Consultant/Senior Consultant

DACTA SG PTE. LTD.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

DACTA SG PTE. LTD. seeks a Senior Risk & Compliance Specialist to conduct risk assessments, implement controls, and ensure alignment with ISO 27001:2022, GDPR, PDPA, and NIST. You will collaborate with cross-functional teams to embed security requirements into processes and technology solutions.

You will also lead audits, policy development, and staff training to raise security awareness, with a focus on data protection duties and regulatory compliance across diverse environments.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent work experience).
• Industry-recognized certifications such as CISSP, CISA, CISM, CRISC, or equivalent.
• 3-5 years of risk assessment and compliance delivery across varied environments (SME to Enterprise).
• Excellent written and verbal communication; ability to convey tech concepts to diverse audiences.
• Ability to work independently, manage multiple projects, and meet tight deadlines.
• Strong problem-solving and attention to detail; stay updated on cybersecurity landscape.

Responsibilities

• Conduct comprehensive risk assessments to identify threats and vulnerabilities.
• Develop and implement risk mitigation strategies and controls.
• Stay updated on ISO 27001:2022, Cyber Trust Mark, GDPR, PDPA, and NIST.
• Collaborate with cross-functional teams to integrate security requirements.
• Assist in development and implementation of security policies and guidelines.
• Serve as primary point of contact for DPO duties and liaise with authorities and data subjects.
• Provide guidance on security and compliance to internal stakeholders.
• Conduct audits and assessments to monitor policy compliance.
• Develop and deliver training on security risks and compliance.

Skills

Risk assessment

Regulatory compliance

Security governance

Stakeholder comms

DPO duties

Education

Bachelor's degree in CS/InfoSec

Job description

Responsible:

• Conduct comprehensive risk assessments to identify potential threats and vulnerabilities within the organization's systems, processes, and policies.
• Develop and implement risk mitigation strategies and controls to minimize the impact of identified risks.
• Stay abreast of evolving security frameworks, regulations, and standards, such as ISO 27001:2022, Cyber Trust Mark, GDPR, PDPA, and NIST.
• Collaborate with cross-functional teams to integrate security requirements into business processes and technology solutions.
• Assist in the development and implementation of security policies, procedures, and guidelines to ensure alignment with regulatory requirements and industry best practices.
• Serve as the primary point of contact for Data Protection Officer (DPO) duties, including overseeing data protection activities, ensuring compliance with relevant data protection regulations, and acting as a liaison between the organization and regulatory authorities or data subjects.
• Provide guidance and support to internal stakeholders on security and compliance-related matters.
• Conduct regular audits and assessments to monitor compliance with established security policies, procedures, and standards.
• Develop and deliver training programs to raise awareness of security risks and compliance requirements among employees.

Qualifications:

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent work experience).
• Industry-recognized certifications such as CISSP, CISA, CISM, CRISC, or equivalent.
• Extensive experience of at least 3-5 years in performing Risk Assessment and delivering compliance standards across diverse environments, from SME to Enterprise.
• Excellent written and verbal communication skills, with the ability to convey complex technical concepts to both technical and non-technical audiences.
• Ability to work independently, manage multiple projects simultaneously, and meet tight deadlines.
• Strong problem-solving skills and attention to detail.
• A commitment to staying up to date with the evolving cybersecurity landscape.