Cyber Security Engineer (Network/ PAM/ Web Proxy/ Operation) #IFL

RECRUIT EXPRESS PTE LTD; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

A leading company in Singapore is seeking a Cybersecurity Project Manager to enhance their security protocols. Responsibilities include leading cybersecurity projects, managing incident responses, and ensuring compliance with regulations. The ideal candidate will have a strong background in cybersecurity and a proven track record in project management.

Qualifications

• Proven experience in cybersecurity project management.
• Ability to conduct incident response and vulnerability assessments.
• Knowledge of regulatory frameworks and cybersecurity standards.

Responsibilities

• Lead cybersecurity projects, ensuring effective implementation of security technologies.
• Oversee daily operations and incident response management.
• Ensure compliance with cybersecurity regulations and prepare for audits.

Skills

Incident Response

Threat Intelligence

Risk Management

Cybersecurity Compliance

Cybersecurity Strategy

Education

Bachelor's Degree in Cybersecurity or related field

Job description

Assist in Strategy Development and Project Security Consulting:

• Provide support to the Information Security Head of Department in the development and implementation of robust cybersecurity strategies aligned with organizational objectives and regulatory mandates.
• Offer expertise and guidance in security consulting for various projects across different offices, ensure that the company's cybersecurity checklists are completed, considerations are integrated seamlessly into all stages of project planning and execution.
• Gather report, compile statistics and deliver presentation on threats detected and risk trends.

Cybersecurity Project Management:

• Lead and oversee security proof of concept (PoC) projects to evaluate and validate the effectiveness of new security technologies and solutions before full-scale implementation.
• Lead and manage cybersecurity projects, including the implementation of new security technologies, tools, and processes.

Threat Intelligence, Threat Hunting and Proactive Monitoring:

• Conduct proactive monitoring of internal alerts and the emerging threats using existing security tools.
• Perform manual threat hunting to identify and address potential security risks promptly, collaborate with partner to ensure true positive is mitigated in a timely manner.
• Continuously analyze and respond to security alerts antivirus software, network detect and response systems and external assets surface management (EASM) solutions.
• Keep up-to-date of the latest cybersecurity threats, trends, and technologies, with extra attention on Asia region.

Security Operations Management:

• Oversee daily security operations, including monitoring, detection, incident response, and threat management. Ensure alerts raised from the Group Centre of Excellence (COE) are addressed and closed, especially alerts on endpoint detect and response (EDR).
• Perform annual evaluations of USB access controls to ensure that access controls are regularly reviewed and adjusted as needed to maintain endpoint security resilience.
• Ensure that all IT cybersecurity contracts are reviewed and renewed in a timely manner to prevent service disruptions and maintain continuous protection of company's assets.
• Participate in and perform role-play scenarios during ad-hoc cyber drills exercise conducted by the company.
• Work closely with Group COE on cybersecurity-related tasks.

Incident Response Management:

• Coordinate all aspects of incident response, from initial detection to resolution, encompassing investigation, containment, remediation, and reporting of security incidents.
• Conduct thorough pre- and post-incident analysis to identify root causes and contributing factors, implementing necessary improvements to prevent future occurrences.
• Collaborate closely with the Group SOC Team Lead to address any true positive cases, ensuring timely and effective response to security incidents across the organization.

Vulnerability, Risk and Penetration Test Management:

• Review the execution of periodic/ad-hoc vulnerability and penetration tests within agreedscopes with application owner. Ensure that test findings are promptly remediated beforeproject go-live with relevant stakeholders.
• Conduct quarterly VA security assessments with Group COE VA Team to ensure applications are compliance with industry best standards. (i.e: NIST, ISO27001). Manage the identification, assessment, and mitigation of security vulnerabilities and risks.
• Ensure critical and high findings are addressed within the specified timeline.
• Provide assistance to Group COE during the annual exercise on Dynamic Assessment Security Testing (DAST) and security configuration reviews.
• Work closely with respective stakeholders for information gathering and remediation fixes within the specified timeline.
• Prepare quarterly risk statistics and trends both for in-country and group levels.

Regulatory Compliance and Audits:

• Ensure the company's compliance with relevant cybersecurity regulations and standards (e.g., PII, PCIDSS).
• Prepare and participate in security audits and assessments, both internally and externally.
• Engage stakeholders to address the audit findings promptly, facilitating discussions and providing necessary guidance and support.
• Follow up with stakeholders to ensure timely resolution of identified issues and alignment with established policies and standards.
• Work with Group COE governance and compliance team to refine policies and standards based on Singapore regulations and hardening baselines based on industry best practices.

Interested applicants please send your resume to [e-mail]

Fabian Ling Tuong Liing

R25129353

Recruit Express Pte Ltd

EA License No: 99C4599

RCB No.: 199601303W

We regret that only shortlisted candidates will be contacted.