Total 88 Legal / Public / Security job vacancies in City of London, London, EC3V 3QX

Are you passionate about offensive security, enjoy breaking down walls with an array of tools and techniques, and continuously learning about the offensive security world? We are seeking a dynamic Cyber & Offensive Security Risk Lead to join our Data, Technology & Cyber Risk function.

Job Description:

The Cyber & Offensive Security Risk Lead will assist the Chief Information Security Officer to establish and maintain robust governance and oversight over the effectiveness of cyber risk management to ensure that the Bank’s technology and information assets are adequately protected.

Primary Responsibilities:

• Assist with the development, review, update and/or roll-out of cyber risk-related framework, policy, and initiatives to facilitate effective risk management and governance over cyber risk management.
• Review and assess the extent of compliance with internal policies, procedures, standards and regulatory requirements.
• Provide advisory, guidance and challenge to Business Units and Functional Units in their management of cyber risks to achieve their business objectives and within the Bank’s risk appetite.
• Conduct independent assessments on the adequacy and effectiveness of control measures implemented by the 1st Line of Defense (FLOD), and recommend mitigation actions to address vulnerabilities, if any.
• Lead Red Team (offensive cyber) activities to proactively simulate real-world cyber-attacks on the Bank’s security controls to identify and exploit security weaknesses and vulnerabilities.
• Provide recommendations and remediation strategies to address security vulnerabilities identified during offensive cyber activities.
• Establish relevant Key Risk Indicators (KRIs) and metrics to monitor and measure cyber risk exposures.
• Prepare and present cyber risk reports to Senior Management and relevant committees, highlighting key findings, trends and/or recommendations.
• Respond to enquiries and audits (i.e. internal, external and regulatory) pertaining to cyber risks.
• Where required, collaborate with the Bank’s cyber incident response team to provide advice and/or support during security incidents and cyber-attacks.
• Conduct cyber risk awareness training across the Bank, fostering cyber risk awareness and a security-conscious culture.
• Stay abreast of emerging cyber threats, vulnerabilities, attack techniques, and regulatory developments to proactively address potential cyber risks, and assist the Management (and/or Board) understand potential concerns or risks that might impact the Bank.

Qualifications:

• Bachelor’s degree in computer science, Information Security or a related field.
• Minimum of 15 years’ experience in any of these disciplines: offensive security, information security, risk management or compliance in related areas.
• Professional certification such as CISSP, CCSP, CGRC, CISM, CISA, CRISC, CompTIA PenTest+, Offensive Security (e.g. OSCP, OSCE, OSWE & OSWP), SANS (e.g. GXPN, GWAPT, GPEN & GMOB), Zero-Point Security and/or CREST would be advantageous.
• Sound knowledge in regulatory requirements around technology risk and cyber resilience.
• Knowledge of network protocols, operating systems, application security and cloud security.
• Possess strong verbal and written communication skills, and capable of engaging senior stakeholders.
• Clear analytical thought process and good understanding of emerging technological developments and risk management frameworks.

Perks & Benefits

• Allowance (transportation, parking etc.)
• Nearby public transport
• Smart casual dress code
• Medical insurance
• Annual leave, Birthday Leave etc

[ICSA/MAISCA]

o Position title: Assistant Manager, ICSA Corporate Secretarial.

o Remuneration: RM 6000-8000.

o Location: Mid Valley City (5-day week), Kuala Lumpur.

About the company

Our client is a professional corporate secretarial consulting entity providing full spectrum of secretarial services to several listed companies and group of highly successful businesses in Malaysia. Due to expansion and restructuring in recent time, they need to build a strong company secretarial team to ensure company compliance and champion corporate governance matters. With the business undergoing rapid expansion, they are currently seeking professional ICSA graduate to assume the role of Corporate Secretarial,Assistant Manager based at their corporate head office at Mid Valley City, KL.

The job

The successful candidate for this role will be working in a small growing team and the position will assist the Company Secretary with the entire company secretarial functions across various subsidiaries and jurisdictions. The role will involve close contact with Directors, senior management, in particular Tax, Legal, Group financial Reporting within the organization.

This is a broad ranging and hands-on role which involves working in a busy team environment.

