Cybersecurity GRC Lead

SCIENTE INTERNATIONAL PTE. LTD.; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

SCIENTE INTERNATIONAL PTE. LTD. in Singapore seeks an experienced IT Security professional focused on Governance, Risk and Compliance (GRC) to drive policy, controls and risk assessments.

You will work with application teams and vendors on ensuring regulatory compliance and robust IT risk management across the organization. Ideal candidates have 5+ years in IT security with GRC, strong knowledge of IT controls, ISO 27001, NIST and related standards, and excellent stakeholder communication.

Qualifications

• Degree in Computer Science, Information Security or Information Systems.
• 5+ years in IT security with strong IT GRC experience.
• Strong knowledge of internal controls, risk management and IT governance.
• Familiar with enterprise IT systems, cloud, DevOps.
• Industry standards: ISO 27001, NIST, OWASP, Cloud Security.
• Experience working with vendors to evaluate security tech and PoCs.
• Interest in cyber security tech: SIEM, NIDPS, CASB, VMS, analytics.
• Strong analytical thinking and excellent communication skills.

Responsibilities

• Act as a Subject Matter Expert on IT Governance, Risk Management and Compliance (GRC).
• Contribute to company-wide IT governance standards and procedures to meet regulatory requirements.
• Collaborate with development and vendor teams to implement IT risk assessment checklists and controls.
• Maintain IT Risk Register and identify GRC KRIs.
• Coordinate risk mitigation and remediation with stakeholders.
• Support audits and remediation with internal/external parties.
• Keep abreast of cyber threat landscape and improve IT risk processes.
• Help build a risk-aware culture across the company.

Skills

IT Governance

Risk Management

Auditing

Security Frameworks

ISO 27001

SIEM

Vendor Management

Cloud/DevOps familiarity

Cybersecurity tools

Analytical thinking

Communication skills

Education

Degree in Computer Science or Information Security

Job description

SCIENTE INTERNATIONAL PTE. LTD. in Singapore seeks an experienced IT Security professional focused on Governance, Risk and Compliance (GRC) to drive policy, controls and risk assessments.

You will work with application teams and vendors on ensuring regulatory compliance and robust IT risk management across the organization. Ideal candidates have 5+ years in IT security with GRC, strong knowledge of IT controls, ISO 27001, NIST and related standards, and excellent stakeholder communication.