IT Executive (Digital Capability & Innovation Department - Cybersecurity & Operations)

About the Role

We are seeking an IT Executive (Cybersecurity & Operations) to support the organisation’s cybersecurity posture and day-to-day IT operations. This role combines hands-on security operations with IT support responsibilities, ensuring systems are secure, reliable, and well-managed. The ideal candidate is technically hands-on, operationally strong, and able to translate cybersecurity requirements into practical system configurations.

Responsibilities

1. Cybersecurity Operations & Monitoring

Monitor security alerts from SIEM, endpoint protection, and network systems; perform triage and escalate where required

Analyse logs and system activity to detect anomalies and potential cybersecurity threats

Support implementation and maintenance of security tools (e.g., SIEM, endpoint detection, MDR services)

Review and fine-tune security alerts and monitoring rules to improve effectiveness

2. Incident Response & Risk Management

Perform first-level incident investigation, containment, and recovery actions

Document incidents, root causes, and follow-up remediation actions

Coordinate with internal stakeholders and vendors during security incidents

Support vulnerability remediation and follow-up on identified risks

3. Governance, Risk & Compliance (GRC)

Support implementation of cybersecurity policies, standards, and procedures

Assist in audits, risk assessments, and compliance activities (e.g., PDPA and internal governance requirements)

Maintain documentation for risks, controls, and mitigation actions

Work with relevant stakeholders on data protection and data security initiatives

4. Vulnerability Management & Hardening

Conduct vulnerability scans and coordinate remediation activities

Track patching status and ensure timely updates across systems and endpoints

Implement and maintain system hardening baselines (e.g., CIS benchmarks, NIST guidelines)

Monitor security posture across assets and follow up on gaps

5. Vendor & Security Tool Coordination

Liaise with cybersecurity vendors (e.g., MDR, VAPT, firewall providers)

Track service deliverables, incidents, and remediation progress

Support evaluation and onboarding of new tools and solutions

6. IT Operations & End-User Support

Provide Level 1–2 IT support for incidents and service requests

Support system administration for Microsoft 365, Entra ID / Active Directory, endpoints and network infrastructure

Manage user access, onboarding/offboarding, and device lifecycle activities

Perform routine system monitoring and preventive maintenance

Requirements

Qualifications & Experience

Diploma or Degree in Information Technology, Cybersecurity, or related field

Preferably 3–6 years of relevant experience in cybersecurity and/or IT operations

Experience in environments requiring both security and tech support responsibilities

Technical Skills

Familiarity with:

Security monitoring tools (e.g., SIEM, log analysis, MDR platforms)

Endpoint protection solutions (e.g., Microsoft Defender, Bitdefender or equivalent)

Endpoint management tools (e.g., Microsoft Intune, Atera or equivalent)

Vulnerability scanning and patch management tools

Microsoft 365, Entra ID / Active Directory

Network fundamentals and monitoring tools

Implementation of cybersecurity frameworks (e.g., CIS, NIST) using Intune and Group Policy (GPO)

Firewall configuration and management (e.g., Fortinet, SonicWall or equivalent)

Technical Exposure (Advantageous)

Experience with:

PowerShell scripting for automation and administration

Microsoft 365 ecosystem, including Entra ID security configurations

Windows Autopilot or modern device provisioning workflows

If you are interested to join us, please apply via Fei Yue Career Portal:

For your privacy and security, kindly refrain from including your NRIC number in your application form or resume.