IT Security Officer

ITSO – IT Security Officer

(Job Level : Consultant)

Responsibilities and Requirements

• At least 5 years combined work experience in software development, application security and

cloud computing (e.g. AWS)

• Good understanding of mobile and web application architectures, including APIs and related

technologies and protocols such as REST, SOAP and SSL/TLS.

• Strong knowledge of application security principles and industry best practices, including the

OWASP Top 10 and OWASP Application Security Verification Standard (ASVS).

• Familiar with Agile development, CI/CD and DevSecOps practices, including tools such as GitLab,

GitHub and Ansible, and the integration of automated security testing into CI/CD pipelines.

• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

• Review system architecture, data flows, interfaces, APIs, internet-facing entry points and security

controls to identify potential security risks.

• Conduct cybersecurity risk assessments for new and existing IT systems, applications,

infrastructure and cloud services.

• Preferably possess experience in threat modelling and develop threat profiles for application

projects to identify, quantify and remediate application security risks.

• Review remediation plans and supporting evidence to verify that security risks have been

adequately addressed.

• Track and address security vulnerabilities with timely remediation and patching and closure in

accordance with established requirements.

• Monitor and investigate cybersecurity alerts and incidents, including malware, phishing, account

compromise, data breaches, unauthorised access, and cloud security incidents.

• Perform cybersecurity incident response and management, including incident triage, investigation,

containment, remediation, recovery, and post-incident review.

• Conduct security awareness training sessions to promote security awareness and good

cybersecurity practices.

• Good verbal/written communications, collaboration skills and experience interacting with various

stakeholders

• Strong analytical, problem-solving and troubleshooting skills, ability to work independently

• Degree in a relevant discipline, or an equivalent qualification.

• Relevant professional certifications such as CISSP, OSCP, CCSP, CRISC, AWS security certification

or equivalent are preferred

• Experience in working with Government Commercial Cloud (GCC) preferred.

1. Purpose of Engagement

SDC requires an IT Security Officer to provide operational cybersecurity support, security platform administration, incident

and vulnerability management support, security reporting, and governance coordination. The Service Personnel will support

business-as-usual cyber operations and strengthen the reliability, monitoring, and control of SDC security services.

2. Scope of Services

• Privileged Access Management, including CyberArk administration and operational support.

• Security monitoring platforms, including SIEM, database activity monitoring, network device log monitoring, and insider

security monitoring.

• Data Loss Prevention, including Forcepoint administration, policy support, alert handling, and reporting.

• Web application and infrastructure security support, including Imperva WAF and related security technologies where

assigned.

• Security team mailbox operations, including Vulnerability Watch, GovTech Security Threat Intelligence (GSTI), phishing

reports, and other security notifications.

• Security-related virtual machines, Syslog-NG / log management services, Windows and Linux servers, and supporting

cloud services in Microsoft Azure, Amazon Web Services, and Google Cloud Platform where applicable.

• Cybersecurity awareness communications, phishing simulation exercises, and staff awareness activities.

• Asset onboarding and inventory maintenance for central security monitoring tools, including servers, network devices,

databases, cloud assets, and internet-facing services.

3. Key Responsibilities

• Develop, maintain, and review IT security procedures, action plans, runbooks, and operational documentation as

required by SDC.

• Perform daily, weekly, and monthly health checks, preventive maintenance, monitoring, administration, and operational

support for assigned cybersecurity systems.

• Provide Level 1 and Level 2 support, perform initial investigation and triage, coordinate escalation, and track incidents

through closure.

• Monitor and analyse security alerts, emerging threats, vulnerabilities, and advisories, and provide timely impact

assessments and recommended actions.

• Support IT security incident management, evidence collection, investigation, containment, recovery, and post-incident

reporting in accordance with SDC procedures.

GVT(T)24014 | CV Request Job Description | OFFICIAL (CLOSED) / NON-SENSITIVESENTOSA DEVELOPMENT CORPORATION | IT SECURITY OFFICER

• Conduct user onboarding, offboarding, access reviews, privileged account administration, and entitlement validation as

authorised by SDC.

• Coordinate with SDC teams, GovTech, managed service providers, vendors, and external security partners on

operational and incident matters.

• Maintain inventories of assets monitored by central security tools and support onboarding, configuration validation,

troubleshooting, and decommissioning.

• Prepare bi-weekly operational updates, monthly service reports, management summaries, risk and vulnerability reports,

and ad hoc reports requested by SDC.

• Track licences, subscriptions, certificate expiry, maintenance and contract renewal dates, and support billing or service

verification activities where required.

• Plan and conduct phishing simulations and security awareness exercises, including preparation of communications,

reports, lessons learned, and follow-up actions.

