- Singapore
JOBSTER PRIVATE LTD. Hiring! Full Time IT Security Officer - #1715 in , Earn up to SGD 10,500 - Ricebowl
Share
Save
Working Location
Job Description
Responsibilities
Position Overview
The IT Security Officer is responsible for supporting NParks' day-to-day cybersecurity operations, vulnerability management activities, incident response coordination, security service management, and compliance monitoring across both on-premises and cloud environments. The role requires close collaboration with infrastructure, application, facilities management, and external service providers to ensure security risks are identified, tracked, and remediated in a timely manner.
The incumbent will play an operational role in maintaining the organization's cybersecurity posture, ensuring compliance with government security requirements, and supporting continuous improvement of security and infra processes and controls.
Key Responsibilities
Vulnerability Management
Coordinate vulnerability management activities across on-premises infrastructure, servers, endpoints, applications, and Azure cloud environments.
Utilize security tools such as Vulnerability Management Systems (VMS), TenableOne, Cloudscape, and related platforms to identify, assess, and monitor security vulnerabilities.
Conduct regular reviews of vulnerability assessment results and patch compliance reports to identify remediation priorities.
Coordinate periodic status updates and remediation tracking exercises with infrastructure, application, and support teams.
Monitor patching progress and ensure vulnerabilities are remediated within defined timelines and compliance requirements.
Track and manage outstanding vulnerabilities, risk acceptance requests, and remediation exceptions.
Analyse vulnerability data to identify trends, recurring issues, and areas requiring additional attention.
Escalate overdue or high-risk vulnerabilities to relevant stakeholders and management.
Support security audits, compliance assessments, and reporting activities by providing required vulnerability management evidence and documentation.
Ensure remediation activities comply with IM8 requirements, internal policies, and cybersecurity standards.
Security Incident Response Support
Support cybersecurity incident response activities in collaboration with the CISO, Infrastructure Team, and security service providers.
Coordinate incident investigations and facilitate communications among relevant technical and business stakeholders.
Assist in the identification, escalation, containment, recovery, and closure of cybersecurity incidents.
Maintain accurate incident records, logs, and supporting documentation.
Follow up on remediation activities arising from security incidents and ensure completion within agreed timelines.
Participate in incident review sessions and support the implementation of lessons learned and process improvements.
Monitor incident trends and recommend operational improvements to enhance security effectiveness.
Ensure incident management processes are executed in accordance with established security procedures and governance requirements.
DDoS and Web Application Firewall (WAF) Operations
Support the operation and administration of DDoS mitigation and Web Application Firewall (WAF) services protecting NParks' Internet-facing applications.
Coordinate with service providers and internal stakeholders to ensure the effectiveness of deployed security controls.
Review security alerts, attack reports, and service performance metrics to identify potential risks and improvement opportunities.
Facilitate WAF policy reviews, rule updates, and change requests in accordance with operational requirements.
Support investigations involving web application attacks, suspicious traffic, and DDoS-related events.
Track service issues and follow up with vendors to ensure timely resolution.
Assist in service reviews and operational assessments of DDoS and WAF solutions.
Security and Infra Operations Coordination
Coordinate cybersecurity and infra operational activities across application teams, infrastructure teams, Onsite FM teams, GCC FM teams, and external security vendors.
Maintain security risk, remediation, and compliance tracking registers.
Follow up on action items arising from vulnerability assessments, incidents, audits, and service reviews.
Support security governance activities through effective communication and collaboration with stakeholders.
Escalate operational issues, delays, and security risks where required.
Ensure cybersecurity and infra operational processes are executed consistently and effectively.
Reporting and Compliance Monitoring
Collect, consolidate, and analyse vulnerability, incident, compliance, and operational security data.
Prepare regular operational reports, dashboards, and management updates on cybersecurity posture and remediation progress.
Monitor compliance against prescribed security requirements, policies, and standards.
Produce metrics and reports on vulnerability remediation, incident management, patch compliance, and security service performance.
Support management review meetings by providing timely and accurate cybersecurity status updates.
Assist in audit preparation activities and coordinate the collection of supporting evidence and documentation.
Requirements
Qualifications
Diploma or Degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field.
Experience
Minimum 2–5 years of experience in IT security operations, cybersecurity operations, vulnerability management, or related IT security functions.
Experience working with vulnerability management tools such as Tenable, or equivalent solutions.
