Governance Risk Compliance Analyst (Cybersecurity)

SEKURO OPERATIONS PTE. LTD.; Singapore; On-site; SGD 45,000 - 65,000; Full time

Job summary

A leading cybersecurity consulting firm in Singapore is seeking a GRC Analyst to support cybersecurity initiatives. You will conduct risk assessments, help shape cybersecurity policies, and present findings to stakeholders. The ideal candidate has foundational experience in cybersecurity or IT risk and is fluent in Mandarin and English. Opportunities for career development are available for those transitioning into cybersecurity.

Qualifications

• Foundational experience in cybersecurity, GRC, IT risk, or audit.
• 0–1 year consulting or client-facing experience.
• 1+ years in IT, audit, GRC, or cybersecurity roles preferred.

Responsibilities

• Conduct cybersecurity risk assessments using leading global frameworks.
• Help shape cybersecurity roadmaps and policies aligned with business risks.
• Identify and analyze IT and business operational risks.

Skills

Fluent communication skills in Mandarin

Fluent communication skills in English

Detail-oriented

Analytical thinker

Strong communication skills

Education

Relevant certifications such as ISO 27001 Lead Auditor or CISA

Job description

About the Role

As a GRC Analyst, you’ll be at the forefront of our cybersecurity initiatives, working closely with business and tech teams to:

Conduct cybersecurity risk assessments using leading global frameworks

Help shape cybersecurity roadmaps and policies aligned with real-world business risks

Identify and analyse IT and business operational risks

Present clear, actionable insights and recommendations to internal and external stakeholders

What We’re Looking For

Fluent communication skills in Mandarin & English are essential

Strong communicator able to engage both technical and business audiences

Foundational experience in cybersecurity, GRC, IT risk, or audit

Detail-oriented, analytical thinker with eagerness to learn and grow

Ability to clearly express ideas in written reports and presentations

Experience & Qualifications

0–1 year consulting or client-facing experience

1+ years in IT, audit , GRC, or cybersecurity roles preferred

Certifications such as ISO 27001 Lead Auditor or CISA are a plus but not mandatory

CPA holders interested in transitioning to cybersecurity are highly encouraged to apply—we’ll support your career shift!

About Sekuro Asia

Sekuro Asia is a leading independent cybersecurity consulting firm with over 7 years in the industry. With offices across Australia and Southeast Asia, we deliver services ranging from Offensive Security to Strategy, Governance, Risk & Compliance. We are ISO27001 certified, CREST Accredited, and a PCI QSA company. Proudly, we are registered service suppliers to both the Singapore and Australian Governments