Information Technology Security Officer

Kyndryl; Singapore; On-site; SGD 70,000 - 100,000; Full time

Job summary

A leading tech company in Singapore seeks a candidate skilled in governance, risk management, and compliance to ensure adherence to government cybersecurity policies. The role involves overseeing security operations, providing guidance on security standards, and enhancing security awareness within internal teams and vendors. Candidates must demonstrate proficiency in conducting security assessments, managing incident responses, and improving security processes. A passion for continuous improvement in cybersecurity measures is essential.

Qualifications

• Experience with government security standards and cybersecurity policies.
• Ability to lead security risk assessments and mitigation planning.
• Proficient in developing and maintaining security documentation.

Responsibilities

• Ensure compliance with IM8 and WOG Cybersecurity Policies.
• Oversee security events and coordinate with SOC for incident triage.
• Participate in system design reviews for security assurance.
• Provide guidance on government security requirements.
• Conduct security awareness training.

Job description

1. Governance, Risk & Compliance (GRC)

• Ensure compliance withIM8,WOG Cybersecurity Policies, and other government security standards.
• Lead security risk assessments, gap analyses, and mitigation planning for systems and projects.
• Develop and maintain security documentation including SRM reports, policies, procedures, and system security plans.
• Support accreditation and certification processes such as STS, SCD, and annual security reviews.

2. Security Operations & Monitoring

• Oversee security events, incident alerts, and vulnerabilities across systems.
• Coordinate with Government Security Operations Centres (SOC) or vendor SOC for incident triage and escalation.
• Track remediation of findings from audits, penetration tests, and vulnerability scans.
• Ensure timely reporting of incidents to relevant government cybersecurity authorities.

3. Project Security Assurance

• Participate in system design reviews to ensure security‑by‑design principles.
• Review solution architectures, technical designs, and change requests for compliance with WOG policies.
• Conduct security assessments for new applications, cloud services, or infrastructure changes.
• Validate and approve deployment of security controls (e.g., MFA, encryption, endpoint protection, logging).

4. Policy Enforcement & Advisory

• Act as the primary security SME for systems under management.
• Provide guidance to project managers, developers, and infrastructure teams on government security requirements.
• Review third‑party vendor deliverables for compliance and security posture.
• Ensure data classification, handling, and protection guidelines are adhered to.

5. Security Awareness & Continuous Improvement

• Conduct or coordinate security awareness training for internal teams and vendors.
• Track cybersecurity trends and changes in government security regulations.
• Recommend improvements to security processes, monitoring tools, and compliance workflows.
• Drive adoption of GovTech cybersecurity initiatives (e.g., CSP, CCoP updates, logging guidelines).