Senior Security Operations Analyst

Kerry Consulting; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Our client, a multinational organisation in Singapore, is seeking an experienced Senior Security Operations Analyst to strengthen cybersecurity operations, governance and risk management capabilities. You will own security operations activities, monitor cyber threats, and manage incidents across the security stack.

You will also oversee vulnerability management, penetration testing, risk assessments, Secure-by-Design reviews, security policies, vendor assessments and support audits and ISO 27001

Qualifications

• Degree in Information Technology, Computer Science or related discipline.
• Professional certifications such as CISSP, CISM, CISA, CRISC or CEH are advantageous.
• At least 8 years of relevant cybersecurity/security operations experience.

Responsibilities

• Own key security operations activities including monitoring threats and incidents.
• Oversee managed security service providers and security platforms.
• Lead vulnerability management, penetration testing and security risk assessments.
• Contribute to Secure-by-Design reviews, policies, standards and vendor security assessments.
• Support audit, ISO 27001 initiatives and regulatory activities, and coordinate with teams and auditors.

Skills

Incident management

Vulnerability management

Security monitoring

Vendor management

Security governance

ISO 27001

Education

Degree in IT/CS

CISSP/CISM/CISA/CRISC/CEH advantageous

Job description

Our client is a well-established multinational organisation with a complex and highly regulated operating environment. They are looking for an experienced Senior Security Operations Analyst to support and strengthen their cybersecurity operations, governance and risk management capabilities. The role offers broad exposure across security operations, incident response, security architecture, compliance and information security management.

Role

You will take ownership of key security operations activities, including monitoring cyber threats, managing security incidents and overseeing the performance of managed security service providers and security platforms. The role also covers vulnerability management, penetration testing, security risk assessments, Secure-by-Design reviews, security policies and standards, vendor security assessments and security project support. In addition, you will contribute to audit and regulatory activities, maintain the organisation's ISO 27001 Information Security Management System, support cybersecurity awareness initiatives and work closely with internal technology teams, external vendors, auditors and relevant authorities.

Requirements

• Degree in Information Technology, Computer Science or a related discipline. Professional certification such as CISSP, CISM, CISA, CRISC or CEH is highly advantageous.
• At least 8 years of relevant experience in cybersecurity or security operations, with exposure to incident management, vulnerability management, security monitoring and vendor management.
• Strong understanding of security governance, cybersecurity risk management, audit processes, security standards and ISO 27001 implementation.
• Experience supporting security architecture reviews, Secure-by-Design initiatives, security assessments and security requirements for technology projects.
• Strong analytical, communication and stakeholder management skills, with the ability to manage multiple priorities and operate effectively in a fast-paced environment.