IT Security officer

UNIZEN TECHNOLOGIES PTE. LTD.; Singapore; On-site; SGD 70,000 - 90,000; Full time

Job summary

A leading tech firm in Singapore is seeking an experienced IT Security Officer to develop and maintain IT security policies, evaluate security solutions, and manage security incidents. The ideal candidate will have a Bachelor's degree in a related field and proven experience in IT security, particularly in infrastructure security. Certifications like CISSP or CISM are highly desirable. This role involves collaboration with stakeholders and external partners to ensure the security and compliance of IT infrastructure.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Proven experience in IT security with focus on infrastructure security.
• Strong understanding of information security principles and regulations.
• Experience with a range of security tools and familiarity with forensic investigation techniques.

Responsibilities

• Develop and maintain IT security policies and action plans for the Customer.
• Evaluate and recommend IT security products for implementation.
• Implement and manage risk assessment methodologies for compliance.
• Develop security management frameworks and governance structures.
• Establish and manage IT Security Incident Management processes.
• Collaborate with partners to resolve IT security incidents effectively.
• Conduct forensic investigations and monitor emerging security threats.

Skills

IT security expertise

Infrastructure security

Forensic investigation

Risk assessment methodologies

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity

Tools

Security tools and technologies

Job description

Responsibilities

• We are looking for IT Security Officers to handle the following responsibilities
• Develop and maintain IT security policies and action plans, reviewing them at least annually or as required by the Customer.
• Evaluate and recommend IT security products and solutions for implementation within the Customer's IT infrastructure.
• Implement and manage risk assessment methodologies, ensuring compliance with relevant service management requirements and industry standards.
• Develop and implement security management frameworks and governance structures as specified by the Customer.
• Establish and manage IT Security Incident Management processes, including detection, response, and handling of security incidents according to Customer guidelines
• Collaborate with external partners and suppliers to resolve IT security incidents effectively.
• Participate in and contribute to industry-wide IT security incident response simulations and technical assessment exercises.
• Conduct forensic investigations when required, including secure disk 'mage acquisition and analysis within specified timeframes.
• Monitor, analyse, and report on emerging security threats, vulnerabilities, and solutions relevant to the Customer's IT infrastructure.
• Conduct regular meetings with key stakeholders to highlight security issues and propose improvements to the Customer's IT infrastructure.
• Liaise and coordinate with external suppliers, security organisations, and the Government on IT security matters related to the Customer's infrastructure.
• Perform additional activities as necessary to secure the Customer's IT infrastructure.
• Review and follow up on security reports generated from central security tools, providing timely updates to the Customer.
• Manage the inventory of T assets to be monitored by central security tools, ensuring compliance and proper onboarding Of servers, networks, and databases.

Job requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field

• Proven experience in IT security, with a focus on infrastructure security
• Strong understanding of information security principles, best practices, and relevant regulations
• Experience with a range of security tools and technologies
• Familiarity with forensic investigation techniques and tools

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• GIAC Certified Incident Handler (GCIH)