IT Security Officer

About the role

Activate Interactive, a technology consultancy based in Singapore, is hiring an IT Security Officer for a 12-month fixed-term contract at PUB Waterhub / 40 Scotts Road. The officer supports the Board's cybersecurity governance, assurance and security management, covering security architecture, vulnerability assessment and penetration testing, risk assessment, system hardening, cloud security posture management, software clearance, firewall and network deviation management, cybersecurity policies and standards, and security metrics reporting.

Key responsibilities

• Security architecture: maintain architecture diagrams, records and approved designs, track review requests and support security advisory materials.
• Vulnerability assessment and penetration testing: coordinate VAPT engagements, maintain the VAPT tracker, follow up on remediation and help prepare VAPT reports.
• Risk assessment: run risk assessment exercises, maintain the risk register, track risk treatment and support risk acceptance and approval.
• Hardening compliance: assess hardening compliance, track gaps and maintain compliance records and checklists.
• Cloud security posture management: monitor and triage CSPM findings, track misconfigurations and prepare periodic cloud security reports.
• Software clearance: log and track clearance requests, coordinate with requestors and vendors, and monitor expiring clearances.
• Firewall and network deviation management: track rule changes and deviations, maintain registers and coordinate periodic reviews.
• Policies, standards and governance: assist in drafting and updating policies, standards and procedures, and support cybersecurity specifications for projects, procurements and tenders.
• Metrics and reporting: maintain dashboards covering vulnerabilities, risks, deviations, compliance and audit items, and prepare routine security reports.
• Ensure activities comply with the Board's policies, regulatory requirements and the Cybersecurity Code of Practice, and support audits, evidence collection and protection of classified information.

Required profile

• Good understanding of enterprise cybersecurity concepts, including vulnerability management, risk assessment, hardening, firewall controls, cloud security and security governance.
• Experience coordinating cybersecurity assessments, remediation and security reviews with multiple technical and business stakeholders.
• Ability to interpret vulnerability findings, risk assessments, architecture diagrams, firewall rules and compliance reports.
• Familiarity with security frameworks, policies, standards and governance processes.
• Strong analytical, documentation, stakeholder coordination and follow-up skills.
• Experience supporting cybersecurity audits, governance, risk and compliance activities.

Required skills

• CSPM platforms and cloud security concepts across AWS, Azure or equivalent environments.
• Vulnerability management or VAPT tools and interpretation of CVE/CVSS information.
• Understanding of enterprise network architecture, firewall rules, security zones and network segmentation.
• CompTIA Security+, ISC2 CC, CISSP, CISM, CRISC, ISO 27001 or equivalent certifications highly preferred; cloud security certifications such as Microsoft Azure Security or AWS Security also advantageous.

What we offer

• Competitive market salary and a variable performance bonus.
• Outpatient and specialist medical coverage, flexible benefits or flexi allowance, and life and health insurance.