IT Security Manager

PERSOL SINGAPORE PTE. LTD.; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

A leading IT solutions provider in Singapore is urgently hiring for the role of IT Security Manager (ITSM). This permanent position focuses on incident response, security monitoring, and compliance leadership. The ideal candidate will have at least 5 years of IT security experience, including cloud security expertise and familiarity with various security tools. Competitive benefits and growth opportunities offered in a dynamic environment.

Benefits

Competitive salary

Healthcare benefits

Professional development opportunities

Qualifications

• At least 5 years of IT security leadership experience.
• Minimum of 1 year in cloud security preferred.
• Proficient in security tools and incident response.

Responsibilities

• Collaborate with teams to monitor security threats.
• Lead security incident response activities.
• Conduct vulnerability assessments.
• Ensure compliance with security policies.

Skills

Incident Response

Security Monitoring

Vulnerability Management

Cloud Security

Risk Management

Communication Skills

Analytical Skills

Education

Bachelor’s degree in Information Security or related field

Tools

SIEM

WAF

AV

EDR

PAM

DAM

Tenable Nessus

Job description

Urgently hiring IT Security Manager (ITSM) --- Perm Role

Key Responsibilities

1. Incident Response & Security Monitoring

• Collaborate with SIRO/SIRM, IT Security Officers (ITSO), and the SOC to monitor, detect, and respond to security threats across on-premises and cloud environments.

• Lead security incident response activities, including investigation, containment, remediation, and post‑incident reviews.

• Stay updated on emerging threats, vulnerabilities, and cloud‑specific threat intelligence.

• Distribute security advisories, threat intelligence reports, directives, and patch recommendations to relevant agency stakeholders in a timely manner.

• Participate in tabletop exercises, risk assessments, audits, and third‑party evaluations to strengthen incident readiness and response maturity.

2. Security Product Management

• Monitor SIEM platforms (e.g., Splunk, Cortex, Exabeam), performing event triage, correlation, and in‑depth analysis.

• Conduct vulnerability assessments using Tenable Nessus across applications (web, mobile), network devices, and operating systems.

3. Security Governance & Compliance

• Lead periodic security reviews to ensure compliance with security policies, standards, controls, and best practices.

• Recommend and implement security improvements based on audit findings, TTX outcomes, and gap assessments.

• Oversee adherence to secure configuration baselines (e.g., CIS Benchmarks) for networks, systems, and endpoints.

• Analyse vulnerability scans, track remediation progress, and report closure within mandated timelines.

4. Network, Systems & Endpoint Security

• Manage, configure, and optimize security tools and platforms to ensure seamless integration within network and IT ecosystems.

• Oversee security controls for network, system, endpoint, and runtime environments across on‑premises and cloud infrastructure.

• Conduct periodic account and access reviews for both on-prem and cloud‑based applications and systems.

5. Documentation & Reporting

• Develop and update security policies, technical baselines, and Standard Operating Procedures (SOPs).

• Maintain accurate documentation of incidents, vulnerability assessments, security controls, and compliance artifacts.

• Produce regular reports on security metrics, incident patterns, compliance status, and risk mitigation initiatives.

• Ensure timely escalation and management reporting of cybersecurity incidents.

6. Collaboration & Stakeholder Management

• Provide mentorship and guidance to IT Security Officers (ITSOs).

• Collaborate with Infrastructure, Applications, and Project teams, as well as external vendors, to implement and sustain security controls.

• Serve as the primary point of contact for stakeholders—including SIRO/SIRM, IT teams, application teams, and cloud service providers—to align security practices with organizational cybersecurity strategies and compliance requirements.

Qualifications

Education & Experience

• Bachelor’s degree in Information Security, Computer Science, or a related field.

• At least 5 years of experience in IT security leadership, with a minimum of 1 year in cloud security preferred.

Technical Skills

• Hands‑on experience with security tools such as SIEM, WAF, AV, EDR, PAM, and DAM.

• Strong understanding of vulnerability management, threat analysis, and incident response processes.

• Good knowledge of secure network architecture, endpoint protection, and system hardening techniques.

• Familiarity with cybersecurity frameworks, compliance standards, and risk management methodologies.

• Experience with IaC security (e.g., Terraform, CloudFormation) and CI/CD pipeline security.

Certifications

• Preferred: CISSP, CISM.

• Advantageous: CCSP, AWS Security Specialty, Azure Security Engineer Associate, or equivalent cloud security certifications.

Other Skills

• Strong analytical and problem‑solving abilities with meticulous attention to detail.

• Excellent written and verbal communication skills with the ability to articulate security risks and recommendations clearly.

• Ability to work independently and collaboratively in a dynamic, fast‑paced environment.

• Proactive, security‑first mindset with a commitment to continuous improvement.