[LPS] IT Security Manager

Lenovo PCCW Solutions; Singapore; Presencial; SGD 120.000 - 180.000; Jornada completa

Descripción de la vacante

Lenovo PCCW Solutions Limited is seeking an IT Security Leader to drive incident response, threat monitoring and governance across on‑premises and cloud environments in Singapore. You will partner with SIRO/SIRM, ITSO, SOC and other teams to detect, respond to threats, and continuously improve security posture.

The role demands at least 5 years in IT security leadership, hands‑on experience with SIEM and vulnerability management, and CISSP or CISM certification; cloud security credentials are

Formación

• Bachelor’s degree in information security, Computer Science, or related field.
• Minimum 5 years of experience in IT Security leadership role, with preferably 1 year in Cloud Security.
• Singaporean only.
• Professional certifications such as CISSP or CISM are required.
• Cloud certifications such as CCSP, AWS Certified Security, Azure Security Engineer Associate or equivalent would be advantageous.

Responsabilidades

• Incident Response & Security Monitoring: monitor, detect, and respond to threats on‑premises and on cloud.
• Lead Security Incident Response (IR) and post‑mortem analyses for cybersecurity incidents arising from security threat events.
• Stay current with emerging threats, vulnerabilities, and threat intelligence related to cloud platforms.
• Disseminate security advisories, threat intelligence reports, security directives, and patch recommendations promptly to stakeholders.
• Partake in tabletop exercises, security risk management activities, audits and third‑party assessments to enhance incident response readiness.
• Security Product Management: monitor security events on SIEM, perform event triage and analysis; perform vulnerability assessments on applications and devices.
• Security Governance & Compliance: lead periodic security reviews and implement security initiatives based on audits and tabletop exercises.
• Network, Systems and Endpoint Security: manage security tools and platforms; review accounts on on‑prem and cloud systems.
• Documentation and Reporting: update security policies, baselines, SOPs; deliver regular reports on security performance and risk mitigation.
• Collaboration and Stakeholder Management: mentor ITSOs; collaborate with IT teams and vendors; liaise with SIRO/SIRM and cloud providers.

Conocimientos

Security tools

Vulnerability management

Threat analysis

Incident response

Secure network design

Endpoint security

System hardening

Educación

Bachelor’s degree in information security or related field

Herramientas

SIEM

WAF

AV

EDR

PAM

DAM

Terraform

CloudFormation

Descripción del empleo

Key Responsibilities:

1. Incident Response & Security Monitoring
   • Work closely with SIRO/SIRM, IT Security Officer (ITSO) and SOC to monitor, detect, and respond to threats on-premises and on cloud.
   • Lead Security Incident Response (IR) and post-mortem analyses for cybersecurity incidents arising from security threat events.
   • Stay current with emerging threats, vulnerabilities, and threat intelligence related to cloud platforms.
   • Disseminate security advisories, threat intelligence reports, security directives, and patch recommendations promptly to the relevant stakeholders in the agencies.
   • Partake in tabletop exercises, security risk management activities, audits and third-party assessments to enhance incident response readiness.
2. Security Product Management
   • Monitor security events on SIEM (e.g. Splunk, Cortex, Exa beam), perform event triage and analysis.
   • Perform Vulnerability Assessments (Tenable Nessus) on applications (e.g. web client/server, mobile apps), networking and computing devices (e.g. firmware, Operating System).
3. Security Governance & Compliance
   • Lead and conduct periodic security reviews to ensure adherence to IT Security Policies, Standards, Controls and industry best practices.
   • Recommend and implement security initiatives and enhancement based on findings from tabletop exercises (TTX) and audits.
   • Monitor and ensure compliance with secure configuration standards across network, systems and endpoint (i.e. CIS Hardening) at agencies.
   • Analyse Vulnerability Assessment (VA) scan results, track and report remediation status according to the stipulated timeframe.
4. Network, Systems and Endpoint Security
   • Manage, configure, and optimize security tools and platforms to ensure effective integration with network and IT infrastructure.
   • Manage network, system, endpoint and runtime security of on-premises and cloud environments.
   • Perform regular reviews of accounts for both on-premises and on cloud systems/applications.
5. Documentation and Reporting
   • Implement and update security policies, technical baselines, Standard Operating Procedures (SOPs).
   • Maintain documentation of security incidents, vulnerability assessments, security checklist, security controls and policies.
   • Prepare and deliver regular reports to update security performance metrics, incident trends, compliance status and risk mitigation efforts.
   • Ensure timely escalation and reporting of cybersecurity incidents to management and stakeholders.
6. Collaboration and Stakeholder Management
   • Provide guidance and mentor a team of IT Security Officers (ITSOs).
   • Collaborate with various IT teams (e.g. Infrastructure, Applications, Project) and external vendors to implement and maintain security controls and measures.
   • Act as the key liaison with stakeholders (e.g. SIRO/SIRM, IT, Application Teams) and cloud service providers to align security practices with organizational cybersecurity strategies and compliance requirements.

Qualifications

Experience

• Bachelor’s degree in information security, Computer Science, or related field.
• Minimum 5 years of experience in IT Security leadership role, with preferably 1 year in Cloud Security.
• Singaporean only.

Technical Skills

• Hands-on experience with security tools (e.g. SIEM, WAF, AV, EDR, PAM, DAM).
• Deep understanding of vulnerability management, threat analysis, and incident response processes.
• Good understanding of secure network design, endpoint security, and system hardening techniques.
• Familiarity with ICT security compliance frameworks, cybersecurity standards, and risk management practices.
• Familiar with IaC security (e.g. Terraform, CloudFormation) and CI/CD security.

Certifications

• Professional certifications such as CISSP or CISM are required.
• Cloud certifications such as CCSP, AWS Certified Security, Azure Security Engineer Associate or equivalent would be advantageous.

Other Skills

• Strong analytical and problem-solving skills with attention to detail.
• Effective communication skills, both written and verbal, with the ability to clearly articulate security risks and recommendations.
• Ability to work independently with minimal supervision and collaboratively within a team in a dynamic and fast-paced environment.
• Proactive mindset with a continuous improvement attitude towards cybersecurity operations.