Total 3,742 Full-time information security analyst job vacancies

About the client:

Our client is a reputed MNC

Responsibilities:

• Collaborate with business stakeholders to gather analyze and document ESG related requirements
• Translate business needs into functional and technical specifications for data and analytics solutions
• Work closely with data engineering and data science teams to design and implement ESG reporting and analytics solutions
• Analyze ESG datasets eg carbon emissions sustainability metrics compliance data to identify trends and insights
• Support the development of ESG dashboards KPIs and performance tracking frameworks
• Ensure alignment with global ESG standards and frameworks eg GRI SASB TCFD ISSB
• Assist in defining data models data governance and data quality standards for ESG reporting
• Participate in UAT User Acceptance Testing and validate system outputs against requirements
• Provide domain expertise on ESG products services and regulatory expectations
• Create comprehensive documentation including BRDs FRDs use cases and process maps
• Facilitate communication between business product and technical teams

Skills/Requirement:

• Bachelors or Masters degree in Business Finance Data Science Sustainability or related field
• 5 years of experience as a Business Analyst preferably in ESG sustainability or financial services domains
• Strong understanding of ESG concepts reporting frameworks and sustainability metrics
• Proven experience working with data analytics data modeling and data visualization tools eg Power BI Tableau
• Familiarity with data science concepts statistical analysis and predictive modeling
• Minimal Hands on experience with SQL and or Python R for data analysis will be good to have

Interested candidates, who wish to apply for the above position, please send in your resume to kellyitsg@persolapac.com

We regret to inform that only shortlisted candidates will be contacted

PERSOL Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1551772 (Kankanala Lakshmi Prasanna)

**********************************

The information contained in this e-mail and any accompanying documents may contain information that is confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message, including any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient is strictly prohibited.

This is in partnership with Employment and Employability Institute Pte Ltd (“e2i”). e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance and skills upgrading services, and partnering employers to address their manpower needs through recruitment, training and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation-wide manpower and skills upgrading initiatives. By applying for this role, you consent to e2i’s PDPA.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOL Singapore Pte Ltd and its local and overseas subsidiaries and affiliates collecting, using and disclosing your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services and such other purposes stated in our privacy policy. Our full privacy policy is available at www.persolapac.com. If you wish to withdraw your consent, please drop us an email to let us know. Please feel free to contact us if you have any queries.

All parties involved in any form of workforce engagement are to strictly adhere to prevailing regulations and laws that govern local fair employment practices, and to invest reasonable efforts in building a strong Singaporean core workforce, recruit and select candidates based on merit and prohibit discrimination based on age, race, gender, religion, marital status and family responsibility or disability. For more information, please refer to MOM and TAFEP websites.

**********************************

Company Overview

Zenith Infotech (S) Pte Ltd, founded in 1997, delivers advanced IT professionals and solutions to enhance productivity and competitiveness. They support clients with staff augmentation for long-term projects across IT companies, consulting firms, system integrators, government, and MNCs.

Job Summary

We are seeking a skilled and motivated Analyst Programmer to design, develop, implement, and support enterprise and web-based applications. You will apply strong Java, database, and cloud platform expertise alongside analytical and communication skills to deliver effective business solutions.

Responsibilities

• Gather, analyze, and document business and user requirements to create clear functional and technical specifications
• Design, develop, test, and maintain application systems and web-based solutions to meet business needs
• Perform system enhancements, troubleshoot issues, debug code, and resolve defects to ensure application stability
• Collaborate with stakeholders, business users, and technical teams to deliver scalable, high-quality software solutions
• Develop and execute unit, integration, and system tests to validate application functionality and performance
• Support application deployment, production releases, and post-implementation activities to ensure smooth transitions
• Maintain comprehensive technical documentation including design specifications, support guides, and operational procedures
• Ensure compliance with coding standards, security policies, and software development best practices throughout the lifecycle
• Monitor application performance metrics and recommend improvements to enhance reliability and efficiency
• Provide ongoing application and systems support to address user needs and system issues

