Total 602 Others level Legal / Public / Security job vacancies in Hessle, East Riding of Yorkshire, HU13 0AA

Are you passionate about offensive security, enjoy breaking down walls with an array of tools and techniques, and continuously learning about the offensive security world? We are seeking a dynamic Cyber & Offensive Security Risk Lead to join our Data, Technology & Cyber Risk function.

Job Description:

The Cyber & Offensive Security Risk Lead will assist the Chief Information Security Officer to establish and maintain robust governance and oversight over the effectiveness of cyber risk management to ensure that the Bank’s technology and information assets are adequately protected.

Primary Responsibilities:

• Assist with the development, review, update and/or roll-out of cyber risk-related framework, policy, and initiatives to facilitate effective risk management and governance over cyber risk management.
• Review and assess the extent of compliance with internal policies, procedures, standards and regulatory requirements.
• Provide advisory, guidance and challenge to Business Units and Functional Units in their management of cyber risks to achieve their business objectives and within the Bank’s risk appetite.
• Conduct independent assessments on the adequacy and effectiveness of control measures implemented by the 1st Line of Defense (FLOD), and recommend mitigation actions to address vulnerabilities, if any.
• Lead Red Team (offensive cyber) activities to proactively simulate real-world cyber-attacks on the Bank’s security controls to identify and exploit security weaknesses and vulnerabilities.
• Provide recommendations and remediation strategies to address security vulnerabilities identified during offensive cyber activities.
• Establish relevant Key Risk Indicators (KRIs) and metrics to monitor and measure cyber risk exposures.
• Prepare and present cyber risk reports to Senior Management and relevant committees, highlighting key findings, trends and/or recommendations.
• Respond to enquiries and audits (i.e. internal, external and regulatory) pertaining to cyber risks.
• Where required, collaborate with the Bank’s cyber incident response team to provide advice and/or support during security incidents and cyber-attacks.
• Conduct cyber risk awareness training across the Bank, fostering cyber risk awareness and a security-conscious culture.
• Stay abreast of emerging cyber threats, vulnerabilities, attack techniques, and regulatory developments to proactively address potential cyber risks, and assist the Management (and/or Board) understand potential concerns or risks that might impact the Bank.

Qualifications:

• Bachelor’s degree in computer science, Information Security or a related field.
• Minimum of 15 years’ experience in any of these disciplines: offensive security, information security, risk management or compliance in related areas.
• Professional certification such as CISSP, CCSP, CGRC, CISM, CISA, CRISC, CompTIA PenTest+, Offensive Security (e.g. OSCP, OSCE, OSWE & OSWP), SANS (e.g. GXPN, GWAPT, GPEN & GMOB), Zero-Point Security and/or CREST would be advantageous.
• Sound knowledge in regulatory requirements around technology risk and cyber resilience.
• Knowledge of network protocols, operating systems, application security and cloud security.
• Possess strong verbal and written communication skills, and capable of engaging senior stakeholders.
• Clear analytical thought process and good understanding of emerging technological developments and risk management frameworks.

Perks & Benefits

• Allowance (transportation, parking etc.)
• Nearby public transport
• Smart casual dress code
• Medical insurance
• Annual leave, Birthday Leave etc

REQUIREMENTS:

• Minimum Diploma/Degree in Accounting, LCCI or related qualification.
• Preferably with two(2) years working experience in accounting field.
• Ability to handle full set Accounts will be an added advantage.
• Proficiency in English, Bahasa Melayu and Chinese language.
• Proficient in MS Word and Excel.
• Knowledge of UBS accounting software and added advantage.

RESPONSIBILITIES:

• Manage data entry, report generation, payment reconciliation etc.
• Handle day-to-day finance & administrative matters and documentation.
• Assist and participate in account matters and yearly tax computation.
• Assist in ad-hoc tasks as and when needed.

Perks & Benefits

• Casual dress code
• Free snacks / Happy hours
• Paid training and development

REQUIREMENTS:

• Candidate must possess at least Degree in Accounting, Finance or Business or Professional Degree.
• Minimum 3 years of working experience in accounting and finance.
• Familiar with UBS/Accounting software an added advantage.
• Required skill(s): Microsoft Excel, Word & Accounting Software
• Only Malaysian candidate may apply.
• Able to converse in English, Malay and Chinese as needed to liaise with Chinese speaking associate.

