Total 40,049 IT Security Analyst job vacancies in The United States of America

23rd April, 2024
CyberCX is Australias leading independent cyber security consultancy organisation. To support our rapid growth, we are looking motivated and passionate Security Analysts to work in our Brisbane office. In this role, youll work with your team to deliver great client outcomes and grow your career rapidly as a cyber security professional.  Were looking for candidates that have a sound and relevant technical background. You dont need extensive experience in security, but a passion to learn, a great attitude, and a keen interest in security is essential. You will receive formal and on the job training that will help you grow your career in the cyber security field.   Key responsibilities:    

Technical analysis of alerts and data from security products including (but not limited to) SIEMs, Intrusion detection and prevention systems, end point security solutions, web proxies and network security devices, and vulnerability scanning and management systems 


... Click here to view more detail / apply for Security Analyst

NCS is the leading technology services firm that operates across the Asia Pacific region in over 20 countries, providing consulting, digital services, technology solutions, and more.

We believe in harnessing the power of technology to achieve extraordinary things, creating lasting value and impact for our communities, partners, and people. Our diverse workforce of 12,000 has delivered large-scale, mission-critical, and multi-platform projects for governments and enterprises in Singapore and the APAC region.

We’re searching for a Security Analyst (Threat Hunter) to be part of our diverse team of talent here at NCS!

If you believe in going above and beyond, embodying excellence, and bringing people and technology together like never before, we would love to have a conversation with you!

What we seek to accomplish together!

• Proactively 'hunt' for potential malicious activity and incidents across the environment using advanced threat network and host-based tools adopting Mitre Attack Framework.
• Perform hunting for malicious activity across the network, endpoint, and Critical Assets.
• Create hunting hypothesis and perform IOCs & TTPs based threat hunting and share reports with the management weekly on the findings, misconfiguration, use case development and provide suggestions for counter measurement.
• Expertise in hunting, managing, and writing detections using logs from Endpoint Detect and Response solutions like Carbon Black EDR, CrowdStrike EDR & Cortex XDR etc.
• Research on different TTP's for ATP Threat groups which are used by attackers during the sophisticated Cyber-attacks.
• Collaborates with technical and threat intelligence team to provide indications and warnings and contributes to predictive analysis of malicious activity.
• Perform cyber security threat hunting & detection activities with specific focus on countermeasure Tactics, Techniques and Procedures (TTPs)
• Contribute to the tuning and development of security information and event monitoring systems (SIEM) use cases and other security control configurations to enhance threat detection capabilities.
• Familiarity with threat modelling, development of attack plans, performing manual & automated Ethical Hacking, & develop proof of concept exploits.
• Evaluates new security technologies and products and performs engineer-level work and analysis to determine if solutions should be pursued.

The Ideal Candidate should ...

• Contribute to securing the organization by enhancing technologies and processes.
• Evaluate security controls against standards, policies, and best practices.
• Improve technology management and perform regular security assessments.
• Build relationships with project and operational teams as needed.
• Exhibit strong technical skills and the capacity to learn new technologies.
• Understand security principles and key technologies, with a focus on sustainable solutions and risk mitigation.
• Analyze sophisticated threats, leveraging knowledge of the threat landscape and cybersecurity fundamentals.
• Utilize forensic analysis and incident response tools to identify and assess threats.
• Have experience in threat hunting, incident response, and familiarity with programming languages like Python and SQL, as well as reverse engineering skills.
• Communicate effectively with diverse groups, reporting key metrics and statuses promptly.
• Possess 2 years and more of highly relevant threat hunting experience.
• Have professional certifications such as GIAC Certified Incident Handler Certification (GCIH) or equivalent

About NCS Group

We aspire to create the extraordinary and impact millions of people every day.

We believe in building a talent-led delivery model to enable our best people to lead, and to support them with the right structure, processes, and tools to ensure that our clients are delivered top quality services.

We want to invest in you!

Great work is never done alone, which is why we believe in fostering a collaborative work environment where people with different expertise and talent can come together.

