Total 2 information security analyst job vacancies in Legal / Public / Security category in Singapore

Position Overview:
We are seeking a skilled and motivated IT Security Specialist to join our team. The ideal candidate will play a pivotal role in implementing and managing security architecture, ensuring compliance with security standards, and mitigating risks through effective vulnerability management. This position demands expertise in IT security tools and methodologies, a proactive approach to incident detection and resolution, and familiarity with operational security processes.

Key Responsibilities:

• Security Architecture Implementation:Develop and implement a security architecture blueprint encompassing DevSecOps, application, infrastructure, and operational security.
  Define processes, provisioning, and interfaces for secure application interaction.
  Provide expert recommendations on security practices and improvements.
  
• Access Management and Control:Manage and optimize access control processes and tools.
  Oversee access management systems, ensuring secure and compliant operations.
  
• Vulnerability Management:Execute security vulnerability scanning activities, including HCR/NVA, Pen Testing, SAST, and DAST.
  Analyze and resolve findings from security assessments and audits.
  
• Operational Security Management:Oversee OS and application-level patching, operational housekeeping, and archival processes.
  Implement server and application hardening procedures, following IM8 policies and vulnerability assessment standards.
  Handle security incident detection, reporting, and SSL certificate renewals.
  
• Audit Facilitation:Support and facilitate external auditing processes to ensure compliance with security frameworks.
  

Technologies & Skills Required:

• OS Administration (Linux/Windows).
• Expertise in security tools, including:IBM Security Verify Access
  IBM QRadar
  Thales HSM
  OpenSSL
  Tenable Nessus
  Burp Suite Enterprise
  

Requirements:

• Minimum 2+ years of experience in IT Security.
• Professional certifications such as CISSP, CCSP, CCSK, or equivalent are preferred.
• Proficiency in 1-2 Cyber Security domains, such as Identity Access Management, Security and Risk Management, Application/Network Security, or Vulnerability Management, with a broad understanding of other areas.

EA License number: 11C4879

Job Description

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Skills Required

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.

EA Number: 11C4879