Cyber Emerging Threats Analyst

MAYBANK SINGAPORE LIMITED; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

MAYBANK SINGAPORE LIMITED is hiring a Cyber Assurance Analyst to strengthen cyber resilience. You will independently assess cyber and technology controls, identify emerging risk exposures, and provide objective challenge to support risk management and continuous improvement across the Bank.

You will plan thematic assurance reviews, incorporate threat intelligence, and collaborate with diverse teams to drive remediation and governance.

Qualifications

• Degree in Cyber Security, Information Security, Computer Science, Information Technology or a related discipline.
• 4 to 10 years of experience in two or more cyber security domains (assurance, threat intelligence, SOC, pentesting, security architecture, vulnerability management, governance, risk, incident response, cloud security).
• Proven experience assessing security control effectiveness, identifying control weaknesses, and providing independent challenge on cyber risk and remediation activities.
• Experience in banking/financial services or regulated industries is advantageous.
• Strong risk and control mindset with ability to apply risk-based thinking to assurance activities.
• Excellent report writing, presentation and communication skills.

Responsibilities

• Plan and execute thematic assurance reviews across key cyber and technology risk domains.
• Design and execute evidence-based validation activities to assess control design and operating effectiveness.
• Identify systemic control weaknesses and root causes.
• Develop AI-enabled continuous monitoring use cases for control testing and risk intelligence.
• Assess evolving threat actor tactics and regulatory developments in reviews.
• Provide independent challenge and validation of risk assessments and remediation actions.
• Track remediation progress and ensure effectiveness and sustainability.
• Engage with stakeholders across Technology, Cyber Security, Risk, Compliance, and Business teams.

Skills

Analytical thinking

Investigative skills

Problem solving

Communication skills

Report writing

Presentation skills

Education

Degree in Cyber Security / Information Security / Computer Science / Information Technology

Job description

Join Maybank Singapore as a Cyber Assurance Analyst and help strengthen the Bank's cyber resilience in an increasingly complex threat environment. As part of our newly established Cyber Assurance & Emerging Threats Team, you will independently assess cyber and technology controls, identify emerging risk exposures, and provide objective challenge and assurance to support informed risk management and continuous improvement across the Bank.

As a Cyber Assurance Analyst, you will play a crucial role in enhancing the Bank's cyber resilience by assessing controls and identifying risks.

Responsibilities

• A. Thematic Risk Assurance
  • Plan and execute thematic assurance reviews across key cyber and technology risk domains, including, but not limited to cyber hygiene, identity and access management, vulnerability management, third-party security risk management, technology governance, cloud security, operational resilience, as well as other priority risk areas identified by management
  • Design and execute evidence-based validation activities to assess control design and operating effectiveness through walkthroughs, document and configuration reviews, sampling and targeted controls testing against regulatory, industry and internal standards
  • Identify systemic control weaknesses, recurring risk themes, and underlying root causes that may expose the Bank to elevated cyber or technology risks
  • Develop and operationalise AI-enabled continuous monitoring use cases to automate control testing, detect control deviations and emerging risk indicators, and provide timely risk intelligence to management and governance committees
  • Support continuous identification of control gaps, improvement opportunities, and emerging areas of concern.
• B. Emerging Threat-Informed Assurance
  • Assess whether existing controls remain effective against evolving threat actor tactics, emerging attack techniques and new technology risks
  • Incorporate relevant cyber threat intelligence, industry incidents and regulatory developments into thematic assurance reviews
  • Evaluate the Bank's preparedness against emerging risks including AI-enabled threats, third-party ecosystem attacks, cloud-native threats and identity-based attacks.
• C. Independent Challenge and Validation
  • Challenge assumptions in risk assessments, control evaluations, residual risk decisions and remediation strategies, while identifying blind spots and alternative risk perspectives
  • Review responses to audit findings, regulatory observations and risk assessments; validate that action plans address the risk exposure and that completed remediation is effective and sustainable
  • Assess whether accepted risks remain within the Bank's risk appetite and elevate significant or unresolved exposures through appropriate governance channels.
• D. Root Cause and Systemic Risk Analysis
  • Identify recurring findings and systemic weaknesses across technology domains and determine underlying root causes
  • Assess whether recurring issues indicate broader governance, process, capability or cultural weaknesses.
• E. Assurance Reporting, Governance & Remediation Oversight
  • Produce concise, risk-focused and evidence-based assurance reports, dashboards and control health metrics, and present findings and thematic observations to senior management and governance committees
  • Track management commitments and remediation activities through to closure
  • Validate remediation effectiveness and sustainability
  • Identify recurring issues and elevate significant concerns through governance channels.
• F. Stakeholder Engagement
  • Collaborate with Technology, Cyber Security, Control and Prevention, Risk Management, Internal Audit, Compliance, and business teams
  • Promote a culture of strong risk management, continuous improvement, and cyber resilience.

Requirements

• Degree in Cyber Security, Information Security, Computer Science, Information Technology or a related discipline
• 4 to 10 years of experience in two or more of the following: Cyber Security Assurance, Threat Intelligence or Threat Hunting, Security Operations (SOC), Penetration Testing or Red Teaming, Security Architecture, Vulnerability Management, Information Security Governance, Cyber Risk Management, Incident Response, Cloud Security
• Proven experience assessing security control effectiveness, identifying control weaknesses, and providing independent challenge on cyber risk and remediation activities
• Experience within banking, financial services, critical infrastructure, or other highly regulated industries will be an advantage
• Strong risk and control mindset, with the ability to apply risk-based thinking in assessing control effectiveness and prioritising assurance activities
• Ability to provide constructive independent challenge while maintaining effective stakeholder relationships
• Strong analytical, investigative and problem-solving capabilities
• Excellent report writing, presentation and communication skills, with the ability to articulate co