and VAPT tools (Checkmarx, Fortify, SonarQube, Snyk, Burp Suite).
• Sound understanding of the MITRE ATT&CK framework and common TTPs.
• Practical knowledge of Jenkins, GitLab CI, or GitHub Actions.
• Able to communicate complex technical risks to non-technical stakeholders
• Able to influence change without direct reporting lines.
• Able to identify patterns in "bad" testing jobs or recurring code vulnerabilities and provide constructive feedback to improve performance.
• Continuously learning and keeping pace with the rapidly evolving cyber threat landscape.

Ethos Search Associates Pte. Ltd.

EA License No: 13C6655

EA Reg No: R1988580 Jacky Chong

The successful incumbent will Assistant Director, Operations / Lead Reintegration Mentor in ensuring the smooth running of the daily operations at Selarang Halfway House (SHWH) or Cosford Annex (CA) and is responsible for the safety and welfare of the residents and the overall security of the Halfway House premises. They will work closely with the SHWH Case Managers to aid residents with their reintegration back to society.

Major Duties and Responsibilities

1. Oversee security screening to ensure contrabands are not brought into the house.

2. Facilitate the daily operational routine of SHWH or CA:

a) Ensure the day-to-day needs of the residents and operational requirements of the halfway house are being met.

b) Facilitate the process of residents checking in and out of the halfway house on a daily basis and provide daily updates on the headcount and other activities/incidents (if any) throughout the tour of duty. Any unusual movements should be highlighted and reported to the relevant parties.

c) To ensure that there is seamless transition during the handing and taking over of shift duties. The jobholder is also responsible in ensuring that all outstanding matters have been clearly communicated to the next duty personnel and are promptly followed up with.

d) Provide logistical support to residents during their stay in SHWH or CA. To assist occasionally with carrying & moving of bulky/heavy items.

e) Conduct patrols and searches in the SHWH/CA Living Units to ensure the safety of residents.

3. Work closely with Case Managers in the case management of residents, including monitoring and maintaining proper records on the progress, movement, and other relevant information pertaining to the residents.

4. Assist in handling any grievance procedure and carrying out preliminary investigation of incidents and/or disciplinary issues (when assigned).

5. Identify any defect(s) or work(s) to be carried out pertaining to the halfway house’s estate management issues during daily tour of duty and to feedback to Singapore Prison Service Corporate Services Team for follow up.

Any Other Duties

To carry out any other duties as assigned by Assistant Director, Operations / Lead Reintegration Mentor

Requirements

• Recognized Diploma in any discipline.
• Relevant experience in operations (especially in residential or secured settings), security or provost functions.
• Ability to manage people of varying profiles in a professional manner.
• Basic understanding of case management and counselling would be an advantage.
• Level-headed and able to de-escalate tense situations
• Strong listening and analytical skills
• Team Player with good interpersonal skills
• Resourceful and able to multi-task
• Computer Literacy with basic MS Word and Excel knowledge
• Able to work on rotational shift and the hours as indicated below and be deployable on off days when required on short notice.

Work Shift Cycle

1 x 12hrs Day Shift from 7.30am to 7.30pm

1 x 12hrs Night Shift from 7.30pm to 7.30am

Followed by 2 Off Days (where 2nd Off Day is standby activation)

Work location

Upper Changi Road N Singapore (EAST)

​Our Client is an established company in Singapore, who is seeking to recruit a Lead Cybersecurity Specialist (Offensive Security).

Lead Cybersecurity Specialist (Offensive Security)

As the Cybersecurity Specialist (Offensive Security) within the CISO Office, you will be the domain expert responsible for elevating the security testing and "Secure-by-Design" capabilities across the entire Family. You will bridge the gap between high-level governance and technical implementation, ensuring that all agencies under the ’s purview adopt consistent, high-quality security practices. Your role is pivotal in shifting from a reactive security posture to a proactive, resilient one.

Key Responsibilities

1. Security Testing Governance & Standardisation

·       Establish Standards: Define and maintain the -wide framework for security testing (Vulnerability Assessment and Penetration Testing - VAPT).

·       SOP Development: Create and roll out Standard Operating Procedures (SOPs) to guide project teams on engaging external security vendors and managing internal testing cycles.

·       Quality Assurance: Develop "Quality Rubrics" to help agencies evaluate the performance of pen-testers. You will conduct periodic sampling of testing reports and project involvements to ensure quality and rigour across the Company.

