Remote Security Assurance Analyst - Control Evidence Review

Houston Skilled Consultancy; Singapore; Hybrid; SGD 70,000 - 100,000; Full time

Job summary

Houston Skilled Consultancy is seeking a detail-oriented Security Assurance Analyst – Control Evidence Review. The role focuses on reviewing control evidence, validating control effectiveness, and identifying compliance gaps to strengthen the organization’s information security posture.

You will work with cybersecurity, IT operations, risk management, compliance, internal audit, and business teams to ensure evidence supports control performance.

Qualifications

• Bachelor's degree in Cybersecurity, IT, Computer Science or related discipline preferred.
• Equivalent professional experience and relevant training may be considered.
• Certifications such as CISA, CRISC, ISO 27001 Lead Auditor are advantageous but not mandatory.

Responsibilities

• Collect, organize, and review evidence for information security controls.
• Verify evidence is complete, current, relevant and aligned with control requirements.
• Assess controls against ISO 27001, NIST CSF, SOC 2 where relevant.
• Map evidence to control objectives and assessment criteria.
• Identify deviations and elevate significant concerns to stakeholders.
• Prepare evidence review summaries and control assessment reports.
• Coordinate with control owners to obtain missing evidence and track remediation actions.

Skills

Attention to detail

Analytical thinking

Documentation review

Evidence validation

Risk assessment

Education

Bachelor's degree in Cybersecurity/IT/CS

Professional certifications advantageous (e.g., CISA, ISO 27001)

Tools

Excel

Word

PowerPoint

Audit/evidence management tools

Job description

Houston Skilled Consultancy is seeking a detail-oriented Security Assurance Analyst – Control Evidence Review. The role focuses on reviewing control evidence, validating control effectiveness, and identifying compliance gaps to strengthen the organization’s information security posture.

You will work with cybersecurity, IT operations, risk management, compliance, internal audit, and business teams to ensure evidence supports control performance.