• Participate in security exercises, technical assessments, audits, vulnerability remediation activities, and tabletop

exercises when required.

• Assist with forensic acquisition and analysis activities when required and authorised, while maintaining chain of custody

and secure evidence handling.

• Perform other reasonable cybersecurity duties necessary to protect SDC information systems and infrastructure.

4. Deliverables and Reporting

• Operational health-check records and issue logs at frequencies defined by SDC.

• Bi-weekly operational status report covering incidents, alerts, outstanding actions, platform health, vulnerabilities, and

service risks.

• Monthly service report and timesheet endorsed by the SDC supervisor.

• Updated asset inventories, access records, runbooks, standard operating procedures, configuration records, and

handover documentation.

• Incident, vulnerability, phishing exercise, audit, and management reports as requested.

• Knowledge-transfer sessions and complete handover documentation before replacement or contract end.

5. Experience and Qualifications

• Bachelor’s degree or diploma in Computer Science, Information Technology, Cybersecurity, Computer Engineering, or a

related discipline.

• Relevant experience aligned to the proposed GVT(T)24014 skill level: Associate Consultant, 4 year or less, Consultant 4

years but less than 7 years; Senior Consultant, at least 7 years.

• Proven hands-on experience in cybersecurity operations, infrastructure security, security platform administration,

incident handling, and vulnerability management.

• Strong understanding of information security principles, security operations, access control, logging and monitoring,

data protection, and secure administration.

• Ability to work independently, prioritise operational tasks, document work clearly, and communicate with technical and

non-technical stakeholders.

• Experience coordinating with external service providers, security organisations, auditors, and government stakeholders

is advantageous.

6. Preferred Technical Skills

• CyberArk Privileged Access Management.

• Insider Security Dashboard, SIEM, Syslog-NG, database activity monitoring, insider security monitoring, and security log

analysis.

• Forcepoint Data Loss Prevention and Imperva Web Application Firewall.

GVT(T)24014 | CV Request Job Description | OFFICIAL (CLOSED) / NON-SENSITIVESENTOSA DEVELOPMENT CORPORATION | IT SECURITY OFFICER

• Windows Server and Linux administration, PowerShell, Bash, and command-line troubleshooting.

• Microsoft Azure, Amazon Web Services, and Google Cloud Platform security operations.

• Vulnerability management, security hardening, incident response, phishing simulation, and awareness campaign

management.

• Relevant certifications such as CISSP, CISM, GCIH, CEH, Security+, CyberArk, Microsoft Azure, AWS, or equivalent are

preferred.

7. Service and Administrative Requirements

• The proposed Service Personnel must be available to commence by 1 February 2027, subject to SDC approval, security

clearance, and issuance of the Purchase Order.

• The Contractor shall identify the proposed Job Role and Skill Level and shall only propose personnel for roles and

categories awarded to it under GVT(T)24014.

• The Service Personnel is subject to SDC interview, competency or technical assessment, reference checks, and security

clearance.

• Rates quoted must be equal to or lower than the applicable awarded Master Contract rates and stated in the format

requested by SDC.

• The Contractor shall disclose whether the proposed candidate is a permanent employee, contract employee, or

employee of a subcontractor.

• The Contractor shall provide an account manager as the single point of contact and manage leave, payroll, benefits,

replacement, timesheet, and personnel administration.

• Any change or replacement of Service Personnel shall comply with GVT(T)24014 requirements, including timely

notification, replacement proposals, handover, and no additional cost to SDC.

• All SDC information, credentials, records, and assets shall be handled strictly in accordance with SDC and Government

security requirements.

8. Information Required with CV Submission

1. Candidate CV, including employment history, detailed project experience, responsibilities, and duration for each

relevant engagement.

2. 3. 4. 5. 6. Proposed Job Role and GVT(T)24014 Skill Level.

Candidate availability and confirmed earliest start date.

Proposed monthly rate, confirming that it does not exceed the awarded Master Contract rate.

Copies or details of relevant professional and technical certifications.

Summary mapping the candidate’s experience against the responsibilities and preferred technical skills in this job

description.

7. 8. Employment status and any subcontracting arrangement.

Confirmation that the candidate can work in Singapore and satisfy SDC security clearance and onboarding

requirements.

9. Any requirement that cannot be fully met, together with the proposed alternative.

9. Assessment Approach

• Compliance with the mandatory requirements and GVT(T)24014 awarded role / skill level.

• Relevance and depth of cybersecurity operations and security platform experience.

• Technical assessment and interview performance.

• Ability to commence by the required date and support the full contract period.

• Communication, documentation, stakeholder management, and incident-handling capability.

• Price reasonableness and compliance with awarded Master Contract rates.