Total 8 it auditor job vacancies in Legal / Public / Security category in D16 Upper East Coast, Bedok, Eastwood, Kew Drive

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s Degree in Computer Science/Information Technology or equivalent.
• At least 5 years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:

- CompTIA Security+

- Certified Information Systems Security Professional (CISSP)

- Certified Information Systems Auditor (CISA)

- Certified Information Security Manager (CISM)

Position Overview

The IT Security Operations Analyst role’s is to safeguard the organization’s IT systems and data. This role requires the candidate's active participation in the implementation of security policies and procedures, the monitoring and analysis of security events and the maintenance of security tools. Other responsibilities are to identify, investigate and resolve any security threats, vulnerabilities and incidents. The candidate must keep up to date with the latest security trends, have excellent communication and problem-solving skills and have a deep understanding of security principles and technologies. The individual will have a functional role in mentoring other team members and share the off-hour support responsibilities.

Responsibilities

1. Monitor, maintain, and analyze network and computers for unusual activity or suspicious behavior by reviewing information security logs.
2. Manage and resolve security Level 2 support tickets per defined SLAs
3. Investigate and analyze security incidents to determine root cause and impact.
4. Report compliance failures to management for immediate remediation.
5. Responsible for the effective management of the organization’s Crowdstrike Falcon Admin Console.

• Deploy Crowdstrike Falcon EDR detection agent on all corporate devices.
• Ensure coverage of malware detection for all managed EDR Agent capable devices.
• Migrate existing server agents from alert-only mode to blocking mode.
• Provide EDR escalation support for agents already installed

1. Assist and collaborate with the Information Security Group and coordinate with IT Infrastructure on the following:

• IT Threats and Vulnerabilities Assessments, Protection, and Remediation
• IT security patch management follow-up and reporting
• Firewall rule documentation, review, and approval
• Promote within IT Infrastructure the proper Security controls aligned with the IT Security Program
• Validate and maintain operational security documentation.

1. Continuously assess the current Security Posture and provide recommendations for remediation and prevention of security incidents.
2. Collaborate with cross-functional teams to implement security solutions and technologies.
3. Stay up to date with industry trends and emerging security threats to proactively address potential risks.
4. Assist in the deployment of new security systems.
5. Participate in security audits and assessments to ensure compliance with regulations and standards.
6. Understand the dark and deep web ecosystem.
7. Manage and support the following applications:

• Palo Alto/Firewall
• Network security (Micro-segmentation)

1. Perform other duties as required

Qualifications and Experience

• Bachelor’s degree in Cybersecurity Engineering or Computer Sciences
• Strong professional experience in information security with a focus on security operations and technical support
• Strong Experience with Palo Alto and Crowdstrike platform
• Experience with VPN, SSL and other encryption technologies
• Good knowledge of server, workstation, and Active Directory technologies that impact security controls
• Deep understanding of TCP/IP, DNS and common network services
• Experience with security frameworks and compliance requirements such as GDPR, ISO 27001, NIST 800 and PCI DSS.

Responsibilities:

• Experience in leading and delivering multiple security projects and solutions across one or more IT Security domains (Cyber Program Management, Cyber Threat Management, Identity & Access Management, Data Protection, Privacy, Cyber Analytics). This experience should include both advisory, implementation and operation experiences.
• Design and develop a customized security architecture, evaluate and select the best security system in one or more of the above security domains.
• Provide high-level input and security consultation in a project-based environment and ensure adequate security controls in all Business IT solutions.
• Responsible for project planning, execution and managing scope due to any new information and/or changes to initial assumptions, including implications for project time, cost, quality and risk
• Ensure the security enhancements / new security project delivery is done in line with stakeholder’s requirements, timeline and cost.
• Develop and maintain a detailed security project plan which deliver to the cost, quality and time for enhancements
• The position will be heavily involved in IT security operations, including:Security solution delivery
  Security monitoring
  Administration for security systems (e.g. firewall, anti-malware system, IDS/IPS)
  Incident Response
  Level 2 support for IT Security operations.
  

