IT Security Officer

Avensys is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success, we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail and supply chain. We are currently looking to hire a –IT Security Officer. This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below. JOB TYPE: Long Term Contract Job Description Overview Responsibilities:

1. Security Policy Development and Enforcement

• Develop, implement, and maintain IT security policies, procedures, and protocols.
• Ensure that security measures align with business needs, regulatory requirements, and industry standards.
• Review and update policies regularly to address emerging threats.

1. Risk Management

• Assess potential security risks and vulnerabilities within the IT infrastructure.
• Perform risk analysis and recommend appropriate security controls.
• Implement security measures to mitigate identified risks.

1. Incident Response and Management

• Lead efforts in detecting, investigating, and responding to security breaches and incidents.
• Establish incident response plans and procedures for handling security threats.
• Work with other teams (e.g., legal, communications) to manage incident communications and post-incident analysis.

1. Security Monitoring and Auditing

• Continuously monitor IT systems, networks, and applications for signs of security incidents or breaches.
• Implement and maintain security tools, such as firewalls, antivirus software, and intrusion detection systems.
• Regularly audit systems to ensure compliance with security standards and best practices.

1. Compliance and Regulatory Requirements

• Ensure the organization complies with relevant security standards, such as, HIPAA, PCI-DSS, or other industry regulations.
• Conduct regular compliance assessments and audits.
• Collaborate with legal and regulatory bodies to ensure that security measures are in place.
• Generate reports for accounts review, logs reviews, patch status review, hardening compliance, etc
• Worked with systems owners to ensure vulnerabilities or non-compliances are fixed.

1. Training and Awareness

• Provide cybersecurity training and awareness programs to employees to promote safe practices.
• Conduct simulations and drills (e.g., phishing exercises) to test employee preparedness.
• Keep staff informed about current cybersecurity threats and best practices.

1. Network and System Security

• Oversee the design and implementation of secure network architectures.
• Ensure the proper configuration of firewalls, encryption protocols, VPNs, and other security mechanisms.
• Conduct regular security assessments and penetration tes