Senior Security Administrator

NCS Pte Ltd; Singapore; On-site; SGD 120,000 - 150,000; Full time

Job summary

NCS Pte Ltd is seeking a Cloud Security Administrator to oversee security posture of cloud environments, manage incidents, conduct vulnerability reviews, and ensure regulatory compliance across Azure-based platforms in APAC. You will collaborate with development teams, security consultants, and stakeholders to assess risks, remediate findings, and strengthen controls through testing and monitoring.

The ideal candidate has 5+ years of security experience, holds CISSP/CISA/CISM or equivalent,

Qualifications

• Experience reviewing software security and development processes.
• Proven ability to assess risks, design mitigations and verify fixes.
• Familiarity with Azure cloud platform and network security.

Responsibilities

• Manage security incident response and monthly reporting.
• Lead vulnerability management and remediation.
• Ensure compliance with EC3S/IM8 and other regulatory standards.
• Coordinate with third-party security consultants and internal teams.

Skills

Cloud security

Security incident management

Vulnerability assessment

DevSecOps practices

Communication and collaboration

Education

CISSP

CISA

CISM

Tools

Sentinel

Azure Monitor

Trend Micro

Defender

Carbon Black

Job description

NCS is a leading technology services firm that operates across the Asia Pacific region in over 20 cities, providing consulting, digital services, technology solutions, and more. We believe in harnessing the power of technology to achieve extraordinary things, creating lasting value and impact for our communities, partners, and people. Our diverse workforce of 14,000 has delivered large-scale, mission-critical, and multi-platform projects for governments and enterprises in Singapore and the APAC region.

Job Description

The Cloud Security Administrator is responsible for managing and maintaining the security posture of cloud-based systems and services. This role oversees security incident management, vulnerability management, compliance reviews, and security operations reporting, ensuring adherence to organizational policies and regulatory requirements. The engineer works closely with development teams, third-party security consultants, and stakeholders to assess risks, remediate vulnerabilities, conduct security testing and exercises, and continuously strengthen cybersecurity controls across the cloud environment

Responsibilities

• Security Admin is responsible for the Security Incident Management and reporting and Security operation monthly reporting to Authority.
• Generate monthly security reports to be included into the O&M monthly progress reports.
• Review Ship-Hats Vulnerability reports during System Enhancements (SR implementations) and guide developers to fix the vulnerability issues and answer LTA for any vulnerability justifications.
• Review the compliance of the EC3S system with the IM8 policy.
• Host third-party security consultants during annual VAPT and follow up on rectification actions based on VAPT reports.
• Any Host Configuration issues found during annual VAPT, security engineer review and fix the issues
• Conduct Annual Table Top Exercise to strengthen cybersecurity practices
• Review Risk Register on monthly basis and conduct Annual Risk Register Review along with LTA project team
• Manage ad-hoc security incidents'
• The Security Administrator's responsibilities shall comprise minimally all Network Security Group, Security Logging, Log Reviews, PIM Administration, Audits and any other security-related work.

Qualifications

• At least five (5) years of experience in performing reviews of software security, software development processes and other security-related works.
• Possess industry accepted security certifications (such as Certified Information Systems Security Professional (CISSP) and Certified Information Systems Auditor (CISA), Certified Information Systems Manager(CISM) or equivalent).
• Strong understanding of Azure cloud platform, Network security, Container Security, firewalls, VPCs, VPNs
• Hands-on experience with Cloud security tools such as sentinel, Azure Monitor, Trend Micro, Defender and carbon black
• DevSecOps practices (CI/CD security, SAST/DAST)
• Effective communication, interpersonal and analytical skills.
  

Additional Information

We are driven by our AEIOU beliefs-Adventure, Excellence, Integrity, Ownership, and Unity and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.

Together, we make the extraordinary happen.

Learn more about us at ncs.co and visit our LinkedIn career site.

We are driven by our AEIOU beliefs-Adventure, Excellence, Integrity, Ownership, and Unity and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.

Together, we make the extraordinary happen.

Learn more about us at ncs.co and visit our LinkedIn career site.