IT Security Lead | Risk, Compliance & Incident Response

Ensign InfoSecurity (Singapore) Pte. Ltd.; Singapore; On-site; SGD 110,000 - 190,000; Full time

Job summary

Ensign InfoSecurity (Singapore) Pte. Ltd. is seeking an information security professional to assess architectures, develop risk-based security strategies and drive security program adoption. The role leads security operations, audits and incident response, coordinating with clients to uphold compliance and protect data.

The ideal candidate will bring strong risk management skills, proficiency across UNIX/Windows, and relevant certifications to enhance enterprise security controls.

Qualifications

• Understanding information security risk assessment and risk management procedures.
• Ability to map enterprise risk to administrative, physical and technical controls.
• Knowledge of security principles, standards and processes incl. auth, access control, hardening, network analysis, encryption, cloud security.
• Proficiency with UNIX and Windows operating systems.
• Excellent verbal and written communication skills.
• Certifications such as CISM, CISSP, CRISC or CISA are advantageous.

Responsibilities

• Assess architecture for vulnerabilities and upgrade opportunities to reduce attack surface.
• Develop and manage security strategies and policies to protect data.
• Implement and drive adoption of security frameworks and procedures.
• Own the security and compliance function of the project.
• Communicate information security goals and programs effectively.
• Oversee security audits by internal or third-party personnel.
• Lead security operations and coordinate incident response.
• Serve as focal point for information security with customers or stakeholders.
• Oversee upgrades and major changes to the security environment.
• Conduct information security awareness training for personnel.
• Coordinate staff during security incidents and investigations.
• Review breach reports and report status to management.

Skills

Risk assessment

Risk management

Security controls

Access control

Infrastructure hardening

Network analysis

Endpoint security

Cloud security

UNIX

Windows

Communication skills

Certifications (CISM, CISSP, CRISC, C|

Job description

Ensign InfoSecurity (Singapore) Pte. Ltd. is seeking an information security professional to assess architectures, develop risk-based security strategies and drive security program adoption. The role leads security operations, audits and incident response, coordinating with clients to uphold compliance and protect data.

The ideal candidate will bring strong risk management skills, proficiency across UNIX/Windows, and relevant certifications to enhance enterprise security controls.