We’re Hiring: IT Governance and Compliance Specialist

Strengthen enterprise‑wide IT governance, policy enforcement, and compliance readiness across mission‑critical systems. This 24‑month role offers the opportunity to uplift organizational IT controls, streamline compliance workflows, and support long‑term governance transformation initiatives.

Job Highlights

Role Name: IT Governance and Compliance Specialist
Contract Duration: 24 Months
Work Location(s):169 Bukit Merah Central, Singapore 150167
Salary: Up to SGD 7,500 + AWS + Performance Bonus + Loyalty Bonus

Responsibilities

TikTok Shop is a content e-commerce business with international short video product as the carrier. It is committed to becoming the first choice for users to discover and purchase good products with affordable prices. TikTok Shop business team hopes to provide users with more tailored and efficient consumption experience, enabling merchants to receive reliable platform services in different scenarios such as live e-commerce, short video content e-commerce, thereby making more affordable and high-quality products easily accessible and improving lives.

The E-commerce Security team is responsible for safeguarding the platform's security and creating a safe, trustworthy shopping and business environment for TikTok Shop: allowing consumers to shop with confidence, sellers to operate with peace of mind, and influencers to focus on the enjoyment of bringing goods.

Responsibilities:
- Responsible for protecting the data security of the company's e-commerce platform, detecting and combating data crawlers and other malicious behaviors, researching and mastering the latest anti-crawler technologies, and implementing effective anti-crawler strategies. Daily work includes security related data analysis, risk labeling, model building, and developing data-driven security solutions to detect security threats, with the ability to implement and execute anti-crawler solutions.
- Deeply involved in the design of the core business indicator system and completed the construction of data monitoring; collaborated closely with the algorithm and governance teams to provide end-to-end analysis for various business domains, output data insights and implement optimization strategies, support the attribution of core indicator anomalies, and help achieve business goals.
- Responsible for emergency response to security incidents, especially data crawling events, and identify the root causes of issues and provide security solutions to mitigate the impact of cyber attacks within specific SLAs.
- Collaborate deeply with various business teams, product teams, and more technical and functional teams to design and deliver technical solutions addressing complex business security challenges.

Qualifications

Minimum Qualifications:
- Bachelor's or higher degree in Computer Science, Information Technology, Programming & System Analysis, Science (Computer Studies) or related discipline.
- Experience in data analytics, with proficiency in SQL, Hive, Python, and relevant analytical tools/languages, be able to detect cyber threats and risks by data-driven approaches.
- Possesses the knowledge framework for building a data indicator system and masters basic data analysis methods, with proficiency in at least one data visualization tool.
- Excellent capabilities to investigate, identify, analyze hidden issues from real business risks and security incidents, and provide technical solutions addressing business risk challenges.
- Strong business judgment and ability to work independently in a fast-paced, ambiguous environment, strong cross-team communication skills to achieve results.

Preferred Qualifications:
- Experienced in security risk mitigation, especially data anti-crawling, traffic security.
- Experienced in E-commerce and retail related business fields.
- Strong communication skills to bridge business and technical teams, with the ability to drive projects efficiently from risk detection through solution implementation; proven resilience and stability.

Job Information

About TikTok

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and we also have offices in New York City, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.​

Why Join Us

Inspiring creativity is at the core of TikTok's mission. Our innovative product is built to help people authentically express themselves, discover and connect – and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and bring joy - a mission we work towards every day.​

We strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. Every challenge is an opportunity to learn and innovate as one team. We're resilient and embrace challenges as they come. By constantly iterating and fostering an "Always Day 1" mindset, we achieve meaningful breakthroughs for ourselves, our company, and our users. When we create and grow together, the possibilities are limitless. Join us.​

​

Diversity & Inclusion​

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of CyberArk experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to hr@recruit-expert.com

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

• Assist in the planning, deployment, and enhancement of cybersecurity products and solutions across client environments.
• Support the implementation, configuration, and upgrade of security platforms, ensuring optimal performance and compliance with security best practices.
• Provide technical guidance and support to both internal teams and external clients on the effective use of the company’s cybersecurity solutions.
• Conduct product training sessions and knowledge sharing for clients and internal stakeholders to ensure proper usage and adoption.

Requirements:

• Diploma in IT or equivalent
• At least 2 years of hands-on experience with CyberArk within the IT, Information Security, or Cybersecurity industry.
• Strong technical troubleshooting and problem-solving skills.
• Ability to work independently as well as collaboratively in a team environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to hr@recruit-expert.com

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R1326740

Job Summary:

We are seeking a skilled and dedicated Cyber Security Engineer specializing in Endpoint to join our professional services team.