RESPONSIBILITIES:

• Prepare full set accounts and analyzing financial reporting and cash flow forecast.
• Preparation of yearly Management Budget, Cash Flow Projection and review project feasibility study.
• Prepare and handle audits with Auditors.
• Assist in yearly tax computation and review estimated tax payable for submission to LHDN.
• Monitor daily operation works done by the Account Assistant.
• Assist in preparing ad-hoc reports as at when required.

Perks & Benefits

• Casual dress code
• Free snacks / Happy hours
• Paid training and development

要求：

• 候選人必須至少擁有會計、金融或商業學位或專業學位。
• 至少 3 年會計和財務工作經驗。
• 熟悉 UBS/會計軟體者優先。
• 所需技能： Microsoft Excel、Word 和會計軟體
• 只有馬來西亞候選人可以申請。
• 能夠根據需要用英語、馬來語和中文交談，以便與講中文的同事聯絡。

職責：

• 準備全套帳目並分析財務報告和現金流量預測。
• 編制年度管理預算、現金流量預測並審查專案可行性研究。
• 與審核員一起準備和處理審核。
• 協助計算年度稅款並審查提交給 LHDN 的預估應付稅款。
• 監控客戶助理的日常運作工作。
• 需要時協助準備臨時報告。

津貼和福利

• 休閒著裝要求
• 免費小吃/歡樂時光
• 有薪培訓和發展

要求：

• 最低會計文憑/學位、LCCI 或相關資格。
• 最好具有兩（2）年會計領域的工作經驗。
• 能夠處理全套帳戶將是一個額外的優勢。
• 精通英語、馬來語和華語。
• 精通 MS Word 和 Excel。
• 了解瑞銀會計軟體並增加優勢。

職責：

• 管理資料輸入、報表產生、付款對帳等。
• 處理日常財務和行政事務以及文件。
• 協助並參與帳戶事務和年度稅款計算。
• 在需要時協助執行臨時任務。

津貼和福利

• 休閒著裝要求
• 免費小吃/歡樂時光
• 有薪培訓和發展

責任

✍ 負責與網路安全要求和新興相關ICT技術相關的端到端整體解決方案和服務活動，以實現最佳水準的網路安全機密性、完整性和可用性標準。
✍ 負責網路安全指南、基準、標準和流程的持續維護、監控和更新。這包括預測成長以確保可擴展性，評估基準、觀察或其他行業最佳實踐帶來的增強價值，並在需要時納入變更。
✍ 負責建立和維護業務工作流程和技術的現況和未來安全流程和工作指導。
✍ 開發並推薦知識開發以及文件化實務和工程知識抵押品的創建。
✍ 技術專家提供全面的解決方案和工程，以建構技術解決方案的技術要求。
✍ 提供IT 解決方案工程和設計建議的IT 安全諮詢和審查服務，以確保解決方案符合IT 安全要求，從而保護客戶的IT 基礎設施和系統。
✍ 提供適用於各種開發技術的技術專業知識和諮詢。
✍ 負責為客戶的整個網路和系統基礎設施分析、評估和推薦最佳的資訊安全技術和解決方案。
✍ 負責從安全角度和角度進行符合客戶安全控制和基線的解決方案評估、POC、UAT。
✍ 就資訊安全問題提供建議和諮詢，並為各個內部團隊和部門提供建議。
✍ 對新出現的內部和外部威脅、技術趨勢和減輕 IT 安全風險的方向進行研究和環境掃描，並透過跨 IT 部門和職能部門的協作進行評估，以改善 IT 安全基礎設施和服務。
✍ 規劃、研究、分析、評估和推薦資訊安全技術解決方案、方向和採用。
✍ 研究和開發新的資訊安全技術以改善和創造商業機會。
✍ 與外部 IT 安全專家和其他 IT 組織建立和維護策略關係/網路和協作，以衡量和改善客戶向利害關係人提供的網路安全基礎設施服務。

要求

✍ 電腦科學、資訊系統、工程學、軟體工程或任何相關學科的學士學位。
✍ 在技術相關領域擁有約 8-10 年的經驗，並具有相關 IT 安全領域和工程的具體專業知識。
✍ 具有撰寫和支援策略性商業策略的經驗，並具有以業務為中心的心態。
✍ 清楚地了解如何根據特定的架構原則將安全架構和設計轉化為詳細的技術組件。
✍ 此角色需要掌握安全工程生命週期並了解企業安全架構環境。
✍ 網路安全治理、指南和風險以及網路安全解決方案領域的基礎知識。
✍ IT 網路的基礎知識以及對 OT 和物聯網架構和工程的更好理解。
✍ 具有強化練習和技術合規性保證練習的經驗。

