Sembcorp Industries Ltd Hiring! Full Time Cyber Security Specialist in - Ricebowl

About Sembcorp

Sembcorp is a leading energy and urban solutions provider headquartered in Singapore. Led by its purpose to drive energy transition , Sembcorp delivers sustainable energy solutions and urban developments by leveraging its sector expertise and global track record.

Key Roles and Responsibilities

• Conduct risk assessment on digital solutions and third parties. Identify potential risks and provide options to protect the OT critical infrastructure, ICT Infrastructure, application systems and cloud environment.
• Conduct compliance check on internal controls to ensure compliance with established policies and applicable regulations.
• Assist in developing policies, standards and guidelines to safeguard digital assets in adherence to business needs, industrial best practices and regulatory requirements.
• Assist in developing group wide cyber awareness program to build a strong security culture.
• Provide advisory services to internal departments on business digital initiatives using Security By design / Zero Trust framework to ensure consistency in controls.
• Manage security projects and solution implementation activities that address cybersecurity risks.
• Plan, design and conduct cyber security incident response workshops and exercises (table-top exercises, simulation, and drills)
• Be aware of latest industry standards, regulatory requirements and the potential impacts to cybersecurity policies, standards and procedures.
  
  

Qualifications, Skills & Experience

• Minimum 5 years’ experience in Cybersecurity Operations, Risk and Compliance
• Knowledgeable in security standards or regulations such as NIST, ISO 27001, SOC2, CCOP (SG), PDPA (SG), GDPR(EU), MPLS(CN), Security by Design
• Technical know-how and experience in solutions such as (but not limited to)
• Cloud Infrastructure, e.g. Azure, AWS, Huawei, Ali
• Cloud compliance e.g., Cloud Posture Management, Workload protection
• Awareness Platform e.g., Proofpoint, Knowbe4
• Network Security e.g., F/W, IPS, Remote Access, NAC, Data Diode
• Content Security e.g., Web, Email protection
• End point Security e.g., AV, EDR, DLP
• Identify Protection e.g. MFA, Privilege access management
• Threat Management e.g., SIEM, UEBA, NDR, ASM, BAS
• GRC Tool e.g., RSA Archer
• Hardening guidelines for MS products, Linux
• Vulnerability Assessment and Application Testing Tool e.g., Tenable, Qualys, Veracode, Synopsys etc.
• Certifications such as CISA, CISM, CISSP, GICSP, CCSK, CRISC will be an added advantage
• Knowledge in OT solutions and security will be an added advantage
  
  

Our Culture at Sembcorp

At Sembcorp, our culture is shaped by a strong set of shared behaviours that guide the way we work and uphold our commitment to driving the energy transition.

We foster an institution-first mindset, where the success of Sembcorp takes precedence over individual interests. Collaboration is at the heart of what we do, as we work seamlessly across markets, businesses, and functions to achieve our goals together. Accountability is a core principle, ensuring that we take ownership of our commitments and deliver on them with integrity and excellence. These values define who we are and create a workplace where our people can thrive while making a meaningful impact on driving energy transition.

Join us in making a real impact!