ITSO - Information Technology Security Officer

OX CONSULTANCY PTE. LTD.; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

OX CONSULTANCY PTE. LTD. is seeking an Information Technology Security Officer to support cybersecurity governance, risk, compliance and security management activities.

The role involves coordinating security assessments, tracking remediation activities, maintaining cybersecurity registers and preparing security reports and dashboards. The candidate will coordinate vulnerability assessment, risk assessments, system hardening, cloud security and firewall changes while engaging multiple teams and

Qualifications

• Diploma/Degree in Information Technology, Computer Science, Cybersecurity or related discipline.
• Relevant experience in cybersecurity, information security, governance, risk management or security compliance.
• Good understanding of vulnerability management, VAPT, system hardening, firewall/network security and cloud security.
• Experience coordinating security assessments, remediation and governance across multiple stakeholders.
• Ability to interpret vulnerability findings, CVE/CVSS, risk assessments and security compliance reports.
• Knowledge of cybersecurity policies, standards, controls and governance processes.
• Strong analytical, documentation, coordination and stakeholder management skills.
• Knowledge of AWS, Azure or other cloud security environments will be an advantage.
• Security+ / ISC2 CC / CISSP / CISM / CRISC / ISO 27001 or relevant cybersecurity certification is advantageous.

Responsibilities

• Coordinate vulnerability assessments, penetration testing (VAPT) and remediation activities.
• Support cybersecurity risk assessments and maintain risk registers and treatment plans.
• Coordinate system hardening assessments and track compliance gaps.
• Monitor cloud security posture findings and follow up on remediation.
• Coordinate software security clearance and maintain approval records.
• Manage firewall rule changes and network security deviation requests.
• Support security architecture reviews, documentation and design approvals.
• Assist in maintaining cybersecurity policies, standards, procedures and specifications.
• Prepare cybersecurity metrics, dashboards, management reports and audit evidence.
• Coordinate with infrastructure, application, cloud, network, project teams, vendors and system owners.
• Support cybersecurity audits and ensure compliance with applicable security policies, regulatory requirements and standards.

Skills

Cybersecurity governance

Risk management

Security compliance

Vulnerability management

Cloud security

Education

Diploma/Degree in IT or cybersecurity

Tools

Vulnerability assessment tools

Cloud security tooling (AWS/Azure)

Job description

Job Description & Requirements

We are seeking an Information Technology Security Officer to support cybersecurity governance, risk, compliance and security management activities. The role involves coordinating security assessments, tracking remediation activities, maintaining cybersecurity registers and preparing security reports and dashboards.

Key Responsibilities

• Coordinate vulnerability assessment, penetration testing (VAPT) and remediation activities.
• Support cybersecurity risk assessments and maintain risk registers and treatment plans.
• Coordinate system hardening assessments and track compliance gaps.
• Monitor cloud security posture findings and follow up on remediation.
• Coordinate software security clearance and maintain approval records.
• Manage firewall rule changes and network security deviation requests.
• Support security architecture reviews, documentation and design approvals.
• Assist in maintaining cybersecurity policies, standards, procedures and specifications.
• Prepare cybersecurity metrics, dashboards, management reports and audit evidence.
• Coordinate with infrastructure, application, cloud, network, project teams, vendors and system owners.
• Support cybersecurity audits and ensure compliance with applicable security policies, regulatory requirements and standards.

Requirements

• Diploma/Degree in Information Technology, Computer Science, Cybersecurity or related discipline.
• Relevant experience in cybersecurity, information security, security governance, risk management or security compliance.
• Good understanding of vulnerability management, VAPT, system hardening, firewall/network security and cloud security.
• Experience coordinating security assessments, remediation and governance activities across multiple stakeholders.
• Ability to interpret vulnerability findings, CVE/CVSS information, risk assessments and security compliance reports.
• Good knowledge of cybersecurity policies, standards, controls and governance processes.
• Strong analytical, documentation, coordination and stakeholder management skills.
• Knowledge of AWS, Azure or other cloud security environments will be an advantage.
• Security+ / ISC2 CC / CISSP / CISM / CRISC / ISO 27001 or relevant cybersecurity certification is advantageous.