Required competencies and certifications

• Bachelor’s degree in Computer Science, Information Technology, Software Engineering, or related discipline
• Minimum 3 years of experience in application development, programming, and systems support
• Proven experience delivering and supporting enterprise applications

Preferred competencies and qualifications

• Experience with Qlik Talend or other ETL (Extract, Transform, Load) tools
• Experience in data integration, migration, and transformation projects
• Familiarity with Agile development methodologies and DevOps practices
• Exposure to cloud-native application development and deployment

Other Information

Benefits and Work Conditions

• Employment type: Contract
• Location: Central Region, Singapore
• Working Hours: 8:30 AM to 6:00 PM (Monday to Friday)
• Salary range: $5000 - $7000 (no bonus)
• Working arrangement: Full onsite

EA 20S0237

We are seeking an experienced Senior Systems Analyst (BSA) to join a leading banking organization and play a key role in delivering innovative digital banking solutions. This position will work closely with business stakeholders, product owners, architects, and technology teams to translate business requirements into scalable digital solutions that enhance customer experience across banking channels.

The ideal candidate will have a strong background in digital banking platforms, API integration, and end-to-end Software Development Life Cycle (SDLC) delivery within a banking environment.

Key Responsibilities

• Collaborate with business stakeholders to gather, analyze, and document business and system requirements.
• Facilitate workshops and requirement elicitation sessions with business users, product teams, and technology stakeholders.
• Translate business needs into functional and technical specifications, user stories, process flows, and use cases.
• Work closely with solution architects, developers, and QA teams throughout the SDLC to ensure successful delivery.
• Analyze and define API requirements, integration flows, and system interfaces across digital banking ecosystems.
• Support solution design discussions and ensure requirements align with business objectives and technology standards.
• Participate in system testing, UAT, defect triage, and production implementation activities.
• Identify process improvement opportunities and recommend digital solutions to enhance customer and operational outcomes.
• Ensure compliance with banking, security, and regulatory requirements.

Required Experience & Skills

• Minimum 8 years of experience as a Business Systems Analyst, Technical Business Analyst, or similar role.
• Proven experience delivering Digital Banking initiatives within Banking or Financial Services.
• Strong understanding of end-to-end SDLC methodologies, including Agile and Waterfall delivery frameworks.
• Hands-on experience working with APIs, integration services, microservices, and system interfaces.
• Good understanding of digital banking channels, including:Internet BankingMobile BankingDigital OnboardingPayments & TransfersCustomer Self-Service PlatformsAuthentication and Security Solutions
• Experience creating business requirements documents (BRD), functional specifications, process maps, user stories, and acceptance criteria.
• Strong stakeholder management and communication skills with the ability to engage both business and technical audiences.
• Experience using tools such as Jira, Confluence, Visio, Swagger/Postman, or equivalent.
• Knowledge of Open Banking, API ecosystems, and modern banking architectures will be highly regarded.

Interested candidates please email your latest resume to subagio@tangspac.com

Senior Analyst in an emerging markets Private Equity firm, based in Singapore covering Southeast Asia. Reports to Head of SEA. Assisting the senior members of the team, you will be responsible for:

• Managing and monitoring existing investments
• Supporting the investment process for new investments
• Sourcing and conducting due diligence on prospective investment opportunities
• Compiling performance data and performing portfolio analysis and benchmarking
• Preparing quarterly and annual internal and external reporting documents

To qualify candidates must possess:

Degree-qualified (5+ years)

• CFA qualification an advantage
• 5+ years of experience in buy-side, consulting or investment banking
• Demonstrated ability to communicate effectively and persuasively
• Astute commercial sense, strong analytical skills and superior critical thinking
• Able to multi-task and focus on delivering results
• Fluent in written and spoken English and at least one other relevant language (Bahasa an advantage)
• Local business / cultural knowledge in Indonesia, Philippines and Thailand an advantage

Job Description:

• Analyzing market data, building financial models and preparing client presentations for mergers and acquisitions or debt capital markets transactions.
• Conduct market research and summarize findings and conclusions to support pitch or execution document.
• Assisting in client transactions from pitch to close.
• Assist in credit ratings advisory work.
• Assist in sustainable financing advisory work.

