Total 218 information security analyst job vacancies in Legal / Public / Security category in The Philippines

Information Security Analyst - Financial Services

Job Summary

Responsible for cyber governance, risk management, and security operations within a regulated financial services environment. Develops and implements security policies, ensures regulatory compliance, coordinates security testing, and manages incident response and business continuity programs.

Key Responsibilities

Governance & Compliance:

• Provide cyber governance and risk management oversight
• Develop and maintain security policy framework and standards
• Ensure compliance with applicable regulations and standards (ISO 27001, NIST, regional financial services guidelines)
• Manage and track vulnerability remediation status
• Coordinate penetration testing and escalate material security risks to senior forums
• Conduct third-party due diligence for compliance and operational risk

Risk & Incident Management:

• Identify and assess cyber risks; recommend security solutions and initiatives
• Monitor security alerts and investigate security breaches and incidents
• Manage security incident response according to established protocols
• Maintain incident response plans and playbooks
• Develop and maintain Business Continuity Program; coordinate with department operations to create unified business continuity plan

Regulatory & Stakeholder Relations:

• Act as primary contact for senior management and regulatory body inquiries
• Ensure audit findings are remediated and independently validated within agreed timelines
• Conduct annual disaster recovery exercises with internal and external parties
• Provide security advisory on emerging threats and vulnerabilities

Access & Infrastructure:

• Develop and implement identity and access management policies
• Monitor and audit user access activities
• Assess infrastructure, systems, and applications for compliance and vulnerabilities

Awareness & Training:

• Maintain user cyber awareness programs
• Coordinate security awareness training for staff

Required

• 5 years' information security experience
• Strong analytical and problem-solving skills
• Familiarity with SIEM tools (Splunk) and vulnerability assessment tools (Tenable Nessus)
• Strong written, oral, and presentation skills
• Undergraduate degree in Computer Science, Information Technology, Engineering, or equivalent

Preferred

• CISSP, CISA, or CEH certification
• Graduate degree in related field
• Knowledge of regional financial services regulations and guidelines

Security Strategy & Baseline Framework Development

• Develop, implement, and maintain the company's overall security baseline framework covering production environments, corporate networks, key management, access controls, data classification, and other critical security domains. 
• Regularly review and update policies to address evolving threats and ensure consistent security standards across all business units.

Vulnerability Management & Penetration Testing

• Lead vulnerability identification, assessment, and prioritization efforts. 
• Coordinate and/or conduct penetration testing activities, monitor remediation progress, ensure closure within agreed SLAs, and provide regular reporting of critical risks to the CEO.

Key Management & Wallet Security (Custody Layer)

• Design and enforce security controls for digital asset custody operations, including hot and cold wallet management, key rotation processes, multi-signature (Multi-Sig) and MPC solutions. 
• Lead security integration and configuration of enterprise custody platforms such as Cobo and similar providers, including transaction limits, whitelisting, approval workflows, and review mechanisms. 
• Ensure all asset-related activities maintain a complete and auditable operational trail.

Operational Security (OpSec)

• Implement security controls across customer fund movements, external communications, and data processing activities. 
• Review and assess the security of CFD trading systems, payment channels, and integration interfaces. 
• Enforce segregation of duties (SoD) to reduce risks arising from fraud, abuse, or operational errors.

Security SOP Framework

• Develop, maintain, and continuously improve security-related SOPs covering areas such as account management, wallet operations, employee onboarding/offboarding, incident response, third-party onboarding, and emergency procedures. 
• Drive implementation across departments and ensure periodic review and compliance.

Executive & Key Personnel Security

• Develop digital security programs for executives, key custodians, and other high-value individuals. This includes personal account security, device security, SIM swap prevention, anti-phishing and social engineering measures, and reduction of sensitive information exposure through OSINT management.

Third-Party & Vendor Security Management

• Conduct security due diligence and onboarding assessments for third-party vendors, including SaaS providers, liquidity partners, financial counterparties, and technology suppliers. 
• Review security and data protection provisions within contracts and SLAs. 
• Maintain vendor risk registers and coordinate penetration testing, security assessments, and external audits.

Security Incident Response (Technical)

• Lead technical investigations, forensic analysis, and root-cause assessments during security incidents.
• Produce independent technical investigation reports and collaborate with the Independent Risk Manager while maintaining separate and objective conclusions.

