Assistant Manager - Governance, risk & compliance

Jobline Resources Pte Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Jobline Resources Pte Ltd in Singapore is seeking a seasoned Governance, Risk and Compliance (GRC) leader to drive risk assessments, controls, and remediation programs across the organisation.

You will coordinate IT reviews, manage governance forums, and report to senior management, aligning with healthcare, public sector standards and CCOP where applicable.

Qualifications

• Bachelor's degree in Computer Science, IT, Cybersecurity or related field.
• At least 5 years of experience in Governance, Risk and Compliance, Cybersecurity or related areas.
• Strong analytical, planning and documentation skills.
• Excellent written and verbal communication for diverse stakeholders.
• Proficient with MS Office, SharePoint and presentation tools.

Responsibilities

• Serve as the point of contact for GRC matters and stakeholder engagements.
• Facilitate risk and compliance management across governance structures and reviews.
• Support IT reviews to improve efficiency and remediation of findings.
• Conduct periodic compliance assessments of applications within Portfolio.
• Perform control assessments and testing of cybersecurity and IT controls.
• Develop reporting, metrics and dashboards for governance activities.
• Provide risk insights to management for informed decision-making.
• Coordinate governance, risk, and compliance forums and meetings.

Skills

GRC governance

Stakeholder engagement

Analytical thinking

Communication

Microsoft Office

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related discipline

Tools

SharePoint

Excel

PowerPoint

Word

Job description

Responsibilities

• Serve as the point of contact for governance, risk, and compliance (GRC) matters and stakeholder engagements.
• Facilitate risk and compliance management processes across key stakeholders, including establishing governance structures, processes, and quality assurance reviews of risk assessments, treatment plans, and remediation updates.
• Support management in planning, coordinating, reviewing, and validating internal and external IT reviews to improve efficiency and ensure effective remediation of findings.
• Conduct periodic compliance assessments of applications within the PopHealth Record portfolio to evaluate adherence to applicable policies, standards, and regulatory requirements.
• Perform control assessments and testing to evaluate the design and operating effectiveness of cybersecurity and IT controls, and ensure ongoing compliance with established requirements.
• Identify opportunities to strengthen, streamline, and standardise internal controls and governance practices.
• Develop and enhance management reporting, metrics, and dashboards to provide visibility into the effectiveness of risk, compliance, and control activities.
• Provide timely and actionable risk insights to management, enabling informed decision-making and the implementation of appropriate risk treatment strategies aligned with business objectives.
• Prepare and present regular governance, risk, and compliance reporting to senior management and relevant stakeholders.
• Coordinate and support monthly, quarterly, and ad hoc governance, risk, and compliance forums, committees, and meetings.
• Undertake additional governance, risk, and compliance responsibilities as assigned by management.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.
• At least 5 years of relevant experience in one or more of the following areas : Governance, Risk and Compliance (GRC) , Cybersecurity and Information Security , Risk Management , Internal Controls and Audit , Process Improvement , IT Application Development, Operations, or Support
• Strong analytical, critical thinking, problem-solving, organisational, and planning skills.
• Excellent verbal and written communication skills, with the ability to present complex technical and risk-related topics clearly and effectively to both technical and non-technical stakeholders, including senior management.
• Proficient in Microsoft Office applications, including Excel, PowerPoint, Word, SharePoint, and related productivity tools.
• Ability to thrive in a dynamic, fast-paced environment and effectively manage multiple priorities.
• Self-motivated and able to work independently, while also collaborating effectively within cross-functional teams.
• Experience in the healthcare sector, public sector IT, government ICT policies, or the Cybersecurity Code of Practice (CCoP) will be an added advantage.
• Knowledge of industry standards, frameworks, and best practices is advantageous, including : COBIT , SANS Incident Management Framework , PCI DSS , ISO 27001 / Information Security Management Systems (ISMS) , OWASP
• Professional certifications such as CISA, CISSP, CISM, CRISC, CGEIT, or equivalent technology, security, or risk management certifications will be an advantage.

Licence no : 12C6060