IT Security Manager

Ensign InfoSecurity (Singapore) Pte. Ltd.; Singapore; On-site; SGD 110,000 - 190,000; Full time

Job summary

Ensign InfoSecurity (Singapore) Pte. Ltd. is seeking an information security professional to assess architectures, develop risk-based security strategies and drive security program adoption. The role leads security operations, audits and incident response, coordinating with clients to uphold compliance and protect data.

The ideal candidate will bring strong risk management skills, proficiency across UNIX/Windows, and relevant certifications to enhance enterprise security controls.

Qualifications

• Understanding information security risk assessment and risk management procedures.
• Ability to map enterprise risk to administrative, physical and technical controls.
• Knowledge of security principles, standards and processes incl. auth, access control, hardening, network analysis, encryption, cloud security.
• Proficiency with UNIX and Windows operating systems.
• Excellent verbal and written communication skills.
• Certifications such as CISM, CISSP, CRISC or CISA are advantageous.

Responsibilities

• Assess architecture for vulnerabilities and upgrade opportunities to reduce attack surface.
• Develop and manage security strategies and policies to protect data.
• Implement and drive adoption of security frameworks and procedures.
• Own the security and compliance function of the project.
• Communicate information security goals and programs effectively.
• Oversee security audits by internal or third-party personnel.
• Lead security operations and coordinate incident response.
• Serve as focal point for information security with customers or stakeholders.
• Oversee upgrades and major changes to the security environment.
• Conduct information security awareness training for personnel.
• Coordinate staff during security incidents and investigations.
• Review breach reports and report status to management.

Skills

Risk assessment

Risk management

Security controls

Access control

Infrastructure hardening

Network analysis

Endpoint security

Cloud security

UNIX

Windows

Communication skills

Certifications (CISM, CISSP, CRISC, C|

Job description

Roles & Responsibility:

• Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement, to identify any weak points that might make information systems vulnerable to attack
• Develop and manage security strategies, develop policies that encourage secure working and protect data
• Implement, document and drive the adoption of framework, processes and procedures in accordance with security strategies to deliver desired security objectives
• Take ownership of the security and compliance function of the project
• Communicate information security goals and new programs effectively
• Oversee information security audits performed by organization or third-party personnel
• Lead team members for security operations
• Serve as a focal point of contact for the information security team and the customer or organization
• Implement and oversee technological upgrades, improvements and major changes to the information security environment
• Conduct information security awareness training to personnel
• Coordinate staff when responding to security incidents
• Investigate and resolve security incidents
• Review security and breach report
• Report to customer or organization management on security status

The ideal candidate should possess:

• Proven understanding of information security risk assessment and risk management procedures and methodologies.
• Ability to correlate enterprise risk with appropriate administrative, physical and technical security controls.
• Strong understanding and knowledge of security principles, standards, and processes, such as authentication and access control, infrastructure hardening, network traffic analysis, endpoint security, platform architecture, application security, encryption and key management, cloud security, etc)).
• Working knowledge of UNIX and Windows operating systems.
• Excellent verbal and written communication skills.
• Professional certifications such as CISM, CISSP, CRISC or CISA would be an advantage