Cybersecurity Specialist (Audit Readiness)

BCS is NETS’ wholly owned subsidiary, and is an entity within the NETS Group. It manages and operates clearing and payment infrastructure for the Singapore Automated Clearing House, including Fast And Secure Transfers (FAST), Inter-bank GIRO (IBG), Cheque Truncation System (CTS), and provides services for PayNow and SGQR Central Repository.

Responsibilities:

• Retrieve, analyse, and compile security evidence from various security platforms (e.g. SIEM, IAM, PAM, AWS, cloud and infrastructure security tools) to support Requests for Information (RFI), investigations, audits, and regulatory inquiries.


• Manage and coordinate the end‑to‑end process of RFI fulfilment, ensuring timely, accurate, and complete responses within stipulated timelines.


• Work closely with CSOC, DFIR, Security Engineering, Governance, and IT teams to validate findings, clarify requirements, and ensure accuracy of submitted evidence. 


• Maintain clear documentation of evidence sources, assumptions, and data extraction methods to ensure audit traceability and admissibility.


• Assist in the continuous improvement of evidence handling processes, templates, and standard operating procedures.


• Ensure all evidence handling and data disclosures comply with internal security policies and regulatory requirements. 

Requirements:

Education and Experience

• Diploma or Degree in Computer Science, Information Security, Information Technology, Engineering, or a related discipline.


• Minimum 3–5 years of hands‑on experience in cybersecurity operations, security engineering, incident response, or security monitoring roles.


• Practical experience supporting audits, RFIs, investigations, or regulatory reporting is highly advantageous.

Skills and Knowledge

• Hands‑on experience with security platforms and technologies such as SIEM, IAM / PAM solutions, Cloud environments (AWS preferred), Endpoint, network, and security monitoring tools


• Familiarity with cybersecurity concepts across domains such as threat detection, identity security, access controls, and governance.


• Familiar with cyber security regulatory and industry frameworks, including Cyber Security Act 2018, Cyber Trust Mark, Cybersecurity Code of Practice (CCoP), MAS Cyber Hygiene, Technology Risk Management Guidelines (TRMG) and NIST CSF Maturity Model.


• Ability to interpret regulatory, audit, and risk requirements and translate them into clear evidence and responses.


• Strong analytical and problem‑solving skills with attention to detail and accuracy.

Competent in documentation and reporting, including preparation of RFI responses, audit artefacts, and management updates.

• Strong understanding of cyber security concepts, controls, and domains (e.g. security architecture, threat management, identity, and governance).

• Experience working with cross‑functional teams, including cyber security engineers, IT operations, vendors, and business stakeholders.

• Self‑motivated team player with strong ownership, resilience, and a continuous improvement mindset.


• Strong communication and presentation skills, with the ability to engage technical and non‑technical stakeholders, including management.

Professional Certifications

• Professional certifications such as CISSP, CISM, CRISC, GIAC, AWS or solution specific certifications or equivalent are advantageous.

Banking Computer Services Pte Ltd (a subsidiary of Network for Electronic Transfers (Singapore) Pte Ltd)