The responsibilities will involve:

o Delivery of company secretarial duties for the company's various subsidiaries.

o Preparation of broad and committee packs.

o Producing clear and concise minutes of meetings.

o Assist to ensure that the Companies Act and relevant regulatory requirements are adhered to and complied.

o Assisting in keeping statutory records of the Company's subsidiaries up-to-date.

The candidate

Aspiring candidate who are interested in this Senior Executive (Assistant Manager)level role will have a considerable PLC experience with recent experience of managing large share schemes, reports and accounts in a PLC environment listing and organizing large scale AGMs.

Candidate must be a qualified Chartered Secretary/ICSA associate level with minimum 3 years of post qualified experience in handling corporate secretarial duties.

Possess strong knowledge of basic company secretarial compliance matters, maintenance of company registers and share certificates,issuing and transfer of shares and listing requirements.

Experience of convening and attending Board meetings plus preparation of minutes.

Experience of drafting board and shareholder resolutions.

Excellent written and spoken English is necessary and essential.

APPLICATION

Interested candidates are hereby invited to apply by forwarding a copy of your resume for our review. You may apply online through JOBSTORE by clicking the apply button to submit your application. Alternatively, candidates may forward resume directly to us at CHRISJAC via our E-mail at jobs@chrisjac.com.my

Perks & Benefits

• Casual dress code
• Personal leave
• Open culture

o 職位名稱：助理經理，公司秘書。

o 報酬：RM 6000-8000。

o 地點：吉隆坡谷中城（每週工作 5 天）。

關於公司

我們的客戶是一家專業的公司秘書諮詢實體，為馬來西亞的多家上市公司和一群非常成功的企業提供全方位的秘書服務。由於最近的擴張和重組，他們需要建立一支強大的公司秘書團隊，以確保公司合規並支持公司治理事務。隨著業務的快速擴張，他們目前正在尋找專業的 ICSA 畢業生，擔任位於吉隆坡谷中城的公司總部的公司秘書、經理助理。

工作內容

該職位的成功候選人將在一個不斷壯大的小型團隊中工作，該職位將協助公司秘書履行各個子公司和司法管轄區的整個公司秘書職能。該職位將涉及與董事、高階管理層，特別是組織內的稅務、法律、集團財務報告部門的密切聯繫。

這是一個範圍廣泛且需要實踐的角色，涉及在繁忙的團隊環境中工作。

職責將涉及：

o 履行公司各子公司的公司秘書職責。

o 準備廣泛的和委員會的資料包。

o 製作清晰簡潔的會議記錄。

o 協助確保公司法和相關監管要求得到遵守和遵守。

o 協助維持公司子公司的法定記錄為最新狀態。

候選人

對這一高級管理人員（助理經理）級別職位感興趣的有抱負的候選人將擁有豐富的PLC 經驗，以及最近在PLC 環境中管理大型股份計劃、報告和帳戶、上市和組織大型年度股東大會的經驗。

候選人必須是合格的特許秘書/ICSA 準會員級別，並具有至少 3 年處理公司秘書職責的合格經驗。

對基本公司秘書合規事宜、公司登記冊和股票的維護、股票發行和轉讓以及上市要求擁有豐富的知識。

具有召集和出席董事會會議以及準備會議記錄的經驗。

起草董事會和股東決議的經驗。

優秀的英語書面和口語是必要且必不可少的。

應用

特此邀請有興趣的候選人透過轉發您的履歷副本進行申請，以供我們審核。您可以透過JOBSTORE線上申請，點擊「申請」按鈕提交您的申請。或者，候選人可以透過我們的電子郵件jobs@chrisjac.com.my將簡歷直接轉發給我們CHRISJAC

津貼和福利

• 休閒著裝要求
• 事假
• 開放文化

• Serves as the data center and cloud SME for information and cybersecurity compliance, develops SOPs, and operational policies to ensure performance parameters, and policy guidance are implemented.
• Collaborates with managers and staff to support security compliance with the Federal Information Security Management Act (FISMA) and provides oversight of the organization's implementation of the NIST Risk Management Framework (RMF).
• Advises management and staff of changes in cyber security systems policies and procedures, and works closely with Hosted Infrastructure (HI) project teams to implement security management enhancements.
• Serves as liaison between project teams and Department stakeholders that include the IT Change Control Board (CCB) to provide authoritative guidance regarding the configuration management process.
• Represents Division in deliberations with IT CCB voting members, and provides expert advice to senior management concerning vital cybersecurity problems and issues.

