Automation-Driven Security GRC Lead

Assurity Trusted Solutions Pte Ltd; Singapore; On-site; SGD 90,000 - 150,000; Full time

Benefits offered by this job

GovTech affiliation

Learning culture

Contract staff benefits

Job summary

Assurity Trusted Solutions (ATS) is a GovTech subsidiary driving trusted security outcomes. This role leads GRC and the second line of defence across managed products and platforms, embedding pragmatic security into delivery and automating evidence collection.

Responsibilities include governance of Security Plans, ICT audits, policy ownership, and Security Education, Training and Awareness (SeTA). You will collaborate with Product teams and CIOO leadership to elevate risk-based decisions.

Qualifications

• 5+ years of experience in cybersecurity or IT risk, preferably in regulated/public sector environments.
• Strong understanding of ICT governance, controls across apps, infrastructure, and SaaS.
• Experience in 2nd line of defence, independent challenge and validation of evidence.
• Ability to embed security and compliance into product delivery and SDLC.

Responsibilities

• Lead GRC, shape governance across managed products and platforms.
• Act as 2nd line of defence for ICT risk and controls, challenging design and effectiveness.
• Embed security and compliance into day-to-day product delivery with the Product team.
• Own Security Plan governance, evidence templates, quality benchmarks, and automation.
• Design, implement, and own ICT audit, risk, and findings management workflows.
• Author and maintain GovTech security policies and lifecycle (drafting to publication).
• Lead SeTA campaigns, phishing simulations, newsletters, and training.
• Drive change management with stakeholders to adopt new audit and GRC practices.

Skills

Cybersecurity governance

ICT governance & controls

Second line of defence

SDLC & Agile delivery

Automation & AI-enabled tools

Stakeholder management

Audit & evidence management

Tools

Jira

Job description

Assurity Trusted Solutions (ATS) is a GovTech subsidiary driving trusted security outcomes. This role leads GRC and the second line of defence across managed products and platforms, embedding pragmatic security into delivery and automating evidence collection.

Responsibilities include governance of Security Plans, ICT audits, policy ownership, and Security Education, Training and Awareness (SeTA). You will collaborate with Product teams and CIOO leadership to elevate risk-based decisions.