IT Security Officer

K2 Partnering Solutions Pte Ltd; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

K2 Partnering Solutions Pte Ltd is seeking an IT Security Officer (Consultant) to strengthen security operations and governance for government systems. You will oversee security vendors, manage testing cycles, and provide expert consultancy to ensure resilience against evolving cyber threats.

Ideal candidates hold CISSP and/or CISM certifications with 4–7 years in cybersecurity, strong knowledge of networks, OS, and cloud security, and hands-on experience with vulnerability scanners, pentesting

Qualifications

• Minimum 4–7 years of cybersecurity experience in analyst/consultant roles.
• Mandatory CISSP and/or CISM certification.
• Strong understanding of network protocols, OS (Windows, Linux), and cloud security (AWS/Azure/GCP).
• Proficiency with security tooling including vulnerability scanners, penetration testing tools, and SIEM platforms.
• Experience with scripting languages (Python, PowerShell) for automation.
• Familiarity with cybersecurity frameworks and standards (NIST, ISO 27001).
• Excellent ability to communicate technical information to non-technical audiences.

Responsibilities

• Oversee security vendors and deliverables.
• Manage periodic security testing cycles.
• Assess mitigation and remediation plans for adequacy and effectiveness.
• Drive timely remediation of identified risks.
• Review security reports, alerts, and advisories.
• Review security policies, standards, procedures, and guidelines.
• Provide cybersecurity consultancy to internal teams and stakeholders.
• Respond to security alerts and incidents.
• Conduct security awareness training across the organization.
• Broadcast email security advisories to end users.

Skills

Analytical thinking

Problem-solving

Time-management

Communication

Education

Bachelor's degree in Computer Science/Information Technology/Cybersecurity

Tools

Vulnerability scanners

Penetration testing tools

SIEM

Job description

We are looking for an IT Security Officer (Consultant) to strengthen our security operations and governance. In this role, you will oversee security vendors, manage testing cycles, and provide expert consultancy — ensuring that government systems remain resilient against evolving cyber threats.

Key Responsibilities

• Manage security vendors and deliverables.
• Manage periodic security testing cycles.
• Assess mitigation and remediation plans for adequacy and effectiveness.
• Drive timely and effective mitigation and remediation of identified risks.
• Review security reports, alerts, and advisories.
• Review security policies, standards, procedures, and guidelines.
• Provide cybersecurity consultancy to internal teams and key stakeholders.
• Respond to security alerts, advisories, and handle incidents.
• Conduct security awareness training across the organization.
• Broadcast email security advisories to end users.

Job Requirements

• Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Experience: Minimum of 4 to 7 years of experience in a cybersecurity analyst, security consultant, or similar role.
• Certifications: Mandatory CISSP and/or CISM certification.
• Technical Knowledge: Strong understanding of network protocols, operating systems (Windows, Linux), and cloud security concepts (AWS, Azure, GCP).
• Security Tooling: Proficiency with security tools such as vulnerability scanners, penetration testing tools, and SIEM platforms.
• Automation: Experience with scripting languages (e.g., Python, PowerShell) for task automation.
• Frameworks: Familiarity with cybersecurity frameworks and standards (e.g., NIST, ISO 27001).
• Soft Skills: Excellent analytical, problem-solving, and time-management skills, with the ability to communicate technical information clearly to non-technical audiences.

Preferred Competencies

• Strong understanding of vulnerabilities listed in the Open Web Application Security Project (OWASP Top 10).
• Hands-on understanding of incident management and threat handling.
• Prior experience in software development or security operations (SecOps) is preferred.
• Advantageous certifications: GIAC (GCIH), CompTIA Security+/CySA+, EC-Council (CEH/ECSA), SSCP, or OSCP.