Senior Security Analyst (Security Operations)

Company Overview

Energy Market Company Pte Ltd (EMC) operates the wholesale market of Singapore’s National Electricity Market (NEMS), Asia’s first liberalised electricity market. EMC provides a transparent trading platform, managing price calculation, scheduling, clearing, and settlement of electricity transactions.

Job Summary

We are seeking a Senior Security Analyst (Security Operations) to lead EMC’s 24x7 security operations and incident management, safeguarding the organisation’s computing and digital assets from cyber threats.

The Senior Security Analyst reports to the VP, Technology (Security).

Key Responsibilities:

• Manage EMC’s 24x7 Security Operations and Security Incident Management to protect computing and digital assets against cyber threats and incidents.
• Manage and maintain security operations, including infrastructure availability and conduct threat monitoring, security event analysis, vulnerability management, penetration testing, and incident response activities to ensure a resilient security posture.
• Develop, implement, review, and maintain information security policies, frameworks, standards, guidelines, and incident response processes aligned with government regulations, organisational needs and industry best practices.
• Provide security architecture guidance and Security-by-Design advisory for technology projects by conducting security risk assessments, evaluating security controls and reviewing vendor security solutions
• Oversee cybersecurity risk assessments, security change controls, audit activities, remediation plans and initiatives related to information security governance and compliance
• Support and maintain the Information Security Management System, including ISO/IEC 27001 certification and compliance activities, policy reviews, audit coordination and continuous improvement efforts.
• Lead security incident management activities including investigation, containment, eradication, recovery, forensic analysis, post-incident reviews, and coordination with internal and external stakeholders.
• Drive security awareness, training and education programs to enhance cybersecurity knowledge and promote best practices among employees, contractors and stakeholders.
• Collaborate with internal business units, technology teams, external vendors, auditors, government agencies and regulatory authorities on cybersecurity, risk management, compliance, and incident management matters.
• Monitor evolving cybersecurity landscape, emerging threats, vulnerabilities and industry developments, recommending appropriate security measures to strengthen EMC’s cybersecurity capabilities

Required competencies and certifications

• Degree in IT, Computer Science, or equivalent
• Security certifications such as CISSP, CRISC, CISM, CISA, or CEH
• At least 8 years of experience managing security operations
• Experience with ISO 27001 implementation
• Operational knowledge of security processes and standards across all security domains
• Broad IT knowledge and experience is a plus
• Experience in managing security audit and audit processes
• Diagnostic skills and recovery experience in IT infrastructure, systems, and applications
• Operationally minded, with sound knowledge of security incident management practices
• Excellent communication skills to engage stakeholders and manage vendor relationships effectively
• Strong collaboration, analytical and planning skills, with understanding of professional best practices
• Ability to prioritize and manage multiple projects in a fast-paced environment with strong attention to detail and creativity in developing solutions
• Self-motivated and works well as a team player