Requirements:

• Min. Bachelor's degree in Computer Science
• Min. 6-8 years’ experience working in a large-scale IT environment; Including five (5) years of information security and risk experience within the past six (6) years; including risk analysis, endpoint, server, network and web application security
• Possess Security Industry Certifications such as CISSP, CISM, SANS, GSEC and PMP, ITIL, Microsoft, CISCO
• Having good understanding of TCP/IP protocol and OSI Seven Layer Model.
• Strong technical security skills in assessment, design, implementation architecture, and program / project delivery and work across various delivery models, (Waterfall, Agile, DevOps)
• Analyzes & prepares recommendations relating to security for existing IT infrastructures / Applications.
• Expert understanding of firewall technologies.
• Ability to plan, organize and prioritize tasks to complete within established time frames.
• Highly result oriented and can work independently.
• Ability to build relationships and interact effectively with internal and external parties.
• Strong analytical, technical, and communication (both oral and written) skills.

Job Summary

We are currently looking for a seasoned leader as the Head of IT Security. The incumbent will be responsible for leading the transformation while establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. This role oversees the development and implementation of security policies, standards, and procedures to ensure the protection of the organization's information systems and data.

Mandatory Skill-set

• Degree in Computer Science, Information Security, Information Systems or a related field;
• At least 12-15 years of experience in IT security & risk management preferably in a large scale organisation;
• Deep knowledge and understanding of internal controls, security frameworks, risk management and IT governance, auditing techniques, threat modeling and risk management principles;
• Good knowledge of enterprise IT systems and components (applications, operating systems, databases, networks, cloud, DevOps;
• Knowledgeable in using various cyber security monitoring and analysis tools and techniques depending on the organization's needs and requirements;
• Familiarity with security technologies such as firewalls, intrusion detection systems, and endpoint protection;
• Familiar with cyber security standards, protocols and frameworks such as NIST, CIS, PCI/ DSS, MAS TRM, ISO standards;
• Experience with Security operations centers (SOC) and setting up SOC models;
• Experience in driving enterprise initiatives for E2E security posture analysis;
• Ability to work with subsidiaries and understand regional security requirements;
• Strong in analytical thinking with attention to detail;
• Excellent communication and inter personal skills.

Desired Skill-set

• CISSP, CISM, CRISC, CGEIT and/or CISA certified.

Responsibilities

• Define and implement the Enterprise InfoSec (IS) landscape and roadmap;
• Responsible for documenting methodologies and tools to mitigate information security or cyber risk for on-prem and clous platforms;
• Prepare reports for information security or cyber risk related reporting, threat awareness and security awareness reports;
• Design and implement secure cloud architecture for various cloud platforms and act as an SME for cloud platforms (AWS, GCP, or Azure) using cloud-native security services;
• Recommend corrective actions or appropriate security controls to mitigate technical risk;
• Conduct Technology Security Risk Assessments on systems throughout their lifecycle to identify and mitigate security risks;
• Assist in the development of policies for conducting cyber security risk assessments and compliance audits;
• Formulate governance procedures for documenting and updating security policy, standards, guidelines and procedures;
• Perform information security or cyber risk assessment activities and assess third party security controls and internal security systems including onsite assessments;
• Establish scope of risk analysis for new technology initiatives and identify security risks in the Tech Obsolescence Risk program;
• Communicate with regulators such as MAS and ensure solutions meet external and internal requirements and guidelines
• Keep abreast of the dynamic cyber threat landscape and identify opportunities for enhancement of IT risk processes;
• Provide regular updates on the overall health of compliance, criticality assessment, audit findings, remediation and action plans.