工作亮點

✅ 僅限馬來西亞本地人。
✅ 每週工作 5 天，採用混合工作安排。
✅ 極佳的成長和職涯發展機會。
✅ 有競爭力的薪資待遇。
✅ 偉大的跨國公司（能源部門）工作文化。

Key Responsibilities

• Solve problems proactively and provide timely resolutions to minimize impacts on customer and employee satisfaction.
• Design, document, and maintain system processes.
• Seek opportunities to improve monitoring, address issues, and deliver enhanced value to customers.
• Identify and communicate effective problem resolution strategies.
• Create and maintain management reports, including end-of-month, quarterly, and annual reports for various departments.
• Extract, create, and maintain strategic scorecards through database mining.
• Develop reports on process efficiency and capacity planning.
• Analyze data, review processes, and recommend improvements.

Key Requirements

Must Have:

• Bachelor's degree in Business Administration, Business Analysis, Information Technology, or a related field.
• 3 to 5 years of experience as a Business Analyst in a Contact Centre or a similar role.
• Strong analytical, problem-solving, and critical-thinking skills.
• Excellent communication and interpersonal abilities.
• Expertise in data analysis and continuous improvement methodologies, such as Lean/Six Sigma, and proficiency with statistical applications.
• Strong strategic vision and analytical skills.

Good to Have:

• Familiarity with call center or banking processes and products.

Essential Technical Skills:

• Data analysis
• Presentation skills

Perks & Benefits

• Nearby public transport
• Central location

主要職責

• 主動解決問題並及時提供解決方案，盡量減少對客戶和員工滿意度的影響。
• 設計、記錄和維護系統流程。
• 尋找機會改善監控、解決問題並為客戶提供更高的價值。
• 確定並傳達有效的問題解決策略。
• 建立和維護管理報告，包括各部門的月末、季度和年度報告。
• 透過資料庫挖掘提取、創建和維護戰略記分卡。
• 制定有關流程效率和產能規劃的報告。
• 分析數據、審查流程並提出改進建議。

主要要求

必須具備：

• 工商管理、商業分析、資訊科技或相關領域的學士學位。
• 擁有 3 至 5 年聯絡中心業務分析師或類似職位的經驗。
• 強大的分析、解決問題和批判性思考能力。
• 優秀的溝通和人際交往能力。
• 擁有數據分析和持續改進方法（例如精益/六西格瑪）的專業知識，並熟練統計應用。
• 強大的策略眼光和分析能力。

值得擁有：

• 熟悉呼叫中心或銀行流程和產品。

基本技術技能：

• 數據分析
• 演講技巧

津貼和福利

• 附近的公共交通
• 中心位置

• Serves as the data center and cloud SME for information and cybersecurity compliance, develops SOPs, and operational policies to ensure performance parameters, and policy guidance are implemented.
• Collaborates with managers and staff to support security compliance with the Federal Information Security Management Act (FISMA) and provides oversight of the organization's implementation of the NIST Risk Management Framework (RMF).
• Advises management and staff of changes in cyber security systems policies and procedures, and works closely with Hosted Infrastructure (HI) project teams to implement security management enhancements.
• Serves as liaison between project teams and Department stakeholders that include the IT Change Control Board (CCB) to provide authoritative guidance regarding the configuration management process.
• Represents Division in deliberations with IT CCB voting members, and provides expert advice to senior management concerning vital cybersecurity problems and issues.

This position is in the Office of the Assistant Attorney General (AAG) for the Antitrust Division of the Department of Justice in Washington, D.C. The incumbent serves as Director of Litigation reporting directly to a Deputy Assistant Attorney General. The incumbent provides executive leadership over, and exercises assigned authority for, the planning, direction, timely execution, and evaluation of ATR's Litigation Program. The incumbent also oversees and manages civil and criminal litigation strategies and tactics across the Division's cases.

