IT Security Officer - #1725

JOBSTER PRIVATE LTD.; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

JOBSTER PRIVATE LTD. is seeking a proactive IT Security professional in Singapore to support vulnerability management, firewall rule review, and audit readiness.

You will collaborate with cross-functional teams to mitigate risks, maintain compliance, and produce security reports for senior management. The role involves assisting in incident response, security advisories, and ongoing security awareness training.

Qualifications

• Min 2 years of experience in IT security or related field.
• Hands-on familiarity with vulnerability scanning tools, firewalls, and identity management.
• Experience or exposure to security audits and compliance processes.
• Familiarity with SIEM and basic incident response protocols.
• Understanding of IT security principles and best practices.
• Basic knowledge of security tools (firewalls, antivirus, IDS/IPS, SIEM).
• Familiarity with security frameworks (NIST, ISO 27001, CIS Controls).
• Strong analytical and troubleshooting skills.
• Ability to work in a team within a dynamic environment.

Responsibilities

• Vulnerability management: assist scanning and assessment to identify weaknesses.
• Prioritize and track remediation based on severity and impact.
• Collaborate with internal teams to mitigate vulnerabilities timely.
• Provide regular vulnerability reports to Senior IT Security Manager.
• Review firewall rules for proper access control and segmentation.
• Coordinate with network teams to adjust firewall configurations.
• Ensure firewall rules comply with internal policies and regulations.
• Assist in preparing for and supporting security audits.
• Provide documentation, logs, and reports to auditors.
• Track audit findings and implement corrective actions.
• Maintain audit trails for security events and activities.
• Assist with user identity validation and access controls.
• Enforce least-privilege access and role-based controls.
• Help monitor user access rights and align with policies.
• Develop and deliver security awareness training programs.
• Create educational materials on phishing and social engineering.
• Track training progress and keep employees updated on best practices.
• Support client-facing cybersecurity initiatives.
• Gather information on threats and contribute to security advisories.
• Provide recommendations to mitigate risks from threats.
• Maintain repository of advisories, updates, and patches.
• Assist in incident investigations and initial analysis.
• Elevate incidents and support documentation and resolution.
• Participate in post-incident reviews for improvements.
• Conduct risk assessments and mitigation recommendations.
• Ensure client environments comply with standards and regulations.
• Contribute to policies, procedures, and controls to mitigate risks.
• Collaborate with IT Security team and stakeholders on security practices.
• Communicate security status, risks, and incidents effectively.
• Prepare reports, presentations, and security briefings for management.

Skills

Vulnerability scanning

Firewall management

Audit support

Identity and access management

Security awareness training

Security advisory support

Incident response

Risk management

Compliance

Team collaboration

Tools

Vulnerability scanning tools

Firewall rule configurations

IAM systems

SIEM systems

Job description

Job Description

• Vulnerability Management- Assist in vulnerability scanning and assessments to identify security weaknesses within the client’s environment.

• Help prioritize and track remediation efforts based on the severity and impact of vulnerabilities.

• Collaborate with internal teams to ensure that identified vulnerabilities are mitigated in a timely manner.

• Provide regular vulnerability reports and updates to the Senior IT Security Manager.

• Firewall Rules Review and Management- Support the periodic review of firewall rules to ensure proper access control and network segmentation.

• Work closely with network and infrastructure teams to assess and adjust firewall configurations as needed to enhance security.

• Assist in ensuring that firewall rules comply with internal policies and regulatory requirements.

• Audit Support- Assist in preparing for and supporting internal and external security audits.

• Provide documentation, logs, and reports to auditors and ensure timely responses to audit requests.

• Help track and resolve audit findings, ensuring corrective actions are implemented to meet compliance requirements.

• Support the maintenance of audit trails for critical security events and activities.

• Identity and Access Management (ID Validation)- Assist with user identity validation processes, ensuring proper authentication mechanisms are in place.

• Support the enforcement of access control policies to ensure that only authorized personnel have access to sensitive data and systems.

• Help monitor and audit user access rights, ensuring they align with role-based access controls and least privilege principles.

• Security Awareness Training- Assist in the development and delivery of security awareness training programs for client employees and internal teams.

• Help create educational materials to raise awareness about common cybersecurity threats (e.g., phishing, social engineering).

• Track training progress and ensure all employees are regularly updated on security best practices.

• Support client-facing initiatives to promote a culture of cybersecurity within the organization.

• Security Advisory Support- Provide support for security advisory services by gathering information on emerging threats and vulnerabilities.

• Assist the Senior IT Security Manager in providing recommendations for mitigating risks associated with new and emerging security threats.

• Help maintain a repository of security advisories, updates, and patches, ensuring timely distribution to relevant stakeholders.

• Incident Response- Support the investigation and response to security incidents, gathering data and providing initial analysis.

• Help elevate security incidents and assist in documentation and resolution.

• Participate in post-incident reviews to identify lessons learned and areas for process improvement.

• Risk Management and Compliance- Help in conducting risk assessments to identify potential security risks and recommend mitigation strategies.

• Assist with ensuring the client’s environment remains compliant with industry standards and regulations.

• Contribute to the maintenance of security policies, procedures, and controls to ensure compliance and mitigate risks.

• Collaboration and Communication- Work closely with other IT Security team members to implement and enforce security policies and practices.

• Communicate effectively with internal teams and client stakeholders about security status, risks, and incidents.

• Provide support in preparing reports, presentations, and security briefings for senior management and clients.

• Continuous Learning and Improvement- Stay up-to-date on the latest trends in cybersecurity, including new tools, vulnerabilities, and attack techniques.

• Participate in ongoing professional development to expand security knowledge and skills.

• Assist in identifying and implementing improvements to existing security processes, policies, and tools.

Qualifications:

• Relevant certifications such as CISM, CISA, CompTIA Security+, Certified Ethical Hacker (CEH), or equivalent are a plus.

• Min 2 years of experience in IT security, cybersecurity, or a related field.

• Hands-on experience or familiarity with vulnerability scanning tools, firewall rule configurations, and identity management systems.

• Experience or exposure to supporting security audits and compliance processes.

• Familiarity with network security concepts, SIEM systems, and basic incident response protocols is a plus.

• Understanding of IT security principles and best practices.

• Basic knowledge of security tools such as firewalls, antivirus software, IDS/IPS, and SIEM systems.

• Familiarity with security frameworks (e.g., NIST, ISO 27001, CIS Controls).

• Strong analytical and troubleshooting skills.

• Ability to work effectively in a team and manage tasks in a dynamic environment.