Total 8 human resources job vacancies in Legal / Public / Security category

Responsibilities

• Perform configuration of SAP GRC Access Control for S/4HANA Private Cloud, SuccessFactors, Ariba, and BTP according to industry best practices and company requirements.

• Lead the implementation and configuration of SAP GRC Access Control (AC) and Identity and Access Governance (IAG) modules.

• Collaborate with stakeholders to gather requirements and translate them into technical specifications for GRC configuration.

• Design and implement role-based access controls (RBAC), firefighting, and segregation of duties (SoD) rules to ensure compliance with regulatory standards and company policies.

• Develop and maintain GRC workflows, including access request, approval, and review processes.

• Conduct detailed assessments of existing access controls and authorization processes to identify gaps and risks.

• Provide technical guidance and support to internal teams and end-users on SAP GRC Access Control functionality and best practices.

• Stay current with industry trends and developments in SAP GRC and access management to recommend improvements and enhancements to our systems and processes.

Requirements

• Bachelor's degree in Computer Science, Information Systems, or related field.

• Minimum 5 to 7 years of experience in SAP GRC, with a focus on Access Control and Identity and Access Governance modules.

• Proven experience leading at least two rounds of full SAP GRC Access Control implementations (version 10.1 and 10.2).

• Experience with at least one round of SAP GRC Identity and Access Governance (IAG) implementation.

• Strong understanding of SAP security concepts and principles, including user provisioning, role management, and authorization.

• Excellent analytical and problem-solving skills, with the ability to identify risks and develop effective mitigation strategies.

• Strong communication and interpersonal skills, with the ability to collaborate effectively with stakeholders at all levels.

• SAP GRC certification is a plus.

Licence No: 12C6060

Responsiblitiies:

· Administer, manage and update cybersecurity related tickets

· Learn to be accurate and provide rapid response to security events according to standard operating procedure (SOP)

· Assist with security risk assessment, threat modelling, and vulnerability management

· Assist in security policies and procedures

· Participate in security incident responses

· Assist in identifying security issues and risks and then develop mitigation plans

· Willing to work in a rotational 24/7 ARC environment

· Assist in 1stlevel troubleshooting on security tools operational issues

· Provide analysis and trending of security log data from various security devices

· Maintain up-to-date knowledge of the IT security industry, including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors

· Provide information security reporting, including security metrics as required

· Recommend solutions to mitigate risk in any activity that potentially impacts security of existing IT and information management

Requirement:

• Diploma or Degree in Information Technology or Computer Sciences, preferably with focus on cybersecurity subjects with at least 1 year of demonstrated experience in system, network, and/or application security.
• Knowledge of network and web-related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, BGP and other routing protocols)
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits
• Excellent customer orientated, teamwork
• Strong sense of ownership and drive
• Basic knowledge in the information security space with emphasis on TCP/IP network security, operating system security, common attack patterns, and exploitation techniques

Shortlisted candidates will be offered a 1 Year Agency contract employment.

License No : 12C6060

Responsibilities

• Handles Platform Security - Cloud Infra Security Operation and Maintenance.

• Establish security architecture, tools and processes that ensure the security of the platform.

Requirements

• Degree in Computer Science or equivalent

• 3- 5 years Security Architecture Design experiences.

• Primary Skill: Azure Security, Sentinel, Defender for Cloud, Endpoint Security, Firewall, Log Analytics, Imperva, CyberArk.

• Secondary Skill: AWS Security, GuardDuty, Security Hub, Cloud Trail, Cloud Watch.

Licence No: 12C6060

Responsibilities

• Understand the current system security measures and implement security enhancements in line with organizations goals and objectives

• Conduct regular system tests and audits by validating and verifying technical controls in minimizing the risk

• Good understanding of business requirements, identify key security requirements and articulate it to business effectively and efficiently in terms of actual risk and safeguards, risk management

• Good understanding of guidelines such as MAS TRM, ISO and NIST standards or equivalent

• Good knowledge on Security Incident Response and run book preparation for emerging and new threats, applying safeguards where possible to minimize the threat.

• Sound understanding on Ransomware, XSS, Injection and other similar attacks

• Participate in various business meetings to understand the entire data flow and recommend security solutions to mitigate the concerns/risks

• Good knowledge and understanding of encryption technologies (both symmetric and asymmetric algorithms) and its applications

• Participates in various compliance programs, audits the report and recommend to reflect the accurate security posture to make business decisions

• Establish and oversee a formal vulnerability and testing program.

• Oversee the patch cycle and ensure that patches are performed at regular intervals

• Participate in Account Recertification programs and be a key player to take ownership and sign appropriate forms necessary as security exceptions

• Liaise with Internal Audit, Corporate Compliance, Office of General Counsel and Risk.

• Conduct security campaigns to organization such as Phishing, Data Leakage, etc.

• Management to remediate new and outstanding issues; track security-related issues in the GRC system.

• Participate in design activities and provide various solutions to ensure security is not compromised at various phases of the program lifecycle

• Recommend and provide templates where possible for end users to assist in minimizing the security risks

• Train other staff and external clients as necessary.

• Manage, coach, lead and develop a small/mid staff of GRC personnel.

• Directly responsible for procedures and controls to assure compliance with applicable regulatory and legal requirements as well as good business practices.

• Establish and oversee formal risk analysis and self-assessments program for various Information Services systems and processes.

Requirements

• Degree/Degree in IT / Computer Science / related discipline with 12-15+ years of relevant experience in Cyber Security.

