Manager / Information Technology (Infrastructure Security)

NPB National Parks Board; Singapore; On-site; SGD 80,000 - 110,000; Full time

Job summary

NPparks National Parks Board is seeking an Infrastructure Security Officer to support day-to-day security operations across on‑premises and Azure/Dynamics environments. You will coordinate vulnerability management, incident response, WAF operations, and governance with multiple internal teams and external providers.

The role emphasizes collaboration, timely remediation, and continuous improvement of security controls, with a two-year contract and a strong focus on Singapore government security

Qualifications

• Two years minimum experience in vulnerability management and related operations.
• Experience with vulnerability platforms such as Wiz, Tenable or Trend Micro.
• Experience planning and implementing security alerts in Microsoft Azure environment.
• Experience coordinating cybersecurity incidents and remediation activities.
• Familiarity with security policies and translating policy requirements into controls.
• Strong reporting and analytics using Excel/PowerPoint.

Responsibilities

• Oversee end-to-end vulnerability management across on-premises and cloud assets.
• Coordinate incident response activities with stakeholders and management.
• Manage CDN and WAF operations and review security alerts.
• Maintain security governance, risk tracking and compliance records.
• Generate operational security reports and dashboards for leadership.
• Manage contracts related to security and audit services.

Skills

Coordination

Analytical thinking

Verbal & written communication

Teamwork

Attention to detail

Multitasking

Education

Studies in Infrastructure or Cybersecurity

Tools

Wiz

Tenable

Trend Micro

Microsoft Azure

Dynamics 365

Job description

What the role is

The Infrastructure Security Officer is responsible for supporting NParks' day-to-day infrastructure security operations, vulnerability management activities, incident response coordination, security service management, and compliance monitoring across both on-premises and Azure/Dynamics environments. The role requires close collaboration with infrastructure, application, facilities management, and external service providers to ensure security issues are identified, tracked, and remediated in a timely manner. The incumbent will play an operational role in maintaining the organisation's cybersecurity posture, ensuring compliance with government security requirements, and supporting continuous improvement of security and infrastructure processes and controls.

What you will be working on

• Vulnerability Management Manage the end-to-end vulnerability management process across on-premises infrastructure, servers, endpoints, applications, Azure/Dynamics/ESRI/SaaS environments from initial discovery through to final closure, to ensure that vulnerabilities are addressed within NParks' service levels. Support the onboarding of hardware, network, software assets for vulnerability monitoring, as well as the setup and daily operations of such systems. Support the setup, onboarding and daily management of privileged IDs within privileged identity management systems. Coordinate periodic status updates and remediation tracking exercises with infrastructure, application, and support teams. Track and manage outstanding vulnerabilities, risk acceptance requests, and remediation exceptions. Analyse vulnerability data to identify trends, recurring issues, and areas requiring additional attention. Escalate overdue or high-risk vulnerabilities to relevant stakeholders and management. Support security audits, compliance assessments, and reporting activities by providing required vulnerability management evidence and documentation. Ensure remediation activities comply with IM8 requirements, internal policies, and cybersecurity standards.
• Security Incident Response Support Working with the CISO (Chief Information Security Officer) and the Infrastructure Team, coordinate and drive the following activities during cybersecurity, data, or resilience incidents: Coordinate incident response activities in collaboration with stakeholders and affected parties, including identification, escalation, containment, recovery, post-incident review. Maintain accurate incident documentation. Drive post-incident reviews to identify lessons learnt and measures to prevent recurrence. Track incident trends and recommend operational improvements to enhance security effectiveness. Ensure incident management processes are executed in accordance with established security procedures and governance requirements.
• DDoS and Web Application Firewall (WAF) Operations Manage the operations of the Content Delivery Network (CDN) service and its associated web application firewall which protects NParks' Internet-facing applications. Coordinate with service providers and stakeholders to ensure the effectiveness of deployed security controls. Review security alerts, attack reports, and service performance metrics to identify potential risks and improvement opportunities. Drive WAF policy reviews, rule updates, and change requests in accordance with operational needs. Initiate and manage investigations upon detecting abnormal or suspicious traffic. Track service issues and follow up with vendors to ensure timely resolution. Recommend operational improvements to enhance security effectiveness.
• Security and Infrastructure Operations Coordination Coordinate infrastructure security operational activities across multiple stakeholders within and outside NParks. Maintain security risk, remediation, and compliance tracking registers. Follow up on action items arising from vulnerability assessments, incidents, audits, and service reviews. Support security governance activities through effective communication and collaboration with stakeholders. Escalate operational issues, delays, and security risks where required. Ensure infrastructure security processes are executed consistently and effectively.
• Reporting and Compliance Monitoring Collect, consolidate, and analyse vulnerability, incident, compliance, and operational security data. Prepare regular operational reports, dashboards, and management updates on cybersecurity posture and remediation progress. Monitor compliance with prescribed security requirements, policies, and standards. Produce metrics and reports on vulnerability remediation, incident management, patch compliance, and security service performance. Support management review meetings by providing timely and accurate cybersecurity status updates. Assist in audit preparation activities and coordinate the collection of supporting evidence and documentation.
• Contract Management Manage contracts related to security and audit services.

What we are looking for

Areas of study in Infrastructure, Cybersecurity or related fields. Relevant Experience Minimum of two years' experience in vulnerability management and related operations. Experience working with vulnerability management platforms, such as Wiz, Tenable, TrendMicro, including setup, alert management and daily operations, or similar platforms. Experience in planning and implementing security alerts in Microsoft Azure environment. Experience in coordinating cybersecurity incidents and remediation activities. Experience in planning, implementing and optimising firewall rules for applications. Experience in implementing security policies and translating policy requirements into operational controls. Technical Knowledge Strong technical knowledge of operating systems and associated utilities, scripting, networks and network devices, with the ability to develop solutions that meet security requirements in an infrastructure environment. Clear understanding of vulnerability management processes. Familiarity with cybersecurity frameworks and standards such as IM8, NIST, ISO 27001, CIS Controls, or equivalent. Proficiency in Microsoft Office applications, particularly Excel and PowerPoint, for reporting and analysis. Soft Skills Strong coordination and stakeholder management skills. Good analytical and problem-solving capabilities. Effective verbal and written communication skills. Ability to work independently and collaboratively within a team environment. Strong organizational skills with attention to detail. Ability to manage multiple tasks and priorities in a dynamic operational environment. Preferred Certifications Microsoft Azure and/or Dynamics 365 Certifications Certifications related to vulnerability management tools. Relevant cybersecurity, infrastructure, or security operations certifications.

Only shortlisted candidates will be notified.

Successful candidate will be employed on 2-year contract.

http://jobs.careers.gov.sg

The Singapore Public Service plays a key role in the economic growth, progress and stability of Singapore by formulating and implementing government policies, as well as providing key public services. Whether you are a fresh graduate joining the workforce or an experienced professional, the Singapore Public Service offers a great variety of job opportunities for you. The work in the Public Service can be broadly categorised into the following sectors: Economic, Social, Security & External Relations, and Administration & Corporate Development. Be part of the team that shapes the future of Singapore. Log on and take your first step towards a career that matters!