Should you be interested in this career opportunity, please send in your updated resume to [email protected] at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website (https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

Senior Manager, Or Manager - Cyber Security & IT Governance

Responsible for the assessment, development, implementation and maintenance of enterprise-wide cyber security and IT Governance programmes to preserve the confidentiality, integrity, and availability of information resources. As part of the IT leadership team, this individual will be expected to provide technical leadership and consultation across the organisation. S/he will also work with external experts to implement security solutions, detect, and contain cyber security incidents.

Responsibilities

Cyber Security:

Assess and review environment and cybersecurity measures to ensure security and operational effectiveness, for e.g. network, system, application, endpoint security, physical and logical access security, etc.

Review and develop security framework, information security policies, processes, procedures, and guidelines.

Conduct cybersecurity risk assessments, penetration tests, and IT controls tests.

Identify security gaps and propose mitigating measures and escalate security incidents and non-compliances on a timely basis.

Evaluate, deploy, and maintain cybersecurity infrastructure to improve cybersecurity posture. Design, implement and maintain security incident response and escalation procedures.

Monitor, analyze and correlate events to determine the best course of action, to mitigate and contain threats when detected.

improve cybersecurity awareness of staff, for e.g. by conducting awareness training. Automate security controls, data, and processes.

IT Governance:

Review and enhance IT policies, standards, guidelines, and best practices regularly to ensure that these are aligned to organization objectives and industry best practices.

Develop and implement effective change management plans (such as communication plans and training programs) to drive adoption and compliance.

Participate in audit planning meetings with internal/external auditors, collate/provide the required materials on a timely basis, validate audit findings, provide remediation solutions, and implement the agreed solutions on a timely basis.

Drive security access and activity log reviews on regular basis.

Promote IT risk management, governance, and compliance culture across the organization.

IT Management:

Contribute to IT strategic planning and budgeting. Ensure IT vendors meet contractual obligations.

Maintain up-to-date knowledge on cybersecurity technologies and standards.

Attend to any other reasonable duties as assigned by Director, Information Technology.

Requirements

Degree in engineering, science or information technology, or equivalent education.

8-10 years of related work experience in cybersecurity management and security governance.

Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.

Strong understanding of cybersecurity standards.

Hands-on experience with cybersecurity tools such as Next Generation Firewalls, SASE, Endpoint Protection, Data Loss Protection, Email Security, etc.

To apply:

Please email Resume in Microsoft Word format

Please state your Position/ positions applied on the “on TOP” of your resume.

Please state Available Commencement Date or notice period

Please state current and last SALARY and Expected Salary in your resume.

Please state Reasons for leaving current & previous Employment.

Cyber Security, Associate Engineer

Salary: up to $4000+

Responsible in maintaining and improving the organization’s cybersecurity posture on an ongoing basis. S/he will work with external experts to implement security solutions, and work with vendors to monitor, detect and contain cybersecurity incidents to minimize impact to the organization.

Responsibilities

• Assist in the development of information security policies, processes / procedures and guidelines on an ongoing basis.

• Work with vendor to conduct security assessments and penetration tests.

• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.

• Standardize and refine security incident response and escalation processes.

• Mitigate and contain threats when detected.

• Escalate security incidents and non-compliances on a timely basis.

• Work with IT infrastructure team to evaluate, implement and enhance the network perimeter security, endpoint security, SIEM.

• Monitor information security alerts triage, mitigate, and escalate issues as needed.

• Conduct information security awareness training.

• Provide security advisory to end users on regular basis.

• IT Security Management of various aspects, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.

• Keep abreast of industrial IT security advancements and introduce appropriate security enhancements to IT infrastructure and systems.

• To perform daily monitoring of logs and review of security notifications and alerts, and assist on the assessment and reporting weekly trends, incidents and security events. Abnormalities found in the review of security events must be reported to the Cyber Security Manager.

• To provide daily technical support in terms of Cyber Security operations for Sophos Endpoint Protection, Cisco FTD Firewall, Advanced Email Threat Protection, Web Application Firewall, Cisco Email Security, DG DLP, Tenable SCCV, Splunk, Cisco Umbrella, etc.

