IT & Cybersecurity Services
Budget / Salary30–250 SGD
TypeFreelance project
LocationRemote
Posted1 hour ago
### IT & Cybersecurity Service Provider – Scope of Services
**1. Laptop Setup and Security**
* Set up and configure laptops for employees and consultants.
* Install approved software and applications.
* Enable full-disk encryption, automatic screen locking and appropriate password controls.
* Configure automatic operating system and software updates.
* Install and maintain endpoint protection and anti-malware software.
* Restrict unauthorised software, personal cloud storage and removable media where required.
**2. Google Workspace Enterprise Administration**
* Set up, configure and administer Google Workspace Enterprise.
* Create, modify, suspend and terminate user accounts.
* Configure Gmail, Google Drive, Shared Drives, Google Calendar and Google Meet.
* Manage groups, aliases, administrator roles and user permissions.
* Implement and enforce multi-factor authentication.
* Apply role-based access and least-privilege principles.
* Maintain separate and appropriately restricted administrator accounts.
**3. Data Loss Prevention and Information Security**
* Configure and maintain Google Workspace Enterprise data loss prevention controls.
* Establish policies to detect and restrict inappropriate sharing, downloading or transfer of sensitive information.
* Configure appropriate controls over external sharing of Google Drive files and Shared Drives.
* Restrict copying, printing and downloading where appropriate and technically supported.
* Implement policies for handling sensitive or confidential information.
* Review DLP alerts and assist with investigation and remediation.
**4. Device and Endpoint Management**
* Enrol company devices into Google Endpoint Management where applicable.
* Configure device security and compliance policies.
* Restrict access to company systems from unmanaged or non-compliant devices where appropriate.
* Monitor device compliance and security status.
* Revoke access and remotely remove company information from devices where supported.
* Maintain an up-to-date inventory of company devices and assigned users.
**5. Context-Aware Access and Access Controls**
* Configure Context-Aware Access and other Google Workspace Enterprise access controls where appropriate.
* Restrict access based on user identity, device status, location or other appropriate security conditions.
* Implement enhanced controls for administrators and users with access to sensitive information.
* Periodically review access rules and permissions.
**6. Google Drive and Shared Drive Security**
* Design and maintain appropriate Shared Drive structures.
* Configure access permissions by team, role or function.
* Restrict external sharing and public links where appropriate.
* Review and remediate excessive or inappropriate permissions.
* Manage access for external consultants and third parties.
* Ensure departing users' files and access are properly transferred or removed.
**7. Gmail and Email Security**
* Configure Gmail security protections against phishing, spoofing, spam and malware.
* Configure and maintain SPF, DKIM and DMARC.
* Implement appropriate attachment, link and impersonation protections.
* Monitor suspicious logins and account activity.
* Assist with compromised accounts, credential resets and session revocation.
**8. Security Monitoring and Alerts**
* Configure Google Workspace Enterprise security alerts and reporting.
* Review material alerts relating to suspicious logins, unusual file activity, mass downloads, external sharing or other security events.
* Investigate and escalate suspected security incidents.
* Maintain appropriate security and audit logs.
**9. User Onboarding, Changes and Offboarding**
* Set up laptops, accounts, MFA and access permissions for new users.
* Adjust access promptly where a user's responsibilities change.
* Suspend or terminate accounts promptly upon departure.
* Revoke active sessions and access credentials.
* Transfer relevant files, email and company information to designated personnel.
* Secure, wipe or reset company devices where appropriate.
**10. Cybersecurity Incident Support**
* Provide technical support in the event of suspected phishing, malware, account compromise, unauthorised access, data leakage or lost devices.
* Assist with containment, investigation and remediation.
* Preserve relevant logs and technical records where appropriate.
* Promptly escalate material cybersecurity incidents to designated personnel.
* Assist with restoration of affected systems and accounts.
**11. Backup and Recovery**
* Advise on and implement appropriate backup arrangements for Google Workspace and company devices.
* Assist with restoration of lost, deleted or compromised data.
* Periodically verify that backup and recovery arrangements are functioning.
**12. Ongoing IT Support and Maintenance**
* Provide ongoing support for laptops, Google Workspace Enterprise, Gmail, Drive and related systems.
* Maintain operating system, browser and application updates.
* Troubleshoot device, account, access and connectivity issues.
* Recommend remediation or replacement of obsolete or insecure equipment.
**13. Periodic Security Review**
* Periodically review administrator privileges, user accounts, MFA, Shared Drive permissions, external sharing, DLP policies, device compliance, Context-Aware Access rules and security alerts.
* Identify material security gaps and implement agreed remediation measures.
