IT Security Officer (Associate Consultant)

NTT SINGAPORE PTE. LTD.; Singapore; On-site; SGD 60,000 - 110,000; Full time

Job summary

NTT Singapore is seeking a Security Operations Specialist to support Privileged Access Management, security monitoring, DLP, and web/app security across on-prem, cloud, and hybrid environments in Singapore. You will perform health checks, incident triage, and coordination with vendors, manage asset inventories, and generate monthly service reports while maintaining security documentation.

The role requires 2–4 years in cybersecurity operations, with hands-on experience in CyberArk, SIEM,

Qualifications

• Minimum 2–4 years of hands-on cybersecurity experience.
• 1)

Responsibilities

• Develop, maintain IT security procedures, runbooks, and operational docs.
• Perform daily/weekly/monthly health checks and admin tasks for cybersecurity systems.
• Provide Level 1/2 support, initial triage, and coordinate incident escalations.
• Monitor alerts, assess threats, and provide impact assessments and actions.
• Assist with incident management, evidence collection, containment, and recovery.
• Conduct onboarding/offboarding, access reviews, and privileged account validation.
• Coordinate with vendors, MSPs, and external security partners on incidents.
• Maintain asset inventories and support onboarding/configuration validation.
• Prepare bi-weekly updates, monthly reports, and management summaries.
• Track licenses, cert expiries, renewals, and service verifications.
• Plan phishing simulations and security awareness activities.

Skills

Cybersecurity operations

Security platform administration

Incident handling

Vulnerability management

Access control

Log analysis

Education

Bachelor's degree or diploma in Computer Science / IT / Cybersecurity

Tools

CyberArk

Forcepoint

Imperva WAF

SIEM

Syslog-NG

PowerShell

Bash

Job description

Scope of Services

• Privileged Access Management, including CyberArk administration and operational support.
• Security monitoring platforms, including SIEM, database activity monitoring, network device log monitoring, and insider security monitoring.
• Data Loss Prevention, including Forcepoint administration, policy support, alert handling, and reporting.
• Web application and infrastructure security support, including Imperva WAF and related security technologies where assigned.
• Security team mailbox operations, including Vulnerability Watch, phishing reports, and other security notifications.
• Security-related virtual machines, Syslog-NG / log management services, Windows and Linux servers, and supporting cloud services in Microsoft Azure, Amazon Web Services, and Google Cloud Platform where applicable.
• Cybersecurity awareness communications, phishing simulation exercises, and staff awareness activities.
• Asset onboarding and inventory maintenance for central security monitoring tools, including servers, network devices, databases, cloud assets, and internet-facing services.

Key Responsibilities

• Develop, maintain, and review IT security procedures, action plans, runbooks, and operational documentation.
• Perform daily, weekly, and monthly health checks, preventive maintenance, monitoring, administration, and operational support for assigned cybersecurity systems.
• Provide Level 1 and Level 2 support, perform initial investigation and triage, coordinate escalation, and track incidents through closure.
• Monitor and analyse security alerts, emerging threats, vulnerabilities, and advisories, and provide timely impact assessments and recommended actions.
• Support IT security incident management, evidence collection, investigation, containment, recovery, and post-incident reporting in accordance with company procedures.
• Conduct user onboarding, offboarding, access reviews, privileged account administration, and entitlement validation as authorised by company.
• Coordinate with company and managed service providers, vendors, and external security partners on operational and incident matters.
• Maintain inventories of assets monitored by central security tools and support onboarding, configuration validation, troubleshooting, and decommissioning.
• Prepare bi-weekly operational updates, monthly service reports, management summaries, risk and vulnerability reports.
• Track licences, subscriptions, certificate expiry, maintenance and contract renewal dates, and support billing or service verification activities where required.
• Plan and conduct phishing simulations and security awareness exercises, including preparation of communications, reports, lessons learned, and follow-up actions.
• Participate in security exercises, technical assessments, audits, vulnerability remediation activities, and tabletop exercises when required.
• Assist with forensic acquisition and analysis activities when required and authorised, while maintaining chain of custody and secure evidence handling.
• Perform other reasonable cybersecurity duties necessary to protect company information systems and infrastructure.

Deliverables and Reporting

• Operational health-check records and issue logs at frequencies.
• Bi-weekly operational status report covering incidents, alerts, outstanding actions, platform health, vulnerabilities, and service risks.
• Monthly service report and timesheet.
• Updated asset inventories, access records, runbooks, standard operating procedures, configuration records, and handover documentation.
• Incident, vulnerability, phishing exercise, audit, and management reports as requested.
• Knowledge-transfer sessions and complete handover documentation before replacement or contract end.

Experience and Qualifications

• Bachelor's degree or diploma in Computer Science, Information Technology, Cybersecurity, Computer Engineering, or a related discipline.
• Min 2-4 years of experience
• Proven hands-on experience in cybersecurity operations, infrastructure security, security platform administration, incident handling, and vulnerability management.
• Strong understanding of information security principles, security operations, access control, logging and monitoring, data protection, and secure administration.
• Ability to work independently, prioritise operational tasks, document work clearly, and communicate with technical and non-technical stakeholders.
• Experience coordinating with external service providers, security organisations, auditors, and government stakeholders is advantageous.

Preferred Technical Skills

• CyberArk Privileged Access Management.
• Insider Security Dashboard, SIEM, Syslog-NG, database activity monitoring, insider security monitoring, and security log analysis.
• Forcepoint Data Loss Prevention and Imperva Web Application Firewall.
• Windows Server and Linux administration, PowerShell, Bash, and command-line troubleshooting.
• Micr