IT Security Officer - IT Governance & Security [ITE Headquarters]

sggovterp; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

ITE is seeking an IT Security Officer to monitor, analyse and strengthen the organisation's cybersecurity posture in line with Singapore Government policies. You will support governance, risk management, incident response and compliance activities to safeguard ICT systems and data.

The role involves developing frameworks, monitoring security reporting, reviewing architectures, and guiding project teams on secure design and SDLC integration.

Qualifications

• Possess suitable academic or professional credentials in Information Technology, Computer Engineering, Computer Science or related fields.
• Possess relevant IT Cybersecurity certifications (eg CEH, CISSP, OSCP, CISM and GIAC equivalent certifications) would be an advantage.
• Minimum 5 years' experience in IT Security & Operations.
• Having experience in leading cross-functional teams in IT Governance and/or IT Security & Operations would be an advantage.
• Possess leadership qualities as well as good people and collaboration skills.
• Diligent, resourceful and able to multitask in a dynamic work environment.
• Meticulous in planning and tracking.
• Familiarity with tendering procedures, ICT Security Standards in Singapore Public Service and managing IT budgets would be an advantage.

Responsibilities

• Monitor, analyse, and strengthen the organisation's cybersecurity posture.
• Support governance, risk management, incident response, and compliance activities.
• Develop frameworks and processes to support Enterprise and Teaching & Learning objectives.
• Develop, implement and monitor reporting mechanisms for governance, security and risk practices.
• Review to identify security risks and breaches to ensure assets and information are secured.
• Provide cybersecurity guidance to project teams to ensure secure design and implementation.
• Review system architectures and recommend security controls (e.g. Zero Trust, defence-in-depth).
• Support integration of security requirements into SDLC.
• Communicate security basics to the general user population and formulate Security Awareness programs.
• Monitor and review compliance with risk management strategies and Singapore Government ICT standards.
• Conduct threat analysis using threat intelligence sources.
• Perform vulnerability assessments and support remediation tracking.
• Analyse logs and security events to identify weaknesses and attack patterns.
• Lead investigations of cyber security incidents with GovTech and CSA.
• Coordinate incident response activities and support containment, eradication and recovery.
• Monitor and report on cybersecurity posture, risk exposure and compliance status.
• Support cybersecurity aspects of Business Continuity and Disaster Recovery planning.
• Participate in tabletop exercises (TTX) and incident simulations.

Job description

What the role is

As an IT Security Officer, you will be responsible for monitoring, analysing, and strengthening the organisation's cybersecurity posture. You will support governance, risk management, incident response, and compliance activities to safeguard ICT systems and data in alignment with Singapore Government cybersecurity policies and ITE's Cybersecurity policies (e.g. IM8, GovTech standards)

Be part of the IT Governance and Security Team to:

• Develop frameworks and processes to support both Enterprise and Teaching & Learning business objectives of ITE
• Develop, implement and monitor reporting mechanisms for governance, security and risk practices to support compliance and highlight areas of exposure.
• Review to identify security risks and breaches to ensure the organisation's assets and information are appropriately secured at all times.
• Provide cybersecurity guidance to project teams to ensure secure design and implementation
• Review system architectures and recommend appropriate security controls based on best practices (e.g. Zero Trust, defence-in-depth)
• Support integration of security requirements into system development lifecycle (SDLC)
• Communicate security basics to the general user population including formulating Security Awareness program to raise user awareness and understanding of basic security concepts
• Monitor and review compliance with risk management strategies and practices to ensure ICT-related activities are meeting Singapore Government Instruction Manual and relevant ICT security best practices.
• Conduct threat analysis using threat intelligence sources to identify emerging risks.
• Perform vulnerability assessments and support remediation tracking across systems
• Analyse logs and security events to identify potential security weaknesses and attack patterns.
• Lead in the investigation of cyber security incidents by working with other government agencies such as GovTech and CSA.
• Coordinate incident response activities and support containment, eradication and recover efforts when required
• Monitor and report on cybersecurity posture, risk exposure and compliance status
• Support cybersecurity aspects of Business Continuity and Disaster Recovery planning
• Participate in tabletop exercises (TTX) and incident simulations to improve organisational readiness

What we are looking for

• Possess suitable academic or professional credentials in Information Technology, Computer Engineering, Computer Science or related fields.
• Possess relevant IT Cybersecurity certifications (eg CEH, CISSP, OSCP, CISM and GIAC equivalent certifications) would be an advantage.
• Minimum 5 years' experience in IT Security & Operations.
• Having experience in leading cross-functional teams in IT Governance and/or IT Security & Operations would be an advantage
• Possess leadership qualities as well as good people and collaboration skills. - Good presentation, verbal and written communications skills.
• Diligent, resourceful and able to multitask in a dynamic work environment
• Meticulous in planning and tracking
• Familiarity with tendering procedures, ICT Security Standards in Singapore Public Service and managing IT budgets would be an advantage.