Cybersecurity Manager (Governance, Risk and Compliance) (JD#11267)

Sciente International Pte Ltd; Singapore; Vor Ort; SGD 120.000 - 180.000; Vollzeit

Zusammenfassung

Sciente International Pte Ltd is seeking IT Security professionals with a keen interest in Governance, Risk and Compliance to contribute to the Security Engineering & Architect team in cybersecurity project implementations.

The role requires a degree in Computer Science or Information Security, 5+ years in IT security with a GRC focus, and strong knowledge of controls, frameworks and risk management. You will collaborate with vendors, support audits, and help build a risk-aware culture.

Qualifikationen

• 5+ years in IT security with a strong GRC focus.
• Solid knowledge of internal controls, risk management, IT governance.
• Experience with enterprise IT systems, cloud and DevOps.
• Familiar with ISO 27001, NIST, OWASP and Cloud Security.
• Experience evaluating security technologies with vendors and POC work.
• Strong interest in cyber security tech (SIEM, NIDPS, CASB).
• Excellent communication and interpersonal skills.

Aufgaben

• Act as SME on IT GRC and related policies.
• Develop and implement company-wide IT governance standards.
• Collaborate with dev and vendor teams for risk assessment checklists.
• Maintain IT Risk Register and identify KRIs.
• Coordinate risk management, mitigation and remediation with stakeholders.
• Liaise on IT GRC audits and ensure timely remediation.
• Stay current with threat landscape and enhance IT risk processes.
• Promote a risk-aware culture across the company.

Kenntnisse

IT GRC

Risk management

Security frameworks

Auditing techniques

Vendor management

Cloud & DevOps security

Analytical thinking

Communication skills

Ausbildung

Degree in Computer Science / Information Security / Information Systems

Jobbeschreibung

Job Summary

Seeking IT Security professionals with a keen interest in Governance, Risk and Compliance processes to contribute to the Security Engineering & Architect team in the implementation of Cybersecurity projects.

Mandatory Skill-set

• Degree in Computer Science, Information Security or Information Systems;
• At least 5 years of experience in IT security space with a strong experience in IT GRC (Governance, Risk and Compliance) related functions;
• Deep knowledge and understanding of internal controls, security frameworks, risk management and IT governance, auditing techniques and methodologies;
• Good knowledge of enterprise IT systems and components (applications, operating systems, databases, networks, cloud, DevOps);
• Familiar with industry standards related to IT Controls - ISO 27001, NIST, OWASP, Cloud Security;
• Experience in working with vendors to evaluate security technologies and working on proof-of-concepts (POC);
• Keen interest and knowledge on cyber security technologies (SIEM, NIDPS, CASB, VMS, Cyber-analytics);
• Strong in analytical thinking with attention to detail;
• Excellent communication and inter personal skills.

Desired Skill-set

• CISSP, CISM, CRISC, CGEIT and/or CISA certified.

Responsibilities

• Act as a Subject Matter Expert on IT Governance, Risk management and Compliance (GRC) and related policies and procedures;
• Contribute to the formulation and implementation of company wide IT governance standards and procedures in compliance with regulatory requirements;
• Collaborate with application development and external vendor teams to implement IT risk assessment checklists and operational IT Risk Controls;
• Continuously identify GRC Key risk indicators (KRI) and maintain IT Risk Register;
• Collaborate with stakeholders for risk management, mitigation and remediation measures;
• Liaise with internal and external parties for IT GRC related audits and facilitate timely remediation of issues;
• Keep abreast of the dynamic cyber threat landscape and identify opportunities for enhancement of IT risk processes;
• Work with key stakeholders in building a strong company wide risk-aware culture.

EA Licence No. 07C5639