ITSO Officer

Tap Growth ai; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

Tap Growth ai in Singapore is seeking an experienced ITSO Officer to strengthen IT security operations. The role focuses on policy development, risk assessment, incident management, and governance to safeguard our digital assets.

Ideal candidates will have 5+ years in IT security, strong analytical and communication skills, and experience coordinating with external partners. This office-based role requires collaboration with internal teams to improve security posture.

Qualifications

• Bachelor's degree in Computer Science, IT, Cybersecurity or related field.
• Minimum 5 years of experience in IT security operations.
• Strong understanding of information security principles and regulations.
• Experience with security products and governance frameworks.

Responsibilities

• Develop and maintain IT security policies and action plans.
• Evaluate and recommend security products for the Customer’s IT infrastructure.
• Implement risk assessment methodologies for compliance and standards.
• Establish and manage IT Security Incident Management processes.
• Collaborate with external partners to resolve security incidents.
• Conduct forensic investigations as required and analyze evidence.

Skills

IT security

Infrastructure security

Policies & governance

Incident response

Forensic analysis

Stakeholder comms

Vendor liaison

Analytical skills

Education

Bachelor's degree

CISSP

CISM

Tools

Security tools

Job description

We are seeking a skilled and dedicated ITSO Officer to join our team in Singapore. The ideal candidate will have at least 5 years of experience in IT security operations, ensuring compliance and safeguarding our organization's digital assets. If you thrive in a fast-paced environment and possess strong analytical skills, we want to hear from you!

Location: Singapore, Singapore

Work Mode: Work from Office

Role: ITSO Officer

What You'll Do:

Key Responsibilities:

• Develop and maintain IT security policies and action plans, reviewing them at least annually or as required by the Customer.
• Evaluate and recommend IT security products and solutions for implementation within the Customer's IT infrastructure.
• Implement and manage risk assessment methodologies, ensuring compliance with relevant service management requirements and industry standards.
• Develop and implement security management frameworks and governance structures as specified by the Customer.
• Establish and manage IT Security Incident Management processes, including detection, response, and handling of security incidents according to Customer guidelines.
• Collaborate with external partners and suppliers to resolve IT security incidents effectively.
• Participate in and contribute to industry-wide IT security incident response simulations and technical assessment exercises.
• Conduct forensic investigations when required, including secure disk image acquisition and analysis within specified timeframes.
• Monitor, analyse, and report on emerging security threats, vulnerabilities, and solutions relevant to the Customer's IT infrastructure.
• Conduct regular meetings with key stakeholders to highlight security issues and propose improvements to the Customer's IT infrastructure.
• Liaise and coordinate with external suppliers, security organisations, and the Government on IT security matters related to the Customer's infrastructure.
• Perform additional activities as necessary to secure the Customer's IT infrastructure.
• Review and follow up on security reports generated from central security tools, providing timely updates to the Customer.
• Manage the inventory of IT assets to be monitored by central security tools, ensuring compliance and proper onboarding of servers, networks, and databases.

Experience and Skills Needed

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Proven experience in IT security, with a focus on infrastructure security.
• Strong understanding of information security principles, best practices, and relevant regulations.
• Experience with a range of security tools and technologies.
• Familiarity with forensic investigation techniques and tools.
• Excellent analytical and problem-solving skills.
• Strong written and verbal communication skills.
• Ability to work effectively both independently and in a team environment.
• Experience in liaising with external partners and suppliers on security matters.

Desired Certifications:

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)