Cybersecurity Governance & Risk Lead

FPT ASIA PACIFIC PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

FPT Asia Pacific Pte. Ltd. is seeking an Information Technology Security Officer to support cybersecurity governance, assurance, risk management, and security operations.

You will work with system owners, infrastructure and cybersecurity teams, project teams, vendors, and other stakeholders to coordinate security assessments, track remediation activities, and maintain security registers and documentation. The role covers security architecture, VAPT, risk assessments, system hardening, cloud

Qualifications

• Good understanding of enterprise cybersecurity concepts including vulnerability management, risk assessment, system hardening, firewall controls, cloud security, and governance.
• Experience coordinating cybersecurity assessments, remediation activities, and security review processes with multiple stakeholders.
• Ability to review vulnerability findings, risk assessments, architecture diagrams, firewall rules, and compliance reports.
• Familiarity with cybersecurity standards and best practices.

Responsibilities

• Coordinate security architecture reviews and maintain design documentation.
• Manage VAPT activities and track remediation until closure.
• Maintain cybersecurity risk registers and report on risk treatment progress.
• Coordinate security hardening assessments and track gaps and remediation.
• Monitor CSPM findings and coordinate cloud remediation with owners.
• Log and track software security clearance requests and maintain registers.
• Track firewall rule changes and network deviation requests and prepare reviews.
• Support drafting and updating cybersecurity policies and governance documentation.
• Consolidate cybersecurity metrics and prepare management reports.

Job description

FPT Asia Pacific Pte. Ltd. is seeking an Information Technology Security Officer to support cybersecurity governance, assurance, risk management, and security operations.

You will work with system owners, infrastructure and cybersecurity teams, project teams, vendors, and other stakeholders to coordinate security assessments, track remediation activities, and maintain security registers and documentation. The role covers security architecture, VAPT, risk assessments, system hardening, cloud