IT Project Security Engineer (Audit)

ST Engineering is a global technology, defence and engineering group with offices across Asia, Europe, the Middle East and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives through its diverse portfolio of businesses across the aerospace, smart city, defence and public security segments. Headquartered in Singapore, ST Engineering ranks among the largest companies listed on the Singapore Exchange.

Join our Cyber Team

We are an industry leader in cybersecurity with over two decades of experience, we deliver a holistic suite of trusted cybersecurity solutions to empower cyber resilience for government and ministries, critical infrastructures, and commercial enterprises. Backed by our indigenous capabilities and deep domain expertise, we offer robust cyber-secure products and services in cryptography, cybersecurity engineering, digital authentication, SCADA protection, audit and compliance.  We specialise in the design and build of security operations centres for cybersecurity professionals and provide managed security services to strengthen the cybersecurity posture of our government and enterprise customers.

Job Responsibilities

• Conduct of scheduled security audits on Line Of Businesses (LOBs) in accordance to the Corporate’s Security Manual and Standard Operating Procedure (SOP) on Security governing physical, document and cyber security (including Systems and networks, information protection, Access Controls, Incident Report and Response, Audit and Review).
• Conduct of no notice inspections to check on security compliance of LOBs.
• Liaise with LOB Project Security Managers on the date and conduct of security audit, covering pre-audit brief, audit checklist and post-audit action reviews and follow-up.
• Maintain and update the security audit checklist, to ensure that it incorporates the latest change/s in the Corporate’s Security Manuals and SOPs.
• Prepare audit report and propose solutions to resolve the security audit findings that are systemic in nature.
• Conduct periodic Cybersecurity vulnerability assessment of the Project Networks and scan for Indicator of Compromise.
• Sieve out good security practices in the LOBs during audit and share them with the larger audience.
• Compile and analyze security findings over time to determine the health state of LOB’s security practices and culture.

Job Requirements

• At least 3 years’ experience in process audit, preferably related to security and/or safety operations.
• Knowledgeable in audit methodology with strong communication and inter-personal skills.
• Competent report writing ability with a good command of the English language both in speaking and writing areas.
• Strong drive and determination to achieve the goals set.
• Possess keen eye for details
• Ability to work as a team and independently, with minimum guidance.
• Ability to learn new and upgrade relevant skillsets, continuously.
• Relevant certification in professional audit and/or training or lesson design courses will be an advantage.
• Preferably with SSCP (Systems Security Certified Practitioner), or CISSP (Certification Information Systems Security Professional) qualification or its equivalent
• Work location: Jurong East

Find out more: https://www.stengg.com/cybersecurity

ST Engineering believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.