Hands-On Cybersecurity Analyst: Risk & Compliance

Asia Gulf Cloud; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Asia Gulf Cloud is seeking a Security Analyst to support the cybersecurity programme and collaborate with technology, product and operations teams in Singapore. The role requires hands-on security expertise and the ability to identify, assess and manage risks across the development lifecycle and business operations.

The candidate should have 3–5 years of cybersecurity experience, strong GRC knowledge, and familiarity with ISO 27001, NIST, CIS, and PCI‑DSS.

Qualifications

• Bachelor’s degree in cybersecurity or related field.
• 3–5 years of cybersecurity experience with strong GRC foundation.
• Experience in the financial industry preferred.
• Strong communication and interpersonal skills.
• Familiarity with ISO 27001, NIST, CIS, and PCI-DSS.
• Security certifications such as CISM, CEH preferred.

Responsibilities

• Maintain information security policies, standards, risk registers and KRIs.
• Conduct cybersecurity risk assessments for new technologies, projects and third‑party services.
• Support enforcement of security policies and procedures.
• Support security reviews throughout the software development lifecycle, including design reviews and security requirements.
• Support vulnerability management activities, including scans and reporting.
• Monitor security alerts and incidents with MSSP/MDR partners, and assist incident response.
• Coordinate with stakeholders for regulatory compliance and audits.
• Provide up‑to‑date cybersecurity awareness and guidance to promote secure‑by‑design practices.

Skills

Cybersecurity

GRC

Cloud security

Application security

Communication skills

Teamwork

Analytical thinking

Education

Bachelor’s degree in Cybersecurity

Security certifications (CISM, CEH)

Job description

Asia Gulf Cloud is seeking a Security Analyst to support the cybersecurity programme and collaborate with technology, product and operations teams in Singapore. The role requires hands-on security expertise and the ability to identify, assess and manage risks across the development lifecycle and business operations.

The candidate should have 3–5 years of cybersecurity experience, strong GRC knowledge, and familiarity with ISO 27001, NIST, CIS, and PCI‑DSS.