IT Security Officer

TESCOM (SINGAPORE) SOFTWARE SYSTEMS TESTING PTE LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

TESCOM (SINGAPORE) SOFTWARE SYSTEMS TESTING PTE LTD. is seeking an Information Technology Security Officer (ITSO) to support cybersecurity governance, risk management, incident response, and security operations.

The role ensures protection of IT systems in line with policies, requirements, and industry best practices. The ITSO will develop and maintain security policies, monitor controls, and collaborate with internal teams and external providers on security incidents and improvements.

Qualifications

• Bachelor's degree in CS / IT / cybersecurity or equivalent.
• 7–10 years in cybersecurity, information security, or IT security roles.
• Experience in governance, risk management, operations or incident response.
• Familiarity with enterprise security tech and frameworks.
• Experience with cross-functional teams and external providers.

Responsibilities

• Support cybersecurity governance, risk management and incident response.
• Assist security operations and incident handling activities.
• Participate in threat and vulnerability management.
• Maintain security monitoring across infrastructure and assets.
• Engage stakeholders and coordinate with vendors/regulators.

Skills

Cybersecurity governance

Incident response

Security operations

Risk management

Security monitoring

Stakeholder engagement

Analytical thinking

Documentation

Education

Bachelor's Degree in Computer Science / IT / Cybersecurity

Tools

SIEM

Endpoint Security

IAM

Cloud security concepts

Job description

The Information Technology Security Officer(ITSO) is responsible for supporting the organization's cybersecuritygovernance, risk management, incident response, and security operationsactivities. The role ensures that IT systems, applications, and infrastructureare protected in accordance with organizational security policies, regulatoryrequirements, and industry best practices.

Key Responsibilities

Security Governance & Compliance

• Develop, maintain, and review information security policies, standards, procedures, and implementation roadmaps.
• Support the establishment and continuous improvement of cybersecurity governance frameworks and security management practices.
• Conduct security risk assessments and recommend mitigation measures to address identified risks.
• Ensure compliance with applicable cybersecurity policies, standards, and regulatory requirements.
• Monitor security controls and provide recommendations to enhance the organization's security posture.

Security Operations & Incident Management

• Support the monitoring, detection, investigation, and response of cybersecurity incidents.
• Coordinate with internal stakeholders and external service providers to manage and resolve security incidents.
• Participate in cybersecurity exercises, simulations, and readiness assessments.
• Investigate security events and perform root cause analysis to identify corrective and preventive actions.
• Review security alerts, reports, and audit findings, ensuring timely follow-up and remediation.

Threat & Vulnerability Management

• Monitor emerging cyber threats, vulnerabilities, and security trends.
• Assess the impact of identified threats on the organization's environment and recommend mitigation strategies.
• Support vulnerability management activities, including assessment, tracking, and remediation verification.
• Evaluate security technologies and solutions to improve operational effectiveness and risk management.

Security Monitoring & Asset Management

• Ensure security monitoring coverage across relevant infrastructure components, systems, and applications.
• Maintain visibility of assets under security monitoring and support onboarding of new assets into security platforms.
• Review security dashboards and reports, providing regular updates to stakeholders on risks and remediation status.
• Support continuous improvement of security monitoring and incident detection capabilities.

Stakeholder Engagement

• Engage business, project, and technical teams on cybersecurity requirements and security best practices.
• Conduct regular security reviews and recommend improvements to strengthen security controls.
• Coordinate with external vendors, service providers, regulatory bodies, and industry partners on cybersecurity-related matters.
• Provide cybersecurity advice and guidance to project teams during solution design and implementation.

Additional Duties

• Support cybersecurity initiatives, audits, assessments, and special projects as assigned.
• Contribute to the development of security awareness and cybersecurity improvement programs.
• Perform other cybersecurity-related duties as required.

Qualifications & Experience

Education

• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related discipline.

Experience

• Minimum 7-10 years of experience in cybersecurity, information security, or IT infrastructure security roles.
• Experience in security governance, risk management, security operations, or incident response.
• Familiarity with enterprise security technologies and cybersecurity frameworks.
• Experience working with cross-functional teams and external service providers.

Technical Knowledge

• Understanding of cybersecurity principles, frameworks, standards, and best practices.
• Knowledge of:
• Security Operations (SOC)
• Incident Response
• Vulnerability Management
• Risk Assessment
• Security Monitoring Tools
• Endpoint, Network, and Infrastructure Security
• Identity and Access Management (IAM)
• Cloud Security concepts
• Familiarity with security investigations and digital forensic processes is advantageous.

Skills & Competencies

• Strong analytical, problem-solving, and critical-thinking skills.
• Good written, presentation, and communication skills.
• Ability to engage stakeholders at different levels of the organization.
• Strong organizational and documentation skills.
• Ability to work independently and collaboratively in a team environment.

Preferred Certifications

Applicants possessing one or more of thefollowing certifications will have an advantage:

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• GIAC Certified Incident Handler (GCIH)
• Certified Ethical Hacker (CEH)
• CompTIA Security+
• Certified Information Systems Auditor (CISA)
• GIAC Security Essentials (GSEC)