Application Security Officer (Cloud Security, Cyber-Security, DevOps Infrastructure Security)
Voir toutes les offres
Application Security Officer (Cloud Security, Cyber-Security, DevOps Infrastructure Security)
Asia - Singapore
Digital et Systèmes d'Information
CDI
5/14/2024
Partager
POSTULER
Vos responsabilités
Job Description:
- Manage the risks of the Cloud-related projects
- Act as an IT Risk, Continuity & CyberSecurity Lead on the division’s strategic transformation Program
- With a thorough understanding of the organization's technology and IT systems, planning, researching, and designing security architectures, to identify IT security risks in advance
- Ensure the compliance level of the applications with the Security architecture standards including Third-party and cloud security risks.
- Participate and follow-up on different transversal initiatives to improve the security standpoint
- Leveraging on a deep knowledge of Security standards such as NIST, CIS, ISO2700x, ensure the compliance with the IT security requirements
- Ensure the compliance with the Third-party Technology risks and the Cloud security
- Ensure the solutions of Data Management, Data analytics and data science solutions are implemented with the Group security architecture requirements (e.g. Tableau, PowerBI, AI and other Data analytics solutions).
- Alignment on the objectives and means, contribution to the different global reporting (WM Cybersecurity Committee, Project Architecture and Security validation committees, Application Security Dashboard).
- Coordination with the Global security teams concerning integration of banking assets within production sites.
- Participate in the deployment of new security practices and DevSecOps pipeline
- Ensure that SSDLC practices are well followed
Votre profil
Job Requirements:
- At least Bachelor’s Degree in Computer Science or related field
- 5-8 years' experience in information security and IT risk management
- Experience in evaluation and design of technical architectures and processes
- Functional as well as technical knowledge of the common architecture and Cybersecurity frameworks and solutions
- Strong knowledge in secure development and SSDLC processes
- Knowledge of the Norms and Standards of the banking and cybersecurity industry
- Banking Knowledge and understanding of Wealth Management specificities
- Strong knowledge on Cloud security
- Network protocols and network connectivity concepts; Firewall and Internet technologies
- Secure application design and architecture principles – including DevSecOps tools and practices (CI/CD)
- Encryption and Key Management techniques
- Technical proficiency in various Operating Systems (Linux, AIX, Windows, AS400) and Databases (Oracle, MSSQL, PostGreSQL, MongDB)
- Knowledge of understanding digital transformation and mobile technologies and Cloud (Containers Docker, Kubernetes)
- Deep understanding of cybersecurity threats and remediation options
- IT Security Risk Assessment and Risk Management
- Knowledge of emerging technologies (NFT, encryption)
- Knowledge in technologies like OAuth, Single Sign On, API based approach, TDD, BDD
- Advanced IT security certifications: CISSP / CISM / SANS Certification
- Experience in Operational Risk and Permanent Control is an advantage
À propos d'Antaes
Créée en 2007, Antaes est une société suisse de conseil en management et technologie classée dans le top 15 des sociétés de conseil en Suisse. Nous comptons plus de 300 ingénieurs expérimentés qui partagent notre passion.
Présents en Suisse, à Singapour, à Hong-Kong et en France, nous accompagnons nos clients suisses, et internationaux en intervenant dans les domaines suivants :
- Conseil en organisation et transformation
- Ingénierie Industrielle
- Management des systèmes d'Information
En rejoignant nos équipes vous découvrirez :
- Une équipe dynamique dans un esprit start-up
- Un accompagnement humain et un suivi de l’évolution de votre carrière
- Des challenges pour contribuer au développement de votre réseau
- Des événements : team building, meet-up, workshop, Winter Event …
-
Une entreprise certifiée @HappyAtWork et ayant une politique RSE engagée (médaille d’or Ecovadis2023)
POSTULER
Nos autres offres
Investigations Specialist - Biotech
Location : Vaud
Start date : Asap
Workload : 100%, on-site
To join our Life Sciences team in Vaud, we are looking for an Investigations Specialist. You will manage and resolve manufacturing deviations in the Downstream Processing (DSP) area, ensuring timely and compliant investigations within the quality system.