Production Security Audits & Regulatory Support

• Conduct periodic reviews of production environments, including network architecture, IAM controls, API security, and infrastructure configurations. 
• Ensure security principles are effectively implemented across all projects. 
• Support regulatory audits and compliance initiatives related to KYC/AML requirements and drive security certification programs as business needs evolve.

Security Awareness & Governance

• Establish and maintain company-wide information security policies and operational standards. 
• Organize security awareness programs, phishing simulations, and training initiatives to foster a unified security culture across both digital asset and traditional financial services businesses.

AI Product Security & Governance

• Develop and oversee security policies for AI-related products and systems. 
• Conduct security assessments of AI applications and ensure the security and resilience of the company's AI infrastructure and foundational platforms, minimizing attack surfaces and operational risks.

Requirements

• Minimum 5 years of experience in information security, with at least 2 years in fintech, digital assets, cryptocurrency, payments, or trading platforms.
• Professional security certifications such as CISSP, CISM, CISA, CCSP, or equivalent.
• Experience in building security teams and security programs will be an advantage.
• Hands-on experience with IAM/SSO solutions (Okta preferred), MFA, Mobile Device Management (MDM), asset management, cloud security (e.g., AWS), and core security technologies such as network segmentation, IAM, and SIEM.
• Strong understanding of digital asset custody and wallet security, including MPC, multi-signature wallets, hot/cold wallet architecture, and key management.
• Experience integrating and managing enterprise custody platforms such as Cobo, Fireblocks, or equivalent solutions.
• Familiarity with penetration testing methodologies and the ability to review and evaluate third-party penetration testing reports.
• Understanding of AI technologies and security considerations for AI systems and applications.
• Proven ability to build security frameworks, policies, and SOPs from the ground up rather than solely operating within existing structures.

About the Role

We are seeking an experienced senior manager to lead our information security team, combining strong hands-on technical expertise as well as people management experience in the information security domain. They will lead a team to manage. They will lead a team to manage Security Operations (SecOps), encompassing threat detection and response, incident management, vulnerability management, security monitoring, and continuous improvement of defensive capabilities.

WHAT YOU’LL BE DOING:

Infrastructure Security

• Manage end-to-end infrastructure security activities, such as vulnerability management, servers’ security monitoring & hardening, infrastructure as a code, etc.

• Design and/or review infrastructure security architecture proposal for various security-driven initiatives for on-premises and cloud environment.

Cloud Security

• Manage compliancy level of AIA SG cloud security assets based on ongoing regular scanning according to the defined threshold.

• Evaluate the security aspect of new cloud-based solutions proposed by application development team, infrastructure team, or business users.

• Manage various cloud security BAU activities, such as assets provisioning, deprovisioning, hardening, etc.

Identity and Access Management

• Supervise the AIA-SG IAM Manager and their team performing IAM Governance functions for the Business Unit. 

Cyber Security & Security Incident Handling

• Work with Security Operation Centre (SOC) Team to ensure secure protection of AIA SG environment.

• Deploy new cyber security initiatives and roll out the platform together with SOC Team.

• Point of contact for security incident handling and investigation, starting from incident is identified, handled, and resolved.

Security Advisory

• Provide feasible security recommendations or guidance based on queries / changes initiated by application development team, infrastructure team, or business users.

• Facilitate challenging security conversations and provide acceptable solutions where IT standards are contradicting with business demands to achieve acceptable business solutions without sacrificing security and compliance aspects.

People Development

• Supervise 8 team members.

• Drive a continues Learning and Development program for the team members through inhouse and external training programs.

• Lead promotion of activities to increase information security within your teams to embed and continuously improve adherence to good practice.

WHAT WE ARE LOOKING FOR:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).

• Minimum 15 years of experiences of information security domain, especially in Application Security, Infrastructure Security and Cloud Security.

• Preferable to have security infrastructure operation background with hands-on experiences of designing and/or reviewing application security or infrastructure security. 

• Hands-on information security experience in the Multiple Cloud Environment (SaaS, PaaS and IaaS) and Cyber Incident management.

• Certifications related to security architecture or Cloud Security is preferable, such as CCSP, Azure DevOps certification, Azure Solutions Architect certification, etc.

