IT Security Manager

ENGGSOL PTE. LTD.; Singapore; On-site; SGD 55,000 - 85,000; Full time

Job summary

A cybersecurity firm in Singapore is seeking an experienced cybersecurity professional to monitor and analyze security events, conduct risk assessments, and ensure compliance with IT security policies. The successful candidate will also coordinate incident response efforts and promote security awareness within the organization. Ideal for individuals with a strong background in incident management and security compliance.

Qualifications

• Experience in cybersecurity incident response and risk management.
• Proficient in analyzing security event logs and identifying threats.
• Ability to develop and implement security policies and training.

Responsibilities

• Monitor and analyze security events to identify incidents.
• Conduct risk assessments and develop mitigation strategies.
• Ensure compliance with security policies and regulations.
• Coordinate incident response with stakeholders.
• Deliver security training to enhance employee awareness.

Skills

Security event monitoring

Risk assessment

Incident response coordination

Compliance with IT security policies

Security awareness training

Job description

You will:

1. Cyber Vigilance:

- Monitor and analyze security event logs to identify potential security incidents.

- Respond to security incidents in a timely and effective manner, ensuring minimal disruption to business operations.

2. Risk Management:

- Conduct risk assessments and vulnerability management to identify potential security threats.

- Develop and implement mitigation strategies to minimize risk.

3. Compliance and Governance:

- Ensure compliance with IT security policies, regulations, and standard e.g IM8 , PDPA.

- Develop and maintain security policies, procedures, and guidelines.

4. Incident Response:

- Develop and maintain incident response plans and procedures.

- Coordinate incident response efforts with stakeholders, including IT teams and management.

5. Security Awareness and Training:

- Promote security awareness and training programs for employees.

- Develop and deliver security training sessions to enhance employee knowledge and skills.

6. You Will:

• First person and POC for all security incidents and escalations
• The ITSM shall inform the parties listed in the Technical SOP within the Expected Response Timeline of the Incident Management.
• The information to be provided shall include the incident reference number, description, date and time and the impact (including who had been affected) of the incident.
• To administer, maintain and assess the implementation of security processes.
• To develop System Owner support for acquiring and sustaining adequate resources for incident response.
• To be the corporate intermediary for coordinating communications between System Owner and incident response personnel.
• To serve as a trusted custodian of incident information for ensuring the preservation and admissibility of evidence.
• To ensure the compliance with the required IT security policies.
• To perform the logs review in all security system managed by our operational team
• To review system security logs and to work with the client manager and onsite technical team on follow up actions.
• To perform regular policy review and enhancement to ensure all are in line with agency requirements.
• To promote IT security awareness, latest risk and cyber responsibility.
• To participate in incident response table-top exercises, simulation and drills either conducted internally by the contractor or as required by client.

Resolution for Preventing Recurrence of Security Incidents

• For cases where workarounds are implemented, the ITSM shall identify the root causes and implement permanent resolutions according to the Problem Management process.
• To assist with management/containment/remediation/eradication of security incident
• To assist with Risk assessment and ensure minimising the risk exposure of IT asset and improve the cyber security posture.
• The ITSM shall be responsible to close all IT security incidents in accordance with the Incident Management process.
• For every IT security incident, the ITSM shall submit to the client an incident report in draft within one (1) day and a final version within three (3) days of incident resolution, unless otherwise agreed by the client.
• The incident record shall be closed only when the incident report is accepted by the client. The client reserved the right to verify the details in the incident report against the associated incident record maintained by the ITSM. The incident report shall be in the format defined by the client.

7. Required to participate in following audit activities performed by client’s 3rd party auditors or internal auditors:

(a) IT Security Review

(b) IT Vulnerability Assessment

(c) IT Security Penetration Testing

(d) IT Security Compliance Review