Cyber security Engineer (ISO 27001 / ISMS Rep /GRC)

Randstad Singapore; Singapore; On-site; SGD 84,000 - 96,000; Full time

Job summary

Randstad Singapore is seeking a Cybersecurity Engineer (ISO 27001 / ISMS Rep / GRC) to lead the international ISMS framework, manage risk registers, and ensure audits pass for ISO 27001, SOC1/2, and related standards. The role combines governance with hands-on security engineering across SIEM, EDR, DLP, and cloud security.

You will collaborate with DevOps and R&D, architect secure-by-design principles, run PoCs for security tools, and handle client security questionnaires and contract reviews to

Qualifications

• Min 5 years in information security balancing IT operations with governance.
• Experience as ISO27001 ISMS representative and coordinating SOC1/SOC2 audits.
• Ability to interpret cloud security logs, SIEM alerts, EDR findings, and vulnerability scans.
• Familiarity with AWS or Alibaba Cloud and core security domains (IAM, encryption, network security).

Responsibilities

• Lead the international ISMS framework as primary representative and maintain risk registers and policies.
• Spearhead PoCs for tools like SIEM, PAM, and EDR to validate findings before deployment.
• Translate alerts and threat intel into actionable defense strategies for monitoring ecosystem.
• Direct incident response from drills to post-incident reviews and coordinate routine pentests.
• Collaborate with DevOps, R&D, and Infrastructure to embed secure-by-design practices.
• Serve as technical security authority, handling client questionnaires and reviewing contract clauses.

Skills

ISO27001

ISMS Rep

Cloud security logs

SIEM alerts

EDR findings

Vulnerability scans

AWS

Alibaba Cloud

SOC1/SOC2

DLP

CISSP

CISA

CISM

CCSP

Lead Implementer

Tools

PAM

Job description

about the company

We need a dynamic, technically literate security professional with a strong IT background who can serve as our Global ISMS Management Representative under ISO/IEC 27001.

You will own the bridge between governance and technical execution. You won't just read about security gaps discovered by auditors. You will actively architect, evaluate, and validate the actual technical solutions (from SIEM and DLP to SSE and EDR) to close them.

about the job

• Lead the international ISMS framework as the primary representative, keeping all risk registers and policies sharp to guarantee seamless passes for ISO 27001, SOC 1/2, and OSPAR.
• Spot technical vulnerabilities stemming from audits or business scaling, then spearhead proof-of-concepts for advanced tools (like SIEM, PAM, and EDR) to validate them before infrastructure deployment.
• Steer the monitoring ecosystem by decoding complex alerts, threat intelligence, and vulnerability data from SIEM, EDR, and DLP tools into tactical defense strategies.
• Command emergency response efforts from simulated exercises to full post-incident reviews, while scheduling routine penetration tests and vulnerability assessments.
• Team up with DevOps, R&D, and Infrastructure squads to weave secure-by-design principles right into the DNA of the product platforms.
• Act as the technical authority on security, handling high-stakes client questionnaires and reviewing contract clauses to help close business deals.

skills and experience required

Minimum 5 years of experience in information security, successfully balancing technical IT operations with governance.

Direct experience serving as an ISO27001 ISMS management representative and coordinating assurance audits like SOC1/SOC2.

Ability to confidently interpret cloud security logs, SIEM alerts, EDR findings, and vulnerability scans. You should understand cloud architectures (AWS/Alibaba Cloud preferred) and core security domains (IAM, encryption, network security).

whats an offer

The permanent opportunity for a Cybersecurity Engineer (ISO 27001 / ISMS Rep /GRC), will pay a salary range of $ 7,000 - $ 8,000 plus benefits.

Desired Skills and Experience

ISO27001, ISMS management representative, cloud security logs, SIEM alerts, EDR findings, vulnerability scans, AWS, Alibaba Cloud, SOC1/SOC2, SIEM, DLP, EDR, ISO/IEC 27001, CISSP, CISA, IT Security, security compliance, CISM, CCSP, ISO 27001 Lead Implementer/auditor