Cybersecurity Assurance Manager (cybersecurity architecture design)

xcellink pte. ltd.; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Xcellink Pte. Ltd. in Singapore is seeking a Cyber GRC professional to align cybersecurity strategy with business goals, manage policies, and provide independent 2nd line oversight across IT security.

The role emphasizes risk oversight, controls assessment, and regulatory compliance, including policy development, risk reporting, audits, and maintaining risk registers. Basic salary is provided with 2.1 months of VB as part of the compensation package.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, CS or related field.
• 3+ years in information/cybersecurity and risk management.
• Experience in IT-security policy development and implementation.
• Experience in IT-security audits and regulatory compliance.

Responsibilities

• Oversee cyber risk management by evaluating adequacy of risk controls.
• Update Control & Compliance Framework with industry standards and regulatory requirements.
• Develop information security policies and sub-policies for adoption.
• Lead end-to-end governance and policy management lifecycle.
• Lead cyber risk management and reporting.
• Maintain risk register for IT security/cybersecurity risks.
• Track audit findings and support 2nd line assurance scoping.

Skills

Cybersecurity

Risk management

Policy development

IT audits

Regulatory compliance

Education

Bachelor's degree in Cybersecurity/IT/CS

Job description

The role of Cyber GRC (Governance, Risk, and Compliance) is to ensure that an organization's cybersecurity strategy aligns with its business goals, manages policies/standards/frameworks, manages cyber risks effectively, provides oversight and independent 2nd line control review/testing, and adheres to external regulations.

Basic salary + 2.1 months of VB

Job Description

• Manage the cyber risk oversight by evaluating the adequacy and effectiveness of risk management practices and controls implemented by 1st line (i.e. risk owner, control owner, control supervisor, control performers) of the company to ensure proper adherence to risk assessment processes.
• Manage Control & Compliance Framework through timely updates of industry standards and regulatory compliance requirements
• Manage the development of Information Security policies and sub-policies for adoption
• Drive and lead the end-to-end lifecycle of information security governance & policy management
• Drive and lead the cyber risk management and reporting
• Manage the risk profile and maintain the company risk register for IT Security / Cybersecurity risks relating to CII & Non-CII
• Maintaining a tracker for audit findings (or audit issues registers) to monitor remediation progress, to ensure audit closure issues, to support the scoping for 2nd line assurance review

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science or a related discipline
• More than 3 years of experience information/cybersecurity and risk management Experience in leading cybersecurity risk assessment and risk reduction initiatives
• Experience in IT/IT-Security policy development and implementation
• Experience in driving IT-security thematic assessment and IT audits
• Good knowledge and experience with handling IT-security and cybersecurity audits
• Good knowledge of experience in driving compliance to meet cybersecurity regulatory requirements

Zhang Zihan I EA Personnel No. R26163497

Xcellink Pte. Ltd. I EA License No. 03C5577