This position is in the Office of the Assistant Attorney General (AAG) for the Antitrust Division of the Department of Justice in Washington, D.C. The incumbent serves as Director of Litigation reporting directly to a Deputy Assistant Attorney General. The incumbent provides executive leadership over, and exercises assigned authority for, the planning, direction, timely execution, and evaluation of ATR's Litigation Program. The incumbent also oversees and manages civil and criminal litigation strategies and tactics across the Division's cases.

Major duties and responsibilities include, but are not limited to:

• Responsible for executive oversight and management of all matters concerning possible violations of antitrust law of major economic significance. Recommends and provides advice regarding investigative plans for civil and criminal matters that should be pursued.
• Oversees and manages civil and criminal trial and/or hearing strategies with legal staffs and, if necessary, must be prepared to take over any civil or criminal litigation matters in the courtroom and to independently handle arguments of major issues or negotiations with defense counsel. Utilizes extensive expertise to provide subject matter training and guidance to Division managers, attorneys, paralegals, and other staff on civil and criminal litigation principles and procedures.
• Leads oversight of strategic planning for the implementation of short- and long-term goals and objectives, while independently assessing the feasibility, balance, and support for these objectives. Identifies potential problems and devises various contingency plans to address the problems. Develops organizational plans to provide an operation capable of meeting changing requirements and recommends reorganization as the need becomes evident. Oversees execution of the strategic plan and ensures progress toward identified goals, objectives, and targets.
• Serves as advisor on both civil and criminal litigation to the DAAG, Litigation, Assistant Attorney General (AAG), Principal Deputy Assistant Attorney General (PDAAG), DAAGs, and Chiefs, Assistant Chiefs, and staff in the Division's litigating sections and offices.
• In partnership with the civil and criminal enforcement programs, reviews the preparation of memoranda outlining the factual and legal issues involved in civil and criminal matters and the collection of evidence; oversees the selection and examination of witnesses, the preparation of briefs, motions, and other required legal documents for civil and criminal matters; and allocates the litigative resources that will be required for assigned civil and criminal matters and how they are to be utilized.
• Exercises personnel management responsibilities, which includes technically and administratively supervising and evaluating the work of the Litigation Program through subordinate supervisors, including any deputy directors, Senior Litigation Counsel, and other subordinate staff and making recommendations for promotion, employment and separation.

The selectee will serve as a Supervisory Public Affairs Specialist in the Office of Director, Office of Communication and Media Relations. Typical work assignments include:

• Managing the development, and execution of strategic public affairs programs and campaigns that convey complex information by leveraging all available communication channels and emerging technology.
• Designing communication strategies that define and convey messages to the intended audience anticipating impending potential ramifications and offering strategies and providing alternative actions and assessments to overcome impediments.
• Providing editorial oversight of speeches, scripts, news, and external audience.
• Establishing and maintaining effective working relationships with members of the press, radio, television, other Federal, state, and local agencies, industries, and civic groups.

• Coordinates and supervises the planning, design and construction of engineering practices such as water management, animal waste management erosion control, flood control, and other conservation practices needing engineering guidance.
• Recommends changes in designs, specifications, and schedule to accommodate conditions at the construction site, availability of materials, or to expedite construction.
• Plans and conducts pre-bid site showing, approves construction schedules, monitors work for compliance with plans and specification and contract requirements.
• Directs and performs site investigations and feasibility studies; field checks and field construction. checks for conservation practice installations.
• Coordinates and conducts necessary quality assurance reviews of planned, designed, and constructed engineering projects in the assigned area or state.
• Serves as or directs the Contracting Officer's Representative (COR).
• Provides technical guidance and training to personnel in the area of all engineering practices and in the use and care of engineering equipment.

The Director of Engagement leads the five-person Community and Alumni Affairs (CAA) Section. The Community and Alumni Affairs section conducts participant recruitment and registration, manages alumni relations, manages the alumni database, prepares and compiles course evaluations, and conducts key stakeholder outreach for the Africa Center for Strategic Studies. He/She works closely with the ACSS alumni to create and catalyze alumni chapters and communities of interest as dynamic vehicles for ongoing professional education, peer-to-peer engagements, and security sector governance norms reinforcement. He/She serves as a member of the Leadership Team of the Africa Center for Strategic Studies and as such represents and interfaces with members of the diplomatic community, colleagues and students at the National Defense University, and other key stakeholders in the U.S. Government and elsewhere.

