Cybersecurity Specialist (Retail)

Our client is seeking a cybersecurity professional to strengthen day-to-day security operations and support data protection across its business.

This opportunity suits someone who enjoys investigating security issues, working with colleagues to resolve vulnerabilities, and helping employees adopt safer working practices. You will partner with IT and privacy stakeholders across operational security, risk assessments and compliance activities. Overall accountability for security strategy and data protection remains with the relevant functional leaders.

About the role

You will help maintain effective security controls and ensure identified issues are followed through to resolution. Your responsibilities will include:

• Reviewing alerts from security monitoring and endpoint protection tools, investigating potential threats and escalating issues appropriately.

• Supporting incident response, working with technical teams to coordinate corrective actions and track outstanding remediation.

• Working with application owners to assess security weaknesses and follow up on patches and other improvements.

• Coordinating penetration testing and security assessments, maintaining visibility of findings and progress towards closure.

• Supporting security audits and certification activities through evidence collection, documentation and follow-up actions.

• Running phishing exercises and employee awareness sessions, using the results to improve future activities.

• Producing regular updates on security risks, remediation progress and ongoing initiatives.

• Supporting privacy stakeholders with PDPA-related assessments, policy reviews and compliance documentation.

• Encouraging appropriate handling of sensitive information across business teams.

• Contributing to security technology deployments and reviewing vendors’ security questionnaires and supporting documentation.

About you

You bring approximately 3–6 years of practical cybersecurity experience, along with a structured approach to resolving issues and coordinating with others.

We are looking for:

• A relevant qualification in cybersecurity, IT or a related discipline, or comparable practical experience.

• Experience using security monitoring and endpoint protection technologies.

• Working knowledge of incident triage, vulnerability management and remediation processes.

• Familiarity with phishing simulations and employee security awareness programmes.

• An understanding of Singapore’s PDPA and relevant cybersecurity frameworks or certification programmes.

• Exposure to security assessments, audit preparation or third-party security reviews.

• The ability to explain security issues clearly to colleagues with varying levels of technical knowledge.

• Strong attention to detail, sound analytical skills and the initiative to follow outstanding matters through to completion.

A recognised cybersecurity qualification, such as Security+, CEH or a comparable certification, would be advantageous.

The opportunity

Build experience across technical security operations, employee awareness and compliance while working closely with IT and business stakeholders. Your contribution will help improve how the organisation identifies risks, responds to incidents and protects its information.