Total 8 it analyst job vacancies in Legal / Public / Security category in D07 Golden Mile, Middle Road

Job Summary:

We are seeking a skilled and dedicated Information Security Analyst/Consultant to join our team. In this role, you will be responsible for advising, assisting, and implementing information security programs for our clients using frameworks such as ISO/IEC 27001:2022 and Cyber Trust Mark, in addition you will also be involve in overseeing the implementation of security solutions to assist clients in improving their information security and cyber security posture. You will work closely with clients to assess their security needs, develop robust security strategies, and ensure compliance with industry standards and are expected to manage client’s requirements and expectations during the consulting process helping them to achieve ISO/IEC 27001:2022 or Cyber Trust Mark Certification.

Key Responsibilities:

• Client Advisory and Consultation: Provide pre-sales support, expert advice and consultation to clients on information security practices and strategies.
• Framework Implementation: Assist clients in developing and implementing information security programs using frameworks like ISO/IEC 27001:2022 and Cyber Trust Mark.
• Security Assessments: Conduct comprehensive security assessments to identify vulnerabilities and recommend mitigation strategies.
• Policy Development: Develop and maintain information security policies, procedures, and guidelines for clients.
• Compliance and Auditing: Ensure client compliance with industry standards and regulatory requirements through regular audits and assessments.
• Risk Management: Identify, analyze, and manage information security risks for clients.
• Incident Response: Assist clients in developing incident response plans and provide support during security incidents.
• Training and Awareness: Conduct training sessions and workshops to raise awareness about information security best practices among client employees.
• Documentation: Prepare detailed reports and documentation for security assessments, policies, and compliance efforts.
• Monitoring Emerging Technologies and Threats: Stay up-to-date with emerging technologies and threats in AI, blockchain, and other relevant fields, and integrate this knowledge into security strategies.
• Security solutions: Understand and learn new cybersecurity solutions and assisting to implement these solutions to improve their security posture.

Qualifications:

• Education: Minimum diploma in Cyber Security, Computer Science, or related field and minimum 3 years of experience in IT or Cyber Security field.
• Certifications: Good to have certifications such as CISSP, CISM, or ISO/IEC 27001 Lead Auditor/Implementer, Certified Ethical Hacker.
• Experience: Proven experience in information security consulting, with a focus on implementing security frameworks like ISO/IEC 27001:2022, NIST, CSA Star and CIS.
• Skills: Strong analytical, problem-solving, and communication skills. Proficiency in security assessment tools and methodologies.
• Knowledge: In-depth knowledge of information security principles, standards, and best practices.
• Project management: Understanding of stakeholder management and managing project lifecycle.

What We Offer:

Opportunities for professional development and career growth. A dynamic and collaborative work environment.

Cybersecurity certification training opportunities

What you'll be doing

• Implement and manage security solutions like firewalls, IDS/IPS, and encryption
• Perform security audits, vulnerability assessments, and risk analyses
• Develop and enforce security policies, procedures, and controls
• Integrate security into IT systems, ensuring secure configurations and hardened settings
• Investigate and escalate security incidents promptly
• Collaborate with IT teams to embed security across systems and applications
• Stay updated on security trends and technologies
• Work with contractors to deliver network and security services
• Handle additional IT duties as assigned

What we're looking for

• Bachelor Degree in Information Technology, Computer/ Network Engineering
• 4 - 6 years of experience in similar role and/ or with CyberTrust Mark certification, preferably in Healthcare will be advantageous
• Extensive expertise in security technologies, including firewall administration, encryption, network protocols, and designing robust security architectures
• Certification such as CISSP, CCSP, CEH, or advanced security certifications will be advantageous

Interested applicants, kindly furnish us with your detailed resume in MS Words format and click "Apply Now" button.

**We regret to inform only shortlisted candidates will be notified. Applicants who do not possess necessary experience or qualification will still be considered on individual merits and may be contacted for other opportunities.**

**JobStudio will not solicit any money, request to use your bank account for business or request you to transfer any monies to any parties. Please be aware of scams impersonating JobStudio and our employees. You may call our office directly for verification. We will not be liable for any loss arising from scams.**

JOBSTUDIO PTE LTD

EA License No: 10C4754

EA Personnel: Stephanie Toh

EA Personnel Reg No: R1217674

The Senior Director IT is responsible for establishing and maintaining the information security program to ensure that information assets and associated technology, applications, systems, infrastructure and processes are adequately protected in the digital ecosystem in which we operate. The individual is responsible for identifying, evaluating and reporting on legal and regulatory, compliance, IT and cybersecurity risk to information assets, while supporting and advancing business objectives.