• The incumbent supervises the CAA team to recruit and manage participants for all academic and outreach programs, maintain participant and alumni databases, sustain alumni relationships, support alumni community chapters, and build networks with US Embassies and US government stakeholders necessary to manage the Africa Center's participant affairs. Develops internal operating procedures, checklists, milestones, and metrics for the CAA section to effectively plan and coordinate across Africa Center sections to execute program requirements. Works closely with faculty to develop recruiting strategies and profiles to promote diverse, engaged participants who are, or will be, leaders in African security sector institutions. Oversees the development and implementation of alumni and outreach programs. Manages the CAA section to accomplish all assigned tasks in support of the Africa Center's mission and vision.
• He/She develops and executes engagement strategies to interact (both virtually and in person) with alumni, partners, and stakeholders. This includes designing and executing events and engagements for alumni and key stakeholder audiences such as the African diplomatic community in Washington, D.C., U.S. government interagency and congressional colleagues working on Africa, and the National Defense University community. He/She will leverage the ACSS alumni network to create and enhance alumni chapters and communities of interest to be force multipliers in strengthening security sector institutions on the continent.
• He/She provides guidance and direction for conducting program evaluations to include the evaluation content and questions, compilation of responses, and analysis of responses. He/she contributes to strategic planning and assessing ACSS mission impact through timely analysis and reports on enrollment, participation trends, and changes in stakeholder interests and priorities. Proposes and develops innovative approaches and tools to enhance engagement, recruitment of participants, and sustainment of relationships.
• He/She is a member of the Leadership Team for the Africa Center. He/she represents the Africa Center at external events as requested by the Director. He/She may moderate sessions and serve as a subject matter expert speaker or panelist during Africa Center programs, and may serve as a facilitator for small group discussions.
• Performs other duties as assigned.

• You will establish, develop, coordinate and maintain the personnel security program for sensitive compartmented information (SCI) within NAVSEA.
• You will develop SCI security education and training methods and procedures, and establishes goals and objectives, determines customer needs and coordinates training schedules and events.
• You will determine the suitability and security eligibility of individuals for entry and retention in all risk level positions.
• You will establish, gather, and coordinate record of evidence in support of proposed personnel security and suitability actions and decisions.
• You will ensure adequate policy and procedures are in place to determine the eligibility of persons to occupy SCI and program positions.
• You will serve as advisor to the heads of supported activities on SCI personnel and program security matters.
• You will act as NAVSEA liaison to the Department of Defense (DoD) Consolidated Adjudication Facility on matters associated with personnel security investigation and adjudication of SCI for NAVSEA employees.
• You will coordinate changes in the personnel security program as it relates to work requirements within SCI personnel security and their impact on administrative functions within the command and supported organizations.
• You will maintain protection, control and safeguarding of Privacy Act Information on applicants, employees and contractors
• You will establish and maintain effective relationships with, and gain the cooperation of, all parties with regard to personnel security and suitability issues.

What will I do in this position if hired?

In this position, you will provide support and coordination related to all security management activities at the assigned location. Typical assignments include:

• Serving as the on-site Security Specialist point of contact for Office of the Chief Security Officer and provides headquarters with support and advisories related to all Office of the Chief Security Officer security management activities.
• Developing, installation and management of the comprehensive and multilayered security programs at the facility by reviewing and assessing all areas of security.
• Conducting risk assessments, implementing countermeasures and procedures and practices to cover multiple security objectives.
• Coordinating with Federal Protective Services, all inter agency personnel, and requisite task forces to identify, resolve security issues through integration of varied objectives and enhance security and operational requirements of FEMA.

What else do I need to know?

At FEMA, our mission is to help people before, during and after disasters, and every employee at FEMA has a role in emergency management. Every FEMA employee has regular and recurring emergency management responsibilities, though not every position requires routine deployment to disaster sites. All positions are subject to recall around the clock for emergency management operations, which may require irregular work hours, work at locations other than the official duty station, and may include duties other than those specified in the employee's official position description. Travel requirements in support of emergency operations may be extensive in nature (weeks to months), with little advance notice, and may require employees to relocate to emergency sites with physically austere and operationally challenging conditions.

