Cybersecurity Assurance Specialist or Lead

Kerry Consulting; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Kerry Consulting is seeking a technically strong cybersecurity professional to join a security team and strengthen assessment of controls across a complex enterprise environment.

The role goes beyond policy reviews, focusing on practical testing, automation, and clear risk communication to senior stakeholders. You will work with Cloud, Infrastructure and Security teams to remediate weaknesses and improve assurance methodologies.

Qualifications

• Minimum 5 years of experience in cybersecurity, technical assurance, security engineering or related areas.
• Strong technical understanding of cloud and enterprise security controls across multiple cloud environments.
• Hands-on experience with security technologies such as endpoint security, SIEM/SOAR, network security and IAM.
• Ability to assess control effectiveness beyond policy reviews and documentation.
• Familiarity with NIST CSF, ISO 27001 and Security-by-Design principles.
• Experience using Python, scripting or automation to improve assurance processes would be advantageous.
• Excellent written and verbal communication for technical and non-technical stakeholders.

Responsibilities

• Perform technical assessments of security controls across cloud, infrastructure, endpoints and security platforms.
• Review cloud environments and configurations to identify weaknesses, gaps and misconfigurations.
• Assess effectiveness of technologies such as SIEM/SOAR, EDR/NDR, WAF, SASE, CSPM and threat intel platforms.
• Review controls across IAM, privileged access, endpoint security and remote-access environments.
• Translate findings into clear risk observations and practical recommendations for stakeholders.
• Collaborate with Cloud, Infra and Security teams to remediate weaknesses.
• Help automate the cyber assurance methodology to improve visibility and efficiency.

Skills

Cybersecurity

Technical assurance

Cloud security

Endpoint security

IAM/PAM

Scripting

Python

AI/Automation

Risk communication

Tools

SIEM/SOAR

EDR/NDR

WAF

SASE

CSPM

Threat intelligence

Job description

We are looking for a technically strong cybersecurity professional to join an established security team and help strengthen how security controls are assessed across a complex enterprise environment.

Unlike a traditional compliance-focused assurance role, this position requires someone who can go beyond policy reviews and practically assess whether security controls are working as intended. The role covers cloud, infrastructure, security technologies, endpoints and identity, with an increasing focus on using AI, scripting and automation to make assurance activities more efficient and scalable.

Key Responsibilities:

• Perform technical assessments of security controls across cloud, infrastructure, endpoints and enterprise security platforms.
• Review cloud environments and configurations to identify security weaknesses, control gaps and misconfigurations.
• Assess the effectiveness of technologies such as SIEM/SOAR, EDR/NDR, WAF, SASE, CSPM and threat intelligence platforms.
• Review controls across IAM, privileged access, endpoint security and remote-access/Zero Trust environments.
• Assess technology architectures and security implementations against recognised security standards and industry practices.
• Perform practical control testing through activities such as configuration reviews, log analysis, IAM policy reviews and security-control validation.
• Use AI, scripting and automation to improve areas such as evidence collection, control assessment, security analysis and reporting.
• Translate technical findings into clear risk observations and recommendations for Technology and senior stakeholders.
• Work closely with Cloud, Infrastructure and Security teams to remediate identified weaknesses.
• Help improve and automate the broader cyber assurance methodology to reduce manual effort and provide better visibility over control effectiveness.

Requirements:

• At least 5 years of experience across cybersecurity, technical assurance, security engineering, technology risk or related areas.
• Strong technical understanding of cloud and enterprise security controls, ideally with experience across more than one cloud environment.
• Hands‑on experience assessing, operating or implementing security technologies across areas such as endpoint security, SIEM/SOAR, network security, IAM/PAM, vulnerability management or cloud security.
• Ability to practically assess control effectiveness rather than relying solely on documentation and policy reviews.
• Familiarity with security frameworks and standards such as NIST CSF, ISO 27001 and Security-by-Design principles.
• Experience using Python, scripting, AI or other automation tools to improve cybersecurity or assurance processes would be highly advantageous.
• Strong analytical skills with the ability to communicate technical findings clearly to both technical and non-technical stakeholders.