IT Security Consultant

ScienTec Consulting Pte. Ltd.; Singapore; Hybrid; SGD 67,000 - 112,000; Full time

Benefits offered by this job

Hybrid working arrangement

Job summary

ScienTec Consulting Pte. Ltd. is seeking an Information Technology Security Officer to support cybersecurity governance, assurance and security management activities. The role covers security architecture, vulnerability assessment and cloud security posture management.

The successful candidate will coordinate VAPT activities, manage risk assessments and security reviews, and collaborate with stakeholders across the organisation. Hybrid working arrangement and central location are available.

Qualifications

• Minimum 4 years of experience in vulnerability management, security risk assessment, system hardening, firewall controls, cloud security and governance.
• Experience coordinating cybersecurity assessments, remediation activities and security reviews.
• Ability to interpret vulnerability findings, risk assessments and security reports.
• Familiarity with CSPM platforms and VAPT tools; knowledge of CVE/CVSS is a plus.
• Professional certifications (Security+, CISSP, CISM, CRISC or ISO 27001) are preferred.

Responsibilities

• Maintain security architecture documentation and coordinate design reviews.
• Coordinate VAPT activities and track remediation, retesting and closure.
• Manage risk assessments, risk registers and treatment actions.
• Coordinate system-hardening assessments and follow up on gaps.
• Monitor cloud security posture and remediation of misconfigurations.
• Manage software security-clearance requests and approvals.
• Track firewall-rule changes and security exceptions.
• Support cybersecurity policies, standards and specifications.
• Prepare management reports on vulnerabilities, risks and audits.
• Assist cybersecurity assessments, audits and evidence collection.
• Collaborate with system owners, infrastructure teams and vendors.

Skills

Vulnerability management

Security risk assessment

System hardening

Firewall controls

Cloud security

Cybersecurity governance

Stakeholder management

Remediation coordination

Security architecture

Tools

CSPM platforms

VAPT tools

CVE/CVSS references

Job description

Working Hours: Monday – Thursday (8.30am – 6pm), Friday (8.30am – 5.30pm) (Hybrid working arrangement)

Working Location: Central

Salary Package: Up to $10,000 + AWS

Employment Type: Full Time Contract (1 year renewable with chances of conversion)

We are seeking an Information Technology Security Officer to support the organisation’s cybersecurity governance, assurance and security management activities. The role covers security architecture, vulnerability assessment and penetration testing, risk assessment, system hardening, cloud security posture management, software clearance, firewall and network deviation management, cybersecurity policies and security reporting. The successful candidate should possess strong analytical, documentation, coordination and stakeholder management skills, together with a sound understanding of enterprise cybersecurity controls and governance processes.

Key Responsibilities

• Maintain security architecture documentation and coordinate security design reviews.
• Coordinate VAPT activities and track vulnerability remediation, retesting and closure.
• Manage cybersecurity risk assessments, risk registers and treatment actions.
• Coordinate system-hardening assessments and follow up on compliance gaps.
• Monitor CSPM findings and track the remediation of cloud security misconfigurations.
• Manage software security-clearance requests, evaluations and approval statuses.
• Track firewall-rule changes, network deviations and security exceptions.
• Support the development and maintenance of cybersecurity policies, standards and specifications.
• Maintain security dashboards and prepare management reports covering vulnerabilities, risks, compliance and audit findings.
• Support cybersecurity assessments, audits and evidence-collection activities.
• Collaborate with system owners, infrastructure teams, project teams, vendors and other stakeholders.

Requirements

• Minimum 4 years of working experience in vulnerability management, security risk assessment, system hardening, firewall controls, cloud security and cybersecurity governance.
• Experience coordinating cybersecurity assessments, remediation activities and security reviews.
• Ability to interpret vulnerability findings, risk assessments, security architecture diagrams, firewall rules and compliance reports.
• Strong analytical, documentation, stakeholder-management and follow-up skills.
• Familiarity with CSPM platforms, VAPT tools, CVE/CVSS information and enterprise network security would be advantageous.
• Cybersecurity certifications such as Security+, ISC2 CC, CISSP, CISM, CRISC, ISO 27001 or relevant cloud security certifications are preferred.