全职 IT Security Officer (ITSO) 工作, 薪水 up to SGD 9,500, SEDHA CONSULTING PTE. LTD. 公司招聘中 - Ricebowl

ITSecurity Officer (ITSO)

In this role, you will helpensure that vulnerabilities and exposures across our environment areidentified, validated, and remediated in a timely manner. You will work closelywith system owners and report findings, helping to keep our risk posture visibleand well-managed.

Attack Surface Monitoring, Vulnerability Scanning, and Triage

Monitor and triage findings surfaced by our Attack Surface

Management (ASM) and Vulnerability Management tools

Assess each finding for validity, severity, and exploitability before escalating or acting on it

Distinguish genuine exposures from false positives and contextualise findings against our asset inventory

Prioritise remediation efforts based on risk

Remediation Workflow Management

Work with system owners to follow up on outstanding findings

Track remediation progress and ensure findings are resolved in a timely manner

Manage exceptions and risk acceptance where remediation is not immediately feasible

Communicate clearly with non-technical stakeholders, translating technical findings into actionable guidance

Reporting & Insights

Consolidate vulnerability data and remediation metrics for reporting

Identify trends and surface systemic issues across the organisation's attack surface and internal asset landscape

Provide recommendations to improve our overall exposure management programme

Process Improvement

Contribute to the refinement of ASM and vulnerability management processes, tooling configurations, and escalation playbooks over time

Support the development and maintenance of vulnerability management policies, standards, and procedures in alignment with industry best practices

Prerequisites

Bachelor’s Degree in Computer Science/Information Security or equivalent

Professional certifications, including GWEB, OSCP, CRISC, CISA or other relevant certifications will be preferred

Preferably 5 years of experience in a relevant cybersecurity function, such as vulnerability management, attack surface management, security operations, or IT risk

Strong understanding of cybersecurity concepts, particularly around vulnerability management, patch management, common vulnerability scoring frameworks (eg CVSS), and external-facing attack surface risks

Familiarity with ASM or vulnerability management tools (such as Tenable, Qualys, Censys, or similar)

Proficiency in programming languages such as Python will be advantageous

Strong analytical and judgement skills, with the ability to think critically and make sound recommendations

Good communication and interpersonal skills, with the ability to multitask, prioritise, and translate technical findings

Meticulous, with a high degree of integrity, initiative, and energy

At Sedha Consulting, we harness the power of technology to drive business growth and transformation. Sedha Consulting is a professional services company operating across Asia Pacific with leading capabilities in digital, cloud, and security. Combining unmatched experience and specialized skills, we offer Advisory, Consulting, Project Delivery, Managed Services, Training and Resourcing. With a strong focus on driving digital transformation, we leverage cutting-edge technologies to help businesses across industries achieve their goals and thrive in today's rapidly evolving digital landscape.