Job Requirements:

• Ability to thrive in a dynamic, collaborative work environment.
• Excellent analytical, quantitative and interpretative skills.
• Being adaptable, flexible and resilient.

• Minimum 10+ years of experience in IT/OT infrastructure and operational environments.
• Experience integrating enterprise IT networks with OT systems and industrial equipment.
• Hands-on knowledge of HMIs, PLCs, SCADA systems, sensors, CMMs, CNC machines, and 3D printers.
• Ability to update PLC configurations, IP addressing, and network parameters.
• Perform OT asset inventory collection, validation, and documentation.
• Identify operational and cybersecurity risks and proactively escalate issues.
• Strong understanding of industrial protocols such as OPC-UA, Modbus TCP/IP, Ethernet/IP, and SMB.
• Experience designing and supporting LAN/WAN networks, VLANs, and routing protocols.
• Proficiency in configuring Cisco switches, routers, SD-WAN, and Check Point firewalls.
• Experience with firewall rule management, network security configuration, and troubleshooting.
• Knowledge of network segmentation and micro-segmentation using VLANs, switches, and network taps.
• CCNA/CCNP, CompTIA Network+, or equivalent networking certification preferred.

EA License No: 11C4879 / Registration ID : R1218583

Apar Technologies Pte Ltd, Singapore

To lead and ensure that security management practices across the region are implemented and

maintained to ensure the security of people, assets and operations of DP World within the region.

• To ensure security compliance of the BUs in the region to their respective applicable mandatory,

voluntary and client specific security compliance requirements. These requirements must be identified

and the list to be maintained.

• To plan and support implementation of compliance standards like ISPS Code, ISO 28000, TAPA etc. that

are required or planned as improvement by the BUs within the region.

• To ensure that security awareness becomes a culture within the region, using security campaigns,

training, outreach, and awareness sessions, either in person to locally based colleagues or remotely

through delegated security managers regionally

• To ensure all travellers in the region are apprised of security risk factors and implement measures and

mitigation techniques appropriate to the specific location

• To maintain close contact with regional peers within DP World and to build effective relationships with

regional and local agencies who can assist the collection of security information and the response to an

incident

• Undertake Risk Assessments and provide advice on security matters and compliance for new projects.

• Undertake security reviews and/or audits within the region as per frequency agreed with Group Security

and Regional Head.

• Lead, support and project manage on all aspects of security for new businesses and acquisitions.

• Support and where assigned lead security systems projects within the region.

• Support the integration of new businesses to the global security management system requirements.

• Prepare and submit security reports for the region to Group Security and Regional Head in the agreed

template(s) and frequency.

OTHER

• Applicable if role has direct or indirect reports - responsible for the management and leadership of an

engaged team, promoting collaboration and ensuring that each is developed and evaluated against goals

and objectives which are aligned, specific, measurable, attainable yet challenging, realistic and time

bound.

• Act as an ambassador for DP World at all times when working; promoting and demonstrating positive

behaviours in harmony with DP World's Principles, values and culture; ensuring the highest level of safety

is applied in all activities; understanding and following DP World's Code of Conduct and Ethics policies.

• Perform other related duties as assigned

Job Requirements

• Candidate must possess at least a Diploma in Computer Science/Information Security, Engineering (Computer/Telecommunication) or equivalent.
• Required skill(s): Python.
• Expertise in other programming languages are advantageous.
• Only Singaporeans or PR are eligible.
• Candidates who possess OSCP and CREST Registered Tester certification.will be preferred.

Job Description

• Participate in security review and assessment for our clients' systems.
• Participate in forensics and incident response engagements.
• Participate in security consultancy and advisory engagements.
• Learn how to work independently and in a team.

Working Hours: Monday – Thursday (8.30am –6pm), Friday (8.30am – 5.30pm) (Hybrid working arrangement) 

Working Location: North East

Salary Package: Up to SGD 11,000 + AWS 

Employment Type: Contract (1 year renewable with chances of conversion)

We are looking for a Cloud Security & DevSecOps Engineer to design, develop, and maintain secure, scalable, and automated solutions across cloud and endpoint environments. You will be responsible for software development, cloud engineering, DevSecOps automation, endpoint security, Zero Trust implementation, and Site Reliability Engineering (SRE) practices. This role requires a strong technical foundation across software engineering, cloud platforms, security technologies, and infrastructure automation.