Exposure to Microsoft Azure security and cloud environments is advantageous.
Experience coordinating cybersecurity incidents and remediation activities.
Familiarity with DDoS protection and WAF technologies is preferred.
Experience supporting compliance and governance requirements within enterprise or public-sector environments is advantageous.
Technical Knowledge
Understanding of cybersecurity, infra operations and security monitoring practices.
Knowledge of vulnerability management and patch management processes.
Familiarity with cybersecurity frameworks and standards such as IM8, NIST, ISO 27001, CIS Controls, or equivalent.
Basic understanding of network, server, application, and cloud security concepts.
Proficiency in Microsoft Office applications, particularly Excel and PowerPoint, for reporting and analysis.
Soft Skills
Strong coordination and stakeholder management skills.
Good analytical and problem-solving capabilities.
Effective verbal and written communication skills.
Ability to work independently and collaboratively within a team environment.
Strong organizational skills with attention to detail.
Ability to manage multiple tasks and priorities in a dynamic operational environment.
Preferred Certifications
Azure Cloud Certifications
CompTIA Security+
Microsoft Security Certifications
CEH (Certified Ethical Hacker)
ISC2 CC (Certified in Cybersecurity)
CISSP or CISM (advantageous but not mandatory)
Jobster Private Ltd
At Jobster Private Ltd, we connect great people with great opportunities. As a trusted recruitment and manpower outsourcing partner in Singapore, we support hundreds of professionals like you across industries—from IT and engineering to finance, customer service, and beyond.
We’re not just about placements—we’re about partnership. Your career matters to us.
Why Join Us
When you join Jobster, you don’t just get a job—you get a team behind you.
Career Growth Support
We help you build your career with meaningful roles, skill development opportunities, and guidance along the way.
Quality Job Openings
We work with reputable companies offering a wide range of roles in IT, tech support, project management, data analysis, and more.
Competitive Salaries
We advocate for you—negotiating fair, competitive salaries and making sure you’re valued for your skills.
Ongoing Care
From onboarding to payroll, performance feedback to career advice—we’re with you throughout your journey, not just at the start.
Trust & Transparency
Licensed by MOM, certified in data protection, and committed to your success.
The IT Security Officer is responsible for supporting NParks' day-to-day cybersecurity operations, vulnerability management activities, incident response coordination, security service management, and compliance monitoring across both on-premises and cloud environments. The role requires close collaboration with infrastructure, application, facilities management, and external service providers to ensure security risks are identified, tracked, and remediated in a timely manner.
The incumbent will play an operational role in maintaining the organization's cybersecurity posture, ensuring compliance with government security requirements, and supporting continuous improvement of security and infra processes and controls.
Key Responsibilities
Vulnerability Management
Coordinate vulnerability management activities across on-premises infrastructure, servers, endpoints, applications, and Azure cloud environments.
Utilize security tools such as Vulnerability Management Systems (VMS), TenableOne, Cloudscape, and related platforms to identify, assess, and monitor security vulnerabilities.
Conduct regular reviews of vulnerability assessment results and patch compliance reports to identify remediation priorities.
Coordinate periodic status updates and remediation tracking exercises with infrastructure, application, and support teams.
Monitor patching progress and ensure vulnerabilities are remediated within defined timelines and compliance requirements.
Track and manage outstanding vulnerabilities, risk acceptance requests, and remediation exceptions.
Analyse vulnerability data to identify trends, recurring issues, and areas requiring additional attention.
Escalate overdue or high-risk vulnerabilities to relevant stakeholders and management.
Support security audits, compliance assessments, and reporting activities by providing required vulnerability management evidence and documentation.
Ensure remediation activities comply with IM8 requirements, internal policies, and cybersecurity standards.
Security Incident Response Support
Support cybersecurity incident response activities in collaboration with the CISO, Infrastructure Team, and security service providers.
Coordinate incident investigations and facilitate communications among relevant technical and business stakeholders.
Assist in the identification, escalation, containment, recovery, and closure of cybersecurity incidents.
Maintain accurate incident records, logs, and supporting documentation.
Follow up on remediation activities arising from security incidents and ensure completion within agreed timelines.
Participate in incident review sessions and support the implementation of lessons learned and process improvements.
Monitor incident trends and recommend operational improvements to enhance security effectiveness.
