M01 - Information Technology Security Officer

FPT ASIA PACIFIC PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

FPT Asia Pacific Pte. Ltd. is seeking an Information Technology Security Officer to support cybersecurity governance, assurance, risk management, and security operations.

You will work with system owners, infrastructure and cybersecurity teams, project teams, vendors, and other stakeholders to coordinate security assessments, track remediation activities, and maintain security registers and documentation. The role covers security architecture, VAPT, risk assessments, system hardening, cloud

Qualifications

• Good understanding of enterprise cybersecurity concepts including vulnerability management, risk assessment, system hardening, firewall controls, cloud security, and governance.
• Experience coordinating cybersecurity assessments, remediation activities, and security review processes with multiple stakeholders.
• Ability to review vulnerability findings, risk assessments, architecture diagrams, firewall rules, and compliance reports.
• Familiarity with cybersecurity standards and best practices.

Responsibilities

• Coordinate security architecture reviews and maintain design documentation.
• Manage VAPT activities and track remediation until closure.
• Maintain cybersecurity risk registers and report on risk treatment progress.
• Coordinate security hardening assessments and track gaps and remediation.
• Monitor CSPM findings and coordinate cloud remediation with owners.
• Log and track software security clearance requests and maintain registers.
• Track firewall rule changes and network deviation requests and prepare reviews.
• Support drafting and updating cybersecurity policies and governance documentation.
• Consolidate cybersecurity metrics and prepare management reports.

Job description

About the Role

We are looking for an Information Technology Security Officer to support cybersecurity governance, assurance, risk management, and security operations.

The role covers security architecture, vulnerability assessment and penetration testing (VAPT), cybersecurity risk assessments, system hardening, cloud security posture management, software security clearance, firewall and network deviation management, cybersecurity policies and standards, and security reporting.

You will work closely with system owners, infrastructure and cybersecurity teams, project teams, vendors, and other stakeholders to coordinate security assessments, track remediation activities, maintain security registers and documentation, and support cybersecurity governance and compliance requirements.

Key Responsibilities

Security Architecture

• Maintain security architecture diagrams, records, and approved design documentation.
• Coordinate security architecture reviews with project teams and relevant stakeholders.
• Track architecture decisions, recommendations, and approved designs.
• Support the preparation of security advisory materials and architecture review documentation.

Vulnerability Assessment & Penetration Testing (VAPT)

• Coordinate and schedule VAPT activities with system owners, vendors, and security testers.
• Maintain VAPT trackers and monitor remediation of identified vulnerabilities.
• Coordinate re-testing activities and track findings through to closure.
• Prepare VAPT reports, summaries, and presentation materials.

Cybersecurity Risk Management

• Coordinate cybersecurity risk assessments with system owners and stakeholders.
• Maintain cybersecurity risk registers and track risk treatment and remediation actions.
• Support the preparation of risk reports and management review materials.
• Facilitate risk acceptance, exception, and approval processes.

Security Hardening & Compliance

• Coordinate security hardening assessments with system and infrastructure teams.
• Track security hardening gaps and remediation progress.
• Maintain compliance records, checklists, and trackers.
• Prepare periodic hardening and compliance reports.

Cloud Security Posture Management

• Monitor and triage security findings generated by Cloud Security Posture Management (CSPM) tools.
• Track cloud security misconfigurations and coordinate remediation with system and cloud owners.
• Maintain CSPM findings and remediation records.
• Prepare periodic cloud security posture reports and summaries.

Software Security Clearance

• Receive, log, and track software security clearance requests.
• Coordinate with requestors and vendors to obtain the required technical and security documentation.
• Maintain software clearance registers and approval status.
• Prepare software security evaluation summaries and monitor expiring clearances.

Firewall & Network Security

• Track firewall rule changes and network security deviation requests.
• Follow up with requestors and network teams on outstanding actions and expiring deviations.
• Maintain deviation registers and prepare review summaries for approval.
• Coordinate periodic reviews of firewall rules and network security deviations.

Cybersecurity Policies, Standards & Governance

• Support the drafting, review, and updating of cybersecurity policies, standards, guidelines, and procedures.
• Maintain cybersecurity policy and standards documentation.
• Track document review cycles, approvals, and expiry dates.
• Support the preparation and review of cybersecurity requirements and specifications for projects, procurements, and tenders.

Security Metrics & Reporting

• Consolidate cybersecurity data and status updates from relevant teams and systems.
• Maintain dashboards covering vulnerabilities, risks, deviations, compliance, and audit findings.
• Prepare regular cybersecurity metrics and management reports.
• Track outstanding security actions and follow up with responsible stakeholders.

Security & Compliance

• Support cybersecurity assessments, internal and external audits, and evidence collection activities.
• Ensure activities comply with applicable cybersecurity policies, regulatory requirements, and the Cybersecurity Code of Practice (CCoP).
• Maintain accurate and up-to-date cybersecurity records, registers, reports, and supporting documentation.
• Handle sensitive and security-classified information in accordance with applicable security requirements.

Requirements

• Good understanding of enterprise cybersecurity concepts, including vulnerability management, cybersecurity risk assessment, system hardening, firewall controls, cloud security, and security governance.
• Experience coordinating cybersecurity assessments, remediation activities, and security review processes involving multiple technical and business stakeholders.
• Ability to understand and review vulnerability assessment findings, cybersecurity risk assessments, security architecture diagrams, firewall rules, and compliance reports.
• Familiarity with cybersecurit