Cyber Security Engineer: Risk, Audits & Incidents

ST Engineering; Singapore; On-site; SGD 70,000 - 120,000; Full time

Job summary

ST Engineering is seeking a cybersecurity professional responsible for managing security operations across classified computers and systems. The role covers log reviews, change management, risk assessments, incident handling, and audits to ensure organizational security and regulatory compliance.

The ideal candidate holds multiple security certifications (e.g., CSSA+, CISA, CISM, CISSP) and has experience with governance, encryption, and vulnerability remediation within a structured IT

Qualifications

• Minimum one of the listed certifications; relevant Cyber Security certifications preferred.
• Experience in security governance, auditing and compliance.
• Familiarity with network and system security controls.

Responsibilities

• Perform log reviews on classified computers and systems.
• Conduct cyber risk assessments and vulnerability management.
• Coordinate security audits and regulatory submissions.
• Assist with security incident management and compliance activities.
• Develop and archive network security processes and SOPs.
• Enforce data security and encryption requirements.

Skills

Log Review

Change Management

Cyber Risk Assessment

Incident Management

Security Audits

Compliance

Vulnerability Remediation

VA Scanning

Security Enforcements

Education

CSSA+ Certification

CISA

CISM

ISO 27001 Internal Auditor

ISO 27001 Lead Implementer

CISSP

Tools

GPOs Management

VA Scanning Tools

Audit Tools

Job description

ST Engineering is seeking a cybersecurity professional responsible for managing security operations across classified computers and systems. The role covers log reviews, change management, risk assessments, incident handling, and audits to ensure organizational security and regulatory compliance.

The ideal candidate holds multiple security certifications (e.g., CSSA+, CISA, CISM, CISSP) and has experience with governance, encryption, and vulnerability remediation within a structured IT