• Preferably a holder of one or more of the following information security and audit qualifications: CISSP, CISA, CRISC, CCSP.

• Good knowledge of latest security technologies and cyber landscape in a highly regulated industry.

• Good interpersonal and communication skill.

• Strong leadership with a high integrity, proactive mindset, and strong ownership.

• Working experiences in insurance / banking / IT industry is preferred.

• Infrastructure Security: Windows, Linux, AS400.

• Security Advisory and Assessment, and incident management.

This position is being recruited to support regional information security operations and strengthen cybersecurity capabilities across overseas regions.

Responsibilities:

·      Support the implementation and operation of information security controls and solutions across overseas regions, covering areas such as infrastructure, network, endpoint, application, data, and identity security.

·      Participate in security projects and initiatives, including planning, coordination, deployment, and ongoing improvement activities.

·      Assist in the implementation of governance, risk, compliance, privacy, and data protection initiatives.

·      Support the development and maintenance of security standards, procedures, and technical baselines.

·      Collaborate with regional and global teams to improve overall cybersecurity capabilities.

·      Provide ad-hoc support for regional and global cybersecurity initiatives as required.

Requirements:

·      Bachelor’s degree in information security, Cyber Security, Computer Science, Information Technology, or a related field.

·      At least 2 years of working experience in information security, cybersecurity, network security, IT infrastructure, system administration, or related areas.

·      Familiar with common information security technologies and concepts, such as network security, endpoint security, IAM, data protection, vulnerability management, SOC/SIEM, or cloud security.

·      Familiar with information security and privacy frameworks, such as ISO 27001/27701, ITIL, or related standards and best practices.

·      Basic knowledge of networking and operating systems (Windows/Linux).

·      Good analytical, problem-solving, and communication skills.

·      Able to work effectively with teams across different regions and cultures.

·      Security certifications (e.g. CISSP, CISA, CCSP, Security+, CCNA/CCNP) are an advantage.

·      Candidates with a Diploma and strong relevant working experience will also be considered.

·      Excellent communication and interpersonal skills in both English and Chinese (to liaise with Mandarin speaking stakeholders).

Job Overview

We are looking for a proactive Information Security professional to support enterprise IT security operations and infrastructureinitiatives across regional environments. This role will focus on strengthening cybersecurity operations, monitoring security threats, supporting incident response activities, and maintaining secure network infrastructure within a multinational environment.

The ideal candidate should possess hands-on experience in networking and cybersecurity administration, with the ability to work independently while supporting regional security initiatives.

Key Responsibilities

Cybersecurity Operations & Monitoring

• Monitor security alerts and events through SIEM and security monitoring platforms
• Investigate and respond to cybersecurity incidents and security breaches
• Support vulnerability assessment and remediation activities
• Assist in implementing endpoint and network security solutions across regional offices

Infrastructure & Network Support

• Support daily administration of enterprise IT and network infrastructure
• Maintain network and security configurations to ensure system reliability and compliance
• Troubleshoot infrastructure and connectivity issues across corporate environments
• Participate in infrastructure enhancement and security improvement projects

Project & Regional Support

• Support regional IT security initiatives and deployment activities
• Work closely with internal stakeholders across different countries and teams
• Assist with documentation, operational support, and other assigned tasks
• Occasional regional travel may be required for project implementation or support activities

Requirements

• Diploma or Degree in Information Technology, Cyber Security, Networking, or related discipline
• Minimum 3 to 5 years of experience in network administration or cybersecurity operations
• Familiarity with SIEM monitoring, incident response, and vulnerability management
• Good troubleshooting and problem-solving skills in network and security environments
• Able to work effectively both independently and within a team environment
• Comfortable communicating with users and stakeholders across different backgrounds and regions
• Strong sense of responsibility with the ability to work in a fast-paced environment
• Good verbal and written communication skills in English

Please send your detailed resume in MS Word format to resume@goldtecHRs.com with

• Education Level
• Working experiences
• Each employment background
• Reason for leaving each employment
• Last drawn salary
• Expected salary
• Date of availability

Global Security Operations Centre (GSOC) Analyst, Asia-Pacific

The APAC Global Security Operations Centre (GSOC) Analyst will be based in Kuala Lumpur,Malaysia providing regional threat detection, intelligence collection and analysis, risk incident triage and escalation as well as crisis management support (administrative & operational) for the firm across APAC. The Analyst supports and works integrally with the 24/7/365 APAC GSOC team based in Singapore. This is an opportunity to grow within a mature corporate security operation and work with seasoned regional security experts, gaining competency to key aspects of mature corporate security operations. The successful candidate should be a self-driven and resilient individual, with the ability to perform under pressure and deliver across competing priorities.

