Cyber Security Engineer

St Engineering; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

ST Engineering is seeking a cybersecurity professional to manage log reviews, change control, risk assessments and incident handling for classified systems. You will support external audits, enforce encryption standards and drive security governance across IT controls.

The role covers vulnerability management, secure configurations, SOP development and alignment with authorities’ frameworks. Candidates with required certifications will be preferred for this critical security function.

Qualifications

• One or more of the listed cybersecurity certifications is required.
• Credentials demonstrate ability to administer security systems and conduct audits.
• Preference for ISO 27001 ISMS expertise and security management.

Responsibilities

• Perform Log Review on classified computers and systems.
• Perform Change Management and maintain records for audit purposes.
• Conduct Cyber Risk Assessment on classified computers & systems.
• Handle and follow up on Cyber Security Incident Management.
• Conduct internal and support external Cyber Security Compliance Audits
• Ensuring adherence to internal security policies, IT governance frameworks, and compliance controls.
• Track and remediate vulnerabilities, ensuring computers and system meet security patching and compliance standards.
• Conduct Vulnerability Management (VA Scanning) on classified network computers and systems.
• Enforce Data Security and Encryption requirements on classified computers and systems.
• Formalize and archival of network security processes & flows, develop SOPs for compliance.
• Implement GPOs to maintain Secured Configurations to prevent breaches
• Daily basic cyber security operation and maintenance.
• Conductsecurity audits and prepared reports, highlighting areas for improvement.
• Coordinate and supporting external audits, risk assessments, and regulatory submissions.
• Assist with implementation of security standards aligned to MSD, GISO, IT and other relevant authorities’ frameworks.

Education

CSSA+— Cyber Security System Administration

CISA—Certified Information Systems Auditor

CISM—Certified Information Security Manager

ISO 27001 – Internal Audit—ISO/IEC 27001 Information Security Management Systems (ISMS) Internal Auditor

ISO 27001 – Lead Implementer—ISO/IEC 27001 Information Security Management Systems (ISMS) Lead Implementer

CISSP— Certified Information Systems Security Professional

Job description

Responsible for the following roles & responsibilities (but not limited to the following), covering primarily all N2 and N3 computers and systems in the company:

• Perform Log Review on classified computers and systems.
• Perform Change Management and maintain records for audit purposes.
• Conduct Cyber Risk Assessment on classified computers & systems.
• Handle and follow up on Cyber Security Incident Management.
• Conduct internal and support external Cyber Security Compliance Audits
• Ensuring adherence to internal security policies, IT governance frameworks, and compliance controls.
• Track and remediate vulnerabilities, ensuring computers and system meet security patching and compliance standards.
• Conduct Vulnerability Management (VA Scanning) on classified network computers and systems.
• Enforce Data Security and Encryption requirements on classified computers and systems.
• Formalize and archival of network security processes & flows, develop SOPs for compliance.
• Implement GPOs to maintain Secured Configurations to prevent breaches
• Daily basic cyber security operation and maintenance.
• Conductsecurity audits and prepared reports, highlighting areas for improvement.
• Coordinate and supporting external audits, risk assessments, and regulatory submissions.
• Assist with implementation of security standards aligned to MSD, GISO, IT and other relevant authorities’ frameworks.

Job Requirements to have 1 or more of the following certifications:

• CSSA+— Cyber Security System Administration (cum CEH / ComTia Security+ within 6 months of appointment)
• CISA—Certified Information Systems Auditor
• CISM—Certified Information Security Manager
• ISO 27001 – Internal Audit—ISO/IEC 27001 Information Security Management Systems (ISMS) Internal Auditor.
• ISO 27001 – Lead Implementer—ISO/IEC 27001 Information Security Management Systems (ISMS) Lead Implementer.
• CISSP— Certified Information Systems Security Professional.