IT Security Officer

DBiz.ai; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

DBiz.ai is seeking an IT Security Officer to strengthen cybersecurity operations for government systems in Singapore. You will lead security monitoring, vulnerability management, incident response, and security assurance, partnering with stakeholders and vendors.

Key duties include security testing, remediation planning, and governance aligned to NIST/ISO 27001, with CISSP/CISM certification required.

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity, or related discipline.
• 4–7 years of experience in cybersecurity operations, security assurance, or a similar role.
• Strong fundamentals in networking and operating systems (Windows/Linux) and cloud security concepts.
• Hands-on with security tooling such as SIEM, vulnerability scanners, and/or penetration testing tools.
• Proven ability to manage security testing and remediation end-to-end.
• Familiarity with NIST and ISO 27001 standards.
• Ability to communicate risks clearly to technical and non-technical stakeholders.
• CISSP and/or CISM certification (required).

Responsibilities

• Own day-to-day security operations and governance with MSSPs to deliver outcomes.
• Manage security vendors, scope, timelines, reporting quality, and follow-ups.
• Plan and run periodic security testing cycles (vulnerability scans, pen tests, config reviews).
• Review findings and validate mitigation plans for risk reduction and feasibility.
• Track timely remediation closure with cross-team coordination; escalate when needed.
• Review security reports (VA/PT, monitoring, advisories) and translate into actions.
• Maintain and improve security policies and guidelines aligned to NIST/ISO 27001.
• Provide cybersecurity consultancy to project teams with risk assessments and controls.
• Monitor security alerts/advisories and support containment actions.
• Support incident response activities and lessons learned.
• Drive security awareness through trainings and user advisories.

Skills

Networking fundamentals

Operating systems (Windows/Linux)

Cloud security concepts

SIEM

Vulnerability scanners

Penetration testing tools

Security testing & remediation

NIST/ISO 27001

Communicating risk

CISSP/CISM certification

Education

Bachelor’s degree in Computer Science/IT/Cybersecurity

Tools

SIEM tools

Vulnerability scanners

Penetration testing tools

Job description

DBiz is seeking an IT Security Officer (Cybersecurity) to strengthen cybersecurity operations and governance for government systems. In this role, you will work across security monitoring, vulnerability management, incident response, and security assurance—partnering closely with internal stakeholders and external security vendors. You will ensure security testing is executed effectively, findings are translated into actionable remediation, and security controls remain robust against evolving threats.

Key Responsibilities

• Own day-to-day security operations and governance, working with internal teams and managed security service providers (MSSPs) to deliver agreed outcomes
• Manage security vendors and deliverables (scope, timelines, reporting quality, follow-ups, and service performance)
• Plan and run periodic security testing cycles (e.g., vulnerability scans, penetration tests, configuration reviews), ensuring coverage and timely completion
• Review security findings and validate mitigation/remediation plans for adequacy, risk reduction, and operational feasibility
• Track and drive timely remediation closure, coordinating with infrastructure, application, and project teams; escalate risks where required
• Review and interpret security reports (e.g., VA/PT results, monitoring reports, advisories) and translate them into clear actions and risk narratives
• Maintain and improve security policies, standards, procedures, and guidelines, aligned to recognised frameworks (e.g., NIST, ISO 27001) and government requirements
• Provide cybersecurity consultancy to project teams—security-by-design guidance, risk assessments, and control recommendations
• Monitor and respond to security alerts/advisories, including triage, investigation support, and containment actions where needed
• Support incident response activities: initial assessment, coordination, evidence handling support, post-incident review, and lessons learned
• Drive security awareness: conduct briefings/training, publish user advisories, and run targeted campaigns (e.g., phishing, email security hygiene)

Screening Requirements / Skills (Must-Have)

• Bachelor’s degree in Computer Science, IT, Cybersecurity, or related discipline
• 4–7 years of experience in cybersecurity operations, security assurance, or a similar role
• Strong fundamentals in networking and operating systems (Windows/Linux) and working knowledge of cloud security concepts (AWS/Azure/GCP)
• Hands-on experience with security tooling such as SIEM, vulnerability scanners, and/or penetration testing tools
• Proven ability to manage security testing and remediation end-to-end (from findings to closure)
• Familiarity with security frameworks/standards such as NIST and/or ISO 27001
• Ability to communicate security risks and recommendations clearly to both technical and non-technical stakeholders
• CISSP and/or CISM certification (required)

Nice-to-Have / Advantage

• Understanding of OWASP Top 10 and common web application security issues
• Experience in incident handling and operational playbooks/runbooks
• Scripting/automation skills (e.g., Python, PowerShell) to streamline security operations
• Exposure to software development, DevSecOps, or security operations in complex environments
• Additional certifications (advantage): GCIH, Security+, CySA+, ECSA, CEH, SSCP, OSCP