IT Security Analyst (Governance, Risk & Compliance)

Client introduction Our client is an established financial institution, and regulated by the Monetary Authority of Singapore. As part of strengthening its technology governance and security function, the firm is looking to hire an IT Security Analyst (Governance, Risk & Compliance) to join its infrastructure and security team. This role is well suited for someone with a foundation in IT risk, governance, assurance or security compliance, who is looking to build broader exposure across cyber governance, audit, vulnerability management, vendor due diligence and security operations within a regulated financial services environment. Job responsibilities Support the review and overhaul of the firm's IT and security governance framework, drafting policies, standards and procedures for senior review and refinement. Help embed clear, well-understood policies and procedures across the organisation, aligned with regulatory expectations. Support compliance against MAS guidelines, including Technology Risk Management, Cyber Hygiene and Outsourcing, and assist with related risk assessments. Coordinate internal and external audit activity, including collating responses, gathering supporting artefacts and following up on findings with internal stakeholders through to closure. Track vulnerability assessment findings and remediation progress (assessments are run through an external vendor), working with the infrastructure and application teams to close gaps in good time. Conduct third-party and vendor due diligence in line with MAS outsourcing requirements, and respond to client and counterparty due diligence queries on the firm's security controls and governance practices. Support user access reviews, joiner-mover-leaver processes and identity access governance. Assist with business continuity, disaster recovery and related assurance exercises. Provide support on security operations and incident response coordination where required, with guidance from the team lead. Job requirem…