IT Security Officer

KOPI RECRUIT PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

KOPI RECRUIT PTE. LTD. seeks an Information Technology Security Officer to oversee governance, assurance, and security management across architecture, vulnerability testing, risk assessment, cloud security, and policy compliance.

The role coordinates security reviews, maintains registers, dashboards, and documentation, and collaborates with stakeholders to drive remediation and governance across enterprise controls.

Qualifications

• Strong coordination, analytical, and documentation skills.
• Experience with enterprise cybersecurity controls, risk management, and governance processes.
• Ability to manage security reviews, reports, and dashboards across multiple stakeholders.

Responsibilities

• Security Architecture: Maintain diagrams, records, and design docs; coordinate inputs and decisions.
• Vulnerability Assessment & Penetration Testing: Schedule engagements; track findings and remediation; assist in reports.
• Risk Assessment: Coordinate risk exercises; maintain risk register; support risk reports and review materials.
• Hardening Compliance: Track gaps; maintain records; support periodic reports.
• Cloud Security Posture Management: Monitor CSPM findings; coordinate remediation; produce summaries.
• Software Clearance: Track requests; obtain required docs; maintain clearance register.
• Firewall & Network Deviation Management: Track changes; follow up on actions; maintain deviation records.
• Policy, Standards & Governance: Draft/update policies; maintain repositories; track reviews.
• Security Metrics & Reporting: Compile data; maintain dashboards; prepare management reports.
• Security & Compliance: Ensure adherence to policies; support audits and evidence collection.

Skills

Cybersecurity governance

Risk management

Security architecture

Stakeholder management

Documentation

Tools

CSPM tools

Vulnerability scanners

Security dashboards

Job description

1. Scope of Work

The Information Technology Security Officer will support the Board's cybersecurity governance, assurance, and security management activities across security architecture, vulnerability assessment and penetration testing, risk assessment, system hardening, cloud security posture management, software clearance, firewall and network deviation management, cybersecurity policies and standards, and security metrics reporting. The officer will coordinate security reviews and assessments, maintain cybersecurity registers and trackers, follow up on remediation and outstanding actions with relevant stakeholders, prepare security reports and management dashboards, and support the upkeep of cybersecurity policies, standards, specifications, and documentation. This role requires strong coordination, analytical, documentation, and stakeholder management skills, with a good understanding of enterprise cybersecurity controls, risk management, and governance processes.

2. Roles and Responsibilities

Security Architecture

• Assist in maintaining security architecture diagrams, records, and approved design documentation.
• Track security architecture review requests and coordinate inputs from project teams and relevant stakeholders.
• Maintain records of architecture decisions, recommendations, and approved designs.
• Support preparation of security advisory materials and architecture review documentation.

Vulnerability Assessment & Penetration Testing

• Coordinate and schedule VAPT engagements with system owners, vendors, and security testers.
• Maintain the VAPT tracker and follow up on remediation of identified vulnerabilities.
• Coordinate re-testing activities and update finding closure status.
• Assist in preparing VAPT reports, summaries, and presentation materials.

Risk Assessment

• Coordinate cybersecurity risk assessment exercises with system owners and stakeholders.
• Maintain the cybersecurity risk register and track risk treatment and remediation actions.
• Support preparation of risk reports and management review materials.
• Facilitate risk acceptance, exception, and approval processes in accordance with the Board's requirements.

Hardening Compliance

• Coordinate security hardening compliance assessments with system and infrastructure teams.
• Track hardening gaps and follow up on remediation progress.
• Maintain hardening compliance records, checklists, and trackers.
• Support preparation of periodic hardening compliance reports.

Cloud Security Posture Management

• Monitor and triage findings generated by Cloud Security Posture Management tools.
• Track cloud security misconfigurations and follow up on remediation with system and cloud owners.
• Maintain CSPM findings and remediation status records.
• Prepare periodic cloud security posture reports and summaries.

Software Clearance

• Receive, log, and track software security clearance requests.
• Coordinate with requestors and vendors to obtain required technical and security documentation.
• Maintain the software clearance register and approval status.
• Support preparation of software security evaluation summaries and monitor expiring clearances.

Firewall & Network Deviation Management

• Receive, track, and maintain firewall rule change and network security deviation requests.
• Follow up with requestors and network teams on outstanding actions and expiring deviations.
• Maintain deviation registers and prepare review summaries for approval.
• Coordinate periodic firewall rule and network deviation reviews with relevant teams.

Policy, Standards & Governance / Cyber Specifications

• Assist in drafting, reviewing, and updating cybersecurity policies, standards, guidelines, and procedures.
• Maintain the cybersecurity policy and standards documentation repository.
• Track document review cycles, approvals, and expiry dates.
• Support preparation and review of cybersecurity specifications for projects, procurements, and tenders.

Security Metrics & Reporting

• Collate and consolidate cybersecurity data and status updates from relevant teams and systems.
• Maintain cybersecurity dashboards covering vulnerabilities, risks, deviations, compliance, and audit items.
• Prepare routine security metrics and management reports.
• Follow up with responsible parties on outstanding cybersecurity actions and remediation items.

Security & Compliance

• Ensure activities are performed in accordance with the Board's cybersecurity policies, applicable regulatory requirements, and the Cybersecurity Code of Practice (CCoP).
• Support cybersecurity assessments, internal and external audits, and evidence collection activities.
• Maintain accurate and up-to-date cybersecurity records, reports, registers, and supporting documentation.
• Protect sensitive and security-classified information in accordance with the Board's requirements.

3. Technical Requirements

Mandatory Technica