IT Security Officer

Employment Type: 1 Oct 2026 - 31 Mar 2027 (Contract)

Working Days/Hours: Monday to Friday (9am - 6pm)

Location: Botanic Gardens

Eligibility: Singaporean ONLY

Job Summary

Oversee cybersecurity vulnerability assessments, incident response, and security operations to safeguard enterprise IT infrastructure. Work in collaboration with various teams and vendors to ensure adherence to compliance standards and promote ongoing security enhancements.

Responsibilities

• Conduct vulnerability assessments across servers, endpoints, applications, both on-premises and in Azure environments, utilizing TenableOne, VMS, and Cloudscape tools to identify and prioritize security threats.
• Examine vulnerability and patch compliance reports to prioritize risks and monitor remediation, exceptions, and risk acceptances for efficient risk management.
• Engage with infrastructure and application teams regarding unresolved vulnerabilities and escalate high-risk or overdue issues to guarantee prompt resolution.
• Evaluate vulnerability trends and compile comprehensive reports and evidence for management, audits, and compliance reviews to support data-driven decision-making.
• Ensure that remediation efforts align with IM8 and internal security protocols to uphold the organization's security standards.
• Assist in cybersecurity incident investigations by identifying, escalating, containing, recovering from, and closing security incidents to mitigate impact.
• Collaborate with the CISO, infrastructure/application teams, business stakeholders, and security vendors to ensure effective incident response and resolution.
• Maintain records of incidents, track remediation actions, and assist in post-incident reviews to enhance security processes.
• Support the operation and monitoring of DDoS protection and WAF services for internet-facing applications by analyzing security alerts, attack reports, and service performance metrics.
• Facilitate WAF rule modifications and collaborate with vendors and internal teams to investigate security events and resolve service-related issues swiftly.
• Coordinate cybersecurity and infrastructure initiatives across application, infrastructure, facilities management, and external vendors to ensure unified security operations.
• Maintain registers for security risk, remediation, and compliance to monitor and manage overall security posture.
• Track action items arising from vulnerabilities, incidents, audits, and service reviews, escalating issues as needed to ensure accountability.
• Synthesize and analyze data related to security, vulnerabilities, incidents, and compliance to generate dashboards, management reports, and security metrics focusing on vulnerability remediation, patch compliance, incidents, and security services.
• Assist with audits, management reviews, and the collection of compliance evidence to maintain regulatory and internal standards.

Required competencies and certifications

• Diploma or Degree in IT, Cybersecurity, Computer Science, Information Systems, or a related field.
• 2-5 years of experience in cybersecurity, IT security operations, or vulnerability management.
• Proficiency with Tenable or similar vulnerability management tools.

Preferred competencies and qualifications

• Experience with Azure security, incident response, DDoS/WAF, and enterprise security operations.
• Familiarity with IM8, NIST, ISO 27001, and CIS Controls.
• Strong knowledge of Excel and PowerPoint for reporting and analytical purposes.
• Excellent coordination, communication, and stakeholder management abilities.
• Strong analytical and problem-solving skills.
• Highly organized, detail-oriented, and capable of managing multiple priorities.
• Able to work both independently and as part of a team.
• Azure / Microsoft Security Certifications.
• CompTIA Security+.
• CEH.
• ISC2 CC.
• CISSP / CISM.