Ensure incident management processes are executed in accordance with established security procedures and governance requirements.
DDoS and Web Application Firewall (WAF) Operations
Support the operation and administration of DDoS mitigation and Web Application Firewall (WAF) services protecting NParks' Internet-facing applications.
Coordinate with service providers and internal stakeholders to ensure the effectiveness of deployed security controls.
Review security alerts, attack reports, and service performance metrics to identify potential risks and improvement opportunities.
Facilitate WAF policy reviews, rule updates, and change requests in accordance with operational requirements.
Support investigations involving web application attacks, suspicious traffic, and DDoS-related events.
Track service issues and follow up with vendors to ensure timely resolution.
Assist in service reviews and operational assessments of DDoS and WAF solutions.
Security and Infra Operations Coordination
Coordinate cybersecurity and infra operational activities across application teams, infrastructure teams, Onsite FM teams, GCC FM teams, and external security vendors.
Maintain security risk, remediation, and compliance tracking registers.
Follow up on action items arising from vulnerability assessments, incidents, audits, and service reviews.
Support security governance activities through effective communication and collaboration with stakeholders.
Escalate operational issues, delays, and security risks where required.
Ensure cybersecurity and infra operational processes are executed consistently and effectively.
Reporting and Compliance Monitoring
Collect, consolidate, and analyse vulnerability, incident, compliance, and operational security data.
Prepare regular operational reports, dashboards, and management updates on cybersecurity posture and remediation progress.
Monitor compliance against prescribed security requirements, policies, and standards.
Produce metrics and reports on vulnerability remediation, incident management, patch compliance, and security service performance.
Support management review meetings by providing timely and accurate cybersecurity status updates.
Assist in audit preparation activities and coordinate the collection of supporting evidence and documentation.
Requirements
Qualifications
Diploma or Degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field.
Experience
Minimum 2–5 years of experience in IT security operations, cybersecurity operations, vulnerability management, or related IT security functions.
Experience working with vulnerability management tools such as Tenable, or equivalent solutions.
Exposure to Microsoft Azure security and cloud environments is advantageous.
Experience coordinating cybersecurity incidents and remediation activities.
Familiarity with DDoS protection and WAF technologies is preferred.
Experience supporting compliance and governance requirements within enterprise or public-sector environments is advantageous.
Technical Knowledge
Understanding of cybersecurity, infra operations and security monitoring practices.
Knowledge of vulnerability management and patch management processes.
Familiarity with cybersecurity frameworks and standards such as IM8, NIST, ISO 27001, CIS Controls, or equivalent.
Basic understanding of network, server, application, and cloud security concepts.
Proficiency in Microsoft Office applications, particularly Excel and PowerPoint, for reporting and analysis.
Soft Skills
Strong coordination and stakeholder management skills.
Good analytical and problem-solving capabilities.
Effective verbal and written communication skills.
Ability to work independently and collaboratively within a team environment.
Strong organizational skills with attention to detail.
Ability to manage multiple tasks and priorities in a dynamic operational environment.
Preferred Certifications
Azure Cloud Certifications
CompTIA Security+
Microsoft Security Certifications
CEH (Certified Ethical Hacker)
ISC2 CC (Certified in Cybersecurity)
CISSP or CISM (advantageous but not mandatory)
Jobster Private Ltd
At Jobster Private Ltd, we connect great people with great opportunities. As a trusted recruitment and manpower outsourcing partner in Singapore, we support hundreds of professionals like you across industries—from IT and engineering to finance, customer service, and beyond.
We’re not just about placements—we’re about partnership. Your career matters to us.
Why Join Us
When you join Jobster, you don’t just get a job—you get a team behind you.
Career Growth Support
We help you build your career with meaningful roles, skill development opportunities, and guidance along the way.
Quality Job Openings
We work with reputable companies offering a wide range of roles in IT, tech support, project management, data analysis, and more.
Competitive Salaries
We advocate for you—negotiating fair, competitive salaries and making sure you’re valued for your skills.
Ongoing Care
From onboarding to payroll, performance feedback to career advice—we’re with you throughout your journey, not just at the start.
Trust & Transparency
Licensed by MOM, certified in data protection, and committed to your success.
Important Information
Never provide your bank or credit card details when applying for jobs. Do not transfer any money or complete unrelated online surveys. If you see something suspicious, Report this Job ad.
Learn More