DHL Express - a company that connects people!
What makes DHL great? Our People! We know each employee’s individual contributions make us the #1 Express Delivery and Logistics Company in the world.
Distinguished as No.1 World’s Best Workplace™ by Great Place to Work and Fortune Magazine, DHL Express is committed to maintaining an environment that empowers every team member to make the greatest possible impact on our business. Our corporate culture is about personal commitment – to our business, to each other and to our global communities. DHL is dedicated to being a great place to work.Start YOUR career with DHL today.
Role Purpose
DHL Express Global Head Office has an opening for Senior Specialist, Cyber Security (Infrastructure Security) to be based in Singapore or Bonn, Germany.
The role of the Senior Specialist is to:
• Support Infrastructure Security projects and initiatives in alignment with organizational security policies and strategies.
• Assist in the rollout of IT security projects, ensuring they are completed on time and within budget while meeting DHL technology platform standards and requirements.
• Provide technical expertise regarding leading-edge IT Security technologies.
• Drive the implementation of technically complex migrations, integration solutions, and transition projects.
• Offer technical input on Business/IT projects concerning design, development, implementation, and operationalization.
How will you contribute to the success of DHL?
• Define and support the implementation of Infrastructure Security requirements for projects, ensuring alignment with global and group-wide standards.
• Provide expert consultancy to Global and Regional IT teams on Infrastructure Security projects and initiatives, facilitating effective implementation and governance.
• Offer technical and organizational security consultancy, guiding the evaluation and selection of products/solutions for Network/Cloud/Endpoint/Data Security, as well as Identity and Access Management (IAM).
• Develop and promote best practice guidelines and processes to enhance the monitoring, maintenance, and optimization of existing network and security infrastructure, including platforms such as Endpoint Security, Web Application Firewalls (WAF), Anti-DDoS solutions, Next Generation Firewalls (NGFW), Network Access Control (NAC), and Cloud security technologies.
• Conduct research to assess emerging technologies and maintain an up-to-date understanding of the latest threats, vulnerabilities, and industry best practices to inform governance frameworks.
• Ensure that Infrastructure threat and vulnerability evaluations are conducted regularly and collaborate with IT Services teams to ensure timely patching and updates of infrastructure components in accordance with established SLAs.
• Monitor and report on Security KPIs, vulnerabilities, non-compliance, and other security exposures, including risks associated with the misuse of information assets.
• Collaborate with the Business IT team, IT Services team, and IT service suppliers to develop and implement appropriate risk mitigation strategies and governance plans.
• Coordinate Infrastructure security assessment activities with internal teams and external suppliers to ensure compliance with established policies and standards.
• Contribute to the design and development of management practices and solutions derived from the information security risk treatment plan, ensuring alignment with governance frameworks.
•Periodically assess and evaluate information security controls and countermeasures, recommending enhancements to mitigate risks effectively.
• Integrate risk, threat, and vulnerability identification into lifecycle processes, including procurement, development, and service design, to strengthen governance.
• Conduct assessments and reviews of infrastructure security risk exceptions, providing recommendations for improvement.
• Report significant changes in infrastructure risk to management and ensure appropriate follow-up actions are taken for remediation.
Do you have what it takes?
• Minimum of 5 to 8 years of experience in IT Security / Information Security.
• Proven technical skills and knowledge of IT Security Infrastructure.
• Hands-on experience with security hardening configurations of Infrastructure OS, Databases, Middleware, and Network Devices.
• Practical experience in the setup, installation, and configuration of any of the following security technologies: Firewall/VPN, IDS/IPS, WAF, Anti-DDoS, NAC, SWG/SEG, EDR/EPP, NDR, IRM, DLP, ATP, 2FA, PAM, SIEM, SOAR, etc.
• Broad familiarity with Security Engineering and Operations topics affecting infrastructure, including but not limited to Network Security, Endpoint Security, Cloud Security, Threat and Vulnerability Management, Identity and Access Management, Security Information & Event Management, Key Management, Data Encryption, and Tokenization.
• Preferably possesses experience in security automation and/or basic scripting/programming skills, such as PowerShell or Python.
• A passion for technology, strong communication skills, a team player mentality, and a positive, can-do attitude.
• Knowledge and/or experience working in a cross-cultural environment is desirable.
• Ability to work independently as an individual contributor as well as collaboratively within a team.
• Demonstrates respect and results-focused behaviour. - Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, or IT.
• Security certifications such as CEH, GSEC, GIAC, CCSP, Azure Security certifications, or CISSP are a plus but not mandatory.
DHL is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic
| DHL Express Singapore Pte. Ltd. Aperia, 10 Kallang Avenue, Tower 2 11-10/18 339510 Singapore |