• Threat Detection & Reporting: Proactively gather and analyze information from various internal/external sources and draft reports to provide management and global contacts with useful, timely and actionable intelligence.

• Incident Management: Support regional senior management and line-of-business (LOB) stakeholders by triaging risks and underpinning business continuity during incident or crisis.

• Crisis Management Operational Support: Perform incident case and records management, progress logging, and stakeholder messaging and enterprise mass notification.

• Travel Security: Manage and administer travel security operations including tracking, assisting and advising international travelers on any incident or crisis.

• Regional Aptitude: Coordinate with other regional GS leaders or GSOCs fortrans-national incidents or crises or other aspects of security operations.

• Cross-Team Collaboration: Work closely with other incident management partners such as Real Estate, Global Technology Infrastructure, Resiliency, LOB Business Resiliency and Global Security managers to ensure effective coordination and operations.

• Manage any other duties or projects as directed by APAC Global Security senior managers, including Technical and Physical Security tasks.

Requirements

• Minimum of Bachelor’s degree or post-graduate level qualification, particularly in relevant fields e.g. security studies, international relations, geomatics,criminology or social sciences. 

• Strong knowledge and interest in security and geo-political developments across APAC with strong initiative to independently assess emerging themes, events and incidents with potential to impact business, client and third-party locations and travelers across region.

• Ability to work effectively under pressure in a fast-paced environment while consistently producing error-free work and meeting deadlines. 

• Strong analytical, interpersonal skills and comprehensive computer skills (good understanding of all Microsoft applications and willingness to work in a high-technology role regularly utilizing new tools and applications).

Client introduction

Our client is an established financial institution, and regulated by the Monetary Authority of Singapore.

As part of strengthening its technology governance and security function, the firm is looking to hire an IT Security Analyst (Governance, Risk & Compliance) to join its infrastructure and security team. This role is well suited for someone with a foundation in IT risk, governance, assurance or security compliance, who is looking to build broader exposure across cyber governance, audit, vulnerability management, vendor due diligence and security operations within a regulated financial services environment.

Job responsibilities

• Support the review and overhaul of the firm's IT and security governance framework, drafting policies, standards and procedures for senior review and refinement.
• Help embed clear, well-understood policies and procedures across the organisation, aligned with regulatory expectations.
• Support compliance against MAS guidelines, including Technology Risk Management, Cyber Hygiene and Outsourcing, and assist with related risk assessments.
• Coordinate internal and external audit activity, including collating responses, gathering supporting artefacts and following up on findings with internal stakeholders through to closure.
• Track vulnerability assessment findings and remediation progress (assessments are run through an external vendor), working with the infrastructure and application teams to close gaps in good time.
• Conduct third-party and vendor due diligence in line with MAS outsourcing requirements, and respond to client and counterparty due diligence queries on the firm's security controls and governance practices.
• Support user access reviews, joiner-mover-leaver processes and identity access governance.
• Assist with business continuity, disaster recovery and related assurance exercises.
• Provide support on security operations and incident response coordination where required, with guidance from the team lead.

Job requirements

• At least 4 years of experience in IT risk, IT governance, technology assurance, IT audit or IT compliance, gained within a regulated financial institution such as a bank, securities or brokerage firm, asset manager or insurer.
• Working familiarity with the MAS Technology Risk Management Guidelines, Cyber Hygiene Notice and Outsourcing Guidelines.
• Exposure to audit coordination, evidence gathering, policy documentation, risk assessment or remediation tracking.
• A genuine interest in cyber security and a willingness to learn the hands-on operational side of the role. Deep SOC or security engineering experience is not required.
• Exposure to vulnerability management, access reviews, SIEM or IAM tooling is an advantage rather than a requirement.
• Strong written and verbal communication, with the ability to engage auditors, vendors, infrastructure and application teams, and business stakeholders clearly.
• A detail-oriented, proactive working style and a readiness to learn across both governance and operational security.
• Relevant certifications such as CISA, or progress toward them, are advantageous but not mandatory.