• Attend to any other reasonable duties as assigned by the Senior Cyber Security & IT Governance Manager and IT Director.

Requirements

• Degree/ Diploma with min 2 years related work experience in cybersecurity management in Singapore.

• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.

• Good command of written and spoken English.

• Excellent interpersonal and communication skills.

• Pro-active, independent, resourceful, able to work in a team environment and work independently with minimal supervision.

To apply:

Please email Resume in Microsoft Word format

Please state your Position/ positions applied on the “on TOP” of your resume.

Please state Available Commencement Date or notice period

Please state current and last SALARY and Expected Salary in your resume.

Please state Reasons for leaving current & previous Employment.

InfoCepts stands as a global leader in comprehensive data and analytics solutions, boasting nearly two decades of expertise. Recognized as Gartner's Customers' Choice for Data & Analytics providers in 2020, 2021, and 2022, we've sustained impressive year-over-year growth, now employing over 1,000 professionals globally. Committed to our mission since our inception in 2004, we aim to assist our clients in staying modern, enabling informed, data-driven decisions.

As part of our expansion, we seek dedicated professionals who share our passion for leveraging data's transformative power to contribute to a better world.

We are seeking a highly skilled and experienced IT Security and Infrastructure Manager to join our team. The ideal candidate will have a minimum of three (3) years of proven work experience in the IT security field, with a focus on enterprise systems, network, and cloud infrastructure.

• Develop and implement comprehensive IT security policies, procedures, and protocols to protect the organization's information assets and infrastructure.
• Manage and oversee the organization's network infrastructure, including routers, switches, firewalls, and VPNs, ensuring optimal performance, reliability, and security.
• Lead efforts to assess and mitigate cybersecurity risks, vulnerabilities, and threats across the organization's IT infrastructure.
• Collaborate with internal teams to design, implement, and maintain secure and resilient cloud-based systems and services.
• Conduct regular security audits, vulnerability assessments, and penetration testing to identify and address security weaknesses and gaps.
• Monitor and analyze security logs and alerts to detect and respond to security incidents and breaches in a timely manner.
• Stay up-to-date with the latest trends, technologies, and best practices in IT security and infrastructure management.
• Provide guidance, training, and support to IT staff and end-users on security best practices and compliance requirements.
• Prepare and present reports, metrics, and recommendations to senior management on the organization's security posture and risk exposure.
• Liaise with external vendors, partners, and regulatory agencies on security-related matters as needed.

Requirements:

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Minimum of three (3) years of progressive experience in the IT security field, with a focus on enterprise systems, network, and cloud infrastructure.
• Professional certifications such as CISSP, CISM, or CCSP are highly desirable.
• In-depth knowledge of cybersecurity principles, practices, technologies, and frameworks.
• Hands-on experience with network security, firewalls, intrusion detection/prevention systems (IDS/IPS), and endpoint security solutions.
• Proficiency in cloud security concepts and technologies, including identity and access management (IAM), encryption, and security monitoring.
• Strong analytical and problem-solving skills, with the ability to assess complex security issues and develop effective solutions.
• Excellent communication and interpersonal skills, with the ability to effectively communicate technical information to non-technical stakeholders.
• Ability to work independently and collaboratively in a fast-paced, dynamic environment.
• Demonstrated leadership and project management skills, with the ability to prioritize tasks, meet deadlines, and deliver results.

Responsibilities :

• Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

• Bachelor’s Degree in Computer Science/Information Technology or equivalent.
• 5+ years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.
• Demonstrated understanding of business processes, IT risk management, and related standards.
• Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.
• Proven track record of staying current with evolving cybersecurity threats and best practices.
• Exceptional planning and organizational skills, and excellent written and oral communication.
• Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.
• Professional information security certification preferred, such as:

- CompTIA Security+

- Certified Information Systems Security Professional (CISSP)

- Certified Information Systems Auditor (CISA)

- Certified Information Security Manager (CISM)