Senior IT Specialist (Infrastructure & Cyber Security)

Join us to Transform Lives! Autism Resource Centre (Singapore) or ARC(S), is a not-for-profit charity based in Singapore. ARC(S) is dedicated to serving children and adults on the autism spectrum, to help these individuals lead meaningful and independent lives in society. ARC (S) offers a wide range of services: Pathlight School, and two social enterprises, The Art Faculty and Professor Brawn. Pathlight School is the first autism-focused school in Singapore to offer a unique blend of mainstream academic curriculum and life readiness skills. We are currently the largest special education school in Singapore and due to our further expansion, we invite candidates who have proven commitment and competence to join us in the role of Senior IT Specialist – Infrastructure & Cyber Security. The Team: The Information Technology (IT) provides an enabling, robust and supportive technological environment to empower users guided by principles of accountability, security and privacy. Ultimately, it is the rocket fuel of the organisation, jetting it forward and yet safe to use. Your Impact and Contribution: We are looking for an experienced network and security professional to help us realise our vision of building the next-gen learning community of empowered future technology leaders and learners. This role owns the security of a network that serves thousands of students across multiple campuses — the firewalls, the SD-WAN and the wireless estate that everything else depends on, together with a hybrid Windows and Apple endpoint environment. Beyond technical execution, the role holds cyber security governance for the organisation: setting the policies and controls, assuring them through testing, and building a staff community that can recognise a threat when it arrives. You will be the person who decides what good looks like, proves it, and teaches it. What You’re Involved In: 1. Network & Server Infrastructure • Own the administration, management and monitoring of the organisation’s network infrastructure and services across all campuses and partner schools. • Administer and optimise the organisation’s Fortinet firewalls — security policy, VPN, web filtering and threat inspection, firmware lifecycle and rule base documentation. • Administer and optimise the organisation-wide SD-WAN and HPE Aruba wired and wireless infrastructure — configuration, failover assurance, switching, controllers, access points and network access control. • Lead the resolution of escalated network and security faults, including root cause analysis, drive vendors and principal support to closure, and implement preventive measures to reduce recurrence. • Own network segmentation, VLAN design and IP address management, and provide design and planning input for network services at new and existing campuses. • Administer core server and directory services — Windows Server, Active Directory, DNS, DHCP, file services and virtualisation — including patching, hardening, backup and capacity planning. • Ensure 100% daily readiness of all physical and virtual network and server services. Lead the timely renewal of hardware and service support contracts. 2. Cyber Security Governance • Own, develop and maintain the organisation’s cyber security policies, standards and procedures, including the review cycle. • Design, implement and assure security controls across infrastructure, endpoints and cloud services. • Maintain the IT risk register, track remediation, and report on the organisation’s security posture, incidents and findings to management. • Ensure compliance with PDPA, MOE and other applicable requirements, and conduct security assessment of third parties and vendors prior to engagement and at renewal. 3. Security Operations • Hybrid identity security across Active Directory, Microsoft 365 and Entra ID — Conditional Access, identity protection, privileged access and authentication policy. • Email and endpoint security — endpoint protection platform, anti-phishing and anti-spam policy, alert triage and response. • Endpoint management across a hybrid Windows and Apple estate — ManageEngine Desktop Central and Jamf, device enrolment, compliance policies, patch deployment and platform hardening, with vulnerability scanning and remediation tracking across both platforms. • Security monitoring and incident response, including post-incident review, and assurance of backup, recovery and business continuity arrangements. 4. Security Assurance & Awareness • Plan, scope and coordinate penetration testing and vulnerability assessment with appointed vendors, and track findings to closure against agreed timelines. • Plan and run phishing simulation exercises, analyse results and target follow-up training. • Coordinate incident response and disaster recovery exercises, and document outcomes and lessons learnt. • Develop and run the staff cyber security awareness programme, including onboarding and refresher training pitched for both technical and non-technical staff, and measure its effectiveness. 5. Management, Procurement & Internal Operations • Manage technical evaluation and procurement of network and security hardware, software and cloud services. • Manage vendors, support contracts and renewal cycles, including SLA performance and escalation, ensuring the organisation receives value from its technology investments. • Ensure system and service readiness, and appropriate monitoring of IT systems and services. • Develop and maintain standard operating procedures, runbooks and technical documentation. • Provide technical guidance and mentoring to IT Specialists and IT Support Engineers, and regularly give status reports across projects. • Strictly adhere to and preserve the confidentiality of all IT systems and services, and comply with and help to enforce organisation-wide policies and procedures. 6. Communication • Point of contact on cyber security and network matters. • Relay relevant IT-related information t…