Cyber Security Executive

Job Description

To be involved in performing hands on Cyber Security and assisting Customers/ Stakeholders in addressing to CyberSecurity matters.

Responsibilities

• Responsible in managing CyberSecurity VAPT, Vulnerability Assessment, Risk Management and Testing.
• Involved in Security test,configuration and installation of the security test preparation, setting-up of testing environment, configuration and installation of the security testing tools.
• Good knowledge of Cloud Azure Infrastructure (Preferred)
• Conduct Microsoft Cloud Infrastructure Vulnerability Assessment and Penetration Testing Find pinpoint the vulnerabilities of the assess target system / application
• Experience in handling Security Compliance, Assessment, Audit, Regulations and Governance.
• Knowledge and technical hands-on experience with Microsoft Azure, Entra ID and Microsoft 365 (Preferred)

Skills Required

• Good in Cloud Infrastructure Architect and Stakeholder Management.
• Technically incline in CyberSecurity, Cloud, Risk and Vulnerabilities.
• Implement and maintain security policies and procedures to protect the organization’s IT assets.
• Handle Customer’s ICT and cybersecurity incident response plan through ongoing security reviews and audits.
• Strong in vulnerability scanning and security assessments of applications, including client/server software and mobile apps, to be deployed in corporate networks.
• Vulnerability Management, CA Privilege Access Management, CyberArk, GCSOC (Government Cyber Security Operations Center).
• Strong Communication skills is required.
• Good in liaising/ coordinating with Customers/ Clients/ Stakeholders.
• Min. 1-2 years of experience in CyberSecurity.
• Possess CyberSecurity certifications.
• Maintain adherence to ISO 27001 certification and improve on NIST Gap Assessment.
• Only Singaporean!

We respect your privacy and all communication will be treated with confidentiality.

Please contact us or apply in-confidence to us with you updated MS Word Resume to : jeline@starcareerconsulting.com

Yong Jeline (Reg. No. R1101621)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

At KPMG, your long-term future is every bit as important to us as it is to you. That’s why our aim is to give you experiences that will stay with you for a lifetime. Whether it’s great training and development, working across functional sectors, mobility opportunities or corporate responsibility volunteering activities – you’ll gain a wealth of experiences on which to build a rewarding career. We’re proud of our culture – it’s one that recognises hard work, encourages new ways of thinking and embraces diversity and inclusion. We have an innovative spirit which inspires what we do and how we do it – striving to be better lies at the heart of who we are.

Technology underpins many of the most influential organisations in the world and presents opportunities for businesses that want to seek out new markets and are prepared to invest in transformational change. The last ten years have seen a rapid emergence of new technology, greater connectivity for organisations and individuals, and a 24/7 approach to global commerce. However, this has left many organisations behind the curve and struggling to achieve their business aspirations without feeling exposed to risks. We believe that by turning traditional thinking on its head, adopting a positive approach to managing risk, will set organisations free to achieve their business aspirations.

KPMG Cybersecurity professionals assist clients to address their concerns around Confidentiality, Integrity, Availability and Privacy of their technology, business systems, and information assets. Using a holistic view of how Technology and Business integrate, the Cyber team performs technology-risk focused assessments, technology compliance, IT/operational process reviews, and design of information risk & cyber security solutions.

Cyber team members regularly interact with C-Suite clients, such as Chief Executive Officer (CEO), Chief Information Security Officer (CISO), Chief Information Officer (CIO), Chief Operating Officer (COO), Chief Risk Officer (CRO) and their direct reports. Hence, a client centric mind-set, understanding of IT within a Business context, and well-developed communication skills are desirable.

The role involves: 

• Stakeholder Interaction: Collaborate with key stakeholders through interviews and workshops to gain insights into their business profiles, cyber security needs, and strategic goals. 

• Policy Evaluation: Analyse current policies, standards, and procedures to assess the client's cyber security capabilities. 

• Security Assessment: Evaluate the client's cyber security maturity and regulatory compliance by applying industry standards like the NIST Cyber Security Framework, ISO27002, CIS Critical Security Controls or other Cyber Security best practices.  

• Strategic Recommendations: Formulate actionable recommendations to bridge gaps and design a strategic roadmap aimed at enhancing the client's cyber security maturity, resilience and regulatory requirements. 

