Cybersecurity Risk & Assurance Specialist - #1162297

12 Months Contract

Working Location: Changi
Monday - Friday, 8:30am to 6:00pm

We are seeking a motivated and analytical Cybersecurity Risk & Assurance Specialist to strengthen our cyber risk, assurance, and security testing capabilities across enterprise and Operational Technology (OT) environments.

Responsibilities:

• Interpret and operationalise cybersecurity regulations (including obligations under the Cybersecurity Act), internal standards, and the Cybersecurity Code of Practice into clear control requirements.

• Conduct structured risk assessments (inherent and residual), recommend risk treatment options or compensating controls, and escalate where appropriate.

• Support and oversee cybersecurity risk and testing activities across enterprise and OT environments, applying approaches tailored to safety, availability, and legacy system constraints.

• Partner with system owners and engineering teams to ensure remediation and security activities are operationally safe, feasible, and eMectively implemented.

• Contribute to clear risk and assurance reporting to management and governance stakeholders.

• Coordinate and govern security testing activities, including vulnerability assessments, penetration testing, red team exercises, threat hunting, and tabletop exercises.

• Define and review testing objectives, attack scenarios, and threat models to ensure alignment with realistic threat landscapes.

• Analyse findings using a risk-based lens, validate severity ratings and compensating controls, and recommend prioritised, practical remediation plans.

• Track remediation progress, support residual risk evaluation and risk acceptance discussions, and maintain consolidated reporting of findings to closure.

• Coordinate internal and external audits by consolidating evidence, performing gap analysis, and maintaining structured documentation repositories.

• Review policies, standards, and control implementations to identify gaps or nonconformities, and track corrective actions to timely closure.

• Support ongoing compliance with applicable cybersecurity regulations, the Cybersecurity Code of Practice, and Security-by-Design requirements.

• Serve as a key member of the Incident Response Team (IRT), providing cyber expertise during incident triage, containment, investigation, and recovery.

• Lead cyber impact assessments while partnering with system managers responsible for operational recovery.

• Support root cause analysis, incident documentation, and regulatory/governance reporting through established channels.

• Track post-incident remediation actions and lessons learned to strengthen overall cyber resilience.

Requirement:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.

• At least 4–6 years of experience in cybersecurity risk management, security testing oversight, compliance, or assurance roles.

• Hands-on experience or strong familiarity with vulnerability assessments, penetration testing, red team exercises, or similar security testing activities.

• Strong understanding of risk-based analysis, residual risk assessment, and compensating controls.

• Experience working with Operational Technology (OT) or high-availability systems is advantageous.

• Familiarity with obligations under the Cybersecurity Act, Cybersecurity Code of Practice, and Security-by-Design principles is highly desirable.

• Professional certifications (e.g., CISSP, CISM, CRISC, GIAC, OSCP, CEH) are advantageous

We regret to inform that only shortlisted candidates will be notified.

Interested candidate please click "APPLY" to begin your job search journey and submit your CV directly through the official PERSOL SG job application platform - GO Mobile.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOL SINGAPORE PTE LTD and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolsingapore.com/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.



This is in partnership with Employment and Employability Institute Pte Ltd (“e2i”). e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance and skills upgrading services, and partnering employers to address their manpower needs through recruitment, training and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation-wide manpower and skills upgrading initiatives. By applying for this role, you consent to e2i’s PDPA.

PERSOL Singapore Pte Ltd

• RCB No. 200007268E • EA License No. 01C4394

• REG Number. R23117757 (Loh Yi Yuan)