IT Security Officer

ENSIGN INFOSECURITY (CYBERSECURITY) PTE. LTD.; Singapore; On-site; SGD 38,000 - 64,000; Full time

Job summary

ENSIGN INFOSECURITY (CYBERSECURITY) PTE. LTD. is seeking a motivated Security Analyst to join a top team delivering vulnerability management, data protection, and GRC solutions.

The role focuses on SDLC risk management and implementing security controls across projects. The ideal candidate will have IT or Cyber Security qualifications, 1–2 years of experience, and relevant certifications; strong Windows/Linux administration and solid knowledge of security controls.

Qualifications

• Diploma or degree in IT or Cyber Security.
• 1–2 years IT or Cyber Security experience.
• Certifications such as RHCE, MCSE, ISACA CISA or CompTIA CySA+ are advantageous.
• Experience administering and hardening Windows or Linux systems.
• Strong understanding of IT security controls.

Responsibilities

• Stay abreast of the current threat landscape and cyber security events.
• Develop and deploy security hardening guidelines based on best practices.
• Perform analysis of vulnerability results and coordinate remediation.
• Propose and enforce mitigation measures for failing security controls.
• Work with Patch Manager and Engineers to ensure patches are applied.
• Manage vendor/security assessments and VA/PT activities.
• Develop security frameworks, policies and procedures for information systems protection.
• Educate project teams on security frameworks and policies.
• Verify effectiveness of security measures after implementation.
• Maintain good operational security documentation.

Skills

IT security concepts

Vulnerability management

Security hardening

Policy & compliance understanding

Education

Diploma/degree in IT or Cyber Security

1–2 years IT/cyber security experience

Tools

Windows Server

Linux

Job description

The professional will be joining a top team in delivering complex Cyber Security solutions to defend against cyber threats of the world. We are looking for a dedicated and meticulous team player who wants to make a career in the Vulnerability Management (VM), Data Protection or Governance, Risk and Compliance (GRC) domain.

You will be the first line of defence in managing day-to-day security risks identified throughout a project’s System Development Lifecycle (SDLC). The role allows you to take on risk management and mitigation measures.

Roles & Responsibilities:

• Stay abreast of the current threat landscape and cyber security events
• Develop and deploy security hardening guidelines based on best practices
• Perform analysis of vulnerability results & work with principal vendor to ensure remediation
• Propose and enforce mitigation measures for failing security controls or vulnerabilities
• Work with Patch Manager and Engineers to ensure system patches are applied
• Manage vendor/business associate security assessments and VA/PT
• Develop security frameworks, policies and procedures that provide adequate information systems protection
• Educate project team on security framework, policies and procedures
• Verify the effectiveness of security measures and to ensure all security measures will continue to be effective after implementation
• Maintain good operational security documentation

The ideal candidate should possess:

• Relevant diploma or degree qualifications in Information Technology or Cyber Security
• At least 1 to 2 years of IT or Cyber Security experience
• Professional certifications such as RHCE, MCSE, ISACA CISA or CompTIA CySA+ would be advantageous
• Experience in the administration and hardening the various operating systems such as Microsoft Windows or Linux
• Strong technical understanding of IT security controls