Cyber Security Engineer (GRC)

People Profilers; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a skilled cybersecurity professional to enhance their governance and risk management strategies. In this dynamic role, you will develop and maintain cybersecurity policies aligned with industry standards, oversee risk management initiatives, and ensure compliance with relevant regulations. You will collaborate with various departments to foster a cohesive cybersecurity approach while presenting key metrics to leadership. This position offers a competitive remuneration package and a comprehensive range of benefits, making it an exciting opportunity for those looking to make a significant impact in the field of cybersecurity.

Qualifications

• 3+ years in a cybersecurity or GRC-related role.
• Strong understanding of ISO 27001 and NIST Cyber Security Framework.

Responsibilities

• Develop and maintain cybersecurity policies and standards.
• Identify and document cybersecurity risks and manage incidents.

Skills

Cybersecurity Risk Management

Security Governance Framework

Vulnerability Management

Incident Response

Communication Skills

Team Collaboration

Education

Bachelor's degree in Cybersecurity

Bachelor's degree in Information Technology

Tools

Vulnerability Management Tools

SIEM Tools

GRC Tools

Job description

Responsibilities

Governance

• Develop and maintain cybersecurity policies, procedures, and standards in alignment with industry frameworks (e.g., ISO 27001, NIST Cyber Security Framework).
• Oversee the organization's cybersecurity governance program and ensure alignment with business objectives.

Risk Management

• Identify, assess, and document cybersecurity risks to the organization.
• Develop and maintain risk registers and implement mitigation strategies.
• Perform regular security assessments, including vulnerability assessments and third-party risk evaluations.

Compliance

• Ensure the organization's adherence to relevant regulations, standards, and frameworks (e.g., PDPC).
• Conduct regular compliance audits and provide recommendations for remediation.

Incident Response and Monitoring

• Collaborate with incident response teams to establish protocols for managing and reporting cybersecurity incidents.
• Ensure compliance with legal and regulatory reporting requirements for incidents.

Reporting and Metrics

• Develop and present reports on cybersecurity compliance, risk posture, and governance metrics to leadership and stakeholders.

Collaboration and Stakeholder Engagement

• Work closely with IT, Legal, HR, and other departments to ensure a cohesive approach to cybersecurity.
• Act as a liaison between technical teams and business units to align cybersecurity practices with organizational goals.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, or a related field.
• 3+ years in a cybersecurity or GRC-related role.
• Good working knowledge of security risk management, security governance framework and compliance, vulnerability management (vulnerability assessment, penetration testing), and security incident response and security assessment.
• Strong understanding of ISO 27001 standard and NIST Cyber Security Framework.
• Strong background in vulnerability management tools.
• Knowledge of SIEM and GRC tools.
• Understand Disaster Recovery, Business Continuity, and IT Regulatory Compliance.
• Excellent interpersonal and communication skills. Good command of written and spoken English.
• Pro-active, independent, resourceful, able to work in a team environment and work independently with minimal supervision.
• Work well with all functional levels in the organization.
• It will be advantageous to have at least one of these certifications: CGRC (ISC2), CRISC (ISACA).
• Prior IT security consulting experience will be advantageous.
• 5 days work week, East.

All successful candidates can expect a very competitive remuneration package and a comprehensive range of benefits.

Kindly email your resume in a detailed Word format to [e-mail]

We regret that only shortlisted candidates will be notified.

People Profilers Pte Ltd

Tel: [phone]

EA Registration Number: R22110899

EA License number: 02C4944

EA Personnel: Celeste Wong Xin Yann