* Provide periodic reports on security issues, outstanding remediation items and significant incidents.
**1. Laptop Setup and Security**
* Set up and configure laptops for employees and consultants.
* Install approved software and applications.
* Enable full-disk encryption, automatic screen locking and appropriate password controls.
* Configure automatic operating system and software updates.
* Install and maintain endpoint protection and anti-malware software.
* Restrict unauthorised software, personal cloud storage and removable media where required.
**2. Google Workspace Enterprise Administration**
* Set up, configure and administer Google Workspace Enterprise.
* Create, modify, suspend and terminate user accounts.
* Configure Gmail, Google Drive, Shared Drives, Google Calendar and Google Meet.
* Manage groups, aliases, administrator roles and user permissions.
* Implement and enforce multi-factor authentication.
* Apply role-based access and least-privilege principles.
* Maintain separate and appropriately restricted administrator accounts.
**3. Data Loss Prevention and Information Security**
* Configure and maintain Google Workspace Enterprise data loss prevention controls.
* Establish policies to detect and restrict inappropriate sharing, downloading or transfer of sensitive information.
* Configure appropriate controls over external sharing of Google Drive files and Shared Drives.
* Restrict copying, printing and downloading where appropriate and technically supported.
* Implement policies for handling sensitive or confidential information.
* Review DLP alerts and assist with investigation and remediation.
**4. Device and Endpoint Management**
* Enrol company devices into Google Endpoint Management where applicable.
* Configure device security and compliance policies.
* Restrict access to company systems from unmanaged or non-compliant devices where appropriate.
* Monitor device compliance and security status.
* Revoke access and remotely remove company information from devices where supported.
* Maintain an up-to-date inventory of company devices and assigned users.
**5. Context-Aware Access and Access Controls**
* Configure Context-Aware Access and other Google Workspace Enterprise access controls where appropriate.
* Restrict access based on user identity, device status, location or other appropriate security conditions.
* Implement enhanced controls for administrators and users with access to sensitive information.
* Periodically review access rules and permissions.
**6. Google Drive and Shared Drive Security**
* Design and maintain appropriate Shared Drive structures.
* Configure access permissions by team, role or function.
* Restrict external sharing and public links where appropriate.
* Review and remediate excessive or inappropriate permissions.
* Manage access for external consultants and third parties.
* Ensure departing users' files and access are properly transferred or removed.
**7. Gmail and Email Security**
* Configure Gmail security protections against phishing, spoofing, spam and malware.
* Configure and maintain SPF, DKIM and DMARC.
* Implement appropriate attachment, link and impersonation protections.
* Monitor suspicious logins and account activity.
* Assist with compromised accounts, credential resets and session revocation.
**8. Security Monitoring and Alerts**
* Configure Google Workspace Enterprise security alerts and reporting.
* Review material alerts relating to suspicious logins, unusual file activity, mass downloads, external sharing or other security events.
* Investigate and escalate suspected security incidents.
* Maintain appropriate security and audit logs.
**9. User Onboarding, Changes and Offboarding**
* Set up laptops, accounts, MFA and access permissions for new users.
* Adjust access promptly where a user's responsibilities change.
* Suspend or terminate accounts promptly upon departure.
* Revoke active sessions and access credentials.
* Transfer relevant files, email and company information to designated personnel.
* Secure, wipe or reset company devices where appropriate.
**10. Cybersecurity Incident Support**
* Provide technical support in the event of suspected phishing, malware, account compromise, unauthorised access, data leakage or lost devices.
* Assist with containment, investigation and remediation.
* Preserve relevant logs and technical records where appropriate.
* Promptly escalate material cybersecurity incidents to designated personnel.
* Assist with restoration of affected systems and accounts.
**11. Backup and Recovery**
* Advise on and implement appropriate backup arrangements for Google Workspace and company devices.
* Assist with restoration of lost, deleted or compromised data.
* Periodically verify that backup and recovery arrangements are functioning.
**12. Ongoing IT Support and Maintenance**
* Provide ongoing support for laptops, Google Workspace Enterprise, Gmail, Drive and related systems.
* Maintain operating system, browser and application updates.
* Troubleshoot device, account, access and connectivity issues.
* Recommend remediation or replacement of obsolete or insecure equipment.
**13. Periodic Security Review**
* Periodically review administrator privileges, user accounts, MFA, Shared Drive permissions, external sharing, DLP policies, device compliance, Context-Aware Access rules and security alerts.
* Identify material security gaps and implement agreed remediation measures.
* Provide periodic reports on security issues, outstanding remediation items and significant incidents.
Apply on Freelancer →
Project sourced from Freelancer.com. Applications happen directly on the original platform — we never collect your data.