Senior Consultant - GRC

EC-Council Global Services; Kuala Lumpur; On-site; MYR 90,000 - 130,000; Full time

Job summary

EC-Council is seeking a Senior Consultant to support security governance and risk management activities in a fast-paced, ticket-driven environment. The role involves reviewing and approving cybersecurity and technology-related requests, assessing risk, and ensuring compliance with policies and SLAs.

The candidate will collaborate with Network, Infrastructure, Cloud, Application, Cybersecurity and Business teams, managing requests via ServiceNow, Archer or similar platforms, and contributing to

Qualifications

• Basic to intermediate understanding of cybersecurity and networking concepts.
• Understanding of IP addresses, subnets, ports, protocols, network connectivity and security controls.
• Good understanding of cybersecurity risk concepts, including risk identification, assessment, impact and likelihood.
• Understanding of Confidentiality, Integrity and Availability (CIA) and how security risks can impact them.
• Understanding of risk treatment plans, risk mitigation and risk acceptance.
• Ability to assess the business impact and security implications of technology and security requests.
• Familiarity with ticketing/GRC platforms such as ServiceNow, Archer or similar tools.
• Strong analytical and decision-making skills.
• Strong ownership, responsiveness and accountability.
• Ability to understand urgency and prioritize requests based on risk and business requirements.

Responsibilities

• Review and approve cybersecurity and technology-related requests based on business requirements, security policies and risk considerations.
• Assess the business justification, security implications, business impact, risk and required controls associated with requests.
• Support risk acceptance, security exception and risk register activities.
• Review requests related to network, access, endpoint, cloud and other security controls.
• Work closely with Network, Infrastructure, Cloud, Application, Cybersecurity and Business teams to clarify requirements and resolve queries.
• Manage requests through ServiceNow, Archer or similar ticketing/GRC platforms.
• Understand the urgency and business impact of requests and prioritize work appropriately.
• Ensure requests are reviewed and actioned within agreed SLA/TAT requirements.
• Maintain appropriate documentation and audit trails for reviews and approvals.
• Support the wider GRC team with other governance and risk activities as required.

Skills

Cybersecurity basics

Networking concepts

CIA triad

Risk concepts

Risk assessment

GRC platforms

ServiceNow

Archer

Stakeholder management

Communication

Team collaboration

Ticket-driven processes

Tools

ServiceNow

Archer

Job description

Job Title: Senior Consultant - GRC

#ECGS

EC-Council

EC-Council is the world's largest cyber security technical certification body. We operate in 170 countries globally and we are the owner and developer of various world-famous cyber security programs. We are proud to have trained and certified over 400,000 information security professionals globally that have influenced the cyber security mindset of countless organizations worldwide.

www.eccouncil.org

Role Overview

We are looking for a Senior Consultant to support our security governance and risk management activities. This is a ticket-based role involving the review and approval of various cybersecurity and technology-related requests. The role requires someone who is responsive, detail-oriented, risk-aware and comfortable working in a fast-paced environment, with the ability to understand urgency, assess risk and prioritize requests appropriately.

Key Responsibilities

• Review and approve cybersecurity and technology-related requests based on business requirements, security policies and risk considerations.
• Assess the business justification, security implications, business impact, risk and required controls associated with requests.
• Support risk acceptance, security exception and risk register activities.
• Review requests related to network, access, endpoint, cloud and other security controls.
• Work closely with Network, Infrastructure, Cloud, Application, Cybersecurity and Business teams to clarify requirements and resolve queries.
• Manage requests through ServiceNow, Archer or similar ticketing/GRC platforms.
• Understand the urgency and business impact of requests and prioritize work appropriately.
• Ensure requests are reviewed and actioned within agreed SLA/TAT requirements.
• Maintain appropriate documentation and audit trails for reviews and approvals.
• Support the wider GRC team with other governance and risk activities as required.

Required Skills And Qualifications

• Basic to intermediate understanding of cybersecurity and networking concepts.
• Understanding of IP addresses, subnets, ports, protocols, network connectivity and security controls.
• Good understanding of cybersecurity risk concepts, including risk identification, assessment, impact and likelihood.
• Understanding of Confidentiality, Integrity and Availability (CIA) and how security risks can impact them.
• Understanding of risk treatment plans, risk mitigation and risk acceptance.
• Ability to assess the business impact and security implications of technology and security requests.
• Familiarity with ticketing/GRC platforms such as ServiceNow, Archer or similar tools.
• Strong analytical and decision-making skills.
• Strong ownership, responsiveness and accountability.
• Ability to understand urgency and prioritize requests based on risk and business requirements.
• Strong communication and stakeholder management skills.
• Ability to work effectively as a team player and collaborate with multiple technology and business teams.
• Comfortable working in a high-volume, ticket-driven environment and meeting defined SLAs/TATs.

Good To Have

• Experience in Cybersecurity GRC, IT Risk, Network Security, IT Audit or Information Security.
• Exposure to cloud, network or endpoint security environments.
• Understanding of security frameworks and organizational security policies.

Other Requirement

• Willingness and availability to work in alignment with the Singapore working calendar and business requirements.

About Our Culture

EC-Council is driven by a mission to strengthen global cybersecurity capability and advance the profession of ethical hacking and information security. Our teams operate across regions and cultures, united by integrity, professionalism, and a commitment to meaningful impact. Continuous learning and accountability are encouraged, empowering individuals to take ownership of their contributions. Respect, trust, and ethical conduct guide how we work with colleagues, partners, and the global cybersecurity community.

Additional Information

EC-Council is an equal opportunity workplace and an affirmative action employer. We are committed to providing equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or veteran status. We do not discriminate based on these or any other characteristics protected by applicable laws or regulations in the locations where we operate.

EC-Council is dedicated to working with and providing reasonable accommodations to individuals with disabilities. If you have a medical condition or disability that limits your ability to complete any part of the application process and require reasonable accommodation, please contact us at [e-mail] and let us know how we can assist. To be eligible for this position, candidates must be able to provide proof that they are either a citizen of the country or have legal authorization to work in the country where the position is posted and are currently residing there. EC-Council does not offer employment to ineligible candidates and reserves the right to revoke employment in case the candidate loses the authorization to work. If, as part of the recruitment process, you are required to complete or submit any form of work, project, case study, or assignment, please note that such material will be considered the exclusive property of EC-Council. By submitting such work, you acknowledge that EC-Council retains all rights, title, and interest in the submitted content, including any intellectual property contained therein. Candidates further waive any intellectual property or moral rights in such submissions, confirm that the work is original and free of third-party infringement, and acknowledge that it is provided solely for evaluation purposes, with no ownership or other rights retained.

Our Privacy Policy outlines how we collect, use, store, and protect your personal data during the recruitment process. This may include information such as your name, contact details, employment history, qualifications, and any other details you provide as part of your application. All data is handled in compliance with applicable data protection and privacy regulations.

Please review our policy here: EC-Council Privacy Policy - User and Company | EC-Council. Submission of your application will be considered as your acceptance of the terms stated above.