• Proposal Support: Contribute to the development of proposals and presentations to effectively communicate strategic recommendations to clients.

⠀

The ideal candidate should possess:

• Degree in technology, engineering, or business studies with information systems major/minor along with deep interest in technology risk, security and IT governance will be considered 
• Minimum 2 years of consulting experience in IT risk assessment or IT security 
• Good knowledge on new developments in cyber services capabilities and industry knowledge 
• Good working knowledge of information security principles, techniques and standards 
• Professional certifications such as CISSP, CRISC, CISA, CISM, PMP or other relevant qualifications 
• Driven to learn new things and share knowledge with your clients and colleagues 
• Strong analytical, problem-solving and interpersonal skills 
• Excellent written and oral communication skills with the ability to present ideas and results to technical and non-technical audiences 

Only shortlisted candidates will be contacted by KPMG Talent Acquisition team, personal data collected will be used for recruitment purposes only.

At KPMG in Singapore we are committed to creating a diverse and inclusive workplace. We believe that diversity of thought, background and experience strengthens relationships and delivers meaningful benefits to our people, our clients and communities. As an equal opportunity employer, all qualified applicants will receive consideration for employment regardless of age, race, gender identity or expression, colour, marital status, religion, sexual orientation, disability, or other non-merit factors. We celebrate the different talents that our people bring and support every staff member in their journey to achieve personal and professional growth. One of the ways we do this is through Take Charge: Flexi-work, our flexible working framework which enables agile and innovative teams to help deliver our business goals.

Cyber Security Specialist (VAPT)

Job Description

Architect, design, review and implement cyber security resilient in our product and projects. You are familiar with cloud security architectures and solutions, making sure the companies can operate in a safe, secure environment.

Responsibilities

• Responsible in managing CyberSecurity VAPT, Vulnerability Assessment, Risk Management and Testing.
• Manage Network and Cloud Security Risk Assessment and Audit.
• Involved in handling Government Projects related to risk, security attacks and system solutions.
• Consultancy on software and hardware for security vulnerabilities and risks
• Plan VAPT, execution, result analysis and provide fix recommendation.
• Provide guideline such as coding, key management, hardening, patch management, backup management, incident management, etc.
• Familiar with IM8 requirements and CIS, NIST security benchmark, cyber security tools to perform preliminary scan.

Skills Required

• Strong in knowledge in CyberSecurity, Risk Assessment, VAPT, Vulnerability and Cloud Security.
• Strong in VAPT management.
• Technically incline in CyberSecurity, Cloud, Risk and Vulnerabilities.
• Possess knowledge of IM8 and Government projects experience is preferred.
• Degree/Certifications in CyberSecurity.
• Possess CyberSecurity certifications.
• Possess Government domain is preferred.

We respect your privacy and all communication will be treated with confidentiality.

Please contact us or apply in-confidence to us with you updated MS Word Resume to : jeline@starcareerconsulting.com

Yong Jeline (Reg. No. R1101621)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

●As a Level 1 Cyber Defense Operations Center (CDOC) Analyst, you will monitor different security solutions with focus on SIEM and SOAR technologies. You’ll be responsible for triaging security incidents, involving L2/L3 incase of high and critical incident. This role requires medium level of technical knowledge about network, email and Operating systems etc , team player quality, and a proactive approach to evolving threats.

Role and Responsibilities 

●Run daily Security monitoring, alert triage, and coordinated incident response to ensure effective real-time threat monitoring.

●Continuously enhance SIEM/SOAR/XDR alert use cases and threat detection capabilities.

●Research emerging threats, vulnerabilities, and attack techniques to improve defenses.

●Collaborate across teams to improve the organization’s threat detection and response maturity.

●Maintain detailed incident records, contribute to reporting, and support audit readiness.

●Share knowledge with about new findings, update SOP, promoting best practices and continuous improvement within the SOC.

●Ensure detection and response processes align with regulatory and organizational standards.

●Stay up to date on emerging threats and technologies to continuously evolve SOC capabilities.

●Support comprehensive asset inventory and ownership mapping to ensure full monitoring coverage.

