IT Security Manager

About the role

Lenovo is hiring an IT Security Manager in Singapore. The role covers incident response, security monitoring, product management, governance and compliance, and mentoring a team of IT Security Officers. Only Singaporean candidates are considered.

Key responsibilities

• Work with SIRO/SIRM, the IT Security Officer and the SOC to monitor, detect and respond to threats on-premises and in the cloud, and lead incident response and post-mortem analyses
• Stay up to date with emerging threats and vulnerabilities, and share advisories, threat intelligence and patch recommendations with stakeholders
• Take part in tabletop exercises, risk management activities, audits and third-party assessments
• Monitor security events on SIEM tools (Splunk, Cortex, Exabeam), triage and analyse them
• Perform vulnerability assessments (Tenable Nessus) on applications, networks and devices, and track remediation
• Lead periodic security reviews, recommend security initiatives and ensure compliance with secure configuration standards (CIS hardening)
• Manage, configure and optimise security tools and platforms, and review accounts on-premises and in the cloud
• Maintain security policies, SOPs, incident and vulnerability documentation, and prepare regular reports on metrics, trends and compliance
• Mentor IT Security Officers and collaborate with IT teams and vendors; act as liaison with SIRO/SIRM, cloud providers and other stakeholders

Required profile

• Bachelor's degree in information security, computer science or a related field
• Minimum 5 years of experience in an IT Security leadership role, preferably 1 year in cloud security
• Singaporean only
• Professional certification such as CISSP or CISM is required

Required skills

• Hands-on experience with security tools (SIEM, WAF, AV, EDR, PAM, DAM)
• Vulnerability management, threat analysis and incident response
• Secure network design, endpoint security and system hardening
• IaC security (Terraform, CloudFormation) and CI/CD security
• Cloud certifications such as CCSP, AWS Certified Security or Azure Security Engineer Associate are advantageous