Job Summary:
We are seeking IT Security Officers (ITSOs) who will serve as IT security subject matter experts, providing comprehensive support for system managers. The team will be responsible for ensuring the security of the IT infrastructure, compliance with security policies and standards, and overseeing cyber operations across all hosting environments (On premise, GDC, GCC, GCC+ and etc).
Responsibilities:
- Conduct security reviews, system hardening checks and conducting risk assessment based on deviations to hardening requirements (e.g. CIS Benchmarks).
- The team will also create PUB hardening baselines using available benchmarks (e.g. CIS Benchmarks or those provided by the manufacturer).
- Responsibilities include create, review and maintain Standard Operation Procedures (SOPs), planning and scheduling annual reviews of security hardening documents, performing compliance reviews.
- Monitoring phishing alerts and communicating with staff regarding malicious emails, supporting audit activities, vulnerability scans, and penetration tests.
- Communicating and following SOP to perform malware scans on endpoints with anti-virus alerts
- The ITSO shall follow up on findings identified in CSPM and in-house CSPM tool (Cloudscape).
- Maintain a tracking system to monitor the status of remediation efforts, documenting whether recommended actions have been completed, are in progress, or require escalation, ensuring accountability and timely resolution of security issues.
- The ITSO shall be able to make assessment if the security recommendations are required or false alarms (using GenAI tool provided by PUB to aid him in his assessment).
- The role involves providing vulnerability monitoring and recommending and implementing mitigation actions to system Officers-in-Charge and infrastructure teams.
- Provide security advice or proposals on security measures for new projects and functionalities and monitor governance compliance tools, such as Cloudscape.
- Expected to manage and update into the governance compliance tools with the relevant information to suppress the affected findings when approval is sought.
- Respond to auditors RFI on security monitoring.
- Monthly reports to summarize the progress of tasks and to flag outstanding non-remediated issues/alerts across the key security domains will be compiled collaboratively by the team and presented to the Board's Cybersecurity team.
Qualifications:
- Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field
- Experience in IT Security for 3 - 9 years. Over all experience not more than 20 years
- Any internationally recognized security certifications such as CISSP, CISM, CRISC, or CISA.
- Proven experience of at least 2 years is required, in security assessment, vulnerability management within cloud and on prem environments, particularly GCC.
- Familiarity with security platforms such as Azure Log Analytics, AWS CloudWatch, AWS Security Hub CSPM, and Microsoft Defender for Cloud are preferred.
- Strong analytical and problem-solving skills are necessary to resolve security related issues
Interested candidates may apply through the application system or send it to [Confidential Information] . Shortlisted candidates will be notified.
By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan McKinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.morganmckinley.com/sg/privacy-policy . You acknowledge that you have read, understood, and agree with the Privacy Policy.
Morgan McKinley Pte Ltd
Dinu Dinesh
EA License No: 11C5502
EAP Registration No: R22110286