Major duties and responsibilities include, but are not limited to:

• Responsible for executive oversight and management of all matters concerning possible violations of antitrust law of major economic significance. Recommends and provides advice regarding investigative plans for civil and criminal matters that should be pursued.
• Oversees and manages civil and criminal trial and/or hearing strategies with legal staffs and, if necessary, must be prepared to take over any civil or criminal litigation matters in the courtroom and to independently handle arguments of major issues or negotiations with defense counsel. Utilizes extensive expertise to provide subject matter training and guidance to Division managers, attorneys, paralegals, and other staff on civil and criminal litigation principles and procedures.
• Leads oversight of strategic planning for the implementation of short- and long-term goals and objectives, while independently assessing the feasibility, balance, and support for these objectives. Identifies potential problems and devises various contingency plans to address the problems. Develops organizational plans to provide an operation capable of meeting changing requirements and recommends reorganization as the need becomes evident. Oversees execution of the strategic plan and ensures progress toward identified goals, objectives, and targets.
• Serves as advisor on both civil and criminal litigation to the DAAG, Litigation, Assistant Attorney General (AAG), Principal Deputy Assistant Attorney General (PDAAG), DAAGs, and Chiefs, Assistant Chiefs, and staff in the Division's litigating sections and offices.
• In partnership with the civil and criminal enforcement programs, reviews the preparation of memoranda outlining the factual and legal issues involved in civil and criminal matters and the collection of evidence; oversees the selection and examination of witnesses, the preparation of briefs, motions, and other required legal documents for civil and criminal matters; and allocates the litigative resources that will be required for assigned civil and criminal matters and how they are to be utilized.
• Exercises personnel management responsibilities, which includes technically and administratively supervising and evaluating the work of the Litigation Program through subordinate supervisors, including any deputy directors, Senior Litigation Counsel, and other subordinate staff and making recommendations for promotion, employment and separation.

The selectee will serve as a Supervisory Public Affairs Specialist in the Office of Director, Office of Communication and Media Relations. Typical work assignments include:

• Managing the development, and execution of strategic public affairs programs and campaigns that convey complex information by leveraging all available communication channels and emerging technology.
• Designing communication strategies that define and convey messages to the intended audience anticipating impending potential ramifications and offering strategies and providing alternative actions and assessments to overcome impediments.
• Providing editorial oversight of speeches, scripts, news, and external audience.
• Establishing and maintaining effective working relationships with members of the press, radio, television, other Federal, state, and local agencies, industries, and civic groups.

The Director of Engagement leads the five-person Community and Alumni Affairs (CAA) Section. The Community and Alumni Affairs section conducts participant recruitment and registration, manages alumni relations, manages the alumni database, prepares and compiles course evaluations, and conducts key stakeholder outreach for the Africa Center for Strategic Studies. He/She works closely with the ACSS alumni to create and catalyze alumni chapters and communities of interest as dynamic vehicles for ongoing professional education, peer-to-peer engagements, and security sector governance norms reinforcement. He/She serves as a member of the Leadership Team of the Africa Center for Strategic Studies and as such represents and interfaces with members of the diplomatic community, colleagues and students at the National Defense University, and other key stakeholders in the U.S. Government and elsewhere.

• The incumbent supervises the CAA team to recruit and manage participants for all academic and outreach programs, maintain participant and alumni databases, sustain alumni relationships, support alumni community chapters, and build networks with US Embassies and US government stakeholders necessary to manage the Africa Center's participant affairs. Develops internal operating procedures, checklists, milestones, and metrics for the CAA section to effectively plan and coordinate across Africa Center sections to execute program requirements. Works closely with faculty to develop recruiting strategies and profiles to promote diverse, engaged participants who are, or will be, leaders in African security sector institutions. Oversees the development and implementation of alumni and outreach programs. Manages the CAA section to accomplish all assigned tasks in support of the Africa Center's mission and vision.
• He/She develops and executes engagement strategies to interact (both virtually and in person) with alumni, partners, and stakeholders. This includes designing and executing events and engagements for alumni and key stakeholder audiences such as the African diplomatic community in Washington, D.C., U.S. government interagency and congressional colleagues working on Africa, and the National Defense University community. He/She will leverage the ACSS alumni network to create and enhance alumni chapters and communities of interest to be force multipliers in strengthening security sector institutions on the continent.
• He/She provides guidance and direction for conducting program evaluations to include the evaluation content and questions, compilation of responses, and analysis of responses. He/she contributes to strategic planning and assessing ACSS mission impact through timely analysis and reports on enrollment, participation trends, and changes in stakeholder interests and priorities. Proposes and develops innovative approaches and tools to enhance engagement, recruitment of participants, and sustainment of relationships.
• He/She is a member of the Leadership Team for the Africa Center. He/she represents the Africa Center at external events as requested by the Director. He/She may moderate sessions and serve as a subject matter expert speaker or panelist during Africa Center programs, and may serve as a facilitator for small group discussions.
• Performs other duties as assigned.

