Cyber GRC Analyst – Risk & Compliance (2nd Line)

Simba Telecom Pte. Ltd.; Singapore; Sur place; SGD 120 000 - 180 000; Plein temps

Résumé du poste

Simba Telecom Pte. Ltd. is seeking a Cybersecurity GRC Analyst to strengthen governance, risk management and regulatory compliance across telecommunications infrastructure and corporate systems.

The role provides independent oversight as part of the Second Line of Defence, working with cybersecurity, engineering and business teams to assess risks and drive improvements. Responsibilities include maintaining risk registers, producing risk reports, ensuring compliance with IMDA TCS and CSA CCoP,

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems or related discipline.
• 6–10 years of experience in cybersecurity governance, risk management, compliance, security assurance or IT audit.
• Experience conducting cybersecurity risk assessments, managing risk registers, reviewing risk treatment plans and coordinating risk acceptance processes.
• Knowledge of cybersecurity governance frameworks and standards, including ISO/IEC 27001 and NIST Cybersecurity Framework.
• Experience in security policy development, compliance assessments, control assurance and cybersecurity audits.
• Good understanding of cybersecurity controls across enterprise IT, network infrastructure, applications and cloud environments.
• Knowledge of telecommunications technologies, including 4G/5G mobile networks, radio access networks (RAN), mobile core systems and associated cybersecurity risks, would be advantageous.
• Familiarity with Singapore cybersecurity regulations, particularly IMDA TCS and CSA CCoP, is advantageous.
• Strong analytical, documentation, risk reporting and stakeholder management skills.
• Relevant certifications such as CISA, CRISC, CISM, CISSP or ISO/IEC 27001 Lead Auditor are advantageous.

Responsabilités

• Cyber Risk Management: Maintain the cybersecurity risk register, independently review and challenge risk assessments, monitor risk treatment plans and coordinate risk acceptance and approval workflows.
• Risk Reporting: Monitor cybersecurity risk indicators and prepare risk reports, dashboards and recommendations for senior management, risk committees and the Board.
• Regulatory Compliance: Oversee compliance with applicable IMDA Telecommunications Cybersecurity Code (TCS) requirements, CSA Cybersecurity Code of Practice (CCoP) and other relevant regulations, including regulatory obligation mapping, compliance assessments and gap tracking.
• Security Governance: Develop, review and maintain cybersecurity policies, standards and procedures, including the management of policy exceptions and deviations.
• Security Assurance: Perform second-line assurance reviews, control assessments and compliance gap analyses against regulatory requirements and industry standards. Evaluate control effectiveness and recommend risk-based improvements.
• Audit Management: Coordinate internal and external cybersecurity audits and regulatory assessments. Facilitate evidence collection, maintain audit findings registers and monitor remediation through closure.
• Stakeholder Engagement: Provide independent risk and compliance advisory to technical and business teams, challenge control weaknesses and promote accountability for cybersecurity risk management.

Connaissances

Cyber risk management

Regulatory compliance

Security governance

Risk reporting

Audit management

Policy development

ISO 27001

NIST CSF

Stakeholder engagement

CISA

CRISC

Formation

Bachelor’s degree in Cybersecurity or related

Description du poste

Simba Telecom Pte. Ltd. is seeking a Cybersecurity GRC Analyst to strengthen governance, risk management and regulatory compliance across telecommunications infrastructure and corporate systems.

The role provides independent oversight as part of the Second Line of Defence, working with cybersecurity, engineering and business teams to assess risks and drive improvements. Responsibilities include maintaining risk registers, producing risk reports, ensuring compliance with IMDA TCS and CSA CCoP,