IT Security Consultant

K2 Partnering Solutions Pte Ltd; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

K2 Partnering Solutions Pte Ltd is seeking an experienced IT Security Consultant to strengthen security operations, vendor governance, and risk management. You will oversee third‑party security deliverables and direct vulnerability assessments to keep enterprise systems resilient against evolving cyber threats.

The role requires a Bachelor’s degree in CS/IT/Cybersecurity, 4–7 years of hands‑on cybersecurity experience, and active CISSP and/or CISM certifications.

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or related field.
• 4–7 years in cybersecurity operations or consultant roles.
• Active CISSP and/or CISM certifications.

Responsibilities

• Oversee third‑party security deliverables and testing schedules.
• Direct vulnerability assessments and testing cycles.
• Provide expert technical guidance to strengthen enterprise resilience.
• Review security policies and advisory across projects.
• Lead incident response coordination and root‑cause analysis.
• Develop organization‑wide security awareness sessions.

Skills

Network protocols

OS administration

Cloud architectures

SIEM platforms

Vulnerability scanners

Penetration testing tools

Python

PowerShell

OWASP Top 10

Incident response frameworks

Education

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related discipline

Tools

SIEM tools

Vulnerability scanners

Penetration testing tools

Job description

We are seeking an experienced IT Security Consultant to strengthen our security operations, vendor governance, and risk management frameworks. In this role, you will oversee third‑party security deliverables, direct vulnerability assessments and testing cycles, and provide expert technical guidance to ensure enterprise systems remain resilient against evolving cyber threats.

Key Responsibilities

• Vendor & Testing Management: Oversee security vendors and ensure high‑quality technical deliverables. Manage periodic penetration testing and vulnerability scanning schedules.

• Remediation & Risk Assessment: Evaluate security findings, assess proposed mitigation plans for technical adequacy, and drive timely remediation across systems.

• Governance & Advisory: Review and refine security policies, standards, and operational guidelines. Provide internal cybersecurity consultancy across technical projects.

• Incident Response & Operations: Monitor and respond to security alerts and advisories. Handle security incidents, conduct root‑cause analysis, and drive resolution.

• Training & Awareness: Develop and conduct organization‑wide security awareness sessions and issue regular threat advisories.

Qualifications & Skill Requirements

• Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.

• Experience: 4 to 7 years of hands‑on experience in cybersecurity operations, security analysis, or an equivalent consultant role.

• Mandatory Certifications: Must hold an active CISSP and/or CISM.

• Technical Skills:

  • Deep understanding of network protocols, OS administration (Windows/Linux), and major cloud architectures (AWS, Azure, or GCP).

  • Hands‑on proficiency with SIEM platforms, vulnerability scanners, and penetration testing tools.

  • Experience using scripting languages (e.g., Python, PowerShell) for task automation.

  • Solid understanding of OWASP Top 10 vulnerabilities, web application security, and incident response frameworks.

• Frameworks & Standards: Practical familiarity with established frameworks like NIST and ISO 27001.

• Soft Skills: Excellent problem‑solving capabilities, strong attention to detail, and the ability to articulate complex technical risks to non‑technical stakeholders.