IT Security Officer

Ensign InfoSecurity (Singapore) Pte. Ltd.; Singapore; On-site; SGD 45,000 - 72,000; Full time

Job summary

Ensign InfoSecurity (Singapore) Pte. Ltd. is seeking a diligent security professional to support VM, data protection or GRC domains. You will act as the first line of defense for day-to-day SDLC security risks and contribute to risk management and mitigation.

The role involves staying informed on threat landscapes, developing and enforcing security guidelines, and collaborating with engineers to apply patches and controls. A collaborative, detail-oriented team player will thrive.

Qualifications

• Diploma or degree in Information Technology or Cyber Security
• 1–2 years IT or Cyber Security experience
• Certifications such as RHCE, MCSE, ISACA CISA or CompTIA CySA+ are advantageous
• Experience administering and hardening Windows or Linux systems
• Strong understanding of IT security controls

Responsibilities

• Stay abreast of the current threat landscape and cyber security events
• Develop security hardening guidelines based on best practices
• Analyze vulnerability results and coordinate remediation with vendors
• Propose and enforce mitigation measures for failing controls
• Collaborate with Patch Manager and Engineers to apply system patches
• Manage security assessments for vendors and business associates
• Develop security frameworks, policies and procedures
• Educate project teams on security frameworks and policies
• Verify security measures remain effective post-implementation
• Maintain operational security documentation

Skills

Team player

Risk management

Threat landscape awareness

Security awareness

Education

RHCE

MCSE

ISACA CISA

CompTIA CySA+

Tools

Windows administration

Linux administration

Job description

The professional will be joining a top team in delivering complex Cyber Security solutions to defend against cyber threats of the world. We are looking for a dedicated and meticulous team player who wants to make a career in the Vulnerability Management (VM), Data Protection or Governance, Risk and Compliance (GRC) domain.

You will be the first line of defence in managing day-to-day security risks identified throughout a project's System Development Lifecycle (SDLC). The role allows you to take on risk management and mitigation measures.

Roles & Responsibilities:

• Stay abreast of the current threat landscape and cyber security events

• Develop and deploy security hardening guidelines based on best practices

• Perform analysis of vulnerability results & work with principal vendor to ensure remediation

• Propose and enforce mitigation measures for failing security controls or vulnerabilities

• Work with Patch Manager and Engineers to ensure system patches are applied

• Manage vendor/business associate security assessments and VA/PT

• Develop security frameworks, policies and procedures that provide adequate information systems protection

• Educate project team on security framework, policies and procedures

• Verify the effectiveness of security measures and to ensure all security measures will continue to be effective after implementation

• Maintain good operational security documentation

The ideal candidate should possess:

• Relevant diploma or degree qualifications in Information Technology or Cyber Security

• At least 1 to 2 years of IT or Cyber Security experience

• Professional certifications such as RHCE, MCSE, ISACA CISA or CompTIA CySA+ would be advantageous

• Experience in the administration and hardening the various operating systems such as Microsoft Windows or Linux

• Strong technical understanding of IT security controls

• Dynamic individual and team player with positive working attitude