Technical & Soft Skills:

●Good hands-on experience with technologies like SIEM, SOAR, XDR such as Google Chronicle, CrowdStrike, Logscale, Splunk.

●Good working knowledge of endpoint security tools and concepts, including EDR (CrowdStrike, Defender, Cortex), DLP, and MDM.

●Strong knowledge of MITRE ATT&CK, NIST CSF frameworks, and cyber kill chain concepts.

●Good understanding of network security, operating systems, and hybrid cloud environments (Cloud, On-Prem, VDI).

●In-depth knowledge of threat landscapes and technical security concepts.

●Strong grasp of network protocols, OS internals, and security technologies.

●Familiar with compliance standards such as NIST CSF and ISO 27001.

●Strong organizational and time management skills with the ability to coordinate and prioritize multiple tasks simultaneously.

●Ability to work under pressure, especially during critical security incidents.

●Ability to conduct independent research and analysis, identifying issues, formulating options, and making conclusions and recommendations.

●Skilled in developing professional documentation and detailed reporting (including PowerPoint presentations), including policies, standards, processes and procedures

Good communication and interpersonal skills to effectively collaborate with stakeholders, and internal teams

THE JOB

The Security Operation Center (SOC) Manager reports to the Securitas Branch Manager. This role involves direct management and operational responsibility, and ensuring customer and company satisfaction.

Your primary function is to perform the undermentioned tasks as outlined by the Compliance, Strategy & Risk Management (CSRM) Security Operation Centre. Main duties and responsibilities are to perform day shift duty to provide security coverage involving the following key activities:

JOB RESPONSIBILITIES

• Program & Global Operations Oversight – To include the planning, direction, and control of all operational and administrative framework for the security personnel, ensuring adherence to CSRM-defined standards for all security monitoring programs and incident response protocols.

• Primary Liaison & Crisis lead - To function as the primary liaison to the CSRM Point of Contact (POC) for all critical operational matters. To provide leadership for all supplier-driven crisis coordination efforts, ensuring swift response and transparent communication.

• Global Project Execution – Delivers comprehensive oversight for the execution of security site and optimization of SOC tools and establishing an internal framework for issue escalation and resolution.

• Performance Analysis & Compliance Assurance – Provides detailed, data-driven assessments to the CSRM POC. Ensure proactive, intelligence-led monitoring and measurable compliance with all CSRM policies and regulatory requirements across all global operations.

• Local Service Oversight & Resource Coordination – Ensures timely and accurate incident reporting and coordinates SOC resource allocation to support local security needs and optimize field resource distribution.

• Field Support & Service Coordination – To deliver immediate SOC-based support to on-site security teams by relaying crucial information, managing local incident communications and coordinating emergency drill management.

• Local Incident Service Management – To manage the escalation of multi-area incidents to the appropriate regional service level and coordinates SOC support for local incident investigations.

• Specialized SOC Services – To provide specialized services tailored to the local area, including virtual escorts, restricted camera access tours, and concierge-level security support.
  

JOB REQUIREMENTS:

• Must hold a valid PRD Grade of Senior Security Supervisor (SSS) rank.

• Preferably 3 years of relevant experience as a manager in the SOC environment.

• Equipped with computer skills

• Experience in dealing with information and intelligence, interpreting security threats and risks, and managing investigations.

• High level of attention to detail and accuracy.

• Strong oral and written communication skills are critical, as well as the ability to think clearly, analyze semi-quantitatively, problem-solve, and scope.

• Ability to comfortably and confidently present to all levels within the enterprise.

• Independent, well-organized, and good work attitude

• Flexible and adaptable.

• Flexibility in relation to the working hours (days, evenings, nights, weekends, and holidays)

• Have to undergo background checks and security screening.

• Must wear PPE when on duty (such as: Safety Boots).

BENEFITS:

• Meals will be provided.

Thank you for applying.

To learn more about us, please visit our website at www.securitas-singapore.com.

If you are keen to be part of our team and possess the above pre-requisites, kindly submit your detailed resume stating your current and expected salary via the APPLY NOW button below or to :

HR Department

Securitas Guarding Services (Singapore) Pte Ltd

**Note: We regret that only shortlisted candidates will be notified.

Job Summary

Lead the development and deployment of technology-enabled security solutions across Asia, supporting the transformation of traditional guarding services into integrated and scalable service models. This Singapore-based role partners closely with operations, commercial, and leadership teams to strengthen service delivery, operational efficiency, and client solutions.

