Information Technology - Cyber Security Analyst
SINGAPORE AIRLINES LIMITED · Singapore ·
- Category
- Security
- Experience
- 4+ years
- Company size
- 1000+
Cyber Security Analyst seconded to Scoot, managing security systems, driving cybersecurity initiatives, conducting POCs and vendor evaluations, and supporting ISO 27001 and PCI-DSS audits across the SIA Group IT infrastructure.
Job Description
You will be a member of the Group Information Security Team responsible for initiating, implementing, and maintaining security products and solutions to support enterprise security. This position is seconded to Scoot.
Key Responsibilities include:
- Subject matter expert (SME) for the security systems owned by the Information Security Team.
- Ensure security systems are utilized to their maximum capabilities.
- Recommend and drive cybersecurity solutions and initiatives to improve the cybersecurity of the organization.
- Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
- Provide security consultancy, technical guidance, expertise, solutions, and education.
- Identify and assess cyber risks in the IT infrastructure environment.
- Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.
- This is an individual contributor role. Deliver tasks with minimal supervision.
- Provide support for AUDIT initiatives. Liaise with Internal and External Auditors from the Cyber team.
- Provide AUDIT support for ISO 27001, PCI-DSS, and Cyber Security Maturity Assessment.
- Any relevant ad-hoc duties. Manage individual project priorities, deadlines, and deliverables.
- Strong communication skills.
- Coordinate and deploy SIA Group IT cybersecurity initiatives in Scoot.
Requirements
- Degree in IT or related field, with at least 4-6 years in information security, especially in the cybersecurity space.
- Professional security certifications (CISSP, GPEN, OSCP, CEH, CISA, CRISC, CISM etc) preferred.
- Experience with Governance, Risk and Compliance (GRC) activities.
- Familiar with ISO 27001, PCI-DSS, PDPA, and GDPR requirements.
- Experience in security technologies, practices, application/network/systems architecture and design, test tools and processes.
- Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods etc.
- Strong oral, written, presentation and interpersonal skills.
- Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.
- Able to work independently and in a team-oriented, collaborative environment.