ICT Security Engineer

Role Overview

We are seeking an experienced ICT Security Engineer to support cybersecurity governance, risk and compliance (GRC) and security assurance across end-user computing, on-premise infrastructure and cloud environments, aligned with Singapore Government IM8 requirements.

Key Responsibilities

• Develop and maintain cybersecurity standards, procedures and rulesets aligned to IM8 and best practices.

• Conduct security risk assessments for system deviations, system changes and new project functionalities.

• Perform security reviews and embed security-by-design principles into ICT solution design, including documenting security control requirements and secure configuration baselines aligned to enterprise architecture.

• Conduct system hardening checks using CIS Benchmarks and IM8 standards, and ensure remediation of security gaps and audit findings.

• Perform vulnerability assessment and manage VAPT outcomes, including risk rating and remediation recommendations.

• Support security monitoring and incident triage (phishing, malware, endpoint alerts) and coordinate escalation where required.

• Coordinate periodic security reviews and audit activities (AGO/GovTech/internal), including RFI management and evidence collection.

• Support cloud and infrastructure security governance, including security patch monitoring and prioritisation using CVSS risk ratings.

Requirements

• Degree in Computer Science / IT / Cybersecurity or equivalent.

• Minimum 3 years relevant cybersecurity experience.

• Familiar with tools such as Tenable/Nessus, Splunk, and cloud security platforms (AWS Security Hub / Microsoft Defender/Sentinel).

• Security certifications (CISSP/CISM/CISA/GCIH/AWS/Azure Security) preferred.