Cybersecurity Governance & Risk Manager

Krisvconsulting Services Pte Ltd; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

A leading consulting firm in Singapore is seeking a Cybersecurity Governance & Risk Manager. This role requires over 7 years of experience in cybersecurity and IT risk management. You will be responsible for implementing risk management frameworks, ensuring compliance, conducting audits, and advising on cybersecurity risks. The ideal candidate will have relevant certifications and strong communication skills, offering a dynamic opportunity in a rapidly evolving field.

Qualifications

• 7+ years of experience in cybersecurity, IT risk, policy, and audit.
• Relevant certifications (CISA, CRISC, CISSP, etc.).
• Strong knowledge of IT standards and cyber strategy.

Responsibilities

• Implement IT risk management frameworks and compliance checks.
• Conduct regular audits to ensure effective security controls.
• Advise tech units on IT/cyber risks and secure implementations.

Skills

Cybersecurity

IT risk management

Policy compliance

Audit

Technical communication

Education

Bachelor's degree in cybersecurity or related field

Tools

CISA

CISSP

ISO27001

NIST

Job description

About the job Cybersecurity Governance & Risk Manager

Responsibilities:

• Implement IT risk management frameworks, policies, and compliance checks
• Maintain cybersecurity policies, vendor governance, and system criticality frameworks
• Modernize oversight via emerging tech and real-time risk tracking tools
• Ensure secure SDLC and risk assessments during IT development lifecycle
• Conduct regular audits to ensure security controls are effective and policies followed
• Advise business and tech units on IT/cyber risks and secure implementations
• Strengthen third-party/vendor risk management through due diligence and ongoing assessment
• Monitor risk exposure from projects, changes, and new tech initiatives
• Partner with stakeholders to reduce risks from incidents, breaches, or compliance issues
• Support cybersecurity awareness and incident response activities

Requirements:

• 7+ years experience in cybersecurity, IT risk, policy, and audit
• Bachelors or higher in cybersecurity, engineering, or related fields
• Relevant certifications (e.g., CISA, CRISC, CISSP, CCSK, CCSP, CGEIT, CDPSE)
• Strong knowledge of IT standards, cyber strategy, governance, and risk programs
• Technical expertise in security design and implementation
• Understanding across domains like AI, cloud, data protection, SOC/MSS, and cyber architecture
• Familiarity with standards: MAS TRM, ISO27001, NIST, Cybersecurity Code of Practice.
• Excellent communication, leadership, and cross-functional collaboration skills