Senior/principle Analyst

As the leading organization in its feild, by ensuring owners of CII systems in the sector fulfil their regulatory obligations under the Act and accompanying Cybersecurity Code of Practice (CCoP).

**Are you have passion in Cyber Security?**
- Attractive Salary Package / plus approxmately up to 2 months bonus
- Hybrid working arrangement
- Exposure to Various Tools and Technology and Career Progression Opportunities
- 12 months Contract position with - possibly extendable/convertible/renewable

You will be the lead analyst cum project manager for cybersecurity compliance projects in the company. This is a new role aims to drive and formulate the implementation of the controls required for the following new and added scopes under Cybersecurity Code of Practice (CCoP) 2.0 in ensuring Company's continual compliance to the regulatory requirements. Your main responsibilities are as below:

- Perform vulnerability assessment and work collaboratively with service providers to perform penetration testing and purple teaming attack simulation.
- Lead and conduct threat hunting and cybersecurity exercises
- Review cyber risks and propose improvement on security control
- Work with Cybersecurity lead to review policies, standards and procedures

**Lead Analyst**
- Be familiarise with the CSA CCoP 2.0 control requirements
- Initiate the review process for policies, standards, guidelines and procedures being impacted by the CCoP revision
- Manage the roll out of the revised policies, standards, guidelines and procedures with the affected stakeholder groups
- Facilitate requirement gathering and scope up the cybersecurity initiatives
- Research and reach out to prospective service providers to understand their service offering
- Develop projects plan and strategise the execution of the projects
- Follow through procurement process for the award of the cybersecurity projects to the most suitable service providers
- Identify any new controls and any existing controls that need to be revised, with regards to the revised CCoP 2.0
- Propose the required controls (new or revised) and obtain buy in from the relevant stakeholder
- Design sustainable work processes and measures to ensure the required controls are implementable
- Initiate the review process for Cybersecurity Incident Response Plan
- Work with the relevant stakeholders to develop any new or revise the necessary checklists, templates and / or procedures for the response plan
- Publish the revised response plan

***Project Manager**
- Perform due diligence in assessing suitable vendors to deliver the planned cybersecurity projects
- Manage the expectation and performance of the awarded vendors delivering the projects till completion
- Develop vendor contacts and relationships for the next phase of the projects, if any
- Develop and maintain projects plan
- Maintain the projects schedule and give periodic report on the progress
- Manage any identified risks and issues
- Manage the required resources for successful projects delivery
- Ensure all identified project deliverables are delivered
- Review and draft any service contract, within the scope of the planned CCoP cybersecurity initiatives, in accordance to company's procurement practices and cybersecurity guidelines, and Singapore laws and regulations
- Manage and track the contracts awarded
- Report any breach or vendor non-performance against the awarded contract terms

**Your Profile**:

- A degree in computer science, information systems or equivalent
- Working experience in cybersecurity compliance capacity
- OT cybersecurity experience will be advantageous

EA License No. 16S8105

Tharnthip (Bee) Luechaikam

EA Reg No: R22105059

Argyll Scott Asia is acting as an Employment Business in relation to this vacancy.