Security Officer (IT Infra and Security Operations) (Ref 24964)

Jobline Resources Pte Ltd; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

Jobline Resources Pte Ltd in Singapore seeks an IT security operations professional to coordinate vulnerability management across on‑prem and Azure, using VMS tools to identify and remediate vulnerabilities. You will support audits, governance, and incident response while maintaining remediation trackers and security dashboards.

The ideal candidate has 2–5 years in IT security roles, familiarity with IM8 and NIST, and strong reporting skills using Excel/PowerPoint.

Qualifications

• Diploma or degree in IT, cybersecurity, computer science, information systems, or related field.
• 2–5 years of experience in IT security operations, cybersecurity operations or vulnerability management.
• Experience with vulnerability management tools such as Tenable or equivalent.
• Familiarity with IM8, NIST, ISO 27001, CIS Controls or equivalent.
• Proficient in Excel and PowerPoint for reporting and analysis.
• Familiarity with DDoS protection and WAF technologies is preferred.
• Experience with Microsoft Azure security and cloud environments is advantageous.
• Preferred certifications: CompTIA Security+, Microsoft Security, CEH.

Responsibilities

• Coordinate vulnerability management activities across on‑prem, servers, endpoints, apps and Azure.
• Utilise VMS tools to identify, assess and monitor vulnerabilities.
• Review vulnerability results and patch reports to set remediation priorities.
• Monitor patch progress and ensure timely remediation.
• Support audits, compliance assessments and reporting with vulnerability evidence.
• Ensure remediation aligns with IM8 and cybersecurity standards.
• Assist incident response with CISOs and security teams.
• Coordinate remediation follow‑ups arising from incidents.
• Work with service providers and stakeholders to ensure effective controls.
• Facilitate WAF policy reviews and change requests.
• Support investigations of web app attacks, suspicious traffic and DDoS events.
• Assist in service reviews and operational assessments for DDoS/WAF.
• Coordinate cybersecurity & infra activities across application, infrastructure, FM teams and vendors.
• Maintain security risk, remediation, and compliance tracking registers.
• Contribute to security governance via stakeholder communication.
• Collect and analyze vulnerability, incident, compliance, and operational data.
• Prepare dashboards and updates on cybersecurity posture and remediation progress.
• Monitor compliance against security requirements and standards.
• Produce metrics on remediation, incidents and service performance.

Skills

IT security operations

Vulnerability management

Reporting & analysis

Cybersecurity knowledge

Education

Diploma or Degree in IT, Cybersecurity, CS, Information Systems

Tools

Tenable

VMS

Cloudscape

Azure security

Job description

Responsibilities

• Coordinate vulnerability management activities across on-premises infrastructure, servers, endpoints, applications, and Azure cloud environments.
• Utilise security tools such as Vulnerability Management Systems (VMS), TenableOne, Cloudscape, and related platforms to identify, assess, and monitor security vulnerabilities.
• Conduct regular reviews of vulnerability assessment results and patch compliance reports to identify remediation priorities.
• Monitor patching progress and ensure vulnerabilities are remediated within defined timelines and compliance requirements.
• Support security audits, compliance assessments, and reporting activities by providing required vulnerability management evidence and documentation.
• Ensure remediation activities comply with IM8 requirements, internal policies, and cybersecurity standards.
• Support cybersecurity incident response activities in collaboration with the CISO, Infrastructure Team, and security service providers.
• Follow up on remediation activities arising from security incidents and ensure completion within agreed timelines.
• Coordinate with service providers and internal stakeholders to ensure the effectiveness of deployed security controls.
• Facilitate WAF policy reviews, rule updates, and change requests in accordance with operational requirements.
• Support investigations involving web application attacks, suspicious traffic, and DDoS-related events.
• Assist in service reviews and operational assessments of DDoS and WAF solutions.
• Coordinate cybersecurity and infra operational activities across application teams, infrastructure teams, Onsite FM teams, GCC FM teams, and external security vendors.
• Maintain security risk, remediation, and compliance tracking registers.
• Support security governance activities through effective communication and collaboration with stakeholders.
• Collect, consolidate, and analyse vulnerability, incident, compliance, and operational security data.
• Prepare regular operational reports, dashboards, and management updates on cybersecurity posture and remediation progress.
• Monitor compliance against prescribed security requirements, policies, and standards.
• Produce metrics and reports on vulnerability remediation, incident management, patch compliance, and security service performance.
• Support management review meetings by providing timely and accurate cybersecurity status updates.

Requirements

• Diploma or Degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field.
• 2–5 years of experience in IT security operations, cybersecurity operations, vulnerability management, or related IT security functions.
• Experience working with vulnerability management tools such as Tenable, or equivalent solutions, coordinating cybersecurity incidents and remediation activities.
• Familiarity with cybersecurity frameworks and standards such as IM8, NIST, ISO 27001, CIS Controls, or equivalent.
• Proficiency in Microsoft Office applications, particularly Excel and PowerPoint, for reporting and analysis.
• Familiarity with DDoS protection and WAF technologies is preferred.
• Exposure to Microsoft Azure security and cloud environments is advantageous.
• Experience supporting compliance and governance requirements within enterprise or public-sector environments is advantageous.
• Preferred Certifications: CompTIA Security+ / Microsoft Security Certifications / CEH (Certified Ethical Hacker)

Shortlisted candidates will be offered a 6 Months agency contract employment.

Licence no: 12C6060