IT Security Officer - IT Governance & Security

About the role

ITE is hiring an IT Security Officer for its headquarters team. The role monitors, analyses and strengthens the organisation's cybersecurity posture, supporting governance, risk management, incident response and compliance in line with Singapore Government cybersecurity policies and ITE's Cybersecurity policies (e.g. IM8, GovTech standards).

Key responsibilities

• Develop frameworks and processes supporting Enterprise and Teaching & Learning business objectives.
• Build, implement and monitor reporting mechanisms for governance, security and risk to support compliance and highlight exposure.
• Review systems to identify security risks and breaches, and provide cybersecurity guidance to project teams for secure design and implementation.
• Review system architectures and recommend security controls such as Zero Trust and defence-in-depth, and integrate security requirements into the SDLC.
• Communicate security basics to users, including formulating a Security Awareness programme.
• Monitor compliance with risk management strategies and Singapore Government Instruction Manual best practices.
• Conduct threat analysis using threat intelligence, perform vulnerability assessments and track remediation.
• Analyse logs and security events to find weaknesses and attack patterns.
• Lead investigations of cyber incidents with agencies such as GovTech and CSA, coordinate incident response and support containment, eradication and recovery.
• Report on cybersecurity posture, risk exposure and compliance, support Business Continuity and Disaster Recovery planning, and take part in tabletop exercises and incident simulations.

Required profile

• Academic or professional credentials in Information Technology, Computer Engineering, Computer Science or a related field.
• Minimum 5 years' experience in IT Security and Operations.
• Experience leading cross-functional teams in IT Governance and/or IT Security and Operations is an advantage.
• Leadership qualities, good communication skills, diligence, resourcefulness and ability to multitask in a dynamic environment.

Required skills

• Cybersecurity certifications such as CEH, CISSP, OSCP, CISM or GIAC equivalents are an advantage.
• Familiarity with tendering procedures, Singapore Public Service ICT Security Standards and IT budget management is an advantage.