• You will establish, develop, coordinate and maintain the personnel security program for sensitive compartmented information (SCI) within NAVSEA.
• You will develop SCI security education and training methods and procedures, and establishes goals and objectives, determines customer needs and coordinates training schedules and events.
• You will determine the suitability and security eligibility of individuals for entry and retention in all risk level positions.
• You will establish, gather, and coordinate record of evidence in support of proposed personnel security and suitability actions and decisions.
• You will ensure adequate policy and procedures are in place to determine the eligibility of persons to occupy SCI and program positions.
• You will serve as advisor to the heads of supported activities on SCI personnel and program security matters.
• You will act as NAVSEA liaison to the Department of Defense (DoD) Consolidated Adjudication Facility on matters associated with personnel security investigation and adjudication of SCI for NAVSEA employees.
• You will coordinate changes in the personnel security program as it relates to work requirements within SCI personnel security and their impact on administrative functions within the command and supported organizations.
• You will maintain protection, control and safeguarding of Privacy Act Information on applicants, employees and contractors
• You will establish and maintain effective relationships with, and gain the cooperation of, all parties with regard to personnel security and suitability issues.

What will I do in this position if hired?

In this position, you will provide support and coordination related to all security management activities at the assigned location. Typical assignments include:

• Serving as the on-site Security Specialist point of contact for Office of the Chief Security Officer and provides headquarters with support and advisories related to all Office of the Chief Security Officer security management activities.
• Developing, installation and management of the comprehensive and multilayered security programs at the facility by reviewing and assessing all areas of security.
• Conducting risk assessments, implementing countermeasures and procedures and practices to cover multiple security objectives.
• Coordinating with Federal Protective Services, all inter agency personnel, and requisite task forces to identify, resolve security issues through integration of varied objectives and enhance security and operational requirements of FEMA.

What else do I need to know?

At FEMA, our mission is to help people before, during and after disasters, and every employee at FEMA has a role in emergency management. Every FEMA employee has regular and recurring emergency management responsibilities, though not every position requires routine deployment to disaster sites. All positions are subject to recall around the clock for emergency management operations, which may require irregular work hours, work at locations other than the official duty station, and may include duties other than those specified in the employee's official position description. Travel requirements in support of emergency operations may be extensive in nature (weeks to months), with little advance notice, and may require employees to relocate to emergency sites with physically austere and operationally challenging conditions.

FEMA is committed to ensuring that its workforce reflects the diversity of the nation. At FEMA, our workforce includes the many identities, races, ethnicities, backgrounds, abilities, ages, cultures, and beliefs of the people we serve. To learn about FEMA's ongoing diversity and inclusion efforts, reasonable accommodation process, and the FEMA Core Values, please visit www.fema.gov.

Promotion Potential: Future promotions will be dependent on your ability to perform the duties at a higher level, the continuing need for an employee assigned to the higher level, and administrative approval.

What will I do in this position if hired?

In this position, you will provide support and coordination related to all security management activities at the assigned location. Typical assignments include:

• Serving as the on-site Security Specialist POC for OCSO and provides headquarters with support and advisories related to all OCSO security management activities.
• Developing, installation and management of the comprehensive and multilayered security programs at the facility by reviewing and assessing all areas of security.
• Conducting risk assessments, implementing countermeasures and procedures and practices to cover multiple security objectives.
• Coordinating with Federal Protective Services, all inter agency personnel, and requisite task forces to identify, resolve security issues through integration of varied objectives and enhance security and operational requirements of FEMA.

What else do I need to know?

At FEMA, our mission is to help people before, during and after disasters, and every employee at FEMA has a role in emergency management. Every FEMA employee has regular and recurring emergency management responsibilities, though not every position requires routine deployment to disaster sites. All positions are subject to recall around the clock for emergency management operations, which may require irregular work hours, work at locations other than the official duty station, and may include duties other than those specified in the employee's official position description. Travel requirements in support of emergency operations may be extensive in nature (weeks to months), with little advance notice, and may require employees to relocate to emergency sites with physically austere and operationally challenging conditions.

FEMA is committed to ensuring that its workforce reflects the diversity of the nation. At FEMA, our workforce includes the many identities, races, ethnicities, backgrounds, abilities, ages, cultures, and beliefs of the people we serve. To learn about FEMA's ongoing diversity and inclusion efforts, reasonable accommodation process, and the FEMA Core Values, please visit www.fema.gov.

Promotion Potential: Future promotions will be dependent on your ability to perform the duties at a higher level, the continuing need for an employee assigned to the higher level, and administrative approval.