Responsibilities

• Lead the regional strategy and roadmap for security technology transformation across Asia.
• Drive the shift from traditional guarding to technology-supported hybrid security service models.
• Oversee the implementation of command centres, remote monitoring platforms, surveillance systems, and integrated security solutions across client sites and markets.
• Partner with operations teams to embed technology into service delivery.
• Support commercial teams on strategic bids and client solutions involving security technology.
• Manage relationships with vendors, system integrators, and technology partners.
• Track implementation progress, operational impact, and continuous improvement opportunities.

Requirements

• Degree in Engineering, Technology, Information Systems, Security Technology, or related field.
• Strong experience in security technology, integrated security systems, or technology-enabled operational services.
• Proven experience leading large-scale transformation or implementation programmes.
• Experience working across regional or multi-country environments.
• Strong stakeholder management and cross-functional collaboration skills.
• Good understanding of physical security operations and technology deployment.

Skills

Security Technology Transformation, Integrated Security Systems, Remote Monitoring, Command Centre Operations, Stakeholder Management, Vendor Management, Regional Programme Management, Operational Integration, Commercial Support

Applicants should have experience in the deployment of security technology, regional programme leadership, and cross-functional stakeholder management.

KPMG has established a strong cybersecurity consulting practice servicing clients from a wide array of sectors including energy, water, oil & gas, maritime, aviation, healthcare, transportation or telecommunications. Many of our clients own or operate critical infrastructure in Singapore and across the Asia Pacific region, providing essential resources and services to people in their daily lives. Cybersecurity has a big part to play in keeping cyber threats away and minimising risk of disruption to our way of life. 

Cybersecurity in Operational Technology (OT) is a challenging but fulfilling field. One challenging aspect of this field is that it sits in intersection of two disciplines that usually do not intersect. Cybersecurity has its origins in Information Technology (IT), while OT system and Industrial Internet of Things (IIoT) are used by engineers to control and monitor physical processes. Professionals with expertise in both disciplines are rare. OT security is also a fulfilling field because we have been tasked by our clients to solve a broad range of issues including regulatory compliance, cyber risk assessments, penetration testing, red teaming, incident response and more. We have been successful in delivering quality services to our clients because of our ability to constantly evolve and the teamwork between a good blend of our cybersecurity and engineering professionals. 

Job Responsibilities:

• Performing risk assessment or threat modelling for variety of industry control system, on-prem IT and cloud systems. 
• Digesting sizable amounts of information about complex systems by using your technical grounding in IT, OT/IIoT, engineering or cloud computing (e.g network architecture, firewall rules and etc) to assemble an accurate understanding of the system. 
• Analysing and identifying the cybersecurity risks associated to them e.g. how an attack might get into a network and cause disruption to operations or cause a dangerous situation in which safety might be compromised.
• Work closely with our clients in gathering information, providing clarification, and managing expectations on the task we are required to perform. 
• Providing security recommendations and improvement to the client in the current practices while considering impact to their operations and concerns. 
• Performing other assessment/review for clients including system/network architecture reviews and reviewing actual practices in OT/IT systems against regulatory requirements e.g. the Cybersecurity Code of Practice (CCOP) for critical information infrastructure. 
• Working in a project team and closely guided by the experience team member.
• Working closely with subject matter experts in a wide range of cyber security services to delivered to our clients (e.g. managing projects involving penetration testing or red teaming exercises to an owner/operator of a critical infrastructure). 

The ideal candidate should possess: 

• Bachelor’s degree in Cybersecurity/ Information Security/ Engineering/ Computer Science OR Information Technology equivalent.   
• Experienced or keen interest in OT/IIoT; 
• Certifications in cybersecurity e.g. OSCP, CISA, CRISC, CISSP, CISM etc might be advantageous.
• Certifications in OT cybersecurity e.g. GICSP, GRID, IEC62443 might be advantageous.
• Committed to continuously learn and develop oneself in a fast-expanding field. 
• Aptitude of consulting including managing oneself, projects and clients. 
• Able to think logically and communicate clearly.                                       
• Effective interpersonal skills and able to work well in a team. 
• Good presentation skills might be advantageous. 

