Senior Security Analyst (Security Operations)

ENERGY MARKET COMPANY PTE LTD; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

Energy Market Company Pte Ltd (EMC) seeks a Senior Security Analyst (Security Operations) to lead 24x7 security operations and incident management, safeguarding EMC’s digital assets from cyber threats. The role reports to the VP, Technology (Security).

Responsibilities include threat monitoring, vulnerability management, governance, and security-by-design advisory for technology projects. Strong communication and cross‑unit collaboration are essential.

Qualifications

• Degree in IT, Computer Science, or equivalent.
• Security certifications such as CISSP, CRISC, CISM, CISA, or CEH.
• At least 8 years of experience managing security operations.
• Experience with ISO 27001 implementation.
• Operational knowledge across security domains.
• Excellent communication to engage stakeholders and manage vendor relationships.
• Ability to prioritize multiple projects in a fast-paced environment.

Responsibilities

• Lead EMC’s 24x7 Security Operations and Security Incident Management.
• Maintain security operations infrastructure, monitor threats, conduct vulnerability management and incident response.
• Develop and maintain information security policies, frameworks, and incident response processes.
• Provide security architecture guidance and Security-by-Design advisory for projects.
• Oversee risk assessments, audit activities, and governance/compliance initiatives.
• Support ISO/IEC 27001 certification and related audits.
• Lead incident management activities including investigation, containment, and recovery.
• Promote security awareness and training across employees and vendors.
• Collaborate with internal units, external vendors, auditors, and regulators on cybersecurity matters.
• Monitor evolving cyber threats and recommend appropriate security measures.

Skills

Security operations

Incident management

Security governance

Security risk assessment

Vendor management

ISO 27001

Communication skills

Team collaboration

Regulatory compliance

Education

Degree in IT/Computer Science or equivalent

Job description

Company Overview

Energy Market Company Pte Ltd (EMC) operates the wholesale market of Singapore’s National Electricity Market (NEMS), Asia’s first liberalised electricity market. EMC provides a transparent trading platform, managing price calculation, scheduling, clearing, and settlement of electricity transactions.

Job Summary

We are seeking a Senior Security Analyst (Security Operations) to lead EMC’s 24x7 security operations and incident management, safeguarding the organisation’s computing and digital assets from cyber threats.

TheSeniorSecurityAnalystreportstotheVP,Technology(Security).

Key Responsibilities:

• Manage EMC’s 24x7 Security Operations and Security Incident Management to protect computing and digital assets against cyber threats and incidents.
• Manage and maintain security operations, including infrastructure availability and conduct threat monitoring, security event analysis, vulnerability management, penetration testing, and incident response activities to ensure a resilient security posture.
• Develop, implement, review, and maintain information security policies, frameworks, standards, guidelines, and incident response processes aligned with government regulations, organisational needs and industry best practices.
• Provide security architecture guidance and Security-by-Design advisory for technology projects by conducting security risk assessments, evaluating security controls and reviewing vendor security solutions
• Oversee cybersecurity risk assessments, security change controls, audit activities, remediation plans and initiatives related to information security governance and compliance
• Support and maintain the Information Security Management System, including ISO/IEC 27001 certification and compliance activities, policy reviews, audit coordination and continuous improvement efforts.
• Lead security incident management activities including investigation, containment, eradication, recovery, forensic analysis, post-incident reviews, and coordination with internal and external stakeholders.
• Drive security awareness, training and education programs to enhance cybersecurity knowledge and promote best practices among employees, contractors and stakeholders.
• Collaborate with internal business units, technology teams, external vendors, auditors, government agencies and regulatory authorities on cybersecurity, risk management, compliance, and incident management matters.
• Monitor evolving cybersecurity landscape, emerging threats, vulnerabilities and industry developments, recommending appropriate security measures to strengthen EMC’s cybersecurity capabilities

Required competencies and certifications

• Degree in IT, Computer Science, or equivalent
• Security certifications such as CISSP, CRISC, CISM, CISA, or CEH
• At least 8 years of experience managing security operations
• Experience with ISO 27001 implementation
• Operational knowledge of security processes and standards across all security domains
• Broad IT knowledge and experience is a plus
• Experience in managing security audit and audit processes
• Diagnostic skills and recovery experience in IT infrastructure, systems, and applications
• Operationally minded, with sound knowledge of security incident management practices
• Excellent communication skills to engage stakeholders and manage vendor relationships effectively
• Strong collaboration, analytical and planning skills, with understanding of professional best practices
• Ability to prioritize and manage multiple projects in a fast-paced environment with strong attention to detail and creativity in developing solutions
• Self-motivated and works well as a team player