We provide opportunities for our people to grow within our organization with clearly defined career tracks and specializations, ensuring that our talent and people can continuously deliver new value for our clients.

We’re here to make the extraordinary happen.

Find out more at ncs.co and our LinkedIn career site.

We handle all profiles with the highest level of confidentiality

Company’s Profile:

As a market leader in industrial vehicles, they have over 4 decades of experience in the automotive industry. They lease many high-end vehicles to their 41,000 customer base and have been customers’ first-choice partner for many years. They are currently looking for a IT System Analyst to value-add to their business.

Work location: Tuas (company bus provided from Joo Koon MRT)

Working hours: Monday – Friday, 8.30am – 5.30pm

Company Benefits:

• Bonus payout twice in a year (mid year and end year)
• Flexi benefits $700/year
• Annual increment
• Mobile phone allowance provided

Job Responsibilities:

• Participate in the Microsoft Dynamics CRM 2013 Upgrade Project
• Deliver on-site support for organization's CRM system, ensuring smooth operations and addressing any technical issues or user queries
• Proactively gather and consolidate user feedback, analyzing and documenting suggestions, concerns and enhancement requests
• Conduct training sessions for existing sales users. Respond promptly to training requests and provide ongoing guidance and assistance.
• Collect and consolidate user feedback and follow up with vendor.
• Continuously update and maintain user manuals to ensure they reflect the latest features, enhancements and best practices of the CRM system.

Requirements:

• Educational qualification in IT / Computer Science or equivalent. Fresh grads welcome to apply, training will be provided
• Proficiency with Windows OS
• Experience with Microsoft Dynamics CRM or other Microsoft products will be an added advantage

Interested candidates may whatsapp your resume to 8494 1966. Only shortlisted applicants will be contacted.

Cassie Chan | R2197426

Recruit Now Singapore Pte Ltd | EA No: 21C0845

Responsibilities :

● Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.

● Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.

● Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.

● Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.

● Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.

● Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.

● Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.

● Developing and implementing security policies and procedures that ensure the organization’s data

and systems are protected against cyber threats.

● Conduct regular vulnerability assessments and penetration testing to identify potential security

weaknesses and risks to make improvements in the organization’s security.

● Report all security incidents to the home office and work with corporate IT on response and resolution strategy.

● Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.

● Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

● Bachelor’s degree in computer science, information technology, or equivalent experience.

● 5+ Years of experience in a cyber or information security management role.

● Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).

● Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.

● Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.

● Demonstrated understanding of business processes, IT risk management, and related standards.

● Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.

● Excellent problem-solving skills and the ability to think critically under pressure.

● Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.

● Proven track record of staying current with evolving cybersecurity threats and best practices.

● Exceptional planning and organizational skills, and excellent written and oral communication.

● Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.

● Professional information security certification preferred, such as:

○ CompTIA Security+

○ Certified Information Systems Security Professional (CISSP)

○ Certified Information Systems Auditor (CISA)

○ Certified Information Security Manager (CISM)

Location: East area

HOW TO APPLY :

Interested candidates, please submit your resume by clicking on “Apply Now” or aliceyap(a)hkmsvs.com

All applications will be treated in the strictest confidence and only shortlisted candidates will be notified

Yap Lay Choo

EA Licence No. 03C5391 | Registration No. R1987101

Job Description

Department: Business Engineering
Report to: Manager
Supervise:
Functional Relationships with: MES + ASEAN OSA OPA & Japan

Position Profile:
Based in: Singapore
The successful candidate will: Responsible to provide adequate IT security to MES & OSA, liaise with MMC IT security team, monitor security logs

Key Duties & Responsibilities:

• Work as an IT Security coordinator & Security operation center leader for ASEAN region
• Align cyber security needs with the business direction
• Initiate, develop, and maintain IT security policies, standards and procedures
• Facilitate a comprehensive Cyber Security training, awareness program and business continuity plans
• Perform IT Security risk assessments, propose and track remediation tasks
• Ensure IT compliance & governance measures are in place & followed
• Conduct audits of internal IT services and 3rd party services, as well work with external auditors on external audits
• Advise on appropriate cyber security solution & technology trends to be deployed
• Perform in-depth investigation to determine the root cause of a security incident
• Conduct analysis of logs from a wide range of systems, such as firewalls, EDR, SIEM, Anti-Virus, Vulnerability management to detect various types of IT-related threats
• Monitors security event reports and actions; ensuring the appropriate response is performed and coordinated.

