Cyber Risk & Assurance Governance Specialist

NETS; Singapore; On-site; SGD 110,000 - 170,000; Full time

Job summary

NETS is seeking an experienced Information Security professional to lead the development and enforcement of IS policies, controls and governance across the organisation in Singapore. You will work with internal stakeholders to implement cyber risk management improvements and ensure compliance with ISO27000, NIST and local guidelines.

The role involves coordinating audits, reporting risk metrics, and driving remediation actions while seeking opportunities to automate processes within payments

Qualifications

• Degree in Computer Science, Engineering or related discipline with 6+ years in information security.
• Experience developing, enforcing and auditing security policies and controls.
• Experience with risk assessment, compliance implementation and governance.
• Familiar with ISO27000, NIST and local regulatory guidelines (Cyber Hygiene, PDPA).

Responsibilities

• Manage and enforce IS policies, processes and procedures.
• Execute cyber risk-related controls to address audit findings or process improvements.
• Collaborate with stakeholders to review and streamline cyber risk management processes.
• Reference regulator notices and guide teams to mitigate risks and protect operations.
• Prepare data for risk analysis and reporting.
• Communicate new IS policies and standards to stakeholders.
• Support IS audits, regulatory inspections and risk/compliance activities.
• Review audit findings with stakeholders to determine root cause and action plans.
• Support audit lifecycle from kickoff to closure; identify opportunities to automate.

Skills

Security policy development

Risk assessment

Governance

Cyber risk management

Written & verbal communication

Teamwork & independence

Education

Degree in Computer Science or Engineering

Tools

ISO27000

NIST framework

Cyber Hygiene guidelines

Technology Risk Management Guidelines

PDPA / Personal Data Protection Act

Job description

NETS is seeking an experienced Information Security professional to lead the development and enforcement of IS policies, controls and governance across the organisation in Singapore. You will work with internal stakeholders to implement cyber risk management improvements and ensure compliance with ISO27000, NIST and local guidelines.

The role involves coordinating audits, reporting risk metrics, and driving remediation actions while seeking opportunities to automate processes within payments