IT Security Officer (Cybersecurity)

Ensign InfoSecurity; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Ensign InfoSecurity in Singapore is seeking a dedicated Cyber Security professional to join a top team delivering security solutions across VM, data protection, and GRC. You will contribute to risk management and mitigation within project SDLCs and help maintain robust security controls.

The ideal candidate has 4+ years in IT or Cyber Security with relevant diplomas and certifications, and a hands-on approach to Windows/Linux environments.

Qualifications

• Relevant diploma or degree qualifications in Information Technology or Cyber Security
• At least 4 years of IT or Cyber Security experience
• Professional certifications such as RHCE, MCSE, ISACA CISA, or ISC2 SSCP would be advantageous
• Experience in the administration and hardening the various operating systems such as Microsoft Windows or Linux
• Strong technical understanding of IT security controls
• Dynamic individual and team player with positive working attitude

Responsibilities

• Stay abreast of the current threat landscape and cyber security events
• Develop and deploy security hardening guidelines based on best practices
• Perform analysis of vulnerability results & work with principal vendor to ensure remediation
• Propose and enforce mitigation measures for failing security controls or vulnerabilities
• Work with Patch Manager and Engineers to ensure system patches are applied
• Manage vendor/business associate security assessments and VA/PT
• Develop security frameworks, policies and procedures that provide adequate information systems protection
• Educate project team on security framework, policies and procedures
• Verify the effectiveness of security measures and to ensure all security measures will continue to be effective after implementation
• Maintain good operational security documentation

Skills

Vulnerability management

Cyber security

Security hardening

Risk management

Team player

Documentation

Education

Diploma or degree in Information Technology or Cyber Security

Tools

Windows

Linux

RHCE

MCSE

CISA

SSCP

Job description

The professional will be joining a top team in delivering complex Cyber Security solutions to defend against cyber threats of the world. We are looking for a dedicated and meticulous team player who wants to make a career in the Vulnerability Management (VM), Data Protection or Governance, Risk and Compliance (GRC) domain.

You will be the first line of defence in managing day-to-day security risks identified throughout a project’s System Development Lifecycle (SDLC). The role allows you to take on risk management and mitigation measures.

• Stay abreast of the current threat landscape and cyber security events
• Develop and deploy security hardening guidelines based on best practices
• Perform analysis of vulnerability results & work with principal vendor to ensure remediation
• Propose and enforce mitigation measures for failing security controls or vulnerabilities
• Work with Patch Manager and Engineers to ensure system patches are applied
• Manage vendor/business associate security assessments and VA/PT
• Develop security frameworks, policies and procedures that provide adequate information systems protection
• Educate project team on security framework, policies and procedures
• Verify the effectiveness of security measures and to ensure all security measures will continue to be effective after implementation
• Maintain good operational security documentation

The ideal candidate should possess:

• Relevant diploma or degree qualifications in Information Technology or Cyber Security
• At least 4 years of IT or Cyber Security experience
• Professional certifications such as RHCE, MCSE, ISACA CISA, or ISC2 SSCP would be advantageous
• Experience in the administration and hardening the various operating systems such as Microsoft Windows or Linux
• Strong technical understanding of IT security controls
• Dynamic individual and team player with positive working attitude