Security Engineer (IT)

Focal Search Pte Ltd; Singapore; On-site; SGD 70,000 - 90,000; Full time

Job summary

A prominent recruitment agency in Singapore is looking for an experienced cyber security professional to assess risks, evaluate solutions, and ensure compliance with relevant IT security laws. Candidates should hold a bachelor's degree in IT or cybersecurity and have a minimum of three years' experience in risk management. Familiarity with security technologies and relevant certifications like CISA or CISSP will be advantageous. This role supports the organization in maintaining robust security protocols and technologies.

Qualifications

• A minimum of three years' experience in risk management, compliance, and IT security.
• Comprehensive knowledge of frameworks and techniques related to IT security.
• A working understanding of pertinent IT security standards and laws.

Responsibilities

• Assess threats, hazards, and vulnerabilities on a regular basis.
• Evaluate solutions and technology in light of cyber security standards.
• Recognize, evaluate, and rank the risks to IT security.
• Creates and manages the application of controls and strategies for risk mitigation.
• Keep the organization's risk register up to date and maintained.
• Look into security incidents and put the right answers in place.

Skills

Risk management

Compliance

IT security

Security technologies knowledge

Programming (PHP, C++, Java)

Education

Bachelor's degree in information technology, cybersecurity, or a similar discipline

Tools

Vulnerability scanners

SIEM

IDS/IPS

Job description

• Assess threats, hazards, and vulnerabilities on a regular basis.
• Evaluate solutions and technology in light of cyber security standards.
• Recognize, evaluate, and rank the risks to IT security.
• Creates and manages the application of controls and strategies for risk mitigation.
• Keep the organization's risk register up to date and maintained.
• Keep an eye out for questionable activity in security logs and events.
• Keep an eye on possible data loss occurrences, take precautions against them, and look into any suspicions.
• Look into security incidents and put the right answers in place.
• Take part in simulations and exercises related to incident response.
• Support the implementation and upkeep of security technologies and tools.
• Collaborate closely to advance security best practices and awareness with IT operations, development, and other business groups.
• Keep abreast of applicable IT security laws and guidelines (e.g., PCI-DSS, ITRM, IM8, etc).
• Create and put into effect security guidelines and protocols.
• Observe and check compliance-related actions.

Qualifications:

• A bachelor's degree in information technology, cybersecurity, or a similar discipline (or comparable experience).
• A minimum of three years' experience in risk management, compliance, and IT security.
• Comprehensive knowledge of frameworks, techniques, and ideas related to IT security.
• A working understanding of pertinent IT security standards and laws.
• Knowledge of security technologies and tools, such as vulnerability scanners, SIEM, and IDS/IPS.
• Having a CISA, CISM, or CISSP certification will be advantageous.
• Programming experience with PHP, C++, and Java will be beneficial.