IT Security Specialist (6-Month Agency Contract)

About the role

Advanced Substrate Technologies Pte. Ltd. is hiring an IT Security professional for a 6-month agency contract based in Jurong Island, Singapore. The role covers cybersecurity policy, security operations, risk assessments and advisory to infrastructure, application, cloud and project teams.

Key responsibilities

• Develop, maintain and enforce cybersecurity policies, standards, procedures and controls aligned with regulatory requirements, ISO 27001, NIST, CIS benchmarks and industry best practice.
• Manage security operations: monitor events, analyse threats, investigate incidents, coordinate responses and drive remediation to closure.
• Conduct risk assessments, vulnerability management, penetration testing, compliance reviews, audits and third-party security assessments.
• Advise infrastructure, application, cloud and project teams so security-by-design is embedded throughout the lifecycle.
• Manage and optimise security technologies such as SIEM, EDR/XDR, WAF, PAM, vulnerability management platforms, DDoS protection and cloud security tools.
• Oversee privileged access, identity security, endpoint protection, secure configuration management, system hardening and access control reviews across on-premises and cloud environments.
• Work with internal stakeholders, service providers and vendors to implement security initiatives, and maintain documentation and management reports on incidents, vulnerabilities, compliance and security performance.

Required profile

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems or a related discipline.
• Minimum 5 years of experience in cybersecurity, security operations, GRC, IT security controls or infrastructure security.
• Hands-on experience managing security operations, incident response, vulnerability management, access controls and enterprise security technologies.
• Preferred: professional certifications such as CISSP, CISM, CISA, CCSP, GIAC, Microsoft Security, Azure Security or AWS Security.

Required skills

• Cybersecurity frameworks: ISO 27001, NIST Cybersecurity Framework, CIS Benchmarks and regulatory compliance.
• Security tools: SIEM, EDR/XDR, WAF, PAM, vulnerability assessment platforms and security monitoring solutions.
• Network security, cloud security, IAM, endpoint protection, security logging, threat detection and system hardening.
• Strong analytical, problem-solving, stakeholder management, communication and documentation skills; able to work independently in a fast-paced environment.