Senior Security Analyst: Governance, Risk & Compliance

ENERGY MARKET COMPANY PTE LTD; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

ENERGY MARKET COMPANY PTE LTD in Singapore seeks a Senior Security Analyst (Governance, Risk & Compliance) to lead security programmes and controls, ensuring compliance with policies, standards, regulatory requirements, and security architecture.

You will design and implement preventative and detective security processes, manage audits, access governance, and risk registers, and coordinate with the SOC and service providers to strengthen the organisation's cybersecurity posture.

Qualifications

• Degree in IT/CS or equivalent required.
• 8+ years in cybersecurity risk and controls.
• Experience with regulatory requirements and frameworks.

Responsibilities

• Manage security programmes across the Company to ensure policy and regulatory compliance.
• Design, implement, and maintain preventive and detective security controls and governance.
• Maintain security policies, standards, and procedures aligned with regulations and best practices.
• Lead security audits, track findings, and close remediation actions timely.
• Manage access governance and risk registers; escalate significant risks as needed.
• Coordinate incident triage, remediation, containment, and resolution with IT teams.
• Evaluate vendors' security solutions to ensure alignment with risk management objectives.

Skills

Excellent communication skills

Stakeholder management

Education

Degree in IT, Computer Science, or equivalent

Job description

ENERGY MARKET COMPANY PTE LTD in Singapore seeks a Senior Security Analyst (Governance, Risk & Compliance) to lead security programmes and controls, ensuring compliance with policies, standards, regulatory requirements, and security architecture.

You will design and implement preventative and detective security processes, manage audits, access governance, and risk registers, and coordinate with the SOC and service providers to strengthen the organisation's cybersecurity posture.