Key Responsibilities

Software Development

• Design, develop, and maintain secure, scalable, and well-documented software solutions.
• Develop applications and automation tools using Python, Java, Node.js, JavaScript/TypeScript, or similar technologies.
• Design and integrate RESTful APIs and web services.
• Work with databases such as AWS DynamoDB and SQL-based databases.
• Collaborate with stakeholders to develop frontend and backend solutions, ensuring seamless system integration.
• Implement software testing and quality assurance best practices.
• Manage source code and development workflows using Git and version control tools.

Endpoint Security, Zero Trust & Identity Management

• Develop and implement solutions to secure and manage endpoint devices across Windows and macOS environments.
• Work with security platforms such as Microsoft Intune, CrowdStrike, CyberArk, and Tanium.
• Automate threat detection, remediation, reporting, and security operations processes.
• Design and implement Zero Trust security architectures and secure access solutions.
• Configure and manage identity and access management (IAM) solutions using Azure Entra ID, Okta, AWS IAM, SAML, and related technologies.
• Administer Cloudflare services including Access, Gateway, and Web Application Firewall (WAF).
• Implement secure authentication, authorisation, and access control frameworks.

Cloud Engineering, DevOps & Automation

• Design, develop, and maintain cloud-native solutions on AWS and Azure platforms.
• Build automation solutions leveraging AWS services such as Lambda, ECS Fargate, DynamoDB, SQS, S3, EC2, CloudWatch, IAM, VPC, WAF, and Step Functions.
• Develop Infrastructure-as-Code (IaC) solutions using Terraform and cloud-native tooling.
• Build and maintain CI/CD pipelines using GitLab CI and other DevOps tools.
• Implement and manage containerised environments using Docker and Kubernetes.
• Support Agile delivery practices through Scrum and Kanban methodologies.
• Conduct proof-of-concepts (PoCs) and evaluate emerging technologies to improve operational efficiency and security.

Site Reliability Engineering (SRE)

• Develop and maintain observability, monitoring, and alerting solutions using the ELK Stack (Elasticsearch, Logstash, Kibana).
• Define and track SLI, SLO, and SLA metrics to ensure service reliability and performance.
• Build dashboards, alerts, and predictive monitoring capabilities.
• Manage ELK clusters, agents, fleet policies, and log ingestion pipelines.
• Design and implement automated recovery and self-healing mechanisms for critical systems.
• Continuously improve platform reliability, scalability, and operational excellence.

Requirements

• Degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or related discipline.
• Experience in software development using Python, Java, Node.js, JavaScript/TypeScript, or similar languages.
• Hands-on experience with AWS and/or Azure cloud platforms.
• Strong knowledge of DevOps, CI/CD, Infrastructure-as-Code, and automation practices.
• Experience with endpoint security, Zero Trust architecture, IAM, and security technologies.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781

Responsibilities

·      Define and drive the vision, roadmap, and maturity model for application security across the enterprise.

·      Align application security initiatives with business objectives, compliance requirements, and risk management frameworks.

·      Act as the primary liaison between development teams, security functions, and executive stakeholders.

·      Secure Development Lifecycle (SDLC) Integration

·      Embed security practices into the SDLC, including threat modeling, secure design reviews, and code analysis.

·      Champion DevSecOps principles, ensuring security automation and continuous integration pipelines are robust and scalable.

·      Provide guidance on secure coding standards, frameworks, and best practices.

·      Establish policies, standards, and metrics to measure application security effectiveness.

·      Conduct regular risk assessments and oversee remediation of vulnerabilities.

·      Lead and mentor a team of application security engineers and specialists.

·      Partner with product owners, architects, and developers to balance innovation with security requirements.

·      Build strong relationships with executive leadership to communicate risks, progress, and strategic priorities.

·      Evaluate emerging technologies, tools, and methodologies to enhance application security capabilities.