⠀

Only shortlisted candidates will be contacted by KPMG Talent Acquisition team, personal data collected will be used for recruitment purposes only.

At KPMG in Singapore we are committed to creating a diverse and inclusive workplace. We believe that diversity of thought, background and experience strengthens relationships and delivers meaningful benefits to our people, our clients and communities. As an equal opportunity employer, all qualified applicants will receive consideration for employment regardless of age, race, gender identity or expression, colour, marital status, religion, sexual orientation, disability, or other non-merit factors. We celebrate the different talents that our people bring and support every staff member in their journey to achieve personal and professional growth. One of the ways we do this is through Take Charge: Flexi-work, our flexible working framework which enables agile and innovative teams to help deliver our business goals.

• Permanent full-time role
• Basic $2870 to $3600 + Allowances + JOINING BONUS
• Training Provided

Job Description:

• Responding to incidents and managing security and safety systems.
• Preventing unauthorized entry into premises.
• Monitoring CCTV for suspicious activity.
• Conducting patrols and clocking duties.
• Performing access control duties.

Requirements:

• Able to commit 12 hours duty (Permanent day and/or night shift available)

Candidates are encouraged to apply this position via Apply Now button with the following information in the resume

• Work experiences and job responsibilities
• Current and Expected salary
• Reason for leaving
• Date of availability
• Education background

We regret that only shortlisted candidates will be contacted.

Barry Ang Ze Xin (Reg No : R26159529)

EA Recruitment Pte Ltd

EA License No: 21C0492

Job Summary

As the senior security and client engagement officer, you will lead the execution of security plans and exercises, manage access control systems, conduct surveillance, and handle incidents to ensure the safety and well-being of the premises and occupants.

Responsibilities

• Execute and enforce security plans, protocols, and SOPs to maintain a secure environment
• Conduct access control measures including managing pass exchanges and access card systems to regulate entry
• Operate and monitor security surveillance systems such as CCTV within the compound
• Perform regular patrols to detect and deter security breaches or unauthorized activities
• Verify authorization of all personnel on the premises to prevent unauthorized access
• Manage security incidents promptly and report details accurately in the designated Group Chat
• Coordinate janitorial support and assist in maintaining cleanliness of the compound to uphold facility standards
• Report malfunctions or breakdowns of facilities or machinery (e.g., turnstiles, ceiling lights) to the Security Control Centre (SCC)
• Collaborate in Fire Safety Management during drills and actual fire incidents to ensure occupant safety
• Welcome and greet tenants and guests professionally to foster a positive environment
• Respond courteously to phone and walk-in inquiries, providing accurate information and assistance
• Deliver prompt, efficient, and courteous service to tenants and guests by addressing their requests
• Handle complaints and suggestions from tenants and guests with professionalism and effective problem-solving
• Maintain comprehensive knowledge of directions, services, and facilities to assist tenants and guests accurately
• Adapt to perform various additional duties as assigned to support overall operations

Required competencies and certifications

• Proven experience in security supervision
• Knowledge of security protocols and emergency response procedures
• Ability to commit to shift work

Preferred competencies and qualifications

• Strong communication and interpersonal skills
• Attention to detail in access control and surveillance
• Customer service orientation
• Problem-solving skills and ability to handle complaints
• Flexibility to perform various duties as assigned

Other Information

Employee Benefits:

• Uniforms provided
• Leave entitlement as per MOM regulations
• Performance-based bonuses
• Health and medical insurance coverage

We’re Hiring: IT Governance and Compliance Specialist

Strengthen enterprise‑wide IT governance, policy enforcement, and compliance readiness across mission‑critical systems. This 24‑month role offers the opportunity to uplift organizational IT controls, streamline compliance workflows, and support long‑term governance transformation initiatives.