The project :
- Lead deviation investigations using Six Sigma methods (DMAIC, Ishikawa, 5M, etc.).
- Evaluate equipment, product, and material impacts with expert support.
- Identify root causes and define corrective/preventive actions (CAPA).
- Prepare and present investigation reports and action plans.
- Track key performance indicators (deviations and CAPA).
- Facilitate cross-functional workshops when needed.
Ingénieur Sécurité au travail
Lieux : Genève
Date de début : Asap
Occupation du poste : 100%, sur site
Pour rejoindre nos équipes près de Genève, nous recrutons un Ingénieur Santé et Sécurité au travail.
Le projet :
- Mettre en œuvre et suivre la politique santé-sécurité au sein de plusieurs départements.
- Piloter le système de management santé-sécurité (analyses de risques, audits, formation, reporting, plans d’action).
- Apporter votre expertise sécurité dans les projets de construction ou de rénovation.
- Garantir la conformité incendie et coordonner les relations avec les autorités et partenaires (inspection, OCIRT, SUVA, etc.).
- Participer à l’amélioration continue des systèmes de management QSSE.
Chargé de projet industrialisation & environnement
Lieux : Genève
Date de début : Asap
Occupation du poste : 100%, sur site
Pour rejoindre nos équipes à Genève, nous recrutons un Chargé de projet industrialisation & environnement dont la mission principale est de garantir la conformité légale et la réduction des impacts environnementaux dans le cadre des projets d’acquisition d’équipements industriels.
Le projet :
- Piloter l’amélioration continue des cahiers des charges des équipements, en intégrant les exigences environnementales et énergétiques.
- Définir les objectifs et orienter la stratégie de durabilité pour les projets d’acquisition d’équipements industriels sur les sites de production.
- Promouvoir et intégrer les principes de l’écoconception dans le développement des nouveaux équipements.
- Sur les projets prioritaires, assurer le pilotage des objectifs environnementaux, depuis la définition du cahier des charges jusqu’à la qualification industrielle, en mobilisant l’ensemble des parties prenantes.
- Évaluer les concepts techniques, valider les solutions proposées et contribuer à la prise de décision.
- Organiser la capitalisation et la valorisation des données environnementales dans les outils informatiques dédiés.
- Participer aux réseaux internes de compétences et aux groupes transversaux.
- Assurer une communication proactive et claire auprès des différents interlocuteurs.
Automaticien
Pour rejoindre nos équipes près de Fribourg, nous recherchons un Ingénieur Automaticien avec la maitrise de Beckhoff, Siemens, Rockwell.
Le projet :
- Développer, tester et valider des améliorations logicielles pour les machines outils CNC.
- Optimiser les performances des logiciels et rester à la pointe des technologies.
- Collaborer avec d’autres ingénieurs pour intégrer les solutions logicielles.
- Assurer la maintenance des logiciels existants et le support technique aux utilisateurs.
Project Manager – Equipment Design
We are looking for a proactive and detail-oriented Project Manager in Equipment Design to lead the development, design, and implementation of process equipment within a regulated environment. You will oversee technical design activities from concept to qualification, ensuring compliance with engineering standards, project timelines, and GMP requirements.
Your role:
- Lead equipment design projects from feasibility through to commissioning and qualification.
- Coordinate mechanical, automation, and process design activities with internal and external stakeholders.
- Develop and review technical specifications, design documentation, and FAT/SAT protocols.
- Manage supplier relationships, including technical alignment, design reviews, and project follow-up.
- Ensure budget and schedule control across all project phases.
- Oversee change management and risk assessment related to equipment design and modifications.
- Support CQV teams during qualification phases and participate in design improvement workshops.