Description

Establish Governance and Build Knowledge

• Facilitate an information security governance structure through the implementation of a hierarchical governance program, including the formation of an information security steering committee or advisory board.
• Provide regular reporting on the current status of the information security program to enterprise risk teams and senior business leaders
• Work with the vendor management office to ensure that information security requirements are included in contracts by liaising with vendor management and procurement organizations.
• Create and manage a targeted information security awareness training program for all employees, contractors and approved system users, and establish metrics to measure the effectiveness of this security training program for the different audiences.
• Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems and services, including privacy, risk management, compliance and business continuity management.
• Provide clear risk mitigating directives for projects with components in IT, including the mandatory application of controls.

Develop the Frameworks

• Develop and enhance an up-to-date information security management framework based on one of the following: International Organization for Standardization (ISO) 2700X, ITIL, ENISA, ISA-62443, COBIT/Risk IT and National Institute of Standards and Technology (NIST) Cybersecurity Framework.
• Create and manage a unified and flexible control framework to integrate and normalize the wide variety and ever-changing requirements resulting from global laws, standards and regulations.
• Develop and maintain a document framework of continuously up-to-date information security policies, standards and guidelines. Oversee the approval and publication of these information security policies and practices.
• Create a framework for roles and responsibilities with regard to information ownership, classification, accountability and protection of information assets.
• Facilitate a metrics and reporting framework to measure the efficiency and effectiveness of the program, facilitate appropriate resource allocation, and increase the maturity of the information security, and review it with stakeholders at the executive and board levels.

Architecture/Engineering Support

• Work with IT staff to ensure that security is factored into the evaluation, selection, installation and configuration of hardware, applications and software.
• Recommend and coordinate the implementation of technical controls to support and enforce defined security policies.
• Research, evaluate, design, test, recommend or plan the implementation of new or updated information security hardware or software, and analyze its impact on the existing environment; provide technical and managerial expertise for the administration of security tools.
• Work with the enterprise architecture team to ensure that there is a convergence of business, technical and security requirements; liaise with IT management to align existing technical installed base and skills with future architectural requirements.

Operational Execution

• Coordinate, measure and report on the technical aspects of security management.
• Manage outsourced vendors that provide information security functions for compliance with contracted service-level agreements.
• Manage and coordinate operational components of incident management, including detection, response and reporting.
• Maintain a knowledgebase comprising a technical reference library, security advisories and alerts, information on security trends and practices, and laws and regulations.
• Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend treatment plans and communicate information about residual risk.
• Manage security projects and provide expert guidance on security matters for other IT projects.
• Assist and guide the disaster recovery planning team in the selection of recovery strategies and the development, testing and maintenance of disaster recovery plans.
• Ensure audit trails, system logs and other monitoring data sources are reviewed periodically and are in compliance with policies and audit requirements.
• Design, coordinate and oversee security testing procedures to verify the security of systems, networks and applications, and manage the remediation of identified risks.

Qualifications

• Bachelor’s Degree in Engineering, Computer Science, Information Systems, or related discipline required.
• Master’s Degree in a related field is preferred.
• Professional security management certification is desirable, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials

Experiences

• A minimum of ten years of IT experience, with seven years in an information security role and at least five years in a managerial capacity is required.
• Experience working with legal, audit and compliance staff is preferred.
• Experience developing and maintaining policies, procedures, standards and guidelines is required.
• Familiarity with applicable legal and regulatory requirements, including, but not limited to, the U.S. Sarbanes-Oxley Act, the U.S. Health Insurance Portability and Accountability Act (HIPAA), the European Union Privacy Directive, and the Japanese Financial Instruments and Exchange Law ("J-SOX").

