Information & Cyber Security Analyst

Asia Gulf Cloud; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Asia Gulf Cloud is seeking a Security Analyst to support the cybersecurity programme and collaborate with technology, product and operations teams in Singapore. The role requires hands-on security expertise and the ability to identify, assess and manage risks across the development lifecycle and business operations.

The candidate should have 3–5 years of cybersecurity experience, strong GRC knowledge, and familiarity with ISO 27001, NIST, CIS, and PCI‑DSS.

Qualifications

• Bachelor’s degree in cybersecurity or related field.
• 3–5 years of cybersecurity experience with strong GRC foundation.
• Experience in the financial industry preferred.
• Strong communication and interpersonal skills.
• Familiarity with ISO 27001, NIST, CIS, and PCI-DSS.
• Security certifications such as CISM, CEH preferred.

Responsibilities

• Maintain information security policies, standards, risk registers and KRIs.
• Conduct cybersecurity risk assessments for new technologies, projects and third‑party services.
• Support enforcement of security policies and procedures.
• Support security reviews throughout the software development lifecycle, including design reviews and security requirements.
• Support vulnerability management activities, including scans and reporting.
• Monitor security alerts and incidents with MSSP/MDR partners, and assist incident response.
• Coordinate with stakeholders for regulatory compliance and audits.
• Provide up‑to‑date cybersecurity awareness and guidance to promote secure‑by‑design practices.

Skills

Cybersecurity

GRC

Cloud security

Application security

Communication skills

Teamwork

Analytical thinking

Education

Bachelor’s degree in Cybersecurity

Security certifications (CISM, CEH)

Job description

The Security Analyst is responsible for supporting day-to-day operations and continuous improvement of the cybersecurity programme. This role acts as a trusted partner to technology, product and operations teams to ensure that cybersecurity risks are identified, assessed and managed throughout the development lifecycle and business operations. This position requires solid technical expertise and a strong understanding of information security principles, with hands-on experience in security tools and frameworks.

DUTIES & RESPONSIBILITIES

• Maintain the information security policies, standards, risk registers and KRIs.
• Conduct cybersecurity risk assessments for new technologies, projects and third-party services, and support risk treatment activities.
• Support implementation and enforcement of security policies and procedures.
• Support security reviews throughout the software development lifecycle, including the review of technology designs, security requirements and application security assessments.
• Support security assurance activities, including vulnerability assessments, penetration testing and control effectiveness reviews.
• Manage vulnerability management activities, such as scanning, prioritisation, tracking, reporting and validation of security findings.
• Monitor and investigate security alerts, events and incidents in coordination with MSSP/MDR partners, and support incident response and recovery activities.
• Liaise with internal stakeholders to support regulatory compliance and audit activities.
• Provide up-to-date cybersecurity awareness, training and guidance to the organisation to promote secure-by-design practices and strengthen the overall cybersecurity posture.

EDUCATION & TRAINING

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field
• Three to five years of experience in cybersecurity, with strong GRC foundation and exposure to cloud and application security preferred
• Experience in the financial industry is strongly preferred
• Strong communication and interpersonal skills
• Ability to work independently and as part of a team
• Strong analytical and problem-solving skills
• Individuals who enjoy being hands-on, have a growth mindset and thrive in a fast-paced environment are preferred
• Familiarity with cybersecurity frameworks and standards such as ISO 27001, NIST, CIS, and PCI-DSS
• Security certifications such as CISM, CEH, or other relevant certifications are preferred