As a Cyber Security Engineer (Endpoint), you will play a critical role in protecting our clients' endpoints and ensuring the security of their sensitive data.

You will be responsible for implementing and managing Trellix endpoint security solutions, conducting threat assessments as well as providing expertise in mitigating endpoint-based threats.

You will not be limited to Trellix security solutions and will be trained in other security solutions as required.

Responsibilities:

• Deploy and maintain Trellix endpoint security solutions to safeguard clients' endpoints from Cyber threats.
• Implement Trellix endpoint security policies, standards and procedures to ensure compliance with industry regulations and best practices.
• Configure and manage Trellix endpoint security technologies, such as antivirus/anti-malware software and endpoint detection and response (EDR) tools.
• Collaborate with cross-functional teams to ensure secure endpoint configurations and deployment of new devices and applications.
• Stay updated with the latest endpoint security threats, vulnerabilities and industry trends and proactively recommend and implement appropriate countermeasures.
• Provide technical guidance and support to the incident response team during endpoint security incidents and investigations.
• Document endpoint security configurations, processes and procedures.
• Train and be certified in other security solutions as required

Qualifications:

• Bachelor's degree/Diploma in Computer Science, Information Security or a related field.
• Professional certifications for Trellix endpoint security products that cover Threat detection and prevention/threat intelligence/endpoint detection and response or Device and Application control.
• Familiarity with managing/implementing Trellix endpoint security management platforms and tools at enterprise level.
• Understanding of operating systems and their security features.
• Familiarity with security standards and frameworks (NIST, CIS) and their application for endpoint security.
• Excellent analytical and problem-solving skills to identify and resolve endpoint security issues.
• Strong communication and collaboration skills to work effectively with clients, cross-functional teams and stakeholders.
• Able to work in a fast-paced environment and manage multiple priorities effectively.

Required experience and certifications:

• At least 3 years managed services/SI experience of Trellix Endpoint security products
• Product certification for the following Endpoint security scope (at least 1 out of 4):
• Threat detection and Prevention (Trellix ePO Proficiency and Trellix ENS Proficiency)
• Threat Intelligence for Endpoint security (Trellix Intelligent Sandbox/Exchange)
• Endpoint Detection and Response (Trellix HX Proficiency)
• Device & Application Control (Trellix DLP/Application Control Proficiency)

Good to have certifications/knowledge:

• ITIL Foundation

• Assist in the planning, deployment, and enhancement of cybersecurity products and solutions across client environments.
• Support the implementation, configuration, and upgrade of security platforms, ensuring optimal performance and compliance with security best practices.
• Provide technical guidance and support to both internal teams and external clients on the effective use of the company’s cybersecurity solutions.
• Conduct product training sessions and knowledge sharing for clients and internal stakeholders to ensure proper usage and adoption.

Requirements:

• Diploma in IT or equivalent
• At least 2 years of hands-on experience with CyberArk within the IT, Information Security, or Cybersecurity industry.
• Strong technical troubleshooting and problem-solving skills.
• Ability to work independently as well as collaboratively in a team environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to hr@recruit-expert.com

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R1326740

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of CyberArk experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to hr@recruit-expert.com

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

Duties & Responsibilities

• Involve in the project or lead the project related with IT infrastructure and data centre whenever required
• Perform Installation, Implementation, Configuration and testing of system/storage equipment & setup
• Perform OS hardening, patching and updating on servers/VM
• Perform installation & configuration on storage (SAN and NAS)
• Plan for migration, document and execute the migration plan
• Develop implementation plan, migration plan and acceptance test plan for the project.
• Conduct acceptance test with users and address the testing findings/issues
• Provide system architecture design and planning for new IT infrastructure deployments in both hosted and cloud environments
• Support maintenance team in difficult or chronic problems, escalate the issue to vendor, identifying the root cause and preventive measures
• Support presales team on infrastructure solutioning in bids
• Review the project change request and carry out the integration/implementation
• Work closely with Project Managers in planning the implementation tasks
• Support VAPT and SSAT requirements
• Develop As-built documentation for handover

Skills & Experience

• Minimum Diploma in Computer Science or IT related studies
• Minimum 7 years’ experience in IT industry with at least 5 years in systems & security arena
• Knowledge of networking and IP/TCP protocol
• In-depth knowledge in network and systems security issues
• Hands-on experience in security-related tasks such as OS tightening, patching and updating, virus scanning will be an added advantage.
• In-depth knowledge on network and systems security issues and ability to offer advisories and troubleshooting support.
• In-depth knowledge on enterprise backup, virtualization and storage
• IT Certification in system & storage, network, database, virtualization, cloud technologies
• Good communication skills and positive working attitude

Main Duties and Responsibilities:

1. Technology Risk Assessment for Regulatory Compliance

• Conduct technology risk analysis, ensuring alignment with business and regional regulatory requirements.