Skill Sets

• Excellent analytical skills, the ability to manage multiple projects under strict timelines, as well as the ability to work well in a demanding, dynamic environment and meet overall objectives
• Project management skills: financial/budget management, scheduling and resource management
• Ability to lead and motivate the information security team to achieve tactical and strategic goals, even when only "dotted line" reporting lines exist
• A master of influencing entities and decisions in situations where no formal reporting structures exist, but achieving the desirable outcome is vital
• Excellent communication, interpersonal and collaborative skills. Experience working with a multi-continent technical team preferred
• High degree of initiative, dependability and ability to work with little supervision while being resilient to change

Technical Competencies

• Experience with common information security management frameworks, such as International Standards Organization (ISO) 2700x, the IT Infrastructure Library (ITIL) and Control Objectives for Information and Related Technology (COBIT) frameworks
• An understanding of operating system internals and network protocols.
• Familiarity with the principles of cryptography and cryptanalysis.
• Experience in application technology security testing (white box, black box and code review).
• Experience in system technology security testing (vulnerability scanning and penetration testing).

Job Summary:

The IT Security Specialist will be responsible for the development, implementation, and ongoing review of a comprehensive security framework. This includes creating and maintaining security policies, performing audits, conducting risk assessments, and managing customer incident response plans. The role involves being the main point of contact for security-related matters and collaborating with customers to ensure the security of their ICT systems. The ideal candidate will have a strong background in IT security, including experience with networks, servers, databases, and security auditing.

Key Responsibilities:

• Review and develop security frameworks, information security policies, and related processes, ensuring they are up to date and aligned with best practices.

• Conduct security reviews and audits, including log analysis and security assessments of customer ICT systems.

• Perform security risk management exercises, identifying vulnerabilities and mitigating risks.

• Organize and conduct table-top security exercises to simulate potential security incidents.

• Conduct vulnerability assessments and coordinate penetration testing activities.

• Provide information security awareness training to project and internal teams.

• Develop and manage customer security incident response plans, leading incident resolution and response efforts.

• Serve as the primary point of contact and advisor for customers on ICT security-related matters.

• Project manage security initiatives during the implementation phase, ensuring timely and quality delivery.

Requirements:

• Minimum of 3 years of experience in IT security.

• Expertise in Networks, Servers (Windows and UNIX), and Database systems.

• Experience with IT security auditing and security assessments.

• Proficient in analysing logs from various sources and understanding protocols and traffic flows.

• Knowledge of security tools such as Active Directory, Endpoint Protection Solutions, Early Detection and Response Solutions, Database Activity Monitoring tools, and SIEM systems.

• Excellent communication and presentation skills.

• Proficiency in Microsoft Excel.

• Flexible, team-oriented approach with a strong focus on problem-solving.

• Strong organizational skills and the ability to work independently in a dynamic environment.

• Ability to multitask effectively between various projects and teams.

Certifications:

• CISSP certification is mandatory.

• Additional certifications like CISM, Security+, or certifications in security tools such as Imperva and Carbon Black are a plus

As an IT Security Analyst, you will be responsible for assessing and managing cybersecurity risks by evaluating technologies and solutions against industry standards. You will identify, analyze, and prioritize potential security threats while developing and implementing effective risk mitigation strategies. Regularly maintaining and updating the organization’s risk register will also be part of your duties.

Risk Management

• Evaluate technologies against cybersecurity standards.
• Identify and prioritize security risks.
• Advise on cloud security for platforms like AWS and Azure.
• Update and maintain the risk register.

Compliance

• Stay updated on IT security regulations (e.g., PCI-DSS, ITRM, IM8).
• Develop and enforce security policies.
• Monitor compliance and report to stakeholders.

Security Operations

• Monitor and mitigate potential data loss events, and investigate suspected incidents.
• Investigate security incidents and implement appropriate response measures.

Business Continuity

• Review and update crisis plans.
• Organize simulation exercises.

Qualifications:

• Bachelor’s degree in Cybersecurity, IT, or equivalent experience.
• At least 3 years of experience in IT security and compliance.
• Strong knowledge of IT security frameworks.
• Familiarity with security tools (e.g., DLP, SIEM).
• Experience with cloud platforms (AWS, Azure).
• Cloud security certification (e.g., CCSP, AZ 500) is a plus.
• CISA, CISM, or CISSP certification is an advantage.

Job Description

We are looking for a skilled IT Security Specialist to be responsible for designing, implementing, and managing security measures to protect our customer’s ICT systems. The role involves developing security frameworks, conducting assessments, managing incidents, and advising on ICT security matters. This position requires strong experience in IT security, excellent analytical skills, and the ability to lead security projects.