• Should have played Security Lead Role in Transformation and Operate program.

• Experience in industry frameworks such as ABS, SSAE, SOC2 etc.

• Good understanding of the following :

• Infrastructure and Network security, Cloud Security, Identity and Access Management, Privileged Management (CyberArk), Compliance with Banking Regularity compliance (BFSI), HIPAA, PCI and the NC Identity Theft law., Firewall security, IDS/IPS placement, SIEM tools, Wireless Security, End point security, Data Loss Prevention, Web Application Security, Threat Hunting/Threat Intel

• Familiarity with industry compliance and security standards including MAS TRM, HKMA, PCI DSS, ISO 27001 and NIST

• Working experience in Cyber Security SecOps

• Customer focused with strong communication, Strong written and verbal communication skills

• Able to multi-task and prioritize incidents & requests accordingly.

• Strong analytically with a natural ability to solve complex issues.

• Industry and Technology certifications such as CRISC, CISA, CISSP, CISM, CEH

• Excellent customer interfacing skills.

Licence No: 12C6060

Responsibilities

• Reporting to Head, Public Safety and Security (PSS) Business, this person is responsible to develop PSS business mid & long-term business plans conjunction with the leadership team in PSS, Business Areas (BA) and Line of Businesses (LOB).

• Research market and technology trends to identify new growth areas in PSS Business.

• Member of PSS team to conduct strategic analysis of existing business to identify and recommend new business areas to pursue.

• Foster strategic relationship with key customers and identify key new initiatives or programmes to support customers better and grow business.

• Identify and foster new partners to grow capabilities and generate new business opportunities.

• Organise PSS workplans and monthly meetings to track business progress and work on new key initiatives.

• Evaluate customers’ needs and processes to propose relevant solutions to digitalize processes, maximise technology adoption, implement digital transformation and solutions

• Work closely with BA & LOB to understand product offerings and architecture (hardware, software, and network)

• Horizon scanning to maintain deep understanding of technology, trends, and business processes to enable clients in their digital roadmaps

Requirements

• Highly driven person with ability to strategize, build trust and collaboration across PSS business functions

• Strong interest to excel and grow career in running business unit

• Experience in public safety and/or technology domains

• Strong strategic thinking, market research, analytical and problem-solving skills

• Knowledge of strategic planning, business development and finance will have added advantage

• Fluency in English, ability to write well. Good communicator and presenter

• Bachelor’s degree with at least 5 years of relevant experience

• Technical aptitude with computing foundations and user experience

Licence No:12C6060

Responsibilities

• Review and ensure IT security architecture design satisfies security principles

• Perform security analysis on required IT solution against threats and recommend solutions

• Work with presale consultant and customer to identify, design and develop security solutions for their environment.

• Engage solution vendors to determine appropriate products that will meet customer security requirements

• Create complementary processes to ensure sustainable security management

• Lead and guide deployment team to implement the design

Requirements

• Bachelor/Masters/ Doctorate Degree in Information Security/Cyber Security or IT-related discipline

• Have hands-on experience in security risk management, security compliance, vulnerability management, security technologies.

• Have experience in technical presentation and technical documentation

• Possess professional security certifications such as CISSP, CISM, or other equivalent.

Licence No: 12C6060

Responsibilities

• Be clear of customer's security framework, such as information security policies, processes/procedures, guidelines and etc.

• Ensure compliance with customer's cybersecurity policies.

• Perform activities necessary to ensure customer's data systems and networks are secure, sure activities are not limited to log analysis and security assessment of customer ICT systems.

• To manage/conduct vulnerability assessment and coordinate penetration tests activities.

• To conduct information security awareness training

Requirements

• Bachelor's degree in a relevant field.

• 3 to 5 years of Information Security experience

• Proficiency in security framework, vulnerability assessment, penetration tests activities

Licence No: 12C6060

Responsibilities

• Conduct detailed & comprehensive investigations and triage on a wide variety of security events.

• Recommend and implement remediation processes

• Stay up-to-date with the latest security threats, vulnerabilities, and mitigation techniques

• Collaborate with cross-functional teams to implement security measures and address security requirements

• Communicate security risks, recommendations, and status updates to stakeholders, management, and team members

• Identify opportunities to improve processes and/or tools to ensure the highest level of quality, including documentation, mentoring, and training sessions

• Own the technical components of a customer integration project including but not limited to configuration, debugging, documentation, testing, and go-live support

• Identify and mitigate potential security threats and vulnerabilities

• Provide relevant recommendations to improve the overall security posture of customers

• Deployment of security technologies while ensuring standards are adhered to as well as maintenance/ repair supervision working with vendor support teams on corrective activities for system issues

• Assist in any ad-hoc tasks when necessary

Requirements

• Diploma / Degree in Information Technology or related

• Over 5 years of experience in Information Security or engineering

• At least 2 years of direct experience in one of the Public Cloud platforms, such as AWS or Azure with strong knowledge of their security features

• Ability to identify and drive remediation of public and hybrid cloud risks

• Experience in general security technologies, processes, and concepts

• Industry-recognized security certifications (OSCP, CISSP, CISA, CEH, AWS Security, etc.).

• Working experience on SIEM / Analytics tools, eg: Securonix, Sentinel

• Working experience with common security operations systems, Intrusion Detection Systems (IDS/IPS), Security Incident Event Management systems (SIEM), anti-virus log collection systems, etc

• Strong analytical and problem-solving skills, with the ability to identify and address security risks and vulnerabilities

Licence No: 12C6060