Qualifications

·      Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.

·      8+ years of experience in application security, software development, or cybersecurity, with at least 3 years in a leadership role.

·      Strong knowledge of secure coding practices, OWASP Top 10, and modern application architectures (cloud-native, microservices, APIs).

·      Hands-on experience with application security tools (SAST, DAST, IAST,RASP, container security).

·      Proven ability to lead cross-functional teams and influence executive stakeholders.

·      Excellent communication, leadership, and problem-solving skills.

All Successful candidates can expect a very competitive remuneration package and a comprehensive range of benefits.

Alternatively, you may wish to email your resume in a detailed Word format to debbie@peopleprofilers.com

We regret that only shortlisted candidates will be notified

People Profilers Pte Ltd, 20 Cecil Street, #08-09 PLUS Building, Singapore 049705

 Tel: 69509748

http://www.peopleprofilers.com

debbie@peopleprofilers.com

Consultant in charge: So Boon Shyen, Debbie

EA Licence Number: 02C4944

Registration Number: R1111376

The Cyber Security Specialist will architect, design, review, and implement cybersecurity solutions for large-scale projects and critical infrastructure. The role involves ensuring compliance with cybersecurity standards, monitoring and mitigating security risks, and developing cloud security architectures.

The specialist will also conduct vulnerability assessments, security audits, and provide consultancy on security vulnerabilities and risks.

Requirements:

• Lead and support cybersecurity implementation for large-scale projects and critical infrastructure systems.
• Ensure compliance with critical infrastructure cybersecurity standards (e.g., KINS/CII).
• Develop and implement cloud security architectures and solutions.
• Monitor, research, and analyse security risks to mitigate threats and attacks.
• Conduct vulnerability assessments, penetration testing (VAPT), and provide remediation recommendations.
• Perform system hardening, patch management, and secure configuration practices.
• Prepare and maintain security documentation (e.g., design documents, risk assessments, compliance reports).
• Provide guidelines for coding, key management, hardening, patch management, backup management, and incident management.
• Familiarity with public cloud infrastructures (Azure, AWS, GCP, Huawei).

Qualifications:

• Proven experience in large-scale projects, preferably in government or critical infrastructure environments.
• Strong familiarity with cybersecurity frameworks and standards (e.g., IM8, CIS, NIST).
• Hands-on experience in security architecture, system hardening, vulnerability assessment, and network/system security controls.
• Experience with network security, firewalls, VPNs, and identity and access control.
• Experience in system integration or project delivery environments.
• Strong documentation, communication, and stakeholder management skills.
• Relevant certifications (e.g., CISSP, CISM, CEH, CompTIA Security+) are a plus.

Reachfield Security (Grade “A” agency) specialises in supplying security manpower to Schools, Factories, Shopping Centres, Museums, libraries, etc.

Security Officer

Location: Braddell

Timing: 630-630

////////////////////////////////////////////////////////////////////////

1. Works in a school/ office building environment.

2. Good customer service skills; able to communicate with people of all levels.

3. 12hrs-shift (Fixed shift, no need to rotate)

4. PC knowledge required.

5. Job duties include traffic control, issue visitors/ contractor passes, patrolling, protecting clients’ premises and access control, etc.

6. Possess valid security license, completed WSQ RTT.

Office:10 Anson Road, #26-09 International Plaza

(Near Tanjong Pagar MRT Exit C)

Contact Us

Mobile: 8805 2291 Office: 6324 0648

You may fill in the application form online thru below link.

https://rss.armfort.com/direct... 

Do let us know once you submit the application online

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage.
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines.

