Manager / Information Technology (Infrastructure Security)

Land Transport Authority; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

Land Transport Authority in Singapore seeks an Infrastructure Security Officer to support day-to-day security operations across on-premises and cloud environments, coordinate vulnerability management, incident response, and compliance monitoring. You will collaborate with IT, facilities, and external service providers to identify and remediate security issues, helping uphold government security standards.

The role emphasizes operational delivery, governance, and continuous improvement of

Job description

What the role is

The Infrastructure Security Officer is responsible for supporting NParks' day-to-day infrastructure security operations, vulnerability management activities, incident response coordination, security service management, and compliance monitoring across both on-premises and Azure/Dynamics environments. The role requires close collaboration with infrastructure, application, facilities management, and external service providers to ensure security issues are identified, tracked, and remediated in a timely manner. The incumbent will play an operational role in maintaining the organisation's cybersecurity posture, ensuring compliance with government security requirements, and supporting continuous improvement of security and infrastructure processes and controls.

What you will be working on

Vulnerability Management

• Manage the end-to-end vulnerability management process across on-premises infrastructure, servers, endpoints, applications, Azure/Dynamics/ESRI/SaaS environments from initial discovery through to final closure, to ensure that vulnerabilities are addressed within NParks' service levels.
• Support the onboarding of hardware, network, software assets for vulnerability monitoring, as well as the setup and daily operations of such systems.
• Support the setup, onboarding and daily management of privileged IDs within privileged identity management systems.
• Coordinate periodic status updates and remediation tracking exercises with infrastructure, application, and support teams.
• Track and manage outstanding vulnerabilities, risk acceptance requests, and remediation exceptions.
• Analyse vulnerability data to identify trends, recurring issues, and areas requiring additional attention.
• Escalate overdue or high‑risk vulnerabilities to relevant stakeholders and management.
• Support security audits, compliance assessments, and reporting activities by providing required vulnerability management evidence and documentation.
• Ensure remediation activities comply with IM8 requirements, internal policies, and cybersecurity standards.

Security Incident Response Support

• Working with the CISO (Chief Information Security Officer) and the Infrastructure Team, coordinate and drive the following activities during cybersecurity, data, or resilience incidents: Coordinate incident response activities in collaboration with stakeholders and affected parties, including identification, escalation, containment, recovery, post‑incident review.
• Maintain accurate incident documentation.
• Drive post‑incident reviews to identify lessons learnt and measures to prevent recurrence.
• Track incident trends and recommend operational improvements to enhance security effectiveness.
• Ensure incident management processes are executed in accordance with established security procedures and governance requirements.

DDoS and Web Application Firewall (WAF) Operations

• Manage the operations of the Content Delivery Network (CDN) service and its associated web application firewall which protects NParks' Internet‑facing applications.
• Coordinate with service providers and stakeholders to ensure the effectiveness of deployed security controls.
• Review security alerts, attack reports, and service performance metrics to identify potential risks and improvement opportunities.
• Drive WAF policy reviews, rule updates, and change requests in accordance with operational needs.
• Initiate and manage investigations upon detecting abnormal or suspicious traffic.
• Track service issues and follow up with vendors to ensure timely resolution.
• Recommend operational improvements to enhance security effectiveness.

Security and Infrastructure Operations Coordination

• Coordinate infrastructure security operational activities across multiple stakeholders within and outside NParks.
• Maintain security risk, remediation, and compliance tracking registers.
• Follow up on action items arising from vulnerability assessments, incidents, audits, and service reviews.
• Support security governance activities through effective communication and collaboration with stakeholders.
• Escalate operational issues, delays, and security risks where required.
• Ensure infrastructure security processes are executed consistently and effectively.

Reporting and Compliance Monitoring

• Collect, consolidate, and analyse vulnerability, incident, compliance, and operational security data.
• Prepare regular operational reports, dashboards, and management updates on cybersecurity posture and remediation progress.
• Monitor compliance with prescribed security requirements, policies, and standards.
• Produce metrics and reports on vulnerability remediation, incident management, patch compliance, and security service performance.
• Support management review meetings by providing timely and accurate cybersecurity status updates.
• Assist in audit preparation activities and coordinate the collection of supporting evidence and documentation.

Contract Management

• Manage contracts related to security and audit ser