FEMA is committed to ensuring that its workforce reflects the diversity of the nation. At FEMA, our workforce includes the many identities, races, ethnicities, backgrounds, abilities, ages, cultures, and beliefs of the people we serve. To learn about FEMA's ongoing diversity and inclusion efforts, reasonable accommodation process, and the FEMA Core Values, please visit www.fema.gov.

Promotion Potential: Future promotions will be dependent on your ability to perform the duties at a higher level, the continuing need for an employee assigned to the higher level, and administrative approval.

What will I do in this position if hired?

In this position, you will provide support and coordination related to all security management activities at the assigned location. Typical assignments include:

• Serving as the on-site Security Specialist POC for OCSO and provides headquarters with support and advisories related to all OCSO security management activities.
• Developing, installation and management of the comprehensive and multilayered security programs at the facility by reviewing and assessing all areas of security.
• Conducting risk assessments, implementing countermeasures and procedures and practices to cover multiple security objectives.
• Coordinating with Federal Protective Services, all inter agency personnel, and requisite task forces to identify, resolve security issues through integration of varied objectives and enhance security and operational requirements of FEMA.

What else do I need to know?

At FEMA, our mission is to help people before, during and after disasters, and every employee at FEMA has a role in emergency management. Every FEMA employee has regular and recurring emergency management responsibilities, though not every position requires routine deployment to disaster sites. All positions are subject to recall around the clock for emergency management operations, which may require irregular work hours, work at locations other than the official duty station, and may include duties other than those specified in the employee's official position description. Travel requirements in support of emergency operations may be extensive in nature (weeks to months), with little advance notice, and may require employees to relocate to emergency sites with physically austere and operationally challenging conditions.

FEMA is committed to ensuring that its workforce reflects the diversity of the nation. At FEMA, our workforce includes the many identities, races, ethnicities, backgrounds, abilities, ages, cultures, and beliefs of the people we serve. To learn about FEMA's ongoing diversity and inclusion efforts, reasonable accommodation process, and the FEMA Core Values, please visit www.fema.gov.

Promotion Potential: Future promotions will be dependent on your ability to perform the duties at a higher level, the continuing need for an employee assigned to the higher level, and administrative approval.

As an Information Security Specialist, GS-0080-12, you will:

• Serves as the Wing Information Protection Program Manager executing/enforcing all operational, functional, and mission assurance aspects of the program.
• Formulates wing program goals, plans, policy implementation guidelines, procedures, and work plans dealing with the development and operation of wing-wide information security programs and activities and provides technical and administrative direction to subordinate wing information security personnel. Interprets National Guard Bureau (NGB), Air National Guard (ANG), Air Force (AF), Department of Defense (DoD), and other federal regulations for information security processes as they apply and are implemented within the Wing.
• Demonstrates expert knowledge of the information security field that is necessary to provide effective guidance, training, and direction to subordinate squadron level organizations/activities/units. Establishes and maintains liaisons with senior personnel at wing, NGB, ANG, and MAJCOM.
• Prepares information security review reports and provides recommendations and advice.
• Analyzes and evaluates the classification downgrading, declassification, and destruction programs.
• Advises installation project engineers, project managers, command mission leads, action officers, and effected operational officers of their responsibility to provide proper classified management guidance and specification requirements during performance of respective duties.
• Oversees, directs, monitors, and conducts regulatory and non-regulatory security surveys and Information Security Program Reviews (ISPRs) to monitor and enforce implementation and oversight of DoD Information, Personnel, and Industrial Security Programs.
• Evaluates compliance of activities with complex security requirements, identifies deficiencies, and ensures corrective action is identified for each deficiency found.
• Prepares ISPR reports and briefs commanders on requirements and recommendations.
• Makes information protection risk assessments and risk management/mitigation strategies/recommendations based on intelligence-derived threat issues that may require deviations from or synthesis of policies.
• Delivers, Security Awareness and Education Programs to satisfy security education and training requirements for all assigned organizations.
• Performs other duties as assigned.