IT Security Officer (ITSO)

CAPGEMINI SINGAPORE PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

CAPGEMINI SINGAPORE PTE. LTD. is seeking an Information Technology Security Officer to support cybersecurity governance, assurance, and security management across the organisation in Singapore.

You will engage in security architecture, VAPT, risk assessment, cloud security posture management, and policy governance with multiple stakeholders. The role supports roles at Associate Consultant, Consultant, or Senior Consultant levels, requiring strong analytical, coordination, documentation, and

Qualifications

• Diploma or Bachelor's degree in Information Security, Cybersecurity, IT, CS, or related discipline.
• Good understanding of vulnerability management, risk assessment, system hardening, and firewall controls.
• Experience coordinating reviews, assessments, remediation activities, or governance processes with multiple stakeholders.

Responsibilities

• Coordinate security architecture reviews with project teams and stakeholders.
• Maintain vulnerability trackers and remediation activity records.
• Prepare VAPT reports, summaries, and presentations.
• Coordinate cybersecurity risk assessment with system owners and stakeholders.
• Track remediation and risk treatment actions and report status.
• Coordinate security hardening assessments and compliance reporting.
• Monitor CSPM findings, remediation status, and cloud posture.
• Manage software security clearance requests and documentation.
• Maintain firewall and network security deviation registers and reviews.
• Draft, review, and update cybersecurity policies, standards, and procedures.

Skills

Vulnerability management

Security risk assessment

System hardening

Firewall & network security

Cloud security

Governance & compliance

Stakeholder management

Analytical skills

Documentation

Communication

Education

Bachelor's degree in Information Security

Diploma in Information Security

Tools

VAPT tools

Cloud security tooling

Vulnerability scanners

Job description

About the Role

We are seeking an Information Technology Security Officer to support cybersecurity governance, assurance, and security management activities across the organisation. This role will be involved in key cybersecurity functions including security architecture, vulnerability assessment and penetration testing (VAPT), risk assessment, system hardening, cloud security posture management, software security clearance, firewall and network security governance, cybersecurity policies and standards, and security reporting.

You will work closely with internal stakeholders, project teams, infrastructure teams, vendors, and cybersecurity professionals to coordinate security reviews, track remediation activities, maintain cybersecurity records, and support compliance with organisational policies and regulatory requirements.

This role is suitable for candidates at the Associate Consultant, Consultant, or Senior Consultant level who possess strong analytical, coordination, documentation, and stakeholder management skills, along with a solid understanding of cybersecurity governance and risk management practices.

Job Responsibilities

Security Architecture

• Support the maintenance of security architecture diagrams, records, and approved design documentation.
• Coordinate security architecture review requests and engage relevant project teams and stakeholders.
• Maintain records of architecture decisions, recommendations, and approved designs.
• Assist in preparing security advisory materials and architecture review documentation.

Vulnerability Assessment & Penetration Testing (VAPT)

• Coordinate VAPT engagements with system owners, vendors, and security testing teams.
• Maintain vulnerability trackers and follow up on remediation activities.
• Coordinate re-testing activities and monitor closure of identified findings.
• Support the preparation of VAPT reports, summaries, and presentation materials.

Cybersecurity Risk Management

• Coordinate cybersecurity risk assessment activities with system owners and stakeholders.
• Maintain risk registers and track remediation and risk treatment actions.
• Support the preparation of risk reports and management review materials.
• Facilitate risk acceptance, exception handling, and approval processes.

Security Hardening & Compliance

• Coordinate security hardening assessments with infrastructure and system teams.
• Track remediation of hardening gaps and monitor compliance progress.
• Maintain hardening records, checklists, and reporting artefacts.
• Prepare periodic compliance reports and status updates.

Cloud Security Posture Management

• Monitor and triage findings from Cloud Security Posture Management (CSPM) tools.
• Track cloud security findings and coordinate remediation efforts with relevant stakeholders.
• Maintain records of cloud security findings and remediation status.
• Prepare regular cloud security posture reports and summaries.

Software Security Clearance

• Manage software security clearance requests and associated documentation.
• Coordinate with requestors and vendors to obtain required security information.
• Maintain software security clearance registers and approval records.
• Support software security evaluations and monitor clearance expiry dates.

Firewall & Network Security Governance

• Track firewall rule change requests and network security deviation requests.
• Coordinate with requestors and network teams on outstanding security actions.
• Maintain firewall and network deviation registers.
• Support periodic reviews of firewall rules and network security exceptions.

Cybersecurity Policies, Standards & Governance

• Assist in drafting, reviewing, and updating cybersecurity policies, standards, guidelines, and procedures.
• Maintain cybersecurity documentation repositories.
• Track document review cycles, approvals, and expiry dates.
• Support the development and review of cybersecurity specifications for projects, procurements, and tenders.

Security Metrics & Reporting

• Consolidate cybersecurity data from various teams and systems.
• Maintain dashboards covering vulnerabilities, risks, compliance, audit findings, and remediation activities.
• Prepare cybersecurity metrics, reports, and management presentations.
• Follow up with stakeholders on outstanding security actions and remediation items.

Security & Compliance Support

• Support cybersecurity assessments, audits, and evidence collection activities.
• Ensure activities are carried out in accordance with applicable policies, standards, and regulatory requirements.
• Maintain accurate cybersecurity records, registers, reports, and supporting documentation.
• Handle sensitive and confidential information in accordance with security requirements.

Job Requirements

Required Skills & Experience

• Diploma or Bachelor's degree in Information Security, Cybersecurity, Information Technology, Computer Science, or a related discipline.

• Good understanding of cybersecurity concepts, including:Vulnerability management

  Security risk assessment

  System hardening

  Firewall and network security controls

  Cloud security

  Cybersecurity governance

• Experience coordinating cybersecurity reviews, assessments, remediation activities, or security governance processes involving multiple stakeholders.

• Ability to review and interpret:Vulnerability assessment reports

  Security risk assessments

  Security architecture documentation

  Firewall and network security controls

  Compliance and audit reports

• Familiarity with cybersecurity frameworks, standards, policies, and governance practices.
• Strong analytical, organisational, documentation, and stakeholder management skills.
• Good written and verbal communication skills.

Preferred Skills

• Familiarity with CSPM platforms and cloud security concepts within AWS, Microsoft Azure, or comparable cloud environments.
• Experience with vulnerability management tools, VAPT activities, and interpretation of CVE/CVSS ratings.
• Understanding of enterprise network architecture, security zones, network segmentation, and firewall management.
• Experience supporting cybersecurity governance, risk, compliance, or audit-related activities.

Preferred Certifications

Candidates with one or more of the following certifications will have an advantage:

• CompTIA Security+
• ISC2 Certified in Cybersecurity (CC)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified in Risk and Information Systems Control (CRISC)
• ISO 27001-related certifications
• Microsoft Azure Security certifications
• AWS Security certificationsOther relevant cybersecurity certifications

Working Arrangement

• Based onsite at designated secure premises in Singapore as required by project needs.
• Collaborate closely with system owners, infrastructure teams, cybersecurity teams, project teams, vendors, and contractors.
• Must comply with applicable security, confidentiality, and access control requirements.
• Employment is subject to the successful completion of any required security clearance processes.