Total 7 it auditor job vacancies in Legal / Public / Security category in D06 Beach Road, High Street

Role Description

This is a full-time on-site role for a SOC L1 Analyst located in Singapore.

Responsibilities:

• Monitoring and analyzing security events, identifying potential threats, conducting investigations, and responding to security incidents
• Work closely with the end client SOC team to ensure the timely and effective detection, containment, and mitigation of security incidents
• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure).
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits.
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to ensure compliance and regulatory requirements and industry standards.

Requirements:

• Diploma/degree in computer studies
• 2 years of experience working in a security operation, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role.
• Independent and capable of working in a high-pressure environment.
• Willing to work in rotational shift environment (including weekends and night shift).

Role:IT Security Engineer(ITSO)

JD:

•Define the project's goals, scope, and deliverables, and establish a detailed plan with timelines and resources •Manage the project's day-to-day operations, including assigning tasks, monitoring progress, and making adjustments.

•Keep stakeholders informed and engaged, and resolve issues

•Ensure the project meets quality standards and delivers the expected outcomes

•Maintain project documentation and handle compliance or regulatory issues

• Good communication and problem-solving skills

• Excellent interpersonal skills • Dedicated as well as hard working individual with the intercommunication skills to work at all the level of organization.

• Teamworker and well-mannered

• Working tirelessly to enable the growth and development of organization that is customer centric and outward-looking.

Asset inventory knowledge and project/implemantaion documentation. Implement and maintain security policies and procedures to protect the organization's IT assets Configure and manage security tools and platforms to ensure they are integrated with the network infrastructure Conduct security and risk assessments of change requests, infrastructure, and data Monitor compliance to information security policies and ensure compliance with the customer's cybersecurity policies Conduct information security awareness training Manage information security risks and incidents Manage information security and related projects and initiatives Communicate and enforce compliance with information security policies and standards

Must have Talent / Skills - Good communication and excellent interpersonal skills, Proficient in Microsoft Office - ITIL Process Knowledge -Process handling Infra Incident and request handling.

What you'll be doing

• Implement and manage security solutions like firewalls, IDS/IPS, and encryption
• Perform security audits, vulnerability assessments, and risk analyses
• Develop and enforce security policies, procedures, and controls
• Integrate security into IT systems, ensuring secure configurations and hardened settings
• Investigate and escalate security incidents promptly
• Collaborate with IT teams to embed security across systems and applications
• Stay updated on security trends and technologies
• Work with contractors to deliver network and security services
• Handle additional IT duties as assigned

What we're looking for

• Bachelor Degree in Information Technology, Computer/ Network Engineering
• 4 - 6 years of experience in similar role and/ or with CyberTrust Mark certification, preferably in Healthcare will be advantageous
• Extensive expertise in security technologies, including firewall administration, encryption, network protocols, and designing robust security architectures
• Certification such as CISSP, CCSP, CEH, or advanced security certifications will be advantageous

Interested applicants, kindly furnish us with your detailed resume in MS Words format and click "Apply Now" button.

**We regret to inform only shortlisted candidates will be notified. Applicants who do not possess necessary experience or qualification will still be considered on individual merits and may be contacted for other opportunities.**

**JobStudio will not solicit any money, request to use your bank account for business or request you to transfer any monies to any parties. Please be aware of scams impersonating JobStudio and our employees. You may call our office directly for verification. We will not be liable for any loss arising from scams.**

JOBSTUDIO PTE LTD

EA License No: 10C4754

EA Personnel: Stephanie Toh

EA Personnel Reg No: R1217674

The Senior Director IT is responsible for establishing and maintaining the information security program to ensure that information assets and associated technology, applications, systems, infrastructure and processes are adequately protected in the digital ecosystem in which we operate. The individual is responsible for identifying, evaluating and reporting on legal and regulatory, compliance, IT and cybersecurity risk to information assets, while supporting and advancing business objectives.