2. Advanced Technical Operations

·       Red Teaming & Critical Testing: Lead and execute complex Red Teaming exercises and deep-dive penetration tests on the ’s high-impact systems.

·       Adversary Simulation: Utilise knowledge of the latest Adversary Tactics, Techniques, and Procedures (TTPs) to simulate real-world attacks, helping agencies identify blind spots in their prevention, detection and response capabilities.

·       Environmental Scanning: Proactively monitor the global threat landscape to identify emerging threats and evolving actor TTPs. Assess how these changes impact the 's current security posture and update testing standards accordingly.

3. Secure-by-Design & Source Code Excellence

·       Secure Coding Standards: Establish -wide secure coding guidelines (e.g., based on OWASP, SANS) to ensure developers build security into the application layer from day one.

·       Source Code Analysis: Lead the strategy for Static Application Security Testing (SAST) and Software Composition Analysis (SCA). You will evaluate tools that automate the detection of vulnerabilities in source code and third-party libraries.

·       CI/CD Integration: Evaluate, recommend, and provide guidance on integrating security tools into the agencies' DevOps pipelines (DevSecOps).

·       Code Quality Oversight: Review and recommend systems that help to boost code quality, ensuring that security is treated as a core component of "clean code."

·       Technology Foresight: Stay abreast of technology changes (e.g., Cloud-native security, AI-driven development) and recommend systems/technologies that enhance code quality and resilience.

4. Stakeholder Engagement & Advocacy

·       Consultative Leadership: Act as a trusted advisor to CIOs, ACISOs, and Project Owners to educate them and inculcate a culture of secure-by-design.

·       Community of Practice: Establish a platform for knowledge sharing among security practitioners within the Family to harmonise security testing efforts.

Requirements

Experience

·       Years of Experience: 8 to 10 years of deep technical experience in Cybersecurity, with a strong focus on offensive security and application security.

·       Domain Expertise: Proven track record in conducting penetration tests for Web Applications, IT Systems (on-premises and cloud environments), and complex Network architectures.

·       Code Review Mastery: Experience in performing manual and automated source code reviews to identify logic flaws, injection vulnerabilities, and cryptographic weaknesses.

Technical Skills

·       Secure Development: Deep understanding of secure software development lifecycles (SSDLC) and the ability to read/analyze common programming languages (e.g., Java, Python, .NET, JavaScript).

·       Source Code Analysis Tools: Proficiency with enterprise-grade SAST, DAST, SCA and VAPT tools (e.g., Checkmarx, Fortify, SonarQube, Snyk, Burp Suite).

·       Offensive Security: Proficiency in manual and automated testing tools; deep understanding of the MITRE ATT&CK framework and common TTPs.

·       Cloud & DevOps: Experience with Government Commercial Cloud (GCC) environments and practical knowledge of Jenkins, GitLab CI, or GitHub Actions.

·       Certifications: Professional certifications such as OSCP, OSWE (Offensive Security Web Expert), CASE (Certified Application Security Engineer), or GWEB are highly desirable.

Soft Skills

·       Influence & Diplomacy: Ability to communicate complex technical risks to non-technical stakeholders (CIOs/Project Owners) and influence change without direct reporting lines.

·       Analytical Mindset: Ability to spot patterns in "bad" testing jobs or recurring code vulnerabilities and provide constructive feedback to improve Company-level performance.

·       Intellectual Curiosity: A strong commitment to continuous learning and keeping pace with the rapidly evolving cyber threat landscape.

JJ Consulting Services

EA Licence No.: 12C6207

Applicants are invited to send in a MS Word resume to jobs@jjconsulting.com.sg stating position applying for/present/expected salaries and earliest available date.

We thank all applicants in advance and regret that only short listed candidates will be notified.

Job Descriptions:

• General data entry & filing
• Answer incoming phone calls and reply to email.
• Ad-hoc administration duties
• Documentation and simple processing duties
• Prepare Invoice and Verify invoices from vendors and facilitate approval processes efficiently
• Maintain good filing practices, both in soft copies within company shared folders and hard copies, to ensure proper record management
• Support additional projects and ad-hoc duties assigned by the HR & Admin Manager

Requirements:

• Min. GCE N / O Levels or ITE qualification
• Entry level are welcome to apply, training provided
• Customer oriented with positive mindset
• Dynamic and good team player
• Meticulous and well-organized
• Proficient in Microsoft word, excel and power point
• Good interpersonal and communication skills