Job Description

JOB DESCRIPTION
This role will partner the lines of business closely on cyber security operations and project initiatives, which broadly includes:

• Work with Keppel Infrastructure's Cyber Security Fusion Center (CFC) Operation lead and CFC cybersecurity team to follow up on security alerts and reporting for respectively line of business
• Liaise with CFC cybersecurity team for Security Operations: Cyber Security monitoring and incident response
• Perform L2 support for security incident discovery, triage, and remediation plan coordination with the line of business team.
• Work with the various team to perform analysis of security events, network traffic and identify incident root cause and steps to mitigate the risk
• Assist with the development of workflows, SOPs, etc
• Support business units with alert and incident management in terms of Threat Management and Incident Reporting
• Work with line of business to gather feedback and improve the effectiveness of CFC monitoring and operation
• Coordinate with line of business for cybersecurity compliance matters and project initiative
• Work closely with key stakeholders to identify strategies to protect data and prevent cyber threats
• Manage security projects and implementation to mitigate risk and comply to regulatory or audit requirements
• Follow up on the security advisories and threat intelligence report shared by regulators and MSP
• Perform vulnerability assessment and remediate the findings
• Assume SIRO (Security Incident Reporting Officer) role as part of the Incident Response Plan
• Such other duties and responsibilities as may be reasonably requested by your immediate supervisor / the head of department from time to time

• Degree in Computer Science, Computer Engineering, or related disciplines with at least 3 years of relevant work experience
• Technical understanding of operating systems, network architecture and design
• Familiarity with security standards / frameworks such as ISO 27001, NIST, CCoP and regulatory requirements from PUB, EMA and CSA will be an advantage
• Familiar with security technologies such as SIEM, IPS/IDS, Incident
• Knowledgeable in Management, DLP, PAM, MFA, firewall and network security for applications and systems
• Experience in CyberArk administration
• Strong problem solving and analytical skills with team player and interpersonal skills