Information Technology - Cyber Security Analyst (Scoot)

Role overview

You will join the Group Information Security team to help introduce, implement, and sustain security products and solutions that strengthen enterprise security. This role is assigned to Scoot.

What you'll do

• Act as the main technical specialist for the security platforms managed by the Information Security team.
• Make sure the existing security tools are being used to their fullest potential.
• Suggest and lead cybersecurity improvements and initiatives that strengthen the organisation’s security posture.
• Draft RFQs and evaluation criteria, run proof-of-concept testing during product assessments, and work with vendors to roll out security solutions.
• Offer security advice, technical direction, practical solutions, and awareness/education support.
• Spot and evaluate cyber risks across the IT infrastructure landscape.
• Stay current on new threats and vulnerabilities affecting platforms adopted by the SIA Group and recommend controls to reduce risk.
• Work as an individual contributor with limited supervision and take ownership of assigned deliverables.
• Support audit-related activities and coordinate with internal and external auditors from the cyber team.
• Assist with audits and assessments for ISO 27001, PCI-DSS, and Cyber Security Maturity Assessment.
• Handle other ad hoc duties as required and manage your own priorities, timelines, and deliverables.
• Use strong communication skills to coordinate and deploy SIA Group IT cybersecurity initiatives within Scoot.

Requirements

• A degree in IT or a related discipline, along with 4 to 6 years of experience in information security, particularly cybersecurity.
• Professional security certifications such as CISSP, GPEN, OSCP, CEH, CISA, CRISC, or CISM are an advantage.
• Hands-on experience with governance, risk, and compliance activities.
• Working knowledge of ISO 27001, PCI-DSS, PDPA, and GDPR requirements.
• Experience with security technologies, security practices, and application, network, and systems architecture/design, including testing tools and processes.
• Good understanding of cyber threats, vulnerabilities, hacking techniques, and exploit methods.
• Strong verbal, written, presentation, and interpersonal communication skills.
• A proactive mindset with initiative, enthusiasm, urgency, and a positive attitude toward resolving critical issues.
• Comfortable working independently as well as collaboratively in a team environment.

Additional information

The employer thanks all applicants for their interest and notes that only shortlisted candidates will be contacted.