Cybersecurity Specialist

The Hour Glass; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

The Hour Glass invites applications for a Cybersecurity Specialist to strengthen the group’s security posture in Singapore. You will monitor tools, assist incident response, run awareness programs, and support audits including the Cyber Trust Mark and PDPA compliance.

You will work with the IT Manager and DPO, engaging with various teams to secure systems and data while keeping pace with evolving threats.

Qualifications

• A degree or diploma in Computer Science, IT, Cybersecurity or related field or equivalent experience.
• 3–6 years of hands-on cybersecurity experience.
• Experience with security monitoring and endpoint protection tools.
• Knowledge of vulnerability management, patch remediation & incident triage.
• Familiarity with phishing simulations and security awareness platforms.

Responsibilities

• Monitor security tools and endpoints to identify and investigate threats.
• Coordinate incident response, remediation and cross-team communication.
• Lead security assessments, risk tracking and policy improvements.
• Conduct phishing simulations and deliver security awareness training.
• Support audits/certifications such as Cyber Trust Mark and PDPA compliance.

Skills

Cybersecurity experience

Security monitoring

Incident response

Vulnerability management

Phishing simulations

Security certifications

Education

Degree in Computer Science / IT / Cybersecurity

Tools

Trend Micro

KnowBe4

Job description

Are you passionate about cybersecurity and keen to make a meaningful impact in protecting an organisation’s systems, applications and data?

We are looking for a Cybersecurity Specialist to support the Group in strengthening its cybersecurity posture and meeting its data protection obligations under the Personal Data Protection Act (PDPA). This role monitors security tools, supports incident response, runs security awareness activities, supports audits and certifications (e.g., Cyber Trust Mark), and works with teams across the Group to secure systems and applications. The Cybersecurity Specialist works closely with the IT Manager and the Data Protection Officer (DPO), who retain accountability for security strategy, certification, and PDPA compliance.

If you enjoy solving problems, staying ahead of emerging threats, and working collaboratively to make systems and processes more secure, we would love to hear from you.

What You’ll Do

Security Monitoring & Incident Response

• Monitor security tools and endpoint protection systems to identify, investigate, and elevate potential threats.
• Work with IT teams to respond to security incidents, address vulnerabilities, and follow through on remediation.
• Review the security posture of applications and track patching and remediation efforts with application owners.

Security Assessments & Risk Management

• Coordinate penetration tests and periodic cybersecurity assessments, and track findings through to resolution.
• Maintain IT security procedures and documentation, and recommend improvements to security policies.
• Support cybersecurity audits and certification initiatives, including the Cyber Trust Mark.

Security Awareness & Training

• Conduct monthly phishing simulations and analyse results to identify areas for improvement.
• Deliver quarterly security awareness training to help employees recognise and respond to cyber threats.
• Prepare monthly reports on the Group’s cybersecurity posture, key initiatives and areas of focus.

Data Protection & Compliance

• Support the Group’s compliance with the PDPA and other applicable data protection requirements.
• Work with the DPO and Deputy DPOs on privacy-related audits, risk assessments and policy updates.
• Promote secure data-handling practices and maintain documentation for compliance reviews and regulatory enquiries.

Security Projects & Vendor Assessments

• Support the implementation of security tools, vulnerability management platforms and other cybersecurity initiatives.
• Assist with vendor security reviews, including evaluating security questionnaires and supporting evidence.

What We’re Looking For

• A degree or diploma in Computer Science, Information Technology, Cybersecurity or a related field, or equivalent practical experience.
• Approximately 3–6 years of hands‑on cybersecurity experience.
• Experience with security monitoring and endpoint protection tools, such as Trend Micro or equivalent solutions.
• Working knowledge of vulnerability management, patch remediation, incident triage and response.
• Familiarity with phishing simulation and security awareness platforms, such as KnowBe4.
• An understanding of the PDPA and cybersecurity frameworks or certification requirements, such as the Cyber Trust Mark.
• Experience supporting security assessments, audits or vendor security reviews.
• Strong analytical and problem-solving skills, with excellent attention to detail.
• Good communication and interpersonal skills, with the ability to explain technical concepts to non-technical stakeholders.
• A proactive, organised and collaborative approach, with the ability to take ownership and follow through on issues.

A cybersecurity certification such as CompTIA Security+, CEH or an equivalent qualification would be an advantage.

Why Join Us?

You’ll have the opportunity to contribute directly to strengthening our Group’s security and data protection practices, work across a broad range of cybersecurity initiatives, and continue developing your expertise in a constantly evolving field.