Cybersecurity Specialist (Audit Readiness)

About the role

Banking Computer Services (BCS), a wholly owned subsidiary of Network for Electronic Transfers (NETS) and part of the NETS Group, is hiring a Cybersecurity Specialist focused on audit readiness. The role supports Requests for Information (RFI), investigations, audits and regulatory inquiries by gathering and validating security evidence.

Key responsibilities

• Retrieve, analyse and compile security evidence from platforms such as SIEM, IAM, PAM, AWS and other cloud and infrastructure security tools to support RFIs, investigations, audits and regulatory inquiries.
• Manage and coordinate the end-to-end RFI fulfilment process, delivering timely, accurate and complete responses within set timelines.
• Work with CSOC, DFIR, Security Engineering, Governance and IT teams to validate findings, clarify requirements and ensure evidence accuracy.
• Maintain clear documentation of evidence sources, assumptions and data extraction methods to ensure audit traceability and admissibility.
• Help improve evidence handling processes, templates and standard operating procedures.
• Ensure evidence handling and data disclosures comply with internal security policies and regulatory requirements.

Required profile

• Diploma or degree in Computer Science, Information Security, Information Technology, Engineering or a related discipline.
• 3-5 years of hands-on experience in cybersecurity operations, security engineering, incident response or security monitoring.
• Practical experience supporting audits, RFIs, investigations or regulatory reporting is highly advantageous.
• Experience working with cross-functional teams including cyber security engineers, IT operations, vendors and business stakeholders.
• Strong communication and presentation skills, able to engage technical and non-technical stakeholders including management.

Required skills

• Hands-on experience with SIEM, IAM/PAM solutions, cloud environments (AWS preferred), endpoint, network and security monitoring tools.
• Familiarity with threat detection, identity security, access controls and governance.
• Knowledge of frameworks such as the Cyber Security Act 2018, Cyber Trust Mark, Cybersecurity Code of Practice, MAS Cyber Hygiene, TRMG and NIST CSF.
• Ability to turn regulatory, audit and risk requirements into clear evidence and responses.
• Professional certifications such as CISSP, CISM, CRISC, GIAC or AWS are advantageous.