Ability / Competency Required:

• Bachelor's Degree in Computer Science / Information Technology or Equivalent
• At least 1 year of working experience
• Good communication and presentation skills
• Able to work well as a team player while being independent and pro-active
• Positive attitude in challenging work environment
• Degree in Computer Science/ Information Technology or equivalent
• Good interpersonal and communication skills
• Ability to work well in a team
• Ability to perform multi-tasking

Murata Electronics Singapore is committed to providing a safe and secure environment for all job applicants.
Please note that Murata Electronics Singapore does not charge any fee for job applications or interviews. If you receive any suspicious emails or messages claiming to be from Murata Electronics Singapore, please do not respond and report it to us immediately.

Hi Everyone, PT Asuransi Jiwa Inhealth Indonesia Official (Mandiri Inhealth) is currently looking for suitable candidates to fill the position of Senior IT Security for our Head Office at Mega Kuningan, South Jakarta. Here are some of the details :

• Bachelor’s degree in Information Technology or System Information or a related field.
• Minimum of 5-10 years as a IT Security or IT Cyber Security
• Familiar with common security controls and security flaws for modern Mobile Application, Web Applications, APIs and Cloud Infrastructure
• Understands the OWASP testing methodology
• Manage reporting related Information System Security status
• Manage operational SIEM & Information System Security day to day
• Familiar with common security controls and security standard such as NIST
• Offensive Security certifications is an advantage such as CEH Pratical or OSCP /OSCE certifiied

Full time Experienced (relevant combo of work and education) Bachelor of Computer Science 0% As the world works and lives faster, FIS is leading the way. Our fintech solutions touch nearly every market, company and person on the planet. Our teams are inclusive and diverse. Our colleagues work together and celebrate together. If you want to advance the world of fintech, we’d like to ask you: Are you FIS? About the team: It’s an amazing opportunity to join a Talented team of innovative and committed folks doing interesting work at the world’s largest global provider dedicatedto financial technology solutions! What you will be doing: Develop policy and standards for API security. Experience and knowledge in Application Programming Interface (API), static application security testing (SAST) and related tools like Veracode / Checkmarx / Fortiy. Experience and knowledge in Burp Suite tool for dynamic testing (DAST). Primarily responsible for API application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management) What you bring: At least 2 years of working experience in application security that includes API, SAST and DAST along with Checkmarx, Veracode Experience and knowledge in static application security testing (SAST) and related tools like Veracode / Checkmarx / Fortiy. Experience and knowledge in Burp Suite tool for dynamic testing (DAST). Primarily responsible for application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management). Knowledge of security technologies (encryption, data protection, design, privilege access, etc.) Proficiency in time management, communications, decision making, presentation and organizational skills Proficiency in planning, reporting, establishing goals and objectives, standards, priorities and schedules Excellent decision-making, analytical and problem solving skills Excellent verbal and written communication skills to technical and non-technical audiences of various levels in the organization Experience establishing and maintaining effective working relationships with employees and/or clients Strong knowledge of development and application security Hands-on experience performing application API security assessment, static and dynamic security assessments with tools such as: Burpsuite, OWASP ZAP, AppScan, WebInspect, Fortify, Veracode, Checkmarx, etc. Knowledge of OWASP Top 10/ SANS Top 25, identify vulnerabilities via manual and automated testing methods and how to effectively remediate vulnerabilities associated with each Expert knowledge of information security principles, web applications, and intermediate familiarity with malicious code and common hacking techniques used by malicious actors Experience conducting risk assessments and performing threat modeling of applications Ability to collaborate with teams remotely What we offer you: A career at FIS is more than just a job. It’s the change to shape the future of fintech. At FIS, we offer you: A voice in the future of fintech Always-on learning and development Collaborative work environment Opportunities to give back Competitive salary and benefits Privacy Statement FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice. Sourcing Model Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company. #pridepass

Develop policy and standards for API security.

