Assistant Lead Engineer - Cybersecurity Risk Assessment

SYNAPXE PTE. LTD.; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

A leading technology company is seeking an experienced IT Risk Assessment professional to lead their security initiatives. You will be responsible for analyzing risks, advising on security measures, and ensuring compliance with industry standards. Ideal candidates should possess strong analytical and communication skills, a relevant degree, and significant experience, particularly in the healthcare sector.

Qualifications

• At least 5 years working experience in IT risk assessment, including cyber risk assessment.
• Possessing at least one of the following certifications: CEH, CISSP, CISA, CRIS.
• Experience in the healthcare industry is an added advantage.

Responsibilities

• Perform analysis, prioritization and classification of risk.
• Draft risk scenario and provide recommendation of risk treatment plan.
• Prepare periodic status reports for presentation to management.

Skills

Analytical skills

Communication skills

Team player

Education

Degree in Computer Science, Engineering or equivalent

Tools

NIST cybersecurity framework

CSA risk assessment guidelines

CIS controls framework

ISO/IEC 27001 standards

Job description

• Perform analysis, prioritization and classification of risk
• Draft risk scenario and provide recommendation of risk treatment plan
• Handle day-to-day security advisory and operational request
• Perform review over remediation plans artefact
• Schedule security checks in accordance with reporting schedules
• Prepare periodic status reports for presentation to management
• Continuous enhancement of existing security risk assessment process
• Verifies security controls are implemented accordingly
• At least 5 year working experience in IT risk assessment, including cyber risk assessment and security compliance review
• Experience in cyber security controls, processes and standards, such as NIST cybersecurity framework, CSA risk assessment guidelines, CIS controls framework or ISO/IEC 27001 standards.
• Strong analytical skills and ability to work independently
• Good team player as well as strong communications skills with stakeholders at all levels
• Possessing at least one of the following certification CEH, CISSP, CISA, CRIS and/or related security certification
• Experience in healthcare industry is an added advantage
• Degree in Computer Science, Engineering or equivalent