Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we're driven by a mission to build a future we can all trust.

In Singapore, Thales has been a trusted partner since 1973, originally focused on aerospace activities in the Asia-Pacific region. With 2,000 employees across three local sites, we deliver cutting-edge solutions across aerospace (including air traffic management), defence and security, and digital identity and cybersecurity sectors. Together, we're shaping the future by enabling customers to make pivotal decisions that safeguard communities and power progress.

Job Duties & Responsibilities:

To achieve accreditation and then ensure ongoing compliance by the company with the security regulatory requirements in respect of Card Production/Perso Bureau as required by relevant organizations (PCI-CP, ISO27001, ISO14298 and etc.)
Acting in accordance with the Corporate Security Management System and Policy to manage all aspects of personnel, physical, production and logical security at site
Based on the corporate Security Policy to develop, publish, implement and maintain local security procedures.
To monitor and conduct internal audits of all security activities in the site and advice the management team on all matters concerning physical, card production & Logical security.
To direct and investigate all matters where actions of staff or others could or have caused a breach of security and advise on procedures to be implemented to prevent re-occurrence
To answer to tender on all security matters
To operate the security of the systems supporting the access control, alarm and video recording systems
Periodically review the results from Internal/External Vulnerability Scan, Penetration Test. Analyse and work with related owners to fix the critical and high findings within specific time period.
Periodic security configuration reviews of servers, network access controls and firewall rules
To participate in new IT projects or solution implementations.
To conduct security risk assessments on annual basis on the production facility to ensure that risk are adequately identified and reduced with corrective actions.
To conduct Physical & Logical security awareness training to all staffs in the site to ensure appropriate level of security consciousness.
Perform 3rd party security assessment and audit
Any other special projects as specified, as and when required.
The job holder shall at all times during the employment with the company, respect and comply with Thales DIS Quality, Health, Safety, Environmental & Security requirements during the performance of his/her duties.

Job Requirements:

BachelorDegree in IT related field or equivalent
At least 3 years of experience of IT Security or Audit experience in established firm preferred, with investigative experience and an ability to prepare and present comprehensive written report and documents.
IT security knowledge is an advantage
CISSP, CISA, CISM is an advantage
Able to handle audits both internal and external
Proficient in presentation skills
High interpersonal skills, which will permit successful management of all aspects of security, together with a developing ability
Ability to liaison and communicate with all levels of people
Independent, approachable and analytical
Able to take up highly pressurizing environment.

At Thales, we're committed to fostering a workplace where respect, trust, collaboration, and passion drive everything we do. Here, you'll feel empowered to bring your best self, thrive in a supportive culture, and love the work you do. Join us, and be part of a team reimagining technology to create solutions that truly make a difference - for a safer, greener, and more inclusive world.

IT Compliance Security Engineer