Job Highlights

Role Name: IT Governance and Compliance Specialist
Contract Duration: 24 Months
Work Location(s):169 Bukit Merah Central, Singapore 150167
Salary: Up to SGD 7,500 + AWS + Performance Bonus + Loyalty Bonus

Job Description

• Maintain security orders within the premise
• Ensure safety of all staffs, clients and visitors
• Implement access and safety control
• Attend to all emergencies such as medical & fire & intruder
• Liaising with necessary department such as Police & SCDF etc during case of emergency
• Issue security passes to Contractors’

Job Requirements

• Mandatory to have Possess Police Licensing & Regulatory Department (PLRD) license
• Physically fit as this position requires a good amount of walkabout in yard
• A team player with good interpersonal skills
• Proficiency in English (written and spoken)
• Quick to react during emergency

Job Responsibilities

• Handle security incidents and service
• Provide guard and patrol services
• Manage disorderly conduct and threatening behavior
• Operate basic security equipment
• Screening people / staff / vehicle seeking entry
• Respond & report to incidents
• And other guard duties

Job Requirements:

• 1 year of relevant experience
• Possess Security Licensing
• Able to rotate shift (12 hour Day & Night Shift)
• Yearly Renewable Contract

Summary

The Cyber Security Analyst (CSA) is responsible for assisting with the day-to-day operations of securing the organization’s various information systems. Reporting to the Information Security Manager, the CSA is tasked with providing technical expertise in all areas of network, system, and application security. The CSA works closely with the various teams in the organization to ensure that systems and networks are always designed, developed, deployed, and managed with an emphasis on strong, effective security and risk management controls. The CSA leads the organization’s vulnerability management program, manages the annual cybersecurity assessments and penetration tests, and researches and reports on emerging threats, to help the organization take pre-emptive risk mitigation steps. The CSA effectively correlates and analyzes security events to proactively detect threats and mitigate attacks before they occur.

Job Responsibilities

• Proactively monitor the environment to detect and implement steps to mitigate cyber-attacks before they occur

• Provides technical expertise regarding security-related concepts to operational teams

• Review, investigate, and respond to real-time alerts within the environment

• Review real-time and historical reports for security and/or compliance violations

• Monitor online security-related resources for new and emerging cyber threats

• Assesses new security technologies to determine potential value for the enterprise

• Conducts vulnerability assessments of firm systems and networks

• Assist in patching and mitigating vulnerabilities

Requirements

• Basic understanding of cybersecurity concepts.

• Strong analytical and problem-solving skills.

• Technical knowledge of enterprise-class technologies such as firewalls, routers, switches, wireless access points, VPNs, and desktop and server operating systems

• Exposure to Microsoft’s enterprise technology platform, including Azure, Active Directory, SQL, Office365, and the Windows server and desktop operating systems Proficiency with Windows PowerShell

• Strong writing skills, as well as the ability to articulate security-related concepts to a broad range of technical and non-technical staff

• Exposure to Security Incident Management Process

• Familiarity with security and compliance frameworks

• Be a proficient problem-solver that is able to work autonomously

Desired Qualifications:

• A bachelor's degree or Diploma in computer science, cybersecurity, or a related field is often preferred.

• Prior experience in a security-related role (e.g., internship, volunteer work) is a plus.

• Exposure to application and database security

Supports the Site Security Leader in managing comprehensive security operations at Western Digital facilities. This role serves as the primary liaison with outsourced security service providers, managing vendor performance, compliance, and daily operations. Key responsibilities include conducting security risk assessments, developing security procedures and SOPs, managing vendor contracts and budgets, monitoring security systems functionality, delivering training programs, and coordinating security projects and VIP visits. The position ensures operational excellence through KPI analysis, headcount management, procurement processes, and compliance with global security standards (CTPAT, RBA, AEO, IMS). The role provides technical support for physical security systems and may involve regional coordination with APAC security teams, including site visits when required.

