- 5 Working Days
- 9am - 6pm
- $8000 - $10,000
- CommonWealth
Job Description:
- Conduct gap analysis of existing on-prem data centre and cloud infrastructures, identifying and assessing gaps in the overall security posture.
- Conduct comprehensive risk assessments to identify and mitigate security risks associated with information systems and processes.
- Lead and coordinate system security acceptance testing to ensure that all security requirements are met before systems are deployed.
- Collaborate with development and engineering teams to integrate security-by-design principles into the SDLC.
- Develop and maintain security policies, standards, and guidelines to ensure compliance with industry standards and regulatory requirements.
- Provide expert advice on security architecture and design, ensuring robust protection mechanisms are implemented.
- Manage vulnerability assessments and penetration testing to identify and address security weaknesses.
- Develop and deliver security training and awareness programs for employees and stakeholders.
- Stay current with emerging security threats, technologies, and trends, and provide recommendations for continuous improvement.
- Assist in the development and implementation of incident response plans and participate in security incident investigations as needed.
- Prepare detailed reports and documentation for management, highlighting security risks, mitigation strategies, and compliance status.
Requirements:
- At least 5 years of experience in information security, with a focus on risk assessment, system security acceptance testing, and security-by-design.
- Professional certifications such as CISSP, CISM, or GSEC.
- In-depth knowledge of security frameworks and standards such as ISO 27001, NIST, CIS Controls, and Cybersecurity Act of 2018.
- Strong understanding of risk management methodologies and the ability to perform comprehensive risk assessments.
- Proven experience in system security acceptance testing and validating security controls.
- Expertise in integrating security-by-design principles into the SDLC.
- Familiarity with security tools and technologies such as SIEM, IDS/IPS, Firewalls, Endpoint Protection and Wazuh.
- Strong in technological architectures (infrastructure / application), both in on-premises data centres and cloud infrastructures.
- Ability to work independently and as part of a team in a fast-paced environment.
- Experience with cloud security and working with cloud service providers such as AWS, Azure, or Google Cloud.
Interested applicants can send your resume to Whatsapp 83208165 (Jennifer) and allow our consultant to match with our clients.
We regret to inform that only shortlisted candidates will be notified! All applications will be handled with strict confidentially.
Jennifer Tay Swee Shan
Reg No: R22111564 | EA No: 21C0845
Recruit Now Singapore Pte Ltd
