Hybrid Cloud IT Security & Risk Lead

NTT SINGAPORE PTE. LTD.; Singapore; Hybride; SGD 90 000 - 130 000; Plein temps

Résumé du poste

NTT SINGAPORE PTE. LTD. is seeking an IT Security Officer to support a hybrid on‑premises and AWS environment, driving vulnerability management and risk governance.

You will coordinate remediation with stakeholders and monitor security operations to protect critical assets. The role requires 3–5+ years in IT security, hands-on experience with scanning tools, and strong ability to prioritize risks using CVSS in a complex enterprise setting.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or a related field.
• 3–5+ years of experience in IT security operations, vulnerability management, or risk management.
• Hands-on experience with vulnerability scanning tools (Tenable/Nessus, Qualys, Rapid7).
• Working knowledge of AWS security services and shared responsibility model (Security Hub, GuardDuty, Inspector, IAM).
• Solid understanding of on-premises infrastructure security (servers, network devices, endpoints).
• Strong understanding of CVSS scoring methodology and practical risk-based prioritization.
• Experience developing and managing Risk Registers and Risk Acceptance documentation.
• Excellent stakeholder management and cross-functional communication.

Responsabilités

• Execute and manage regular vulnerability scans across on-premises infrastructure and AWS services.
• Generate, review, and distribute vulnerability scan reports to relevant technical teams and leadership.
• Follow up with SMEs on outstanding vulnerability findings to ensure timely remediation or documented exceptions.
• Track remediation status and elevate overdue items per defined SLAs.
• Own and maintain the organization's Risk Register, ensuring it reflects current risk data.
• Draft Risk Acceptance forms for identified risks that cannot be immediately remediated.
• Coordinate with stakeholders to review and obtain approval on risk acceptances.
• Periodically review accepted risks for continued validity and reassessment.
• Monitor and verify that security signature updates are applied consistently across the environment.
• Review vendor security bulletins and vulnerability notifications for applicability.
• Ensure timely triage and action on vendor-disclosed vulnerabilities affecting in-scope systems.
• Perform impact analysis on CVSS scores and contextualize against environment to prioritize risk.
• Provide risk-based recommendations to stakeholders to support remediation prioritization decisions.
• Prepare periodic status reports/dashboards on vulnerability management and risk status.
• Communicate effectively with SMEs, business stakeholders, and management at varying levels of technical understanding.

Connaissances

Vulnerability management

Risk management

Security operations

CVSS scoring

Stakeholder communication

Formation

Bachelor's degree in Information Security, Computer Science, or related field

Outils

Tenable/Nessus

Qualys

Rapid7

AWS Security Hub

GuardDuty

Inspector

IAM

Description du poste

NTT SINGAPORE PTE. LTD. is seeking an IT Security Officer to support a hybrid on‑premises and AWS environment, driving vulnerability management and risk governance.

You will coordinate remediation with stakeholders and monitor security operations to protect critical assets. The role requires 3–5+ years in IT security, hands-on experience with scanning tools, and strong ability to prioritize risks using CVSS in a complex enterprise setting.