Manager - IT Security

The Manager, Infrastructure Security is responsible for strengthening the organisation’s infrastructure security posture. This individual contributor role focuses on promoting cybersecurity best practices, managing security exceptional requests, periodically reviewing the operational efficiency of infrastructure security controls, and ensuring timely reporting of IT security performance metrics.

• Responsible for leading the review of firewall requests and the continuous optimization of firewall rules. Coordinate and conduct periodic firewall rule reviews to identify and remediate obsolete, unused, redundant, or high-risk rules, ensuring alignment with organizational security policies, regulatory requirements, and industry best practices.

• Responsible for conducting system hardening review and assessments across enterprise platforms and environments in accordance with organizational security standards to minimize risks, maintain compliance, and support a robust and resilient infrastructure environment. Review and evaluate exception requests where deviations from established hardening baselines are required.

• Conduct periodic and ad hoc vulnerability assessments across the organization’s infrastructure to proactively identify, assess, and mitigate security risks. Ensure timely reporting, tracking, and remediation of identified vulnerabilities in alignment with organizational security standards.

• Monitor cloud environments to identify, track, and report misconfigurations, policy violations, and non-compliant resources using appropriate tools. Ensure cloud configurations remain aligned with organizational security policies and best practices.

• Supports Third-Party Review Committee in conducting security assessments prior to vendor onboarding. Ensure appropriate security controls are evaluated and facilitate secure data handling practices, including proper data retention and deletion during offboarding.

• Maintain, and periodically review infrastructure security documentation, including standards, procedures, and guidelines, ensuring the documentation aligns with regulatory requirements, organisational policies, and industry best practices.

• Perform regular reviews to ensure antivirus signatures are consistently updated across all endpoints and servers, maintaining compliance with MAS Cyber Hygiene Notice and organisational security standards.

• Conduct and facilitate the annual attestation process for standalone devices to ensure the adherence to the required security controls.

• Degree/Diploma in Information Security, Computer Science, or related field.

• 2 to 4 years of working experience in infrastructure or information security.

• Good understanding of DLP technologies, security awareness programmes, infrastructure security controls and best practices.

• Familiar with compute infrastructure, network infrastructure, and infrastructure security solutions – including implementation and management.

• Certifications such as CISSP, CISM, and CCSP are preferred.