Patch & Compliance Engineer

Job Title: Patch & ComplianceEngineer
Monthly Salary: $7,500 – $9,800 SGD
Location: Singapore
Employment Type: Full-time, Permanent

Roles & Responsibilities

• Own the end-to-end endpoint patching lifecycle for Windows, macOS, and third-party applications
• Manage monthly Patch Tuesday cycles using SCCM and Intune
• Coordinate with application owners to validate patch compatibility before deployment
• Generate and present compliance reports to IT leadership and audit teams
• Remediate vulnerabilities identified by EDR and vulnerability scanners (Tenable, Qualys, Rapid7)
• Maintain patch exception register and risk-acceptance documentation
• Automate patch deployment and reporting using PowerShell and SQL
• Collaborate with security team to prioritize patches based on CVSS scores and threat intelligence
• Respond to zero-day vulnerabilities with emergency patching procedures
• Continuously improve patch processes to increase compliance and reduce downtime
• Track and report on SLA adherence for critical and high-severity patches
• Maintain a patch calendar and communicate upcoming patching windows to stakeholders

Job Requirements

• Diploma or Bachelor's Degree in Information Technology or related field
• Minimum 5 years of experience in patch management and vulnerability remediation
• Deep knowledge of Windows Update, WSUS, SCCM Software Updates, and Intune Update Rings
• Experience with vulnerability management platforms (Qualys, Tenable, Rapid7)
• Strong SQL query writing skills for custom reporting
• Understanding of CVSS scoring and risk-based prioritization
• Microsoft certification in endpoint management preferred
• Experience with Mac patching (Jamf or Kandji) is an advantage
• Strong documentation and communication skills
• Singaporeans and PRs are encouraged to apply.