Consultant, GRC

NCS Pte. Ltd.; Singapore; On-site; SGD 70,000 - 90,000; Full time

Job summary

A leading technology services firm seeks a Consultant, GRC to provide consultancy on information security governance, risk, and compliance. You will conduct risk assessments, develop security frameworks, and manage projects, ensuring timely delivery of services. Ideal candidates have a diploma or higher in relevant fields and at least 5 years of experience in information security.

Qualifications

• Minimum of 5 years in information security governance, risk management, and audit.
• Experience in disaster recovery exercises and IT resiliency.

Responsibilities

• Conduct information security risk assessments and compliance reviews.
• Develop and review client’s information security framework and policies.
• Manage multiple projects to ensure timely service delivery.

Skills

Information Security Governance

Risk Management

Audit

Interpersonal Skills

Communication

Education

Diploma in Cybersecurity

Bachelor's in Computer Science

Bachelor's in Engineering

Bachelor's in Information Systems

Tools

ServiceNow IRM

RSA Archer

Job description

NCS is a leading technology services firm that operates across the Asia Pacific region in over 20 cities, providing consulting, digital services, technology solutions, and more. We believe in harnessing the power of technology to achieve extraordinary things, creating lasting value and impact for our communities, partners, and people. Our diverse workforce of 13,000 has delivered large-scale, mission-critical, and multi-platform projects for governments and enterprises in Singapore and the APAC region.

We’re searching for a Consultant, GRC to be part of our diverse team of talents here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

Overview
Provide consultancy and advisory services on information security governance, risk, and compliance for our clients in the public and private sectors

What we seek to accomplish together:

• Conduct information security risk assessments, compliance reviews and/or IT audits on client’s systems, which include IT and/or OT infrastructure and applications

• Develop and review client’s information security framework and policies

• Work with internal and external stakeholders to deliver consultancy and advisory services

• Manage multiple projects to ensure that services are completed in a timely manner

A little bit about you:

• Diploma or higher in Cybersecurity, Computer Science, Engineering, or Information Systems

• Minimum of 5 years working in areas of information security governance, risk management, and audit; experience in other areas of cybersecurity will be considered

• Experience in conducting disaster recovery exercises and have a good knowledge in high availability, IT resiliency and site reliability engineering.

• Experience in Singapore based Government projects will have an added advantage

• Knowledge of

  1. Information security standards and frameworks such as ISO 27001/2, MAS TRM, NIST CSF, GovTech IM8, and CIS Controls

  2. Security technologies and operations

  3. GRC tools (ServiceNow IRM, RSA Archer)

• Preferable to be certified in CISSP, CISM, CISA, CRISC, ISMS Lead Auditor, CBCI, CBCP, ABCP, ServiceNow IRM, COBIT, ITIL

• Team player with interpersonal skills

• Excellent in oral and written communication