IT Security Manager

ensign infosecurity (cybersecurity) pte. ltd.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Ensign Infosecurity (Cybersecurity) Pte. Ltd. is seeking an experienced information security professional to assess vulnerabilities, develop security strategies, and lead security operations for client projects.

The role requires strong knowledge of risk assessment, security controls, and incident response, with preferred certifications such as CISM, CISSP, CRISC or CISA; familiarity with UNIX and Windows is expected, along with excellent communication.

Qualifications

• Proven understanding of information security risk assessment and risk management methodologies.
• Ability to correlate enterprise risk with administrative, physical and technical security controls.
• Knowledge of security principles, standards, and processes (authentication, access control, hardening, network analysis, endpoint security, encryption, cloud security).

Responsibilities

• Assess current technology architecture for vulnerabilities and improvements to reduce attack surface.
• Develop and manage security strategies and policies to protect data.
• Implement and adopt security frameworks and procedures to achieve security objectives.
• Take ownership of the security and compliance function of the project.
• Coordinate information security awareness training for personnel.
• Oversee information security audits and security operations.
• Lead security teams and serve as the focal point for security with the customer or organization.
• Manage upgrades and major changes to the information security environment.
• Respond to security incidents and report status to management.

Skills

Information security risk assessment

Security controls

UNIX

Windows

Communication skills

Incident response

Education

CISM

CISSP

CRISC

CISA

Job description

Roles & Responsibility:

• Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement, to identify any weak points that might make information systems vulnerable to attack
• Develop and manage security strategies, develop policies that encourage secure working and protect data
• Implement, document and drive the adoption of framework, processes and procedures in accordance with security strategies to deliver desired security objectives
• Take ownership of the security and compliance function of the project
• Communicate information security goals and new programs effectively
• Oversee information security audits performed by organization or third-party personnel
• Lead team members for security operations
• Serve as a focal point of contact for the information security team and the customer or organization
• Implement and oversee technological upgrades, improvements and major changes to the information security environment
• Conduct information security awareness training to personnel
• Coordinate staff when responding to security incidents
• Investigate and resolve security incidents
• Review security and breach report
• Report to customer or organization management on security status

The ideal candidate should possess:

• Proven understanding of information security risk assessment and risk management procedures and methodologies.
• Ability to correlate enterprise risk with appropriate administrative, physical and technical security controls.
• Strong understanding and knowledge of security principles, standards, and processes, such as authentication and access control, infrastructure hardening, network traffic analysis, endpoint security, platform architecture, application security, encryption and key management, cloud security, etc)).
• Working knowledge of UNIX and Windows operating systems.
• Excellent verbal and written communication skills.
• Professional certifications such as CISM, CISSP, CRISC or CISA would be an advantage