Senior Security Analyst (Security Operations)

Company Overview

Energy Market Company Pte Ltd (EMC) operates the wholesale market of Singapore's National Electricity Market (NEMS), Asia's first liberalised electricity market. EMC provides a transparent trading platform, managing price calculation, scheduling, clearing, and settlement of electricity transactions.

Job Summary

We are seeking a Senior Security Analyst (Security Operations) to lead EMC's 24x7 security operations and incident management, safeguarding the organisation's computing and digital assets from cyber threats.

The Senior Security Analyst reports to the VP, Technology (Security).

Key Responsibilities:

Manage EMC's 24x7 Security Operations and Security Incident Management to protect computing and digital assets against cyber threats and incidents.

Manage and maintain security operations, including infrastructure availability and conduct threat monitoring, security event analysis, vulnerability management, penetration testing, and incident response activities to ensure a resilient security posture.

Develop, implement, review, and maintain information security policies, frameworks, standards, guidelines, and incident response processes aligned with government regulations, organisational needs and industry best practices.

Provide security architecture guidance and Security-by-Design advisory for technology projects by conducting security risk assessments, evaluating security controls and reviewing vendor security solutions

Oversee cybersecurity risk assessments, security change controls, audit activities, remediation plans and initiatives related to information security governance and compliance

Support and maintain the Information Security Management System, including ISO/IEC 27001 certification and compliance activities, policy reviews, audit coordination and continuous improvement efforts.

Lead security incident management activities including investigation, containment, eradication, recovery, forensic analysis, post-incident reviews, and coordination with internal and external stakeholders.

Drive security awareness, training and education programs to enhance cybersecurity knowledge and promote best practices among employees, contractors and stakeholders.

Collaborate with internal business units, technology teams, external vendors, auditors, government agencies and regulatory authorities on cybersecurity, risk management, compliance, and incident management matters.

Monitor evolving cybersecurity landscape, emerging threats, vulnerabilities and industry developments, recommending appropriate security measures to strengthen EMC's cybersecurity capabilities

Required competencies and certifications

Degree in IT, Computer Science, or equivalent

Security certifications such as CISSP, CRISC, CISM, CISA, or CEH

At least 8 years of experience managing security operations

Experience with ISO 27001 implementation

Operational knowledge of security processes and standards across all security domains

Broad IT knowledge and experience is a plus

Experience in managing security audit and audit processes

Diagnostic skills and recovery experience in IT infrastructure, systems, and applications

Operationally minded, with sound knowledge of security incident management practices

Excellent communication skills to engage stakeholders and manage vendor relationships effectively

Strong collaboration, analytical and planning skills, with understanding of professional best practices

Ability to prioritize and manage multiple projects in a fast-paced environment with strong attention to detail and creativity in developing solutions

Self-motivated and works well as a team player