Cybersecurity GRC Lead

Sciente International Pte Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Sciente International Pte Ltd is seeking IT Security professionals with a keen interest in Governance, Risk and Compliance to contribute to the Security Engineering & Architect team in cybersecurity project implementations.

The role requires a degree in Computer Science or Information Security, 5+ years in IT security with a GRC focus, and strong knowledge of controls, frameworks and risk management. You will collaborate with vendors, support audits, and help build a risk-aware culture.

Qualifications

• 5+ years in IT security with a strong GRC focus.
• Solid knowledge of internal controls, risk management, IT governance.
• Experience with enterprise IT systems, cloud and DevOps.
• Familiar with ISO 27001, NIST, OWASP and Cloud Security.
• Experience evaluating security technologies with vendors and POC work.
• Strong interest in cyber security tech (SIEM, NIDPS, CASB).
• Excellent communication and interpersonal skills.

Responsibilities

• Act as SME on IT GRC and related policies.
• Develop and implement company-wide IT governance standards.
• Collaborate with dev and vendor teams for risk assessment checklists.
• Maintain IT Risk Register and identify KRIs.
• Coordinate risk management, mitigation and remediation with stakeholders.
• Liaise on IT GRC audits and ensure timely remediation.
• Stay current with threat landscape and enhance IT risk processes.
• Promote a risk-aware culture across the company.

Skills

IT GRC

Risk management

Security frameworks

Auditing techniques

Vendor management

Cloud & DevOps security

Analytical thinking

Communication skills

Education

Degree in Computer Science / Information Security / Information Systems

Job description

Sciente International Pte Ltd is seeking IT Security professionals with a keen interest in Governance, Risk and Compliance to contribute to the Security Engineering & Architect team in cybersecurity project implementations.

The role requires a degree in Computer Science or Information Security, 5+ years in IT security with a GRC focus, and strong knowledge of controls, frameworks and risk management. You will collaborate with vendors, support audits, and help build a risk-aware culture.