• Maintain, document and update changes to policies, SOPs, artifacts, risk registers, etc.

• Perform assessments for third-party and regulatory adherence.

• Actively engage in certification, auditing, findings, assessment and compliance efforts.

2. Security Operations

• Continuously watch network traffic, systems, and applications for suspicious activity, anomalies and potential security incidents

• Identify security flaws and weaknesses in the networks, systems and applications to prevent them from being exploited.

• Conduct detailed assessment & audit on all security controls, esp. email, endpoints, app., data, etc.

• Deploy, configure, and manage various security tools such as endpoint, IAM, PAM, xDR, SIEM, etc according to NIST, CISA and MITRE framework protocols.

• Threat detection, incident response, vulnerability management, security policy enforcement and continuous monitoring of security controls.

• Develop and execute plans to respond to security incidents, containing and mitigating them.

• Collaborate, and follow-up with other key technical team members and HODs.

3. Incident Response

• Lead incident response lifecycle (detection, triage, containment, eradication, recovery).

• Handle security incidents tickets escalated by team, and draft security incident report covering the root cause, forensic evidence, and recommended mitigation plans

• Conduct and support forensic analysis of endpoints, logs, and network traffic to determine root cause and impact.

• Coordinate with internal stakeholders and external partners during critical incidents.

• Develop and maintain playbooks and incident reports.

Job Requirements: (e.g., educational/ professional qualifications)

• Min. 3 – 5 years of experience in technology risk, blue team operations, and regulatory compliance.

• Diploma or Degree in IT, cybersecurity, or related field.

• Expertise in technology risk, defensive strategies, endpoint security, IAM, PAM, and access control.

• Strong knowledge of security frameworks, layered defense, SIEM, endpoint & VPN security, DLP, etc.

• Familiarity with vulnerability management, and security configuration and automation.

• Digital Forensics and Incident Response (DFIR) experience enabling deeper investigations and root cause analysis is an added advantage.

• Ability to analyze security issues and recommend effective solutions.

• Relevant certifications such as Comptia Security+, CISSP, or vendor/industry certifications is an added advantage.

We are seeking Security Solution Engineers / Specialists to deploy, enhance, manage, maintain and optimize a range of enterprise security solutions.

This role involves a combination of solution deployment, enhancements and ongoing operational support, ensuring system stability, security effectiveness, and continuous improvement of the organization’s cybersecurity posture.

Key Responsibilities

• Deploy, configure, upgrade, manage, maintain and optimise the target security solutions

• Perform Day 2 operations, including:

• System administration

• Patching and upgrades

• Health checks and monitoring

• Incident and alert response

• Onboarding and offboarding 
• Integration with other external platforms

• Review, fine-tune, and optimize security policies to improve solution effectiveness and efficacy

• Troubleshoot and resolve system, performance, and integration issues

• Conduct security hardening and system optimization activities

• Support agent installation and updates across enterprise environments

• Collaborate with SOC, infrastructure, and application teams to strengthen overall security posture

Target Security Solutions (preferably two solutions and above)

• Elastic SIEM & SOAR

• CyberArk PAM

• Tenable Vulnerability Management

• WAAP (F5, Imperva)

• ServiceNow (Vulnerability Response, SecOps / USEM)

• DLP solutions (Trellix, Trend Micro, Proofpoint)

• CI/CD Security tools (Mend.io, Sonatype)

• Cloud Security (Prisma Cloud, AWS native security, Checkmarx)

• Email Security & Endpoint Security solutions

• Quantum Security

Requirements

• Minimum 3+ years of experience in the 2 or more of the target solutions

• Strong hands-on experience with:

• Ability to troubleshoot complex security and integration issues

• Strong communication and collaboration skills

Preferred Qualifications

• Product certifications of the target solutions

• Experience in enterprise-scale environments

• Exposure to multi-vendor security ecosystems

Additional Information

• Contract Duration: 12 Months

• On-call support required

• Work Location: Onsite (Singapore)

We are seeking Security Solution Engineers / Specialists to deploy, enhance, manage, maintain and optimize a range of enterprise security solutions.