Description

Establish Governance and Build Knowledge

• Facilitate an information security governance structure through the implementation of a hierarchical governance program, including the formation of an information security steering committee or advisory board.
• Provide regular reporting on the current status of the information security program to enterprise risk teams and senior business leaders
• Work with the vendor management office to ensure that information security requirements are included in contracts by liaising with vendor management and procurement organizations.
• Create and manage a targeted information security awareness training program for all employees, contractors and approved system users, and establish metrics to measure the effectiveness of this security training program for the different audiences.
• Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems and services, including privacy, risk management, compliance and business continuity management.
• Provide clear risk mitigating directives for projects with components in IT, including the mandatory application of controls.

Develop the Frameworks

• Develop and enhance an up-to-date information security management framework based on one of the following: International Organization for Standardization (ISO) 2700X, ITIL, ENISA, ISA-62443, COBIT/Risk IT and National Institute of Standards and Technology (NIST) Cybersecurity Framework.
• Create and manage a unified and flexible control framework to integrate and normalize the wide variety and ever-changing requirements resulting from global laws, standards and regulations.
• Develop and maintain a document framework of continuously up-to-date information security policies, standards and guidelines. Oversee the approval and publication of these information security policies and practices.
• Create a framework for roles and responsibilities with regard to information ownership, classification, accountability and protection of information assets.
• Facilitate a metrics and reporting framework to measure the efficiency and effectiveness of the program, facilitate appropriate resource allocation, and increase the maturity of the information security, and review it with stakeholders at the executive and board levels.

Architecture/Engineering Support

• Work with IT staff to ensure that security is factored into the evaluation, selection, installation and configuration of hardware, applications and software.
• Recommend and coordinate the implementation of technical controls to support and enforce defined security policies.
• Research, evaluate, design, test, recommend or plan the implementation of new or updated information security hardware or software, and analyze its impact on the existing environment; provide technical and managerial expertise for the administration of security tools.
• Work with the enterprise architecture team to ensure that there is a convergence of business, technical and security requirements; liaise with IT management to align existing technical installed base and skills with future architectural requirements.

Operational Execution

• Coordinate, measure and report on the technical aspects of security management.
• Manage outsourced vendors that provide information security functions for compliance with contracted service-level agreements.
• Manage and coordinate operational components of incident management, including detection, response and reporting.
• Maintain a knowledgebase comprising a technical reference library, security advisories and alerts, information on security trends and practices, and laws and regulations.
• Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend treatment plans and communicate information about residual risk.
• Manage security projects and provide expert guidance on security matters for other IT projects.
• Assist and guide the disaster recovery planning team in the selection of recovery strategies and the development, testing and maintenance of disaster recovery plans.
• Ensure audit trails, system logs and other monitoring data sources are reviewed periodically and are in compliance with policies and audit requirements.
• Design, coordinate and oversee security testing procedures to verify the security of systems, networks and applications, and manage the remediation of identified risks.

Qualifications

• Bachelor’s Degree in Engineering, Computer Science, Information Systems, or related discipline required.
• Master’s Degree in a related field is preferred.
• Professional security management certification is desirable, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials

Experiences

• A minimum of ten years of IT experience, with seven years in an information security role and at least five years in a managerial capacity is required.
• Experience working with legal, audit and compliance staff is preferred.
• Experience developing and maintaining policies, procedures, standards and guidelines is required.
• Familiarity with applicable legal and regulatory requirements, including, but not limited to, the U.S. Sarbanes-Oxley Act, the U.S. Health Insurance Portability and Accountability Act (HIPAA), the European Union Privacy Directive, and the Japanese Financial Instruments and Exchange Law ("J-SOX").

Skill Sets

• Excellent analytical skills, the ability to manage multiple projects under strict timelines, as well as the ability to work well in a demanding, dynamic environment and meet overall objectives
• Project management skills: financial/budget management, scheduling and resource management
• Ability to lead and motivate the information security team to achieve tactical and strategic goals, even when only "dotted line" reporting lines exist
• A master of influencing entities and decisions in situations where no formal reporting structures exist, but achieving the desirable outcome is vital
• Excellent communication, interpersonal and collaborative skills. Experience working with a multi-continent technical team preferred
• High degree of initiative, dependability and ability to work with little supervision while being resilient to change

Technical Competencies

• Experience with common information security management frameworks, such as International Standards Organization (ISO) 2700x, the IT Infrastructure Library (ITIL) and Control Objectives for Information and Related Technology (COBIT) frameworks
• An understanding of operating system internals and network protocols.
• Familiarity with the principles of cryptography and cryptanalysis.
• Experience in application technology security testing (white box, black box and code review).
• Experience in system technology security testing (vulnerability scanning and penetration testing).

