IT Security Consultant

K2 PARTNERING SOLUTIONS PTE. LTD.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

K2 PARTNERING SOLUTIONS PTE. LTD. is seeking an experienced IT Security Consultant to strengthen security operations, governance, and risk management across the enterprise.

You will oversee third-party security deliverables and lead vulnerability assessments and testing cycles to keep systems resilient against evolving threats. You will work closely with stakeholders to implement security controls, respond to incidents, and mentor teams on best practices, with a focus on practical risk

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related discipline.
• 4–7 years of hands-on experience in cybersecurity operations, security analysis, or equivalent consultant role.
• Active CISSP and/or CISM certifications required.
• Deep understanding of network protocols, OS administration (Windows/Linux), and major cloud architectures (AWS, Azure, or GCP).
• Hands-on with SIEM platforms, vulnerability scanners, and penetration testing tools.
• Experience with scripting languages (e.g., Python, PowerShell) for automation.
• Knowledge of OWASP Top 10, web app security, and incident response frameworks.
• Familiarity with NIST and ISO 27001 frameworks.
• Strong problem-solving and communication skills to explain risks to non-technical stakeholders.

Responsibilities

• Vendor & Testing Management: Oversee security vendors and ensure high-quality deliverables; manage penetration testing and vulnerability scanning schedules.
• Remediation & Risk Assessment: Evaluate findings, assess mitigation plans, and drive remediation across systems.
• Governance & Advisory: Review security policies, standards, and guidelines; provide internal cybersecurity consultancy.
• Incident Response & Operations: Monitor security alerts; handle incidents; conduct root-cause analysis and resolution.
• Training & Awareness: Develop and deliver organization-wide security awareness sessions and threat advisories.

Skills

Security operations

Vulnerability assessment

Penetration testing

Cloud security

SIEM

Vulnerability scanning

Python scripting

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

SIEM platforms

Vulnerability scanners

Penetration testing tools

Scripting: Python/PowerShell

Job description

We are seeking an experienced IT Security Consultant to strengthen our security operations, vendor governance, and risk management frameworks. In this role, you will oversee third-party security deliverables, direct vulnerability assessments and testing cycles, and provide expert technical guidance to ensure enterprise systems remain resilient against evolving cyber threats.

Key Responsibilities

• Vendor & Testing Management: Oversee security vendors and ensure high-quality technical deliverables. Manage periodic penetration testing and vulnerability scanning schedules.
• Remediation & Risk Assessment: Evaluate security findings, assess proposed mitigation plans for technical adequacy, and drive timely remediation across systems.
• Governance & Advisory: Review and refine security policies, standards, and operational guidelines. Provide internal cybersecurity consultancy across technical projects.
• Incident Response & Operations: Monitor and respond to security alerts and advisories. Handle security incidents, conduct root-cause analysis, and drive resolution.
• Training & Awareness: Develop and conduct organization-wide security awareness sessions and issue regular threat advisories.

Qualifications & Skill Requirements

• Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.
• Experience: 4 to 7 years of hands-on experience in cybersecurity operations, security analysis, or an equivalent consultant role.
• Mandatory Certifications: Must hold an active CISSP and/or CISM .
• Technical Skills:
  • Deep understanding of network protocols, OS administration (Windows/Linux), and major cloud architectures (AWS, Azure, or GCP).
  • Hands-on proficiency with SIEM platforms, vulnerability scanners, and penetration testing tools.
  • Experience using scripting languages (e.g., Python, PowerShell) for task automation.
  • Solid understanding of OWASP Top 10 vulnerabilities, web application security, and incident response frameworks.
• Frameworks & Standards: Practical familiarity with established frameworks like NIST and ISO 27001.
• Soft Skills: Excellent problem-solving capabilities, strong attention to detail, and the ability to articulate complex technical risks to non-technical stakeholders.