Consultant, IT Security (ITSO)

PERCEPT SOLUTIONS PTE. LTD.; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Percept Solutions PTE. LTD. is expanding its security governance team in Singapore, seeking a professional to lead security audits, risk assessments and compliance reviews for customer ICT systems.

You will drive incident response planning, tabletop exercises, and ongoing policy development. Candidate should have deep knowledge of ISO 27001 and PCI DSS, hands-on exposure to vulnerability management, log reviews, and security technologies.

Qualifications

• Experience in security audit, compliance and governance.
• Strong understanding of information security principles, ISO 27001 and PCI Security Standard is preferred.
• Knowledge of risk management, governance framework and compliance (IT Security Audit / Log review).
• Experience with vulnerability management, application security, IDS/IPS, firewall technologies, and incident response.
• Customer-facing with good interpersonal and leadership qualities.

Responsibilities

• Review and develop security framework, policies, processes and guidelines.
• Establish compliance through ongoing security reviews and audits.
• Conduct security risk management exercises and tabletop exercises.
• Coordinate vulnerability assessments and penetration testing activities.
• Conduct information security awareness training.
• Develop and manage customer security incident response plans.

Skills

Security auditing

ISO 27001

PCI DSS

Risk management

Security governance

Incident response

Log review

Vulnerability assessment

Penetration testing

Security technologies

Education

CISSP/CISA/CISM/ISMS Lead Auditor

Job description

Duties & Responsibilities:

• Review and development of security framework, information security policies, processes/procedures, and guidelines on an ongoing basis.


• Establish compliance with these policies/procedures through ongoing security reviews and audits, not limited to log analysis and security assessment of customer ICT systems.


• To conduct security risk management exercise


• To conduct table-top exercises


• To conduct vulnerability assessment, coordinate penetration tests activities


• To conduct information security awareness training


• Responsible for the development and management of customer’s security incident response plan.


• To lead and support customer in the matters of security incident resolution and response.


• Point-of-contact/customer liaison to assist and advise customer for ICT security-related matters.


• Manage Security related INC and follow-up with respective domain expertise.


• Compliance management


• Conduct activity log review

Requirements:

• Experience in the area of security audit, compliance and security governance


• Strong understanding of information security principles, ISO 27001 and PCI Security Standard is preferred.


• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / Log review), technical vulnerability management (Vulnerability Assessment, Penetration testing), application security, security technologies (system hardening, IDS/IPS, firewall), security incident response and security assessment.


• Customer-focused with good interpersonal skills


• Team player with leadership qualities


• Possess one (or more) of the following security certifications: CISSP/CISA/CISM/ISMS Lead Auditor Certification

EA Licence No.:18S9405 / EA Reg. No.:R1330864

Percept Solutions is expanding and actively seeking talented individuals. We encourage applicants to follow Percept Solutions on LinkedIn at https://www.linkedin.com/company/percept-solutions/ to stay informed about new opportunities and events.