As an IT Security Analyst, you will be responsible for assessing and managing cybersecurity risks by evaluating technologies and solutions against industry standards. You will identify, analyze, and prioritize potential security threats while developing and implementing effective risk mitigation strategies. Regularly maintaining and updating the organization’s risk register will also be part of your duties.

Risk Management

• Evaluate technologies against cybersecurity standards.
• Identify and prioritize security risks.
• Advise on cloud security for platforms like AWS and Azure.
• Update and maintain the risk register.

Compliance

• Stay updated on IT security regulations (e.g., PCI-DSS, ITRM, IM8).
• Develop and enforce security policies.
• Monitor compliance and report to stakeholders.

Security Operations

• Monitor and mitigate potential data loss events, and investigate suspected incidents.
• Investigate security incidents and implement appropriate response measures.

Business Continuity

• Review and update crisis plans.
• Organize simulation exercises.

Qualifications:

• Bachelor’s degree in Cybersecurity, IT, or equivalent experience.
• At least 3 years of experience in IT security and compliance.
• Strong knowledge of IT security frameworks.
• Familiarity with security tools (e.g., DLP, SIEM).
• Experience with cloud platforms (AWS, Azure).
• Cloud security certification (e.g., CCSP, AZ 500) is a plus.
• CISA, CISM, or CISSP certification is an advantage.

Job Description:
The Security Engineer will participate in evaluating, developing, and implementing security tools, standards, procedures, and guidelines. This role will collaborate with both technical and non-technical business partners and stakeholders.
• Ensures security infrastructure processes, concepts, and maintenance are incorporated into systems, software, and hardware platforms in accordance with approved internal standards
• Provides technical input to projects along with implementation support to network services and infrastructure design teams
• Performs maintenance of security infrastructure to include updates and patching of software and hardware
• Maintains a comprehensive and in depth, component level understanding of all IT systems, data flows, applications, technologies, security controls, threats, weaknesses and countermeasures
• Supports information security governance, risk management and compliance programs which include security assessments and on-site reviews, security gap remediation, security incident support, audit support functions, business process and project consultancy and security education and awareness
• Designs and develops secure IT solutions and control frameworks using network segmentation, gateway security, specialist security tools (e.g., ACL, Tokenization)


Skillset Required:
• Experience with cloud technologies: AWS, Azure, GCP
• Experience with securing and hardening Windows, Linux
• Experience with networking protocols and technologies: TCP/IP, routers, firewalls, VPN, load balancers
• Experience with on premise and cloud-based security technologies: end point protection, hardware security modules, sandboxes, SIEM, web application firewall, intrusion detection systems, intrusion prevention systems, web proxies, wireless intrusion prevention systems, and file integrity monitoring

Responsibilities:

• Responsible for security audit work related to web3 wallet (mainly Java code), identify potential risks such as business requirements and Technology Implementation schemes, provide solutions and promote landing;
• Study the characteristics of the new chain, deeply understand the latent risks that may exist in the docking process of the new chain, and promote risk avoidance in code implementation;
• Participate in the R & D process of the entire Product R & D team and promote the implementation of SDL;

Qualifications:

• Familiar with and master relevant application security and blockchain security knowledge, understand the internal principles, mining methods, vulnerability code scenarios, exploitation methods, solutions, etc. of common security bugs;
• At least 3 years of experience in business development and security audit based on Java or other languages, leading or participating in SDL implementation;
• Familiar with the blockchain industry and related technologies, common security risks, and the working principles of mainstream chains (BTC, ETH, etc.);
• Familiar with commonly used encryption, decryption, signature, and other algorithms, especially those commonly used in web3 wallets, such as ECDSA, ED25519, RSA, AES, SSS, etc.;
• Have a certain background in penetration knowledge and be familiar with mainstream attack methods;
• Have a strong interest in emerging blockchain technology and be able to self-drive to learn and understand.

Preferred Qualifications:

• Actually wrote a local wallet project;
• Participated in well-known open source projects;
• Have some understanding of on-chain attack methods and have a deep understanding of the principles of attacks.