Information Technology Security Engineer - 1 year contract

Sekuro Asia - An Insight Company; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Sekuro Asia - An Insight Company is seeking a Security Governance and Operations Specialist in Singapore. This role focuses on policy development, security controls, and risk management across IT, cloud, and networks.

You will monitor threats, manage incidents, perform vulnerability assessments, and advise project teams to embed security-by-design principles. A solid security foundation and 5+ years in enterprise security are expected.

Qualifications

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, Business IT, Information Systems, or a related discipline.
• Minimum 5 years of relevant experience in cybersecurity, security operations, IT security controls, IT system auditing, policy implementation, or related IT infrastructure security roles.
• Hands‑on experience managing security operations, vulnerability management, incident response, access control, and security technologies in enterprise environments.

Responsibilities

• Develop, maintain, and update security policies, standards, baselines, SOPs, and security controls.
• Conduct periodic security reviews and enforce compliance with policies and CIS hardening.
• Support risk management, audits, tabletop exercises, and remediation initiatives.
• Provide security advisory to IT, applications, cloud, and project teams.
• Assist with personal data protection and PDPA-related security matters.
• Monitor security posture, events, and threats using SIEM and related platforms.
• Manage cybersecurity incidents end-to-end and track remediation.
• Stay current with threats and disseminate advisories and patch recommendations.
• Coordinate security improvements across tools like WAF, SIEM, EDR/XDR, PAM.

Skills

Policy development

Security operations

Incident response

Vulnerability management

Threat intelligence

Security auditing

SIEM

ISO 27001

NIST CSF

Cloud security

Education

Bachelor’s degree in Computer Science/IT/Cybersecurity

Tools

SIEM

WAF

EDR/XDR

PAM

Vulnerability scanners

Job description

Security Governance, Policy & Compliance:

• Develop, maintain, and update IT security policies, standards, technical baselines, Standard Operating Procedures (SOPs), and security controls in line with regulatory requirements and industry best practices.
• Conduct periodic security reviews and enforce compliance with IT security policies, standards, controls, and secure configuration requirements, including CIS hardening.
• Support cybersecurity risk management, audits, tabletop exercises, third-party assessments, and remediation initiatives arising from audit or assessment findings.
• Provide security advisory and recommendations to IT, application, infrastructure, cloud, project teams, and external service providers to embed security-by-design principles in projects and system implementations.
• Assist with personal data protection and PDPA-related security matters, including policies for handling personal data and identification of security risks affecting personal data.

Security Operations, Monitoring & Incident Response:

• Monitor the organization’s exposure to cybersecurity threats, security events, and overall security performance, and analyse the current security posture.
• Monitor and analyse security events through SIEM and related security platforms, perform event triage, investigate suspicious activities, and elevate critical threats and incidents in a timely manner.
• Manage cybersecurity incidents end-to-end, maintain incident records, perform analysis, recommend effective containment and remediation actions, and track corrective actions to closure.
• Stay current with emerging threats, vulnerabilities, and threat intelligence, and disseminate relevant security advisories, directives, and patch recommendations to stakeholders.
• Support continuous improvement of security monitoring, detection use cases, alert quality, and response workflows.

Vulnerability Management & Security Assessments:

• Plan and manage vulnerability assessments, penetration tests, and other security assessments across applications, networks, servers, endpoints, and cloud environments.
• Analyse vulnerability assessment results, recommend remediation actions, track remediation status against required timelines, and report outstanding risks to management.
• Perform security and vulnerability checks on computing devices before connection to the corporate network to ensure compliance with cyber hygiene requirements.

Network, System, Endpoint & Privileged Access Security:

• Manage, configure, and optimize security tools and platforms to ensure effective integration with network and IT infrastructure.
• Manage security controls across on‑premises and cloud environments, including network, systems, endpoints, identity, and runtime security.
• Manage endpoint security controls including antivirus/EDR and manage privileged identities and privileged access using PAM solutions such as CyberArk or equivalent.
• Perform regular reviews of user, privileged, on‑premises, and cloud accounts, including access rights, access logs, and service‑provider monitoring reports.
• Support secure network design, system hardening, access control, and security monitoring across enterprise environments.

Security Product & Service Provider Management:

• Identify security enhancements and work with third‑party suppliers to design and implement cybersecurity projects, including preparation of test packs, system testing, implementation, and operational handover activities.
• Manage security service providers supporting IT systems and networks, monitor their performance, review submitted security reports, and ensure compliance with security policies and agreed service levels.
• Coordinate lifecycle management, security posture reviews, testing, and monitoring for security technologies such as WAF, DDoS protection, SIEM, EDR/XDR, PAM, and vulnerability management platforms.

Security Awareness, Documentation & Reporting:

• Conduct information security awareness and training for employees and third‑party service providers to strengthen security culture and policy compliance.
• Maintain accurate documentation for security incidents, vulnerability assessments, security checklists, controls, policies, standards, and operating procedures.
• Prepare regular security reports covering security performance metrics, incident trends, vulnerability remediation, compliance status, risks, and mitigation progress for management and stakeholders.
• Collaborate effectively with internal IT teams, business stakeholders, cloud service providers, and external vendors on cybersecurity initiatives and operational security matters.

Education & Experience:

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, Business IT, Information Systems, or a related discipline.
• Minimum 5 years of relevant experience in cybersecurity, security operations, IT security controls, IT system auditing, policy implementation, or related IT infrastructure security roles.
• Hands‑on experience managing security operations, vulnerability management, incident response, access control, and security technologies in enterprise environments.

Technical Knowledge & Skills:

• Hands‑on experience with security tools such as SIEM, WAF, antivirus/EDR/XDR, PAM, vulnerability assessment tools, and related security platforms.
• Strong understanding of vulnerability management, threat analysis, incident response processes, secure network design, endpoint security, identity/access security, and system hardening.
• Good understanding of IT infrastructure systems, on‑premises and cloud security, security logging and monitoring, and secure configuration standards.
• Familiarity with security frameworks and standards such as ISO 27001, NIST CSF, CIS benchmarks, and applicable regulatory or risk‑management requirements.
• Knowledge of cloud security and security monitoring in platforms such as Microsoft Azure, AWS, or equivalent is advantageous.
• Familiarity with automation, scripting, IaC security, CI/CD security, or security orchestration/automation is advantageous.

Professional Certifications:

• Professional cybersecurity certifications such as CISSP, CISM, CISA, or equivalent are preferred.
• Cloud or security operations certifications such as ISC2 CCSP, Microsoft Security/Azure Security certifications, AWS Certified Security, GIAC, or equivalent are advantageous.
• Strong analytical, investigative, and problem‑solving skills with attention to detail.
• Good written and verbal communication skills, with the ability to explain technical security risks and recommendations clearly to technical and non‑technical stakeholders.
• Able to work independently with minimal supervision and collaborate effectively in a dynamic, fast‑paced environment.
• Proactive and continuous‑improvement mindset with a strong sense of responsibility, integrity, and ownership.