IT Security Officer | GCC

SCIENTEC CONSULTING PTE. LTD.; Singapore; Hybrid; SGD 100,000 - 125,000; Full time

Job summary

A leading IT consulting firm in Singapore seeks an experienced IT Security Officer to support security operations in both cloud and on-premise environments. The role includes conducting security reviews, monitoring security alerts, and ensuring compliance with security regulations. Candidates must have at least a Bachelor’s degree in a relevant field, a minimum of 5 years of experience in cloud security, and an internationally recognized security certification. A competitive salary package of up to $10,000 is offered with a hybrid working arrangement.

Qualifications

• Minimum 5 years of experience in cloud security and vulnerability management.
• At least one internationally recognised security certification: CISSP / CISM / CRISC / CISA.
• Familiarity with GCC or similar secure cloud environments is an advantage.

Responsibilities

• Conduct system security reviews, hardening checks, and risk assessments.
• Monitor and respond to phishing, malware, and security alerts.
• Review cloud security findings from CSPM tools.
• Prepare monthly security status reports highlighting key risks and gaps.

Skills

Cloud security

Vulnerability management

Risk assessment

System security reviews

Education

Bachelor’s degree in Computer Science, IT, Cybersecurity, or related field

Tools

Security compliance tools

CSPM tools

Job description

Working Hours: Monday – Thursday (8.30am – 6pm), Friday (8.30am – 5.30pm) (Hybrid working arrangement)

Working Location: Central

Salary Package: Up to $10,000 + AWS

Employment Type: Contract

We are looking for IT Security Officers to support enterprise IT security operations across on-premise and cloud environments. This role focuses on system security, cloud security assessments, governance, and compliance, working closely with infrastructure teams, system owners, and cybersecurity stakeholders.

Responsibilities

System Security & Compliance

• Conduct system security reviews, hardening checks, and risk assessments
• Assess deviations against recognised benchmarks (e.g. CIS Benchmarks)
• Develop and maintain security hardening baselines and SOPs
• Perform compliance reviews and follow up on remediation actions
• Plan and support periodic reviews of security documentation

Security Monitoring & Incident Support

• Monitor and respond to phishing, malware, and security alerts
• Support vulnerability scans and penetration testing activities
• Review alerts and assess validity (true risk vs false positives)
• Coordinate remediation with system owners and infrastructure teams

Cloud Security

• Review cloud security findings from CSPM tools
• Follow up remediation actions with system and infrastructure teams
• Monitor suppression validity and expiry of cloud findings
• Track remediation status and escalate unresolved risks when required

Governance & Reporting

• Maintain accurate tracking of security findings and remediation status
• Update governance and compliance tools with supporting evidence
• Provide risk-based assessments to prioritise security issues
• Support audit activities and respond to security-related RFIs

Reporting & Awareness

• Prepare monthly security status reports highlighting key risks and gaps
• Support IT security awareness briefings and training sessions
• Communicate security best practices to technical and non-technical users

Requirements

• Bachelor’s degree in Computer Science, IT, Cybersecurity, or related field
• Minimum 5 years of experience in cloud security and vulnerability management
• At least one internationally recognised security certification: CISSP / CISM / CRISC / CISA
• Familiarity with GCC or similar secure cloud environments is an advantage