Senior IT Security Analyst (Information Security Department) [NIE]

ABOUT THE NATIONAL INSTITUTE OF EDUCATION (NIE)

The National Institute of Education (NIE), Singapore, is Singapore’s national teacher education institute and we are proud to be an integral part of the nation’s education service. We play a key role in the preparation of teachers and in the provision of teacher professional and school leadership development programmes. We are committed to our vision of being An Institute of Distinction: Leading the Future of Education and our mission to Inspire Learning, Transform Teaching and Advance Research.

NIE invites suitable candidates to apply for the position of Senior IT Security Analyst within the Division of Academic Computing & Information Services (ACIS). This is a 3-year contract position.

Key Responsibilities

Incident Response Leadership:

• Oversee the entire Incident Response lifecycle from detection to resolution.

• Lead investigations of IT security incidents and ensure thorough root cause analysis and remediation.

• Develop and maintain Incident Response playbooks and procedures.

• Coordinate with internal, external stakeholders, and vendors during incidents.

• Conduct post-incident reviews and report findings to management.

• Manage and coordinate incident response efforts across hybrid IT environments, including on-premises and cloud systems.

Monitoring and Detection

• Develop and implement advanced threat detection and monitoring strategies.

• Utilize SIEM, EDR, and other security tools for timely incident detection.

• Perform threat hunting and proactive security assessments.

• Collaborate with IT teams to deploy and optimize security solutions.

Threat Statistics and Reporting

• Analyze and compile statistics on threats relevant to the Institute.

• Prepare and present detailed reports on threat statistics to stakeholders.

• Use data visualization tools to communicate threat trends and insights.

Innovation and Continuous Improvement

• Evaluate and integrate new technologies to enhance security operations.

• Foster a culture of continuous improvement within the team.

• Encourage continuous learning and professional development.

Security Project Management

• Support and coordinate cybersecurity projects and initiatives across the Institute.

• Work with internal stakeholders and vendors to track project deliverables, timelines, risks, and action items.

• Assist in the implementation, enhancement, and operationalization of security technologies and solutions.

• Facilitate meetings, prepare project updates, and maintain documentation related to cybersecurity initiatives.

• Support process improvement and automation initiatives within the Security Operations function.

Requirements

• A University degree in Information Systems, Computer Science, Cybersecurity, or a related field.

• Professional Certification(s) in incident handling and security analysis preferred.

• GCIH or its equivalent is preferred.

• Minimum of 4 years of progressive experience in IT security, with a focus on Incident Response.

• Minimum of 4 years of experience in a Security Operations Center (SOC), with proven leadership capabilities.

• Intermediate knowledge of security operations, incident analysis, incident handling, threat hunting, vulnerability management/testing, system patching, log analysis, intrusion detection, firewall administration, and network security assessment tools.

• Proficiency in Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), traffic and packet analysis, digital forensics, cloud security, and host-based intrusion detection systems.

• Experience in Blue/Purple teaming, firewall administration, Intrusion Prevention Systems (IPS), Web Application Firewalls (WAF), virtualization, and cloud technologies.

• Knowledge and experience in Linux, Windows, and Database technologies preferred.

• Strong knowledge of industry standards and information security policy frameworks.

• Ability to conduct gap analysis, improve security monitoring and alerting processes, and identify opportunities for operational improvement.

• Ability to evaluate Information Security threats, provide response guidance, and ensure appropriate controls and mitigation measures are implemented.

• Excellent leadership, communication, stakeholder management, and problem-solving skills, with the ability to work effectively under pressure and coordinate with stakeholders at all levels, including University administration.

• Demonstrated ability to manage security initiatives/projects, coordinate with vendors and stakeholders, and document business requirements.

• Passionate about cybersecurity, continuous learning, and emerging technologies.

• Open-minded and adaptable towards adopting new technologies, including Artificial Intelligence (AI), Agentic AI, and security automation.

• Demonstrates curiosity, innovation, and a forward-thinking mindset in enhancing security operations capabilities.

• Strong interest in contributing towards the development of an AI-enabled and automation-driven SOC environment.

Other Information

NIE staff can take chartered buses at their own expense from or near their home to the NIE campus. This is subject to the availability of bus routes and seats.

Req ID: R00024901