全职 Cyber Security Analyst 工作, 薪水, FPT Asia Pacific 公司招聘中 - Ricebowl

We are looking for a detail-oriented and proactive individual to provide augmented support across cybersecurity governance, security awareness, operations, and vulnerability management functions. This role is suited for someone who is organized, analytical, and able to work independently on assigned tasks within a government cybersecurity team.

Responsibilities

Security Governance

• Conduct preliminary assessments of SaaS requests using established governance frameworks to determine whether further security risk assessment is required.
• Collect and compile security scorecard data from project teams, cross-referencing reported metrics against actual deliverables to ensure accuracy within specified reporting periods.
• Gather and compile the security metrics defined in the cyber workplan initiatives.

Security Awareness

• Analyze whole-of-government phishing exercise results to identify patterns and areas for improvement.
• Monitor and follow up to ensure that new joiners and staff who fell prey to phishing exercises complete mandatory security awareness training.
• Develop engaging security awareness content such as EDMs and gamified quizzes.

Security Operations

• Analyze Data Loss Prevention (DLP) reports to assess whether users may have inadvertently uploaded classified information to central storage platforms, AI tools, or external email.
• Track and consolidate responses from project teams on queries raised through GITSIR/GIROC polls, ensuring timely follow-up.

Vulnerability Management

• Support the establishment of systematic processes for communicating vulnerability information to project teams and tracking remediation status, helping to close the gap between asset visibility and actionable remediation.

The ideal candidate has some background or interest in cybersecurity, IT governance, or a related field. Strong organizational and communication skills are important, as the role involves coordinating across multiple teams and managing follow-ups. Experience with data analysis or content creation would be an advantage. Familiarity with government IT environments or security frameworks is a plus but not required.