IT Security Officer

User Experience Researchers Pte Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

User Experience Researchers Pte Ltd in Singapore seeks a security-focused professional to maintain architecture diagrams, track review requests, and coordinate remediation across teams. The role covers vulnerability assessment, risk evaluation, and cloud security posture governance.

You will help prepare VAPT reports, manage hardening compliance, and support audits while ensuring policy adherence and documentation accuracy across projects.

Qualifications

• Experience coordinating cybersecurity assessments and remediation with multiple stakeholders.
• Ability to review vulnerability findings, risk assessments, and security reports.
• Familiarity with security frameworks, standards, and governance processes.

Responsibilities

• Assist in maintaining security architecture diagrams and design records.
• Coordinate vulnerability assessments and remediation activities.
• Maintain risk and hardening compliance records and reports.
• Prepare security advisory materials and governance documentation.
• Monitor CSPM findings and follow up with owners for remediation.

Skills

Vulnerability management

Security risk assessment

System hardening

Firewall controls

Cloud security

Security governance

Stakeholder coordination

Documentation

Education

Certifications like CISSP / CISM

Cloud security certifications (AZ/AWS)

Tools

CSPM tools

AWS / Azure cloud platforms

Vulnerability assessment tools

Job description

Key Responsibilities:

Security Architecture

• Assist in maintaining security architecture diagrams, records, and approved design documentation.
• Track security architecture review requests and coordinate inputs from project teams and relevant stakeholders.
• Maintain records of architecture decisions, recommendations, and approved designs.
• Support preparation of security advisory materials and architecture review documentation.

Vulnerability Assessment & Penetration Testing

• Coordinate and schedule VAPT engagements with system owners, vendors, and security testers.
• Maintain VAPT records and follow up on remediation of identified vulnerabilities.
• Coordinate re-testing activities and update finding closure status.
• Assist in preparing VAPT reports, summaries, and presentation materials.

Risk Assessment

• Coordinate cybersecurity risk assessment exercises with system owners and stakeholders.
• Maintain cybersecurity risk records and track risk treatment and remediation actions.
• Support preparation of risk reports and management review materials.
• Facilitate risk acceptance, exception, and approval processes in accordance with organizational requirements.

Hardening Compliance

• Coordinate security hardening compliance assessments with system and infrastructure teams.
• Track hardening gaps and follow up on remediation progress.
• Maintain hardening compliance records, checklists, and trackers.
• Support preparation of periodic hardening compliance reports.

Cloud Security Posture Management

• Monitor and triage findings generated by Cloud Security Posture Management tools.
• Track cloud security misconfigurations and follow up on remediation with system and cloud owners.
• Maintain CSPM findings and remediation status records.
• Prepare periodic cloud security posture reports and summaries.

Software Clearance

• Receive, log, and track software security clearance requests.
• Coordinate with requestors and vendors to obtain required technical and security documentation.
• Maintain software clearance records and approval status.
• Support preparation of software security evaluation summaries and monitor expiring clearances.

Firewall & Network Deviation Management

• Receive, track, and maintain firewall rule change and network security deviation requests.
• Follow up with requestors and network teams on outstanding actions and expiring deviations.
• Maintain deviation records and prepare review summaries for approval.
• Coordinate periodic firewall rule and network deviation reviews with relevant teams.

Policy, Standards & Governance / Cyber Specifications

• Assist in drafting, reviewing, and updating cybersecurity policies, standards, guidelines, and procedures.
• Maintain the cybersecurity policy and standards documentation repository.
• Track document review cycles, approvals, and expiry dates.
• Support preparation and review of cybersecurity specifications for projects and procurement activities.

Security Metrics & Reporting

• Collate and consolidate cybersecurity data and status updates from relevant teams and systems.
• Maintain cybersecurity dashboards covering vulnerabilities, risks, deviations, compliance, and audit items.
• Prepare routine security metrics and management reports.
• Follow up with responsible parties on outstanding cybersecurity actions and remediation items.

Security & Compliance

• Ensure activities are performed in accordance with organizational cybersecurity policies, applicable regulatory requirements, and relevant cybersecurity standards.
• Support cybersecurity assessments, internal and external audits, and evidence collection activities.
• Maintain accurate and up-to-date cybersecurity records, reports, registers, and supporting documentation.
• Protect sensitive and security-classified information in accordance with organizational requirements.

Technical Requirements

Mandatory Technical Skills

• Good understanding of enterprise cybersecurity concepts, including vulnerability management, security risk assessment, system hardening, firewall controls, cloud security, and security governance.
• Experience coordinating cybersecurity assessments, remediation activities, and security review processes involving multiple technical and business stakeholders.
• Ability to review and understand vulnerability assessment findings, security risk assessments, security architecture diagrams, firewall rules, and security compliance reports.
• Familiarity with security frameworks, policies, standards, and cybersecurity governance processes.
• Strong analytical, documentation, stakeholder coordination, and follow-up skills.

Good-to-Have

• Familiarity with CSPM platforms and cloud security concepts across AWS, Azure, or equivalent cloud environments.
• Experience with vulnerability management or VAPT tools and interpreting CVE/CVSS information.
• Understanding of enterprise network architecture, firewall rules, security zones, and network segmentation.
• Experience supporting cybersecurity audits, governance, risk, and compliance activities.

Certifications

• CompTIA Security+, ISC2 Certified in Cybersecurity (CC), or equivalent foundational cybersecurity certification is highly preferred.
• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent will be advantageous.
• Certified in Risk and Information Systems Control (CRISC), ISO 27001-related certification, or equivalent risk/governance certification will be advantageous.
• Relevant cloud security certification such as Microsoft Azure Security, AWS Security, or equivalent will be advantageous.