search Browse Jobs
Specialist (Cybersecurity)NTUC First Campus · Singapore, Singapore
NTUC First Campus logo

NTUC First Campus

company page ↗

Specialist (Cybersecurity)

🗓️ Posted 2026-09-09 Singapore, Singapore Full-time Hybrid ICT
💰 Salary Not shared 📊 Market S$4,500–S$7,500/mo

About the Company

Enabling bright futures for every child and their family. At NTUC First Campus, we are committed to enabling bright futures for every child and their family. Since 1977, we have been at the forefront of delivering inclusive, high-quality educational and developmental services from infancy to the primary school years. Our preschools are led by three trusted brands - My First Skool, Little Skool-House and Changemakers Explorer. My First Skool is an Anchor Operator (AOP) funded by the Early Childhood Development Agency (ECDA), with over 45 years of leadership in childcare and preschool education. Little Skool-House nurtures adaptive, bilingual children across 14 centres in Singapore. Changemakers Explorer is our newest preschool brand offering interdisciplinary curriculum, enrichment programmes and learning journeys. Beyond preschools, we support children through outdoor enrichment programmes and after-school services, designed for both preschoolers and older children. Our Network Over 180 Centres Serving over 30,000 children and families in Singapore yearly Our Preschools and Subsidiaries My First Skool Little Skool-House Changemakers Explorer Changemakers Afterschool NTUC First Campus Outdoor School Our Achievements Voted as one of the Best Companies to Work For in Asia 2025 (7th year running) HRAsia WeCare: Most Caring Company Award 2025 (5th year running) 17th Singapore HR Awards - People Centred Award for Excellence in Employee Experience & Well-Being (Silver Award) Education Administration Programs Specialties: Early Childhood Care & Education, Training & Professional Development, Curriculum Development

Responsibilities

  • ● Perform security risk assessments, formulate and advise on a risk treatment plan, assist the business in performing business impact analysis,
  • ● Maintain cybersecurity risk registers, track remediation actions, and oversee security control testing.
  • ● Review security testing reports (e.g. vulnerability assessment, penetration testing and secure code review) and work with application teams for remediation.
  • ● Conduct regular vulnerability scans, penetration testing, and risk assessments to identify flaws across hardware, software, and cloud environments.
  • ● Research emerging cyber threat vectors, vulnerabilities (CVEs), and attacker methodologies to update defensive protocols proactively.
  • ● Work closely with Infrastructure and End User Support teams to identify and address any risks and gaps in the infrastructure, endpoints, and application systems
  • ● Collaborate with third-party vendors and contractors to ensure the security of outsourced systems and services meets the industrial best practice to configure, deploy, and maintain critical security infrastructure, including firewalls, antivirus software, data loss prevention (DLP) tools, and regular vulnerability scans.
  • ● Support vendor due-diligence process and help to guide overall third-party risk management efforts.
  • ● Design and lead employee training programs to mitigate human-centric risks like phishing, social engineering, and poor password hygiene (e.g. newsletters, trainings, phishing campaigns)
  • ● Lead the implementation of security protocols, establish robust system hardening standards across enterprise assets, conduct regular risk assessments on hardening control applied.
  • ● Policy & Framework Development: Design, update, and maintain enterprise cybersecurity policies, standards, and control frameworks aligned with business goals
  • ● Support and administer cybersecurity operations using enterprise security solutions (e.g. onboarding of privileged accounts to PAM, implementing WAF for website protection, and reviewing firewall rules, Tenable, Web defacement tools, report phishing tool management, etc.)
  • ● Support both internal audit and external audits (e.g. ISO 27001, NIST, OWASP)
  • ● Primary Point of Contact, and First Responder (monitoring and responding to alerts from Managed Services)
  • ● Perform log analysis, investigate and respond to security incidents, including suspicious activities, phishing attempts, malware infections and data breaches.
  • ● Collaborate with various teams to investigate, contain and remediate security incidents.

Requirements

  • ● Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related field
  • ● Relevant professional certifications such as CISSP, CISM, or CISA are preferred.
  • ● Minimum of 3 years of experience in cybersecurity
  • ● Experience in cybersecurity governance, technology risk, or compliance assurance
  • ● Experience with security technologies such as firewalls, intrusion detection/prevention systems, and data encryption
  • ● Has knowledge in security technologies such as Antivirus/Endpoint Detection and Response (EDR), Privilege Access Management (PAM), Vulnerability Scanning tools, Phishing reporting tools, Web Defacement monitoring tools and Web Application Firewall (WAF)
  • ● Familiarity with security assessment tools and techniques, including vulnerability scanning and penetration testing.
  • ● Experience in vendor and project management
  • ● Excellent communication skills and the ability to explain complex technical concepts to non-technical stakeholders.
  • ● Deep understanding of network infrastructure, TCP/IP protocols, routers, switches, and secure architecture principles.
  • ● Strong analytical and problem-solving skills
  • ● Highly driven and willing to learn