Epicareer Might not Working Properly
Learn More
Please Turn on your JavaScript

Epicareer might not working properly because your browser javascript is turned off.

What is JavaScript?

JavaScript is like the magic behind making websites interactive. Basically, it makes Epicareer more enjoyable and engaging.
How do i turn this on?
Find tutorial for your browser below :
  1. Make sure the webpage is open.
  2. In the Safari app on your Mac, choose Safari > Preferences, then click Security.
  3. Make sure the Enable JavaScript checkbox is selected.
  4. Click Websites.
  5. On the left, click Content Blockers.
  6. Make sure Off is chosen in the pop-up menu next to the website.
  7. On the left, click Pop-up Windows.
  8. Make sure Allow is chosen in the pop-up menu next to the website.
Visit Site here
  1. Open Chrome on your computer.
  2. Click. then Settings.
  3. Click Privacy and Security.
  4. Click Site settings.
  5. Click JavaScript.
  6. Select Sites can use Javascript.
Visit Site here
  1. If you're running Windows OS, in the Firefox window, click Tools > Options.
  2. Tip: If you're running Mac OS, click the Firefox drop-down list > Preferences.
  3. On the Content tab, click the Enable JavaScript check box.
Visit Site here
  1. Click the "Settings and more" icon at the top right of the Edge browser window.
  2. Click Settings.
  3. From the Settings menu, click Cookies and site permissions.
  4. Scroll down and click on JavaScript.
  5. In the JavaScript window, toggle the slider to "on" or "allowed."
  6. Close the Settings tab.
  7. Refresh the page.
Visit Site here
  1. Go to Settings.
  2. Click Advanced in the left sidebar, and click Privacy & security.
  3. Under Privacy and security, click Site settings.
  4. Click JavaScript.
  5. At the top, turn on or off Allowed (recommended).
Visit Site here
Any Question? Contact us
logo
Jobs or company...

Manager/ Assistant Director (2 years contract)