Job Duties:

• Manage Branch IT Security: Oversee configuration, monitoring, troubleshooting, and investigations, collaborating closely with the Technology – Infrastructure Support Team and Information Security Officer (Governance) to safeguard Branch Information Security.
• Ensure Regulatory Compliance: Fulfill the role of IT 2nd Line Reviewer, ensuring adherence to regulatory requirements and providing support for SG Branch IT Security matters.
• Coordinate BCP Execution: Lead Branch BCP Coordination & Execution, working closely with relevant teams and stakeholders in SG Branch and Head Office.
• Project Management: Advise, propose, adopt, and manage IT security projects as directed by Branch Management or Head Office Information Security Team.
• Patch Management: Review, test, and deploy security patches across branch-wide equipment, minimizing operational disruptions.
• Incident Response: Assist in investigating IT security incidents, providing remediation, and ensuring accurate incident reporting.
• Tool Management: Manage IT Security tools such as Anti-Virus, Data Loss Prevention, SCCM, and Web-Content Filtering to enhance security posture.
• BCP Drill Coordination: Serve as the main liaison for coordinating and executing the Annual BCP Drill Exercise, ensuring preparedness for business continuity.
• Reporting and Communication: Submit monthly SCCM and DLP reports to the IT Team Lead and ISO for review, and maintain effective communication with internal colleagues and external contractors.
• Security Review Support: Support IT Team Lead in reviewing the security aspects of IT projects to maintain a robust security framework.

QUALIFICATION:

• Experience Required: Minimum 3-5 years in full-time Information Security project deployment and execution.
• Certification Preferred: CISSP or CISM certification preferred; candidates pending certification will be considered.
• Proficiency with Tools: Familiarity with major market IT Security tools such as Symantec, Trendmicro, Forcepoint, etc.
• Business Continuity Experience: 3-5 years of BCP or BCM experience, or extensive participation in related activities.
• Skills Needed: Strong understanding of Information Security and Business Continuity principles, along with basic computer troubleshooting skills.

EA License Number: 23C1935 | EA Personnel Number: R1551292

A relevant degree within IT/IM or a related field
Professional certifications in Information security from industry standard frameworks (e.g. ISACA, BCS, CIPP, ITIL, Crest, ISC2, COPTIA)
Advanced knowledge of OT systems (ICS, SCADA), network architecture, network protocols, security best practices and response processes.
Familiarity with the ISA95/98 and Purdue models for industrial IT and the typical operating practices in that engineering environment
Understanding of operational risk posed by cyber physical environments
Working knowledge of ISA95, IEC 62443 and NIST SP 800-82r3.
Familiarity with firewalls, intrusion detection/prevention systems (IDS/IPS), and network monitoring tools
Working knowledge of automated malware analysis programs
Proficiency in securing various operating systems, including Windows, Linux, and macOS
Working knowledge of SIEM and other volumetric data systems
Knowledge of industry standard security products, including end point agents, remote capturing tools and other security related products
Ability to obtain and act on vulnerability information and conduct security risk assessments,
... Click here to view more detail / apply for OT Security Operations Analyst

KEY ROLES AND RESPONSIBILITIES

• Ensure enhancement of SOC for cyber threats monitoring, detection, analysis and response through the use of threat intelligent and automation

• Project management and Vendors Management

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Synthesize multiple information sources and analysis reports into a holistic view of potential threats

• Conduct in-depth research into cyber security issues of industry- or nation-wide significance

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Develop a playbook for cyber incident management

• Perform the remediation and resolution of cyber incidents at the organizational level

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 3-5 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Advance Persistence Threat Solution

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Familiar with Kill Chain methodology, MITRE Att&ck, NIST Cybersecurity Framework, ISO 27001, 27002 and etc.

