GRC Analyst

Franklin Fitch; Singapore; Presencial; SGD 60.000 - 90.000; Tempo integral

Resumo da vaga

Franklin Fitch is seeking a GRC Analyst for a fast-growing AI technology company in Singapore. You will support customer trust, security assurance and compliance programs across multiple frameworks, translating technical controls into customer-friendly language.

The role sits at the intersection of security, compliance, technology and client engagement, coordinating with Security, Engineering, Legal and commercial teams to portray a clear security posture to customers and partners.

Qualificações

• Experience in a customer-facing security, GRC, compliance, trust or security assurance role.
• Experience translating technical security concepts into clear written responses for non-technical stakeholders.
• Understanding enterprise security expectations: cloud, IAM, data protection and incident response.
• Strong attention to detail and ability to manage multiple customer requests and priorities.
• Excellent written and verbal communication skills.
• Confidence communicating with technical and non-technical stakeholders.
• Good judgement handling sensitive, complex or ambiguous security and compliance questions.
• Genuine interest at the intersection of technology, security, compliance and customer engagement.
• Experience with security questionnaires, customer security reviews, third-party risk assessments, security audits, SOC 2, ISO 27001, EU AI Act, GDPR, Cyber Essentials, Cloud Security, AWS, GCP, Kubernetes, IAM, SaaS Security.

Responsabilidades

• Support customer trust and security assurance activities, including responding to security questionnaires, customer inquiries and risk assessments.
• Act as a key point of contact during customer security reviews, working with internal technical teams to provide accurate and timely responses.
• Maintain and improve security documentation, customer-facing materials and compliance evidence.
• Work closely with Security and Engineering teams to understand and articulate technical controls in a customer-facing context.
• Support compliance initiatives across frameworks including SOC 2, ISO 27001, ISO 42001, EU AI Act, UK Cyber Essentials and GDPR.
• Assist with evidence collection, audit preparation and ongoing compliance activities.
• Identify recurring risks, questions and control gaps arising from customer engagements and contribute to improvements.
• Help develop and streamline GRC, trust and security assurance processes as the organisation grows.
• Engage with enterprise customers and stakeholders on security, risk, privacy and compliance matters.

Conhecimentos

GRC

Security assurance

Customer-facing

Written communication

Descrição da vaga

An innovative, fast-growing AI technology company is looking for a GRC Analyst to support its customer trust, security assurance, and compliance programmes as it continues to scale internationally.

This is a highly visible, customer-facing GRC role sitting at the intersection of security, compliance, technology and client engagement. You will work closely with Security, Engineering, Legal and commercial teams to ensure the organisation's security and privacy posture is clearly understood and accurately represented to customers and partners.

The role would suit someone who enjoys working in a fast-paced technology environment and is comfortable translating technical security concepts into clear, commercially appropriate language.

The Role

You will:

• Support customer trust and security assurance activities, including responding to security questionnaires, customer inquiries and risk assessments.
• Act as a key point of contact during customer security reviews, working with internal technical teams to provide accurate and timely responses.
• Maintain and improve security documentation, customer-facing materials and compliance evidence.
• Work closely with Security and Engineering teams to understand and articulate technical controls in a customer-facing context.
• Support compliance initiatives across frameworks including SOC 2, ISO 27001, ISO 42001, EU AI Act, UK Cyber Essentials and GDPR.
• Assist with evidence collection, audit preparation and ongoing compliance activities.
• Identify recurring risks, questions and control gaps arising from customer engagements and contribute to improvements.
• Help develop and streamline GRC, trust and security assurance processes as the organisation grows.
• Engage with enterprise customers and stakeholders on security, risk, privacy and compliance matters.

What We're Looking For

• Experience in a customer-facing security, GRC, compliance, trust or security assurance role, ideally within a SaaS, cloud or technology environment.
• Experience translating technical security concepts into clear, concise written responses for non-technical stakeholders.
• Good understanding of enterprise security expectations covering areas such as cloud infrastructure, identity and access management, data protection and incident response.
• Strong attention to detail and the ability to manage multiple customer requests and priorities simultaneously.
• Excellent written and verbal communication skills.
• Confidence communicating with both technical and non-technical stakeholders.
• Good judgement when dealing with sensitive, complex or ambiguous security and compliance questions.
• Genuine interest in the intersection of technology, security, compliance and customer engagement.

Experience with one or more of the following would be advantageous:

Security questionnaires | Customer security reviews | Third-party risk assessments | Security audits | SOC 2 | ISO 27001 | ISO 42001 | EU AI Act | GDPR | Cyber Essentials | Cloud Security | AWS | GCP | Kubernetes | IAM | SaaS Security | Enterprise Technology

Experience working with financial services or other highly regulated customers would also be highly valuable.