- Guarantee compliance with GMP, safety, and quality standards for all equipment.
FORMULAIRE DE CANDIDATURE
* champs obligatoires
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Application Security Officer (Cloud Security, Cyber-Security, DevOps Infrastructure Security)
Asia - Singapore
Digital et Systèmes d'Information
CDI
Vos responsabilités
Job Description:
- Manage the risks of the Cloud-related projects
- Act as an IT Risk, Continuity & CyberSecurity Lead on the division’s strategic transformation Program
- With a thorough understanding of the organization's technology and IT systems, planning, researching, and designing security architectures, to identify IT security risks in advance
- Ensure the compliance level of the applications with the Security architecture standards including Third-party and cloud security risks.
- Participate and follow-up on different transversal initiatives to improve the security standpoint
- Leveraging on a deep knowledge of Security standards such as NIST, CIS, ISO2700x, ensure the compliance with the IT security requirements
- Ensure the compliance with the Third-party Technology risks and the Cloud security
- Ensure the solutions of Data Management, Data analytics and data science solutions are implemented with the Group security architecture requirements (e.g. Tableau, PowerBI, AI and other Data analytics solutions).
- Alignment on the objectives and means, contribution to the different global reporting (WM Cybersecurity Committee, Project Architecture and Security validation committees, Application Security Dashboard).
- Coordination with the Global security teams concerning integration of banking assets within production sites.
- Participate in the deployment of new security practices and DevSecOps pipeline
- Ensure that SSDLC practices are well followed
Votre profil
Job Requirements:
- At least Bachelor’s Degree in Computer Science or related field
- 5-8 years' experience in information security and IT risk management
- Experience in evaluation and design of technical architectures and processes
- Functional as well as technical knowledge of the common architecture and Cybersecurity frameworks and solutions
- Strong knowledge in secure development and SSDLC processes
- Knowledge of the Norms and Standards of the banking and cybersecurity industry
- Banking Knowledge and understanding of Wealth Management specificities
- Strong knowledge on Cloud security
- Network protocols and network connectivity concepts; Firewall and Internet technologies
- Secure application design and architecture principles – including DevSecOps tools and practices (CI/CD)
- Encryption and Key Management techniques
- Technical proficiency in various Operating Systems (Linux, AIX, Windows, AS400) and Databases (Oracle, MSSQL, PostGreSQL, MongDB)
- Knowledge of understanding digital transformation and mobile technologies and Cloud (Containers Docker, Kubernetes)
- Deep understanding of cybersecurity threats and remediation options
- IT Security Risk Assessment and Risk Management
- Knowledge of emerging technologies (NFT, encryption)
- Knowledge in technologies like OAuth, Single Sign On, API based approach, TDD, BDD
- Advanced IT security certifications: CISSP / CISM / SANS Certification
- Experience in Operational Risk and Permanent Control is an advantage
Our positions are open to people who have been recognized as disabled workers. T&S Group promotes diversity and equality in the workplace. All qualified M/F candidates are considered for employment on an equal basis.
À propos d'Antaes
Créée en 2007, Antaes est une société suisse de conseil en management et technologie classée dans le top 15 des sociétés de conseil en Suisse. Nous comptons plus de 300 ingénieurs expérimentés qui partagent notre passion.
Présents en Suisse, à Singapour, à Hong-Kong et en France, nous accompagnons nos clients suisses, et internationaux en intervenant dans les domaines suivants :
- Conseil en organisation et transformation
- Ingénierie Industrielle
- Management des systèmes d'Information
En rejoignant nos équipes vous découvrirez :
- Une équipe dynamique dans un esprit start-up
- Un accompagnement humain et un suivi de l’évolution de votre carrière
- Des challenges pour contribuer au développement de votre réseau
- Des événements : team building, meet-up, workshop, Winter Event …
-
Une entreprise certifiée @HappyAtWork et ayant une politique RSE engagée (médaille d’or Ecovadis2023)
