IT Security Officer - JN

DCI CONSULTANTS PRIVATE LIMITED; Singapore; On-site; SGD 120,000 - 170,000; Full time

Job summary

DCI Consultants Private Limited is seeking an Information Technology Security Officer (ITSO) to lead cybersecurity governance, risk management, incident response, and security operations. You will ensure protective controls across IT systems, applications, and infrastructure in line with security policies and regulatory requirements.

The ideal candidate has 7–10 years of cybersecurity experience, strong governance and incident response background, and familiarity with enterprise security

Qualifications

• Bachelor's degree in a related field is required.
• Minimum 7–10 years of experience in cybersecurity or IT infrastructure security.
• Experience in security governance, risk management, security operations, or incident response.

Responsibilities

• Develop and maintain information security policies, standards, and procedures.
• Support governance frameworks and security management practices.
• Conduct security risk assessments and recommend mitigations.
• Ensure compliance with cybersecurity policies, standards, and regulatory requirements.
• Monitor controls and provide recommendations to improve security posture.
• Support monitoring, detection, investigation, and response to incidents.
• Coordinate with internal and external stakeholders to manage incidents.
• Participate in cybersecurity exercises and readiness assessments.
• Investigate security events and perform root cause analysis.
• Review alerts, reports, and audit findings with timely remediation.
• Engage business and technical teams on security requirements.
• Coordinate with vendors, service providers, and regulators on cybersecurity matters.

Skills

Analytical & problem-solving

Communication skills

Stakeholder engagement

Organizational skills

Teamwork

Education

Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, Information Security, or related discipline

Tools

Security Operations (SOC)

Incident Response

Vulnerability Management

Risk Assessment

Security Monitoring Tools

Endpoint Security

Network Security

Infrastructure Security

Identity and Access Management (IAM)

Cloud Security

Digital Forensics (advantageous)

Job description

The Information Technology Security Officer (ITSO) is responsible for supporting the organization's cybersecurity governance, risk management, incident response, and security operations activities. The role ensures that IT systems, applications, and infrastructure are protected in accordance with organizational security policies, regulatory requirements, and industry best practices.

Key Responsibilities

Security Governance & Compliance

• Develop, maintain, and review information security policies, standards, procedures, and implementation roadmaps.

• Support the establishment and continuous improvement of cybersecurity governance frameworks and security management practices.

• Conduct security risk assessments and recommend mitigation measures to address identified risks.

• Ensure compliance with applicable cybersecurity policies, standards, and regulatory requirements.

• Monitor security controls and provide recommendations to enhance the organization's security posture.

Security Operations & Incident Management

• Support the monitoring, detection, investigation, and response of cybersecurity incidents.

• Coordinate with internal stakeholders and external service providers to manage and resolve security incidents.

• Participate in cybersecurity exercises, simulations, and readiness assessments.

• Investigate security events and perform root cause analysis to identify corrective and preventive actions.

• Review security alerts, reports, and audit findings, ensuring timely follow-up and remediation.

Threat & Vulnerability Management

• Monitor emerging cyber threats, vulnerabilities, and security trends.

• Assess the impact of identified threats on the organization's environment and recommend mitigation strategies.

• Support vulnerability management activities, including assessment, tracking, and remediation verification.

• Evaluate security technologies and solutions to improve operational effectiveness and risk management.

Security Monitoring & Asset Management

• Ensure security monitoring coverage across relevant infrastructure components, systems, and applications.

• Maintain visibility of assets under security monitoring and support onboarding of new assets into security platforms.

• Review security dashboards and reports, providing regular updates to stakeholders on risks and remediation status.

• Support continuous improvement of security monitoring and incident detection capabilities.

Stakeholder Engagement

• Engage business, project, and technical teams on cybersecurity requirements and security best practices.

• Conduct regular security reviews and recommend improvements to strengthen security controls.

• Coordinate with external vendors, service providers, regulatory bodies, and industry partners on cybersecurity-related matters.

• Provide cybersecurity advice and guidance to project teams during solution design and implementation.

Additional Duties

• Support cybersecurity initiatives, audits, assessments, and special projects as assigned.

• Contribute to the development of security awareness and cybersecurity improvement programs.

• Perform other cybersecurity-related duties as required.

Qualifications & Experience

Education

• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related discipline.

Experience

• Minimum 7-10 years of experience in cybersecurity, information security, or IT infrastructure security roles.

• Experience in security governance, risk management, security operations, or incident response.

• Familiarity with enterprise security technologies and cybersecurity frameworks.

• Experience working with cross-functional teams and external service providers.

Technical Knowledge

Knowledge of:

Security Operations (SOC)

Incident Response

Vulnerability Management

Risk Assessment

Security Monitoring Tools

Endpoint, Network, and Infrastructure Security

Identity and Access Management (IAM)

Cloud Security concepts

Familiarity with security investigations and digital forensic processes is advantageous.

Skills & Competencies

• Strong analytical, problem-solving, and critical-thinking skills.

• Good written, presentation, and communication skills.

• Ability to engage stakeholders at different levels of the organization.

• Strong organizational and documentation skills.

• Ability to work independently and collaboratively in a team environment.

Preferred Certifications

Applicants possessing one or more of the following certifications will have an advantage:

• Certified Information Systems Security Professional (CISSP)

• Certified Information Security Manager (CISM)

• GIAC Certified Incident Handler (GCIH)

• Certified Ethical Hacker (CEH)

• CompTIA Security+

• Certified Information Systems Auditor (CISA)

• GIAC Security Essentials (GSEC)

• GIAC Security Essentials (GSEC)

  We are seeking one (1) IT Security Officer (ITSO) with minimum 7years ofrelevant experience in cybersecurity,information security, IM8 cybersecurity policy development andimplementation.

  SINGAPOREANS ONLY

  **We regret to inform that only shortlisted candidates will be notified. Personal data collected will be used for recruitment purposes**