IT Security (6-Months Agency Contract)

ADVANCED SUBSTRATE TECHNOLOGIES PTE. LTD.; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

ADVANCED SUBSTRATE TECHNOLOGIES PTE. LTD. is seeking a seasoned cybersecurity professional to lead security operations and governance across on-prem and cloud environments.

The role emphasizes policy development, incident response, risk assessments, and implementation of ISO 27001, NIST CSF, CIS Benchmarks, and regulatory compliance.

Qualifications

• Bachelor's degree in cybersecurity or related discipline.
• Minimum 5 years in cybersecurity, security operations, governance, risk and compliance (GRC), IT security controls, or infrastructure security roles.
• Hands-on experience with security operations, incident response, vulnerability management, access controls, and enterprise security technologies.
• Strong knowledge of ISO 27001, NIST CSF, CIS Benchmarks and regulatory requirements.
• Certifications such as CISSP, CISM, CISA, CCSP, GIAC, Azure Security, or AWS Security are preferred.

Responsibilities

• Develop, maintain, and enforce cybersecurity policies, standards, procedures, and security controls aligned with regulatory requirements, ISO 27001, NIST, CIS benchmarks, and industry best practices.
• Manage security operations by monitoring security events, analysing threats, investigating incidents, coordinating response activities, and driving remediation to closure.
• Conduct cybersecurity risk assessments, vulnerability management, penetration testing, compliance reviews, audits, and third-party security assessments.
• Provide security advisory and technical guidance to infrastructure, applications, cloud, and project teams to ensure security-by-design principles are embedded throughout the system lifecycle.
• Manage and optimize security technologies including SIEM, EDR/XDR, WAF, PAM, vulnerability management platforms, DDoS protection solutions, and cloud security tools.
• Oversee privileged access, identity security, endpoint protection, secure configuration management, system hardening, and access control reviews across on-premises and cloud environments.
• Collaborate with internal stakeholders, service providers, and vendors to implement cybersecurity initiatives, manage security services, and improve overall security posture.
• Drive security awareness, maintain cybersecurity documentation, and prepare management reports on incidents, vulnerabilities, compliance status, risks, and security performance metrics.

Skills

Security operations

Incident response

Threat analysis

Security policy development

Risk assessment

Regulatory compliance

Education

Bachelor's degree in Cybersecurity or related field

Tools

SIEM

EDR/XDR

WAF

PAM

Vulnerability scanners

Job description

Job Responsibilities

• Develop, maintain, and enforce cybersecurity policies, standards, procedures, and security controls aligned with regulatory requirements, ISO 27001, NIST, CIS benchmarks, and industry best practices.
• Manage security operations by monitoring security events, analysing threats, investigating incidents, coordinating response activities, and driving remediation to closure.
• Conduct cybersecurity risk assessments, vulnerability management, penetration testing, compliance reviews, audits, and third-party security assessments.
• Provide security advisory and technical guidance to infrastructure, applications, cloud, and project teams to ensure security-by-design principles are embedded throughout the system lifecycle.
• Manage and optimize security technologies including SIEM, EDR/XDR, WAF, PAM, vulnerability management platforms, DDoS protection solutions, and cloud security tools.
• Oversee privileged access, identity security, endpoint protection, secure configuration management, system hardening, and access control reviews across on-premises and cloud environments.
• Collaborate with internal stakeholders, service providers, and vendors to implement cybersecurity initiatives, manage security services, and improve overall security posture.
• Drive security awareness, maintain cybersecurity documentation, and prepare management reports on incidents, vulnerabilities, compliance status, risks, and security performance metrics.

Job Requirements

• Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline.
• Minimum 5 years of experience in cybersecurity, security operations, governance, risk and compliance (GRC), IT security controls, or infrastructure security roles.
• Hands-on experience managing security operations, incident response, vulnerability management, access controls, and enterprise security technologies.
• Strong knowledge of cybersecurity frameworks and standards including ISO 27001, NIST Cybersecurity Framework, CIS Benchmarks, and regulatory compliance requirements.
• Experience with security tools such as SIEM, EDR/XDR, WAF, PAM, vulnerability assessment platforms, and security monitoring solutions.
• Good understanding of network security, cloud security, identity and access management, endpoint protection, security logging, threat detection, and system hardening.
• Professional certifications such as CISSP, CISM, CISA, CCSP, GIAC, Microsoft Security, Azure Security, or AWS Security certifications are preferred.
• Strong analytical, problem-solving, stakeholder management, communication, and documentation skills, with the ability to work independently in a fast-paced environment.