This role involves a combination of solution deployment, enhancements and ongoing operational support, ensuring system stability, security effectiveness, and continuous improvement of the organization’s cybersecurity posture.

Key Responsibilities

• Deploy, configure, upgrade, manage, maintain and optimise the target security solutions

• Perform Day 2 operations, including:

• System administration

• Patching and upgrades

• Health checks and monitoring

• Incident and alert response

• Onboarding and offboarding 
• Integration with other external platforms

• Review, fine-tune, and optimize security policies to improve solution effectiveness and efficacy

• Troubleshoot and resolve system, performance, and integration issues

• Conduct security hardening and system optimization activities

• Support agent installation and updates across enterprise environments

• Collaborate with SOC, infrastructure, and application teams to strengthen overall security posture

Target Security Solutions (preferably two solutions and above)

• Elastic SIEM & SOAR

• CyberArk PAM

• Tenable Vulnerability Management

• WAAP (F5, Imperva)

• ServiceNow (Vulnerability Response, SecOps / USEM)

• DLP solutions (Trellix, Trend Micro, Proofpoint)

• CI/CD Security tools (Mend.io, Sonatype)

• Cloud Security (Prisma Cloud, AWS native security, Checkmarx)

• Email Security & Endpoint Security solutions

• Quantum Security

Requirements

• Minimum 3+ years of experience in the 2 or more of the target solutions

• Strong hands-on experience with:

• Ability to troubleshoot complex security and integration issues

• Strong communication and collaboration skills

Preferred Qualifications

• Product certifications of the target solutions

• Experience in enterprise-scale environments

• Exposure to multi-vendor security ecosystems

Additional Information

• Contract Duration: 12 Months

• On-call support required

• Work Location: Onsite (Singapore)

As the sole cybersecurity specialist within a MAS‑regulated general insurance intermediary, you will assume full ownership of the organisation’s end‑to‑end cybersecurity function. This is a hands‑on individual contributor role requiring the ability to operate independently across the full cybersecurity lifecycle — spanning governance, risk, and compliance through to technical implementation, security operations, and incident response.

You will be responsible for maintaining a robust security posture aligned with MAS Technology Risk Management (TRM) Guidelines, PDPA requirements, and recognised industry best practices. You will support environments that include CRM platforms, cloud infrastructure, SAP systems, and end‑user computing.

Key Responsibilities

Governance, Risk & Compliance

• Own, develop, and maintain cybersecurity policies, standards, and procedures in line with MAS TRM Guidelines
• Conduct periodic technology risk assessments, maintain the technology risk register, and track remediation of identified gaps
• Ensure compliance with PDPA obligations, including conducting Data Protection Impact Assessments (DPIAs) where required
• Prepare and maintain compliance documentation and audit evidence for regulatory and internal reviews

Security Operations & Monitoring

• Implement and manage security monitoring across cloud environments, CRM platforms, endpoint devices, and network perimeters
• Monitor, triage, and respond to security alerts and incidents; maintain, test, and continuously improve the incident response plan
• Manage endpoint detection and response (EDR), email security controls, DNS filtering, and firewall configurations
• Conduct regular vulnerability scanning and coordinate timely patching and remediation across all systems
• Oversee identity and access management (IAM), including MFA enforcement, conditional access policies, and periodic privileged access reviews

Technical Security

• Harden cloud environments (application services, storage, and networking) and perform ongoing security configuration reviews
• Assess and secure third‑party vendors, external partners, integrations, and APIs and Manage encryption standards, SSL/TLS certificates, and secure data transmission mechanisms
• Support secure development practices by reviewing system designs, configurations, and code changes for security risks

Requirements / Skills

• Relevant professional certifications such as CompTIA Security+, CEH, CISSP, CISM, Microsoft SC‑series or equivalent5 years of hands‑on cybersecurity experience, preferably within regulated environments such as financial services or insurance
• Working knowledge of MAS TRM Guidelines and PDPA requirements
• Practical experience with Microsoft Azure security, including Defender for Cloud, Azure AD / Entra ID, Conditional Access, and Network Security Groups
• Experience managing endpoint protection solutions, SIEM or log management platforms, and vulnerability management tools
• Proven ability to operate independently and manage the full cybersecurity lifecycle without the support of a large security team Strong documentation and communication skills, with experience producing policies, risk assessments, and compliance artefacts.

About the Role:

We are seeking a hands-on Cyber Security Firewall Engineer to provide operational support and security platforms. The ideal candidate will be experienced in managing Fortinet FortiGate and Palo Alto Networks firewalls, with foundation in network security, policy management, and incident response.

