IT Security Officer (ITSO) - #1740

Jobster Private Ltd; Singapore; On-site; SGD 60,000 - 110,000; Full time

Job summary

Jobster Private Ltd in Singapore is seeking a cybersecurity operations analyst to develop and maintain security procedures, runbooks, and run daily health checks for critical systems.

The role involves Level 1-2 incident support, alert monitoring, and coordination with client teams, GovTech, MSPs, and external partners. A degree in CS/IT/cybersecurity is required with hands-on security operations experience.

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity, Computer Engineering, or related field.
• Proven hands-on experience in cybersecurity operations, infrastructure security, security platform administration, incident handling, and vulnerability management.
• Strong understanding of information security principles, security operations, access control, logging and monitoring, data protection, and secure administration.
• Ability to work independently, prioritise operational tasks, document work clearly, and communicate with technical and non-technical stakeholders.
• Experience coordinating with external service providers, security organisations, auditors, and government stakeholders is advantageous.

Responsibilities

• Develop, maintain, and review IT security procedures, action plans, runbooks, and operational documentation.
• Perform daily, weekly, and monthly health checks, preventive maintenance, monitoring, administration, and support for cybersecurity systems.
• Provide Level 1 and 2 support, triage, escalation, and track incidents through closure.
• Monitor and analyse security alerts, threats, vulnerabilities, and advisories, and provide impact assessments and actions.
• Support incident management, evidence collection, investigation, containment, and post-incident reporting.
• Conduct user onboarding/offboarding, access reviews, privileged account administration, and entitlement validation.
• Coordinate with client teams, GovTech, MSPs, vendors, and external security partners on incidents.
• Maintain inventories of assets monitored by central security tools and support onboarding/configuration/troubleshooting.
• Prepare bi-weekly updates, monthly service reports, risk and vulnerability reports, and ad hoc reports.
• Track licences, certificates, maintenance, and renewal dates, and assist with billing or verification.
• Plan phishing simulations and security awareness campaigns with communications and reports.
• Participate in security exercises, audits, vulnerability remediation, and tabletop exercises.
• Assist with forensic acquisition and analysis with chain of custody and secure handling.
• Perform other reasonable cybersecurity duties to protect information systems.

Skills

Cybersecurity ops

Incident handling

Vulnerability mgmt

Logging & monitoring

Access control

Security documentation

Stakeholder comms

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

CyberArk

SIEM

Forcepoint DLP

Imperva WAF

Windows Server

Linux

PowerShell

Bash

Azure

AWS

GCP

Job description

Key Responsibilities

• Develop, maintain, and review IT security procedures, action plans, runbooks, and operational documentation as required by the organisation.
• Perform daily, weekly, and monthly health checks, preventive maintenance, monitoring, administration, and operational support for assigned cybersecurity systems.
• Provide Level 1 and Level 2 support, perform initial investigation and triage, coordinate escalation, and track incidents through closure.
• Monitor and analyse security alerts, emerging threats, vulnerabilities, and advisories, and provide timely impact assessments and recommended actions.
• Support IT security incident management, evidence collection, investigation, containment, recovery, and post-incident reporting in accordance with the the organisation procedures.
• Conduct user onboarding, offboarding, access reviews, privileged account administration, and entitlement validation as authorised by the organisation.
• Coordinate with the clint teams, GovTech, managed service providers, vendors, and external security partners on operational and incident matters.
• Maintain inventories of assets monitored by central security tools and support onboarding, configuration validation, troubleshooting, and decommissioning.
• Prepare bi-weekly operational updates, monthly service reports, management summaries, risk and vulnerability reports, and ad hoc reports requested by the organisation.
• Track licences, subscriptions, certificate expiry, maintenance and contract renewal dates, and support billing or service verification activities where required.
• Plan and conduct phishing simulations and security awareness exercises, including preparation of communications, reports, lessons learned, and follow-up actions.
• Participate in security exercises, technical assessments, audits, vulnerability remediation activities, and tabletop exercises when required.
• Assist with forensic acquisition and analysis activities when required and authorised, while maintaining chain of custody and secure evidence handling.
• Perform other reasonable cybersecurity duties necessary to protect the organisation information systems and infrastructure.

Experience and Qualifications

• Bachelor’s degree or diploma in Computer Science, Information Technology, Cybersecurity, Computer Engineering, or a related discipline.
• Proven hands-on experience in cybersecurity operations, infrastructure security, security platform administration, incident handling, and vulnerability management.
• Strong understanding of information security principles, security operations, access control, logging and monitoring, data protection, and secure administration.
• Ability to work independently, prioritise operational tasks, document work clearly, and communicate with technical and non-technical stakeholders.
• Experience coordinating with external service providers, security organisations, auditors, and government stakeholders is advantageous.

Preferred Technical Skills

• CyberArk Privileged Access Management.
• Insider Security Dashboard, SIEM, Syslog-NG, database activity monitoring, insider security monitoring, and security log analysis.
• Forcepoint Data Loss Prevention and Imperva Web Application Firewall.
• Windows Server and Linux administration, PowerShell, Bash, and command-line troubleshooting.
• Microsoft Azure, Amazon Web Services, and Google Cloud Platform security operations.
• Vulnerability management, security hardening, incident response, phishing simulation, and awareness campaign management.
• Relevant certifications such as CISSP, CISM, GCIH, CEH, Security+, CyberArk, Microsoft Azure, AWS, or equivalent are preferred.