Total 6 system analyst job vacancies in Legal / Public / Security category in D15 Katong, Joo Chiat, Amber Road

Job Summary:

We are seeking a skilled and dedicated Information Security Analyst/Consultant to join our team. In this role, you will be responsible for advising, assisting, and implementing information security programs for our clients using frameworks such as ISO/IEC 27001:2022 and Cyber Trust Mark, in addition you will also be involve in overseeing the implementation of security solutions to assist clients in improving their information security and cyber security posture. You will work closely with clients to assess their security needs, develop robust security strategies, and ensure compliance with industry standards and are expected to manage client’s requirements and expectations during the consulting process helping them to achieve ISO/IEC 27001:2022 or Cyber Trust Mark Certification.

Key Responsibilities:

• Client Advisory and Consultation: Provide pre-sales support, expert advice and consultation to clients on information security practices and strategies.
• Framework Implementation: Assist clients in developing and implementing information security programs using frameworks like ISO/IEC 27001:2022 and Cyber Trust Mark.
• Security Assessments: Conduct comprehensive security assessments to identify vulnerabilities and recommend mitigation strategies.
• Policy Development: Develop and maintain information security policies, procedures, and guidelines for clients.
• Compliance and Auditing: Ensure client compliance with industry standards and regulatory requirements through regular audits and assessments.
• Risk Management: Identify, analyze, and manage information security risks for clients.
• Incident Response: Assist clients in developing incident response plans and provide support during security incidents.
• Training and Awareness: Conduct training sessions and workshops to raise awareness about information security best practices among client employees.
• Documentation: Prepare detailed reports and documentation for security assessments, policies, and compliance efforts.
• Monitoring Emerging Technologies and Threats: Stay up-to-date with emerging technologies and threats in AI, blockchain, and other relevant fields, and integrate this knowledge into security strategies.
• Security solutions: Understand and learn new cybersecurity solutions and assisting to implement these solutions to improve their security posture.

Qualifications:

• Education: Minimum diploma in Cyber Security, Computer Science, or related field and minimum 3 years of experience in IT or Cyber Security field.
• Certifications: Good to have certifications such as CISSP, CISM, or ISO/IEC 27001 Lead Auditor/Implementer, Certified Ethical Hacker.
• Experience: Proven experience in information security consulting, with a focus on implementing security frameworks like ISO/IEC 27001:2022, NIST, CSA Star and CIS.
• Skills: Strong analytical, problem-solving, and communication skills. Proficiency in security assessment tools and methodologies.
• Knowledge: In-depth knowledge of information security principles, standards, and best practices.
• Project management: Understanding of stakeholder management and managing project lifecycle.

What We Offer:

Opportunities for professional development and career growth. A dynamic and collaborative work environment.

Cybersecurity certification training opportunities

Job Summary:

The IT Security Specialist will be responsible for the development, implementation, and ongoing review of a comprehensive security framework. This includes creating and maintaining security policies, performing audits, conducting risk assessments, and managing customer incident response plans. The role involves being the main point of contact for security-related matters and collaborating with customers to ensure the security of their ICT systems. The ideal candidate will have a strong background in IT security, including experience with networks, servers, databases, and security auditing.

Key Responsibilities:

• Review and develop security frameworks, information security policies, and related processes, ensuring they are up to date and aligned with best practices.

• Conduct security reviews and audits, including log analysis and security assessments of customer ICT systems.

• Perform security risk management exercises, identifying vulnerabilities and mitigating risks.

• Organize and conduct table-top security exercises to simulate potential security incidents.

• Conduct vulnerability assessments and coordinate penetration testing activities.

• Provide information security awareness training to project and internal teams.

• Develop and manage customer security incident response plans, leading incident resolution and response efforts.

• Serve as the primary point of contact and advisor for customers on ICT security-related matters.

• Project manage security initiatives during the implementation phase, ensuring timely and quality delivery.

Requirements:

• Minimum of 3 years of experience in IT security.

• Expertise in Networks, Servers (Windows and UNIX), and Database systems.

• Experience with IT security auditing and security assessments.

• Proficient in analysing logs from various sources and understanding protocols and traffic flows.

• Knowledge of security tools such as Active Directory, Endpoint Protection Solutions, Early Detection and Response Solutions, Database Activity Monitoring tools, and SIEM systems.

• Excellent communication and presentation skills.

• Proficiency in Microsoft Excel.

• Flexible, team-oriented approach with a strong focus on problem-solving.

• Strong organizational skills and the ability to work independently in a dynamic environment.

• Ability to multitask effectively between various projects and teams.

Certifications:

• CISSP certification is mandatory.

• Additional certifications like CISM, Security+, or certifications in security tools such as Imperva and Carbon Black are a plus

As an IT Security Analyst, you will be responsible for assessing and managing cybersecurity risks by evaluating technologies and solutions against industry standards. You will identify, analyze, and prioritize potential security threats while developing and implementing effective risk mitigation strategies. Regularly maintaining and updating the organization’s risk register will also be part of your duties.

Risk Management

• Evaluate technologies against cybersecurity standards.
• Identify and prioritize security risks.
• Advise on cloud security for platforms like AWS and Azure.
• Update and maintain the risk register.

Compliance

• Stay updated on IT security regulations (e.g., PCI-DSS, ITRM, IM8).
• Develop and enforce security policies.
• Monitor compliance and report to stakeholders.

