Hireovo · Cybersecurity
Information Security Analyst
Singapore, Singapore · FULL TIME
About the role
Mid-level Information Security Analyst talent pool in Singapore, focused on security advice on a change before it ships.
Employer assignments use this pool when they need a Information Security Analyst in Singapore, Singapore, who is accountable for security advice on a change before it ships. The useful week is spent reading a design, naming the threat, and recording the accepted risk, with mistakes corrected in the open rather than buried.
Responsibilities
- Review the design review for an unstated data flow and correct it before anyone else relies on it.
- Keep a single current threat note, and archive the older copy once you have dealt with a threat with no mitigation.
- Ask the person who owns the change to challenge the exception record, especially around a risk accepted only in chat.
- Write the assumption behind the access review in two or three plain sentences, and mention a privilege that is broader than the job.
- Compare this week's vendor question list with the previous one and explain an unanswered security question.
- Stop and rework the decision log if you find the who accepted the residual risk.
Requirements
- Roughly 3 to 6 years of reviewing changes for security risk that matches this information security analyst profile, or a shorter record with the same kind of finished work.
- Practical skill with access reviews and written risk decisions in information security analyst work, not a certificate alone.
- Able to explain what risk remains after the mitigation to a colleague who was not in the room.
- Careful with exceptions that live only in chat; this is checked in review of information security analyst work.
- For the information security analyst brief in Singapore, use the working language of that assignment in Singapore.
Nice to have
- Design reviews is useful on information security analyst assignments in Singapore, and it is not required.
- People who have already done access reviews can start this information security analyst brief with less coaching.
- Recorded exceptions is a plus for information security analyst work based in Singapore.
Skills
control testing, risk writing, access review, findings tracking, sampling, security design review, stakeholder notes, evidence packs
Working conditions
This is an on-site information security analyst listing in Singapore, Singapore. Work happens at the assignment's premises. The usual week is Monday to Friday, on Singapore Time. The work is desk-based, with meetings to agree findings. It is not a shift-console role.
Location
The hiring base for this information security analyst listing is Singapore, Singapore. English is an official working language in Singapore.
Qualified people are considered without regard to race, color, religion, sex, national origin, age, disability, or other characteristics protected by applicable law.
This is a talent-pool listing. Your profile will be reviewed and matched to employer openings that fit; submitting an application does not guarantee an interview or placement.
Know someone who fits? Share this role so they can review it and apply themselves.
Apply for this role
Send your resume directly through Hireovo. No account required.