IT Security Officer

RAPSYS TECHNOLOGIES PTE. LTD.; Singapore; On-site; SGD 60,000 - 80,000; Full time

Job summary

A technology firm in Singapore is seeking an IT Security Officer (ITSO) to ensure system security and compliance. The role involves conducting security reviews, managing incident responses, and handling audit activities. Candidates should have at least 2 years of experience in cloud cybersecurity, along with a relevant bachelor's degree and internationally recognized security certifications. This position offers a collaborative work environment with clear responsibilities in maintaining cybersecurity protocols.

Qualifications

• At least 2 years of experience in cloud cybersecurity, including security assessment.
• Strong analytical and problem-solving skills.
• Excellent communication skills in spoken and written English.

Responsibilities

• Conduct security reviews and risk assessments based on hardening requirements.
• Create PUB hardening baselines and monitor remediation status.
• Coordinate monthly security awareness training and briefings.

Skills

Cloud Security

Security alerts & incident handling

Security audit handling

Security vulnerability management and mitigations

Experience in cloud cybersecurity

Education

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field

Internationally recognised security certifications (CISSP, CISM, CRISC, CISA)

Tools

Azure Log Analytics

AWS CloudWatch

AWS Security Hub CSPM

Microsoft Defender for Cloud

Job description

Role: IT Security Officer (ITSO)

Work Location: 80 Toh Guan Rd E Waterhub S (608575)

Responsibilities

• System Security and Compliance (CIS Benchmarks)
• Planning and scheduling annual reviews of security hardening documents.
• Performing compliance reviews and ensuring remediation of findings.
• Technical Support and Governance: providing vulnerability monitoring, recommending and implementing mitigation actions.
• Managing and responding to security alerts.
• Monitoring phishing alerts and communicating with staff regarding malicious emails.
• Supporting audit activities, vulnerability scans, and penetration tests.
• Communicating and following SOP to perform malware scans on endpoints with anti‑virus alerts.
• Co‑ordinating with cloud security engineers to review findings from CSPM tools such as Cloudscape.
• Tracking status of remediation efforts and ensuring accountability.
• Producing monthly reports and coordinating IT security awareness training.

Key Responsibilities

The team will conduct security reviews, system hardening checks, and risk assessments based on deviations to hardening requirements (e.g., CIS Benchmarks). They will also create PUB hardening baselines and maintain a tracking system to monitor remediation status. The ITSO will work with system managers and infrastructure teams to resolve findings from cloud security posture management tools and ensure suppression expiry. Monthly reports will be summarized and presented to the Board’s Cybersecurity team, and the ITSO will coordinate monthly security awareness training and briefings.

Required Skills & Experience

• Cloud Security
• Security alerts & incident handling
• Security audit handling
• Security vulnerability management and mitigations
• At least 2 years of experience in cloud cybersecurity, including security assessment, vulnerability management within cloud and on‑premises environments, particularly GCC.
• Familiarity with security platforms such as Azure Log Analytics, AWS CloudWatch, AWS Security Hub CSPM, and Microsoft Defender for Cloud.

Additional Information

Working Hours: Monday to Friday, 8.30 am to 6 pm.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field.
• Internationally recognised security certifications such as CISSP, CISM, CRISC, or CISA.
• Strong analytical and problem‑solving skills.
• Excellent communication skills in spoken and written English.

General Requirements

Strong collaborative skills to ensure coordination between specialised roles and maintain comprehensive security coverage.