Security Governance, Assurance & Risk Support

• Support security governance and assurance activities, including monitoring adherence to security policies, standards, and control frameworks
• Help with security risk assessments for projects, platforms, and services, documenting risks and recommended treatment plans.
• Support internal and external audits (e.g. ISO 27001, SOC 2, PCI DSS), including evidence collection, control testing, and remediation tracking
• Support control design, implementation, and operational effectiveness testing across security and IT controls

Security Metrics & Compliance Monitoring

• Monitor security metrics, dashboards, and control performance indicators under the guidance of senior team members
• Identify and record non‑compliance and control deviations against defined security standards, policies, and SLAs
• Perform initial analysis of trends and recurring issues and escalate

Non‑Compliance Tracking & Remediation Support

• Log and track security non‑conformities, findings, and control gaps
• Work with application owners and platform teams to support agreed remediation actions
• Track remediation progress and update records and dashboards
• Escalate overdue or higher‑risk items following defined processes

Report & Stakeholder Support

• Help prepare security reports, dashboards, and metrics summaries
• Collaborate with Risk Management, Internal Audit, and Technology teams to support identification of new risks and compliance gaps
• Contribute to continuous improvement programs to mature security processes, metrics, and reporting
• You will be reporting to a Senior Manager
• You will have to WFO 2 days a week as it is Hybrid working

Job Summary

The IT Security Lead manages end-to-end security governance, compliance, and operations for mission-critical systems, collaborating with cross-functional teams and external auditors to ensure adherence to government security policies.

Responsibilities

Day 1 – Project / Implementation Security

• Define and implement system security architecture aligned with Singapore Government policies
• Review application, middleware, infrastructure, and platform designs for security compliance
• Conduct threat modeling and risk assessments, mapping risks to mitigating controls
• Translate policy requirements into actionable technical controls across technology stacks
• Ensure compliance with IM8, Whole-of-Government security requirements, and PDPA where applicable
• Establish and oversee cybersecurity governance across infrastructure, application, and project teams
• Prepare and maintain documentation including Security Risk Assessments, Vulnerability Assessments, Penetration Testing reports, and security hardening baselines
• Partner with software teams to enforce secure coding standards and DevSecOps practices
• Integrate and govern SAST/DAST, dependency/SCA scanning, and container image scanning within CI/CD pipelines
• Review and triage security tool findings, driving remediation and risk acceptance decisions
• Provide guidance on API security, token/secret management, and secure service-to-service communication
• Plan, coordinate, and manage vulnerability and penetration testing engagements and vendors
• Track remediation progress to closure and document residual risks and risk acceptance
• Support security clearances and go-live certifications
• Review and approve OS, middleware, database, Kubernetes/container security, API gateway, WAF, rate-limiting, and authentication configurations

Day 2 – Operations / Production Security

• Lead security incident investigations, containment, and recovery efforts
• Perform root cause analysis and define corrective and preventive actions
• Coordinate with Government SOC and stakeholders; contribute to and refine incident response playbooks
• Communicate security incidents clearly to technical and non-technical audiences
• Oversee continuous vulnerability monitoring and posture management
• Track patch and configuration compliance across infrastructure, middleware, applications, and containers
• Provide risk assessments and compensating controls for deferred patches
• Review and tune alerts, detections, and dashboards in SIEM and related tools
• Ensure monitoring coverage for critical systems and high-value assets
• Support internal and external audits, evidence collection, and closure of audit findings
• Prepare and present security posture, metrics, and trend reports to management
• Maintain risk registers and mitigation plans with up-to-date security documentation
• Communicate security assessments and findings effectively to varied stakeholders
• Oversee and periodically review RBAC, MFA, Privileged Access Management, and joiner/mover/leaver processes
• Ensure least privilege access, segregation of duties, and periodic access recertifications
• Support incident response handling, log analysis, and activity reviews
• Drive continuous improvement across identify, protect, detect, respond, and recover functions

Required competencies and certifications

• Degree in Computer Science, Cybersecurity, Information Security, or equivalent
• 8–12 years of IT experience including at least 5 years as a Security Lead or Security Architect
• Proven experience in Singapore Government IT projects and IM8/government security compliance
• Hands-on experience with Kubernetes/Docker security, API security, Identity & Access Management (IAM), and security tools (SAST/DAST/SIEM) integrated with CI/CD

Preferred competencies and qualifications

• Certifications such as CISSP, CISM, CISA, CEH, GIAC (e.g., GSEC, GCIA, GCIH, GCSA)
• AWS or Azure Security certifications

5 day week @ AMK area

Maestro HR
damien lee tian hong
R1106726
16C8462