ITSO - Information Technology Security Officer

OX CONSULTANCY PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

OX CONSULTANCY PTE. LTD. seeks an Information Technology Security Officer to support cybersecurity governance, risk, compliance and security management activities.

The role involves coordinating security assessments, tracking remediation, maintaining cybersecurity registers and preparing security reports and dashboards. You will work with cross-functional teams across infrastructure, applications, cloud, and vendors to ensure adherence to security policies and regulatory standards.

Qualifications

• Diploma/degree in IT, CS or cybersecurity or related discipline.
• Experience in cybersecurity governance, risk management or security compliance.
• Knowledge of vulnerability management, VAPT, system hardening, firewall/network security and cloud security.
• Ability to coordinate assessments and remediation across multiple stakeholders.
• Security certifications such as CISSP, CISM, CRISC, ISO 27001 are advantageous.

Responsibilities

• Coordinate vulnerability assessments, VAPT and remediation activities.
• Support cybersecurity risk assessments and maintain risk registers and treatment plans.
• Coordinate system hardening assessments and track compliance gaps.
• Monitor cloud security posture findings and follow up on remediation.
• Coordinate software security clearance and maintain approval records.
• Manage firewall rule changes and network security deviation requests.
• Support security architecture reviews, documentation and design approvals.
• Assist in maintaining cybersecurity policies, standards, procedures and specifications.
• Prepare cybersecurity metrics, dashboards, management reports and audit evidence.
• Coordinate with infrastructure, application, cloud, network, project teams, vendors and system owners.
• Support cybersecurity audits and ensure compliance with applicable policies and standards.

Skills

Vulnerability management

VAPT

Security governance

Risk assessments

Stakeholder management

Cloud security

Network security

Security reporting

Policies & controls

Analytical skills

Education

Diploma/Degree in IT, CS or Cybersecurity

Job description

Job Description & Requirements

We are seeking an Information Technology Security Officer to support cybersecurity governance, risk, compliance and security management activities. The role involves coordinating security assessments, tracking remediation activities, maintaining cybersecurity registers and preparing security reports and dashboards.

Key Responsibilities

• Coordinate vulnerability assessment, penetration testing (VAPT) and remediation activities.
• Support cybersecurity risk assessments and maintain risk registers and treatment plans.
• Coordinate system hardening assessments and track compliance gaps.
• Monitor cloud security posture findings and follow up on remediation.
• Coordinate software security clearance and maintain approval records.
• Manage firewall rule changes and network security deviation requests.
• Support security architecture reviews, documentation and design approvals.
• Assist in maintaining cybersecurity policies, standards, procedures and specifications.
• Prepare cybersecurity metrics, dashboards, management reports and audit evidence.
• Coordinate with infrastructure, application, cloud, network, project teams, vendors and system owners.
• Support cybersecurity audits and ensure compliance with applicable security policies, regulatory requirements and standards.

Requirements

• Diploma/Degree in Information Technology, Computer Science, Cybersecurity or related discipline.
• Relevant experience in cybersecurity, information security, security governance, risk management or security compliance.
• Good understanding of vulnerability management, VAPT, system hardening, firewall/network security and cloud security.
• Experience coordinating security assessments, remediation and governance activities across multiple stakeholders.
• Ability to interpret vulnerability findings, CVE/CVSS information, risk assessments and security compliance reports.
• Good knowledge of cybersecurity policies, standards, controls and governance processes.
• Strong analytical, documentation, coordination and stakeholder management skills.
• Knowledge of AWS, Azure or other cloud security environments will be an advantage.
• Security+ / ISC2 CC / CISSP / CISM / CRISC / ISO 27001 or relevant cybersecurity certification is advantageous.