IT Security Consultant

Optimum Solutions Pte Ltd; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Optimum Solutions Pte Ltd is seeking an experienced IT Security Officer to oversee cybersecurity risk assessments, security architecture reviews and incident management across on-premises and cloud environments.

You will review architectures, conduct risk assessments, coordinate vulnerability remediation, and drive security governance, policies and compliance with ISO 27001, NIST and OWASP standards. Strong collaboration with technical teams and vendors is essential.

Qualifications

• Degree in Computer Science, Information Technology, Cybersecurity or a related discipline.
• Minimum 5 years of relevant IT security experience including risk management, application security or cloud security.
• Strong understanding of system and application architectures, data flows, APIs, and cloud environments.
• Hands-on experience in cybersecurity risk assessments and security reviews across IT systems, applications and infrastructure.
• Experience in cybersecurity incident response and management, including investigation, containment and recovery.
• Knowledge of security principles, vulnerability management and best practices.
• Familiarity with ISO 27001, NIST and OWASP standards.
• Relevant certifications such as CISSP, OSCP, CCSP, CRISC or AWS Security are preferred.

Responsibilities

• Review architectures, data flows, interfaces, APIs, and entry points to identify vulnerabilities and risks.
• Conduct cybersecurity risk assessments for IT systems, applications, infrastructure and cloud services.
• Perform security reviews and recommend controls to address identified risks.
• Manage cybersecurity incidents from triage to post-incident reviews.
• Conduct vulnerability assessments and coordinate remediation activities.
• Strengthen security across applications, infrastructure and cloud in line with best practices and standards.
• Support cybersecurity governance, audits, policies and compliance requirements.
• Collaborate with internal teams and vendors to implement and maintain effective security controls.

Skills

IT Security

Cybersecurity risk management

Security architecture

Incident response

Vulnerability management

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

ISO 27001

NIST

OWASP

Job description

Our client is looking for an experienced IT Security Officer to oversee cybersecurity risk assessments, security architecture reviews and incident management across its IT systems, applications, infrastructure and cloud environments.

Key Responsibilities

• Review system architectures, data flows, interfaces, APIs, internet-facing entry points and security controls to identify vulnerabilities and potential security risks.
• Conduct cybersecurity risk assessments for new and existing IT systems, applications, infrastructure and cloud services.
• Perform security reviews and recommend appropriate controls to address identified risks and vulnerabilities.
• Manage cybersecurity incidents, including triage, investigation, containment, remediation, recovery and post-incident reviews.
• Conduct vulnerability assessments and coordinate remediation activities to ensure identified security issues are addressed.
• Review and strengthen application, infrastructure and cloud security in accordance with security best practices and industry standards.
• Support cybersecurity governance, audit activities, security policies and compliance requirements.
• Work with internal stakeholders, technical teams and external vendors to implement and maintain effective security controls.

Requirements

• Degree in Computer Science, Information Technology, Cybersecurity or a related discipline.
• Minimum 5 years of relevant experience in IT security, cybersecurity risk management, application security or cloud security.
• Strong understanding of system architecture, application architecture, data flows, APIs, network security and cloud environments.
• Hands-on experience conducting cybersecurity risk assessments and security reviews across IT systems, applications and infrastructure.
• Experience in cybersecurity incident response and management, including investigation, containment, remediation and recovery.
• Good knowledge of application security principles, vulnerability management and security best practices.
• Familiarity with security frameworks and standards such as ISO 27001, NIST and OWASP.
• Relevant professional certifications such as CISSP, OSCP, CCSP, CRISC, AWS Security certification or equivalent are preferred.