Roles / Responsibilities 

• Assist Site Security Leader in managing overall security operation issues.
• Provide physical and system operations technical supports to Site Security Leader.
• Perform Security Risk and Vulnerability Assessment on a periodic basis.
• Communicate and liaise with Outsource Security Service Provider of day-to-day tasks and any instructions from management.
• Assist in creating site security procedures and S.O.P (Work Instructions).
• Ensure outsource service provider is properly briefed of any changes in security procedures.
• Follow-up with Security Service Provider on the KPI reports which they need to submit and update as per security requirement. Analyze their service performance.
• Update Outsource Security Vendor KPI to the Site Security leader. 
• Follow-up on security headcount supply with the outsource service provider to meet daily headcount operations requirements.
• Verify and validate outsource service provider’s actual daily headcount supplied against the headcount’s requirement.
• Estimate and Raise PR for forecasted following month billing amount. (Raise Blanket PO Request).
• Buy off the report for outsource security service provider claim upon finalized claim amount and received invoice.
• Follow up with Finance dept. for payment release if overdue.
• Conduct New Hire Orientation training for Employees, Vendors and Contractors.
• Attend meeting with Western Digital staff on any rising issues and provide the necessary support.
• Follow up closely with the vendors/contractors on any security projects to ensure it follows schedule and completes successfully on time.
• Coordinate any VIP visit or any special visit.
• Conduct final level interview for new hire from outsource security service provider.
• Conduct investigation as when required to assist security operations team.
• Conduct training to in-house guards and outsource Security Service Provider by using current SOPs.
• Participate in CTPAT, RBA, AEO, IMS and other pertinent audits.
• Monitor and ensure security systems are fully operational (i.e CAS, Door alarms, CCTVs, boom gates, turnstiles, etc.)
• Report and provide technical support to fix any site security equipment issues immediately.
• Provide technical support and coordinate with any Western Digital security personnel in APAC region if required. This may include visits to the affected sites.

Summary:

The Cyber Security Analyst (CSA) is responsible for assisting with the day-to-day operations of securing the organization’s various information systems. Reporting to the Information Security Manager, the CSA is tasked with providing technical expertise in all areas of network, system, and application security. The CSA works closely with the various teams in the organization to ensure that systems and networks are always designed, developed, deployed, and managed with an emphasis on strong, effective security and risk management controls. The CSA leads the organization’s vulnerability management program, manages the annual cybersecurity assessments and penetration tests, and researches and reports on emerging threats, to help the organization take pre-emptive risk mitigation steps. The CSA effectively correlates and analyzes security events to proactively detect threats and mitigate attacks before they occur.

Job Responsibilities:

• Proactively monitor the environment to detect and implement steps to mitigate cyber-attacks before they occur

• Provides technical expertise regarding security-related concepts to operational teams

• Review, investigate, and respond to real-time alerts within the environment

• Review real-time and historical reports for security and/or compliance violations

• Monitor online security-related resources for new and emerging cyber threats

• Assesses new security technologies to determine potential value for the enterprise

• Conducts vulnerability assessments of firm systems and networks

• Draft reports and presentations for clients.

• Keep abreast of the latest cybersecurity threats and technologies.

• Work with IT and other departments to ensure security best practices are followed

Requirements

• A recognizes degree or equivalent industry training and certifications

• Three to five years of experience in a security analyst or related position

• Experience in developing security solutions on one or more cloud platform (AWS, GCP or Azure) and applying the cloud native security services

• Understanding of security concepts and tools - Certificates, DLP, WAF, SIEM, firewalls, DDOS prevention,

• IDS/IPS, privileged access management, Encryption, SSL, VPN, IPSec, TCP/IP, DNS and web security architecture etc

• Technical knowledge of enterprise-class technologies such as firewalls, routers, switches, wireless access points, VPNs, and desktop and server operating systems

• Thorough understanding of Microsoft’s enterprise technology platform, including Azure, Active Directory,

• SQL, Office365, and the Windows server and desktop operating systems

• Document risks, security controls and evidence to ensure compliance

• Strong writing skills, as well as the ability to articulate security-related concepts to a broad range of technical and non-technical staff

• Working experience with creating, implementing, and managing a threat hunting program within a corporate environment

• Demonstrated experience implementing and/or enforcing security and compliance frameworks

• Be a proficient problem-solver that is able to work autonomously

Desired Qualifications:

• One or more of the following certifications: CEH, CISM, CompTIA Security+, CISSP, GSEC

• Experience with managing and securing both on-premise and hosted systems and applications

• Experience with application and database security

• Experience in setup of policies and procedures that ensure effective cloud resource management, monitoring, cost control, and operational efficiency