IT Security Consultant

Avensys is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail, and supply chain.

We are currently looking to hire IT Security Consultant. This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

Job description

IT Security

CISM

CISSP

Job Role: IT Security Consultant

CARBON BLACK

The management of the Endpoint Detection and Response (EDR) system shall minimally include and not limited to the following:

Administration of Carbon Black EDR servers configuration

Checking and recommend for new threat intelligence feeds

Administration of Carbon Black configuration sensor group

Administration of user account

Management of EDR agents in servers

Generation of reports

The current EDR system is Carbon Black EDR. The above mentioned scope of work shall apply in the event of a change in the product.

TREND MICRO / TRELLIX

The management of the Server Anti-Virus System in GDC and in HPB HQ shall minimally include and not limited to the following:

To administrate Trend Micro Deep Security Manager

To administrate the active update from TrendMicro update server

To administrate of updates to the agents

To administrate virtual patching

To add/remove agents under monitoring

To manage the Virtual Patching feature in the servers

To manage the configuration of policies and the deployment of these policies

To generate weekly report to agency

The current the Server Anti-Virus System in HPB is Trend Micro Deep Security. The abovementioned scope of work shall apply in the event of a change in the product.

IMPERVA

The management of the Imperva in shall minimally include and not limited to the following:

To administrate Imperva SecureSphere, Imperva Data Risk Analytics

To administrate of update gateways, management servers

To administrate of updates to the agents

To administrate patching

To add/remove agents under monitoring

To manage the configuration of policies and the deployment of these policies

To generate daily/weekly/monthly report to agency

ARCSIGHT

The management of the ArcSight in shall minimally include and not limited to the following:

To administrate Imperva ArcSight LMS

To administrate of updates to the agents

To administrate patching

To add/remove agents under monitoring

To manage the configuration of policies and the deployment of these policies

To generate daily/weekly/monthly report to agency

IT Configuration Management

Periodically review IT asset inventory (hardware, software, network equipment, network attached equipment and end-points) records maintained and updated by Client appointed Asset Officer.

Maintain oversight and review the Obsolescence at System Family Level.

Prepare and submit report to Client

Incident Management

Lead investigation and resolution of Security incident

Conduct root cause analysis and recommend improvement solution for recurrent incident to Client.

IT Security Management

Schedule security scan for identified systems according to policies and verify all vulnerability rectifications are satisfactorily performed.

Conduct Security Review on System Access and administration patterns weekly, and report unusual or suspicious activities, if any, to client.

Track, mitigate and deploy patch security vulnerabilities accordingly to the stipulated timeline. Maintain oversight and submit reports on monthly basis.

Escalate and/or seek Client's acceptance and approval of assessed risks.

Manage and administer any security monitoring tools including splunk, arcsight, EDR are addon advantage.

IT Security Compliance & QA Management

Ensure compliance status of the Systems adheres to applicable standards, polices, directives and guidelines.

Review weekly/monthly account review based on the requirements.

Review weekly/monthly log review based on the requirements.

Declare, review and report compliance status to head office annually.

During audit exercise, work with stakeholders to provide responses and evidence to auditors or compliance related declarations.

Provide a Rectification Plan on any gaps found.

Provide rectification plan for issues arising from audit.

Seek waiver on compliance whenever it is justifiable

Additional Information

We are driven by our AEIOU beliefsAdventure, Excellence, Integrity, Ownership, and Unityand we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.

Together, we make the extraordinary happen

WHAT'S ON OFFER

You will be remunerated with an excellent base salary and entitled to attractive company benefits. Additionally, you will get the opportunity to enjoy a fun and collaborative work environment, alongside a strong career progression.

To submit your application, please apply online or email your UPDATED CV in Microsoft Word format to [Confidential Information]. Your interest will be treated with strict confidentiality.

CONSULTANT DETAILS

Consultant Name: Abinaya R

Reg No: R1765546

Avensys Consulting Pte Ltd

EA Licence 12C5759

Privacy Statement: Data collected will be used for recruitment purposes only. Personal data provided will be used strictly in accordance with the relevant data protection law and Avensys privacy policy.