IT Security Officer

Ensign InfoSecurity; Singapore; Hybrid; SGD 70,000 - 110,000; Full time

Job summary

Ensign InfoSecurity in Singapore is seeking an IT Security Officer to join a high‑caliber team delivering cyber security solutions across the SDLC. You will be the first line of defence, managing day‑to‑day security risks and supporting vulnerability management, data protection and GRC initiatives.

The ideal candidate has at least 4 years of IT or cyber security experience, a relevant IT or cyber security degree, and certifications such as RHCE, MCSE, CISA or SSCP are advantageous.

Qualifications

• Relevant diploma or degree qualifications in Information Technology or Cyber Security.
• At least 4 years of IT or Cyber Security experience.
• Professional certifications such as RHCE, MCSE, ISACA CISA, or ISC2 SSCP would be advantageous.
• Experience in the administration and hardening the various operating systems such as Microsoft Windows or Linux.
• Strong technical understanding of IT security controls.

Responsibilities

• Stay abreast of current threat landscape and cyber security events.
• Develop and deploy security hardening guidelines based on best practices.
• Analyze vulnerability results and coordinate remediation with vendors.
• Propose mitigations for failing security controls or vulnerabilities.
• Work with Patch Manager and Engineers to ensure patches are applied.
• Manage vendor/security assessments and VA/PT.
• Develop security frameworks, policies and procedures.
• Educate project teams on security policies and procedures.
• Verify effectiveness of security measures post-implementation.
• Maintain good operational security documentation.

Skills

Vulnerability Management

Security Governance

Risk Assessment

Threat Analysis

Windows & Linux

Security Documentation

Education

Diploma or Degree in IT or Cyber Security

Tools

Patch Management Tools

Vulnerability Scanning Tools

Security Assessment Tools

Job description

## IT Security OfficerApply: Singapore: Full time: Posted Today: JOBREQ-0003644Ensign is hiring !**Job Description**The professional will be joining a top team in delivering complex Cyber Security solutions to defend against cyber threats of the world. We are looking for a dedicated and meticulous team player who wants to make a career in the Vulnerability Management (VM), Data Protection or Governance, Risk and Compliance (GRC) domain.You will be the first line of defence in managing day-to-day security risks identified throughout a project’s System Development Lifecycle (SDLC). The role allows you to take on risk management and mitigation measures.**Roles & Responsibilities:*** Stay abreast of the current threat landscape and cyber security events* Develop and deploy security hardening guidelines based on best practices* Perform analysis of vulnerability results & work with principal vendor to ensure remediation* Propose and enforce mitigation measures for failing security controls or vulnerabilities* Work with Patch Manager and Engineers to ensure system patches are applied* Manage vendor/business associate security assessments and VA/PT* Develop security frameworks, policies and procedures that provide adequate information systems protection* Educate project team on security framework, policies and procedures* Verify the effectiveness of security measures and to ensure all security measures will continue to be effective after implementation* Maintain good operational security documentation**The ideal candidate should possess:*** Relevant diploma or degree qualifications in Information Technology or Cyber Security* At least 4 years of IT or Cyber Security experience* Professional certifications such as RHCE, MCSE, ISACA CISA, or ISC2 SSCP would be advantageous* Experience in the administration and hardening the various operating systems such as Microsoft Windows or Linux* Strong technical understanding of IT security controls* Dynamic individual and team player with positive working attitude