IT Security Auditor
Date Submitted: 04-02-2021 | End date: 04-03-2021
Industry Specialization | : | |
Type of Employment | : | Permanent |
Minimum Experience | : | 3 years |
Work Location | : | South Singapore |
Job Description:
- Develop and obtain signed-off of the Security Audit & Review Plan
- Develop Security Audit Compliance Checklist
- Develop and Implement Security Test Cases
- Perform IT Security Compliance Audit base on the approved checklist, policies and standards
- Conduct Host, OS, DB and Server Hardening Audit / Security Baseline Configuration Assessment
- Conduct ICT Security Risk Assessment, Cyber Risk Audit
- Conduct Security by Design Review
- Perform Security Analysis of IT systems’ requirements and design
- In charge of Policy and Process Compliance Review / Security Compliance Audits
- Create Audit Report and Findings
- Provide professional recommendations and action plans to close the audit findings
- Present the audit findings to the relevant stakeholders
- Obtained Audit Report signed-off
Requirements:
- Bachelor’s degree, preferably in computer science or information systems, or equivalent work experience
- Minimum 3 – 5 years direct Information security experience in a security analyst, engineer, architect, consultant, or a similar role
- Minimum 3 years’ professional experience in conducting IT Security Audit and Review
- Required Certifications: Any of the following:
- Certified Information Security Auditor certification (CISA)
- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Manager (CISM)
- Information Systems Security Architecture Professional (ISSAP)
- Strong knowledge in ICT Security Policies Standards and Guidelines
- Government Instruction Manual (IM8 Policy)
- Center for Internet Security (CIS) Hardening Standards
- High proficiency in a variety of operating systems such as Unix/Linux/Mac/Windows operating systems, including bash and PowerShell