Tech Risk Analyst

FLINTEX CONSULTING PTE. LTD.; Singapore; On-site; SGD 70,000 - 100,000; Full time

Job summary

A technology consultancy firm based in Singapore is looking for a Cybersecurity Risk and Compliance Specialist. The role involves conducting risk assessments, managing security projects, and ensuring compliance with regulations. Candidates should have at least 5 years of experience in cybersecurity and a strong understanding of cloud infrastructure and security standards. Certifications such as CISA or CISSP are advantageous.

Qualifications

• Minimum 5 years of experience in Cybersecurity, Risk, and Compliance.
• Knowledge of security standards or regulations like NIST, ISO 27001, SOC2.
• Experience with Cloud Infrastructure solutions like Azure, AWS.

Responsibilities

• Conduct risk assessments on digital solutions and third parties.
• Manage security projects and solution implementation activities.
• Provide advisory services on business digital initiatives.

Skills

Cybersecurity

Risk Management

Compliance

Cloud Infrastructure

Network Security

Endpoint Security

Threat Management

Education

Certifications such as CISA, CISM, CISSP, or GICSP

Tools

NIST

ISO 27001

Cloud Posture Management

SIEM

Tenable

Job description

Key Roles and Responsibilities

• Conduct risk assessment on digital solutions and third parties. Identify potential risks and provide options to protect the OT critical infrastructure, ICT Infrastructure, application systems and cloud environment.
• Conduct compliance check on internal controls to ensure compliance with established policies and applicable regulations.
• Assist in developing policies, standards and guidelines to safeguard digital assets in adherence to business needs, industrial best practices and regulatory requirements.
• Provide advisory services to internal departments on business digital initiatives using Security By design / Zero Trust framework to ensure consistency in controls.
• Manage security projects and solution implementation activities that address cybersecurity risks.
• Plan, design and conduct cyber security incident response workshops and exercises (table-top exercises, simulation, and drills)
• Be aware of latest industry standards, regulatory requirements and the potential impacts to cybersecurity policies, standards and procedures.

Qualifications & Experience

• Minimum 5 years’ experience in Cybersecurity, Risk and Compliance
• Knowledgeable in security standards or regulations such as NIST, ISO 27001, SOC2, CCOP (SG), PDPA (SG), GDPR(EU), MPLS(CN), Security by Design
• Technical know-how and experience in solutions such as (but not limited to)
• Cloud Infrastructure, e.g. Azure, AWS, Huawei, Ali
• Cloud compliance e.g., Cloud Posture Management, Workload protectio
• Awareness Platform e.g., Proofpoint, Knowbe4
• Network Security e.g., F/W, IPS, Remote Access, NAC, Data Diode
• Content Security e.g., Web, Email protection
• End point Security e.g., AV, EDR, DLP
• Identify Protection e.g. MFA, Privilege access management
• Threat Management e.g., SIEM, UEBA, NDR, ASM, BAS
• GRC Tool e.g., RSA Archer
• Hardening guidelines for MS products, Linux
• Vulnerability Assessment and Application Testing Tool e.g., Tenable, Qualys, Veracode, Synopsys etc.
• System development lifecycle or DevOps framework
• Certifications such as CISA, CISM, CISSP, GICSP, CCSK, CRISC will be an added advantage
• Knowledge in OT solutions and security will be an added advantage