IT Security Officer (ITSO) - #1740

JOBSTER PRIVATE LTD.; Singapore; On-site; SGD 70,000 - 120,000; Full time

Job summary

JOBSTER PRIVATE LTD. is seeking a Security Operations professional in Singapore to manage cybersecurity procedures, monitor systems and support incident response.

The role requires hands-on experience in security operations, vulnerability management and strong collaboration with vendors and government stakeholders. You will handle onboarding/offboarding, access reviews and privileged account administration while coordinating with service providers and external partners to ensure secure

Qualifications

• Bachelor's degree or diploma in Computer Science, IT, Cybersecurity or related field.
• Hands-on experience in cybersecurity operations, infrastructure security, incident handling and vulnerability management.
• Strong understanding of information security principles, monitoring, data protection and secure administration.
• Ability to work independently, prioritise tasks, document work clearly and communicate with stakeholders.
• Experience coordinating with external service providers, auditors, and government stakeholders is advantageous.

Responsibilities

• Develop, maintain and review IT security procedures, runbooks and operational documentation.
• Perform health checks, preventive maintenance, monitoring and admin support for cybersecurity systems.
• Provide Level 1 and 2 support, triage, escalation and incident tracking.
• Monitor security alerts, assess threats and advise actions.
• Support incident management, evidence collection, containment, recovery and post-incident reporting.
• Conduct user onboarding/offboarding, access reviews and privileged account administration.

Skills

Cybersecurity operations

Incident handling

Vulnerability management

Security monitoring

Documentation & communication

Education

Bachelor's degree or diploma in Computer Science/IT/Cybersecurity

Tools

CyberArk

SIEM

PAM/SIEM tools

Windows/Linux admin

Cloud security (Azure/AWS/GCP)

Job description

Key Responsibilities

• Develop, maintain, and review IT security procedures, action plans, runbooks, and operational documentation as required by the organisation.
• Perform daily, weekly, and monthly health checks, preventive maintenance, monitoring, administration, and operational support for assigned cybersecurity systems.
• Provide Level 1 and Level 2 support, perform initial investigation and triage, coordinate escalation, and track incidents through closure.
• Monitor and analyse security alerts, emerging threats, vulnerabilities, and advisories, and provide timely impact assessments and recommended actions.
• Support IT security incident management, evidence collection, investigation, containment, recovery, and post-incident reporting in accordance with the the organisation procedures.
• Conduct user onboarding, offboarding, access reviews, privileged account administration, and entitlement validation as authorised by the organisation.
• Coordinate with the clint teams, GovTech, managed service providers, vendors, and external security partners on operational and incident matters.
• Maintain inventories of assets monitored by central security tools and support onboarding, configuration validation, troubleshooting, and decommissioning.
• Prepare bi-weekly operational updates, monthly service reports, management summaries, risk and vulnerability reports, and ad hoc reports requested by the organisation.
• Track licences, subscriptions, certificate expiry, maintenance and contract renewal dates, and support billing or service verification activities where required.
• Plan and conduct phishing simulations and security awareness exercises, including preparation of communications, reports, lessons learned, and follow-up actions.
• Participate in security exercises, technical assessments, audits, vulnerability remediation activities, and tabletop exercises when required.
• Assist with forensic acquisition and analysis activities when required and authorised, while maintaining chain of custody and secure evidence handling.
• Perform other reasonable cybersecurity duties necessary to protect the organisation information systems and infrastructure.

Experience and Qualifications

• Bachelor's degree or diploma in Computer Science, Information Technology, Cybersecurity, Computer Engineering, or a related discipline.
• Proven hands‑on experience in cybersecurity operations, infrastructure security, security platform administration, incident handling, and vulnerability management.
• Strong understanding of information security principles, security operations, access control, logging and monitoring, data protection, and secure administration.
• Ability to work independently, prioritise operational tasks, document work clearly, and communicate with technical and non-technical stakeholders.
• Experience coordinating with external service providers, security organisations, auditors, and government stakeholders is advantageous.

Preferred Technical Skills

• CyberArk Privileged Access Management.
• Insider Security Dashboard, SIEM, Syslog‑NG, database activity monitoring, insider security monitoring, and security log analysis.
• Forcepoint Data Loss Prevention and Imperva Web Application Firewall.
• Windows Server and Linux administration, PowerShell, Bash, and command-line troubleshooting.
• Microsoft Azure, Amazon Web Services, and Google Cloud Platform security operations.
• Vulnerability management, security hardening, incident response, phishing simulation, and awareness campaign management.
• Relevant certifications such as CISSP, CISM, GCIH, CEH, Security+, CyberArk, Microsoft Azure, AWS, or equivalent are preferred.