Associate, Cyber Security Governance, Risk & Compliance

About the role

NCS is hiring an Associate for its Cyber Security Governance, Risk & Compliance team in Singapore. The role covers day-to-day security monitoring, incident handling, cloud security administration and support for Microsoft Defender for Cloud, Azure Sentinel and NG AV/EDR solutions such as CrowdStrike.

Key responsibilities

• Monitor daily security alerts, NG AV/EDR alerts and other custom alerts, then investigate them and check with users on suspicious activity
• Operate and support the administration of NextGen AV/EDR solutions such as CrowdStrike
• Handle incidents and raise tickets with Microsoft, AWS and CrowdStrike to resolve issues
• Analyze logs from cloud-native DDoS protection (e.g. AWS Shield)
• Configure Azure Monitoring Agent and perform software upgrades of cloud workload protection and NG AV/EDR to fix vulnerabilities
• Support vulnerability management in GCC and GCC+, recommending mitigation actions to the system OIC and GCC/GCC+ infrastructure
• Monitor the Cloudscape governance compliance tool and cloud-native CSPM, and follow up on violations
• Run log analysis queries to support proactive cyber investigations

Required profile

• 3-5+ years of cybersecurity experience, with at least 3 years focused on Azure cloud security
• Proven experience securing enterprise-scale Azure environments
• Preferred certifications: AZ-500, SC-200, CISSP, CISM or CompTIA Security+

Required skills

• Azure security services: Microsoft Defender for Cloud, Azure Sentinel, Azure Firewall, DDoS Protection, Key Vault, Entra ID
• Zero Trust, IAM and PAM, DevSecOps and CI/CD pipeline security
• Scripting and automation (PowerShell, Python or Bash); Terraform, ARM, Bicep
• Network security concepts: VNet, NSG, Private Endpoints, ExpressRoute