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

About the Job

You will be tasked with triaging incidents, conducting investigations, and performing threat hunting. Additionally, you will play a key role in enhancing our threat detection capabilities across a complex organization. Other responsibilities are as follow:

• Conducts triage, incident investigations, and threat hunting.
• Reviews, updates, and creates threat detection rules using SIEM or EDR.
• Reviews, updates, creates playbooks and updates the incident response plan. Automates processes using tools such as SOAR or scripting.
• Delivers timely and relevant updates to appropriate stakeholders.
• Stays current with the evolving threat landscape, tactics, techniques, and procedures (TTPs), and is familiar with industry best practices.

Requirements

You will need min Degree in Computer Science, Information Security, Information Technology, or related field.

• Strong foundation in Cybersecurity and analytics skills with the ability to recognize information from various sources to support investigations.
• Scripting knowledge such as Python will be required.
• Knowledge in forensic analysis will be an added advantage.

R1332781

Responsibilities:

• Handling security incidents as reported by individuals and automated systems on laptops and mobile devices.

• Handling support of PC and Mac based users with security related problems.

• Monitoring compliance with IT Security policy and applicable law.

• Coordinating investigations and reporting of security incidents related to Network, Systems and applications.

• Coordinate and execute IT security projects for Arista at multiple locations.

• Engage in security research in keeping abreast of the latest security issues for Cloud enabled enterprises (including SAAS and IAAS).

• Monitoring system compliance with the IT framework for controls and levels of access; recommending improvements.

• Maintains access for business by providing information, resources, and technical support.

• Collaborate with other groups inside Arista to manage security vulnerabilities and help manage risks.

• Conduct and collaborate on laptop and server forensics as well as Cloud / Service Provider forensics with the global security team.

• Administer security-dedicated systems (Software, Firewall management, EDR, NDR, log collection, reporting , analytics, Cloud Security consoles) as appropriate.

• Perform other related duties as assigned. 

Qualifications: 

• BA or BSc. in Computer Science, Management Information Systems, Information Assurance or related field.

• Advanced degree desirable.

• Must have five+ years of progressive experience in computing and information security.

• Must have experience with networking technology, protocols.

• Expert knowledge is desired of laptop operating systems (MacOS, Windows and Linux).

• Previous experience working in a multinational corporate working environment is desirable.

• Proven experience in Cloud computing and SAAS platform security, including email security.

• Proven experience with DLP solutions is a plus.

• CISSP, GIAC or other security certifications desired. 

• Knowledge of information security standards (e.g., ISO 17799/27002, etc.), rules and regulations related to information security and data confidentiality (e.g., FERPA, HIPAA, etc.) and desktop, server, application, database, network security principles for risk identification and analysis. 

• This position requires some weekend and evening assignments as well as availability during off-hours for participation in scheduled and unscheduled activities.

Who we are

Crédit Agricole Corporate and Investment Banking (Crédit Agricole CIB) is the corporate and investment banking arm of Crédit Agricole Group, world’s 10th largest bank by total assets.

Our Singapore center (“ISAP” or “Information Systems Asia Pacific”) is the 2nd largest IT setup (after Paris Head Office) for Crédit Agricole CIB's worldwide business. We work daily with international branches located in 30 markets by:

· Envisioning and preparing the Bank’s futures information systems

· Partnering and supporting core banking flagships and transverse areas in their large scale development projects

· Providing premium In-house Banking applications

This unique positioning empowers us to bring our core banking business a sustainable competitive advantage on the market.

We seek innovative and agile people sharing our mindset to support ambitious and forthcoming technological challenges.

