Risk Services, Technology Risk Services - Incident Response & SOC Compliance, Senior Associate / Assistant Manager

PRICEWATERHOUSECOOPERS RISK SERVICES PTE. LTD.; Singapore; On-site; SGD 70,000 - 120,000; Full time

Job summary

PRICEWATERHOUSECOOPERS RISK SERVICES PTE. LTD. in Singapore is seeking an experienced Incident Response & SOC Compliance Specialist to join our security team.

The role focuses on incident response, breach investigations, and SOC compliance, leveraging DFIR tools and SIEM platforms. You will lead triage and containment activities, perform root-cause analyses, and collaborate with technical and non-technical stakeholders to improve resilience and regulatory alignment.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or related field.
• 2–5 years of SOC experience with hands-on incident response.
• Experience with additional DFIR tools or forensic methods.
• Proficiency with SIEMs like RSA NetWitness, QRadar, ArcSight, Splunk.
• Familiarity with GRC tools such as RSA Archer.
• Analytical and detail-oriented with strong problem-solving ability.
• Excellent communication across all levels.
• Certs such as CISA, CISSP, or CISM are a plus.
• Incident handling or forensics certs (GCIH, GCFA, GCFE, EnCE).
• Familiarity with NIST SP 800-61, SANS frameworks.
• Scripting (VBA, Python) for automation and analysis.

Responsibilities

• Coordinate and lead incident response activities (triage, containment, eradication, and recovery).
• Investigate security breaches with root-cause analyses and remediation recommendations.
• Use DFIR tools to collect and analyse digital evidence with proper custody.
• Develop and maintain incident response playbooks and reports.
• Create, implement, and update SOC compliance policies and procedures.
• Audit and assess adherence to SOC requirements and drive improvements.
• Collaborate with cross-functional teams to embed controls into workflows.
• Utilise SIEM solutions for continuous monitoring and reporting.
• Analyse logs and threats to proactively detect incidents.
• Communicate updates to stakeholders and deliver training on IR readiness.
• Stay current with regulations and emerging threats; drive IR framework improvements.

Skills

SOC experience

DFIR tools

SIEM

Communication

Scripting (Python)

Education

Bachelor’s degree in Information Security or CS

Tools

RSA NetWitness

QRadar

ArcSight

Splunk

RSA Archer

Job description

A career in our Risk Services, within Information Technology Risk Services, will allow you to develop and apply strategies that help clients leverage enterprise technologies so they can get a higher return on their investment, mitigate risks, streamline processes, and find operational inefficiencies. We assist clients in understanding and challenging their current risk profiles and develop strategies to build digital confidence by embracing opportunities to stay competitive through building trust and resilience into their technology systems. We cover a wide range of disciplines, including risk evaluation, operational and strategic Information Technology processes, project governance, application implementation, data integrity, cyber security, and accounting/audit.

Our team helps organisations analyses and assess the security environment and application of our client’s information technology systems. You’ll help develop strategies to increase the reliability of system outputs, enhancing systems security and integrity, and developing strategies for ongoing maintenance. Together we can build trust in society and solve important problems.

Position Overview:

We are seeking a dedicated and experienced Incident Response & SOC Compliance Specialist to join our dynamic security team. The ideal candidate will have 2–5 years of experience in a Security Operations Centre (SOC) environment, with a strong track record in incident response, breach investigations, and SOC standards compliance. In this role, you will develop and maintain compliance policies, orchestrate incident response efforts, conduct breach investigations, and utilise DFIR tools to gather and analyse digital evidence. Success in this position requires strong analytical skills, effective communication, and the ability to work with both technical and non-technical stakeholders.

Key Responsibilities (Essential)

Incident Response & Breach Investigations

• Coordinate and lead incident response activities (triage, containment, eradication, and recovery).
• Investigate and document security breaches, performing root cause analyses and recommending remediation.
• Leverage DFIR tools (e.g., EnCase, FTK, Autopsy) to identify, collect, and analyse digital evidence, ensuring proper chain of custody.
• Develop and maintain incident response documentation, including playbooks, reports, and after-action reviews.

SOC Compliance & Policy Management

• Create, implement, and update SOC compliance policies and procedures in alignment with relevant standards.
• Conduct regular audits and assessments to ensure adherence to SOC requirements and identify areas for improvement.
• Collaborate with cross-functional teams to integrate compliance controls into operational workflows.

Security Monitoring & Analysis

• Utilise SIEM solutions (e.g., RSA NetWitness, QRadar, ArcSight, Splunk) for continuous monitoring, threat detection, and compliance reporting.
• Analyse logs, alerts, and threats to proactively detect and investigate potential security incidents.
• Communicate effectively with technical and non-technical stakeholders, providing clear updates on incidents, risks, and compliance requirements.
• Deliver training programmes to enhance incident response readiness and compliance awareness across the organisation.
• Stay current with industry regulations, best practices, and emerging threats to maintain robust incident response and compliance capabilities.
• Identify and drive continuous improvement initiatives within the incident response framework and SOC compliance processes.

Qualifications & Skills

• Bachelor’s degree in Information Security, Computer Science, or a related field.
• 2–5 years of experience working in a SOC environment, including hands‑on incident response.
• Practical experience with other DFIR tools or forensic analysis methodologies.
• Proficiency with SIEM solutions (e.g., RSA NetWitness, QRadar, ArcSight, Splunk).
• Familiarity with Governance, Risk, and Compliance (GRC) tools (e.g., RSA Archer).
• Demonstrable analytical and problem‑solving skills with attention to detail.
• Excellent communication skills to engage effectively with stakeholders at all levels.
• Relevant certifications such as CISA, CISSP, or CISM are a plus
• Incident handling or forensics certifications (e.g., GCIH, GCFA, GCFE, EnCE).
• Familiarity with incident response frameworks (e.g., NIST SP 800‑61, SANS).
• Experience with scripting languages (e.g., VBA, Python) for automation and analysis will be advantageous.