Associate, Cyber Security Governance, Risk & Compl

NCS Group; Singapore; On-site; SGD 75,000 - 105,000; Full time

Job summary

NCS Group is seeking a cybersecurity professional in Singapore to monitor security alerts and manage incidents related to Azure cloud security. The ideal candidate will have 3-5+ years of experience and a strong technical background, focusing on services like Microsoft Defender for Cloud and Zero Trust principles.

Successful candidates will collaborate closely with teams, utilize scripting for automation, and implement security measures in a cloud environment. Certifications in Azure security are highly preferred.

Qualifications

• 3-5+ years of experience in cybersecurity, with focus on Azure cloud security.
• Proven experience in securing enterprise-scale Azure environments.
• Strong analytical and problem-solving abilities.

Responsibilities

• Day to day security monitoring on security alerts.
• Incident management and resolution, raising tickets to vendors.
• Support on vulnerability management in GCC and GCC+.

Skills

Azure cloud security

Microsoft Defender for Cloud

DevSecOps practices

Scripting and automation

Zero Trust architecture

Education

Microsoft Certified: Azure Security Engineer Associate (AZ-500)

CISSP

Tools

PowerShell

Bicep

Terraform

Job description

Job Description

• Day to day security monitoring on the security alerts, NG AV/EDR alerts and any other custom alerts related to security.
• Follow up with alerts detected in (a), which includes investigation and checking with users on the suspicious activities detected.
• Day to day operation of administration and support on NextGen AV /EDR solution like Crowdstrike.
• Incident management and resolution, raising tickets to Microsoft, AWS, and crowdstrike to support and rectify any problems.
• Analyze logs from cloud native DDOS protection solution (eg. AWS shield).
• Configure Azure Monitoring Agent configuration and deployment.
• Software upgrade of cloud workload protection/NG AV/EDR to remediate any vulnerabilities and to get the most out of security administration enhancement.
• Support on the vulnerability management in GCC and GCC+ to recommend the mitigation actions to the system OIC and GCC/GCC+ infra.
• Monitor GovTech’s governance compliance tool – Cloudscape, cloud native CSPM and follow up with actions to rectify the violations.
• Conduct queries on the log analytic to support cyber proactive investigation as per Cyber needs.

Qualifications

• 3-5+ years of experience in cybersecurity, with at least 3 years focused on Azure cloud security.
• Proven experience securing enterprise-scale Azure environments.
• Technical Skills:
• Deep expertise in Azure security services: Microsoft Defender for Cloud, Azure Sentinel (SIEM), Azure Firewall, DDoS Protection, Key Vault, and Entra ID.
• Strong knowledge of Zero Trust architecture, IAM, and PAM solutions.
• Experience with DevSecOps practices and securing CI/CD pipelines.
• Proficiency in scripting and automation (PowerShell, Python, or Bash).
• Familiarity with infrastructure-as-code tools (Terraform, ARM, Bicep).
• Understanding of network security concepts: VNet, NSG, Private Endpoints, ExpressRoute.
• Certifications (Preferred):
• Microsoft Certified: Azure Security Engineer Associate (AZ-500) — strongly preferred
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• CISSP, CISM, or equivalent
• CompTIA Security+
• Soft Skills:
• Strong analytical and problem-solving abilities.
• Excellent communication skills — able to present security risks to both technical and non-technical stakeholders.
• Self-driven with the ability to work independently and lead initiatives.
• Team player with a collaborative mindset.