About the Role
We are looking for an IT Security Officer to provide operational cybersecurity support across security monitoring, privileged-access management, incident handling, vulnerability management, data protection, and security governance.
The successful candidate will support day-to-day cybersecurity operations, administer security platforms, monitor emerging threats, and coordinate with internal teams, service providers, vendors, and external security partners.
Key Responsibilities
- Administer and support privileged-access management solutions, including CyberArk.
- Monitor security alerts, emerging threats, vulnerabilities, and security advisories.
- Support security monitoring platforms, including SIEM, Syslog-NG, database activity monitoring, network-device logging, and insider-threat monitoring.
- Administer and support Forcepoint Data Loss Prevention and Imperva Web Application Firewall.
- Provide Level 1 and Level 2 cybersecurity support, including initial investigation, triage, escalation, and incident tracking.
- Support security incident management activities, including evidence collection, investigation, containment, recovery, and post-incident reporting.
- Perform daily, weekly, and monthly health checks, preventive maintenance, monitoring, and administration of assigned security systems.
- Support user onboarding, offboarding, access reviews, privileged-account administration, and entitlement validation.
- Maintain cybersecurity procedures, action plans, runbooks, configuration records, and other operational documentation.
- Maintain inventories of servers, databases, network devices, cloud assets, and internet-facing services monitored by central security tools.
- Support asset onboarding, configuration validation, troubleshooting, and decommissioning.
- Track software licences, subscriptions, certificate expirations, maintenance dates, and contract renewals.
- Plan and conduct phishing simulations, cybersecurity awareness exercises, and staff communications.
- Prepare operational updates, service reports, management summaries, risk reports, and vulnerability reports.
- Participate in cybersecurity exercises, vulnerability-remediation activities, technical assessments, audits, and tabletop exercises.
- Assist with forensic acquisition and analysis when authorised, ensuring proper evidence handling and chain of custody.
- Coordinate operational and incident matters with internal teams, managed service providers, vendors, and external security partners.
Requirements
- Diploma or bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related discipline.
- 2-4 years of hands-on experience in cybersecurity operations, infrastructure security, security-platform administration, incident handling, and vulnerability management.
- Good understanding of information-security principles, access control, security monitoring, logging, data protection, and secure administration.
- Experience working with Windows and Linux servers.
- Ability to investigate technical issues, prioritise operational tasks, and maintain clear documentation.
- Strong communication skills and the ability to work with both technical and non-technical stakeholders.
- Ability to work independently and coordinate effectively with external service providers, auditors, vendors, and security organisations.
- Must be able to work in Singapore and meet the required security-clearance and onboarding requirements.