Consultant Security (CISM/CISSP or equivalent)

Avensys is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success, we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail and supply chain.

We are seeking an experienced and business-oriented Security Consultant.

Job Descriptio

n
Scope of work - IT Security Services - cism/cissp certifi

edDeliver the scope of work defined belo

w:CARBON BLA

CKThe management of the Endpoint Detection and Response (EDR) system shall minimally include and not limited to the followin

g:- Administration of Carbon Black EDR servers configurati

on- Checking and recommend for new threat intelligence fee

ds- Administration of Carbon Black configuration sensor gro

up- Administration of user accou

nt- Management of EDR agents in serve

rs- Generation of repor

tsThe current EDR system is Carbon Black EDR. The above mentioned scope of work shall apply in the event of a change in the produc

t.TREND MICRO / TRELL

IXThe management of the Server Anti-Virus System in GDC and in HPB HQ shall minimally include and not limited to the followin

g:- To administrate Trend Micro Deep Security Manag

er- To administrate the active update from TrendMicro update serv

er- To administrate of updates to the agen

ts- To administrate virtual patchi

ng- To add/remove agents under monitori

ng- To manage the Virtual Patching feature in the serve

rs- To manage the configuration of policies and the deployment of these polici

es- To generate weekly report to agen

cyThe current the Server Anti-Virus System in HPB is Trend Micro Deep Security. The abovementioned scope of work shall apply in the event of a change in the produc

t.IMPER

VAThe management of the Imperva in shall minimally include and not limited to the followin

g:- To administrate Imperva SecureSphere, Imperva Data Risk Analyti

cs- To administrate of update gateways, management serve

rs- To administrate of updates to the agen

ts- To administrate patchi

ng- To add/remove agents under monitori

ng- To manage the configuration of policies and the deployment of these polici

es- To generate daily/weekly/monthly report to agen

cyARCSIG

HTThe management of the ArcSight in shall minimally include and not limited to the followin

g:- To administrate Imperva ArcSight L

MS- To administrate of updates to the agen

ts- To administrate patchi

ng- To add/remove agents under monitori

ng- To manage the configuration of policies and the deployment of these polici

es- To generate daily/weekly/monthly report to agen

cyIT Configuration Manageme

nt- Periodically review IT asset inventory (hardware, software, network equipment, network attached equipment and end-points) records maintained and updated by Client appointed Asset Office

r.- Maintain oversight and review the Obsolescence at System Family Leve

l.- Prepare and submit report to Clie

nt- Incident Manageme

nt- Lead investigation and resolution of Security incide

nt- Conduct root cause analysis and recommend improvement solution for recurrent incident to Clien

t.IT Security Manageme

nt- Schedule security scan for identified systems according to policies and verify all vulnerability rectifications are satisfactorily performe

d.- Conduct Security Review on System Access and administration patterns weekly, and report unusual or suspicious activities, if any, to clien

t.- Track, mitigate and deploy patch security vulnerabilities accordingly to the stipulated timeline. Maintain oversight and submit reports on monthly basi

s.- Escalate and/or seek Client's acceptance and approval of assessed risk

s.- Manage and administer any security monitoring tools including splunk, arcsight, EDR are addon advantag

e.IT Security Compliance & QA Manageme

nt- Ensure compliance status of the Systems adheres to applicable standards, polices, directives and guideline

s.- Review weekly/monthly account review based on the requirement

s.- Review weekly/monthly log review based on the requirement

s.- Declare, review and report compliance status to head office annuall

y.- During audit exercise, work with stakeholders to provide responses and evidence to auditors or compliance related declaration

s.
WHAT'S ON OF

FERYou will be remunerated with an excellent base salary and entitled to attractive company benefits. Additionally, you will get the opportunity to enjoy a fun and collaborative work environment, alongside a strong career progressi

on.To submit your application, please apply online or email your UPDATED CV in Microsoft Word format to [Confidential Information]. Your interest will be treated with strict confidentiali