Description

We Are

YouTrip is the leading and fastest-growing multi-currency payment platform in Asia Pacific. In 2018, we pioneered the region's first multi-currency digital wallet. Now, YouTrip is the #1 multi-currency digital wallet trusted by millions across the region, processing over US$15 billion in total payment value annually.

Our consumer and business propositions YouTrip and YouBiz empower individuals and businesses with inclusive, accessible, and affordable financial solutions. YouTrip has raised over US$110 million to date, including its recent Series B round led by global venture capital firm Lightspeed Venture Partnersunderscoring strong investor confidence in its mission to transform digital financial services across the Asia Pacific.

Recognised as World Economic Forum's Global Innovator 2025, CNBC's World's Top Fintech Companies (2025, 2024), and LinkedIn's Top Startup (2024, 2023), YouTrip is dedicated to creating the next generation of digital finance services for consumers and businesses.

Valuing an entrepreneurial culture of diversity and inclusion, we are seeking driven individuals to join our fast-growing regional team as we push the boundaries of innovative fintech solutions.

Job Description: Security Operations Analyst - Enterprise, Applications & Endpoints

We're looking for a Security Operations (SOC) Analyst to join our team. This role sits within the First Line of Defense (FLOD) and is responsible for the day-to-day detection, analysis, remediation, and prevention of security threats and control gaps across the enterprise. The Security Operations Analyst will take a hands-on role in identifying and fixing security weaknesses across endpoint devices, internal systems, third-party applications, and operational processes. You will work closely with IT, Engineering, and Business teams to ensure security issues are remediated effectively and controls are operating as intended.

This role supports the organization's Security Operations, Incident Response, Vulnerability Management, and Business Continuity efforts, ensuring alignment with regulatory, legal, and business requirements. The ideal candidate has strong operational security experience, is comfortable working in fast-paced environments, and understands the security challenges in FinTech or regulated financial services.

Key Responsibilities

Security Operations & Gap Remediation

Monitor, investigate, and respond to security alerts, incidents, and operational security issues.

Identify, prioritize, and remediate security gaps enterprise-wide, including:
Endpoint devices (laptops, servers, mobile devices)

Internal systems and networks
Third-party and SaaS applications

Work with IT and Engineering teams to drive timely remediation of vulnerabilities, misconfigurations, and control weaknesses.

Vulnerability & Threat Management

Lead and coordinate vulnerability scanning, penetration testing, and configuration reviews.
Track remediation efforts and validate fixes across endpoints, infrastructure, and applications.
Assist with threat hunting and proactive identification of emerging security risks.

Incident Response & Investigations

Act as a key responder during security incidents, supporting containment, investigation, & recovery.
Support post-incident improvements to controls and processes.

Business Continuity & Security Enablement

Support the development, testing, and execution of Business Continuity and Cybersecurity drills.
Provide security guidance during system changes, deployments, and operational updates.
Act as a security point of contact for day-to-day operational questions from business and technology teams.

Continuous Improvement

Contribute to the ongoing maturity of Security Operations by improving processes, playbooks, and tooling.
Support security awareness initiatives with a focus on operational risks and real-world threats.

Requirements

6-10 years of experience in the Cyber Security, or security operations roles.

Strong hands-on experience with:

Endpoint security (EDR, hardening, patching)
Vulnerability management and remediation
Incident response and security investigations
Third-party / SaaS security assessments
Solid understanding of security controls, access management, logging, and monitoring.
Working knowledge of cloud security concepts (AWS exposure beneficial but not a primary focus).
Familiarity with security frameworks and standards (ISO 27001, PCI DSS, NIST, CIS).
Experience using JIRA or similar ticketing / GRC tools to track issues and remediation.
Bachelor's degree in Cybersecurity, Computer Science or Information Technology
Industry certifications (e.g., CISA, CISM, CIPP/E, CRISC) are a plus.
Strong analytical and problem-solving skills with a bias toward action and remediation.
Ability to prioritize and manage multiple security issues simultaneously.
Clear communicator with the ability to work cross-functionally with technical and non-technical teams.
Strong sense of ownership and accountability.
Ability to balance security needs with operational and business realities.

To apply

If you are interested in this position, click Apply Now or please send your resume to [HIDDEN TEXT], quoting Security Operations Analyst - Enterprise, Applications & Endpoints (IND) in the subject header.

GRC-Cyber Security Analyst (Assistant Manager)

Information Security Analyst

Information Security Analyst

Cyber Security Analyst - Carbon Black

Security Managed Services Analyst

Security Operations Analyst - Enterprise, Applications & Endpoints