Cybersecurity GRC Lead - FinTech / MAS TRM

careerally pte. ltd.; Singapore; Sur place; SGD 150 000 - 210 000; Plein temps

Avantages offerts par ce poste

Competitive Bonus

Company Benefits

Résumé du poste

careerally pte. ltd. is seeking a Senior GRC Leader to helm a team of GRC specialists and advance the security policy framework for the financial services sector in Singapore.

You will drive enterprise-wide cyber risk mitigation, oversee regulatory reviews with MAS TRM, and mentor a high-caliber team to strengthen governance, controls, and compliance across IT and cybersecurity domains.

Qualifications

• Minimum 10 years of experience within Financial Institutions or banking infrastructure.
• End-to-end experience spanning Cybersecurity and IT GRC functions (covering key risks, controls, and compliance).
• Strong understanding of regulatory expectations and frameworks such as MAS TRM, Cyber Hygiene Notice, NIST, and ISO 27001.
• Knowledge or exposure to emerging risk vectors, particularly AI governance and Quantum risk mitigation, will be highly regarded.
• Professional credentials such as CISM, CISA, CRISC, or CISSP are highly preferred.
• Prior experience managing team members or leading audit/risk workstreams.

Responsabilités

• You will manage a team of GRC specialists, drive the hardening of the security policy framework, and manage the mitigation of enterprise-wide cyber risks.
• Design, implement, and continuously harden the cybersecurity and IT policy frameworks to protect Critical Information Infrastructure (CII) assets.
• Act as the key liaison for regulatory reviews and inspections (including MAS TRM assessments).
• Oversee key risk tracking, vulnerability mitigation, and compliance monitoring across both Cybersecurity and IT GRC domains.
• Manage end-to-end IT security audits, overseeing assurance exercises (VAPT, red teaming) and ensuring prompt remediation of identified gaps.
• Manage, mentor, and upscale a dedicated team of GRC professionals.
• Minimum 10 years of experience within Financial Institutions (FIs) or banking infrastructure, with proven experience directly facing MAS and navigating MAS TRM guidelines and CCoP.
• End-to-end experience spanning both Cybersecurity and IT GRC functions (covering key risks, controls, and compliance).
• Strong understanding of regulatory expectations and frameworks such as MAS TRM, Cyber Hygiene Notice, NIST, and ISO 27001.
• Knowledge or exposure to emerging risk vectors, particularly AI governance and Quantum risk mitigation, will be highly regarded.
• Professional credentials such as CISM, CISA, CRISC, or CISSP are highly preferred.
• Prior experience managing team members or leading audit/risk workstreams.

Description du poste

• Location: Central North
• Employment Type: Permanent
• Benefits: Up to $15,000 + Competitive Bonus + Company Benefits (commensurate with experience)
• Industry: Financial Services

Key Responsibilities:

You will manage a team of GRC specialists, drive the hardening of the security policy framework, and manage the mitigation of enterprise-wide cyber risks.

• Design, implement, and continuously harden the cybersecurity and IT policy frameworks to protect Critical Information Infrastructure (CII) assets.
• Act as the key liaison for regulatory reviews and inspections (including MAS TRM assessments).
• Oversee key risk tracking, vulnerability mitigation, and compliance monitoring across both Cybersecurity and IT GRC domains.
• Manage end-to-end IT security audits, overseeing assurance exercises (VAPT, red teaming) and ensuring prompt remediation of identified gaps.
• Manage, mentor, and upscale a dedicated team of GRC professionals.

Key Responsibilities:

• Minimum 10 years of experience within Financial Institutions (FIs) or banking infrastructure, with proven experience directly facing MAS and navigating MAS TRM guidelines and CCoP.
• End-to-end experience spanning both Cybersecurity and IT GRC functions (covering key risks, controls, and compliance).
• Strong understanding of regulatory expectations and frameworks such as MAS TRM, Cyber Hygiene Notice, NIST, and ISO 27001.
• Knowledge or exposure to emerging risk vectors, particularly AI governance and Quantum risk mitigation, will be highly regarded.
• Professional credentials such as CISM, CISA, CRISC, or CISSP are highly preferred.
• Prior experience managing team members or leading audit/risk workstreams.

Position and remuneration will be commensurate with skills and experience.
We regret that only short-listed candidates will be contacted.