Digital Forensic

**COMPANY DESCRIPTION**

NE Digital is the digital, data and technology organization that serve as a center of excellence to drive digital transformation for our group of NTUC Social Enterprises to meet the critical social needs of Singapore's community. Delivering innovative products and solutions, we empower our people to lead a better and meaningful life through digital services in the area of daily essentials, health and community care, childcare and education as well as financial services.

**The Team**

We believe that diversity is key to driving an innovative, cohesive, productive and fun workplace Hence, at NE Digital our people join us from all around the world. Be sure to be soaked in an environment with different ethnic groups driving innovation and injecting some creative juice as one

Contributing to a social purpose through technology, our team of passionate and dedicated folks are spread into different social enterprises such as NTUC Fairprice Group, NTUC First Campus, NTUC Health and among others

**Creating technologies that impacts**

**RESPONSIBILITIES**

**Incident Response Leadership**:

- Develop and maintain incident response plans and playbooks.
- Collaborate with cross-functional teams to ensure an effective incident response process.
- Incident Analysis:

- Investigate and analyze security incidents to determine the scope and impact. Develop a deep understanding of potential threats and vulnerabilities relevant to the organization.

**Incident Containment and Eradication**:

- Take immediate action to contain and mitigate security incidents.
- Coordinate with IT and security teams to isolate affected systems and prevent further damage. Ensure the eradication of threats and vulnerabilities from the environment.

**Forensics and Investigation**:

- Conduct digital forensics investigations to determine the root cause of incidents.
- Document findings and maintain a chain of custody for evidence. Work with law enforcement and external partners as necessary.

**Reporting and Documentation**:

- Prepare incident reports detailing the incident's impact, response, and lessons learned.
- Maintain accurate records of all incident response activities and outcomes. Present findings and recommendations to senior management.

**Incident Response Improvement and Planning**:

- Develop a comprehensive incident management roadmap and strategy to enhance our incident response capabilities. This includes setting goals, priorities, and identifying critical programs.
- Identify and expand on specific incident response programs outlined in the strategy. These programs may encompass threat hunting, incident analysis, containment, communication plans, and thorough incident investigations.
- Develop, update, and manage Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) to gauge the effectiveness of incident response efforts, including investigation outcomes.
- Develop capability development plans to ensure team members are well-equipped for their roles, including incident investigation training and skill development.
- Continuously assess and optimize the operational efficiency of the Incident Response team, including investigation processes. Identify bottlenecks, inefficiencies, and areas for improvement and recommend solutions to strengthen our incident response capabilities. Stay up-to-date with the latest cybersecurity threats and industry best practices.

**QUALIFICATIONS**
- Bachelor's degree in Cybersecurity, Information Technology, or Computer Science
- Minimum of 8 years of experience in incident response and cybersecurity
- Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), or equivalent certifications preferred
- Strong knowledge of cybersecurity technologies, tools, and methodologies
- Excellent communication and teamwork skills
- Able to work with a sense of urgency while paying attention to detail
- Demonstrate a high degree of integrity, initiative, energy and endurance