IT Security (ITSO)

🔒 We're Hiring: IT Security Officer (ITSO)! 🔒

We are looking for a talented and detail-oriented IT Security Officer to join our team. The ideal candidate will have at least 4 years of experience in IT security, strong analytical skills, and a passion for protecting organizational assets. You'll play a key role in safeguarding our systems and ensuring compliance with security policies.

📍 Location: Singapore, Singapore

⏰ Work Mode: Work from Office

💼 Role: IT Security (ITSO)

Job Description

Vulnerability Management

• - Assist in vulnerability scanning and assessments to identify security weaknesses within the client’s environment.
• - Help prioritize and track remediation efforts based on the severity and impact of vulnerabilities.
• - Collaborate with internal teams to ensure that identified vulnerabilities are mitigated in a timely manner.
• - Provide regular vulnerability reports and updates to the Senior IT Security Manager.

Firewall Rules Review and Management

• - Support the periodic review of firewall rules to ensure proper access control and network segmentation.
• - Work closely with network and infrastructure teams to assess and adjust firewall configurations as needed to enhance security.
• - Assist in ensuring that firewall rules comply with internal policies and regulatory requirements.

Audit Support

• - Assist in preparing for and supporting internal and external security audits.
• - Provide documentation, logs, and reports to auditors and ensure timely responses to audit requests.
• - Help track and resolve audit findings, ensuring corrective actions are implemented to meet compliance requirements.
• - Support the maintenance of audit trails for critical security events and activities.

Identity and Access Management (ID Validation)

• - Assist with user identity validation processes, ensuring proper authentication mechanisms are in place.
• - Support the enforcement of access control policies to ensure that only authorized personnel have access to sensitive data and systems.
• - Help monitor and audit user access rights, ensuring they align with role-based access controls and least privilege principles.

Security Awareness Training

• - Assist in the development and delivery of security awareness training programs for client employees and internal teams.
• - Help create educational materials to raise awareness about common cybersecurity threats (e.g., phishing, social engineering).
• - Track training progress and ensure all employees are regularly updated on security best practices.
• - Support client-facing initiatives to promote a culture of cybersecurity within the organization.

Security Advisory Support

• - Provide support for security advisory services by gathering information on emerging threats and vulnerabilities.
• - Assist the Senior IT Security Manager in providing recommendations for mitigating risks associated with new and emerging security threats.
• - Help maintain a repository of security advisories, updates, and patches, ensuring timely distribution to relevant stakeholders.

Incident Response

• - Support the investigation and response to security incidents, gathering data and providing initial analysis.
• - Help escalate security incidents and assist in documentation and resolution.
• - Participate in post-incident reviews to identify lessons learned and areas for process improvement.

Risk Management and Compliance

• - Help in conducting risk assessments to identify potential security risks and recommend mitigation strategies.
• - Assist with ensuring the client’s environment remains compliant with industry standards and regulations.
• - Contribute to the maintenance of security policies, procedures, and controls to ensure compliance and mitigate risks.

Collaboration and Communication

• - Work closely with other IT Security team members to implement and enforce security policies and practices.
• - Communicate effectively with internal teams and client stakeholders about security status, risks, and incidents.
• - Provide support in preparing reports, presentations, and security briefings for senior management and clients.

Continuous Learning and Improvement

• - Stay up-to-date on the latest trends in cybersecurity, including new tools, vulnerabilities, and attack techniques.
• - Participate in ongoing professional development to expand security knowledge and skills.
• - Assist in identifying and implementing improvements to existing security processes, policies, and tools.

Qualifications

Education:

• - Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field.
• - Relevant certifications such as CISM, CISA, CompTIA Security+, Certified Ethical Hacker (CEH), or equivalent are a plus.
• - Min 2 years of experience in IT security, cybersecurity, or a related field.
• - Hands-on experience or familiarity with vulnerability scanning tools, firewall rule configurations, and identity management systems.
• - Experience or exposure to supporting security audits and compliance processes.
• - Familiarity with network security concepts, SIEM systems, and basic incident response protocols is a plus.
• - Understanding of IT security principles and best practices.
• - Basic knowledge of security tools such as firewalls, antivirus software, IDS/IPS, and SIEM systems.
• - Familiarity with security frameworks (e.g., NIST, ISO 27001, CIS Controls).
• - Strong analytical and troubleshooting skills.
• - Good written and verbal communication skills.
• - Ability to work effectively in a team and manage tasks in a dynamic environment.