Security Operations

• Monitor and mitigate potential data loss events, and investigate suspected incidents.
• Investigate security incidents and implement appropriate response measures.

Business Continuity

• Review and update crisis plans.
• Organize simulation exercises.

Qualifications:

• Bachelor’s degree in Cybersecurity, IT, or equivalent experience.
• At least 3 years of experience in IT security and compliance.
• Strong knowledge of IT security frameworks.
• Familiarity with security tools (e.g., DLP, SIEM).
• Experience with cloud platforms (AWS, Azure).
• Cloud security certification (e.g., CCSP, AZ 500) is a plus.
• CISA, CISM, or CISSP certification is an advantage.

Job Description

We are looking for a skilled IT Security Specialist to be responsible for designing, implementing, and managing security measures to protect our customer’s ICT systems. The role involves developing security frameworks, conducting assessments, managing incidents, and advising on ICT security matters. This position requires strong experience in IT security, excellent analytical skills, and the ability to lead security projects.

Key Responsibilities:

• Review and develop security frameworks, information security policies, processes, procedures, and guidelines on an ongoing basis.
• Establish compliance with policies and procedures through continuous security reviews and audits, including log analysis and security assessment of customer ICT systems.
• Conduct security risk management exercises and table-top exercises to test security readiness.
• Conduct vulnerability assessments and coordinate penetration testing activities.
• Lead information security awareness training sessions for employees and stakeholders.
• Develop and manage the customer’s security incident response plan.
• Lead and support the customer in security incident resolution and response.
• Act as the main point-of-contact and customer liaison for ICT security-related matters, providing assistance and advice as needed.
• Manage the activities and deliverables during the implementation phase of security projects.

Requirements:

· Minimum of 3 years of experience in IT security.

· Hands-on experience with Networks, Servers (Windows and UNIX), and Database systems.

· Proven experience in IT security auditing and security assessments.

· Strong understanding of protocols, traffic flows, and the ability to analyse logs from various sources.

· Knowledge of security technologies such as Active Directory, Endpoint protection solutions, Early Detection and Response (EDR) solutions, Database Activity Monitoring tools, and SIEM (Security Information and Event Management).

· Proficiency in Microsoft Excel for data analysis and reporting. Excellent written and verbal communication and presentation skills.

· Strong organizational skills and the ability to plan and execute work independently.

· Ability to work in a fast-paced environment with a flexible, team-oriented approach.

· Strong multitasking skills with the ability to switch contexts effectively between different activities and teams.

Preferred Certifications:

· CISSP certification is a must.

· Additional certifications such as CISM, Security+, and IT security tools certifications (e.g., Imperva, Carbon Black) are a plus.

General Overview:

As a Security System Administrator, you are responsible for the smooth security system operations for an MNC client's Security operation center (24*7 SOC center). Responsibilities may include security system monitoring, troubleshooting, analysis reporting, preventive health checking, coordinating with other parties, and working with other team members to achieve objectives. You will ensure that customers have the best possible experience and have the highest quality of services.

Main Responsibilities may include:

• Monitor/troubleshoot/manage the security system for the customer's security operation center (24*7 SOC center).
• Perform daily system health checks, proactively monitor system health status.
• Data analysis and generate report per client requirements.
• Support and troubleshoot software issues, including access control, CCTV, alarm, visitor management, and any other systems under contract.
• Acknowledge alarms, answer calls, and troubleshooting.
• Eliminate alarm defects, track and manage via trouble tickets.
• Follow standard practices and procedures to respond appropriately to external and internal threats.
• Report alarm defects through trouble tickets to upper management.
• Perform initial investigation and/or troubleshooting of the system and network issues for trouble shooting purposes.
• Mask alarms points as approved.
• Thoroughly document steps to resolve incidents in the service ticketing system.
• Notify management when Service Level Agreements are missed.
• Perform various programming and technical project/ administration related activities on the security systems.
• Access provisioning.
• Upon approval, program access control and intrusion detection hardware.

We have an immediate position to be filled. Fresh graduates are welcome to apply to have a feel of what it's like to work in a Security, Network & Service Desk Operations Center.

Qualifications

• Fresh graduates Degree/Diploma/ITE in Computer Science or Information Technology or its equivalent, are welcome to apply
• Preferably with 1-2 years of experience in IT in system, network, and/or application security with knowledge of network and web-related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, BGP and other routing protocols)
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits, application of threat modeling or other risk identification techniques
• Possess basic technical knowledge in IT network infrastructure, server platforms (Unix, Windows platform) and desktops (OS X and Windows XP and the above)
• Excellent teamwork player
• Strong sense of ownership and drive

Tier 1 Functions and Responsibilities:

• Work in a rotational 24/7 environment
• Respond to the incoming enquiries/incident/request/alerts (Call, Email, Webchat, EUP, IVR handling, Monitoring consoles)
• 1st level troubleshooting of in supported systems; i.e. Workplace; Server; Network; Microsoft 365; Secure Access Service Edge; Point of Sale
• Security event monitoring - accurate and rapid response to security events, participate in incident response
• Server and network availability and performance monitoring
• Password reset and unlock
• Perform log & route [to higher tier or Resolver Team(s)]
• Record and manage all transactions/ cases in Service Management System
• Broadcast notifications to the relevant parties
• Provide timely status update, follow up on cases escalated until closure within the service level agreement.
• Ensure daily tasks are executed according to the Standard Operation Procedure