Security Assessment Analyst (3 months contract)

About the role

Security Assessment Analyst supporting cybersecurity review and clearance processes for third-party technology solution and service engagements. You will assess third-party engagements against Mediacorp's cybersecurity policies, standards, regulatory obligations, contractual requirements, and risk management requirements.

Key responsibilities

• Support cybersecurity review and clearance processes for third-party technology solution and service engagements
• Assess third-party engagements against Mediacorp's cybersecurity policies, standards, regulatory obligations, contractual requirements, and risk management requirements
• Evaluate identified cybersecurity risks and confirm that appropriate mitigation, risk acceptance, or escalation actions have been completed
• Provide cybersecurity review findings and recommendations to support risk-based decision-making
• Maintain accurate records of cybersecurity review outcomes, identified risks, remediation actions, and approval decisions
• Track remediation activities and follow up with stakeholders to ensure timely closure of identified risks and findings
• Review vendor security artefacts such as certifications, independent audit reports, penetration test reports, security policies, and questionnaires
• Work closely with business and technology stakeholders, procurement, legal teams, and vendors to facilitate third-party cybersecurity reviews
• Provide advisory to business and technology on cybersecurity due diligence requirements, risk management expectations, and remediation obligations
• Facilitate discussions relating to cybersecurity review findings, risk treatment plans, and risk acceptance decisions

About you

• Experience in cybersecurity risk assessment, security assurance, security governance, compliance, or related cybersecurity functions
• Understanding of cybersecurity principles and common security controls
• Ability to analyse, document, and communicate cybersecurity risks effectively
• Strong stakeholder management and coordination skills
• Good written and verbal communication skills
• Minimum 2 years of relevant working experience
• Experience reviewing vendor certifications, audit reports, penetration test reports, and security questionnaires
• Professional certifications such as ISC2 CC, Security+, SSCP, CISSP, CRISC, CISA, or equivalent