IT Security Analyst
Location:Singapore
Job Type:Full time
Experience:From 1 yrs
Areas of Study:
Language:English
Education Level:Bachelor
JOB OVERVIEW:
To support IT security function at Ocean Network Express with the goal of information Confidentiality, Availability and Integrity.
DUTIES AND RESPONSIBILITIES:
Compliance:
-
Review Security Policy annually and propose changes where necessary.
-
Raise the level of security awareness amongst employees by scheduling training courses and tabulating their results. Subscribe to cyber security news and informing the relevant parties of known vulnerabilities.
-
Coordinate internal, external, customer, and certification audits, including gathering the evidence, liaising with the auditors, validating the audit findings, preparing the response, and monitoring the remediation efforts.
-
Understand global security and privacy legislation and its impact on compliance measures to be implemented
Operations:
-
Management of security tools such as anti-malware, web proxy, Security Information and Event Management (SIEM), Privilege Access Manager (PAM).
-
Management and liaison with our Security Operations Centre.
-
Respond to suspicious emails reported by users.
-
Conduct and coordinate Vulnerability Assessment and Penetration Testing (VAPT) with stakeholders
-
Conduct security assessment of systems and software to determine if controls are sufficient, and if not, recommend additional controls to be implemented.
-
Respond to incidents including investigation, containment, and recovery of procedures. Documenting incident reports and lessons learnt following the closure of the incident.
Application Development:
-
Understand application development security and implement measures to support the secure software development framework.
Projects:
-
Manage security projects to enhance the security posture of the organization.
QUALIFICATIONS AND EXPERIENCES:
-
Good understanding of information security principles and IT infrastructure including operating systems, applications, communications and network protocols.
-
Strong analytical mind and problem solving skills.
-
Ability to assess security threats and vulnerabilities against the potential impact.
-
Bachelor’s degree in an IT-related discipline.
-
Preference will be given to candidates with relevant professional certifications such as CISSP, CISM, Security+ etc.
-
1 to 5 years in an IT Security related role, with experience in implementation and administration of security tools.
-
Able to work independently with minimal supervision, and able to work well in teams.
-
Possess initiative and be self-motivated, with a thirst for knowledge and a willingness to learn.
-
Enthusiasm towards emerging technologies and how these can impact the organization.
-
Be sympathetic towards constraints and ability to negotiate a compromise.
-
Ability to communicate and convince stakeholders from various levels and backgrounds.