Salary undisclosed
Checking job availability...
Original
Simplified
What the role is:To support the ACISO in cybersecurity matters which include conducting gap analysis to identify ICT security risks faced by the SFA, security governance, policies/standards/guidelines, risk management, security awareness, threat and incident management, security development during system development life cycle, security control implementation, cloud security.WHAT THE OFFICER WILL BE WORKING ON:List the key responsibilities.Gap AnalysisConduct gap analysis to identify ICT security risks faced by the Agency, gauge the Agency's ICT security posture and level of maturity against their Ministry Family (MF) ICT security maturity model.Security Governancea) Comply with Agency and specific MF security requirements;b) Collate key security matrices which will be aggregated at the MF level and submit quarterly security scorecard for SFA to GovTech;c) Put in place and regularly review (annually or whenever there are changes to its business/ICT environment) the security metrics; andd) Implement the MF's risk and control program to manage the security posture of the Agency's systems.Policies, Standards & GuidelinesAdopt the MF's ICT security policy baseline and any associated Standards to formulate Agency's ICT Security Policy.Risk Managementa) Perform risk assessments for all ICT systems;b) Maintain Security Risk Register (to track approved waivers, risk acceptance, corrective action plan); andc) Ensure residual risks are accepted by appropriate Agency stakeholders, guided by Ministry risk appetite statement and within risk tolerance levels.Security AwarenessConduct ICT security awareness and education for Agency users (including its IT officers and Third Parties).Threat & Incident Managementa) Identify and treat risks for all ICT systems, as well as the management of incidents;b) Implement proper security monitoring systems built-in to detect, prevent and recover from any security incident for all ICT systems;c) Investigate ICT security incidents which is required by GovTech for all agencies;d) Work with GITSIR and provide technical assistance on investigating, resolving and recovering system from security incidents;e) Support security incident response workshops and exercises (table-top exercises, simulation and drills); andf) Conduct annual Disaster Recovery (DR) exercise to help user representative to verify the integrity of the DR system and technical representative to refresh with the recovery process.Secure Development Lifecyclea) Ensure that management and execution of all Agencies' ICT system development and project management are in compliance to IM8's security and related security requirements; andb) Review all Agency's security testing reports (Vulnerability Assessments/ Penetration Tests/ Source Code Review) and ensure mitigation is performed satisfactorily.Security Controls Implementationa) Ensure that the management and execution of all Agency's ICT systems are operating in compliance to IM8's security and other security requirements, including:Account and access management; Patching, hardening and management of deviations; Network connectivity to Government networks; Privileged and remote access user management; Logging of key system events and activities to enable incident investigations; and Manage the vulnerability assessment, penetration testing and source code scanning of SFA application systems and work with Application/Infrastructure Managers and vendors to resolve any findings on time.Key Requirements:
  • Experience in cybersecurity operations, risk management, cybersecurity governance.
  • Knowledge in Cloud Security is preferred.
  • Excellent written and verbal communication and ability to influence and communicate effectively with non-technical audience.
  • The officer should have strong analytical and technical problem-solving skills and be adept in vendor management, risk management and incident response management.
  • Possession of good conceptualisation skills with ability to drive initiatives and strong management skills.
  • Good communications and interpersonal skills, able to work both independently and as a member of a team.
Be inquisitive and an advocate for best practices and continuous learning.We regret that only shortlisted candidates will be notifed for the interview.About Singapore Food Agency:The Singapore Food Agency (SFA) is a new Statutory Board formed under the 'Ministry of Sustainability and the Environment (MSE) to oversee food safety and security. The SFA will serve as the single point of contact for public feedback on food-related issues, and strengthen management of foodborne disease outbreaks to protect public health. The SFA will also facilitate more business-friendly regulations with oversight of all food safety policies and consolidation of food laboratory capabilities to deepen competencies in food diagnostics, and research and development in food safety.
What the role is:To support the ACISO in cybersecurity matters which include conducting gap analysis to identify ICT security risks faced by the SFA, security governance, policies/standards/guidelines, risk management, security awareness, threat and incident management, security development during system development life cycle, security control implementation, cloud security.WHAT THE OFFICER WILL BE WORKING ON:List the key responsibilities.Gap AnalysisConduct gap analysis to identify ICT security risks faced by the Agency, gauge the Agency's ICT security posture and level of maturity against their Ministry Family (MF) ICT security maturity model.Security Governancea) Comply with Agency and specific MF security requirements;b) Collate key security matrices which will be aggregated at the MF level and submit quarterly security scorecard for SFA to GovTech;c) Put in place and regularly review (annually or whenever there are changes to its business/ICT environment) the security metrics; andd) Implement the MF's risk and control program to manage the security posture of the Agency's systems.Policies, Standards & GuidelinesAdopt the MF's ICT security policy baseline and any associated Standards to formulate Agency's ICT Security Policy.Risk Managementa) Perform risk assessments for all ICT systems;b) Maintain Security Risk Register (to track approved waivers, risk acceptance, corrective action plan); andc) Ensure residual risks are accepted by appropriate Agency stakeholders, guided by Ministry risk appetite statement and within risk tolerance levels.Security AwarenessConduct ICT security awareness and education for Agency users (including its IT officers and Third Parties).Threat & Incident Managementa) Identify and treat risks for all ICT systems, as well as the management of incidents;b) Implement proper security monitoring systems built-in to detect, prevent and recover from any security incident for all ICT systems;c) Investigate ICT security incidents which is required by GovTech for all agencies;d) Work with GITSIR and provide technical assistance on investigating, resolving and recovering system from security incidents;e) Support security incident response workshops and exercises (table-top exercises, simulation and drills); andf) Conduct annual Disaster Recovery (DR) exercise to help user representative to verify the integrity of the DR system and technical representative to refresh with the recovery process.Secure Development Lifecyclea) Ensure that management and execution of all Agencies' ICT system development and project management are in compliance to IM8's security and related security requirements; andb) Review all Agency's security testing reports (Vulnerability Assessments/ Penetration Tests/ Source Code Review) and ensure mitigation is performed satisfactorily.Security Controls Implementationa) Ensure that the management and execution of all Agency's ICT systems are operating in compliance to IM8's security and other security requirements, including:Account and access management; Patching, hardening and management of deviations; Network connectivity to Government networks; Privileged and remote access user management; Logging of key system events and activities to enable incident investigations; and Manage the vulnerability assessment, penetration testing and source code scanning of SFA application systems and work with Application/Infrastructure Managers and vendors to resolve any findings on time.Key Requirements:
  • Experience in cybersecurity operations, risk management, cybersecurity governance.
  • Knowledge in Cloud Security is preferred.
  • Excellent written and verbal communication and ability to influence and communicate effectively with non-technical audience.
  • The officer should have strong analytical and technical problem-solving skills and be adept in vendor management, risk management and incident response management.
  • Possession of good conceptualisation skills with ability to drive initiatives and strong management skills.
  • Good communications and interpersonal skills, able to work both independently and as a member of a team.
Be inquisitive and an advocate for best practices and continuous learning.We regret that only shortlisted candidates will be notifed for the interview.About Singapore Food Agency:The Singapore Food Agency (SFA) is a new Statutory Board formed under the 'Ministry of Sustainability and the Environment (MSE) to oversee food safety and security. The SFA will serve as the single point of contact for public feedback on food-related issues, and strengthen management of foodborne disease outbreaks to protect public health. The SFA will also facilitate more business-friendly regulations with oversight of all food safety policies and consolidation of food laboratory capabilities to deepen competencies in food diagnostics, and research and development in food safety.