Cybersecurity Analyst
Are you passionate about cybersecurity and governance, and ready to take on a dynamic role at the heart of regulated technology? Join our team and gain hands-on experience in:
Managing Advanced Cloud Security Solutions – Deploy and optimize industry-leading tools like WAF, Firewalls, IPS/IDS, Anti-Malware, EDR, SIEM, Anti-DDoS, and more to protect critical infrastructure.
IT Governance Framework – Develop, implement, and operationalise a governance framework aligned with BNM, PayNet, SC GTRM, PCI DSS, ISO 27001, NIST CSF, PDPA, and other regulatory and industry standards.
IT Risk Management – Assess and manage risks across cloud services, infrastructure, systems, networks, applications, data, new products, and third-party vendors. Build risk treatment plans, track mitigation, and keep risk records accurate and up to date.
KPIs & KRIs Reporting – Develop and track IT metrics, then turn them into clear insights on trends, emerging risks, and control effectiveness for senior management.
Governance, Risk and Compliance – Identify compliance requirements from laws, regulations, and business needs, advise senior management on their implications, and run periodic compliance reviews against internal policies and regulatory expectations. Support policy development and embed a culture of continuous compliance across every level of the organisation.
Regulatory Engagement – Support regulatory submissions, respond to regulator queries, monitor new developments, assess their business impact, and lead gap assessments and remediation. Own the tracking of all applicable obligations and drive the roadmap to full compliance.
Audit & Assurance – Support internal and external IT audits and assessments, including due diligence by banks. Track audit findings through to closure and report status to management.
Leading Security Projects – Drive the implementation of security controls and contribute to risk mitigation strategies.
Vulnerability Management and Penetration Testing – Conduct security assessments, penetration testing, and vulnerability scans to proactively identify and remediate risks.
Security Awareness & Training – Educate and empower employees to recognise and defend against cyber threats, and provide IT compliance advisory so stakeholders understand the regulations that apply to them.
Incident Response – Investigate security incidents, perform root cause analysis, and strengthen defences based on real-world threats.
Supporting the Head of Department – Take on other responsibilities and tasks as assigned from time to time.
Why Join Us?
🔹 Work with a collaborative team of cybersecurity and compliance professionals.
🔹 Stay ahead of the curve with the latest security and regulatory trends.
🔹 Gain exposure to regulatory compliance, risk management, and cutting-edge cloud security.
🔹 Make a real impact by safeguarding critical systems and data.
If you're ready to take your career to the next level while working on high-impact projects, we want to hear from you, whether you're a seasoned professional or just starting out. Interns and fresh graduates are highly encouraged to apply.