Cybersecurity Governance, Risk and Compliance (GRC) Lead

careerally pte. ltd.; Singapore; On-site; SGD 152,000 - 182,000; Full time

Benefits offered by this job

Bonus

Benefits

Job summary

Careerally Pte Ltd is seeking a Cybersecurity GRC Lead to drive governance, risk and compliance across our organization. The role is Central Area, Singapore, permanent, with a salary up to SGD 15,000 per month plus attractive bonus and benefits.

You will lead policy development, oversee audits, and engage with MAS and regulators to ensure compliance and effective risk management. A strong background in MAS TRM and CCoP is essential.

Qualifications

• Bachelor’s degree in computer science or cybersecurity or related field.
• 10+ years in IT governance, cybersecurity risk management, or compliance.
• Strong knowledge of MAS TRM Guidelines and regulator engagement.
• Professional GRC certifications preferred (CISA/CISM/CRISC/CISSP).

Responsibilities

• Develop, implement and maintain cybersecurity policies, standards, and procedures.
• Lead the Security Governance and Assurance team and drive improvements.
• Conduct risk assessments and recommend mitigations.
• Oversee vulnerabilities, gaps and remediation across IT systems.
• Monitor MAS regulations and ensure compliance with applicable requirements.
• Oversee VAPT, red-team and tabletop exercises.
• Coordinate audits and remediation of findings.
• Develop KRIs and report risk to senior management.

Skills

GRC Leadership

Regulatory Compliance

Risk Management

Audits

Education

Bachelor's Degree in CS/Cybersecurity

Tools

MAS TRM Guidelines

Job description

Cybersecurity Governance, Risk and Compliance (GRC) Lead (up to $15,000/ Attractive Bonus/ Central/ Permanent Role)

Location: Central Area

Salary: up to $15,000 + Attractive Bonus & Benefits

Permanent Role

Responsibility:

• Develop, implement, and maintain cybersecurity policies, standards, and procedures in line with business objectives, regulatory requirements, and industry best practices.
• Lead the Security Governance and Assurance team and drive continuous improvements in cybersecurity processes, efficiency, and automation.
• Conduct cybersecurity risk assessments, review security exceptions and risk acceptance requests, and recommend appropriate mitigation measures.
• Oversee cybersecurity vulnerabilities, security control gaps, and remediation efforts across IT systems, applications, and infrastructure.
• Monitor regulatory developments and ensure compliance with applicable cybersecurity regulations, MAS Notices, and industry standards.
• Oversee security assurance activities, including Vulnerability Assessment and Penetration Testing (VAPT), red-team exercises, and tabletop exercises.
• Coordinate internal and external IT security audits and ensure timely and effective remediation of audit findings.
• Develop and monitor cybersecurity metrics and Key Risk Indicators (KRIs), providing regular reports on security risks and control effectiveness to senior management and risk committees.
• Collaborate with the CISO, business units, and technology teams to strengthen cybersecurity governance and align security initiatives with business objectives.

Requirement:

• Bachelor’s Degree in computer science/ Cybersecurity/ Information Security or related certifications.
• Minimum of 10 years of experience in IT governance, cybersecurity risk management, or compliance, preferably in financial services or the payments industry.
• Must have relevant experience in the financial services industry, with strong knowledge of MAS Technology Risk Management (TRM) Guidelines and the ability to engage confidently with MAS and other regulatory stakeholders.
• Proven experience in managing key technology and cybersecurity risks, strengthening security policies and control frameworks, protecting Critical Information Infrastructure (CII), and overseeing audit compliance and Cybersecurity Code of Practice (CCoP) requirements.
• Experience in assessing emerging technology risks, particularly Artificial Intelligence (AI) and quantum computing, would be a strong advantage.
• Prior hands-on experience in cybersecurity, IT infrastructure, or technology risk management is highly desirable, although the role primarily focuses on governance, risk, compliance, and assurance.
• Relevant professional certifications such as CISA, CISM, CRISC, CISSP, other ISC2 certifications, or recognised cybersecurity Governance, Risk and Compliance (GRC) qualifications are preferred.

Careerally Pte Ltd | EA Licence: 24C2215
Ooi Chuan Yi (Jacky)| EA Registration No: R24122948