Key Responsibilities:

• Review and develop security frameworks, information security policies, processes, procedures, and guidelines on an ongoing basis.
• Establish compliance with policies and procedures through continuous security reviews and audits, including log analysis and security assessment of customer ICT systems.
• Conduct security risk management exercises and table-top exercises to test security readiness.
• Conduct vulnerability assessments and coordinate penetration testing activities.
• Lead information security awareness training sessions for employees and stakeholders.
• Develop and manage the customer’s security incident response plan.
• Lead and support the customer in security incident resolution and response.
• Act as the main point-of-contact and customer liaison for ICT security-related matters, providing assistance and advice as needed.
• Manage the activities and deliverables during the implementation phase of security projects.

Requirements:

· Minimum of 3 years of experience in IT security.

· Hands-on experience with Networks, Servers (Windows and UNIX), and Database systems.

· Proven experience in IT security auditing and security assessments.

· Strong understanding of protocols, traffic flows, and the ability to analyse logs from various sources.

· Knowledge of security technologies such as Active Directory, Endpoint protection solutions, Early Detection and Response (EDR) solutions, Database Activity Monitoring tools, and SIEM (Security Information and Event Management).

· Proficiency in Microsoft Excel for data analysis and reporting. Excellent written and verbal communication and presentation skills.

· Strong organizational skills and the ability to plan and execute work independently.

· Ability to work in a fast-paced environment with a flexible, team-oriented approach.

· Strong multitasking skills with the ability to switch contexts effectively between different activities and teams.

Preferred Certifications:

· CISSP certification is a must.

· Additional certifications such as CISM, Security+, and IT security tools certifications (e.g., Imperva, Carbon Black) are a plus.

Job Description:
The Security Engineer will participate in evaluating, developing, and implementing security tools, standards, procedures, and guidelines. This role will collaborate with both technical and non-technical business partners and stakeholders.
• Ensures security infrastructure processes, concepts, and maintenance are incorporated into systems, software, and hardware platforms in accordance with approved internal standards
• Provides technical input to projects along with implementation support to network services and infrastructure design teams
• Performs maintenance of security infrastructure to include updates and patching of software and hardware
• Maintains a comprehensive and in depth, component level understanding of all IT systems, data flows, applications, technologies, security controls, threats, weaknesses and countermeasures
• Supports information security governance, risk management and compliance programs which include security assessments and on-site reviews, security gap remediation, security incident support, audit support functions, business process and project consultancy and security education and awareness
• Designs and develops secure IT solutions and control frameworks using network segmentation, gateway security, specialist security tools (e.g., ACL, Tokenization)


Skillset Required:
• Experience with cloud technologies: AWS, Azure, GCP
• Experience with securing and hardening Windows, Linux
• Experience with networking protocols and technologies: TCP/IP, routers, firewalls, VPN, load balancers
• Experience with on premise and cloud-based security technologies: end point protection, hardware security modules, sandboxes, SIEM, web application firewall, intrusion detection systems, intrusion prevention systems, web proxies, wireless intrusion prevention systems, and file integrity monitoring

We have an immediate position to be filled. Fresh graduates are welcome to apply to have a feel of what it's like to work in a Security, Network & Service Desk Operations Center.

Qualifications

• Fresh graduates Degree/Diploma/ITE in Computer Science or Information Technology or its equivalent, are welcome to apply
• Preferably with 1-2 years of experience in IT in system, network, and/or application security with knowledge of network and web-related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, BGP and other routing protocols)
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits, application of threat modeling or other risk identification techniques
• Possess basic technical knowledge in IT network infrastructure, server platforms (Unix, Windows platform) and desktops (OS X and Windows XP and the above)
• Excellent teamwork player
• Strong sense of ownership and drive

Tier 1 Functions and Responsibilities:

• Work in a rotational 24/7 environment
• Respond to the incoming enquiries/incident/request/alerts (Call, Email, Webchat, EUP, IVR handling, Monitoring consoles)
• 1st level troubleshooting of in supported systems; i.e. Workplace; Server; Network; Microsoft 365; Secure Access Service Edge; Point of Sale
• Security event monitoring - accurate and rapid response to security events, participate in incident response
• Server and network availability and performance monitoring
• Password reset and unlock
• Perform log & route [to higher tier or Resolver Team(s)]
• Record and manage all transactions/ cases in Service Management System
• Broadcast notifications to the relevant parties
• Provide timely status update, follow up on cases escalated until closure within the service level agreement.
• Ensure daily tasks are executed according to the Standard Operation Procedure