全职 IT Security Officer (Singaporean Only) 工作, 薪水 up to SGD 7,500, Opus IT Services Pte Ltd 公司招聘中 - Ricebowl

Location: Cluny Road (Near to Botanic Gradens MRT)
Employment Type: Contract
Contract Period: until 31 March 2027 with 1 year renewal potential
Working Hours: Monday – Friday, 9:00 AM – 6:00 PM
Basic Salary: $6,500 – $7,500

Key Responsibilities

1. Vulnerability Management

• Coordinate vulnerability management activities across infrastructure, servers, endpoints, applications and Azure cloud environments.
• Utilize vulnerability management platforms such as TenableOne, VMS, Cloudscape and other relevant security tools to identify and monitor vulnerabilities.
• Review vulnerability assessment and patch compliance reports to identify remediation priorities.
• Coordinate remediation activities and status updates with infrastructure, application and support teams.
• Monitor patching progress and ensure vulnerabilities are addressed within defined timelines.
• Track outstanding vulnerabilities, risk acceptance requests and remediation exceptions.
• Analyze vulnerability data to identify recurring issues, trends and areas requiring further attention.
• Escalate overdue or high-risk vulnerabilities to relevant stakeholders and management.
• Support security audits and compliance assessments by providing relevant vulnerability management evidence and documentation.
• Ensure remediation activities align with IM8 requirements, internal policies and cybersecurity standards.

2. Security Incident Response Support

• Support cybersecurity incident response activities in collaboration with the CISO, Infrastructure Team and external security service providers.
• Coordinate incident investigations and facilitate communication between technical and business stakeholders.
• Assist with the identification, escalation, containment, recovery and closure of cybersecurity incidents.
• Maintain accurate incident records, logs and supporting documentation.
• Follow up on remediation activities resulting from security incidents and ensure timely completion.
• Participate in incident review sessions and support the implementation of lessons learned.
• Monitor incident trends and recommend improvements to enhance security operations.
• Ensure incident management activities follow established security procedures and governance requirements.

3. DDoS & Web Application Firewall (WAF) Operations

• Support the operation and administration of DDoS mitigation and Web Application Firewall (WAF) services protecting Internet-facing applications.
• Coordinate with service providers and internal stakeholders to ensure security controls remain effective.
• Review security alerts, attack reports and service performance metrics to identify potential risks.
• Support WAF policy reviews, rule updates and change requests.
• Assist with investigations involving web application attacks, suspicious traffic and DDoS-related events.
• Track service issues and follow up with vendors to ensure timely resolution.
• Assist with service reviews and operational assessments of DDoS and WAF solutions.

4. Security & Infrastructure Operations Coordination

• Coordinate cybersecurity and infrastructure operational activities across application teams, infrastructure teams, FM teams and external security vendors.
• Maintain security risk, remediation and compliance tracking registers.
• Follow up on action items arising from vulnerability assessments, security incidents, audits and service reviews.
• Support security governance activities through effective stakeholder communication and coordination.
• Escalate operational issues, delays and security risks where required.
• Ensure security and infrastructure operational processes are carried out consistently and effectively.

5. Reporting & Compliance Monitoring

• Collect, consolidate and analyze vulnerability, incident, compliance and security operations data.
• Prepare regular operational reports, dashboards and management updates on cybersecurity posture and remediation progress.
• Monitor compliance with prescribed security requirements, policies and standards.
• Prepare metrics and reports covering vulnerability remediation, incident management, patch compliance and security service performance.
• Support management review meetings by providing accurate and timely cybersecurity updates.
• Assist with audit preparation and coordinate the collection of supporting evidence and documentation.

Job RequirementsQualifications

• Masters, Diploma or Degree in Information Technology, Cybersecurity, Computer Science, Information Systems or a related discipline.

Experience

• 2–5 years of relevant experience in IT security operations, cybersecurity operations, vulnerability management or related security functions.
• Experience with vulnerability management tools such as Tenable or equivalent solutions.
• Exposure to Microsoft Azure security and cloud environments is an advantage.
• Experience coordinating cybersecurity incidents and remediation activities.
• Familiarity with DDoS protection and WAF technologies is preferred.
• Experience supporting compliance and governance requirements within enterprise or public-sector environments is an advantage.

Technical Knowledge

• Good understanding of cybersecurity, infrastructure operations and security monitoring practices.
• Knowledge of vulnerability and patch management processes.
• Familiarity with cybersecurity frameworks and standards such as IM8, NIST, ISO 27001 and CIS Controls.
• Basic understanding of network, server, application and cloud security concepts.
• Proficient in Microsoft Office, particularly Excel and PowerPoint, for reporting and analysis.

Soft Skills

• Strong stakeholder coordination and communication skills.
• Good analytical and problem-solving abilities.
• Effective written and verbal communication skills.
• Able to work independently as well as collaboratively within a team.
• Strong organizational skills with good attention to detail.
• Able to manage multiple priorities effectively in a dynamic operational environment.

Preferred Certifications

The following certifications will be an advantage:

• Azure Cloud Certifications
• CompTIA Security+
• Microsoft Security Certifications
• CEH (Certified Ethical Hacker)
• ISC2 CC (Certified in Cybersecurity)
• CISSP or CISM

Pay: $6,500.00 - $7,500.00 per month

Work Location: In person