Why you should join them

• Breadth of exposure that is rare at this level, spanning governance, risk, compliance, audit and security operations in a single role, giving the right person a strong foundation early in their career.
• Direct mentorship from an experienced infrastructure and security team lead, who will actively coach the successful candidate on the technical and operational aspects of the role.
• A genuine opportunity to help rebuild and mature the firm's IT governance framework, with visible impact in a lean team.
• Regular interaction with auditors, vendors and counterparties, building a clear path toward a career in IT risk and security governance.

JL
Reg. No. R1766249
BeathChapman Pte Ltd
Licence no. 16S8112

Reachfield Security (Grade “A” agency) specializes in supplying security manpower &System to Schools, Factories, Office Buildings, Shopping Centres, etc.

<< New Site Hiring >>

Position: Day Security Officers

Sites -> Spread across East and West of Singapore

Requirements: CCTC, PGPS + OBSE, RTT, HSIS

Shift: 5.5days/Week

Ex-PNSF, SCDF, uniformed group personnel are welcome

1. Job duties include Visitor Pass Issuance, Protecting and Securing properties, Crowd and Traffic Control Management, Access Control, Clocking & Patrolling of premises.

2. As for relief job, you can choose to work up to 3 days you want in a week. We are very flexible.

3. Must have little knowledge on software (e.g. MS Word, Excel, Outlook)

Walk-in for interviews during office hours (Mon to Fri, 9am to 5pm) at: 10 Anson Road #26-09 international Plaza Singapore 079903 (Tanjong Pagar MRT, Exit C)

https://wa.me/6587918100

Tel:6324 0648    /   87918100 (Kenn)

E-Application form

Https://Rss.armfort.com/direct-application

Security Officer

Mandarin Oriental, Singapore is looking for a Security Officer to join our Security team.

Are you a master of craft? Do you thrive in a team that succeeds together, demonstrating integrity and respect while acting responsibly? Do you embrace a growth mindset? We invite you to become a fan of the exceptional. 

Mandarin Oriental is the award-winning owner and operator of some of the most luxurious hotels, resorts and residences located in prime destinations around the world, with a strong development pipeline. Increasingly recognised for creating some of the world’s most sought-after properties, the Group provides legendary service inspired by Asian heritage whilst representing the very cutting-edge of luxury experiences.

Mandarin Oriental, Singapore is a sanctuary of luxury and sophistication overlooking the iconic Marina Bay.

About the job

Based at Mandarin Oriental, Singapore within the Security Department in Singapore, the Security Officer is responsible in ensuring conformity of work standards and consistency in carrying out departmental operations and security within the premises of the hotel. The position reports to the Security Manager.

As Security Officer, you will be responsible for the following duties: 

Reports directly to Security Supervisor on shift. Assist in carrying out operational and administrative duties. Ensure conformity of work standards and consistency in carrying out departmental operations and other security and safety related tasks. Any other duties as assigned by Security Supervisor or above from time to time.

As Security Officer, we expect from you:

• Responsible for the protection of lives and property against crime, violence and other hazards and for securing classified information
• Responsible for all aspect of security and safety work within the entire Hotel complex and its perimeter
• To carry out all Hotel security and safety operation, special events and emergency responds
• Reports directly to Security Supervisor or above
• Patrol and visits all locations requiring special attention as frequently as required
• Perform static duties as assigned
• Ensures maximum guest, employee and hotel safety and security at all times
• Responds immediately to emergency situations and security calls
• To be courteous, tactful, and helpful, but firm in enforcing hotel policies and procedures
• Reports in writing all activities during each tour of duty
• Verify all incoming postal mail and delivery of supplies
• Abatement of fire and safety hazard
• Conduct preliminary investigation
• Any other duty undertook by Security Department

Our commitment to you 

• Learning & Development. Your success is our success. We craft unique learning and development programmes for various stages in your career so that you grow, continuously. 
• MOstay. When you work as hard as our colleagues do, it’s important to take time off. As a member of the #MOfamily, you can stay with us wherever you go in the world. The MOstay programme offers complimentary nights and additionally attractive rates on rooms for you and your loved ones.
• Heath & Colleague Wellness. Finding the right work-life balance is important. Your wellbeing matters to us. A variety of health benefits and wellness programmes are offered to all our colleagues, globally.
• Retirement Plans. When you show commitment to us, we reciprocate. We offer different retirement plans depending on the length of your service and your role.