Position

IT Security Officer (ITSO)

IT Security Officer role is responsible for managing and supervising Information Technology Security matters for the Bank in Singapore and ensuring that the execution of Information Security activities are in alignment with Banks’ Security Policy and Standards. Person is also in charge of coordination of operational security of Information Systems, conducting Cyber Security Risk Assessment and ensuring effective management of IT Security initiatives in Singapore.

Main Responsibilities (not limited to)

• Information Systems in Singapore are in alignment with Groups’ Security Policies and Standards;
• Develop, contribute and establish local Security Policies, guidelines, standards and processes (as applicable) in conformance to Group’s Information System Security Policies, Governance Texts and local regulatory requirements.
• Conducting Information Security (Cyber) risk assessments to identify Cyber risks, develop and maintain adequate and comprehensive mitigation and deliver subsequent corrective actions when KPI results are unsatisfactory.
• Advising business teams, technology teams and leadership on implementing cyber security best practices for managing cyber and technology risks.
• Maintaining oversight on Key Cyber risk/IT Security indicators in scope;
• Maintaining oversight on the deployment of various Security Programs and projects running for the bank in the region.
• Coordinate studies on security requirements for implementing new IT Security solutions and provide consultation support on IT infrastructures and Applications teams
• Ensuring all Security related requests and derogations are reviewed and granted based on Security Risk Assessments;
• Ensuring the Vulnerabilities under the perimeter are managed and mitigated as per the defined Vulnerability Management Process;
• Assist and recommend the Local IT teams to define and implement remediation actions plans derived from audits or security reviews.
• Follow up on IT security related audit recommendation action plans falling under SG or other entities
• Maintain and Publish the Security Dashboard for Singapore for the Security KPIs;
• Supporting the IT Permanent Controls team and CLSi function on technical matters related to IT Security topics;
• Ensuring technical security projects for the region are properly taken into account and effectively delivered;
• Accompanying local IT teams in technical security topics where Security expertise and advices could be needed, to ensure proper implementation of standards and best practices;
• Acting as an entry point for all technical security related matters to assess the overall Information Systems Security;
• Raising operational security needs or constraints, or local constraints, proposing solutions and possible adaptations of standards in case they cannot cover a precise local requirement (for example due to a local regulation);
• Helping IT teams in deploying level 1 and level 2.1 controls required by ISS control plans.
• Should be able to take up additional responsibilities as needed for the operations or as assigned by the manager;
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer/Compliance Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain and maintain competence.

Candidate Profile

• Must have a minimum 10 years of relevant experience in IT Security domain;
• Must be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;
• Must have knowledge of different domains of Information Security;
• Must have prior hands-on experience in governance, managing and operating the Information System Security;
• Should have experience in working in first and second line of Cyber defense;
• Must have experience in conducting Cybersecurity Risk Assessments, security reviews of IT Projects;
• Must have experience in Security Exceptions management
• Ability to apply risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level Information Security Policies
• Excellent in analytical, communication and documentation skills;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Should have time management skills and able to manage work in fast moving environment;
• Should have excellent written and oral English language skills;

· Professional Certifications :

• CISSP certification is must
• Any other IT Security or Cyber Risk related certifications are desirable

Work Schedule

• Work Hours: 8.45a.m. to 6. 30p.m (Monday to Friday) with one-hour lunch break.

ABOUT US
Change your lifestyle and live and work in a vibrant community and great coastal environment.
Ballina Shire Council is situated on the Far North Coast of New South Wales, 20 minutes from Byron Bay and one hour from the Gold Coast. The shire is a popular tourism destination with pristine beaches, rainforest retreats and hinterland hideaways.
ABOUT THE ROLE
Position
We are seeking an appropriately experienced and passionate cyber security professional to join Council's dedicated Information Services team. Reporting to Council?s Coordinator Information Technology, this position will support the team in ongoing system evaluation, selection, development, implementation and maintenance to protect Council?s information assets.
Key focus areas of the position will be to maintain staff alertness around cyber risks and mitigation strategies, and to monitor processes and systems to ensure adherence and implement improvements to information security policies, standards


... Click here to view more detail / apply for Cyber Security Analyst