Senior Consultant - GRC

EC-Council Group; Kuala Lumpur; On-site; MYR 120,000 - 210,000; Full time

Job summary

EC-Council is seeking a Senior Consultant to support governance, risk management, and security controls reviews. The role focuses on fast-paced ticket handling, risk assessment, and collaboration with technical and business teams to ensure compliant and timely responses.

Responsibilities include reviewing requests, managing risk, and maintaining audit trails, with an emphasis on SLA adherence and cross-functional coordination across security, network, cloud, and IT operations.

Qualifications

• Basic to intermediate understanding of cybersecurity and networking concepts.
• Understanding of IP addresses, subnets, ports, protocols and security controls.
• Strong grasp of cybersecurity risk concepts including identification, assessment, impact and likelihood.
• Knowledge of CIA triad and how security risks affect it.
• Understanding of risk treatment, mitigation and acceptance processes.
• Ability to assess business impact and security implications of requests.
• Familiarity with ticketing/GRC platforms such as ServiceNow and Archer.
• Strong analytical and decision-making abilities.
• Ownership, responsiveness and accountability.
• Ability to prioritize requests based on risk and urgency.
• Strong communication and stakeholder management skills.
• Team player who can collaborate with multiple tech/business teams.
• Comfort with high-volume, ticket-driven environments and SLAs.

Responsibilities

• Review and approve cybersecurity and technology-related requests based on requirements, policies and risk.
• Assess business justification, security implications, impact and required controls.
• Support risk acceptance, security exceptions and risk register activities.
• Review requests related to network, access, endpoint, cloud and other controls.
• Collaborate with Network, Infrastructure, Cloud, Application, Cybersecurity and Business teams to clarify needs.
• Manage requests through ServiceNow, Archer or similar platforms.
• Understand urgency and prioritize work based on risk and business needs.
• Ensure reviews and actions occur within SLA/TAT requirements.
• Maintain documentation and audit trails for reviews and approvals.
• Assist the broader GRC team with governance and risk activities.

Skills

Cybersecurity basics

Risk assessment

SLA prioritization

ServiceNow

Archer

Stakeholder mgmt

Documentation

Team collaboration

Tools

ServiceNow

Archer

Job description

Full-Time

Job Title: Senior Consultant - GRC

#ECGS

EC-Council

is the world's largest cyber security technical certification body. We operate in 170 countries globally and we are the owner and developer of various world-famous cyber security programs. We are proud to have trained and certified over 400,000 information security professionals globally that have influenced the cyber security mindset of countless organizations worldwide.

We are looking for a Senior Consultant to support our security governance and risk management activities. This is a ticket-based role involving the review and approval of various cybersecurity and technology-related requests.

The role requires someone who is responsive, detail-oriented, risk-aware and comfortable working in a fast-paced environment, with the ability to understand urgency, assess risk and prioritize requests appropriately.

Key Responsibilities:

• Review and approve cybersecurity and technology-related requests based on business requirements, security policies and risk considerations.
• Assess the business justification, security implications, business impact, risk and required controls associated with requests.
• Support risk acceptance, security exception and risk register activities.
• Review requests related to network, access, endpoint, cloud and other security controls.
• Work closely with Network, Infrastructure, Cloud, Application, Cybersecurity and Business teams to clarify requirements and resolve queries.
• Manage requests through ServiceNow, Archer or similar ticketing/GRC platforms.
• Understand the urgency and business impact of requests and prioritize work appropriately.
• Ensure requests are reviewed and actioned within agreed SLA/TAT requirements.
• Maintain appropriate documentation and audit trails for reviews and approvals.
• Support the wider GRC team with other governance and risk activities as required.

Required Skills and Qualifications:

• Basic to intermediate understanding of cybersecurity and networking concepts.
• Understanding of IP addresses, subnets, ports, protocols, network connectivity and security controls.
• Good understanding of cybersecurity risk concepts, including risk identification, assessment, impact and likelihood.
• Understanding of Confidentiality, Integrity and Availability (CIA) and how security risks can impact them.
• Understanding of risk treatment plans, risk mitigation and risk acceptance.
• Ability to assess the business impact and security implications of technology and security requests.
• Familiarity with ticketing/GRC platforms such as ServiceNow, Archer or similar tools.
• Strong analytical and decision-making skills.
• Strong ownership, responsiveness and accountability.
• Ability to understand urgency and prioritize requests based on risk and business requirements.
• Strong communication and stakeholder management skills.
• Ability to work effectively as a team player and collaborate with multiple technology and business teams.
• Comfortable working in a high-volume, ticket-driven environment and meeting defined SLAs/TATs.

Good To Have:

• Experience in Cybersecurity GRC, IT Risk, Network Security, IT Audit or Information Security.
• Exposure to cloud, network or endpoint security environments.

Other Requirement:

• Willingness and availability to work in alignment with the Singapore working calendar and business requirements.

About Our Culture:

EC-Council is driven by a mission to strengthen global cybersecurity capability and advance the profession of ethical hacking and information security. Our teams operate across regions and cultures, united by integrity, professionalism, and a commitment to meaningful impact. Continuous learning and accountability are encouraged, empowering individuals to take ownership of their contributions. Respect, trust, and ethical conduct guide how we work with colleagues, partners, and the global cybersecurity community.

Additional Information:

EC-Council is an equal opportunity workplace and an affirmative action employer. We are committed to providing equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or veteran status. We do not discriminate based on these or any other characteristics protected by applicable laws or regulations in the locations where we operate.

EC-Council is dedicated to working with and providing reasonable accommodations to individuals with disabilities. If you have a medical condition or disability that limits your ability to complete any part of the application process and require reasonable accommodation, please contact us at [e-mail] and let us know how we can assist. To be eligible for this position, candidates must be able to provide proof that they are either a citizen of the country or have legal authorization to work in the country where the position is posted and are currently residing there. EC-Council does not offer employment to ineligible candidates and reserves the right to revoke employment in case the candidate loses the authorization to work. If, as part of the recruitment process, you are required to complete or submit any form of work, project, case study, or assignment, please note that such material will be considered the exclusive property of EC-Council. By submitting such work, you acknowledge that EC-Council retains all rights, title, and interest in the submitted content, including any intellectual property contained therein. Candidates further waive any intellectual property or moral rights in such submissions, confirm that the work is original and free of third-party infringement, and acknowledge that it is provided solely for evaluation purposes, with no ownership or other rights retained.

Our Privacy Policy outlines how we collect, use, store, and protect your personal data during the recruitment process. This may include information such as your name, contact details, employment history, qualifications, and any other details you provide as part of your application. All data is handled in compliance with applicable data protection and privacy regulations.

AI Governance CYBERSECURITY INFORMATION TECHNOLOGY