IT Security Officer

User Experience Researchers Pte.Ltd; Singapore; On-site; SGD 60,000 - 80,000; Full time

Job summary

A cybersecurity firm in Singapore is seeking professionals to enhance security through vulnerability management, training, and audits. Ideal candidates will have a Bachelor's degree in Computer Science or related fields, along with security certifications like CISSP or CISM. Strong analytical, problem-solving, and communication skills are essential for collaborating effectively within the team. This role includes conducting audits, managing security alerts, and delivering training to improve organizational security posture.

Qualifications

• Bachelor's degree in Computer Science, IT, Cybersecurity, or related field.
• Internationally recognized security certification (CISSP, CISM, CRISC, CISA) is required.
• Min. 2 years experience in Cloud Cybersecurity.
• Hands-on security assessments and vulnerability management experience.
• Familiarity with security platforms for cloud environments.
• Strong analytical and problem-solving capabilities.
• Excellent English communication skills for collaboration.
• Strong collaboration skills for security coverage.

Responsibilities

• Conduct security reviews and risk assessments.
• Monitor and respond to security alerts.
• Provide vulnerability monitoring and recommendations.
• Compile and present monthly reports to the Board's Cybersecurity team.
• Coordinate IT security awareness training for staff.

Skills

Analytical skills

Problem-solving skills

Written and spoken English communication

Collaboration

Education

Bachelor's degree in Computer Science or related field

CISSP, CISM, CRISC, or CISA certification

Tools

Azure Log Analytics

AWS CloudWatch

AWS Security Hub

Microsoft Defender for Cloud

Job description

Key Responsibilities

• System Security and Compliance:The team will conduct security reviews, system
  hardening checks and conducting risk assessment based on deviations to hardening
  requirements. The team will also create client's hardening baselinesusing available benchmarks. Responsibilities include create, review and maintain Standard OperationProcedures (SOPs), planning and scheduling annual reviews of security hardeningdocuments, performing compliance reviews, and ensuring remediation of findings.
• Management and responding to security alerts: Monitoring phishing alerts and
  communicating with staff regarding malicious emails, supporting audit activities,
  vulnerability scans, and penetration tests. Communicating and following SOP to performmalware scans on endpoints with anti-virus alerts.
• Technical Support and Governance:The role involves providing vulnerability monitoringand recommending and implementing mitigation actions to system Officers-in-Chargeand infrastructure teams. The team will also provide security advice or proposals onsecurity measures for new projects and functionalities and monitor governancecompliance tools, such as Cloudscape. The team will also provide their risk-basedassessments to priorities rectification of alerts. The Team is alsoexpected to manage and update into the governance compliance tools with the relevantinformation to suppress the affected findings when approval is sought. The team willrespond to auditors RFI on security monitoring.
• Reporting and Training:Monthly reports to summaries the progress of tasks and to flagoutstanding non-remediated issues/alerts across the key security domains will be
  compiled collaboratively by the team and presented to the Board's Cybersecurity team.The team will coordinate monthly IT security awareness training and briefings for users toenhance organizational security posture, with team members contributing theirspecialized expertise to deliver comprehensive training programs.

Qualifications

• Bachelors degree in Computer Science, Information Technology, Cybersecurity, or a related field
• Minimally anInternationally recognized security certifications such as CISSP, CISM, CRISC, or CISA (required)
• Minimum of 2 years proven experience in Cloud Cybersecurity
• Hands‑on experience in security assessments and vulnerability management across cloud and on‑prem environments, particularly GCC
• Familiarity with security platforms including Azure Log Analytics, AWS CloudWatch, AWS Security Hub (CSPM), and Microsoft Defender for Cloud
• Strong analytical and problem‑solving skills for resolving security-related issues
• Excellent written and spoken English communication skills to collaborate effectively with team members, Officers-in-Charge, infrastructure teams, and external vendors.
• Strong collaborative skills are essential to ensure seamless coordination between the specialized roles whilst maintaining comprehensive security coverage.