IT Security & Compliance Advisor

PERCEPT SOLUTIONS PTE. LTD.; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Percept Solutions PTE. LTD. is expanding its security governance team in Singapore, seeking a professional to lead security audits, risk assessments and compliance reviews for customer ICT systems.

You will drive incident response planning, tabletop exercises, and ongoing policy development. Candidate should have deep knowledge of ISO 27001 and PCI DSS, hands-on exposure to vulnerability management, log reviews, and security technologies.

Qualifications

• Experience in security audit, compliance and governance.
• Strong understanding of information security principles, ISO 27001 and PCI Security Standard is preferred.
• Knowledge of risk management, governance framework and compliance (IT Security Audit / Log review).
• Experience with vulnerability management, application security, IDS/IPS, firewall technologies, and incident response.
• Customer-facing with good interpersonal and leadership qualities.

Responsibilities

• Review and develop security framework, policies, processes and guidelines.
• Establish compliance through ongoing security reviews and audits.
• Conduct security risk management exercises and tabletop exercises.
• Coordinate vulnerability assessments and penetration testing activities.
• Conduct information security awareness training.
• Develop and manage customer security incident response plans.

Skills

Security auditing

ISO 27001

PCI DSS

Risk management

Security governance

Incident response

Log review

Vulnerability assessment

Penetration testing

Security technologies

Education

CISSP/CISA/CISM/ISMS Lead Auditor

Job description

Percept Solutions PTE. LTD. is expanding its security governance team in Singapore, seeking a professional to lead security audits, risk assessments and compliance reviews for customer ICT systems.

You will drive incident response planning, tabletop exercises, and ongoing policy development. Candidate should have deep knowledge of ISO 27001 and PCI DSS, hands-on exposure to vulnerability management, log reviews, and security technologies.