Cyber Emerging Threats Analyst

About the Role

Become part of Maybank Singapore's Cyber Assurance & Emerging Threats Team, a newly formed division dedicated to fostering advanced cyber resilience. This role focuses on providing an independent and forward-thinking cyber assurance capability to proactively identify emerging risks, challenge traditional security assumptions, and enhance the Bank’s ability to defend against evolving cyber threats.

Key Responsibilities

• Continuously monitor global cyber threats, identifying new and developing risks that could impact the Bank.
• Perform horizon scanning to detect risks before they escalate into security incidents.
• Evaluate risks linked to advanced cyber threats including AI-enabled attacks, generative AI and large language models, deepfake and synthetic identity fraud, software supply chain exploits, cloud-native threats, quantum computing developments, ransomware, zero-day vulnerabilities, and emerging attack vectors.
• Assess how these threats may affect the Bank’s technology infrastructure and security environment, converting threats into actionable risk scenarios, control demands, and remediation measures.
• Independently assess the Bank's readiness for emerging cyber threats, reviewing the effectiveness of current security controls against evolving attack methods.
• Identify gaps in controls, systemic vulnerabilities, and areas requiring enhanced monitoring through thematic cybersecurity and technology risk reviews.
• Use adversarial thinking to develop credible attack scenarios and explore how threat actors might exploit weaknesses in controls, processes, and technologies.
• Analyze the implications of emerging threats with respect to MAS Cyber Hygiene and Technology Risk Management regulations and operational risk requirements.
• Provide recommendations to improve preventive, detective, and responsive security capabilities.
• Offer independent reviews and challenges on risk assessments, remediation strategies, and control designs.
• Deliver detailed reports and presentations on findings, risks, and strategic recommendations to senior management and governance bodies.
• Generate executive-level cyber threat and emerging risk reports, communicating complex cyber risks in business and operational continuity terms.
• Support risk escalation processes and follow-up on remediation actions to confirm resolution effectiveness.
• Collaborate with cybersecurity, technology, and risk management teams to enhance overall cyber resilience.
• Advise on emerging technologies, including AI adoption and cloud transformation, in light of evolving threat environments.
• Help develop assurance methodologies, threat assessment frameworks, and operational standards for the new function.

Qualifications and Experience

Applicants should hold a degree in Cyber Security, Information Security, Computer Science, Information Technology, or a related field and possess 4 to 10 years of professional experience in at least two of the following areas:

• Cyber Threat Intelligence
• Cyber Defence / Security Operations Center (SOC)
• Threat Hunting
• Cyber Risk Management
• Security Architecture
• Cyber Assurance or Audit
• Penetration Testing or Red Teaming
• Technology Risk Consulting

Experience in banking, financial services, consulting, or other highly regulated industries is advantageous.

Skills Required

• A natural curiosity about emerging cyber threats, new technologies, and advanced attack strategies.
• Strong critical thinking skills with a readiness to question orthodox practices.
• Excellent analytical, investigative, and problem-solving abilities.
• Capability to translate complex technical topics into clear, business-oriented insights and strategic recommendations.
• Confidence engaging with senior-level stakeholders and influencing security and risk decisions.
• Ability to thrive in fast-paced, ambiguous environments while addressing complex cyber risk challenges.

Preferred Skills

• In-depth knowledge of modern cyber attack techniques and threat actor tactics.
• Familiarity with frameworks such as MITRE ATT&CK, attack path analysis, and cyber kill chain models.
• Experience with threat intelligence platforms and the intelligence lifecycle.
• Understanding of security controls, cyber defense methodologies, and cloud security architectures.
• Expertise in vulnerability and attack surface management.
• Familiarity with cybersecurity standards including NIST, ISO 27001, CIS Controls, and AI security frameworks.
• Awareness of risks associated with AI and emerging technologies.

Professional Certifications (Preferred)

• CISSP
• CISM
• CRISC
• GCTI
• GCIH
• CEH
• SANS Certifications

Additional Information

Only candidates shortlisted for further consideration will be contacted.