全职 IT Security Officer 工作, 薪水, GOLDTECH RESOURCES PTE LTD 公司招聘中 - Ricebowl

Job Overview

We are looking for a Cybersecurity Operations Specialist to support and strengthen day-to-day security operations across enterprise IT and cloud environments.

You will be responsible for identifying and tracking security vulnerabilities, coordinating remediation activities, supporting cybersecurity incidents and monitoring key security services. The role will work closely with infrastructure, application and security teams, as well as external service providers, to ensure security risks are addressed effectively and within required timelines.

Key Responsibilities

Vulnerability & Patch Management

• Manage and coordinate vulnerability assessment and remediation activities across servers, endpoints, applications, network infrastructure and cloud environments.
• Use vulnerability assessment platforms such as Tenable/TenableOne or equivalent tools to identify and track security weaknesses.
• Review vulnerability scan results and patching status to determine remediation priorities.
• Work with technical teams to track vulnerabilities through to closure within agreed timelines.
• Monitor outstanding security findings, remediation exceptions and risk acceptance items.
• Identify recurring vulnerabilities and highlight high-risk or overdue issues for further action.
• Maintain supporting records and evidence for security reviews and audits.

Cybersecurity Incident Management

• Support the investigation and coordination of cybersecurity incidents.
• Work with internal technical teams and security service providers during incident investigation, containment and recovery.
• Coordinate escalation and communication of security incidents to relevant stakeholders.
• Maintain proper incident records and supporting documentation.
• Track corrective and preventive actions following security incidents.
• Participate in post-incident reviews and support improvements to security processes and controls.

DDoS & Web Security

• Support operational activities relating to DDoS protection and Web Application Firewall (WAF) services.
• Review security alerts, suspicious traffic and attack information.
• Coordinate WAF configuration and rule change requests with relevant teams and service providers.
• Assist with investigations involving web-based attacks and DDoS events.
• Monitor vendor/service-provider actions and follow up on outstanding security issues.

Security Operations & Coordination

• Coordinate cybersecurity activities across infrastructure, application, facilities and external service-provider teams.
• Maintain security risk, remediation and compliance records.
• Follow up on actions arising from vulnerability assessments, security incidents, audits and service reviews.
• Escalate significant security risks and overdue remediation activities where required.
• Support improvements to security and infrastructure operational processes.

Security Reporting & Compliance

• Consolidate and analyze information relating to vulnerabilities, incidents, patching and security compliance.
• Prepare regular security dashboards, operational reports and management updates.
• Monitor adherence to established cybersecurity policies, standards and control requirements.
• Support cybersecurity audits and assessments by coordinating required documentation and evidence.
• Support security governance requirements aligned with frameworks such as IM8, NIST, ISO 27001 and CIS Controls.

Requirements

• Diploma or Degree in Cybersecurity, Information Technology, Computer Science, Information Systems or a related discipline.
• Minimum 2 to 5 years of relevant experience in cybersecurity operations, IT security, vulnerability management or a related area.
• Experience using vulnerability assessment tools such as Tenable/TenableOne or equivalent platforms.
• Good understanding of vulnerability management, patch management and remediation processes.
• Experience supporting or coordinating cybersecurity incident response activities.
• Good understanding of network, server, application and cloud security fundamentals.
• Exposure to Microsoft Azure security would be an advantage.
• Knowledge of DDoS protection and Web Application Firewall (WAF) technologies would be advantageous.
• Familiarity with security frameworks or standards such as IM8, NIST, ISO 27001 or CIS Controls.
• Experience supporting cybersecurity governance, compliance or audit activities would be advantageous.
• Proficient in Microsoft Excel and PowerPoint for reporting and analysis.
• Strong analytical, problem-solving and coordination skills.
• Good communication and stakeholder management skills.
• Able to manage multiple priorities and work effectively with internal teams and external service providers.

Preferred Certifications

• CompTIA Security+
• Microsoft Azure / Security certifications
• ISC2 Certified in Cybersecurity (CC)
• CEH
• CISSP or CISM would be an advantage

Please send your detailed resume in MS Word format to ************* with

• Education Level
• Working experiences
• Each employment background
• Reason for leaving each employment
• Last drawn salary
• Expected salary
• Date of availability