Cybersecurity Specialist (Audit Readiness)

NETS; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Banking Computer Services Pte Ltd (a subsidiary of NETS) is seeking an experienced Cyber Security Evidence Specialist to join our security operations team in Singapore. You will retrieve and analyse evidence from security platforms, coordinate RFI responses, and work with CSOC, DFIR, and IT teams to ensure accurate, timely submissions for audits and regulatory inquiries.

Strong communication, attention to detail, and familiarity with regulatory frameworks (e.g., Cyber Security Act and TRMG) are

Qualifications

• Diploma or degree in CS/InfoSec/IT/Engineering.
• 3–5 years in cybersecurity operations or related roles.
• Experience supporting audits, RFIs, investigations, or regulatory reporting.
• Hands-on with SIEM, IAM/PAM, AWS, and network/security tools.
• Strong analytical and communication skills.

Responsibilities

• Retrieve, analyze, and compile security evidence from platforms to support RFIs, investigations, audits, and regulatory inquiries.
• Manage end-to-end RFI fulfilment within timelines.
• Collaborate with CSOC, DFIR, Security Engineering, Governance and IT teams to validate findings.
• Maintain documentation of evidence sources and data extraction methods for audit traceability.
• Help improve evidence handling processes and SOPs.
• Ensure evidence handling complies with internal security policies and regulatory requirements.

Skills

Security operations

Incident response

RFI management

Audit support

Regulatory reporting

Threat analysis

Communication skills

Cross-functional teamwork

Education

Diploma/Degree in Computer Science or IT

Information Security degree

Engineering degree

Tools

SIEM

IAM/PAM

AWS

Endpoint security

Network monitoring

Job description

BCS is NETS' wholly owned subsidiary, and is an entity within the NETS Group. It manages and operates clearing and payment infrastructure for the Singapore Automated Clearing House, including Fast And Secure Transfers (FAST), Inter-bank GIRO (IBG), Cheque Truncation System (CTS), and provides services for PayNow and SGQR Central Repository.

Responsibilities

• Retrieve, analyse, and compile security evidence from various security platforms (e.g. SIEM, IAM, PAM, AWS, cloud and infrastructure security tools) to support Requests for Information (RFI), investigations, audits, and regulatory inquiries.
• Manage and coordinate the end-to-end process of RFI fulfilment, ensuring timely, accurate, and complete responses within stipulated timelines.
• Work closely with CSOC, DFIR, Security Engineering, Governance, and IT teams to validate findings, clarify requirements, and ensure accuracy of submitted evidence.
• Maintain clear documentation of evidence sources, assumptions, and data extraction methods to ensure audit traceability and admissibility.
• Assist in the continuous improvement of evidence handling processes, templates, and standard operating procedures.
• Ensure all evidence handling and data disclosures comply with internal security policies and regulatory requirements.

Requirements

Education and Experience

• Diploma or Degree in Computer Science, Information Security, Information Technology, Engineering, or a related discipline.
• Minimum 3-5 years of hands‑on experience in cybersecurity operations, security engineering, incident response, or security monitoring roles.
• Practical experience supporting audits, RFIs, investigations, or regulatory reporting is highly advantageous.

Skills and Knowledge

• Hands‑on experience with security platforms and technologies such as SIEM, IAM / PAM solutions, Cloud environments (AWS preferred), Endpoint, network, and security monitoring tools
• Familiarity with cybersecurity concepts across domains such as threat detection, identity security, access controls, and governance.
• Familiar with cyber security regulatory and industry frameworks, including Cyber Security Act 2018, Cyber Trust Mark, Cybersecurity Code of Practice (CCoP), MAS Cyber Hygiene, Technology Risk Management Guidelines (TRMG) and NIST CSF Maturity Model.
• Ability to interpret regulatory, audit, and risk requirements and translate them into clear evidence and responses.
• Strong analytical and problem‑solving skills with attention to detail and accuracy.
• Strong understanding of cyber security concepts, controls, and domains (e.g. security architecture, threat management, identity, and governance).

• Experience working with cross‑functional teams, including cyber security engineers, IT operations, vendors, and business stakeholders.

• Self‑motivated team player with strong ownership, resilience, and a continuous improvement mindset.
• Strong communication and presentation skills, with the ability to engage technical and non‑technical stakeholders, including management.

Professional Certifications

• Professional certifications such as CISSP, CISM, CRISC, GIAC, AWS or solution specific certifications or equivalent are advantageous.

Banking Computer Services Pte Ltd (a subsidiary of Network for Electronic Transfers (Singapore) Pte Ltd)