IT Security Officer - IT Governance & Security [ITE Headquarters]

sggovterp; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

ITE is seeking an IT Security Officer to monitor, analyse, and strengthen cybersecurity posture across ICT systems and data in alignment with Singapore Government cybersecurity policies and ITE standards. You will support governance, risk management, incident response, and compliance activities.

You will lead security reviews, develop controls (Zero Trust, defence-in-depth), monitor SDLC security integration, and drive security awareness across teams.

Qualifications

• Academic or professional credentials in Information Technology, Computer Engineering, Computer Science or related fields.
• IT cybersecurity certifications (eg CEH, CISSP, OSCP, CISM, GIAC) would be an advantage.
• Minimum 5 years' experience in IT Security & Operations.
• Experience leading cross-functional teams in IT Governance and/or IT Security & Operations would be an advantage.
• Strong leadership, collaboration, and communication skills.
• Diligent, resourceful, and able to multitask in a dynamic environment.
• Familiarity with tendering procedures, ICT Security Standards in Singapore Public Service and IT budgets management would be an advantage.

Responsibilities

• Develop frameworks and processes to support Enterprise and Teaching & Learning objectives of ITE.
• Develop, implement and monitor reporting mechanisms for governance, security and risk practices to support compliance and highlight areas of exposure.
• Review security risks and breaches to ensure assets and information are protected.
• Provide cybersecurity guidance to project teams for secure design and implementation.
• Review system architectures and recommend security controls (e.g. Zero Trust, defence-in-depth).
• Support integration of security requirements into the SDLC.
• Communicate security basics to users and formulate Security Awareness programs.
• Monitor and review compliance with risk management strategies and practices to meet Singapore Government Instructions and ICT security best practices.
• Conduct threat analysis using threat intelligence to identify emerging risks.
• Perform vulnerability assessments and support remediation tracking.
• Analyse logs and security events to identify weaknesses and attack patterns.
• Lead in investigations of cybersecurity incidents with GovTech and CSA.
• Coordinate incident response activities and support containment and recovery.
• Monitor cybersecurity posture, risk exposure and compliance status.
• Support cybersecurity aspects of Business Continuity and Disaster Recovery planning.
• Participate in tabletop exercises and incident simulations to improve readiness.

Education

Academic or professional IT/CS credentials

Job description

What the role is

As an IT Security Officer, you will be responsible for monitoring, analysing, and strengthening the organisation's cybersecurity posture. You will support governance, risk management, incident response, and compliance activities to safeguard ICT systems and data in alignment with Singapore Government cybersecurity policies and ITE's Cybersecurity policies (e.g. IM8, GovTech standards)

What you will be working on

Be part of the IT Governance and Security Team to:

• Develop frameworks and processes to support both Enterprise and Teaching & Learning business objectives of ITE
• Develop, implement and monitor reporting mechanisms for governance, security and risk practices to support compliance and highlight areas of exposure.
• Review to identify security risks and breaches to ensure the organisation's assets and information are appropriately secured at all times.
• Provide cybersecurity guidance to project teams to ensure secure design and implementation
• Review system architectures and recommend appropriate security controls based on best practices (e.g. Zero Trust, defence-in-depth)
• Support integration of security requirements into system development lifecycle (SDLC)
• Communicate security basics to the general user population including formulating Security Awareness program to raise user awareness and understanding of basic security concepts
• Monitor and review compliance with risk management strategies and practices to ensure ICT-related activities are meeting Singapore Government Instruction Manual and relevant ICT security best practices.
• Conduct threat analysis using threat intelligence sources to identify emerging risks.
• Perform vulnerability assessments and support remediation tracking across systems
• Analyse logs and security events to identify potential security weaknesses and attack patterns.
• Lead in the investigation of cyber security incidents by working with other government agencies such as GovTech and CSA.
• Coordinate incident response activities and support containment, eradication and recover efforts when required
• Monitor and report on cybersecurity posture, risk exposure and compliance status
• Support cybersecurity aspects of Business Continuity and Disaster Recovery planning
• Participate in tabletop exercises (TTX) and incident simulations to improve organisational readiness

What we are looking for

• Possess suitable academic or professional credentials in Information Technology, Computer Engineering, Computer Science or related fields.
• Possess relevant IT Cybersecurity certifications (eg CEH, CISSP, OSCP, CISM and GIAC equivalent certifications) would be an advantage.
• Minimum 5 years' experience in IT Security & Operations.
• Having experience in leading cross-functional teams in IT Governance and/or IT Security & Operations would be an advantage
• Possess leadership qualities as well as good people and collaboration skills. - Good presentation, verbal and written communications skills.
• Diligent, resourceful and able to multitask in a dynamic work environment
• Meticulous in planning and tracking
• Familiarity with tendering procedures, ICT Security Standards in Singapore Public Service and managing IT budgets would be an advantage.