Key Responsibilities:

Firewall Operations (Fortinet & Palo Alto)

• Manage firewall rules creation, change requests, rule optimization, NAT/VPN configuration and firmware upgrades.

• Monitor traffic, identify anomalies, and remediate security events.

• Maintain HA configurations, routing and logging integrations.

• Support audits and evidence collection for regulatory/compliance requirements.

Tripwire

• Administer policies, baselines, agents, alerts, and remediation workflows.

• Investigate integrity violations; tune rules to reduce false positives.

Imperva (DB Security/DAM)

• Configure security policies, signatures, profiles, and exceptions.

• Monitor application-layer attacks; tune rules to balance protection and usability.

• Support database activity monitoring policies and reporting where applicable.

• Security Monitoring & Incident Response

• Triage alerts conduct root-cause analysis, and coordinate remediation.

Required Qualifications:

Hands-on expertise with:

• Fortinet FortiGate (policies, VPN, routing, HA, SD-WAN, logging).

• Palo Alto Networks firewalls (policies, NAT, App-ID, User-ID, Panorama).

• Tripwire (Hice to Have).

• Imperva (Hice to Have).

• Strong understanding of networking fundamentals (TCP/IP, VLANs, routing, NAT, SSL/TLS, DNS ).

• Experience in incident response, change management, and documentation.

• Ability to work independently with a focus on accuracy, speed, and risk reduction.

Preferred Certifications (Nice to Have)

Fortinet NSE 4–7, Palo Alto PCNSA/PCNSE, Imperva Certified Professional.

Soft Skills

• Clear communication with stakeholders and change advisory boards.

• Structured problem-solving and risk-based decision-making.

• Ownership mindset with strong time management for a contract environment.

Deliverables & KPIs

• Firewall rules changes are accordance to requests.

• Successful completion of firmware upgrades and config backups with rollback plans.

• Updated Tickets, network diagrams, and change records.

• Handover documentation and knowledge transfer at contract end.

Tools & Environment

• FortiGate / FortiManager / FortiAnalyzer

• Palo Alto NGFW / Panorama

• Tripwire Enter

Working hours :
8:30am to 6pm (Monday to Friday) onsite, no hybrid option.

Responsibilities 

• Provide day-to-day end user support of a Secure Service Edge solution in a 24/7 staffed operations 

• Ensure all user reported incidents and user enquiries are properly tracked, escalated and with proper closure 

• Perform end-to-end incident management, troubleshooting and resolution, adhering to SLA 

• Escalate incidents to L2 engineer or vendor support when required 

• Raise Change Requests for configuration changes  

• Manage agent software upgrades and rollout 

• Process and fulfill Service Requests in accordance with SLA 

• Monitor health of the solution 

• Monitor and respond to system alerts 

• Work closely with Operation Lead to ensure tasks are executed 

• Maintain existing operational documentation to ensure that changes are captured 

Requirements 

• Diploma or Degree in Information Technology or related discipline 

• Good knowledge in End User Support 

• Knowledge in Networking and/or Cyber Security (e.g., Firewall, Secure Web Gateway, Threat Detection, etc.) is preferred 

• Ability to communicate effectively in writing and verbally 

• Meticulous self-starter and problem solver with a service mindset 

• Entry level candidates with passion for cyber security are welcome 

• This role operates on a rotating 12-hour shift schedule, comprising both day shifts (8:30am – 8:30pm) and night shifts (8:30pm – 8:30am).
• Selected candidates will undergo on-the-job training (OJT) prior to being assigned to the formal shift roster.

Working Conditions 

• Please note this is a shift role. Certification and On Job Training (OJT) will be provided 

Cloud Security Engineer

Responsibilities:

• Conduct vulnerability tests on Client's Cloud infrastructure and services for potential threats, misconfigurations and weaknesses.
• Strong in Vulnerability management tools like Tenable.
• Implement best practices in Cloud security, Develop and maintain automated scripts for vulnerability scanning and reporting.
• Stay current with the latest security trends, tools, and AWS features to enhance our security posture.
• Address all findings promptly and effectively and document findings for reporting to management.

Requirements:

• Strong in Tenable AWS services such as EC2, S3, RDS, and Lambda.
• Proficient with security vulnerability tools and platforms
• Deep understanding of security principles, practices, and risk management.
• Certifications in AWS or RHEL are advantageous.

We respect your privacy and all communication will be treated with confidentiality.

Please contact us or apply in-confidence to us with you updated MS Word Resume to : kelvin@starcareerconsulting.com

Kelvin Lee (Reg. No. R1872625)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)