The posting
The Information Technology Security Officer (ITSO) is responsible for supporting the organization's cybersecurity governance, risk management, incident response, and security operations activities. The role ensures that IT systems, applications, and infrastructure are protected in accordance with organizational security policies, regulatory requirements, and industry best practices.
Key Responsibilities
Security Governance & Compliance
- Develop, maintain, and review information security policies, standards, procedures, and implementation roadmaps.
- Support the establishment and continuous improvement of cybersecurity governance frameworks and security management practices.
- Conduct security risk assessments and recommend mitigation measures to address identified risks.
- Ensure compliance with applicable cybersecurity policies, standards, and regulatory requirements.
- Monitor security controls and provide recommendations to enhance the organization's security posture.
Security Operations & Incident Management
- Support the monitoring, detection, investigation, and response of cybersecurity incidents.
- Coordinate with internal stakeholders and external service providers to manage and resolve security incidents.
- Participate in cybersecurity exercises, simulations, and readiness assessments.
- Investigate security events and perform root cause analysis to identify corrective and preventive actions.
- Review security alerts, reports, and audit findings, ensuring timely follow-up and remediation.
Threat & Vulnerability Management
- Monitor emerging cyber threats, vulnerabilities, and security trends.
- Assess the impact of identified threats on the organization's environment and recommend mitigation strategies.
- Support vulnerability management activities, including assessment, tracking, and remediation verification.
- Evaluate security technologies and solutions to improve operational effectiveness and risk management.
Security Monitoring & Asset Management
- Ensure security monitoring coverage across relevant infrastructure components, systems, and applications.
- Maintain visibility of assets under security monitoring and support onboarding of new assets into security platforms.
- Review security dashboards and reports, providing regular updates to stakeholders on risks and remediation status.
- Support continuous improvement of security monitoring and incident detection capabilities.
Stakeholder Engagement
- Engage business, project, and technical teams on cybersecurity requirements and security best practices.
- Conduct regular security reviews and recommend improvements to strengthen security controls.
- Coordinate with external vendors, service providers, regulatory bodies, and industry partners on cybersecurity-related matters.
- Provide cybersecurity advice and guidance to project teams during solution design and implementation.
Additional Duties
- Support cybersecurity initiatives, audits, assessments, and special projects as assigned.
- Contribute to the development of security awareness and cybersecurity improvement programs.
- Perform other cybersecurity-related duties as required.
Qualifications & Experience
Education
- Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related discipline.
Experience
- Minimum 7-10 years of experience in cybersecurity, information security, or IT infrastructure security roles.
- Experience in security governance, risk management, security operations, or incident response.
- Familiarity with enterprise security technologies and cybersecurity frameworks.
- Experience working with cross-functional teams and external service providers.
Technical Knowledge
Understanding of cybersecurity principles, frameworks, standards, and best practices.
Knowledge of:
Security Operations (SOC)
Incident Response
Vulnerability Management
Risk Assessment
Security Monitoring Tools
Endpoint, Network, and Infrastructure Security
Identity and Access Management (IAM)
Cloud Security concepts
Familiarity with security investigations and digital forensic processes is advantageous.
Skills & Competencies
- Strong analytical, problem-solving, and critical-thinking skills.
- Good written, presentation, and communication skills.
- Ability to engage stakeholders at different levels of the organization.
- Strong organizational and documentation skills.
- Ability to work independently and collaboratively in a team environment.
Preferred Certifications
Applicants possessing one or more of the following certifications will have an advantage:
- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Manager (CISM)
- GIAC Certified Incident Handler (GCIH)
- Certified Ethical Hacker (CEH)
- CompTIA Security+
- Certified Information Systems Auditor (CISA)
- GIAC Security Essentials (GSEC) We are seeking one (1) IT Security Officer (ITSO) with minimum 7years ofrelevant experience in cybersecurity,information security, IM8 cybersecurity policy development andimplementation. SINGAPOREANS ONLY **We regret to inform that only shortlisted candidates will be notified. Personal data collected will be used for recruitment purposes**
