IT Executive (Digital Capability & Innovation Department - Cybersecurity & Operations)

About the Role We are seeking an IT Executive (Cybersecurity & Operations) to support the organisation’s cybersecurity posture and day-to-day IT operations. This role combines hands-on security operations with IT support responsibilities, ensuring systems are secure, reliable, and well-managed. The ideal candidate is technically hands-on, operationally strong, and able to translate cybersecurity requirements into practical system configurations. Responsibilities: 1. Cybersecurity Operations & Monitoring Monitor security alerts from SIEM, endpoint protection, and network systems; perform triage and escalate where required Analyse logs and system activity to detect anomalies and potential cybersecurity threats Support implementation and maintenance of security tools (e.g., SIEM, endpoint detection, MDR services) Review and fine-tune security alerts and monitoring rules to improve effectiveness 2. Incident Response & Risk Management Perform first-level incident investigation, containment, and recovery actions Document incidents, root causes, and follow-up remediation actions Coordinate with internal stakeholders and vendors during security incidents Support vulnerability remediation and follow-up on identified risks 3. Governance, Risk & Compliance (GRC) Support implementation of cybersecurity policies, standards, and procedures Assist in audits, risk assessments, and compliance activities (e.g., PDPA and internal governance requirements) Maintain documentation for risks, controls, and mitigation actions Work with relevant stakeholders on data protection and data security initiatives 4. Vulnerability Management & Hardening Conduct vulnerability scans and coordinate remediation activities Track patching status and ensure timely updates across systems and endpoints Implement and maintain system hardening baselines (e.g., CIS benchmarks, NIST guidelines) Monitor security posture across assets and follow up on gaps 5. Vendor & Security Tool Coordination Liaise with cybersecurity vendors (e.g., MDR, VAPT, firewall providers) Track service deliverables, incidents, and remediation progress Support evaluation and onboarding of new tools and solutions 6. IT Operations & End-User Support Provide Level 1–2 IT support for incidents and service requests Support system administration for Microsoft 365, Entra ID / Active Directory, endpoints and network infrastructure Manage user access, onboarding/offboarding, and device lifecycle activities Perform routine system monitoring and preventive maintenance Requirements: Qualifications & Experience Diploma or Degree in Information Technology, Cybersecurity, or related field Preferably 3–6 years of relevant experience in cybersecurity and/or IT operations Experience in environments requiring both security and tech support responsibilities Technical Skills Familiarity with: Security monitoring tools (e.g., SIEM, log analysis, MDR platforms) Endpoint protection solutions (e.g., Microsoft Defender, Bitdefender or equivalent) Endpoint management tools (e.g., Microsoft Intune, Atera or equivalent) Vulnerability scanning and patch management tools Microsoft 365, Entra ID / Active Directory Network fundamentals and monitoring tools Implementation of cybersecurity frameworks (e.g., CIS, NIST) using Intune and Group Policy (GPO) Firewall configuration and management (e.g., Fortinet, SonicWall or equivalent) Technical Exposure (Advantageous) Experience with: PowerShell scripting for automation and administration Microsoft 365 ecosystem, including Entra ID security configurations Windows Autopilot or modern device provisioning workflows If you are interested to join us, please apply via Fei Yue Career Portal: https://careers.fycs.org/ For your privacy and security, kindly refrain from including your NRIC number in your application form or resume.