Security Exposure & Third-Party Assurance Engineer

NTT SINGAPORE PTE. LTD.; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

NTT Singapore Pte. Ltd. is seeking a cybersecurity professional to support its Security Exposure and Third-Party Cyber Assurance initiatives.

The role focuses on hands-on operations across SEM and TPCA, monitoring attack surfaces for the organization and its portfolio. You will validate risks, drive remediation, and ensure continual improvement of security posture. The ideal candidate has 3–5 years of practical experience, strong scripting ability, and familiarity with cloud exposures and vendor

Qualifications

• Requires a degree in Computer Science/IT or related field.
• 3–5 years of hands-on experience in cybersecurity operations, attack surface management, third-party cyber risk assessment, or data lake platforms.
• Experience running third-party/vendor security assessments (VDD/ODD, SIG) and control frameworks (NIST, ISO 27001, CIS Controls).

Responsibilities

• Operate Security Exposure Management (SEM) and Third-Party Cyber Assurance (TPCA) tracks.
• Maintain always-on monitoring platforms and drive remediation across portfolio entities and suppliers.
• Document findings clearly and liaise with technical and business stakeholders.

Skills

Cybersecurity operations

Attack surface management

Third-party risk assessment

Data lake platforms

VDD/ODD

NIST

ISO 27001

CIS Controls

ASM/EASM

CTI

Python

PowerShell

Bash

TCP/IP

DNS

HTTP/S

AWS

Azure

GCP

Analytical

Documentation

Communication

Stakeholders

Education

Degree in Computer Science/Information Technology

Tools

ASM/EASM

Dark-web monitoring

Threat intelligence platforms

Cloud security monitoring

Job description

NTT Singapore Pte. Ltd. is seeking a cybersecurity professional to support its Security Exposure and Third-Party Cyber Assurance initiatives.

The role focuses on hands-on operations across SEM and TPCA, monitoring attack surfaces for the organization and its portfolio. You will validate risks, drive remediation, and ensure continual improvement of security posture. The ideal candidate has 3–5 years of practical experience, strong scripting ability, and familiarity with cloud exposures and vendor