Tech Risk or Assurance Analyst

Zohorecruit; Singapore; On-site; SGD 89,000 - 106,000; Full time

Job summary

Zohorecruit is seeking a highly technical Tech Risk/Assurance Analyst to validate security controls across Azure, GCP, and Huawei Cloud. You will assess EDR/NDR, SIEM/SOAR, WAF, CSPM, and PAM implementations, ensuring least-privilege access and effective defense-in-depth.

The role requires hands-on testing, AI-enabled automation, and the ability to produce clear risk-based reports for executives. Singapore-based, with a strong security focus on cross-cloud environments.

Qualifications

• Minimum 5 years’ experience in IT Security, Risk and Compliance.
• Hands-on validation of security controls across multi-cloud environments.
• Familiarity with security standards such as NIST CSF, ISO 27001, SOC2, and SG-specific policies.

Responsibilities

• Conduct hands-on validation of security controls across Azure, Google Cloud (GCP), and Huawei Cloud environments.
• Test defense platforms including SIEM/SOAR, EDR/NDR, WAF, SASE, CSPM, and threat intel integrations.
• Assess endpoints, IAM, and Zero Trust access controls.
• Evaluate PAM configurations to enforce least privilege.
• Translate complex findings into risk-based reports for stakeholders and leadership.
• Identify control gaps and drive remediation with Cloud, IT Infra, and Security teams.
• Leverage AI to accelerate control mapping, evidence gathering, and risk scoring.

Skills

Security testing

Cloud security

AI in security

PAM

Zero Trust

Risk reporting

NIST CSF

SOC/SIEM

Tools

EDR/NDR

Next-Gen SIEM/SOAR

WAF

CSPM

PAM solutions

Azure

GCP

Huawei Cloud

Job description

Posted On 30/09/2026

Job Information

Work Experience 5+ years

Technology

SGD 8000 - SGD 9500

City Singapore

State/Province Central Singapore

079903

Job Description

We are seeking a highly technical, forward-thinking Tech Risk or Assurance Analyst to join our cybersecurity team. In this role, you will be responsible for validating the design and operational effectiveness of our security controls across our entire enterprise landscape. This includes our complex multi-cloud infrastructure (Azure, Google Cloud, Huawei Cloud), our advanced security technology stack, and the global end-user computing environment.

This position requires a hands-on technical practitioner who understands how to test system configurations and leverage Artificial Intelligence (AI) to automate and accelerate the assessment lifecycle.

• Conduct hands-on technical validation of security controls across Azure, Google Cloud (GCP), and Huawei Cloud environments.
• Validate the effectiveness of critical defense platforms including Next-Gen SIEM/SOAR, EDR/NDR, WAF, SASE, CSPM, and Threat Intelligence integrations.
• Assess controls protecting endpoints, mobile devices, identity and access management (IAM), and remote access protocols (Zero Trust/ZTNA).
• evaluate the configuration and enforcement of PAM solutions (e.g., LAPS, enterprise vaulting solutions) to ensure least-privilege principles are maintained.
• Evaluate architecture and deployments against industry best practices and frameworks (e.g., NIST, CSA CCoP).
• Leverage AI tools to accelerate control mapping, evidence gathering, log analysis, and risk scoring.
• Develop scripts and utilize AI to automate repetitive assurance tasks.
• Translate complex technical findings from cloud, security stack, and endpoint assessments into clear, risk-based reports for stakeholders and executive leadership.
• Identify control gaps and misconfigurations. Work closely with Cloud Architecture, IT Infrastructure, and Security teams to drive actionable remediation plans.
• Continuously refine the cyber assurance methodology, utilizing AI insights to reduce assessment cycle times and improve the accuracy of control health metrics.

Experience & Education

• Minimum 5 years’ experience in IT Security, Risk and Compliance.
• Knowledgeable in security standards or regulations such as NIST CSF, ISO 27001, SOC2, CCOP (SG), PDPA (SG), GDPR(EU), MLPS(CN), Security by Design.

Technical Skills

• Security Technology Stack: Hands-on experience operating, configuring, or auditing enterprise security tools such as EDR/NDR, Next-Gen SIEM/SOAR, SASE, WAF, and PAM solutions.
• Multi-Cloud Expertise: Technical understanding of native security controls, architecture, and deployment models in Microsoft Azure and Google Cloud Platform (GCP). Familiarity with Huawei Cloud or Cloud Security Posture Management (CSPM) platforms is highly desirable.
• End-User Security: Strong understanding of endpoint hardening (Windows/macos), Mobile Device Management (MDM), Identity Providers (idp), and secure remote access architectures.
• Control Validation: Proven experience practically testing controls (e.g., querying cloud apis, testing EDR detection capabilities, reviewing IAM policies, analyzing network flow logs) rather than relying solely on policy reviews.
• Experience using AI to optimize work processes, summarize data, or generate automation scripts.
• Familiarity with OT/ICS security standards or OT monitoring tools is a plus.

Soft Skills

• Independent worker with initiatives, positive attitude, and team player.
• Good analytical skills and attention to details