Manager, Project Security

Date: 12 Oct 2023

Location: Singapore, SG

Company: ST Engineering Group

ST Engineering is a global technology, defence and engineering group with offices across Asia, Europe, the Middle East and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives through its diverse portfolio of businesses across the aerospace, smart city, defence and public security segments.

Cyber business area An industry leader in cybersecurity with over two decades of experience, we deliver a holistic suite of trusted cybersecurity solutions to empower cyber resilience for government and ministries, critical infrastructures, and commercial enterprises. Backed by our indigenous capabilities and deep domain expertise, we offer robust cyber-secure products and services in cryptography, cybersecurity engineering, digital authentication, SCADA protection, audit and compliance. We specialise in the design and build of security operations centres for cybersecurity professionals and provide managed security services to strengthen the cybersecurity posture of our government and enterprise customers. Committed to building up competencies of cybersecurity professionals to support the growing demand, our Cybersecurity Academy has certified and trained more than 2000 cybersecurity professionals in more than 150 organisations. We continue to innovate through our Research Lab, Strategic Technology Centre, and Engineering Centres and develop future-ready cybersecurity solutions that position us at the forefront of the dynamic digital economy.

Find out more: https://www.stengg.com/cybersecurity

Manager, Project Security

Job Description:

Assist Head Security of ST Engineering Info-Security in the following:

• Conduct of scheduled security audits on Line Of Businesses (LOBs) in accordance to the Corporate’s Security Manual and Standard Operating Procedure (SOP) on Security governing physical, document and cyber security (including Systems and networks, information protection, Access Controls, Incident Report and Response, Audit and Review).
• Conduct of no notice inspections to check on security compliance of LOBs.
• Liaising with LOB Project Security Managers on the date and conduct of security audit, covering pre-audit brief, audit checklist and post-audit action reviews and follow-up.
• Maintain and update the security audit checklist, to ensure that it incorporates the latest change/s in the Corporate’s Security Manuals and SOPs.
• Prepare audit report and propose solutions to resolve the security audit findings that are systemic in nature.
• Conduct periodic Cybersecurity vulnerability assessment of the Project Networks and scan for Indicator of Compromise.
• Sieve out good security practices in the LOBs during audit and share them with the larger audience.
• Compile and analyze security findings over time to determine the health state of LOB’s security practices and culture.

Requirements:

• At least 3 years’ experience in process audit, preferably related to security and/or safety operations.
• Knowledgeable in audit methodology with strong communication and inter-personal skills.
• Competent report writing ability with a good command of the English language both in speaking and writing areas.
• Ability to work as a team and independently, with minimum guidance.
• Ability to learn new and upgrade relevant skillsets, continuously.
• Strong drive and determination to achieve the goals set.
• Someone with a keen eye for details will be an advantage.
• Any certification in professional audit and/or training or lesson design courses, will be an advantage.
• Preferably with SSCP (Systems Security Certified Practitioner), or CISSP (Certification Information Systems Security Professional) qualification or its equivalent

Work location: near Jurong East MRT