IT Security Officer

Ensign InfoSecurity; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

Ensign InfoSecurity is seeking a diligent security professional to join a top team delivering cyber security solutions. You will handle vulnerability management, risk mitigation, and SDLC security controls across projects, ensuring patches and hardening measures are applied.

The role emphasizes collaboration, documentation, and ongoing security improvement. The ideal candidate has 4+ years in IT or cyber security, relevant IT/Cyber security degrees, and certifications such as RHCE, MCSE, CISA,

Qualifications

• Relevant diploma or degree qualifications in Information Technology or Cyber Security
• At least 4 years of IT or Cyber Security experience
• Professional certifications such as RHCE, MCSE, ISACA CISA, or ISC2 SSCP would be advantageous
• Experience in the administration and hardening the various operating systems such as Microsoft Windows or Linux
• Strong technical understanding of IT security controls
• Dynamic individual and team player with positive working attitude

Responsibilities

• Stay abreast of the current threat landscape and cyber security events
• Develop and deploy security hardening guidelines based on best practices
• Perform analysis of vulnerability results & work with principal vendor to ensure remediation
• Propose and enforce mitigation measures for failing security controls or vulnerabilities
• Work with Patch Manager and Engineers to ensure system patches are applied
• Manage vendor/business associate security assessments and VA/PT
• Develop security frameworks, policies and procedures that provide adequate information systems protection
• Educate project team on security framework, policies and procedures
• Verify the effectiveness of security measures and to ensure all security measures will continue to be effective after implementation
• Maintain good operational security documentation

Skills

Vulnerability management

Risk assessment

Security analysis

Policy awareness

Team player

Education

Degree in IT or Cyber Security

Tools

RHCE

MCSE

ISACA CISA

ISC2 SSCP

Job description

The professional will be joining a top team in delivering complex Cyber Security solutions to defend against cyber threats of the world. We are looking for a dedicated and meticulous team player who wants to make a career in the Vulnerability Management (VM), Data Protection or Governance, Risk and Compliance (GRC) domain.

You will be the first line of defence in managing day-to-day security risks identified throughout a project’s System Development Lifecycle (SDLC). The role allows you to take on risk management and mitigation measures.

• Stay abreast of the current threat landscape and cyber security events
• Develop and deploy security hardening guidelines based on best practices
• Perform analysis of vulnerability results & work with principal vendor to ensure remediation
• Propose and enforce mitigation measures for failing security controls or vulnerabilities
• Work with Patch Manager and Engineers to ensure system patches are applied
• Manage vendor/business associate security assessments and VA/PT
• Develop security frameworks, policies and procedures that provide adequate information systems protection
• Educate project team on security framework, policies and procedures
• Verify the effectiveness of security measures and to ensure all security measures will continue to be effective after implementation
• Maintain good operational security documentation

The ideal candidate should possess:

• Relevant diploma or degree qualifications in Information Technology or Cyber Security
• At least 4 years of IT or Cyber Security experience
• Professional certifications such as RHCE, MCSE, ISACA CISA, or ISC2 SSCP would be advantageous
• Experience in the administration and hardening the various operating systems such as Microsoft Windows or Linux
• Strong technical understanding of IT security controls
• Dynamic individual and team player with positive working attitude