Cyber Security Risk Specialist

BHAVYAM INFOTECH SERVICES PTE. LTD.; Singapore; Presencial; SGD 60 000 - 100 000; Tempo integral

Resumo da oferta

BHAVYAM INFOTECH SERVICES PTE. LTD. is seeking a cybersecurity specialist to conduct risk assessments across systems and vendors, supporting audits and regulatory compliance.

You will partner with project teams, architects, legal and procurement to embed secure practices across lifecycles. The role requires hands-on risk assessment experience, threat modelling, architecture reviews, and review of third-party security reports.

Qualificações

• : Bachelor's degree in cybersecurity, information security, computer science, information technology, engineering, or related discipline.
• : Hand on Experience in conducting cybersecurity risk assessments
• : Working Experience in retail with third-party security assessments
• : Experience supporting audits and regulatory compliance
• : Partner with project managers, architects, developers, infrastructure teams, legal, procurement, and business stakeholders.
• : Identify threats, vulnerabilities, attack paths, and business impacts.
• : Providing cybersecurity guidance throughout project lifecycles
• : Perform cybersecurity assessments on vendors, suppliers, managed service providers, and SaaS solutions.
• : Review vulnerability assessment and penetration testing reports.
• : Assess risks using the organisation's cybersecurity risk methodology.
• : Responsible for identifying, assessing, and managing cybersecurity risks across business initiatives, technology implementations, third-party services, and operational environments.
• : The specialist acts as a trusted advisor to project teams, business stakeholders, and technology teams, enabling secure business transformation while maintaining an effective risk posture.

Responsabilidades

• Conducting cybersecurity risk assessments (e.g., Security Risk Assessments (SRA), Threat Modelling, Architecture Reviews) for new and existing systems
• Reviewing solution architectures for on-premise, cloud, SaaS, APIs, AI solutions, and mobile applications
• Reviewing security assurance documentation (e.g., SOC 2 Type II, ISO 27001, penetration test reports).

Conhecimentos

Cybersecurity risk assessment

Audit support

Regulatory compliance

Vendor risk assessments

Threat modelling

Architecture reviews

Formação académica

Bachelor's degree in Cybersecurity / Information Security / CS / IT / Engineering

Descrição da oferta de emprego

Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or related discipline

Hand on Experience in conducting cybersecurity risk assessments

Working Experience in retail with third-party security assessments

Experience supporting audits and regulatory compliance

Partner with project managers, architects, developers, infrastructure teams, legal, procurement, and business stakeholders.

Identify threats, vulnerabilities, attack paths, and business impacts.

Providing cybersecurity guidance throughout project lifecycles

Perform cybersecurity assessments on vendors, suppliers, managed service providers, and SaaS solutions.

Review vulnerability assessment and penetration testing reports.

Assess risks using the organisation's cybersecurity risk methodology.

Responsible for identifying, assessing, and managing cybersecurity risks across business initiatives, technology implementations, third-party services, and operational environments.

The specialist acts as a trusted advisor to project teams, business stakeholders, and technology teams, enabling secure business transformation while maintaining an effective risk posture.

Key Responsibilities

• Conducting cybersecurity risk assessments (e.g., Security Risk Assessments (SRA), Threat Modelling, Architecture Reviews) for new and existing systems
• Reviewing solution architectures for on-premise, cloud, SaaS, APIs, AI solutions, and mobile applications
• Reviewing security assurance documentation (e.g., SOC 2 Type II, ISO 27001, penetration test reports).