We're Fans. Are you?

We are looking for a Security Executive to join our team!

As a Security Executive, we rely on you to:

• Assists the Security Manager in the operations of round-the-clock overall security and fire-safety services
• Assist in control of the Security Department and supervise security officers
• Responsible for maintaining adequate and effective security measures for the hotel
• Ensuring maximum protection is given to the guests
• Ensure hotel and guest properties are safeguard against loss, damage and other untoward accidents
• Handle all incidents in a professional and timely manner

We are looking for someone who:

• Has relevant experience within the hotel industry
• Has strong interpersonal and communication skills
• Detail-orientated and has good organisational skills
• Is professional, discreet and can handle sensitive information
• Upholds professional values, ethics and integrity at all times
• Enjoys problem solving with a can-do attitude
• Enjoys being challenges
• Report Writing

If you are the right person, what are you waiting for? Click the apply button now!

Successful candidate will be required to adhere to hotel's grooming and uniform guidelines issued.

Roles & Responsibilities:

• Manage security solution operations, company security tasks (security inspections, campaigns, etc.)
• Security inspection tasks for SDSAP
• Security inspections and security-related tasks are carried out according to the security inspection schedule designated by the team.
• Providing technical support if customers encounter issues while operating security solutions(DRM, In-house solution).
• At the data center, asset inventory and procurement process tasks for SDSAP and SEC must be performed.
• Security asset house-keeping
• Support electronic solution operations, require regular meetings with customers.

Requirements:

• Diploma or Degree in Information Security or Information System or equivalent
• At least 1 year of experience in programming (coding & algorithm)
• Experienced in Windows and Linux Servers
• Good knowledge about IT system
• Good interpersonal skills
• Passion in IT security and technology
• Team player with high initiative, self-motivation and results-oriented mind-set
• Experienced in complex secured network design, VPN and WLAN implementation.
• Good communication, documentation, organizational and interpersonal skills
• Experience with networking, system administration and infrastructure architecture
• An employee with a high level of passion for work and a desire to work together for a long time.
• Work location: 61 TAI SENG AVENUE PRINT MEDIA HUB @ PAYA LEBAR IPARK

Job Responsibility:

• To control all vehicles and visitors to the construction site
• Log the listing of all vehicles, deliveries and visitors on the construction site
• Escorting visitors to the construction office
• Secure entrance during non-operating hours
• Foot patrol of construction site

Job Requirements:

• Minimum CGE O level and possess security experience at construction sites
• Alertness – Always to be alert and aware of his surroundings
• Physical Fitness – Must be physically fit
• Honesty – Must be honest
• Good communication skills
• Ability to serve client’s needs
• Day/Night Shift rotation will be applicable

Reachfield Security (Grade “A” agency)specializes in supplying security manpower & System to Schools, Factories, OfficeBuildings, Shopping Centres, etc.

Day / Night Security Officers

Sites -> Bukit Timah, Orchard, Alexandra, Braddell Rise

Deployments

1)  Schools

2)  Office buildings

3)  residentials

Ex-police, SCDF, uniformed group personnel are welcome

1.    Excellent customer service skills as you will be working frontline and facing customers on daily basis.  

2.    Day / Night shift (7.30 to 7.30).

3.    Any educational background

4.    As for temp/part time or Relief job, you can choose to work any number of days you want in a week. We are very flexible!

5.  Job duties include answer customers enquiries, issue visitors pass, protecting properties, crowd management, access control, bag checking for factories, security & safety of personnel.

6.  Training will be provided for those who are new to Security field

Walk-in for interviews during office hours

(Mon to Fri, 9am to 5pm) at

10 Anson Road #26-09 international Plaza Singapore 079903
(Tanjong Pagar MRT)

*** Online interview or WhatsApp video calls interview can be arranged.

Tel: 63240648    /   87918100 (Kenn)

Job Title: Microsoft Purview DLP Security Analyst / M365 DLP Support Engineer

Employment Period: August/September 2026 to March 2027, with possible yearly renewal
Location: 1 Fusionopolis Way
Working Hours: Monday to Friday, 8:30am to 6:00pm
Engagement Type: Contract / Renewable Term

Role Overview
We are seeking a Microsoft Purview DLP Security Analyst / M365 DLP Support Engineer to support Data Loss Prevention alert monitoring, incident handling, investigation, reporting, user support, and policy improvement activities.

