Senior Cyber Risk - Singapore - NCS

NCS

Verified Company

Singapore

1 week ago

Posted by:

Wei Jie

beBee Recruiter

Description

Senior Cyber Risk & Compliance Analyst:

Date:15-Mar-2023

Location:
Singapore, Singapore

Company:
Singtel Group

We're looking for a Senior Cyber Risk & Compliance Analyst to join our Singapore team to develop and drive effective cyber risk assessment and IT security compliance programs involving activities such as reviewing and developing security policies, processes/procedures and guidelines, establishing compliance with policies, conducting security reviews and security assessment.

Role Responsibilities:

Review and development of security framework, information security policies, processes / procedures, and guidelines on an ongoing basis.
Establish risk assessment, compliance enforcement activities with these policies / procedures through ongoing security/compliance reviews, not limited to log analysis and security assessment of customer ICT systems.
Conduct security risk management exercise, conduct tabletop exercises, conduct vulnerability assessment, coordinate penetration tests activities, conduct information security awareness training for Line of Business Representatives.
Support internal projects in the matters of security risk assessment and compliance enforcement work.
Be the pointofcontact to assist and advise project leads for ICT security related matters.

Your skills and expertise:

In the area of risk assessment, compliance enforcement security and security governance:
Years of IT/IT Security Experience:
Minimum 5-10 Years Work Experience:
Minimum 812 Years Understanding of information security principles, ISO 27001 controls, Center for Internet Security (CIS) controls, Cloud Controls Matrix (CCM) controls and PCI Security Standard are preferred.
Team player with leadership qualities.
Preferred: Possess one (or more) of the following security certifications: CISSP/CISA/CISM/ISMS Lead Auditor Certification. Bachelor's Degree in Information Security, Information Assurance, Computer Science and Computer Engineering