The successful candidate will work closely with security operations, service desk, data owners, business users, compliance teams, and Microsoft Purview SMEs to ensure DLP alerts are properly monitored, investigated, classified, documented, escalated, and improved through continuous policy tuning.

Key Responsibilities

DLP Alert Monitoring & Incident Handling
Monitor DLP alerts from Microsoft Purview DLP Dashboard, Microsoft Defender XDR, email notifications, service desk tickets, and related alerting channels.

Log, track, triage, and classify DLP alerts, including initial investigation of true positives and false positives.

Perform first-level analysis and escalate high-risk or complex incidents to L2 security operations, L3 Purview SMEs, architects, compliance, legal, or other relevant stakeholders where required.

Investigation & Analysis
Perform detailed analysis of DLP incidents to identify root causes, including user behaviour, policy gaps, data misclassification, or process issues.

Validate and document false positives clearly to support policy improvement and operational reporting.

Support forensic analysis and evidence gathering for high-risk DLP incidents where required.

Escalation & Stakeholder Coordination
Coordinate with SOC teams, service desk, business units, data owners, compliance, legal, and IT stakeholders to ensure DLP incidents are handled appropriately and within expected timelines.

Communicate DLP-related issues clearly to both technical and non-technical users.

Policy Tuning & Change Management
Work with L3 SMEs and architects to recommend improvements to DLP policies based on repeated alerts, user feedback, threat trends, false positive patterns, and post-incident findings.

Support DLP change management activities arising from new regulatory requirements, new workloads such as Teams, Copilot or SaaS applications, and post-incident improvements.

Provide practical recommendations to improve DLP policy effectiveness and reduce unnecessary business disruption.

User Support & Awareness
Respond to user-reported DLP issues, including blocked activities, policy alerts, and suspected false positives.

Provide guidance to users on compliant data handling and proper use of sensitive information.

Support communication and awareness activities related to DLP policy enforcement.

Monitor and ensure the AI agent is running and responding correctly where applicable.

Reporting & Continuous Improvement
Prepare periodic DLP reports covering alert volumes, top users triggering policies, false positive rates, policy effectiveness trends, recurring issues, and recommended improvements.

Maintain proper documentation of investigations, findings, escalations, and closure actions.

Technical Skills Required
Strong hands-on knowledge of Microsoft Purview DLP is mandatory.

Experience in Microsoft Purview policy configuration, troubleshooting, alert review, and operational support.

Good understanding of DLP across Endpoint, Exchange, SharePoint, Teams, and Microsoft 365 workloads.

Knowledge of Microsoft Defender XDR, Microsoft 365 Compliance Portal, Microsoft Entra, sensitivity labels, data classification, and information protection.

Microsoft Intune experience will be an added advantage.

Operational & SOC Skills
Experience in incident triage, investigation, security alert analysis, ticket handling, true/false positive determination, and basic log analysis.

Experience with ticketing tools such as ServiceNow or similar platforms.

Ability to work with SOC, service desk, compliance, legal, and business stakeholders.

Data Security & Compliance Knowledge
Good understanding of data protection, data classification, data exfiltration risks, insider risk awareness, and DLP control concepts.

Knowledge of Singapore PDPA and data protection practices will be advantageous.

Soft Skills
Strong communication skills with business users and technical stakeholders.

Ability to explain DLP blocks, alerts, and policy enforcement in a professional and user-friendly manner.

Strong analytical thinking, root-cause analysis, documentation, and coordination skills.

Able to work independently while escalating appropriately when needed.

Experience Requirement
3 to 5 years of experience in Microsoft 365, Microsoft Purview, DLP, security operations, end-user support, or L2 support.

Hands-on experience supporting Microsoft Purview DLP in an enterprise environment is strongly preferred.

Preferred Certifications
Microsoft SC-400: Information Protection Administrator
Microsoft SC-200: Security Operations Analyst
Microsoft MS-102: Microsoft 365 Administrator
Microsoft SC-300: Identity and Access Administrator